{"id":4687,"date":"2025-02-17T21:16:19","date_gmt":"2025-02-18T02:16:19","guid":{"rendered":"https:\/\/dft.wiki\/?p=4687"},"modified":"2026-06-08T10:15:31","modified_gmt":"2026-06-08T14:15:31","slug":"dell-networking-operating-system-dnos-cheat-sheet","status":"publish","type":"post","link":"https:\/\/dft.wiki\/?p=4687","title":{"rendered":"Dell Networking Operating System (DNOS) Cheat Sheet"},"content":{"rendered":"<p>Initially, Dell released a proprietary operating system called <strong>DNOS<\/strong>, a real-time OS developed by Wind River Systems.<br \/>\nAfter acquiring Force10 Networks, Dell rebranded its network operating system as FTOS. While it is based on the Linux kernel, it remains proprietary due to Dell&#8217;s proprietary network layer.<br \/>\nLater, Dell introduced OS10, a Linux-based (Debian-based) operating system for network devices. It was initially released as open source, but Dell later changed its mind (what a shame!)<\/p>\n<hr \/>\n<p><strong>HIERARCHICAL COMMAND-LINE MODES<\/strong><\/p>\n<ul>\n<li><strong>User EXEC Mode<\/strong>\n<ul>\n<li><code>console&gt;<\/code>\n<ul>\n<li>Basic monitoring, no config access (e.g., <code>ping<\/code>, <code>show<\/code>).<\/li>\n<li>Privileged accounts do not see this mode.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li><strong>Privileged EXEC Mode<\/strong>\n<ul>\n<li><code>console&gt; enable<br \/>\nconsole#<\/code><\/p>\n<ul>\n<li>View configurations and diagnostics, but no direct changes.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li><strong>Global Configuration Mode<\/strong>\n<ul>\n<li><code>console# config<br \/>\nconsole(config)#<\/code><\/p>\n<ul>\n<li>Full configuration access.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<hr \/>\n<p><strong>MOST IMPORTANT COMMANDS<\/strong><\/p>\n<ul>\n<li><strong>Privileged EXEC Commands<\/strong>\n<ul>\n<li><code>disable<\/code> &#8211; Downgrade terminal privileges to User EXEC Mode.\n<ul>\n<li><code>disable<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>show<\/code> &#8211; Display running system information (e.g., interfaces, VLANs, routes).\n<ul>\n<li><code>show running-config<\/code><\/li>\n<li><code>show arp<\/code><\/li>\n<li><code>show ip route<\/code><\/li>\n<li><code>show ip interface<\/code><\/li>\n<li><code>show access-lists<\/code><\/li>\n<li><code>show vlan<\/code><\/li>\n<li><code>show ip dhcp snooping binding<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>set<\/code> &#8211; Configure various system settings.\n<ul>\n<li><code>set interface active gigabitethernet 1\/0\/48<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>!<\/code> &#8211; Comment symbol. The line is not processed.\n<ul>\n<li><code>! This is a comment and will not be interpreted.<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>reload<\/code> &#8211; Restart the switch or stack (i.e., reboot).\n<ul>\n<li><code>reload<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>ping<\/code> &#8211; Send ICMP echo requests to test connectivity.\n<ul>\n<li><code>ping 8.8.8.8<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>traceroute<\/code> &#8211; Trace the path packets take to a destination.\n<ul>\n<li><code>traceroute ip 8.8.8.8<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>write<\/code> &#8211; Save the running configuration to memory (similar to <code>copy running-config startup-config<\/code>).\n<ul>\n<li><code>write<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>clear<\/code> &#8211; Reset functions such as clearing counters or sessions.\n<ul>\n<li><code>clear arp-cache<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>system<\/code> &#8211; System configuration.\n<ul>\n<li><code>system light duration 60<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<li><strong>Global Configuration Commands<\/strong>\n<ul>\n<li><code>do<\/code> &#8211; Run EXEC-level commands from configuration mode.\n<ul>\n<li><code>do show crypto certificate mycertificate<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>end<\/code> &#8211; Exit Global Configuration Mode and return to the previous mode.\n<ul>\n<li><code>end<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>interface<\/code> &#8211; Configure network interfaces.\n<ul>\n<li><code>interface vlan 1<\/code><\/li>\n<li><code>ip address 192.168.3.100 255.255.255.0<\/code><\/li>\n<li><code>end<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>crypto<\/code> &#8211; Configure global cryptographic features.\n<ul>\n<li><code>crypto certificate 1 generate key<\/code><\/li>\n<li><code>crypto key generate rsa<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>ip<\/code> \/ <code>ipv6<\/code> &#8211; Global IPv4\/IPv6 configuration.\n<ul>\n<li><code>ip host localhost 127.0.1.1<\/code><\/li>\n<li><code>ip https certificate 1<\/code><\/li>\n<li><code>ip http secure-server<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>vlan<\/code> &#8211; VLAN management.\n<ul>\n<li><code>vlan 2 state active media ethernet name LAN2<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>hostname<\/code> &#8211; Set the device hostname.\n<ul>\n<li><code>hostname SW1<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>logging<\/code> &#8211; Configure system logging.\n<ul>\n<li><code>logging host 192.168.3.200<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>no<\/code> &#8211; Negate or disable a command in configuration mode.\n<ul>\n<li><code>no logging host 192.168.3.200<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>spanning-tree<\/code> &#8211; Manage Spanning Tree Protocol.\n<ul>\n<li><code>spanning-tree mode stp<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>port-channel<\/code> &#8211; Configure port aggregation.\n<ul>\n<li><code>port-channel load-balance src-dst-mac-ip<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>qos<\/code> &#8211; Enable and configure Quality of Service.\n<ul>\n<li><code>qos basic<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>sflow<\/code> &#8211; Enable network traffic sampling.\n<ul>\n<li><code>sflow receiver 192.168.1.200<\/code><\/li>\n<\/ul>\n<\/li>\n<li><code>system<\/code> &#8211; System-level configuration options.\n<ul>\n<li><code>system fan always-on<\/code><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<hr \/>\n<p><strong>CONSIDERATIONS<\/strong><\/p>\n<p><strong>DNOS<\/strong> is similar to Cisco IOS in both look and feel, making it easy to get familiar with quickly.<\/p>\n<ul>\n<li><strong>Security Considerations:<\/strong>\n<ul>\n<li>Always prefer <strong>SSH<\/strong> over <strong>Telnet<\/strong> and <strong>HTTPS<\/strong> over <strong>HTTP<\/strong>. There is no reason to use legacy protocols.<\/li>\n<li>Enable <strong>port security<\/strong> at the appropriate level for your environment and disable unused ports.<\/li>\n<li>Limit <strong>management<\/strong> access to a dedicated management VLAN.<\/li>\n<li>Limit physical access to the <strong>Console<\/strong> port and protect it with a password.<\/li>\n<li>Consider full physical segregation (air gap) for your <strong>Out-Of-Band (OOB)<\/strong> network.<\/li>\n<li>Enable <strong>DHCP Snooping<\/strong>, <strong>Dynamic ARP Inspection (DAI)<\/strong>, and <strong>Storm Control<\/strong>.<\/li>\n<li>Set up a <strong>remote centralized logging<\/strong> server and <strong>AAA<\/strong> for better control and visibility.<\/li>\n<li>Disable unnecessary features (e.g., auto-discovery) and keep the <strong>firmware<\/strong> up to date.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<ul>\n<li><strong>Important Reminders:<\/strong>\n<ul>\n<li><strong>Back up<\/strong> the running configuration before making any changes.<\/li>\n<li>Save (<code>write<\/code>) the configuration to the <strong>startup configuration<\/strong> to prevent rollback on the next reboot or power cycle.<\/li>\n<li>Consider using automation tools like <strong>Ansible<\/strong> for remote backups, audits, and source control of your configuration.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Initially, Dell released a proprietary operating system called DNOS, a real-time OS developed by Wind [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-4687","post","type-post","status-publish","format-standard","hentry","category-ccna"],"_links":{"self":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/4687","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4687"}],"version-history":[{"count":17,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/4687\/revisions"}],"predecessor-version":[{"id":5615,"href":"https:\/\/dft.wiki\/index.php?rest_route=\/wp\/v2\/posts\/4687\/revisions\/5615"}],"wp:attachment":[{"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4687"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4687"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dft.wiki\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4687"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}