# Autres systèmes réseau

# Commandes de base MikroTik

### <a name="_Toc5907120"></a>Commandes principales

#### <a name="_Toc5907121"></a>Navigation

<table id="bkmrk-nom-de-la-commande-d"><tbody><tr><td width="387">**Nom de la commande dans l’arborescence**

</td><td width="310">**Description**

</td></tr><tr><td width="387">\[admin@MikroTik\] ip address&gt;..

\[admin@MikroTik\] ip&gt;

</td><td width="310">La commande « .. » permet de revenir au niveau inférieur.

</td></tr><tr><td width="387">\[admin@MikroTik\] ip address&gt; /

\[admin@MikroTik\] &gt;

</td><td width="310">La commande « / » permet de revenir à la racine peu importe le niveau où le prompt se trouve.

</td></tr></tbody></table>

#### <a name="_Toc5907122"></a>Gestion de la configuration

<table id="bkmrk-nom-de-la-commande-d-0" width="0"><tbody><tr><td width="387">**Nom de la commande dans l’arborescence**

</td><td width="316">**Description**

</td></tr><tr><td width="387">\[admin@MikroTik\] system backup&gt; save name=test

</td><td width="316">Sauvegarder la configuration sous le nom test

</td></tr><tr><td width="387">\[admin@MikroTik\] &gt; system backup load name=test Restore and reboot? \[y/N\]: y

</td><td width="316">Restaurer la configuration au redémarrage du matériel.

</td></tr><tr><td width="387">\[admin@MikroTik\] &gt; system reset-configuration

</td><td width="316">Effectue un hard reset du matériel (toutes les configurations seront perdu.)

</td></tr><tr><td width="387">\[admin@MikroTik\] &gt; system reboot

</td><td width="316">Redémarrer le matériel

</td></tr></tbody></table>

#### <a name="_Toc5907123"></a>Commandes de visualisation

<table id="bkmrk-nom-de-la-commande-d-1" width="0"><tbody><tr><td width="387">**Nom de la commande dans l’arborescence**

</td><td width="316">**Description**

</td></tr><tr><td width="387">\[admin@MikroTik\] &gt; file print

</td><td width="316">Afficher les fichiers stockés sur le matériel

</td></tr><tr><td width="387">\[admin@MikroTik\] &gt; ip address print

</td><td width="316">Afficher les adresses IP affectées aux différentes interfaces

</td></tr><tr><td width="387">\[admin@PB-Router\] ip route&gt; print

</td><td width="316">Afficher la table de routage sur un routeur

</td></tr><tr><td width="387">\[admin@MikroTik\] &gt; interface print

</td><td width="316">Afficher les différentes interfaces présentes (Physiques / virtuelles)

</td></tr><tr><td width="387">\[admin@MikroTik\] ip arp&gt; print

</td><td width="316">Afficher la table arp

</td></tr><tr><td width="387">\[admin@MikroTik\] interface ethernet&gt; print detail

</td><td width="316">Afficher les détails d’une interface.

</td></tr><tr><td width="387">\[admin@MikroTik\] interface ethernet&gt; monitor ether1,ether2

</td><td width="316">Permet le monitoring d’interfaces (Détection des liens / vitesse etc...)

</td></tr><tr><td width="387">\[admin@MikroTik\] system console&gt; print

</td><td width="316">Afficher les différentes consoles

</td></tr><tr><td width="387">\[admin@MikroTik\] system package&gt; print

</td><td width="316">Afficher les différents packages

</td></tr><tr><td width="387">\[admin@office2\]&gt; ping 192.168.1.1

</td><td width="316">Effectue un ping vers la destination spécifiée.

</td></tr><tr><td width="387">\[admin@office2\]&gt; ping 8.8.8.8 src-address=192.168.10.254

</td><td width="316">Permet d’émuler un ping provenant d’une adresse source (sur le réseau local par exemple) vers une adresse de destination (sur Internet)

</td></tr></tbody></table>

#### <a name="_Toc5907124"></a>Commandes de modification

<table id="bkmrk-nom-de-la-commande-d-2" width="0"><tbody><tr><td width="390">**Nom de la commande dans l’arborescence**

</td><td width="313">**Description**

</td></tr><tr><td width="390">\[admin@MikroTik\] system package&gt; uninstall security

\[admin@MikroTik\] system package&gt; enable ipv6 \[admin@MikroTik\] &gt; reboot

</td><td width="313">Exemple de gestion des package : désinstallation du package “Security”, Installation du package “ipv6”, redémarrage du matériel pour prendre en compte les modifications.

</td></tr><tr><td width="390">\[admin@MikroTik\] &gt; interface enable ether1

</td><td width="313">Activer une interface, dans le cas présent : Activation de l’interface ether 1

</td></tr><tr><td width="390">\[admin@MikroTik\] ip address&gt; add address=10.10.10.1/24 interface=ether2

</td><td width="313">1ère commande : affecter l’adresse 10.10.10.1 et le masque 255.255.255.0 à l’interface nommée “ether2”

</td></tr><tr><td width="390">\[admin@MikroTik\] ip route&gt; add dst-address=10.1.12.0/24 gateway=192.168.0.253

</td><td width="313">Ajouter une route statique vers un réseau (illustration avec le réseau 10.1.12.0/24)

</td></tr><tr><td width="390">\[admin@MikroTik\] ip route&gt; add gateway=10.5.8.1

</td><td width="313">Ajouter une passerelle (10.5.8.1) pour la route par défaut (0.0.0.0)

</td></tr></tbody></table>

#### <a name="_Toc5907125"></a>Vlan

<table id="bkmrk-nom-de-la-commande-d-3"><tbody><tr><td width="444">**Nom de la commande dans l’arborescence**

</td><td width="253">**Description**

</td></tr><tr><td width="444">\[admin@MikroTik\] interface vlan&gt; add name=test vlan-id=1 interface=ether1

</td><td width="253">Ajouter le VLAN 1 nommé test sur l’interface ether 1

</td></tr><tr><td width="444">\[admin@MikroTik\] interface vlan&gt; print

</td><td width="253">Afficher les différents VLAN

</td></tr><tr><td width="444">\[admin@MikroTik\] ip address&gt; add address=10.10.10.1/24 interface=test

</td><td width="253">Ajouter une adresse IP à une interface virtuelle de VLAN (sous-interface par rapport à l’interface physique.

</td></tr></tbody></table>

#### <a name="_Toc5907126"></a>Services

##### <a name="_Toc5907127"></a>DHCP

<table id="bkmrk-etape-nom-de-la-comm"><tbody><tr><td width="53">**Etape**

</td><td width="386">**Nom de la commande dans l’arborescence**

</td><td width="263">**Description**

</td></tr><tr><td width="53">1

</td><td width="386">\[admin@MikroTik\] &gt; ip pool add name=dhcp-pool ranges=192.168.1.1-192.168.1.100

</td><td width="263">Créer une plage d’adresses distribuée par le serveur DHCP : de 192.168.1.1 à 192.168.1.100

</td></tr><tr><td width="53">2

</td><td width="386">\[admin@MikroTik\] &gt; ip dhcp-server network add address=192.168.1.0/24 gateway=192.168.1.254 \\ dns-server=159.148.147.194,159.148.60.20

</td><td width="263">Ajouter la passerelle par défaut et les adresse vers les DNS primaire et secondaires sur dans la plage DHCP configurée précédemment.

</td></tr><tr><td width="53">3

</td><td width="386">\[admin@MikroTik\] &gt; ip dhcp-server add interface=wlan1 address-pool=dhcp-pool

</td><td width="263">Spécification de l’interface sur laquelle le serveur DHCP doit travailler et de la plage d’adresses IP distribuée.

</td></tr><tr><td colspan="2" width="440">\[admin@MikroTik\] ip dhcp-server lease&gt; print

</td><td width="263">Afficher les adresses IP attribuées par le serveur DHCP.

</td></tr></tbody></table>

##### <a name="_Toc5907128"></a>Monitoring (Graphiques)

<table id="bkmrk-nom-de-la-commande-d-4"><tbody><tr><td width="349">**Nom de la commande dans l’arborescence**

</td><td width="349">**Description**

</td></tr><tr><td width="349">\[admin@MikroTik\] tool graphing interface&gt; add interface=ether1

</td><td width="349">Cette commande active les graphiques pour l’interface ether 1

</td></tr><tr><td width="349">\[admin@MikroTik\] tool graphing resource&gt; add allow-address=192.168.0.0/24

</td><td width="349">Cette option affichera le graphique uniquement pour le réseau 192.168.0.0 /24

</td></tr></tbody></table>

#### Mises à jour &amp; Mises à niveau

<table id="bkmrk-nom-de-la-commande-d-5" style="height: 185px;"><tbody><tr style="height: 35px;"><td style="height: 35px; width: 349px;">**Nom de la commande dans l’arborescence**

</td><td style="height: 35px; width: 349px;">**Description**

</td></tr><tr style="height: 29px;"><td style="height: 29px; width: 349px;">\[admin@MikroTik\] &gt; /system package update check-for-updates</td><td style="height: 29px; width: 349px;">Vérifie les mises à jour de paquets</td></tr><tr><td style="width: 349px;">\[admin@MikroTik\] &gt; /system package update install</td><td style="width: 349px;">Installe les mises à jour de paquets et redémarre automatiquement à la fin</td></tr><tr><td style="width: 349px;">\[admin@MikroTik\] &gt; /system routerboard print</td><td style="width: 349px;">Affiche si un mise à jour est disponible pour le firmware de la cart-mère</td></tr><tr style="height: 35px;"><td style="height: 35px; width: 349px;">\[admin@MikroTik\] &gt; /system routerboard upgrade

</td><td style="height: 35px; width: 349px;">Effectue la mise à niveau du firmware de la carte-mère

</td></tr><tr style="height: 57px;"><td style="height: 57px; width: 349px;">\[admin@MikroTik\] &gt; /interface lte firmware-upgrade lte1

</td><td style="height: 57px; width: 349px;">Affiche si un mise à jour est disponible pour le firmware de la carte LTE lte1

</td></tr><tr style="height: 29px;"><td style="height: 29px; width: 349px;">\[admin@MikroTik\] &gt; /interface lte firmware-upgrade lte1 upgrade=yes</td><td style="height: 29px; width: 349px;">Effectue la mise à niveau du firmware de la carte LTE lte1</td></tr></tbody></table>

### Bonus

L'administration est aussi possible via les logiciels [**The Dude**](https://mikrotik.com/thedude) et [**Winbox**](https://www.mikrotik.com/download)

# Configuration de base VyOS

<p class="callout warning">*Brouillon*</p>

VyOS est un OS de routeur virtuel à placer dans une VM ou sur une petite 1u

Le lien de téléchargement de Vyos :  
[https://downloads.vyos.io/?dir=rolling/current/amd64](https://downloads.vyos.io/?dir=rolling/current/amd64)

##### Configuration minimale

```shell
conf
set interfaces ethernet eth0 description WAN
set interfaces ethernet eth0 address dhcp
set interfaces ethernet eth1 description LAN
set interfaces ethernet eth1 address 192.168.2.1/24

set service dhcp-server shared-network-name dhcpproc authoritative
set service dhcp-server shared-network-name subnet 192.168.2.0/24 default-router 192.168.2.1
set service dhcp-server shared-network-name subnet 192.168.2.0/24 dns-server 192.168.2.1
set service dhcp-server shared-network-name subnet 192.168.2.0/24 range 0 start 192.168.2.10
set service dhcp-server shared-network-name subnet 192.168.2.0/24 range 0 stop 192.168.2.200

set nat source rule 99 description LAN2WAN
set nat source rule 99 outbound-interface eth0
set nat source rule 99 source address 192.168.2.0/24
set nat source rule 99 translation address masquerade

commit
save
```

##### Configuration simple

```shell
sudo dpkg-reconfigure keyboard-configuration # Tant qu'a faire, autant mettre le clavier en français...
conf

set interfaces ethernet eth0 address '192.168.1.253/24'
set interfaces ethernet eth0 description 'WAN'
set interfaces ethernet eth1 address '192.168.2.1/24'
set interfaces ethernet eth1 description 'LAN'

set nat source rule 100 outbound-interface 'eth0'
set nat source rule 100 source address '192.168.2.0/24'
set nat source rule 100 translation address 'masquerade'

set service dhcp-server disabled 'false'
set service dhcp-server shared-network-name LAN authoritative 'disable'
set service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 default-router '192.168.2.1'
set service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 dns-server '192.168.2.1'
set service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 domain-name 'lan-interne'
set service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 lease '86400'
set service dhcp-server shared-network-name LAN subnet 192.168.2.0/24 start 192.168.2.128 stop '192.168.2.255'
set service dns forwarding cache-size '0'
set service dns forwarding listen-on 'eth1'
set service dns forwarding name-server '9.9.9.9'
set service dns forwarding name-server '1.1.1.1'
set service snmp community public authorization 'ro'
set service snmp community public network '192.168.2.0/24'
set service snmp community public network '192.168.1.0/24'
set service snmp contact 'Somebody <someone@somewhe.re>'
set service snmp listen-address 0.0.0.0 port '161'
set service snmp location 'Some hypervisor'
set service ssh port '22'

set system gateway-address '192.168.1.1'
set system host-name 'routeur-NAT'
set system login user vyos authentication plaintext-password 'un mot de passe, pour changer...'
set system login user vyos level 'admin'
set system ntp server '0.pool.ntp.org'
set system ntp server '1.pool.ntp.org'
set system ntp server '2.pool.ntp.org'
set system time-zone 'Europe/Paris'

set firewall all-ping 'enable'
set firewall broadcast-ping 'disable'
set firewall receive-redirects 'disable'
set firewall send-redirects 'enable'
set firewall source-validation 'disable'
set firewall syn-cookies 'enable'
set firewall twa-hazards-protection 'disable'

# On crée une règle pour autoriser les connexions http https et ssh a arriver depuis le WAN
set firewall name OUTSIDE-IN default-action 'drop'
set firewall name OUTSIDE-IN rule 10 action 'accept'
set firewall name OUTSIDE-IN rule 10 state established 'enable'
set firewall name OUTSIDE-IN rule 10 state related 'enable'
set firewall name OUTSIDE-IN rule 20 action 'accept'
set firewall name OUTSIDE-IN rule 20 destination port '80'
set firewall name OUTSIDE-IN rule 20 protocol 'tcp'
set firewall name OUTSIDE-IN rule 20 state new 'enable'
set firewall name OUTSIDE-IN rule 21 action 'accept'
set firewall name OUTSIDE-IN rule 21 destination port '443'
set firewall name OUTSIDE-IN rule 21 protocol 'tcp'
set firewall name OUTSIDE-IN rule 21 state new 'enable'
set firewall name OUTSIDE-IN rule 22 action 'accept'
set firewall name OUTSIDE-IN rule 22 destination port '22'
set firewall name OUTSIDE-IN rule 22 protocol 'tcp'
set firewall name OUTSIDE-IN rule 22 state new 'enable'

# On crée une règle pour autoriser les connexions déjà établies ainsi que ping ntp et ssh a se connecter au routeur
set firewall name OUTSIDE-LOCAL default-action 'drop'
set firewall name OUTSIDE-LOCAL rule 10 action 'accept'
set firewall name OUTSIDE-LOCAL rule 10 state established 'enable'
set firewall name OUTSIDE-LOCAL rule 10 state related 'enable'
set firewall name OUTSIDE-LOCAL rule 20 action 'accept'
set firewall name OUTSIDE-LOCAL rule 20 icmp type-name 'echo-request'
set firewall name OUTSIDE-LOCAL rule 20 protocol 'icmp'
set firewall name OUTSIDE-LOCAL rule 20 state new 'enable'
set firewall name OUTSIDE-LOCAL rule 30 action 'drop'
set firewall name OUTSIDE-LOCAL rule 30 destination port '22'
set firewall name OUTSIDE-LOCAL rule 30 protocol 'tcp'
set firewall name OUTSIDE-LOCAL rule 30 recent count '4'
set firewall name OUTSIDE-LOCAL rule 30 recent time '60'
set firewall name OUTSIDE-LOCAL rule 30 state new 'enable'
set firewall name OUTSIDE-LOCAL rule 31 action 'accept'
set firewall name OUTSIDE-LOCAL rule 31 destination port '22'
set firewall name OUTSIDE-LOCAL rule 31 protocol 'tcp'
set firewall name OUTSIDE-LOCAL rule 31 state new 'enable'
set firewall name OUTSIDE-LOCAL rule 40 action 'accept'
set firewall name OUTSIDE-LOCAL rule 40 destination port '161'
set firewall name OUTSIDE-LOCAL rule 40 protocol 'udp'
set firewall name OUTSIDE-LOCAL rule 40 state new 'enable'

set interfaces ethernet eth0 firewall in name 'OUTSIDE-IN'
set interfaces ethernet eth0 firewall local name 'OUTSIDE-LOCAL'

commit
save
```

##### Script de sauvegarde de configuration

```shell
#!/bin/vbash
source /opt/vyatta/etc/functions/script-template

run show configuration commands > $HOME/$(date +%Y%m%d)-$(hostname)-vyos.conf.txt
```

# Aruba

A été utilisé un Aruba S2500-24p-4x10g

# Hard Reset

Au niveau de l'écran LCD

- Allez dans le menu Maintenance et sélectionnez "Factory Default"
- Effectuer via le menu le reboot du switch

**Information de login par défaut**

admin/admin123

# Perte du mot passe admin

En console

Utilisateur: mot de passe  
Mot de passe: forgetme!  
(Aruba) &gt; activer  
Mot de passe: activer  
(Aruba) #configure terminal entrez les commandes de configuration, une par ligne. Fin avec CNTL/Z  
Aruba) (config) #mgmt-User Admin mot de passe root: &lt; new admin password &gt;  
Re-tapez mot de passe: &lt; new admin password &gt;  
(Aruba) (config) #exit  
(Aruba) #exit  
(Aruba) &gt; Exit

Utilisateur: admin  
Mot de passe: &lt; new admin password &gt;  
(Aruba) &gt; activer  
Mot de passe: activer  
(Aruba) #configure terminal entrez les commandes de configuration, une par ligne. Fin avec CNTL/Z  
(Aruba) (config) #enable secret  
Mot de passe: &lt; new enable password &gt;  
Re-tapez mot de passe: &lt; new enable password &gt;  
(Aruba) (config) #write mémoire

# Initialisation & configuration basique

**Notes pré installation :**

Les câbles console de chez Cisco fonctionne très bien.

<table border="1" id="bkmrk-baud-rate-data-bits-" style="border-collapse: collapse; width: 63.3333%; height: 58px; margin-left: 40px;"><tbody><tr style="height: 29px;"><td class="align-center" style="width: 13.0259%;">**<span style="color: #000000;">Baud Rate</span>**</td><td class="align-center" style="width: 13.118%;">**<span style="color: #000000;">Data Bits</span>**</td><td class="align-center" style="width: 11.1733%;">**<span style="color: #000000;">Parity</span>**</td><td class="align-center" style="width: 11.996%;">**<span style="color: #000000;">Stop Bits</span>**</td><td class="align-center" style="width: 14.0128%;">**<span style="color: #000000;">Flow Control</span>**</td></tr><tr style="height: 29px;"><td class="align-center" style="width: 13.0259%; height: 29px;">9600</td><td class="align-center" style="width: 13.118%; height: 29px;">8</td><td class="align-center" style="width: 11.1733%; height: 29px;">None</td><td class="align-center" style="width: 11.996%; height: 29px;">1</td><td class="align-center" style="width: 14.0128%; height: 29px;">Off</td></tr></tbody></table>

#### Configuration via GUI quick config

  
[![Aruba-1.png](https://doc.ataxya.net/uploads/images/gallery/2020-05/scaled-1680-/Aruba-1.png)](https://doc.ataxya.net/uploads/images/gallery/2020-05/Aruba-1.png)

[![Aruba-2.png](https://doc.ataxya.net/uploads/images/gallery/2020-05/scaled-1680-/Aruba-2.png)](https://doc.ataxya.net/uploads/images/gallery/2020-05/Aruba-2.png)

La mise en page sous IE est étrange, mais l'important est de pouvoir la valider la configuration basique.  
[![Aruba-3.png](https://doc.ataxya.net/uploads/images/gallery/2020-05/scaled-1680-/Aruba-3.png)](https://doc.ataxya.net/uploads/images/gallery/2020-05/Aruba-3.png)

#### Casser le staking présent par défaut

> (ArubaS2500-24P) (config) #**show interface brief**
> 
> Interface Admin Link Line Protocol Speed/Duplex  
> \--------- ----- ---- ------------- ------------  
> GE0/0/0 Enable Up Up 1 Gbps / Full  
> GE0/0/1 Enable Down Down N/A  
> GE0/0/2 Enable Up Up 100 Mbps / Full  
> GE0/0/3 Enable Down Down N/A  
> GE0/0/4 Enable Up Up 100 Mbps / Full  
> GE0/0/5 Enable Down Down N/A  
> GE0/0/6 Enable Up Up 100 Mbps / Full  
> GE0/0/7 Enable Down Down N/A  
> GE0/0/8 Enable Up Up 100 Mbps / Full  
> GE0/0/9 Enable Down Down N/A  
> GE0/0/10 Enable Down Down N/A  
> GE0/0/11 Enable Down Down N/A  
> GE0/0/12 Enable Down Down N/A  
> GE0/0/13 Enable Down Down N/A  
> GE0/0/14 Enable Down Down N/A  
> GE0/0/15 Enable Down Down N/A  
> GE0/0/16 Enable Down Down N/A  
> GE0/0/17 Enable Down Down N/A  
> GE0/0/18 Enable Down Down N/A  
> GE0/0/19 Enable Down Down N/A  
> GE0/0/20 Enable Down Down N/A  
> GE0/0/21 Enable Down Down N/A  
> GE0/0/22 Enable Down Down N/A  
> GE0/0/23 Enable Down Down N/A  
> GE0/1/0 Enable Down Down N/A  
> GE0/1/1 Enable Down Down N/A  
> MGMT Enable Down Down N/A
> 
> (ArubaS2500-24P) (config) # **show stacking interface**
> 
> **<span style="background-color: #ffcc00;">stack1/2</span>**  
> \--------  
> stack1/2 is administratively Enabled, link is Down, line protocol is Down  
> Speed: N/A, MTU: 9224 bytes, Link flaps: 0  
> Last update of counters: 0d 00:00:00 ago  
> Last clearing of counters: 0d 00:00:00 ago  
> Link status last changed: 0d 00:00:00 ago  
> Statistics:  
> Received 0 frames, 0 octets  
> 0 pps, 0 bps  
> 0 broadcasts, 0 runts, 0 giants, 0 throttles  
> 0 error octets, 0 CRC frames  
> 0 multicast, 0 unicast  
> Transmitted 0 frames, 0 octets  
> 0 pps, 0 bps  
> 0 broadcasts, 0 throttles  
> 0 multicast, 0 unicast  
> 0 errors octets, 0 deferred  
> 0 collisions, 0 late collisions
> 
> **<span style="background-color: #ffcc00;">stack1/3</span>**  
> \--------  
> stack1/3 is administratively Enabled, link is Down, line protocol is Down  
> Speed: N/A, MTU: 9224 bytes, Link flaps: 0  
> Last update of counters: 0d 00:00:00 ago  
> Last clearing of counters: 0d 00:00:00 ago  
> Link status last changed: 0d 08:13:09 ago  
> Statistics:  
> Received 0 frames, 0 octets  
> 0 pps, 0 bps  
> 0 broadcasts, 0 runts, 0 giants, 0 throttles  
> 0 error octets, 0 CRC frames  
> 0 multicast, 0 unicast  
> Transmitted 0 frames, 0 octets  
> 0 pps, 0 bps  
> 0 broadcasts, 0 throttles  
> 0 multicast, 0 unicast  
> 0 errors octets, 0 deferred  
> 0 collisions, 0 late collisions
> 
> (ArubaS2500-24P) (config) # delete stacking interface stack 1/2  
> (ArubaS2500-24P) (config) # delete stacking interface stack 1/3  
> (ArubaS2500-24P) (config) #show interface brief
> 
> Interface Admin Link Line Protocol Speed/Duplex  
> \--------- ----- ---- ------------- ------------  
> GE0/0/0 Enable Up Up 1 Gbps / Full  
> GE0/0/1 Enable Down Down N/A  
> GE0/0/2 Enable Up Up 100 Mbps / Full  
> GE0/0/3 Enable Down Down N/A  
> GE0/0/4 Enable Up Up 100 Mbps / Full  
> GE0/0/5 Enable Down Down N/A  
> GE0/0/6 Enable Up Up 100 Mbps / Full  
> GE0/0/7 Enable Down Down N/A  
> GE0/0/8 Enable Up Up 100 Mbps / Full  
> GE0/0/9 Enable Down Down N/A  
> GE0/0/10 Enable Down Down N/A  
> GE0/0/11 Enable Down Down N/A  
> GE0/0/12 Enable Down Down N/A  
> GE0/0/13 Enable Down Down N/A  
> GE0/0/14 Enable Down Down N/A  
> GE0/0/15 Enable Down Down N/A  
> GE0/0/16 Enable Down Down N/A  
> GE0/0/17 Enable Down Down N/A  
> GE0/0/18 Enable Down Down N/A  
> GE0/0/19 Enable Down Down N/A  
> GE0/0/20 Enable Down Down N/A  
> GE0/0/21 Enable Down Down N/A  
> GE0/0/22 Enable Down Down N/A  
> GE0/0/23 Enable Down Down N/A  
> GE0/1/0 Enable Down Down N/A  
> GE0/1/1 Enable Down Down N/A  
> <span style="background-color: #ffcc00;">**GE0/1/2 Enable Down Down N/A**</span>  
> <span style="background-color: #ffcc00;">**GE0/1/3 Enable Down Down N/A**</span>  
> MGMT Enable Down Down N/A

#### Ajout d'un utilisateur

> (ArubaS2500-24P) (config) #**mgmt-user ?**
> 
> &lt;username&gt; Name of the user (maximum 16 characters).  
> localauth-disable Disable Local authentication event if RADIUS  
> authentication timeout.  
> password-recovery-dis.. Disable recovery login  
> ssh-pubkey SSH login of management users by public key  
> authentication  
> webui-cacert CA Certificate used to sign management user's  
> certificate
> 
> (ArubaS2500-24P) (config) #**mgmt-user nida ?**
> 
> &lt;rolename&gt; Role name from one of the following:  
> root - super user role  
> guest-provisioning - guest provisioning role  
> network-operations - Network operator role  
> read-only - Read only role  
> location-api-mgmt - Location API Management Role
> 
> (ArubaS2500-24P) (config) #**mgmt-user nida root**  
> Password:\*\*\*\*\*\*\*\*\*\*\*  
> Re-Type password:\*\*\*\*\*\*\*\*\*\*
> 
> (ArubaS2500-24P) (config) #**show mgmt-user**
> 
> Management User Table  
> \---------------------  
> USER PASSWD ROLE STATUS  
> \---- ------ ---- ------  
> admin \*\*\*\*\* root ACTIVE  
> nida \*\*\*\*\* root ACTIVE

#### Jumbo Frames

> (ArubaS2500-24P) (config) #show interface gigabitethernet 0/0/0
> 
> GE0/0/0 is administratively Up, Link is Up, Line protocol is Upq  
> Hardware is Gigabit Ethernet, Interface is GE0/0/0, Address is 00:0b:86:aa:a6:c2  
> Encapsulation ARPA, Loopback not set  
> Configured: duplex (Auto), Speed (Auto), FC (Off), Autoneg (On)  
> Negotiated: duplex (Full), Speed (1 Gbps)  
> Interface index: 1  
> **<span style="background-color: #ffcc00;">MTU 1514 bytes</span>**
> 
> (ArubaS2500-24P) (config) #**interface gigabitethernet** *0/0/0*  
> (ArubaS2500-24P) (gigabitethernet "0/0/0") #**mtu ?**
> 
> &lt;mtu&gt; Set MTU on interface between 64 and 9216
> 
> (ArubaS2500-24P) (gigabitethernet "0/0/0") #**mtu 9216**
> 
> (ArubaS2500-24P) (config) #**show interface gigabitethernet** *0/0/0*
> 
> GE0/0/0 is administratively Up, Link is Up, Line protocol is Up  
> Hardware is Gigabit Ethernet, Interface is GE0/0/0, Address is 00:0b:86:aa:a6:c2  
> Encapsulation ARPA, Loopback not set  
> Configured: duplex (Auto), Speed (Auto), FC (Off), Autoneg (On)  
> Negotiated: duplex (Full), Speed (1 Gbps)  
> Interface index: 1  
> **<span style="background-color: #ffcc00;">MTU 9216 bytes</span>**

#### Configuration SNMP v2

> (ArubaS2500-24P) (config) #**show snmp community**
> 
> SNMP COMMUNITIES  
> \----------------  
> COMMUNITY ACCESS VERSION  
> \--------- ------ -------  
> Zer0t0uchpr0visi0ning READ\_ONLY V1, V2C
> 
> (ArubaS2500-24P) (config) #**hostname** *ArubaS2500-24P*  
> (ArubaS2500-24P) (config) #**syscontact** *monitoring*  
> (ArubaS2500-24P) (config) #**syslocation** *France*  
> (ArubaS2500-24P) (config) #**snmp-server community** *public*  
> (ArubaS2500-24P) (config) #**snmp-server enable trap  
> (ArubaS2500-24P) (config) #snmp-server host** *192.168.1.205* **community** *public*  
> (ArubaS2500-24P) (config) #**snmp-server engine-id ?**
> 
> &lt;engineid&gt; Engine ID of SNMP server in HEX (10-64 chars) eg.  
>  <span style="background-color: #ffcc00;">800039e703000b86112233</span>
> 
> (ArubaS2500-24P) (config) #**snmp-server engine-id** *800039e703000b86112233*

#### Configuration SNMP v3

# vLAN & DHCP

#### **Création d'un vLan**

(ArubaS2500-24P) (VLAN "4") #vlan 10  
(ArubaS2500-24P) (VLAN "10") #description lab  
(ArubaS2500-24P) (VLAN "10") #exit

#### **Attribution d'une IP**

(ArubaS2500-24P) (vlan "10") #ip address 172.16.255.250 255.255.0.0  
(ArubaS2500-24P) (vlan "10") #mtu 1500  
(ArubaS2500-24P) (vlan "10") #exit

#### **Configuration du switching-profile pour le vLAN**

(ArubaS2500-24P) (config) #interface-profile switching-profile vlan10-sw  
(ArubaS2500-24P) (switching profile "vlan10-sw") #switchport-mode access  
(ArubaS2500-24P) (switching profile "vlan10-sw") #access-vlan 10  
(ArubaS2500-24P) (switching profile "vlan10-sw") #native-vlan 10  
(ArubaS2500-24P) (switching profile "vlan10-sw") #exit

#### **Application du vLAN à un port**

(ArubaS2500-24P) (config) #interface gigabitethernet 0/0/0  
(ArubaS2500-24P) (gigabitethernet "0/0/8") #switching-profile vlan10-sw  
(ArubaS2500-24P) (gigabitethernet "0/0/8") #exit

#### **Application du vLAN à un groupe de ports**

(ArubaS2500-24P) (config) #interface-group gigabitethernet vlan10-grp  
(ArubaS2500-24P) (gigabitethernet "vlan10") #apply-to 0/0/0-0/0/3  
(ArubaS2500-24P) (gigabitethernet "vlan10") #trusted port  
(ArubaS2500-24P) (gigabitethernet "vlan10") #no shutdown  
(ArubaS2500-24P) (gigabitethernet "vlan10") #switching-profile vlan10  
(ArubaS2500-24P) (gigabitethernet "vlan10") #exit  
(ArubaS2500-24P) (config) #exit  
(ArubaS2500-24P) #write memory

---

#### **Ajout ou suppression d'interface à un vLAN**

(ArubaS2500-24P) (gigabitethernet "vlan10") #apply-to \[add | remove\] &lt;interface-list&gt;

---

#### **DHCP**

<div id="bkmrk-%28arubas2500-24p%29-%28co-2"><div><svg class="svg-icon" data-icon="link" role="presentation" viewbox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"></svg><div>(ArubaS2500-24P) (config) #ip dhcp pool vlan10-pool  
(ArubaS2500-24P) (dhcp server profile "vlan10-pool") #  
(ArubaS2500-24P) (dhcp server profile "vlan10-pool") #?  
clone Copy data from another dhcp server profile  
default-router DHCP default router in A.B.C.D format  
dns-server DNS servers in A.B.C.D format  
domain-name Specify domain name  
exclude-address Configure exclude address  
hardware-address MAC address of the device  
lease DHCP server pool lease time (Default: 12 hours)  
netbios-name-server Configure netbios name servers in A.B.C.D format  
network DHCP server network pool  
no Delete Command  
option Configure server option  
vendor-class-identifi.. Configure vendor-class-identifier (Default: ArubaAP)</div></div></div>