send a PM to fohdeeshacan someone please send me the latest firmware of my switch dcs-7050t-64-r?
https://forums.servethehome.com/index.php?members/fohdeesha.9809/
send a PM to fohdeeshacan someone please send me the latest firmware of my switch dcs-7050t-64-r?
Thanks! I already did send him a PM! I hope he got the latest firmware for it, and I can use it as a good switch, bought it from ebay.send a PM to fohdeesha
https://forums.servethehome.com/index.php?members/fohdeesha.9809/
inspect the area of your monitor roughly 3 inches above your postAnyone with current version? I just bought 2 pieces of 7010T and one contains 4.14, the second one 4.19.
Interesting here is that the later has issue with fans (one fan is not reporting correstly). I hope newer eos will fix this.
That's quite an extreme overreaction, there's thousands of these switches in telecom networks without issue. The linked issue is with DDoS attacks to management IPs on the switch, eg IPs assigned to the underlying linux install. You should *never* have these exposed to the public internet in the first place, so the attack shouldn't be possible. They should be on a separate VLAN entirely, or better yet, a completely isolated management VRFSo, it is time to start using them as L2 switches only.
There is something I might not understand to and I would appreciate explanation to better undestand it.That's quite an extreme overreaction, there's thousands of these switches in telecom networks without issue. The linked issue is with DDoS attacks to management IPs on the switch, eg IPs assigned to the underlying linux install. You should *never* have these exposed to the public internet in the first place, so the attack shouldn't be possible. They should be on a separate VLAN entirely, or better yet, a completely isolated management VRF
vrf definition mgmt
rd 64512:1
!
interface Management1
vrf forwarding mgmt
ipv6 address 2001:db8:1:2::1:1/64
!
interface Vlan5
description Servers
ipv6 address 2001:db8:ffff::1/64
!
interface Ethernet1
description Uplink
ipv6 address 2001:db8:150::2/64
!
interface Ethernet35
switchport access vlan 5
!
ip routing
!
ipv6 unicast-routing
!
ipv6 route ::/0 2001:db8:150::1
ipv6 route vrf mgmt ::/0 2001:db8:1:2::1
management ssh
shutdown
!
vrf mgmt
no shutdown
!
end
It goes to the ASIC, there's no way the little embedded AMD cpu in these things would be capable of routing the 10gbps+ of traffic that hits it's layer 3 interfaces. If traffic is directed to it's IP address on a port where a service is running, like SSH, then it's forwarded to the cpu/linux. You need to create a management VRF and bind all services like ssh and snmp to it, and unbind them from your default VRF, then routing interfaces in your default VRF have no way of getting traffic to the underlying OS Arista management VRF setup – Vodka RedBull PleaseAs I understand it, as long as IP is assigned to any interface on that switch, everything that goes to the address is processed by management CPU, not the ASIC
That's exactly how I understand it.It goes to the ASIC, there's no way the little embedded AMD cpu in these things would be capable of routing the 10gbps+ of traffic that hits it's layer 3 interfaces. If traffic is directed to it's IP address on a port where a service is running, like SSH, then it's forwarded to the cpu/linux. You need to create a management VRF and bind all services like ssh and snmp to it, and unbind them from your default VRF, then routing interfaces in your default VRF have no way of getting traffic to the underlying OS Arista management VRF setup – Vodka RedBull Please
There's some caveats, like certain routing daemons like BGP will require traffic to still hit linux etc, but you should have enough ACL rules etc in place that a malicious actor shouldn't be able to get BGP (or whatever) packets to your control plane in the first place -ensure they are only allowed from your transit providers etc
Hi All - New to Arista switching, however I see the go to guy for this software version appears to be fohdeesha.Does anyone have eos-4.15.10M ? I have a 7048T-A that i'd like to get upgraded.
hi, i have EOS64-4.23.2.1F.swi EOS64-4.23.2.1F.swiHello. Does anybody have the latest EOS firmware ? (for 7050QX)
My current firmware 4.21.5F