Initial commit: BF Core-Switch-Prep + VLAN-Architektur + Delegations-Übergabe
- ALL-SG8316M auf FW 2.2.1.2956 geflasht; VLAN-DB 10/20/30/40/100 via Telnet-CLI (non-disruptiv) - CLI-Tooling: run-cli.exp + .cli-Files + CLI-REFERENCE (FW 2.2.1, IOS-artig) - Kanonisches Inventar: bf.csv/md + build.py (Doku-Motor), Core-Port-Map - Finaler VLAN-/Adressplan (10.40.<vlanid>.0/24), Firmware-Runbooks, Recovery-Assets - Secrets/Firmware/State/DS_Store via .gitignore ausgeschlossen Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
This commit is contained in:
Christoph Emsenhuber
8
switch/cli/01-vlan-db.cli
Normal file
8
switch/cli/01-vlan-db.cli
Normal file
@@ -0,0 +1,8 @@
|
||||
# === BF Core-Switch sw1 (ALL-SG8316M, FW 2.2.1) — VLAN-Datenbank ===
|
||||
# Reproduzierbar: . switch/.secrets && expect switch/cli/run-cli.exp switch/cli/01-vlan-db.cli
|
||||
# NON-DISRUPTIV: legt nur VLANs an; ändert KEINE Port-Zugehörigkeit (alle Ports bleiben default VLAN1).
|
||||
# VID-Plan: 10=Server/Main 20=Docker 30=IoT 40=Guest 100=WAN
|
||||
configure
|
||||
vlan 10,20,30,40,100
|
||||
end
|
||||
save
|
||||
47
switch/cli/CLI-REFERENCE.md
Normal file
47
switch/cli/CLI-REFERENCE.md
Normal file
@@ -0,0 +1,47 @@
|
||||
# ALL-SG8316M FW 2.2.1.2956 — CLI-Referenz (Telnet)
|
||||
|
||||
Switch `sw1` @ 10.40.41.239. **Kein SSH** → Telnet (Port 23). IOS-artige CLI. Login: `claudecode` (Creds in `switch/.secrets`).
|
||||
Prompt-Ebenen: `sw1>` (user) → `sw1#` (enable) → `sw1(config)#` (config). `configure` rein, `end`/`exit` raus.
|
||||
|
||||
> ⚠️ **Nur EINE VTY-Line!** Der Switch reapt halb-offene Sessions schlecht (stale Session sperrt ~15 min).
|
||||
> → Immer **serialisiert** arbeiten und **sauber ausloggen** (`exit` bis zur Verbindungstrennung). Bei „busy" **nicht hämmern**, paar Minuten warten.
|
||||
|
||||
Tooling (macOS): `telnet` (/opt/homebrew/bin) + `expect`. Python 3.14 hat KEIN telnetlib. Runner: `switch/cli/run-cli.exp <file.cli>`.
|
||||
|
||||
## Management-IP
|
||||
- **Ansehen** (enable): `show ip` → IP / Subnet Netmask / Default Gateway.
|
||||
- `show ip ?`: `dhcp dns http https igmp` (+ `<cr>` = Summary).
|
||||
- **Statisch setzen** (config):
|
||||
```
|
||||
ip address <A.B.C.D>
|
||||
ip default-gateway <A.B.C.D>
|
||||
```
|
||||
- ⚠️ **Netzmasken-Syntax noch zu bestätigen**: `ip address ?` zeigte nur `A.B.C.D`. Vor dem Commit
|
||||
`ip address <ip> ?` prüfen ODER `show running-config` ansehen (wie die bestehende Zeile geschrieben ist) und spiegeln.
|
||||
- DHCP statt statisch: `ip dhcp`.
|
||||
- **NICHT vorhanden:** `interface vlan`, `show ip interface`, `show management`, `terminal datadump`.
|
||||
|
||||
## Management-VLAN
|
||||
- **Setzen** (config): `management-vlan vlan <1-4094>` (`management` = Abk.)
|
||||
- **Ansehen** (enable): `show management-vlan` → aktuell `default(1)`.
|
||||
- Reihenfolge-Warnung: Ziel-VLAN muss existieren UND der Mgmt-Port muss es tragen, sonst Reachability weg.
|
||||
|
||||
## VLANs
|
||||
- **Anlegen** (config): `vlan <liste>` z.B. `vlan 10,20,30,40,100` (Range 1–4094, `3,6-8` möglich).
|
||||
- **Ansehen** (enable): `show vlan`.
|
||||
- **Namen:** Syntax noch zu erkunden (config-vlan `name`? `vlan <id>` einzeln?) — beim nächsten Lauf via `?` prüfen.
|
||||
|
||||
## Ports (gi1-16, lag1-8) — Trunk/Access (für Cutover)
|
||||
```
|
||||
interface gi<n> (oder: interface range ...)
|
||||
switchport mode {access|hybrid|trunk}
|
||||
switchport access vlan <id>
|
||||
switchport trunk native vlan <id>
|
||||
switchport trunk allowed vlan ... (genaue add/remove-Syntax via `switchport trunk allowed ?` prüfen)
|
||||
```
|
||||
|
||||
## Speichern / Diverses
|
||||
- **Persistieren:** `save` (enable) → „Success". (Sonst nach Reboot weg!)
|
||||
- **Config-Dump:** `show running-config` / `show startup-config` (Paging `--More--` → Space).
|
||||
- **Version:** `show version` → `Firmware Version : 2.2.1.2956`.
|
||||
- Andere: `reboot`, `restore-defaults`, `copy`, `clock`, `ping`, `ssl`, `clear`, `disable`, `terminal`.
|
||||
33
switch/cli/run-cli.exp
Normal file
33
switch/cli/run-cli.exp
Normal file
@@ -0,0 +1,33 @@
|
||||
#!/usr/bin/expect -f
|
||||
# Generischer Telnet-CLI-Runner für sw1 (ALL-SG8316M, FW 2.2.1, IOS-artige CLI).
|
||||
# Nutzung: . switch/.secrets && expect switch/cli/run-cli.exp switch/cli/<datei>.cli
|
||||
# Liest die .cli-Datei zeilenweise, loggt ein, sendet jeden Befehl, flaggt Fehler.
|
||||
# Zeilen mit führendem '#' = Kommentar (übersprungen). Am Ende: show vlan zur Kontrolle.
|
||||
set timeout 20
|
||||
set user $env(SW_USER)
|
||||
set pass $env(SW_PASS)
|
||||
set host $env(SW_HOST)
|
||||
if {[llength $argv] < 1} { puts "usage: run-cli.exp <file.cli>"; exit 1 }
|
||||
set fh [open [lindex $argv 0] r]
|
||||
log_user 1
|
||||
spawn telnet $host
|
||||
expect "Username:"; send "$user\r"
|
||||
expect "Password:"; send "$pass\r"
|
||||
expect -re {sw1[#>]}
|
||||
while {[gets $fh line] >= 0} {
|
||||
set line [string trim $line]
|
||||
if {$line eq "" || [string match "#*" $line]} { continue }
|
||||
send "$line\r"
|
||||
expect {
|
||||
"Incomplete command" { puts "\n>>> FEHLER (incomplete): $line" }
|
||||
"Unknown command" { puts "\n>>> FEHLER (unknown): $line" }
|
||||
-re {sw1\([^)]*\)[#>] ?$} {}
|
||||
-re {sw1[#>] ?$} {}
|
||||
timeout { puts "\n>>> TIMEOUT bei: $line" }
|
||||
}
|
||||
}
|
||||
close $fh
|
||||
send "show vlan\r"
|
||||
expect -re {sw1[#>]}
|
||||
send "exit\r"
|
||||
expect eof
|
||||
Reference in New Issue
Block a user