-------
Network
-------

New Switches :
  2 x DELL N1548 Gbit/s Switch 48 Port
  2 x DELL N4064F 10 Gbit/s Switch 48 Port


.. uml::

   @startuml

   header
   <font color=red>Still in progress</font>
   endheader

   cloud "FHI-Net" as FHINet <<"141.14.128.0/20">> {
     ["Switch xx, Port yy"] as SP_xx_yy
     ["Switch XX, Port YY"] as SP_XX_YY
     ["Switch AA, Port AA"] as SP_AA_AA
     ["Switch BB, Port BB"] as SP_BB_BB
   }


   cloud "Q-Management" as mgmt <<192.168.1.0/24>> {
    node q <<Frontend>> {
     [emx1] <<192.168.1.1>>
    }
   ' node "node-0-0-sp" as OOSP <<"x.x.x.x">>
   ' node "node-0-1-sp" as 01SP <<"y.y.y.y">>
   }

   'cloud "Q-Interconnect" <<"10.1.1.0/24">> {
   ' node "q_p7p1" <<"10.1.1.1">>
   '}


   node "q-msw-01" as qmsw01 {
    [Port_01_48] <<"141.14.128.59">>
   }



 
   node "q-msw-02" 
   node "q-dsw-01" 
   node "q-dsw-02" 

   [SP_xx_yy] <-down-> [Port_01_48] : "1Gbit/s" 
   qmsw01 <-down-> mgmt : "1Gbit/s" 
   @enduml

Configuring the switches
========================
The Dell Networking N151548 front panel provides 48 Gigabit Ethernet RJ-45 ports and
four SFP+ 10G ports. For the inital configuration the console port which is located on the right side
of the front panel has to be used. The default rate is 9600 baud (8N1).
This switch will be used to connect the iDrac-Interfaces. Should be reachable from the FHI-Net.

Connect a terminal to the console and reset the switch (right side of the front panel)::

 wait for Easy Setup Wizard
 do not configure SNMP
 the setup user account, root/k0b...en
 set up VLAN1 routing
 IP: 141.14.128.59 for q-msw-01 (rack 3)
 IP: 141.14.128.60 for q-msw-02 (rack 1)
 Netmask: /20
 Default Gateway: 141.14.128.16

To enable ssh::

 console>enable
 console#config
 console(config)#crypto-key generate rsa
 console(config)#crypto-key generate dsa
 console(config)#ip ssh server

Now make sure that the configuration is ok::

 humma-kavula:q-doc junkes$ ssh root@q-msw-01
 The authenticity of host 'q-msw-01 (141.14.128.59)' can't be established.
 RSA key fingerprint is SHA256:Ss4qzEjy0fmE8U/7GM5wqxIcKjYkgUUdl9y5EAsGemM.
 Are you sure you want to continue connecting (yes/no)? yes
 Warning: Permanently added 'q-msw-01,141.14.128.59' (RSA) to the list of known hosts.
 root@q-msw-01's password: 
 
 console>show ip interface vlan 1
 
 Routing interface status....................... Up
 Primary IP Address............................. 141.14.128.59/255.255.240.0
 Method......................................... Manual
 Routing Mode................................... Enable
 Administrative Mode............................ Enable
 Forward Net Directed Broadcasts................ Disable
 Proxy ARP...................................... Enable
 Local Proxy ARP................................ Disable
 Active State................................... Active
 MAC Address.................................... E4F0.0409.34FC
 Encapsulation Type............................. Ethernet
 IP MTU......................................... 1500
 Bandwidth...................................... 10000 kbps
 Destination Unreachables....................... Enabled
 ICMP Redirects................................. Enabled

To make the things easyer the http - interface should be enabled too::

 humma-kavula:q-doc junkes$ ssh root@q-msw-01
 root@q-msw-01's password: 

 console>enable

 console#config

 console(config)#crypto certificate 1 generate 

 console(config-crypto-cert)#key-generate 

 console(config-crypto-cert)#exit

 Certificate Generation Successful..

 console(config)#ip http secure-server

Don't forget to save the configuration !::

 console(config)#exit

 console#wr

 This operation may take few minutes.
 Management interfaces will not be available during this time.

 Are you sure you want to save? (y/n) y


 Configuration Saved!
 console#

Problem: Self signed certificates not trusted on new browsers. Cert generated for 0.0.0.0 (To be checked)

The same for the N4064F gigabit switches. These switches are equipped with a OOB ethernet interface. So no VLAN1 routing
must be used.

q-dsw-01 -> 141.14.128.61/20
q-dsw-02 -> 141.14.128.62/20