BS2–10G Series

Installation Guide

ENABLING BRIGHT OUTCOMES

Barco NV
Beneluxpark 21, 8500 Kortrijk, Belgium
www.barco.com/en/support
www.barco.com

Registered office: Barco NV

President Kennedypark 35, 8500 Kortrijk, Belgium
www.barco.com/en/support
www.barco.com
 Table of contents

1 Welcome ........................................................................................................................................................................................................... 5
1.1 About this guide ..................................................................................................................................................................................6

2 Switch overview ......................................................................................................................................................................................... 7

2.1 Switch overview ..................................................................................................................................................................................8

3 Connection overview............................................................................................................................................................................. 9
3.1 Standard connections...................................................................................................................................................................10
3.2 Inter switch connections.............................................................................................................................................................. 11

4 Unboxing a Barco Switch 2 kit ..................................................................................................................................................13

4.1 Content of the box ..........................................................................................................................................................................14
4.2 Prepare the switch for configuration.....................................................................................................................................16
4.3 Accessories for the Barco switch ...........................................................................................................................................16
4.4 How to create your switch configuration file.....................................................................................................................16

5 Connect to the switch ........................................................................................................................................................................17

5.1 Establish serial connection to the switch ...........................................................................................................................18

6 Basis check .................................................................................................................................................................................................25

6.1 Login to switch ..................................................................................................................................................................................26
6.2 Verify the loaded software..........................................................................................................................................................27
6.3 Change the password (obliged)..............................................................................................................................................27

7 Software upgrade..................................................................................................................................................................................29
7.1 Collect the required software....................................................................................................................................................30
7.2 Perform OS10 software update with BIOS upgrade ...................................................................................................31
7.3 Perform OS10 software update without BIOS upgrade ............................................................................................32

8 Configure the correct switch profile .....................................................................................................................................41

8.1 Configure the correct switch profile ......................................................................................................................................42

9 Backup and restore .............................................................................................................................................................................45

9.1 Backup and restore license file ...............................................................................................................................................46

10 Create configuration file using the Nexxis Network Configurator...........................................................47

10.1 Load configuration on Barco switch......................................................................................................................................48

R5915614 /00 BS2–10G Series 3

 11 Troubleshooting ......................................................................................................................................................................................51
11.1 Troubleshooting section..............................................................................................................................................................52

12 Switch configuration commands.............................................................................................................................................55

12.1 Switch configuration commands ............................................................................................................................................56

13 Important information.........................................................................................................................................................................59
13.1 Legal disclaimer...............................................................................................................................................................................60
13.2 Open source license information ...........................................................................................................................................60
13.3 Data protection .................................................................................................................................................................................61
13.4 Cybersecurity ....................................................................................................................................................................................61
13.4.1 Nexxis Security Requirements ............................................................................................................................61

4 R5915614 /00 BS2–10G Series

 Welcome 1
Introduction
Thank you for choosing the Barco BS2–10G Series switch.
This document concerns the Barco BS2–10G 12P, BS2–10G 28P and BS2–10G 48P switches.

Notes, cautions and warnings

A NOTE indicates important information that helps you make better use of your product.

CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you
how to avoid the problem.

WARNING: A WARNING indicates a potential for property damage, personal injury, or death.

WARNING: The ESD Warning icon requires that you take electrostatic precautions when handling
the device.

R5915614 /00 BS2–10G Series 5

 Welcome

1.1 About this guide

About
This guide explains how to upgrade a Barco switch to the OS10 version 10.5.3.2.89.

6 R5915614 /00 BS2–10G Series

Switch overview 2

R5915614 /00 BS2–10G Series 7

 Switch overview

2.1 Switch overview

Overview
The 3 types of Barco BS2–10G series switches are illustrated here:
• Barco BS2–10G 12P switch
• Barco BS2–10G 28P switch
• Barco BS2–10G 48P switch

Image 2–1 Barco Switch 10G 12P

Image 2–2 Barco Switch 10G 28P

Image 2–3 Barco Switch 10G 48P

8 R5915614 /00 BS2–10G Series

Connection
overview 3

R5915614 /00 BS2–10G Series 9

 Connection overview

3.1 Standard connections

Barco BS2–10G 12P switch

Image 3–1

1. Twelve SFP+ ports

2. Micro USB-B console port
3. Stack ID
4. Ethernet management port
5. RS-232 console port
6. AC PSUs
7. RJ-45 management port
8. Three QSFP28 ports

Barco BS2–10G 28P switch

Image 3–2

1. Twenty-eight SFP+ optical ports

2. Two QSFP28 optical ports
3. Micro USB-B console port
4. USB Type-A

10 R5915614 /00 BS2–10G Series

 Connection overview

Barco BS2–10G 48P switch

Image 3–3

1. Forty-eight SFP+ optical ports

2. Four QSFP28 ports
3. Two QSFP+ optical ports
4. Micro USB-B console port
5. USB Type-A

3.2 Inter switch connections

Overview
On the BS2–10G-48P there are different inter switch connections available.

Image 3–4

N° Description
1 QSFP28 port with 40G and 100G capability
2 QSFP+ 40G port
3 QSFP28 port with 40G capabality

R5915614 /00 BS2–10G Series 11

 Connection overview

12 R5915614 /00 BS2–10G Series

Unboxing a Barco
Switch 2 kit 4

R5915614 /00 BS2–10G Series 13

 Unboxing a Barco Switch 2 kit

4.1 Content of the box

Overview
When you receive the new BS2 switch, the box will contain the following items.
1. BS-2 switch

Image 4–1

2. Power cords

Image 4–2

3. Communication cable (Serial cable to connect to the back of the switch)

14 R5915614 /00 BS2–10G Series

 Unboxing a Barco Switch 2 kit

Image 4–3

4. Communication cable (USB cable to connect to the front of the switch)

Image 4–4

5. Rack mounting kit

Image 4–5

6. Manual

Image 4–6

R5915614 /00 BS2–10G Series 15

 Unboxing a Barco Switch 2 kit

4.2 Prepare the switch for configuration

How to prepare the switch
1. Unpack the switch and put it on a stable workspace.
2. Unpack the communication cable of your choice.
3. Unpack the correct power cables.
Note: For switches with two power supplies, one power connection is sufficient to configure the
switch. To test the correct working of the power supply units (PSU), it is advised to connect both
power supplies.

4. Do not power up the switch yet.

4.3 Accessories for the Barco switch

Before you begin
Before installing, make sure you have all accessories available.
• Hardware:
- Barco switch with power source.
- Laptop or PC.
- Micro-USB cable.
- UTP cable (minimum CAT5e category required for gigabit networks).
• Software:
- Switch configuration file. Refer to “How to create your switch configuration file”, page 16.
- Switch firmware.
- TFTP server (such as SolarWinds) and SSH and telnet client (such as PuTTY or TeraTerm) installed on
you laptop or PC.
• USB containing the necessary software.

When using TFTP to install the switch, the service PC must have a 1000BASE-T network port.

4.4 How to create your switch configuration file

Different ways
There are three different ways to create your switch configuration file:
1. For complex installation, contact Barco.
2. Edit the examples available from the Nexxis release folder.
3. Use the Barco Nexxis Network Configurator. See “Create configuration file using the Nexxis Network
Configurator”, page 47.
The tool is available here: https://www.barco.com/en/mybarco/mysupport/healthcare/nexxisconfigurator.

16 R5915614 /00 BS2–10G Series

Connect to the
switch 5
There are different ways to connect to the switch. Since there is nothing configured on the switch in
relation to IP address, the best way is to connect to the switch using a serial connection.

R5915614 /00 BS2–10G Series 17

 Connect to the switch

5.1 Establish serial connection to the switch

Overview
Serial connection can be established in 2 ways:
• Via USB at the front of the switch.
• Via the IOIOI port at the back of the switch.

Via front USB port

1. Connect the switch via the USB to micro USB.
2. Check the connectivity to the switch via your device manager in Windows.
3. Launch the device manager and check the Ports (COM & LPT) section. In our example it’s the port
COM10.

Image 5–1

4. Start Putty and configure the correct settings for the serial connection.
Connect with the following settings:
- Select the port
- Baud rate: 115200
- Data: 8 bit
- Parity: none
- Stop: 1 bit
- Flow control: none
When communication to the switch malfunctions, the switch can also accept baud rate 9600 with 7 bit Data
on the micro-USB interface. A reboot of the switch will afterwards enable baud rate 115200 with 8 bit data.

Image 5–2

5. Start the session and log the data if you want.

You will see a black screen.

18 R5915614 /00 BS2–10G Series

 Connect to the switch

Image 5–3

6. Connect the switch to a power source.

You will see the boot process in the Putty session.
Booting 'OS10-A'

Loading OS10 ...

[0.853172] kvm: already loaded the other module
[0.927434] dummy-irq: no IRQ given. Use irq=N
[0.934220] esas2r: driver will not be loaded because no ATTO esas2r devices were found
[0.967723] mtdoops: mtd device (mtddev-name.number) must be supplied
[2.043932] fmc_write_eeprom fake-design-for-testing-f001: fmc_write_eeprom: no busid
passed, refusing all cards
[2.057543] intel_rapl: driver does not support CPU family 6 model
WARNING: Failed to connect to lvmetad. Falling back to device scanning.

Debian GNU/Linux 9 OS10 ttyS0

Dell EMC Networking Operating System (OS10)

OS10 Login: [ 16.959735] linux-kernel-bde (883): MSI not used

Via console at the back of the switch

The front USB must be detached. If the USB is not detached, then you will not be able to see any data during
the Putty session because the front USB overrules the serial at the back.

Image 5–4

Establish a connection via IP to the management interface

Configure IP address of your management PC
1. Connect an Ethernet cable between the PC and the switch you want to configure.
2. Open your Network Settings in Windows.

R5915614 /00 BS2–10G Series 19

 Connect to the switch

Image 5–5

3. Right-click on the Network icon.

4. Select Open Network & Internet settings.

Image 5–6

5. Under Advanced network settings, click on Change adapter options.

Image 5–7

6. Select the IP4 settings.

Image 5–8

20 R5915614 /00 BS2–10G Series

 Connect to the switch

Image 5–9

7. Configure a static IP address.

R5915614 /00 BS2–10G Series 21

 Connect to the switch

Image 5–10

8. Close all open windows.

9. Open Command Prompt
10. Ping to the IP address that you have just configured.
C:\Users\jeapie>ping 172.16.0.10

Pinging 172.16.0.10 with 32 bytes of data:

Reply from 172.16.0.10: bytes=32 time<1ms TTL=128
Reply from 172.16.0.10: bytes=32 time<1ms TTL=128
Reply from 172.16.0.10: bytes=32 time<1ms TTL=128
Reply from 172.16.0.10: bytes=32 time<1ms TTL=128

Ping statistics for 172.16.0.10:

Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

C:\Users\jeapie>
Configure an IP address on the management interface
The management interface can be found at the back of the switch.

22 R5915614 /00 BS2–10G Series

 Connect to the switch

Image 5–11

1. Start by making a serial connection. See “Establish serial connection to the switch”, page 18.
2. Configure a static IP address on the management interface.
OS10# configure terminal
OS10 (config)# interface mgmt1/1/1
OS10(conf-if-ma-1/1/1)# no shutdown
OS10(conf-if-ma-1/1/1)# no ip address dhcp
OS10(conf-if-ma-1/1/1)# ip address 172.16.0.1/16
You will receive a message if the IP address was added successfully.
OS10(conf-if-ma-1/1/1)# exit
OS10 (config)#exit
OS10# copy running-configuration startup-configuration
3. Ping to the IP that you configured.
4. Ping to the IP of the management PC.
Establish Putty session to the IP address of your switch
1. Connect your preferred SSH tool to the switch.
When you first connect to the switch, you will receive a PuTTY Security Alert message box that shows you
the host key of the machine that you are connecting to. If you want to avoid that this message comes back,
just accept the host key. This will then be stored on your machine.

Image 5–12

2. Enter the user name and password to log in.

You should now be logged in into the switch.

R5915614 /00 BS2–10G Series 23

 Connect to the switch

24 R5915614 /00 BS2–10G Series

Basis check 6

R5915614 /00 BS2–10G Series 25

 Basis check

6.1 Login to switch

How to log in
1. Enter the default credentials to log in into the switch.
OS10 login: admin
Password: admin
Linux OS10 4.9.185 #1 SMP Debian 4.9.189-3+debSul x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Deiban GNU/Linus comes with ABSOLUTELY NO WARRANTY, to the extent

permitted by applicable law.

-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
-* Dell EMC Network Operating System (OS10) *-
-* *-
-* Copyright (c) 1999-2019 by Dell Inc. All Rights Reserved. *-
-* *-
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-

This product is protected by U.S. and international copyright and

intellectual property laws. Dell EMC and the Dell eMC logo are
trademarks of Dell Inc. in the United States and/or other
jurisdictions. All other marks and names mentioned herein may be
trademarks of their respective companies.
2. Wait until you see the prompt.
Press enter if the prompt is not appearing after a while.
Linux OS10 4.9.185 #1 SMP Debian 4.9.189-3+debSul x86_64

The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.

Deiban GNU/Linus comes with ABSOLUTELY NO WARRANTY, to the extent

permitted by applicable law.

-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
-* Dell EMC Network Operating System (OS10) *-
-* *-
-* Copyright (c) 1999-2019 by Dell Inc. All Rights Reserved. *-
-* *-
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-

This product is protected by U.S. and international copyright and

intellectual property laws. Dell EMC and the Dell eMC logo are
trademarks of Dell Inc. in the United States and/or other
jurisdictions. All other marks and names mentioned herein may be
trademarks of their respective companies.

Warning: Default password for admin account should be changed to secure the system.
OS10#
OS10#

26 R5915614 /00 BS2–10G Series

 Basis check

6.2 Verify the loaded software

How to verify the software
1. Check the version of the software running on the switch:
# show system
When more appears, you have to hit space to see all information.
OS10# show system

Node Id : 1
MAC : 34:73:5a:02:f3:f0
Number of MACs : 256
Up time : 00:04:16

-- Unit 1 --
Status : up
System Identifier : 1
Down Reason : user-triggered
Digital Optical Monitoring : disable
System Location LED : off
Required Type : S4148F
Current Type : S4148F
Hardware Revision : A06
Software Version : 10.5.0.4
Physical Ports : 48x10GbE, 2x40GbE, 4x100GbE
BIOS : 3.33.0.1-7
System CPLD : 1.1
Master CPLD : 1.0
Slave CPLD : 0.7

-- Power Supplies --
PSU-ID Status Type AirFlow Fan Speed(rpm) Status
------------------------------------------------------------------
1 up AC NORMAL 1 10672 up
2 fail

-- Fan Status --
FanTray Status AirFlow Fan Speed(rpm) Status
-----------------------------------------------------------
1 up NORMAL 1 11014 up
2 up NORMAL 1 11045 up
3 up NORMAL 1 11014 up
4 up NORMAL 1 11014 up
2. Check the software on both partitions:
OS10# show boot
Current system image information:
----------------------------------
----------------------------------
Type Boot Type Active Standby Next-Boot
Node-id 1 Flash Boot [A] 10.5.0.4 [B] 10.5.0.4 [A] active

6.3 Change the password (obliged)

Password

We advise a strong password policy in accordance with best practices.

1. Configure the switch password.

# configure terminal

R5915614 /00 BS2–10G Series 27

 Basis check

(config)# username admin password <ENTER STRONG PASSWORD> role sysadmin

# exit
2. Configure the linuxadmin user (default password is linuxadmin).
# configure terminal
(config)# system-user linuxadmin password <ENTER STRONG PASSWORD>
# exit
3. Save the configuration.
# copy running-configuration startup-configuration

28 R5915614 /00 BS2–10G Series

Software upgrade 7

R5915614 /00 BS2–10G Series 29

 Software upgrade

7.1 Collect the required software

How to collect the required software
Connect to fol.barco.com with a sftp connection and collect the needed software packages.
You will need the following;
• ONIE Base Image
• ONIE Firmware Updater
• Latest OS10 software

Verify the necessary software images

• ONIE Base Image 3.33.1.1-9
• ONIE Firmware 3.33.5.1-23
• OS10 10.5.3.2

Obtain FW version
1. Enter the following command:
# show version
OS10# show version
OS Version : 10.5.1.3
Build Version : 10.5.1.3.190
Build Time : 2020-06-19T21:48:07+0000
System Type : S4148F-ON
Architecture : x86_64
Up Time : 00:08:23
OS10#

Obtain Barco switch PPID and Service Tag

Via SW command
1. Enter the following commands:
# show license status
System Information
----------------------------------------------------------------
Vendor Name:Dell EMC
Product Name : S4128F-ON
Hardware Version : A05
Platform Name : x86_64-dellems_s4128f_c2338-r0
PPID : CNONY9FP2829804P0267
Service Tag : 78KFPK2
Product Base :
Product Serial Number :
Product Part Number :
License Details
----------------
Software : OS10-Enterprise
Version : 10.5.1.3
License Type : PERPETUAL
License Duration : Unlimited
License Status : Active
License location : /mnt/license/78KFPK2.lic
-----------------------------------------------------------------
Via the luggage tag
1. Softly pull out the luggage tag and read the Service Tag on its side.

30 R5915614 /00 BS2–10G Series

 Software upgrade

Extract the files and include them on the USB stick

You need a USB of at least 2GB.

1. Format the USB with the FAT32 file system.

2. Extract the ZIP files and copy the following files to the USB:
- onie-updater-x86_64-dellemc_s4100_c2338-r0.3.33.1.1-9
- onie-firmware-x86_64-dellemc_s4100_c2338-r0.3.33.5.1-23.bin
- PKGS_OS10-Enterprise-10.5.3.2.89buster-installer-x86_64.bin

7.2 Perform OS10 software update with BIOS

upgrade
If the current versions are in line with the minimum requirements, you can skip the BIOS upgrade
and go to “Perform OS10 software update without BIOS upgrade”, page 32.

Perform a software check

1. Run the following command to check if the switch needs an ONIE firmware and BIOS upgrade:
# show system
2. Check the output of the command. If your switch has a different output than what you see in the following
image, please continue the OS10 software update with BIOS upgrade.
Software Version : 10.5.3.2
Physical Ports : 48x10GbE, 2x40GbE, 4x100GbE
BIOS : 3.33.0.1-11
ONIE : 3.33.1.1-9
System CPLD : 1.3
Master CPLD : 1.2
Slave CPLD : 0.7

Upgrade the ONIE Base Image

1. From OS10, verify that the switch can read the USB:
# dir usb
2. Download the ONIE base image from the USB to the switch:
# image download usb://onie-updater-x86_64-dellemc_s4100_c2338-r0.3.33.1.1-9
3. Check the status and progress:
# show image status
4. Once completed, check the downloaded image:
# dir image
5. Install the image:
# image install image://onie-updater-x86_64-dellemc_s4100_c2338-r0.3.33.1.1-9
6. Check the status and progress:
# show image status
7. Once completed, reboot the switch:
# reload

Upgrade the ONIE Firmware

1. From OS10, verify that the switch can read the USB:
# dir usb
2. Download the ONIE base image from the USB to the switch:
# image download usb://onie-firmware-x86_64-dellemc_s4100_c2338-r0.3.33.5.1-23.
bin
3. Check the status and progress:
# show image status

R5915614 /00 BS2–10G Series 31

 Software upgrade

4. Once completed, check the downloaded image:

# dir image
5. Install the image:
# image install image://onie-firmware-x86_64-dellemc_s4100_c2338-r0.3.33.5.1-
23.bin
6. Check the status and progress:
# show image status
7. Once completed, reboot the switch:
# reload

Install the new OS10 Firmware ONIE

Depending on what version of OS10 software that you perform the update, it is possible that the process will
overwrite some files. This will include the configuration and license file. For this reason, we advice you to
make a backup of certain important files.
The backup procedure can be found in “Backup and restore”, page 45
1. Back up the switch configuration and any OS10 licenses. Use the following command to check:
# show license status
2. Reload the switch:
# reload
3. In the GRUB menu, select the ONIE option.
4. In the ONIE menu, select the ONIE Rescue option.
5. Stop automatic discovery:
# onie-discovery-stop
6. Create a mount point directory for the USB:
# mkdir /mnt/media
7. Get the path to the USB:
# fdisk -l
8. Mount the USB:
# mount -t vfat usb-drive-path /mnt/media
9. Check if the USB is mounted correctly:
# df –h
10. Check the content of the USB:
# ls –l /mnt/media
11. Install the OS10 image
# onie-nos-install /mnt/media/PKGS_OS10-Enterprise-10.5.3.2.89buster-installer-
x86_64.bin
The switch will automatically reboot into OS10.
12. Once you have logged into the switch with the default username and password, verify the version.
# show version
13. Once verified, load the configuration from the backup, and install any license files needed. Please note that
there is a default fully functional trial period of 120 days before a license is required.
14. Verify connectivity and normal operation.

7.3 Perform OS10 software update without BIOS

upgrade
About
In the following steps we show you how to upgrade only the ONIE software, directly from the USB.
Be sure that you have the OS10 Software file in the root of the USB and that the USB is inserted into the USB
slot at the front of the switch.

USB method
1. Check the content of the USB:

32 R5915614 /00 BS2–10G Series

 Software upgrade

# dir usb
2. Check the software version that is loaded on the switch:
OS10# show version
Dell EMC Networking OS10 Enterprise
Copyright (c) 1999–2020 by Dell Inc. All Rights Reserved.
OS Version: 10.5.0.4
Build Version: 10.5.0.4.638
Build Time: 2020–01–30T21:08:56+0000
System Type: S4148F-ON
Architecture: x86_64
Up Time: 00:07:36
OS10# show boot
Current system image information:
--------------------------------------
--------------------------------------
Type Boot Type Active Standby Next-Boot
--------------------------------------------------------------------
Node-id 1 Flash Boot [A] 10.5.0.4 [B] 10.5.0.4 [A] active
3. Locate the correct file and start the update:
# image install usb://PKGS_OS10-Enterprise-10.5.1.3.190stretch-installer-x86_
64.bin
4. Check the installation process:
OS10# show image status
Image Upgrade State: install
--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: idle
--------------------------------------------------------------------
State Detail: No download information available
Task Start: 0000-00-00T00:00:00Z
Task End: 0000-00-00T00:00:00Z
Transfer Progress: 0 %
Transfer Bytes: 0 bytes
File Size: 0 bytes
Transfer Rate: 0 kbps

Installation State: install

--------------------------------------------------------------------
State Detail: In progress: Installing
Task Start: 2022-03-08T22:34:57Z
Task End: 0000-00-00T00:00:00Z
OS10# show image status
Image Upgrade State: install
--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: idle
--------------------------------------------------------------------
State Detail: No download information available
Task Start: 0000-00-00T00:00:00Z
Task End: 0000-00-00T00:00:00Z
Transfer Progress: 0 %
Transfer Bytes: 0 bytes
File Size: 0 bytes
Transfer Rate: 0 kbps

Installation State: install

--------------------------------------------------------------------
State Detail: In progress: Configure filesystem (3 of 10)
Task Start: 2022-03-08T22:34:57Z
Task End: 0000-00-00T00:00:00Z
OS10# show image status

R5915614 /00 BS2–10G Series 33

 Software upgrade

Image Upgrade State: install

--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: idle
--------------------------------------------------------------------
State Detail: No download information available
Task Start: 0000-00-00T00:00:00Z
Task End: 0000-00-00T00:00:00Z
Transfer Progress: 0 %
Transfer Bytes: 0 bytes
File Size: 0 bytes
Transfer Rate: 0 kbps

Installation State: install

--------------------------------------------------------------------
State Detail: In progress: Install packages (5 of 10)
Task Start: 2022-03-08T22:34:57Z
Task End: 0000-00-00T00:00:00Z
OS10# show image status
Image Upgrade State: idle
--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: idle
--------------------------------------------------------------------
State Detail: No download information available
Task Start: 0000-00-00T00:00:00Z
Task End: 0000-00-00T00:00:00Z
Transfer Progress: 0 %
Transfer Bytes: 0 bytes
File Size: 0 bytes
Transfer Rate: 0 kbps

Installation State: install

--------------------------------------------------------------------
State Detail: Completed: Success
Task Start: 2022-03-08T22:34:57Z
Task End: 2022-03-08T22:48:05Z
The update can take up to 15 minutes.
5. Check the software again:
# show boot
6. Reload the switch:
# reload
Enter ‘Y’ two times before the reboot starts.
Let the switch perform the update. Do not interrupt the process.
7. Log in into the switch again with the default credentials and check the status of the partitions.
# show boot
You will see that the standby partition has now been changed to the active partition.
8. Update the second partition.
OS10# show boot
Current system image information:
-------------------------------------
-------------------------------------
Type Boot Type Active Standby Next-Boot
--------------------------------------------------------------------
Node-id 1 Flash Boot [A] 10.5.1.3 [B] 10.5.0.4 [B] standby
9. Download the image from the USB to the image partition on the switch:
# image download usb://PKGS_OS10-Enterprise-10.5.3.2.89buster-installer-x86_64.
bin
OS10# show image status
Image Upgrade State: download
--------------------------------------------------------------------

34 R5915614 /00 BS2–10G Series

 Software upgrade

--------------------------------------------------------------------
File Transfer State: download
--------------------------------------------------------------------
State Detail: In progress
Task Start: 2022-03-08T23:00:49Z
Task End: 0000-00-00T00:00:00Z
Transfer Progress: 0 %
Transfer Bytes: 0 bytes
File Size: 0 bytes
Transfer Rate: 0 kbps

Installation State: idle

--------------------------------------------------------------------
State Detail: Completed: Success
Task Start: 0000-00-00T00:00:00Z
Task End: 0000-00-00T00:00:00Z
10. Check the download status:
OS10# show image status
Image Upgrade State: idle
--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: transfer-success
--------------------------------------------------------------------
State Detail: Completed
Task Start: 2022-03-08T23:00:49Z
Task End: 2022-03-08T23:01:14Z
Transfer Progress: 100 %
Transfer Bytes: 579830738 bytes
File Size: 579830738 bytes
Transfer Rate: 23193 kbps

Installation State: idle

--------------------------------------------------------------------
State Detail: No install information available
Task Start: 0000-00-00T00:00:00Z
Task End: 0000-00-00T00:00:00Z
11. Show the content of the image space:
# dir image
OS10# dir image

Directory contents for folder: image

Date (modified) Size (bytes) Name
----------------------------------------------------------------------------------------
2022-03-08T23:01:14Z 579830738 PKGS_OS10-Enterprise-10.5.3.2.89buster-
installer-x86_64.bin
12. Install the OS10 to the standby partition from the image space:
# image install image://PKGS_OS10-Enterprise-10.5.3.2.89buster-installer-x86_
64.bin
13. Check the status of the installation and enter the command several times:
OS10# show image status
Image Upgrade State: install
--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: transfer-success
--------------------------------------------------------------------
State Detail: Completed
Task Start: 2022-03-08T23:00:49Z
Task End: 2022-03-08T23:01:14Z
Transfer Progress: 100 %
Transfer Bytes: 579830738 bytes
File Size: 579830738 bytes
Transfer Rate: 23193 kbps

R5915614 /00 BS2–10G Series 35

 Software upgrade

Installation State: install

--------------------------------------------------------------------
State Detail: In progress: Installing
Task Start: 2022-03-08T23:03:46Z
Task End: 0000-00-00T00:00:00Z
OS10# show image status
Image Upgrade State: install
--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: transfer-success
--------------------------------------------------------------------
State Detail: Completed
Task Start: 2022-03-08T23:00:49Z
Task End: 2022-03-08T23:01:14Z
Transfer Progress: 100 %
Transfer Bytes: 579830738 bytes
File Size: 579830738 bytes
Transfer Rate: 23193 kbps

Installation State: install

--------------------------------------------------------------------
State Detail: In progress: Post-installation (7 of 10)
Task Start: 2022-03-08T23:03:46Z
Task End: 0000-00-00T00:00:00Z
Wait until ‘State Detail’ is status completed.
OS10# show image status
Image Upgrade State: idle
--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: transfer-success
--------------------------------------------------------------------
State Detail: Completed
Task Start: 2022-03-08T23:00:49Z
Task End: 2022-03-08T23:01:14Z
Transfer Progress: 100 %
Transfer Bytes: 579830738 bytes
File Size: 579830738 bytes
Transfer Rate: 23193 kbps

Installation State: install

--------------------------------------------------------------------
State Detail: Completed: Success
Task Start: 2022-03-08T23:03:46Z
Task End: 2022-03-08T23:22:17Z
The update of the second partition can take up to 30 minutes.
14. Check the status of the partitions and reload the switch:
# show boot
# reload

TFTP method
If there is no physical access to the switch, the upgrade of the OS10 software will need to be done with a file
transfer protocol. In this case, we will be using TFTP.
Configure your TFTP server
We will be using the SolarWinds TFTP server in this example.
1. Start the application on the management station.

36 R5915614 /00 BS2–10G Series

 Software upgrade

Image 7–1

2. Go to File > Configure.

Image 7–2

3. Configure the path and store your firmware files in that location.
4. Start the TFTP server by pushing the Start button.
5. Close the window.
The server should start and listen to port 69.

Image 7–3

Where there is an active session, you will see the following in the log screen.

Image 7–4

Setup network communication with the switch

R5915614 /00 BS2–10G Series 37

 Software upgrade

Adjust the Windows firewall to allow TFTP on port 69, otherwise the TFTP server will not work on
Windows 7 or Windows 10

1. On your serial connection with the switch (such as TeraTerm), type the following command to configure the
management port:
# configure terminal
# interface mgmt1/1/1
# no shutdown
# no ip address dhcp
# ip address 172.16.0.10
# exit
2. Switch installation via the management channel: Configure the fixed IP address settings of the PC: Go to
Start > Control Panel > Network and Internet > Network and Sharing Center > Change adapter settings >
Local Area Connection > Properties Internet Protocol Version 4 (TCP/IPv4) > Properties
IP address 172.16.0.10
netmask 255.255.0.0
Default gateway 172.16.0.10
Connect your portable or PC to the management interface of the switch:
- Via a standard micro-USB cable.
The management port is located at the back of the switch (lowest connection)
- Via a standard UTP cable.
Make sure the LAN network is considered as a “HOME NETWORK” and firewall is disabled.
3. Copy the files you need via TFTP server: Start your TFTP server (such as SolarWinds) and use the
following command to download a config file to the Barco switch:
# copy tftp://172.16.0.10/switch-config.txt config://switch-config.txt
Copy succeeded
Start the process from the switch
1. Connect to the switch via a Putty IP session.
2. Start the download of the firmware to the switch:
OS10# image download tftp://<TFTP_IP_Address>/PKGS_OS10-Enterprise-10.5.3.2.89buster-
installer-x86_64.bin
Download started.
Use 'show image status' for updates
3. Check the download status:
OS10# show image status
Image Upgrade State: install
--------------------------------------------------------------------
--------------------------------------------------------------------
File Transfer State: idle
--------------------------------------------------------------------
State Detail: Completed; No error
Task Start: 2022-03-10T14:49:37Z
Task End: 2022-03-10T15:01:12Z
Transfer Progress: 100 %
Transfer Bytes: 579830738 bytes
File Size: 579830738 bytes
Transfer Rate: 23193 kbps

Installation State: install

--------------------------------------------------------------------
State Detail: Completed: Success
Task Start: 2022-03-10T15:05:36Z
Task End: 0000-00-00T00:00:00Z
4. Check the status after 30 seconds, it could be that the server is not reachable due to a firewall restriction
on your management pc. You will see something like this on the switch:
Switch-A# show image status
Image Upgrade State: idle
--------------------------------------------------------------------
--------------------------------------------------------------------

38 R5915614 /00 BS2–10G Series

 Software upgrade

File Transfer State: transfer-failed

--------------------------------------------------------------------
State Detail: Failed; TFTP response timeout
Task Start: 2022-03-15T15:00:35Z
Task End: 2022-03-15T15:01:35Z
Transfer Progress: 0 %
Transfer Bytes: 0 bytes
File Size: 0 bytes
Transfer Rate: 0 kbps
5. Start the firmware update process on the switch:
OS10# image install image://PKGS_OS10-Enterprise-10.5.3.2.89buster-
installer-x86_64.bin
Install started.
Use ‘show image status’ for updates
6. Check the installation progress:
# image install status
7. Once the update is completed, check the status of both partitions:
# show boot
8. If needed, swap the active partition with the one that has the highest OS10 version:
# system boot standby
9. Reload the switch. You will lose your IP connection:
# reload
10. Wait until the switch is pingable and then connect back to the switch via Putty.
11. Check the firmware again.
12. Run the firmware update for the second partition.
13. Check the status of both partitions:
OS10# show boot
Current system image information:
-------------------------------------
-------------------------------------
Type Boot Type Active Standby Next-Boot
--------------------------------------------------------------------
Node-id 1 Flash Boot [A] 10.5.3.2 [B] 10.5.3.2 [B] active
ONIE-rescue method
You can also perform a clean update on both partitions in one action. Follow the steps as explained in “Install
the new OS10 Firmware ONIE” in “Perform OS10 software update with BIOS upgrade”, page 31.

R5915614 /00 BS2–10G Series 39

 Software upgrade

40 R5915614 /00 BS2–10G Series

Configure the
correct switch
profile 8

R5915614 /00 BS2–10G Series 41

 Configure the correct switch profile

8.1 Configure the correct switch profile

How to configure the correct switch profile
1. Check the switch profile if you are configuring a BS2–10G-48P. By default, a BS2–10G-48P will come with
Profile-1 activated. If you want to use a different profile, you will have to reconfigure to the correct profile.

Image 8–1

For example:
When the switch is set in profile-6:
- QSFP28 ports with 40G capability (26 and 30) are enabled.
- QSFP28 ports with 40G and 100G capability (25 and 29) are enabled.
- QSFP+ ports support 40GE and 4x40G breakouts.
- QSFP28 ports 26 and 30 support 40GE and 4x10G breakouts with QSFP+ transceivers.
- QSFP28 ports 25 and 29 support 100GE and 2x50G breakouts with QSFP28 transceivers, and 40GE
and 4x10G breakouts witch QSFP+ transceivers.
2. Check the currently applied switch-port-profile on the switch:
OS10# show switch-port-profile

| Node/Unit | Current | Next-boot | Default |

|-------------+-----------+-------------+-----------|
| 1/1 | profile-1 | profile-1 | profile-1 |

Supported Profiles:
profile-1
profile-2
profile-3
profile-4
profile-5
profile-6
3. Reconfigure the switch with the correct profile. In this example we will configure the switch to profile-6.
OS10# config term
OS10 (config)# switch-port-profile 1/1 profile-6
You will receive a message that a reload is needed to apply the change.
4. Exit the configuration mode and save the changes to the startup configuration.
OS10 (config)# exit
OS10# copy running-configuration startup-configuration
5. Check the newly configured profile:
OS10# show switch-port-profile

| Node/Unit | Current | Next-boot | Default |

42 R5915614 /00 BS2–10G Series

 Configure the correct switch profile

|-------------+-----------+-------------+-----------|
| 1/1 | profile-1 | profile-6 | profile-1 |
Supported Profiles:
profile-1
profile-2
profile-3
profile-4
profile-5
profile-6
6. Restart the switch:
# reload

Perform the first tech-support action

After the switch is back up, it’s a good opportunity to run the first tech-support logging.
1. Enter the following command:
# show tech-support

R5915614 /00 BS2–10G Series 43

 Configure the correct switch profile

44 R5915614 /00 BS2–10G Series

Backup and restore 9

R5915614 /00 BS2–10G Series 45

 Backup and restore

9.1 Backup and restore license file

Backup the license file to the USB
1. Check the status of the license:
OS10# show license status

System Information
---------------------------------------------------------------------
Vendor Name : Dell EMC
Product Name : S4148F-ON
Hardware Version : A06
Platform Name : x86_64–dellemc_s4148f_c2338–r0
PPID : CN09H9MN2829817Q0132
Service Tag : H5TDV43
Product Base :
Product Serial Number :
Product Part Number :
License Details
----------------
Software : OS10-Enterprise
Version : 10.5.3.2
License Type : PERPETUAL
License Duration : Unlimited
License Status : Active
License location : /mnt/license/H5TDV43.lic
---------------------------------------------------------------------
2. Insert the USB and check the content of the USB:
OS10# dir usb

Directory contents for folder:

Date (modified) Size (bytes) Name
--------------------- ------------- ---------------------------
3. Copy the license file to the USB:
OS10# system “sudo cp /mnt/license/H5TDV43.lic /mnt/usb”
4. Check the content of the USB:
OS10# dir usb

Directory contents for folder:

Date (modified) Size (bytes) Name
--------------------- ------------- ---------------------------
2022-03-10T18:42:39Z 3718 H5TDV43.lic

Restore the license file from the USB

1. Check the content of the USB where you stored the license file:
OS10# dir usb

Directory contents for folder: usb

Date (modified) Size (bytes) Name
--------------------- ------------- ---------------------------
2022-03-10T18:42:39Z 3718 H5TDV43.lic
2. Install the license file to the switch:
OS10# license install usb://H5TDV43.lic
License installation success.
3. Check the status of the switch.
OS10# show license status

46 R5915614 /00 BS2–10G Series

Create configuration
file using the Nexxis
Network
Configurator 10

R5915614 /00 BS2–10G Series 47

 Create configuration file using the Nexxis Network Configurator

10.1 Load configuration on Barco switch

Before you begin
Connect to the URL of the Nexxis Network Configurator: https://www. barco. com/HtmlApplications/
NexxisConfigurator/index.html.

How to load configuration on Barco switch

1. Transfer the configuration file to the root of the USB.
2. Check the version.
0S10# show version
Dell EMC Networking OS10 Enterprise
Copyright (c) 1999–2020 by Dell Inc. All Rights Reserved.
OS Version: 10.5.3.2
Build Version: 10.5.3.2.89
Build Time: 2020–06–19T21:48:07+0000
System Type: S4148F-ON
Architecture: x86_64
Up Time: 00:03:30
Check the content of the USB:
OS10# dir usb

Directory contents for folder: usb

Date (modified) Size (bytes) Name
---------------------- -------------- --------------------------------------
2022-03-14T07:33:40Z 2537 Switch-A.txt
2022-03-14T07:33:40Z 2538 Switch-B.txt
2022-03-14T07:33:40Z 2539 Switch-C.txt
2022-03-14T07:33:40Z 179 Switch-D.pol
2022-03-14T07:33:40Z 2705 Switch-D.xsf
3. Copy the configuration file from the USB to the switch:
OS10# copy usb://Switch-C.txt config://Switch-C.txt
Copy completed
4. Check the content of the configuration partition:
OS10# dir config

Directory contents for folder: config

Date (modified) Size (bytes) Name
---------------------- -------------- --------------------------------------
2022-03-14T16:07:12Z 2539 Switch-C.txt
2022-03-14T15:52:26Z 53454 startup.xml
5. Copy the configuration to the switch:
# copy config://switch-C.txt running-configuration
6. Check the status of the dhcp server:
Switch-C# show dhcp-server status
DHCPv4 server is Active.
DHCPv6 server is Inactive.
7. Check the running configuration:
# show running-configuation
8. Copy the running-configuration to the startup-configuration:
# copy running-configuration startup-configuration
9. Check the connectivity on the LED. Do the same operation for the other two Barco switches.
10. Check the connection with the other switches:
# show llpd neigbors
11. Enter additional manual commands.
12. Perform a basis check:
# show system
# show inventory

48 R5915614 /00 BS2–10G Series

 Create configuration file using the Nexxis Network Configurator

# show license status

13. Run tech-support:
# show tech-support
14. Reload the switch:
# reload

R5915614 /00 BS2–10G Series 49

 Create configuration file using the Nexxis Network Configurator

50 R5915614 /00 BS2–10G Series

Troubleshooting 11

R5915614 /00 BS2–10G Series 51

 Troubleshooting

11.1 Troubleshooting section

Reconfigure the IP address of the management interface
To reconfigure the interfaces, establish a serial connection to your switch.
1. Log in into the switch.
2. Check the configured interface:
# show running-configuration
3. Unconfigure the existing IP address:
OS10# configure terminal
OS10 (config)# interface mgmt. 1/1/1
OS10 (conf-if-ma-1/1/1)# no ip address
You will receive a message that the IP address was deleted successfully.
4. Configure the new IP address:
OS10 (conf-if-ma-1/1/1)# ip address 172.16.0.1/16
You will receive a message if the IP address was added successfully.
OS10 (conf-if-ma-1/1/1)# exit
OS10 (config)#exit
5. Save the configuration. Press ‘Y’ to confirm.
OS10# copy running-configuration startup-configuration
6. Ping the newly configured IP address from your management pc.

Re-installation of the switch

1. In case you are not already logged in to the switch, login via the serial or management connection:
Username: admin
Password: admin
2. Clear the configuration:
# delete startup-configuration
Proceed to delete startup-configuration [confirm yes/no(default)]:y
# reload
System configuration has been modified. Save? [yes/no]:n
Proceed to reboot the system? [confirm yes/no]:y

WARNING: The complete configuration of the switch is cleared now. You can start the configuration
as described in “Configure the correct switch profile”, page 42.

Control the fans and power supplies

1. Use the following command to read the status of the fans and power supplies:
# show system
Node Id : 1
MAC : 68:4f:64:e0:24:93
Number of MACs : 256
Up Time : 21:02:17
-- Unit 1 --
Status : up
System Identifier : 1
Down Reason : unknown
Digital Optical Monitoring : disable
System Location LED : off
Required Type : S4148F
Current Type : S4148F
Hardware Revision : A05
Software Version : 10.5.3.2
Physical Ports : 48x10GbE, 2x40GbE, 4x100GbE
BIOS : 3.33.0.1-7
System CPLD : 1.1
Master CPLD : 1.0
Slave CPLD : 0.7

52 R5915614 /00 BS2–10G Series

 Troubleshooting

-- Power Supplies --
PSU-ID Status Type AirFlow Fan Speed(rpm) Status
----------------------------------------------------------------
1 up AC NORMAL 1 10704 up
2 up AC NORMAL 1 10912 up
-- Fan Status --
FanTray Status AirFlow Fan Speed(rpm) Status
----------------------------------------------------------------
1 up NORMAL 1 10983 up
2 up NORMAL 1 11045 up
3 up NORMAL 1 11045 up
4 up NORMAL 1 10983 up

Recover access to USB on BS2 switch

During a firmware upgrade, it is possible that when you query the content of the USB, the content is shown
empty. To solve the issue, you have to unplug and plug in the USB. Once it is inserted again, the content will
be visible. But it is not always possible to easily have access to the switch to perform the plug out/in operation.
The following steps show how to recover USB access without unplugging the USB.
1. Check the content of the USB:
Switch-A# dir usb

Directory contents for folder:

Date (modified) Size (bytes) Name
--------------------- ------------ --------------------------
2. Pass in “Linux mode”. Depending on the situation, you may be asked to enter the password.
# system bash
3. Check if the USB is still seen by the Linux kernel.
# sudo fdisk-l
admin@Switch-A:/home/admin$ sudo fdisk -l
[sudo] password for admin:

Device Boot Start End Sectors Size Id Type

/dev/sdbl 32 3987455 3987424 1.9G e W95 FAT16 (LBA)
4. Manually mount the USB to the /mnt/usb mount point.
# sudo mount -t vfat <usb-drive-path> /mnt/usb
admin@switch-A:/home/admin$ sudo mount -t vfat /dev/sdbl /mnt/usb
5. Check if the USB was correctly mounted.
# df -h
admin@Switch-A:/home/admin$ df -h
Filesystem Size Used Avail Use% Mounted on
udev 2.0G 0 2.0G 0% /dev
tmpfs 392M 1.3M 391M 1% /run
/dev/mapper/OS10-SYSROOT 14G 5.4G 7.2G 43% /os10
tmpfs 2.0G 48K 2.0G 1% /dev/shm
tmpfs 5.0M 0 5.0M 0% /run/lock
tmpfs 2.0G 0 2.0G 0% /sys/fs/cgroup
/dev/sda4 6.8M 2.9M 3.4M 47% /mnt/boot
/dev/mapper/OS10-LICENSE 27M 399K 25M 2% /mnt/license
/dev/sda2 120M 17M 95M 16% /mnt/onie-boot
overlay 14G 5.4G 7.2G 43% /opt/dell/os10/cli
/dev/sdbl 2.0G 449M 1.5G 24% /mnt/usb
6. Exit the “Linux mode”.
# exit
7. Check the content of the USB.
Switch-A# dir usb

Directory contents for folder: usb

Date (modified) Size (bytes) Name
2020-01-30T22:09:34Z 469555419 PKGS_OS10-Enterprise-10.5.3.2.89

R5915614 /00 BS2–10G Series 53

 Troubleshooting

buster-installer-x86_64.bin
2022-03-14T07:33:40Z 2537 Switch-A.txt
2022-03-14T07:33:40Z 2538 Switch-B.txt
2022-03-14T07:33:40Z 2539 Switch-C.txt
2022-03-14T07:33:40Z 179 Switch-D.pol
2022-03-14T07:33:40Z 2705 Switch-D.xsf
You can now proceed with the work you were doing.

54 R5915614 /00 BS2–10G Series

Switch
configuration
commands 12

R5915614 /00 BS2–10G Series 55

 Switch configuration commands

12.1 Switch configuration commands

Switch configuration commands explained
The example below explains the switch configuration commands.
1. Define the name of the switch:
hostname switchA
2. Define the profile of the switch (only needed for BS2-10G 48P):
switch-port-profile 1/1 profile-6
3. Define usage of QSFP interfaces:
interface breakout 1/1/25 map 100g-1x
interface breakout 1/1/26 map 10g-4x
interface breakout 1/1/27 map 40g-1x
interface breakout 1/1/28 map 40g-1x
interface breakout 1/1/29 map 100g-1x
interface breakout 1/1/30 map 10g-4x
4. Enable IP multicast forwarding:
ip multicast-routing
5. Enable BPDU guard to recover from ports disabled by Spanning Tree:
errdisable recovery cause bpduguard
6. Configure a loopback vlan to configure the rendez-vous point for multicasting:
interface loopback1
no shutdown
ip address 192.168.255.1/32
ip pim sparse-mode
ip ospf 100 area 0.0.0.0
7. Configure the functional vlans:
interface vlan11
description OR1
no shutdown
ip address 192.168.11.1/24
ip igmp version 2
ip igmp snooping fast-leave
ip pim sparse-mode
ip ospf 100 area 0.0.0.0
ip ospf passive
8. Configure Backbone vlans for inter-switch connection:
interface vlan101
description Backbone_1
no shutdown
ip address 192.168.200.2/30
ip igmp snooping mrouter interface ethernet1/1/25
ip pim sparse-mode
ip ospf 100 area 0.0.0.0
9. Configure the interfaces 1 – 24:
interface range ethernet1/1/1-1/1/24
no shutdown
switchport mode access
switchport access vlan 11
flowcontrol receive on
spanning-tree bpduguard enable
spanning-tree port type edge
10. A breakout cable to 4x 10G is configured as follows:
interface range ethernet1/1/26:1-1/1/26:4
no shutdown
switchport access vlan 11
flowcontrol receive on
spanning-tree bpduguard enable

56 R5915614 /00 BS2–10G Series

 Switch configuration commands

spanning-tree port type edge

11. Configure the 100G Backbone ports:
interface ethernet1/1/25
no shutdown
switchport mode access
switchport access vlan 101
flowcontrol receive on
12. Delete the multicast access-list configuration from the switch:
no ip access-list acl-rp
13. Define the multicast access-list for this switch:
ip access-list acl-rp
seq 10 permit ip any 239.1.11.0/24
seq 20 permit ip any 239.1.12.0/24
seq 30 permit ip any 239.255.255.0/24
seq 40 permit ip any 224.2.127.254/32
14. Enable ospf:
router ospf 100
15. Configure the dhcp servers on each vlan:
ip dhcp server
no disable
pool vlan11
network 192.168.11.0/24
default-router 192.168.11.1
range 192.168.11.6 192.168.11.254
pool vlan12
network 192.168.12.0/24
default-router 192.168.12.1
range 192.168.12.6 192.168.12.254
16. Enable pim:
ip pim bsr-candidate loopback1
ip pim rp-candidate loopback1 priority 10 acl acl-rp

R5915614 /00 BS2–10G Series 57

 Switch configuration commands

58 R5915614 /00 BS2–10G Series

Important
information 13

R5915614 /00 BS2–10G Series 59

 Important information

13.1 Legal disclaimer

Disclaimer notice
Although every attempt has been made to achieve technical accuracy in this document, we assume no
responsibility for errors that may be found. Our goal is to provide you with the most accurate and usable
documentation possible; if you discover errors, please let us know.
Barco software products are the property of Barco. They are distributed under copyright by Barco NV or Barco
Inc., for use only under the specific terms of a software license agreement between Barco NV or Barco Inc.
and the licensee. No other use, duplication, or disclosure of a Barco software product, in any form, is
authorized.
The specifications of Barco products are subject to change without notice.

Trademarks
All trademarks and registered trademarks are property of their respective owners.

Copyright notice
This document is copyrighted. All rights are reserved. Neither this document, nor any part of it, may be
reproduced or copied in any form or by any means - graphical, electronic, or mechanical including
photocopying, taping or information storage and retrieval systems - without written permission of Barco.
© 2022 Barco NV all rights reserved.

13.2 Open source license information

Open source license information
This product contains software components released under an Open Source license. You acknowledge living
up to the conditions of each separate Open Source Software license.
A list of the Open Source Software components used is available in the applicable EULA, through the “My
Barco” section of the Barco website or through other (online) means.
Copyright on each Open Source Software component belongs to the respective initial copyright holder, each
additional contributor and/or their respective assignee(s), as may be identified in the respective Open Source
Software documentation, source code, README file, or otherwise. You shall not remove or obscure or
otherwise alter the respective copyrights.
EACH SEPARATE OPEN SOURCE SOFTWARE COMPONENT AND ANY RELATED DOCUMENTATION
ARE PROVIDED "AS IS" WITHOUT EXPRESS OR IMPLIED WARRANTY INCLUDING, BUT NOT LIMITED
TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
IN NO EVENT SHALL THE COPYRIGHTHOLDER OR ANY OTHER CONTRIBUTOR BE LIABLE FOR
DIRECT, INCIDENTAL, SPECIAL, EXEMPLARY OR CONSEQUENTIAL DAMAGES, EVEN IF ADVISED OF
THE POSSIBILITY OF SUCH DAMAGES, HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY.
MORE INFORMATION/DETAILS IS TO BE FOUND IN EACH SPECIFIC OPEN SOURCE LICENSE.
With respect to GPL, LGPL or similar licenses with regard to corresponding source code access and
automatic license terms applicability:
• You acknowledge living up to the conditions of each such specific applicable Open Source Software
license. You are responsible for your own additions, changes or modifications without any recourse or
claim towards Barco whatsoever. You further acknowledge that any such additions, changes or
modifications may impair the ability of Barco – at Barco’s sole discretion - to continue to provide service,
warranties, software updates, fixes, maintenance, access or such similar abilities, without any recourse or
claim towards Barco whatsoever.
• Barco offers to provide the corresponding source code, and shall make the corresponding source code
available to you via email or download link, except where the applicable license entitles you to require
Barco to provide you the corresponding source code on a tangible medium, in which case Barco will
charge you for the actual costs of performing such distribution, such as the cost of media, shipping and
handling. You may exercise this option upon written request to Barco N.V, attn. legal department,
Beneluxpark 21, 8500 Kortrijk (Belgium). This offer is valid for a period of three (3) years from the date of
the distribution of this product by Barco.

60 R5915614 /00 BS2–10G Series

 Important information

13.3 Data protection

Data processing
Any personal data processed through the Barco Nexxis OR System must be processed in accordance with
applicable data protection laws. When using the Barco Nexxis OR System, no irrelevant or unnecessary
personal data or data concerning health may be provided to Barco. Appropriate, physical, technical and
organizational measures to protect personal data against accidental, unauthorized or unlawful destruction,
loss, alteration, disclosure or access (“Personal Data Breach”) must be taken and maintained. Notify Barco,
without undue delay, about any Personal Data Breach that may also impact Barco or the security of Barco
systems, products or services.
Process personal data only if necessary in order to use the Nexxis OR system as required to comply with legal
or regulatory obligations. When the personal data is no longer needed, remove the personal data from the
Nexxis OR registry.

13.4 Cybersecurity
13.4.1 Nexxis Security Requirements
Physical security (~ Hospital IT security standard ITU-T….)
The operating environment must provide physical security for the medical device via security measures
such as:
First of all, the components of Nexxis and the area or location of installation need to be physically secured.
This can be achieved via the following measures:
• Regulated and authenticated physical access enforced via suitable technical measures (e.g. badges).
• Physical security policy defining roles and access rights, including for physical access to the medical
device.
• Use of segregated, secure areas (operating rooms) with appropriate access controls.

User access and session management

The following measures must be imposed on the full system and operating environment into which Nexxis is
used:
• User access management must be implemented:
- User accounts must be created according to a least privilege principle
- User accounts must be uniquely identifiable: no shared generic accounts
- RBAC principles must apply where possible:
◦ Create roles (or groups)
◦ Assign the least privileges possible to roles/groups
◦ Assign users to roles/groups
• Session management measures must be implemented (e.g. session timeouts).
• Use of strong passwords in accordance with NIST Special Publication 800-63.
• Brute force protection must be in place to protect against password guessing towards the integrated
environment.
• For sensitive actions, meaning any action whereby the integrated solution requires administrator level
access resulting in configuration changes of the product, within the operating environment, the use of
multi-factor authentication is expected.
With regard to NMS, the following measures and actions need to be taken:
• The default credentials that come with an initial install of NMS for the admin user must be changed.
• When changing these credentials, the new credentials must adhere to NIST Special Publication 800-63.
With regard to any other components of the Nexxis OR, such as network switches, the following must apply:
• No authentication with an empty password is allowed. If devices are delivered by default with an empty
password, these must be set before placing the product in the operating room. Any credentials set must
comply with industry standardized security and privacy control, such as NIST Special Publication 800-63.

R5915614 /00 BS2–10G Series 61

 Important information

With regard to third party equipment, the following must apply:

• The operator shall make sure that third party equipment that is linked to the Barco Nexxis OR has
measures in place to safe-guard its integrity and prevent unauthorized access.

Malware protection
The operating environment must provide the following measures to protect against malware:
• An antivirus/anti-malware software must be in place that is also kept up to date.
• A host-based intrusion detection/prevention solution must be in place.
• Any security solution provided by the integrator cannot compromise the correct functioning of Nexxis ORs.

Network security measures

The operating environment must provide the following network security measures:
• A firewall must be in place that only allows connectivity as required to the component in which NMS is
integrated. This can either be a host-based or network-based firewall.
• Network segmentation must be in place to protect NMS and all other Nexxis OR components from direct
access from the external hospital network. This means:
- No direct exposure of the NMS web interface or API to the hospital network
- No exposure of the NMS web interface by embedding it in an I-frame within any other web
application and thereby making it directly accessible
• Traffic filtering must be in place: on a network level, access must be restricted to the bare minimum,
meaning if the entire hospital network is not allowed to connect towards the integrated solution, then this
should be restricted to the bare minimum.

System hardening
On the system where NMS is integrated, the following must apply:
• Application whitelisting must be in place.
• Exclusive use of genuine software and ban of all illegitimate software and applications must be in place.
• Install only software programs necessary for the intended use of the operating environment.
• Principles of system hardening must be applied:
- Attack surface reduction by removing any unnecessary services
- Attack surface reduction by removing all unnecessary network access
- Disable root/admin access: only login on the device with reduced privileges
- Remove or disable unneeded default accounts
- Disable non-interactive accounts
- Run all services with reduced and least privileges if technically possible
• Memory protection measures to block arbitrary code execution.
• Implement patching and updating:
- The operating environment should support patching without compromising interoperability/compatibility
- The integrator should have appropriate patch management processes to ensure that security patches
for medical devices are deployed in a timely manner
- The integrator should have appropriate patch management processes to ensure that the operating
environment (e.g. operating systems, applications) is up-to-date in terms of security
- The integrator must keep up with any new releases of Nexxis OR which contain security fixes to
guarantee the best security benefit for the hospitals

Data confidentiality & encryption

With regard to data confidentiality protection, the following measures must be in place with regard to
protection of data at rest and in transit within the operating environment:
• The system on which NMS is installed must make use of disk encryption to protect the confidentiality of
NMS and its data.
• Any connectivity to NMS or other Nexxis OR components must make use of secure connection standards,
as defined by the “Modern compatibility” at https://wiki.mozilla.org/Security/Server_Side_TLS or by NIST
Special Publication 800-52 Revision 2 - Guidelines for the Selection, Configuration, and Use of Transport
Layer Security (TLS) Implementations.

62 R5915614 /00 BS2–10G Series

 Important information

Integration specific requirements

For cases when the operating environment is a complex system integrating multiple medical devices and
other systems, the following measures are expected
• Partitioning mechanisms and network / traffic segmentation.
• Software integrity checks:
It is expected that at all times the installation media of Nexxis OR and the components it is being integrated
with are verified before installation (e.g. checksums, signatures, … of the installation media)

Incident response
In case the integrator detects a security incident that involves and impacts a Nexxis OR installation, the
integrator will report this without delay, using the Barco PSIRT process as described here:https://www.barco.
com/en/about-barco/legal/responsible-disclosure

Logging
The following measures and actions need to be taken:
• The integrator is required to implement the necessary logging solutions and processes for the total
integrated solution such that it also covers the integrated Nexxis OR components.
• This logging needs to be in place to such an extent that in case of a security incident in context of the
integrated solution the security impact on Nexxis OR can also be determined.
• These logs must be protected against modification.
• Logging must be linked to a centralized time synchronization solution.
• All logging events need to be provided with a timestamp.
• Minimum events to be logged include:
- Login/logout
- Data access:
◦ Data entry
◦ Data removal
◦ Data alteration

Threatmodeling
Once Nexxis OR has been integrated into the wider integrator solution, the following measures and actions
needs to be taken:
• An initial threat modeling is performed on the total integrated solution, including the integrated Nexxis OR
solution.
• Every time a significant change is done to the integrated product (features, components and other
products added or removed), a refresh of the threat modeling needs to be performed.
• Any high and critical identified risk that could have an impact on the Nexxis OR component needs to be
removed or mitigated before going forward with usage in a production environment.

Vulnerability scanning
The following measures and actions need to be taken:
• The integrator has to conduct regular vulnerability scanning on the operating environment to identify the
attack surface from an external attacker point of view.
• Vulnerability scanning should be performed every time a significant change is done to the integrated
product (features, components and other products added or removed) and/or at least once a month (e.g. to
keep track of monthly operating system level released patches).
• Any high and/or critical identified issue must be remediated as soon as possible.

Remote support connections

• Remote support connections to the integrated environment should only be established on an as-needed
basis and terminated immediately after the service intervention has ended.
• Remote support should only be initiated using strong authentication based on multi-factor authentication or
public/private keypairs.

R5915614 /00 BS2–10G Series 63

 Important information

• Remote support should only be done from machines that are fully secured, using the latest up-to-date
patches and running a working and up-to-date anti-malware solution.
• Remote support connections should be limited with regards to point of origin:
- Restrict by authorized users
- Restrict by IP-address
- Restrict to certain hosts in the internal network or those using the customer’s enterprise remote access
solution.
• Remote support connections must make use of uniquely identified user accounts, so that it is always
traceable who is providing the remote support and at what time.
• Remote support connections are only allowed over secure connections, e.g. using SSH, HTTPS or VPN
tunnels.
• The principle of least privilege must be enforced for remote support connections.
• Remote support connections over a public network are only allowed using VPN connections.

Data sanitization and disposal

• Protection of sensitive information, including encryption keys, patient data and other secrets, does not end
when taking a component of Nexxis OR out of commission. It is required that integrators and hospitals take
all necessary measures with regards to safe and secure disposal and data sanitization of any device being
replaced or taken out of commission.
• A reference for sanitization and disposal is NIST Special Publication 800-88 – Guidelines for Media
sanitization. MDR regulations expect at least that all devices are reset to their factory default settings and
that they are returned to Barco or physically destroyed.

End-customer training
Hospitals and their employees, as users of the integrated solution, have a role to play in keeping the solution
secure as well.
• Therefore, it is required that integrators guide hospitals with a secure usage of the solution by providing the
necessary training to hospital staff, so that they too can help maintaining the principles listed above on a
day-to-day basis.
• The people that operate or configure the NexxisOR system shall successfully pass the NexxisOR System
training offered by Barco or by the operator.

64 R5915614 /00 BS2–10G Series

R5915614 /00 | 2022-05-05

www.barco.com