UPM on EXOS for LLDP IP phone
Han BinSenior System Engineer in Japan

2021 / 12

目的：スイッチコンフィグレーションの自動化▪ IP 電話がスイッチに接続されている場合、該当のスイッチポートは自動的に音声およびデータVLAN を設定する▪ Universal Port (upm)▪ スイッチ上に事前に音声およびデータVLANを作成する▪ 該当スイッチのポートに自動的にVLAN をアサインする▪ ExtremeControl 或いは ExtremeCloud A3 の使用が不要▪ UPM イベントがIP 電話の接続及び切断を検知できる

2

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

検証用のネットワークトポロジー

1/6

Avaya 9641G Phone-13

1:6

Avaya 9641G Phone-2

Universal Port
“Universal Port” は特定なイベントに応じて、スイッチが自動的にコンフィグレーションを可能になる柔軟なフレームワークである。
✓ ユーザーのログインおよびログオフ✓ スイッチポートからデバイスの接続或いは接続断✓ タイムイベント✓ EMS メッセージ (EXOS のログ）

“Universal Port” はEXOS コンポーネントおよびサードパーティーと連携可能✓ EXOS Network Login✓ EXOS CLI Scripting✓ LLDP✓ Radius or LDAP Server✓ Monitoring and Statistics

4

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

===
背景情報
===

5

===
背景情報
===

6

===
背景情報
===

7

参照先：コンフィグレーションガイド
https://documentation.extremenetworks.com/exos_31.3/GUID-CD76F42C-F0A0-4336-8C5D4927B942491B.shtml
Use the following procedure to configure Universal Port for device detection:

81.

Create a device-detect profile as described in Creating and Configuring New Profiles.

2.

Create a device-undetect profile as described in Creating and Configuring New Profiles.

3.

Assign the device-detect profile to the edge ports as described in Configuring a Device EventTrigger.

4.

Assign the device-undetect profile to the edge ports as described in Configuring a Device
Event Trigger.

5.

Verify that correct profiles are assigned to correct ports using the following command:show
upm event event-type

6.

Enable LLDP message advertisements on the ports that are configured for device-detectprofiles as described in LLDP.

7.

Test profile operation as described in Verifying a Universal Port Profile.

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

事前確認 / UPM Profile Status▪ UPM profiles の状態を確認* Slot-2 X460G2-STK.221 # show upm profile================================================================================UPM Profile
EventsFlags Ports================================================================================
Number of UPM Profiles: 0
Number of UPM Events in Queue for execution: 0Flags: d - disabled, e - enabled
Event name: log-message(Log filter name) - Truncated to 20 chars▪ UPM profile がなし▪ Port 1:6 にUPM がアサインされていない▪ Voice & Data vlanを作成、例: )create vlan "data"
configure vlan data tag 202
create vlan "voice"configure vlan voice tag 201
9CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

UPM Profile の作成 (接続検知用)▪ upm profiles の作成* Slot-2 X460G2-STK.222 # create upm profile phone-detect
Start typing the profile and end with a . as the first and the only character on a line.
Use - edit upm profile <name> - for block mode capability
set var voicevlan voice
set var datavlan data
create log message Config_on_$EVENT.USER_PORT
configure vlan $voicevlan add port $EVENT.USER_PORT tagged
configure vlan $datavlan add port $EVENT.USER_PORT untagged
configure lldp port $EVENT.USER_PORT advertise management-addressconfigure lldp port $EVENT.USER_PORT advertise vendor-specific med capabilities
configure lldp port $EVENT.USER_PORT advertise vendor-specific med policy application voice vlan $voicevlan dscp 46
configure lldp port $EVENT.USER_PORT advertise vendor-specific med power-via-mdi
configure inline-power operator-limit $EVENT.DEVICE_POWER ports $EVENT.USER_PORT.
* Slot-2 X460G2-STK.223 #▪ 該当ポートにupm profile をアサイン* Slot-2 X460G2-STK.223 # configure upm event device-detect profile phone-detect ports 1:6

10CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

UPM Profile の作成 (接続断検知用)▪ upm profiles の作成* Slot-2 X460G2-STK.224 # create upm profile phone-undetect
Start typing the profile and end with a . as the first and the only character on a line.
Use - edit upm profile <name> - for block mode capability
set var voicevlan voice
set var datavlan data
create log message ClearPort_on_$EVENT.USER_PORT
configure vlan $voicevlan delete port $EVENT.USER_PORT tagged
configure vlan $datavlan delete port $EVENT.USER_PORT
unconfigure lldp port $EVENT.USER_PORT
unconfigure inline-power operator-limit ports $EVENT.USER_PORT.
* Slot-2 X460G2-STK.224 #▪ 該当ポートにupm profile をアサイン* Slot-2 X460G2-STK.225 # configure upm event device-undetect profile phone-undetect ports 1:611

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

作成したUPM Profile の状態を確認▪ upm profiles の確認* Slot-2 X460G2-STK.226 # show upm profile================================================================================UPM ProfileEvents
Flags Ports================================================================================
phone-detectdevice-detecte 1:6
phone-undetectdevice-undetecte 1:6================================================================================
Number of UPM Profiles: 2
Number of UPM Events in Queue for execution: 0Flags: d - disabled, e - enabled
Event name: log-message(Log filter name) - Truncated to 20 chars

12

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

接続する前のPort 状態を確認* Slot-2 X460G2-STK.227 # show lldp ports 1:6 neighbors* Slot-2 X460G2-STK.228 # show ports 1:6 vlan
Untagged
Port/Tagged
VLAN Name(s)-------- -------- -----------------------------------------------------------1:6NoneNone* Slot-2 X460G2-STK.229 # show lldp ports 1:6
LLDP Port Configuration:
PortRxTx
SNMP--- Optional enabled transmit TLVs -Mode
Mode
Notification LLDP
802.1 802.3 MED
AvEx DCBX===============================================================================
1:6
EnabledEnabled--ND-- --------- ---- -===============================================================================
Notification: (L) lldpRemTablesChange, (M) lldpXMedTopologyChangeDetected
LLDP Flags : (P) Port Description, (N) System Name, (D) System Description(C) System Capabilities, (M) Mgmt Address
802.1 Flags : (P) Port VLAN ID, (p) Port & Protocol VLAN ID, (N) VLAN Name
802.3 Flags : (M) MAC/PHY Configuration/Status, (P) Power via MDI(+) Power via MDI with DLL Classification for PoE+,(L) Link Aggregation, (F) Frame Size
* Slot-2 X460G2-STK.230 # show inline-power configuration ports 1:6PortConfig
Operator Limit
Priority
Detection
1:6Enabled
30000 mW
Low
802.3af-only

13LabelCONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

接続後のPort 状態を確認* Slot-2 X460G2-STK.231 # show lldp ports 1:6 neighbors
Neighbor
Neighbor
Neighbor
PortChassis ID
Port IDTTL
AgeSystem Name===============================================================================
1:6(5.1)20.0.201.58
24:D9:21:3B:7B:10 120
24
AVX3B7B10* Slot-2 X460G2-STK.232 # show ports 1:6 vlan
Untagged
Port/TaggedVLAN Name(s)-------- -------- -----------------------------------------------------------1:6
Untagged dataTaggedvoice

自動的に該当ポートにVLANがアサインされ* Slot-2 X460G2-STK.233 # show lldp ports 1:6
LLDP Port Configuration:
PortRxTx
SNMP--- Optional enabled transmit TLVs -Mode
Mode
Notification LLDP
802.1 802.3 MED
AvEx DCBX===============================================================================
1:6Enabled
Enabled--ND-M -----C-Pp ---- -===============================================================================
Notification: (L) lldpRemTablesChange, (M) lldpXMedTopologyChangeDetected
LLDP Flags : (P) Port Description, (N) System Name, (D) System Description(C) System Capabilities, (M) Mgmt Address
802.1 Flags : (P) Port VLAN ID, (p) Port & Protocol VLAN ID, (N) VLAN Name
802.3 Flags : (M) MAC/PHY Configuration/Status, (P) Power via MDI(+) Power via MDI with DLL Classification for PoE+,(L) Link Aggregation, (F) Frame Size
* Slot-2 X460G2-STK.234 # show inline-power configuration ports 1:6PortConfig
Operator LimitPriority
Detection
1:6
Enabled4200 mW
Low
802.3af-only
14

Label
CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

ログを確認* Slot-2 X460G2-STK.235 # show log
02/03/2020 15:45:00.29 <Info:System.userComment> Slot-2: Config_on_1:6
02/03/2020 15:45:00.16 <Noti:UPM.Msg.upmMsgExshLaunch> Slot-2: Launched profile phone-detect for the event device-detect
02/03/2020 15:45:00.16 <Noti:UPM.Msg.LLDPDevDetected> Slot-2: LLDP Device detected. Mac is 24:D9:21:3B:7B:10, IP is 0.0.0.0,
on port 1:6, device type is 5, max power is 4200
02/03/2020 15:44:47.99 <Info:vlan.msgs.portLinkStateUp> Slot-2: Port 1:6 link UP at speed 1 Gbps and full-duplex* Slot-2 X460G2-STK.236 # show upm history--------------------------------------------------------------------------------Exec Event/ProfilePortStatus Time Launched
IdTimer/ Log filter--------------------------------------------------------------------------------2996 Device-Detect
phone-detect
1:6
Pass
2020-02-03 15:45:00

15

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

UPM Profile を確認* Slot-2 X460G2-STK.237 # show upm history exec-id 2996
UPM Profile: phone-detect
Event: Device-Detect
Profile Execution start time: 2020-02-03 15:45:00
Profile Execution Finish time: 2020-02-03 15:45:00
Execution Identifier: 2996
Execution Status: Pass
Execution Information:
3 # enable cli scripting
4 # configure cli mode non-persistent
5 # set var EVENT.DEVICE_IP 0.0.0.0
6 # set var EVENT.DEVICE_MANUFACTURER_NAME "Avaya"
7 # set var EVENT.DEVICE_MODEL "9641G"
8 # set var EVENT.DEVICE_MAC 24:d9:21:3b:7b:10
9 # set var EVENT.DEVICE_POWER 4200
10 # set var EVENT.USER_PORT 1:6
11 # set var EVENT.TIME 1580744700
12 # set var EVENT.DEVICE AVAYA_PHONE
13 # set var EVENT.NAME DEVICE-DETECT
14 # set var EVENT.PROFILE phone-detect
16 # set var voicevlan voice
17 # set var datavlan data
19 # create log message Config_on_$EVENT.USER_PORT
20 # configure vlan $voicevlan add port $EVENT.USER_PORT tagged
21 # configure vlan $datavlan add port $EVENT.USER_PORT untagged
22 # configure lldp port $EVENT.USER_PORT advertise management-address
23 # configure lldp port $EVENT.USER_PORT advertise vendor-specific med capabilities
24 # configure lldp port $EVENT.USER_PORT advertise vendor-specific med policy application voice vlan $voicevlan dscp 46
25 # configure lldp port $EVENT.USER_PORT advertise vendor-specific med power-via-mdi
26 # configure inline-power operator-limit $EVENT.DEVICE_POWER ports $EVENT.USER_PORT

Number of UPM Events in Queue for execution: 016

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

接続断後のPort 状態を確認* Slot-2 X460G2-STK.238 # show lldp ports 1:6 neighbors* Slot-2 X460G2-STK.239 # show ports 1:6 vlan
UntaggedPort/Tagged
VLAN Name(s)-------- -------- -----------------------------------------------------------1:6
None
None

自動的に該当ポートからVLANを削除* Slot-2 X460G2-STK.240 # show lldp ports 1:6
LLDP Port Configuration:
PortRxTx
SNMP--- Optional enabled transmit TLVs -Mode
Mode
Notification LLDP
802.1 802.3 MED
AvEx DCBX===============================================================================
1:6
EnabledEnabled--ND-- --------- ---- -===============================================================================
Notification: (L) lldpRemTablesChange, (M) lldpXMedTopologyChangeDetected
LLDP Flags : (P) Port Description, (N) System Name, (D) System Description(C) System Capabilities, (M) Mgmt Address
802.1 Flags : (P) Port VLAN ID, (p) Port & Protocol VLAN ID, (N) VLAN Name
802.3 Flags : (M) MAC/PHY Configuration/Status, (P) Power via MDI(+) Power via MDI with DLL Classification for PoE+,(L) Link Aggregation, (F) Frame Size
* Slot-2 X460G2-STK.241 # show inline-power configuration ports 1:6
PortConfig
Operator Limit
Priority
Detection
1:6
Enabled30000 mW
Low
802.3af-only

17

Label

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

ログを確認* Slot-2 X460G2-STK.242 # show log
02/03/2020 16:36:01.31 <Info:System.userComment> Slot-2: ClearPort_on_1:602/03/2020 16:36:01.18 <Noti:UPM.Msg.upmMsgExshLaunch> Slot-2: Launched profile phone-undetect for the event device-undetect
02/03/2020 16:36:01.18 <Noti:UPM.Msg.LLDPDevRemoved> Slot-2: LLDP Device Removed. Mac is 24:D9:21:3B:7B:10, IP is 0.0.0.0,
on port 1:6, device Type is 0
02/03/2020 16:34:03.58 <Info:vlan.msgs.portLinkStateDown> Slot-2: Port 1:6 link down
* Slot-2 X460G2-STK.243 # show upm history--------------------------------------------------------------------------------Exec Event/ProfilePortStatus Time Launched
Id
Timer/ Log filter--------------------------------------------------------------------------------2997 Device-Undetect
phone-undetect 1:6
Pass
2020-02-03 16:36:01
2996 Device-Detect
phone-detect
1:6
Pass
2020-02-03 15:45:00

18

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

UPM Profile を確認* Slot-2 X460G2-STK.244 # show upm history exec-id 2997
UPM Profile: phone-undetect
Event: Device-Undetect
Profile Execution start time: 2020-02-03 16:36:01
Profile Execution Finish time: 2020-02-03 16:36:01
Execution Identifier: 2997
Execution Status: Pass
Execution Information:
3 # enable cli scripting
4 # configure cli mode non-persistent
5 # set var EVENT.DEVICE_IP 0.0.0.0
6 # set var EVENT.DEVICE_MANUFACTURER_NAME "Avaya"
7 # set var EVENT.DEVICE_MODEL "9641G"
8 # set var EVENT.DEVICE_MAC 24:d9:21:3b:7b:10
9 # set var EVENT.USER_PORT 1:6
10 # set var EVENT.TIME 1580747761
11 # set var EVENT.DEVICE OTHER
12 # set var EVENT.NAME DEVICE-UNDETECT
13 # set var EVENT.PROFILE phone-undetect
15 # set var voicevlan voice
16 # set var datavlan data
18 # create log message ClearPort_on_$EVENT.USER_PORT
19 # configure vlan $voicevlan delete port $EVENT.USER_PORT tagged
20 # configure vlan $datavlan delete port $EVENT.USER_PORT
21 # unconfigure lldp port $EVENT.USER_PORT
22 # unconfigure inline-power operator-limit ports $EVENT.USER_PORT

Number of UPM Events in Queue for execution: 019

CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.

UPM Profile を削除▪ 該当ポートからupm profileを削除* Slot-2 X460G2-STK.260 # unconfigure upm event device-detect profile phone-detect ports 1:6* Slot-2 X460G2-STK.261 # unconfigure upm event device-undetect profile phone-undetect ports 1:6▪ 作成したUPM profileを削除* Slot-2 X460G2-STK.262 # delete upm profile phone-detect* Slot-2 X460G2-STK.263 # delete upm profile phone-undetect

20CONFIDENTIAL. ©EXTREME NETWORKS, INC. ALL RIGHTS RESERVED.