M4300-24X¶
M4300-24X (XSM4324CS)¶
The XSM4324CS is a Fully Managed 10G aggregation switch running FASTPATH
12.0.13.8, reachable over SNMP, the Cheetah /v1 web UI, and the FASTPATH
CLI on SSH or telnet.
At a glance¶
Field |
Value |
|---|---|
Registry key |
|
Product name |
M4300-24X (XSM4324CS) |
Class |
fully managed |
Ports |
28 |
PoE (PSE) ports |
0 |
Backends |
|
SNMP vendor subtree |
|
VLAN write dialect |
FASTPATH vendor switchport table |
MAC/FDB table |
yes |
Live-verified at 10.1.5.13. Its capture is committed at
tests/fixtures/captures/m4300-24x.json and its mock seed is
seed_m4300_24x().
What works, over which protocol¶
Operation |
What it does |
||||
|---|---|---|---|---|---|
Per-port link/admin status |
✓ |
✓ |
✓ |
✓ |
|
Per-port octet/packet counters |
✓ |
✓ |
✓ |
✓ |
|
VLAN list with tagged/untagged members |
✓ |
✓ |
✓ |
✓ |
|
Per-port PVID |
✓ |
✓ |
✓ |
✓ |
|
LLDP neighbour table |
✓ |
✓ |
✓ |
✓ |
|
MAC/FDB forwarding table |
✓ |
✓ |
✓ |
✓ |
|
Per-port PoE status and power draw |
|||||
Fan/PSU/temperature sensors |
✓ |
✓ |
✓ |
✓ |
|
Management IP configuration |
✓ |
✓ |
✓ |
✓ |
|
The switch’s host name |
✓ |
✓ |
✓ |
||
Local login accounts and their access level |
✓ |
✓ |
✓ |
||
Which management services (http/https/telnet/ssh) are enabled |
✓ |
✓ |
✓ |
||
Remote-logging configuration and collectors |
✓ |
✓ |
✓ |
✓ |
|
Full NSDP device record |
|||||
Bring a port up or down |
✓ |
✓ |
✓ |
✓ |
|
Enable or disable PoE on a port |
|||||
Power-cycle a PoE port |
|||||
Clear a latched PoE fault |
|||||
Set or clear a port’s description |
✓ |
✓ |
✓ |
||
Force a port’s speed/duplex, or restore auto-negotiation |
✓ |
✓ |
|||
Turn IEEE 802.3x flow control on or off for a port |
✓ |
✓ |
|||
Set a port’s PVID |
✓ |
✓ |
✓ |
✓ |
|
Set a port tagged/untagged/excluded on a VLAN |
✓ |
✓ |
✓ |
✓ |
|
Create a VLAN |
✓ |
✓ |
✓ |
||
Delete a VLAN |
✓ |
✓ |
✓ |
||
Set the management IP/mask/gateway |
✓ |
✓ |
✓ |
✓ |
|
Set the switch’s host name |
✓ |
✓ |
✓ |
||
Turn remote logging on or off |
✓ |
✓ |
✓ |
||
Add a remote syslog collector |
✓ |
✓ |
|||
Remove a remote syslog collector |
✓ |
✓ |
✓ |
✓ |
|
Upload an HTTPS certificate over the web UI |
|||||
Deploy an HTTPS certificate via FASTPATH |
✓ |
✓ |
M4300-24X (XSM4324CS) has no PSE ports, so it has no PoE to report or set
model ‘m4300-24x’ web UI has no page for get_poe (Per-port PoE status and power draw)
model ‘m4300-24x’ web UI has no page for get_hostname (The switch’s host name)
get_users is served only over CONSOLE, HTTP, SSH, TELNET
get_services is served only over CONSOLE, HTTP, SSH, TELNET
model ‘m4300-24x’ web UI has no page for set_poe (Enable or disable PoE on a port)
model ‘m4300-24x’ web UI has no page for cycle_poe (Power-cycle a PoE port)
model ‘m4300-24x’ web UI has no page for clear_poe_fault (Clear a latched PoE fault)
model ‘m4300-24x’ web UI has no page for set_port_description (Set or clear a port’s description)
set_port_speed is served only over CONSOLE, HTTP, SSH, TELNET
model ‘m4300-24x’ web UI has no page for set_port_speed (Force a port’s speed/duplex, or restore auto-negotiation)
model ‘m4300-24x’ web UI carries no CSRF ‘hash’ token, which the HTTP create_vlan writer requires
model ‘m4300-24x’ web UI carries no CSRF ‘hash’ token, which the HTTP delete_vlan writer requires
model ‘m4300-24x’ web UI has no page for set_hostname (Set the switch’s host name)
set_syslog_enabled is served only over CONSOLE, SNMP, SSH, TELNET
this model takes a certificate by SCP file-copy to the switch (FastpathScpUpdater), not over the web UI – use upload_certificate_scp
Measured behaviour¶
No PoE at all. This SKU has no PSE silicon, so
get_poe() and every PoE write are refused —
identically on SNMP, HTTP and the CLI, instead of SNMP handing back an empty
list from an empty pethPsePortTable while the other two raise. That
consistency is deliberate; see Support.
VLAN membership is written through the vendor switchport table, not
Q-BRIDGE. The standard static PortList columns here are read-only mirrors
that answer commitFailed even when written with byte-identical content, and
dot1qVlanStaticUntaggedPorts is worse than read-only: a SET returns
noError and is then silently discarded. The registry records this as
snmp_vlan_write = fastpath_switchport;
SNMP has the full derivation.
The port count is nominal. port_count is 28 because that value also
sizes the VLAN and port bitmaps, but the device reports 24 physical ports.
get_stats() over the CLI iterates the ports
the switch itself reports rather than trusting the registry — which is what
stopped it inventing counters for four ports that do not exist.
Protocols¶
SNMP — the default backend, vendor subtree
4526.10.HTTP web UI — the
CHEETAH_V1scheme: every page under/v1/, with aRefererheader required as CSRF protection.FASTPATH CLI — SSH or telnet; also the only route for
upload_certificate_scp(), since this firmware takes a certificate bycopy scp://rather than an HTTP form.