3Com 8800 Switch 8800 network switch Command Reference Guide
Below you will find brief information for network switch Switch 8800. The 3Com Switch 8800 is a high-performance, high-density Gigabit Ethernet switch that offers advanced features such as VLANs, QoS, and security. It can be used in a variety of network applications, such as campus networks, data centers, and service provider networks.
Advertisement
Advertisement
www.3com.com
Part No. DUA1750-2CAA01
Published: December 2005
3Com Switch 8800
Command Reference Guide
Copyright © 2005, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.
3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.
3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named
LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are provided to you
subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR
52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in other countries.
3Com, the 3Com logo, are registered trademarks of 3Com Corporation.
Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
UNIX is a registered trademark in the United States and other countries, licensed exclusively through
X/Open Company, Ltd.
All other company and product names may be trademarks of the respective companies with which they are associated.
3Com Corporation
350 Campus Drive
Marlborough, MA
01752-3064
About This Manual
This manual applies to the 3Com Switch 8800.
Related Manuals
The related manuals are listed in the following table.
Manual
3Com Switch 8800 Switch
Installation Manual
3Com Switch 8800 Switch
Configuration Manual
It provides information for the system installation, booting, hardware/software maintenance & monitoring.
Content
It includes getting started, port, VLAN, network protocols, routing protocols, multicast protocols,
QoS/ACL, MPLS, STP, security, reliability, and system management.
Intended Audience
z z z
The manual is intended for the following readers:
Network engineers
Network administrators
Customers who are familiar with network fundamentals
3
Switch 8800 Command Reference Guide About This Manual
Conventions
The manual uses the following conventions:
I. General conventions
Arial
Convention
Boldface
Courier New
Description
Normal paragraphs are in Arial.
Headings are in Boldface.
Terminal Display is in Courier New.
II. Command conventions
Convention
Boldface
italic
[ ]
{ x | y | ... }
[ x | y | ... ]
{ x | y | ... } *
[ x | y | ... ] *
#
Description
The keywords of a command line are in Boldface.
Command arguments are in italic.
Keywords or arguments in square brackets [ ] are optional.
Alternative items are grouped in braces and separated by vertical bars. One is selected.
Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected.
Alternative items are grouped in braces and separated by vertical bars. A minimum of one or a maximum of all can be selected.
Optional items are grouped in square brackets and separated by vertical bars. Many or none can be selected.
A line starting with the # sign is comments.
III. GUI conventions
Convention
< >
[ ]
/
Description
Button names are inside angle brackets. For example, click the <OK> button.
Window names, menu items, data table and field names are inside square brackets. For example, pop up the [New
User] window.
Multi-level menus are separated by forward slashes. For example, [File/Create/Folder].
4
Switch 8800 Command Reference Guide About This Manual
IV. Keyboard operation
Format
<Key>
<Key1+Key2>
<Key1, Key2>
Description
Press the key with the key name inside angle brackets. For example, <Enter>, <Tab>, <Backspace>, or <A>.
Press the keys concurrently. For example, <Ctrl+Alt+A> means the three keys should be pressed concurrently.
Press the keys in turn. For example, <Alt, A> means the two keys should be pressed in turn.
V. Mouse operation
Action
Select
Click
Double-Click
Drag
Description
Press and hold the primary mouse button (left mouse button by default).
Select and release the primary mouse button without moving the pointer.
Press the primary mouse button twice continuously and quickly without moving the pointer.
Press and hold the primary mouse button and move the pointer to a certain position.
VI. Symbols
Eye-catching symbols are also used in the manual to highlight the points worthy of special attention during the operation. They are defined as follows:
Caution: Means reader be extremely careful during the operation.
Note: Means a complementary description.
5
3Com Switch 8800 Command Reference Guide TOC
Table of Contents
Chapter 1 Logging into Switch Commands................................................................................ 1-1
1.1 Logging into Switch Commands ........................................................................................ 1-1
1.1.1 authentication-mode................................................................................................ 1-1
1.1.2 auto-execute command........................................................................................... 1-1
1.1.3 command-privilege level ......................................................................................... 1-2
1.1.4 databits.................................................................................................................... 1-3
1.1.5 display history-command ........................................................................................ 1-4
1.1.6 display user-interface .............................................................................................. 1-4
1.1.7 display users ........................................................................................................... 1-6
1.1.8 flow-control .............................................................................................................. 1-7
1.1.9 free user-interface ................................................................................................... 1-8
1.1.10 header ................................................................................................................... 1-8
1.1.11 history-command max-size ................................................................................. 1-10
1.1.12 idle-timeout.......................................................................................................... 1-11
1.1.13 language-mode ................................................................................................... 1-11
1.1.14 lock ...................................................................................................................... 1-12
1.1.15 modem ................................................................................................................ 1-12
1.1.16 modem auto-answer ........................................................................................... 1-13
1.1.17 modem timer answer........................................................................................... 1-14
1.1.18 parity.................................................................................................................... 1-14
1.1.19 protocol inbound.................................................................................................. 1-15
1.1.20 quit....................................................................................................................... 1-15
1.1.21 return ................................................................................................................... 1-16
1.1.22 screen-length....................................................................................................... 1-17
1.1.23 send..................................................................................................................... 1-17
1.1.24 service-type telnet ............................................................................................... 1-18
1.1.25 set authentication password................................................................................ 1-19
1.1.26 shell ..................................................................................................................... 1-20
1.1.27 speed................................................................................................................... 1-21
1.1.28 stopbits ................................................................................................................ 1-21
1.1.29 super ................................................................................................................... 1-22
1.1.30 super password ................................................................................................... 1-23
1.1.31 sysname .............................................................................................................. 1-24
1.1.32 system-view......................................................................................................... 1-24
1.1.33 telnet.................................................................................................................... 1-25
1.1.34 user-interface ...................................................................................................... 1-25
1.1.35 user privilege level .............................................................................................. 1-26
Chapter 2 Ethernet Port Configuration Commands................................................................... 2-1
2.1 Ethernet Port Configuration Commands............................................................................ 2-1
2.1.1 broadcast-suppression............................................................................................ 2-1
TOC-1
3Com Switch 8800 Command Reference Guide TOC
2.1.2 copy configuration ................................................................................................... 2-1
2.1.3 description ............................................................................................................... 2-2
2.1.4 display counters ...................................................................................................... 2-3
2.1.5 display interface ...................................................................................................... 2-4
2.1.6 display port .............................................................................................................. 2-7
2.1.7 display port vlan-vpn ............................................................................................... 2-8
2.1.8 duplex...................................................................................................................... 2-8
2.1.9 flow-control .............................................................................................................. 2-9
2.1.10 link-status hold .................................................................................................... 2-10
2.1.11 interface............................................................................................................... 2-10
2.1.12 jumboframe enable ............................................................................................. 2-11
2.1.13 loopback .............................................................................................................. 2-12
2.1.14 mdi....................................................................................................................... 2-12
2.1.15 port access vlan .................................................................................................. 2-13
2.1.16 port hybrid pvid vlan ............................................................................................ 2-13
2.1.17 port hybrid vlan.................................................................................................... 2-14
2.1.18 port link-type........................................................................................................ 2-15
2.1.19 port-mode ............................................................................................................ 2-16
2.1.20 port trunk permit vlan .......................................................................................... 2-16
2.1.21 port trunk pvid vlan.............................................................................................. 2-17
2.1.22 reset counters interface....................................................................................... 2-18
2.1.23 shutdown ............................................................................................................. 2-18
2.1.24 speed................................................................................................................... 2-19
2.1.25 vlan-vpn enable ................................................................................................... 2-20
Chapter 3 Ethernet Link Aggregation Configuration Commands ............................................ 3-1
3.1 Ethernet Link Aggregation Configuration Commands ....................................................... 3-1
3.1.1 debugging lacp packet ............................................................................................ 3-1
3.1.2 debugging lacp state ............................................................................................... 3-2
3.1.3 debugging link-aggregation error ............................................................................ 3-2
3.1.4 debugging link-aggregation event ........................................................................... 3-3
3.1.5 display lacp system-id ............................................................................................. 3-4
3.1.6 display link-aggregation summary........................................................................... 3-4
3.1.7 display link-aggregation verbose............................................................................. 3-5
3.1.8 display link-aggregation interface............................................................................ 3-7
3.1.9 lacp enable .............................................................................................................. 3-8
3.1.10 lacp port-priority..................................................................................................... 3-9
3.1.11 lacp system-priority ............................................................................................... 3-9
3.1.12 link-aggregation................................................................................................... 3-10
3.1.13 link-aggregation group agg-id description........................................................... 3-10
3.1.14 link-aggregation group agg-id mode ................................................................... 3-11
3.1.15 port link-aggregation group ................................................................................. 3-12
3.1.16 reset lacp statistics .............................................................................................. 3-12
TOC-2
3Com Switch 8800 Command Reference Guide TOC
Chapter 4 VLAN Configuration Commands................................................................................ 4-1
4.1 VLAN Configuration Commands........................................................................................ 4-1
4.1.1 description ............................................................................................................... 4-1
4.1.2 display interface vlan-interface................................................................................ 4-1
4.1.3 display vlan.............................................................................................................. 4-3
4.1.4 interface vlan-interface............................................................................................ 4-4
4.1.5 shutdown ................................................................................................................. 4-4
4.1.6 vlan.......................................................................................................................... 4-5
4.2 Port-Based VLAN Configuration Commands .................................................................... 4-6
4.2.1 port .......................................................................................................................... 4-6
4.3 Protocol-Based VLAN Configuration Commands.............................................................. 4-7
4.3.1 display vlan-protocol interface................................................................................. 4-7
4.3.2 display vlan-protocol vlan........................................................................................ 4-7
4.3.3 port hybrid protocol-vlan vlan .................................................................................. 4-8
4.3.4 vlan-type protocol .................................................................................................... 4-9
Chapter 5 GARP/GVRP Configuration Commands.................................................................... 5-1
5.1 GARP Configuration Commands....................................................................................... 5-1
5.1.1 display garp statistics .............................................................................................. 5-1
5.1.2 display garp timer .................................................................................................... 5-2
5.1.3 garp timer ................................................................................................................ 5-2
5.1.4 garp timer leaveall ................................................................................................... 5-4
5.1.5 reset garp statistics ................................................................................................. 5-4
5.2 GVRP Configuration Commands....................................................................................... 5-5
5.2.1 display gvrp statistics .............................................................................................. 5-5
5.2.2 display gvrp status .................................................................................................. 5-6
5.2.3 gvrp ......................................................................................................................... 5-6
5.2.4 gvrp registration....................................................................................................... 5-7
Chapter 6 Super VLAN Configuration Commands .................................................................... 6-1
6.1 Super VLAN Configuration Commands ............................................................................. 6-1
6.1.1 display supervlan..................................................................................................... 6-1
6.1.2 subvlan .................................................................................................................... 6-2
6.1.3 supervlan................................................................................................................. 6-3
Chapter 7 IP Address Configuration Commands....................................................................... 7-1
7.1 IP Address Configuration Commands ............................................................................... 7-1
7.1.1 display ip host.......................................................................................................... 7-1
7.1.2 display ip interface .................................................................................................. 7-1
7.1.3 ip address................................................................................................................ 7-3
7.1.4 ip host...................................................................................................................... 7-5
Chapter 8 ARP Configuration Commands .................................................................................. 8-1
8.1 ARP Configuration Commands.......................................................................................... 8-1
8.1.1 anti-attack arp.......................................................................................................... 8-1
TOC-3
3Com Switch 8800 Command Reference Guide TOC
8.1.2 arp check enable ..................................................................................................... 8-1
8.1.3 arp static.................................................................................................................. 8-2
8.1.4 arp timer aging ........................................................................................................ 8-3
8.1.5 debugging arp ......................................................................................................... 8-4
8.1.6 display arp ............................................................................................................... 8-5
8.1.7 display arp timer aging ............................................................................................ 8-6
8.1.8 reset arp .................................................................................................................. 8-7
Chapter 9 DHCP Configuration Commands ............................................................................... 9-1
9.1 General DHCP Configuration Commands ......................................................................... 9-1
9.1.1 dhcp enable............................................................................................................. 9-1
9.1.2 dhcp select .............................................................................................................. 9-1
9.1.3 dhcp server detect................................................................................................... 9-2
9.2 DHCP Server Configuration Commands ........................................................................... 9-3
9.2.1 debugging dhcp server............................................................................................ 9-3
9.2.2 dhcp server dns-list ................................................................................................. 9-4
9.2.3 dhcp server domain-name ...................................................................................... 9-5
9.2.4 dhcp server expired................................................................................................. 9-6
9.2.5 dhcp server forbidden-ip ......................................................................................... 9-7
9.2.6 dhcp server ip-pool.................................................................................................. 9-7
9.2.7 dhcp server nbns-list ............................................................................................... 9-8
9.2.8 dhcp server netbios-type......................................................................................... 9-9
9.2.9 dhcp server option................................................................................................. 9-10
9.2.10 dhcp server ping.................................................................................................. 9-11
9.2.11 dhcp server static-bind ........................................................................................ 9-12
9.2.12 display dhcp server conflict ................................................................................. 9-13
9.2.13 display dhcp server expired ................................................................................ 9-14
9.2.14 display dhcp server free-ip .................................................................................. 9-15
9.2.15 display dhcp server ip-in-use .............................................................................. 9-15
9.2.16 display dhcp server statistics .............................................................................. 9-16
9.2.17 display dhcp server tree ...................................................................................... 9-18
9.2.18 dns-list ................................................................................................................. 9-20
9.2.19 domain-name ...................................................................................................... 9-21
9.2.20 expired................................................................................................................. 9-22
9.2.21 gateway-list ......................................................................................................... 9-22
9.2.22 nbns-list ............................................................................................................... 9-23
9.2.23 netbios-type......................................................................................................... 9-24
9.2.24 network................................................................................................................ 9-25
9.2.25 option................................................................................................................... 9-26
9.2.26 reset dhcp server conflict .................................................................................... 9-27
9.2.27 reset dhcp server ip-in-use.................................................................................. 9-27
9.2.28 reset dhcp server statistics.................................................................................. 9-28
9.2.29 static-bind ip-address .......................................................................................... 9-28
TOC-4
3Com Switch 8800 Command Reference Guide TOC
9.2.30 static-bind mac-address ...................................................................................... 9-29
9.3 DHCP Relay Configuration Commands .......................................................................... 9-30
9.3.1 debugging dhcp relay............................................................................................ 9-30
9.3.2 dhcp relay security ................................................................................................ 9-31
9.3.3 dhcp relay security address-check........................................................................ 9-32
9.3.4 dhcp-server detect ................................................................................................ 9-32
9.3.5 display dhcp relay address.................................................................................... 9-33
9.3.6 display dhcprelay-security..................................................................................... 9-34
9.3.7 ip relay address ..................................................................................................... 9-35
Chapter 10 DNS Configuration Commands .............................................................................. 10-1
10.1 Static DNS Configuration Commands ........................................................................... 10-1
10.1.1 ip host.................................................................................................................. 10-1
10.1.2 display ip host...................................................................................................... 10-1
10.2 Dynamic DNS Configuration Commands ...................................................................... 10-2
10.2.1 debugging dns..................................................................................................... 10-2
10.2.2 display dns domain ............................................................................................. 10-3
10.2.3 display dns dynamic-host.................................................................................... 10-4
10.2.4 display dns server ............................................................................................... 10-5
10.2.5 dns domain.......................................................................................................... 10-5
10.2.6 dns resolve .......................................................................................................... 10-6
10.2.7 dns server............................................................................................................ 10-6
10.2.8 reset dns dynamic-host ....................................................................................... 10-7
Chapter 11 IP Performance Configuration Commands ........................................................... 11-1
11.1 IP Performance Configuration Commands.................................................................... 11-1
11.1.1 display fib ............................................................................................................ 11-1
11.1.2 display fib ip_address.......................................................................................... 11-2
11.1.3 display fib acl....................................................................................................... 11-3
11.1.4 display fib | .......................................................................................................... 11-4
11.1.5 display fib ip-prefix .............................................................................................. 11-4
11.1.6 display fib statistics ............................................................................................. 11-5
11.1.7 display icmp statistics.......................................................................................... 11-5
11.1.8 display ip socket .................................................................................................. 11-7
11.1.9 display ip statistics .............................................................................................. 11-8
11.1.10 display tcp statistics ........................................................................................ 11-10
11.1.11 display tcp status............................................................................................. 11-12
11.1.12 display udp statistics ....................................................................................... 11-13
11.1.13 reset ip statistics.............................................................................................. 11-14
11.1.14 reset tcp statistics............................................................................................ 11-15
11.1.15 reset udp statistics .......................................................................................... 11-15
11.1.16 tcp timer fin-timeout......................................................................................... 11-16
11.1.17 tcp timer syn-timeout....................................................................................... 11-16
11.1.18 tcp window....................................................................................................... 11-17
TOC-5
3Com Switch 8800 Command Reference Guide TOC
Chapter 12 Static Route Configuration Commands ................................................................ 12-1
12.1 Display Commands of the Routing Table ...................................................................... 12-1
12.1.1 display ip routing-table ........................................................................................ 12-1
12.1.2 display ip routing-table acl................................................................................... 12-2
12.1.3 display ip routing-table ip_address...................................................................... 12-6
12.1.4 display ip routing-table ip_address1 ip_address2............................................... 12-8
12.1.5 display ip routing-table ip-prefix .......................................................................... 12-9
12.1.6 display ip routing-table protocol ........................................................................ 12-10
12.1.7 display ip routing-table radix ............................................................................. 12-12
12.1.8 display ip routing-table statistics ....................................................................... 12-13
12.1.9 display ip routing-table vpn-instance................................................................. 12-14
12.1.10 display ip routing-table verbose ...................................................................... 12-15
12.2 Static Route Configuration Commands ....................................................................... 12-16
12.2.1 delete static-routes all ....................................................................................... 12-16
12.2.2 delete vpn-instance ........................................................................................... 12-17
12.2.3 ip route-static..................................................................................................... 12-17
Chapter 13 RIP Configuration Commands ............................................................................... 13-1
13.1 RIP Configuration Commands ....................................................................................... 13-1
13.1.1 checkzero ............................................................................................................ 13-1
13.1.2 default cost .......................................................................................................... 13-2
13.1.3 display rip ............................................................................................................ 13-2
13.1.4 filter-policy export ................................................................................................ 13-4
13.1.5 filter-policy import ................................................................................................ 13-4
13.1.6 host-route ............................................................................................................ 13-5
13.1.7 import-route ......................................................................................................... 13-6
13.1.8 network................................................................................................................ 13-7
13.1.9 peer ..................................................................................................................... 13-8
13.1.10 preference ......................................................................................................... 13-8
13.1.11 reset .................................................................................................................. 13-9
13.1.12 rip .................................................................................................................... 13-10
13.1.13 rip authentication-mode................................................................................... 13-10
13.1.14 rip input............................................................................................................ 13-12
13.1.15 rip metricin....................................................................................................... 13-12
13.1.16 rip metricout..................................................................................................... 13-13
13.1.17 rip output ......................................................................................................... 13-14
13.1.18 rip split-horizon ................................................................................................ 13-14
13.1.19 rip version........................................................................................................ 13-15
13.1.20 rip work............................................................................................................ 13-16
13.1.21 summary.......................................................................................................... 13-17
13.1.22 timers............................................................................................................... 13-17
Chapter 14 OSPF Configuration Commands............................................................................ 14-1
14.1 OSPF Configuration Commands ................................................................................... 14-1
TOC-6
3Com Switch 8800 Command Reference Guide TOC
14.1.1 abr-summary ....................................................................................................... 14-1
14.1.2 area ..................................................................................................................... 14-2
14.1.3 asbr-summary ..................................................................................................... 14-2
14.1.4 authentication-mode............................................................................................ 14-3
14.1.5 debugging ospf.................................................................................................... 14-4
14.1.6 default cost .......................................................................................................... 14-5
14.1.7 default interval ..................................................................................................... 14-6
14.1.8 default limit .......................................................................................................... 14-6
14.1.9 default tag............................................................................................................ 14-7
14.1.10 default type........................................................................................................ 14-8
14.1.11 default-cost........................................................................................................ 14-9
14.1.12 default-route-advertise ...................................................................................... 14-9
14.1.13 display debugging ospf ................................................................................... 14-10
14.1.14 display ospf abr-asbr....................................................................................... 14-11
14.1.15 display ospf asbr-summary ............................................................................. 14-12
14.1.16 display ospf brief ............................................................................................. 14-13
14.1.17 display ospf cumulative ................................................................................... 14-15
14.1.18 display ospf error............................................................................................. 14-17
14.1.19 display ospf interface ...................................................................................... 14-19
14.1.20 display ospf lsdb.............................................................................................. 14-20
14.1.21 display ospf nexthop ....................................................................................... 14-23
14.1.22 display ospf peer ............................................................................................. 14-24
14.1.23 display ospf request-queue ............................................................................. 14-26
14.1.24 display ospf retrans-queue.............................................................................. 14-27
14.1.25 display ospf routing ......................................................................................... 14-28
14.1.26 display ospf vlink ............................................................................................. 14-29
14.1.27 filter-policy export ............................................................................................ 14-30
14.1.28 filter-policy import ............................................................................................ 14-31
14.1.29 import-route ..................................................................................................... 14-32
14.1.30 network............................................................................................................ 14-33
14.1.31 nssa................................................................................................................. 14-34
14.1.32 ospf.................................................................................................................. 14-34
14.1.33 ospf authentication-mode................................................................................ 14-35
14.1.34 ospf cost .......................................................................................................... 14-36
14.1.35 ospf dr-priority ................................................................................................. 14-37
14.1.36 ospf mib-binding .............................................................................................. 14-38
14.1.37 ospf mtu-enable .............................................................................................. 14-39
14.1.38 ospf network-type............................................................................................ 14-39
14.1.39 ospf timer dead ............................................................................................... 14-40
14.1.40 ospf timer hello ................................................................................................ 14-41
14.1.41 ospf timer poll .................................................................................................. 14-42
14.1.42 ospf timer retransmit ....................................................................................... 14-43
14.1.43 ospf trans-delay............................................................................................... 14-44
TOC-7
3Com Switch 8800 Command Reference Guide TOC
14.1.44 preference ....................................................................................................... 14-44
14.1.45 reset ospf......................................................................................................... 14-45
14.1.46 router id ........................................................................................................... 14-46
14.1.47 silent-interface ................................................................................................. 14-47
14.1.48 sham-link ......................................................................................................... 14-47
14.1.49 snmp-agent trap enable ospf .......................................................................... 14-48
14.1.50 spf-schedule-interval ....................................................................................... 14-49
14.1.51 stub.................................................................................................................. 14-50
14.1.52 vlink-peer......................................................................................................... 14-50
Chapter 15 Integrated IS-IS Configuration Commands ........................................................... 15-1
15.1 Integrated IS-IS Configuration Commands.................................................................... 15-1
15.1.1 area-authentication-mode ................................................................................... 15-1
15.1.2 cost-style ............................................................................................................. 15-2
15.1.3 debugging isis ..................................................................................................... 15-3
15.1.4 default-route-advertise ........................................................................................ 15-4
15.1.5 display isis interface ............................................................................................ 15-5
15.1.6 display isis lsdb ................................................................................................... 15-6
15.1.7 display isis mesh-group....................................................................................... 15-7
15.1.8 display isis peer................................................................................................... 15-7
15.1.9 display isis route.................................................................................................. 15-8
15.1.10 display isis spf-log ............................................................................................. 15-9
15.1.11 domain-authentication-mode........................................................................... 15-10
15.1.12 filter-policy export ............................................................................................ 15-12
15.1.13 filter-policy import ............................................................................................ 15-12
15.1.14 ignore-lsp-checksum-error .............................................................................. 15-13
15.1.15 import-route ..................................................................................................... 15-14
15.1.16 import-route isis level-2 into level-1 ................................................................ 15-15
15.1.17 isis ................................................................................................................... 15-15
15.1.18 isis authentication-mode ................................................................................. 15-16
15.1.19 isis circuit-level ................................................................................................ 15-17
15.1.20 isis cost............................................................................................................ 15-18
15.1.21 isis dis-priority.................................................................................................. 15-19
15.1.22 isis enable ....................................................................................................... 15-20
15.1.23 isis mesh-group ............................................................................................... 15-21
15.1.24 isis timer csnp.................................................................................................. 15-21
15.1.25 isis timer hello.................................................................................................. 15-22
15.1.26 isis timer holding-multiplier.............................................................................. 15-23
15.1.27 isis timer lsp..................................................................................................... 15-24
15.1.28 isis timer retransmit ......................................................................................... 15-25
15.1.29 is-level ............................................................................................................. 15-26
15.1.30 log-peer-change .............................................................................................. 15-26
15.1.31 md5-compatible............................................................................................... 15-27
TOC-8
3Com Switch 8800 Command Reference Guide TOC
15.1.32 network-entity .................................................................................................. 15-28
15.1.33 preference ....................................................................................................... 15-29
15.1.34 reset isis all...................................................................................................... 15-29
15.1.35 reset isis peer .................................................................................................. 15-30
15.1.36 set-overload..................................................................................................... 15-30
15.1.37 silent-interface ................................................................................................. 15-31
15.1.38 spf-delay-interval ............................................................................................. 15-32
15.1.39 spf-slice-size.................................................................................................... 15-32
15.1.40 summary.......................................................................................................... 15-33
15.1.41 timer lsp-max-age ........................................................................................... 15-34
15.1.42 timer lsp-refresh .............................................................................................. 15-35
15.1.43 timer spf........................................................................................................... 15-35
Chapter 16 BGP Configuration Commands.............................................................................. 16-1
16.1 BGP Configuration Commands ..................................................................................... 16-1
16.1.1 aggregate ............................................................................................................ 16-1
16.1.2 bgp ...................................................................................................................... 16-3
16.1.3 compare-different-as-med................................................................................... 16-3
16.1.4 confederation id................................................................................................... 16-4
16.1.5 confederation nonstandard ................................................................................. 16-5
16.1.6 confederation peer-as ......................................................................................... 16-6
16.1.7 dampening........................................................................................................... 16-6
16.1.8 debugging bgp..................................................................................................... 16-7
16.1.9 default local-preference....................................................................................... 16-8
16.1.10 default med........................................................................................................ 16-9
16.1.11 display bgp group............................................................................................ 16-10
16.1.12 display bgp network ........................................................................................ 16-11
16.1.13 display bgp paths ............................................................................................ 16-12
16.1.14 display bgp peer .............................................................................................. 16-13
16.1.15 display bgp routing-table ................................................................................. 16-14
16.1.16 display bgp routing-table as-path-acl .............................................................. 16-16
16.1.17 display bgp routing-table cidr .......................................................................... 16-17
16.1.18 display bgp routing-table community .............................................................. 16-18
16.1.19 display bgp routing-table community-list......................................................... 16-19
16.1.20 display bgp routing-table dampened............................................................... 16-20
16.1.21 display bgp routing-table different-origin-as.................................................... 16-21
16.1.22 display bgp routing-table flap-info ................................................................... 16-22
16.1.23 display bgp routing-table peer......................................................................... 16-23
16.1.24 display bgp routing-table regular-expression .................................................. 16-24
16.1.25 filter-policy export ............................................................................................ 16-25
16.1.26 filter-policy import ............................................................................................ 16-26
16.1.27 group ............................................................................................................... 16-27
16.1.28 import-route ..................................................................................................... 16-27
TOC-9
3Com Switch 8800 Command Reference Guide TOC
16.1.29 network............................................................................................................ 16-28
16.1.30 peer advertise-community............................................................................... 16-29
16.1.31 peer allow-as-loop........................................................................................... 16-29
16.1.32 peer as-number ............................................................................................... 16-30
16.1.33 peer as-path-acl export ................................................................................... 16-30
16.1.34 peer as-path-acl import ................................................................................... 16-31
16.1.35 peer connect-interface .................................................................................... 16-32
16.1.36 peer default-route-advertise ............................................................................ 16-33
16.1.37 peer description............................................................................................... 16-33
16.1.38 peer ebgp-max-hop ......................................................................................... 16-34
16.1.39 peer enable ..................................................................................................... 16-35
16.1.40 peer filter-policy export.................................................................................... 16-35
16.1.41 peer filter-policy import.................................................................................... 16-36
16.1.42 peer group ....................................................................................................... 16-37
16.1.43 peer ip-prefix export ........................................................................................ 16-37
16.1.44 peer ip-prefix import ........................................................................................ 16-38
16.1.45 peer next-hop-local ......................................................................................... 16-39
16.1.46 peer password................................................................................................. 16-40
16.1.47 peer public-as-only.......................................................................................... 16-41
16.1.48 peer reflect-client............................................................................................. 16-41
16.1.49 peer route-policy export .................................................................................. 16-42
16.1.50 peer route-policy import .................................................................................. 16-43
16.1.51 peer route-update-interval............................................................................... 16-43
16.1.52 peer shutdown................................................................................................. 16-44
16.1.53 peer timer ........................................................................................................ 16-45
16.1.54 preference ....................................................................................................... 16-45
16.1.55 reflect between-clients .................................................................................... 16-46
16.1.56 reflector cluster-id............................................................................................ 16-47
16.1.57 refresh bgp ...................................................................................................... 16-48
16.1.58 reset bgp ......................................................................................................... 16-48
16.1.59 reset bgp flap-info ........................................................................................... 16-49
16.1.60 reset bgp group ............................................................................................... 16-50
16.1.61 reset dampening ............................................................................................. 16-50
16.1.62 summary.......................................................................................................... 16-51
16.1.63 timer ................................................................................................................ 16-51
16.1.64 undo synchronization ...................................................................................... 16-52
Chapter 17 IP Routing Policy Configuration Commands........................................................ 17-1
17.1 IP Routing Policy Configuration Commands ................................................................. 17-1
17.1.1 apply as-path....................................................................................................... 17-1
17.1.2 apply community ................................................................................................. 17-2
17.1.3 apply cost ............................................................................................................ 17-3
17.1.4 apply cost-type .................................................................................................... 17-3
TOC-10
3Com Switch 8800 Command Reference Guide TOC
17.1.5 apply ip next-hop ................................................................................................. 17-4
17.1.6 apply isis.............................................................................................................. 17-5
17.1.7 apply local-preference......................................................................................... 17-5
17.1.8 apply origin .......................................................................................................... 17-6
17.1.9 apply tag.............................................................................................................. 17-7
17.1.10 display ip ip-prefix ............................................................................................. 17-7
17.1.11 display route-policy ........................................................................................... 17-8
17.1.12 filter-policy export .............................................................................................. 17-9
17.1.13 filter-policy import ............................................................................................ 17-10
17.1.14 if-match { acl | ip-prefix }.................................................................................. 17-11
17.1.15 if-match as-path .............................................................................................. 17-12
17.1.16 if-match community ......................................................................................... 17-12
17.1.17 if-match cost .................................................................................................... 17-13
17.1.18 if-match interface............................................................................................. 17-14
17.1.19 if-match ip next-hop......................................................................................... 17-15
17.1.20 if-match tag...................................................................................................... 17-16
17.1.21 ip as-path-acl................................................................................................... 17-16
17.1.22 ip community-list ............................................................................................. 17-17
17.1.23 ip ip-prefix........................................................................................................ 17-18
17.1.24 route-policy...................................................................................................... 17-19
Chapter 18 IGMP Snooping Configuration Commands........................................................... 18-1
18.1 IGMP Snooping Configuration Commands ................................................................... 18-1
18.1.1 display igmp-snooping configuration................................................................... 18-1
18.1.2 display igmp-snooping group .............................................................................. 18-2
18.1.3 display igmp-snooping statistics.......................................................................... 18-3
18.1.4 igmp-snooping..................................................................................................... 18-4
18.1.5 igmp-snooping host-aging-time........................................................................... 18-4
18.1.6 igmp-snooping max-response-time..................................................................... 18-5
18.1.7 igmp-snooping nonflooding-enable ..................................................................... 18-6
18.1.8 igmp-snooping router-aging-time ........................................................................ 18-6
18.1.9 reset igmp-snooping statistics............................................................................. 18-7
Chapter 19 Multicast VLAN Configuration Commands ........................................................... 19-1
19.1 Multicast VLAN Configuration Commands .................................................................... 19-1
19.1.1 service-type multicast.......................................................................................... 19-1
Chapter 20 IP Multicast Common Configuration Commands................................................. 20-1
20.1 IP Multicast Common Configuration Commands........................................................... 20-1
20.1.1 debugging multicast forwarding .......................................................................... 20-1
20.1.2 debugging multicast kernel-routing ..................................................................... 20-1
20.1.3 debugging multicast status-forwarding ............................................................... 20-2
20.1.4 display multicast forwarding-table ....................................................................... 20-3
20.1.5 display multicast routing-table............................................................................. 20-4
20.1.6 multicast .............................................................................................................. 20-6
TOC-11
3Com Switch 8800 Command Reference Guide TOC
20.1.7 multicast route-limit ............................................................................................. 20-7
20.1.8 multicast routing-enable ...................................................................................... 20-8
20.1.9 reset multicast forwarding-table .......................................................................... 20-8
20.1.10 reset multicast routing-table .............................................................................. 20-9
Chapter 21 IGMP Configuration Commands ............................................................................ 21-1
21.1 IGMP Configuration Commands.................................................................................... 21-1
21.1.1 debugging igmp................................................................................................... 21-1
21.1.2 display igmp group .............................................................................................. 21-1
21.1.3 display igmp interface ......................................................................................... 21-2
21.1.4 igmp enable......................................................................................................... 21-4
21.1.5 igmp group-limit................................................................................................... 21-4
21.1.6 igmp group-policy ................................................................................................ 21-5
21.1.7 igmp group-policy vlan ........................................................................................ 21-6
21.1.8 igmp host-join port............................................................................................... 21-7
21.1.9 igmp host-join vlan .............................................................................................. 21-8
21.1.10 igmp lastmember-queryinterval......................................................................... 21-8
21.1.11 igmp max-response-time................................................................................... 21-9
21.1.12 igmp robust-count ........................................................................................... 21-10
21.1.13 igmp timer other-querier-present..................................................................... 21-11
21.1.14 igmp timer query ............................................................................................. 21-11
21.1.15 igmp version .................................................................................................... 21-12
21.1.16 reset igmp group ............................................................................................. 21-13
Chapter 22 PIM Configuration Commands ............................................................................... 22-1
22.1 PIM Configuration Commands....................................................................................... 22-1
22.1.1 bsr-policy ............................................................................................................. 22-1
22.1.2 c-bsr .................................................................................................................... 22-2
22.1.3 c-rp ...................................................................................................................... 22-3
22.1.4 crp-policy ............................................................................................................. 22-4
22.1.5 debugging pim common...................................................................................... 22-5
22.1.6 debugging pim dm............................................................................................... 22-5
22.1.7 debugging pim sm ............................................................................................... 22-6
22.1.8 display pim bsr-info ............................................................................................. 22-7
22.1.9 display pim interface ........................................................................................... 22-8
22.1.10 display pim neighbor ......................................................................................... 22-9
22.1.11 display pim routing-table ................................................................................. 22-10
22.1.12 display pim rp-info ........................................................................................... 22-11
22.1.13 pim................................................................................................................... 22-13
22.1.14 pim bsr-boundary ............................................................................................ 22-13
22.1.15 pim dm............................................................................................................. 22-14
22.1.16 pim neighbor-limit ............................................................................................ 22-15
22.1.17 pim neighbor-policy ......................................................................................... 22-15
22.1.18 pim sm............................................................................................................. 22-16
TOC-12
3Com Switch 8800 Command Reference Guide TOC
22.1.19 pim timer hello ................................................................................................. 22-17
22.1.20 register-policy .................................................................................................. 22-17
22.1.21 reset pim neighbor .......................................................................................... 22-18
22.1.22 reset pim routing-table .................................................................................... 22-19
22.1.23 source-policy ................................................................................................... 22-20
22.1.24 static-rp............................................................................................................ 22-21
Chapter 23 MSDP Configuration Commands ........................................................................... 23-1
23.1 MSDP Configuration Commands................................................................................... 23-1
23.1.1 cache-sa-enable.................................................................................................. 23-1
23.1.2 debugging msdp.................................................................................................. 23-2
23.1.3 display msdp brief ............................................................................................... 23-2
23.1.4 display msdp peer-status .................................................................................... 23-3
23.1.5 display msdp sa-cache........................................................................................ 23-4
23.1.6 display msdp sa-count ........................................................................................ 23-5
23.1.7 import-source ...................................................................................................... 23-5
23.1.8 msdp.................................................................................................................... 23-6
23.1.9 msdp-tracert ........................................................................................................ 23-7
23.1.10 originating-rp ..................................................................................................... 23-9
23.1.11 peer ................................................................................................................. 23-10
23.1.12 peer description............................................................................................... 23-11
23.1.13 peer mesh-group ............................................................................................. 23-11
23.1.14 peer minimum-ttl ............................................................................................. 23-12
23.1.15 peer request-sa-enable ................................................................................... 23-13
23.1.16 peer sa-cache-maximum................................................................................. 23-13
23.1.17 peer sa-policy .................................................................................................. 23-14
23.1.18 peer sa-request-policy..................................................................................... 23-15
23.1.19 reset msdp peer .............................................................................................. 23-16
23.1.20 reset msdp sa-cache....................................................................................... 23-16
23.1.21 reset msdp statistics........................................................................................ 23-17
23.1.22 shutdown ......................................................................................................... 23-17
23.1.23 static-rpf-peer .................................................................................................. 23-18
23.1.24 timer retry ........................................................................................................ 23-19
Chapter 24 MBGP Multicast Extension Configuration Commands........................................ 24-1
24.1 MBGP Multicast Extension Configuration Commands .................................................. 24-1
24.1.1 aggregate ............................................................................................................ 24-1
24.1.2 compare-different-as-med................................................................................... 24-2
24.1.3 debugging bgp mp-update .................................................................................. 24-2
24.1.4 default local-preference....................................................................................... 24-3
24.1.5 default med.......................................................................................................... 24-4
24.1.6 display bgp multicast group................................................................................. 24-4
24.1.7 display bgp multicast network ............................................................................. 24-5
24.1.8 display bgp multicast peer................................................................................... 24-5
TOC-13
3Com Switch 8800 Command Reference Guide TOC
24.1.9 display bgp multicast routing-table...................................................................... 24-6
24.1.10 display bgp multicast routing-table as-path-acl................................................. 24-6
24.1.11 display bgp multicast routing-table cidr............................................................. 24-7
24.1.12 display bgp multicast routing-table community ................................................. 24-7
24.1.13 display bgp multicast routing-table community-list............................................ 24-8
24.1.14 display bgp multicast routing-table different-origin-as ...................................... 24-8
24.1.15 display bgp multicast routing-table peer ........................................................... 24-9
24.1.16 display bgp multicast routing-table regular-expression..................................... 24-9
24.1.17 filter-policy export ............................................................................................ 24-10
24.1.18 filter-policy import ............................................................................................ 24-11
24.1.19 import-route ..................................................................................................... 24-11
24.1.20 ipv4-family multicast........................................................................................ 24-12
24.1.21 network............................................................................................................ 24-13
24.1.22 peer advertise-community............................................................................... 24-13
24.1.23 peer allow-as-loop........................................................................................... 24-14
24.1.24 peer as-path-acl export ................................................................................... 24-14
24.1.25 peer as-path-acl import ................................................................................... 24-15
24.1.26 peer enable ..................................................................................................... 24-16
24.1.27 peer filter-policy export.................................................................................... 24-17
24.1.28 peer filter-policy import.................................................................................... 24-17
24.1.29 peer group ....................................................................................................... 24-18
24.1.30 peer ip-prefix export ........................................................................................ 24-19
24.1.31 peer ip-prefix import ........................................................................................ 24-19
24.1.32 peer next-hop-local ......................................................................................... 24-20
24.1.33 peer public-as-only.......................................................................................... 24-21
24.1.34 peer reflect-client............................................................................................. 24-21
24.1.35 peer route-policy export .................................................................................. 24-22
24.1.36 peer route-policy import .................................................................................. 24-22
24.1.37 preference ....................................................................................................... 24-23
24.1.38 reflect between-clients .................................................................................... 24-24
24.1.39 refresh bgp multicast....................................................................................... 24-24
24.1.40 reflector cluster-id............................................................................................ 24-25
24.1.41 summary.......................................................................................................... 24-26
Chapter 25 ACL Commands....................................................................................................... 25-1
25.1 ACL Commands............................................................................................................. 25-1
25.1.1 acl........................................................................................................................ 25-1
25.1.2 display acl config ................................................................................................. 25-3
25.1.3 display acl running-packet-filter........................................................................... 25-3
25.1.4 display flow-template........................................................................................... 25-4
25.1.5 display time-range ............................................................................................... 25-5
25.1.6 flow-template user-defined.................................................................................. 25-6
25.1.7 flow-template user-defined template-info............................................................ 25-7
TOC-14
3Com Switch 8800 Command Reference Guide TOC
25.1.8 packet-filter.......................................................................................................... 25-8
25.1.9 reset acl counter................................................................................................ 25-10
25.1.10 rule .................................................................................................................. 25-10
25.1.11 time-range ....................................................................................................... 25-14
Chapter 26 QoS Commands....................................................................................................... 26-1
26.1 QoS Commands ............................................................................................................ 26-1
26.1.1 display port-group ............................................................................................... 26-1
26.1.2 display port-group index...................................................................................... 26-2
26.1.3 display mirroring-group ....................................................................................... 26-2
26.1.4 display qos conform-level.................................................................................... 26-3
26.1.5 display qos cos-drop-precedence-map............................................................... 26-4
26.1.6 display qos cos-local-precedence-map............................................................... 26-5
26.1.7 display qos-interface all....................................................................................... 26-6
26.1.8 display qos-interface drop-mode......................................................................... 26-6
26.1.9 display qos-interface mirrored-to......................................................................... 26-7
26.1.10 display qos-interface queue-scheduler ............................................................. 26-7
26.1.11 display qos-interface traffic-limit........................................................................ 26-8
26.1.12 display qos-interface traffic-priority ................................................................... 26-9
26.1.13 display qos-interface traffic-redirect .................................................................. 26-9
26.1.14 display qos-interface traffic-shape .................................................................. 26-10
26.1.15 display qos-interface traffic-statistic ................................................................ 26-10
26.1.16 display qos-vlan all .......................................................................................... 26-11
26.1.17 display qos-vlan traffic-limit ............................................................................. 26-12
26.1.18 display qos-vlan traffic-priority......................................................................... 26-13
26.1.19 display qos-vlan traffic-redirect ....................................................................... 26-13
26.1.20 display traffic-params ...................................................................................... 26-14
26.1.21 drop-mode ....................................................................................................... 26-15
26.1.22 dscp................................................................................................................. 26-15
26.1.23 exp................................................................................................................... 26-17
26.1.24 local-precedence ............................................................................................. 26-18
26.1.25 mirrored-to....................................................................................................... 26-19
26.1.26 mirroring-group................................................................................................ 26-21
26.1.27 port .................................................................................................................. 26-22
26.1.28 port-group........................................................................................................ 26-23
26.1.29 priority.............................................................................................................. 26-24
26.1.30 qos conform-level............................................................................................ 26-25
26.1.31 qos cos-drop-precedence-map ....................................................................... 26-25
26.1.32 qos cos-local-precedence-map ....................................................................... 26-27
26.1.33 queue .............................................................................................................. 26-29
26.1.34 queue-scheduler ............................................................................................. 26-30
26.1.35 reset traffic-statistic ......................................................................................... 26-31
26.1.36 traffic-limit ........................................................................................................ 26-32
TOC-15
3Com Switch 8800 Command Reference Guide TOC
26.1.37 traffic-params .................................................................................................. 26-35
26.1.38 traffic-priority.................................................................................................... 26-36
26.1.39 traffic-redirect .................................................................................................. 26-39
26.1.40 traffic-shape..................................................................................................... 26-42
26.1.41 traffic-statistic .................................................................................................. 26-42
26.1.42 wred................................................................................................................. 26-44
Chapter 27 ACL Control Commands to Control Login Users................................................. 27-1
27.1 The ACL Control Commands to Control Login Users.................................................... 27-1
27.1.1 acl........................................................................................................................ 27-1
27.1.2 snmp-agent community....................................................................................... 27-2
27.1.3 snmp-agent group ............................................................................................... 27-2
27.1.4 snmp-agent usm-user ......................................................................................... 27-4
Chapter 28 MPLS Basic Configuration Commands................................................................. 29-1
28.1 MPLS Basic Configuration Commands ......................................................................... 29-1
28.1.1 debugging mpls lspm .......................................................................................... 29-1
28.1.2 display mpls interface.......................................................................................... 29-2
28.1.3 display mpls lsp ................................................................................................... 29-2
28.1.4 display mpls static-lsp ......................................................................................... 29-3
28.1.5 display mpls statistics.......................................................................................... 29-4
28.1.6 lsp-trigger ............................................................................................................ 29-4
28.1.7 mpls..................................................................................................................... 29-5
28.1.8 mpls lsr-id ............................................................................................................ 29-6
28.1.9 snmp-agent trap enable ldp ................................................................................ 29-6
28.1.10 snmp-agent trap enable lsp............................................................................... 29-6
28.1.11 static-lsp egress ................................................................................................ 29-6
28.1.12 static-lsp ingress ............................................................................................... 29-6
28.1.13 static-lsp transit ................................................................................................. 29-6
28.2 LDP Configuration Commands ...................................................................................... 29-6
28.2.1 debugging mpls ldp ............................................................................................. 29-6
28.2.2 display mpls ldp................................................................................................... 29-6
28.2.3 display mpls ldp buffer-info ................................................................................. 29-6
28.2.4 display mpls ldp interface.................................................................................... 29-6
28.2.5 display mpls ldp lsp ............................................................................................. 29-6
28.2.6 display mpls ldp peer .......................................................................................... 29-6
28.2.7 display mpls ldp remote ...................................................................................... 29-6
28.2.8 display mpls ldp session ..................................................................................... 29-6
28.2.9 mpls ldp ............................................................................................................... 29-6
28.2.10 mpls ldp enable ................................................................................................. 29-6
28.2.11 mpls ldp hops-count .......................................................................................... 29-6
28.2.12 mpls ldp loop-detect .......................................................................................... 29-6
28.2.13 mpls ldp password ............................................................................................ 29-6
28.2.14 mpls ldp path-vectors ........................................................................................ 29-6
TOC-16
3Com Switch 8800 Command Reference Guide TOC
28.2.15 mpls ldp remote-peer ........................................................................................ 29-6
28.2.16 mpls ldp reset-session ...................................................................................... 29-6
28.2.17 mpls ldp timer .................................................................................................... 29-6
28.2.18 mpls ldp transport-ip.......................................................................................... 29-6
28.2.19 remote-ip ........................................................................................................... 29-6
Chapter 29 BGP/MPLS VPN Configuration Commands .......................................................... 29-6
29.1.1 aggregate ............................................................................................................ 29-6
29.1.2 apply mpls-label .................................................................................................. 29-6
29.1.3 debugging bgp..................................................................................................... 29-6
29.1.4 display bgp routing-table label ............................................................................ 29-6
29.1.5 default local-preference....................................................................................... 29-6
29.1.6 default med.......................................................................................................... 29-6
29.1.7 description ........................................................................................................... 29-6
29.1.8 display bgp vpnv4 ............................................................................................... 29-6
29.1.9 display ip routing-table vpn-instance................................................................... 29-6
29.1.10 display ip vpn-instance...................................................................................... 29-6
29.1.11 display mpls l3vpn-lsp ....................................................................................... 29-6
29.1.12 display rip vpn-instance..................................................................................... 29-6
29.1.13 domain-id........................................................................................................... 29-6
29.1.14 filter-policy export .............................................................................................. 29-6
29.1.15 filter-policy import .............................................................................................. 29-6
29.1.16 group ................................................................................................................. 29-6
29.1.17 if-match mpls-label ............................................................................................ 29-6
29.1.18 if-match vpn-target ............................................................................................ 29-6
29.1.19 import-route ....................................................................................................... 29-6
29.1.20 ip binding vpn-instance ..................................................................................... 29-6
29.1.21 ip route-static vpn-instance ............................................................................... 29-6
29.1.22 ip vpn-instance .................................................................................................. 29-6
29.1.23 ipv4-family ......................................................................................................... 29-6
29.1.24 nesting-vpn........................................................................................................ 29-6
29.1.25 network.............................................................................................................. 29-6
29.1.26 ospf.................................................................................................................... 29-6
29.1.27 peer advertise-community................................................................................. 29-6
29.1.28 peer allow-as-loop............................................................................................. 29-6
29.1.29 peer as-number ................................................................................................. 29-6
29.1.30 peer as-path-acl export ..................................................................................... 29-6
29.1.31 peer as-path-acl import ..................................................................................... 29-6
29.1.32 peer connect-interface ...................................................................................... 29-6
29.1.33 peer default-route-advertise .............................................................................. 29-6
29.1.34 peer default-route-advertise vpn-instance ........................................................ 29-6
29.1.35 peer description................................................................................................. 29-6
29.1.36 peer ebgp-max-hop........................................................................................... 29-6
TOC-17
3Com Switch 8800 Command Reference Guide TOC
29.1.37 peer enable ....................................................................................................... 29-6
29.1.38 peer filter-policy export...................................................................................... 29-6
29.1.39 peer filter-policy import...................................................................................... 29-6
29.1.40 peer group ......................................................................................................... 29-6
29.1.41 peer ip-prefix export .......................................................................................... 29-6
29.1.42 peer ip-prefix import .......................................................................................... 29-6
29.1.43 peer label-route-capability................................................................................. 29-6
29.1.44 peer next-hop-local ........................................................................................... 29-6
29.1.45 peer password................................................................................................... 29-6
29.1.46 peer public-as-only ............................................................................................ 29-6
29.1.47 peer reflect-client............................................................................................... 29-6
29.1.48 peer route-policy export .................................................................................... 29-6
29.1.49 peer route-policy import .................................................................................... 29-6
29.1.50 peer route-update-interval................................................................................. 29-6
29.1.51 peer timer .......................................................................................................... 29-6
29.1.52 peer upe ............................................................................................................ 29-6
29.1.53 peer vpn-instance enable.................................................................................. 29-6
29.1.54 peer vpn-instance group ................................................................................... 29-6
29.1.55 peer vpn-instance route-policy import............................................................... 29-6
29.1.56 peer vpn-instance substitute-as ........................................................................ 29-6
29.1.57 policy vpn-target ................................................................................................ 29-6
29.1.58 preference ......................................................................................................... 29-6
29.1.59 reflect between-clients ...................................................................................... 29-6
29.1.60 reflector cluster-id.............................................................................................. 29-6
29.1.61 route-distinguisher............................................................................................. 29-6
29.1.62 route-tag ............................................................................................................ 29-6
29.1.63 timer .................................................................................................................. 29-6
29.1.64 traffic-redirect .................................................................................................... 29-6
29.1.65 routing-table limit ............................................................................................... 29-6
29.1.66 sham-link ........................................................................................................... 29-6
29.1.67 summary............................................................................................................ 29-6
29.1.68 vpn-instance-capability simple .......................................................................... 29-6
29.1.69 vpn-target .......................................................................................................... 29-6
Chapter 30 MSTP Configuration Commands ........................................................................... 30-1
30.1 MSTP Configuration Commands ................................................................................... 30-1
30.1.1 active region-configuration .................................................................................. 30-1
30.1.2 check region-configuration .................................................................................. 30-1
30.1.3 debugging stp...................................................................................................... 30-3
30.1.4 display stp ........................................................................................................... 30-3
30.1.5 display stp region-configuration .......................................................................... 30-5
30.1.6 display stp tc........................................................................................................ 30-6
30.1.7 instance ............................................................................................................... 30-7
TOC-18
3Com Switch 8800 Command Reference Guide TOC
30.1.8 region-name ........................................................................................................ 30-8
30.1.9 reset stp............................................................................................................... 30-9
30.1.10 revision-level ................................................................................................... 30-10
30.1.11 stp.................................................................................................................... 30-10
30.1.12 stp bpdu-protection ......................................................................................... 30-11
30.1.13 stp bridge-diameter ......................................................................................... 30-12
30.1.14 stp cost ............................................................................................................ 30-13
30.1.15 stp edged-port ................................................................................................. 30-14
30.1.16 stp instance root primary................................................................................. 30-15
30.1.17 stp interface..................................................................................................... 30-16
30.1.18 stp interface instance cost............................................................................... 30-17
30.1.19 stp interface edged-port .................................................................................. 30-18
30.1.20 stp interface instance port priority ................................................................... 30-19
30.1.21 stp interface loop-protection............................................................................ 30-20
30.1.22 stp interface mcheck ....................................................................................... 30-21
30.1.23 stp interface point-to-point............................................................................... 30-22
30.1.24 stp interface reset-arp ..................................................................................... 30-23
30.1.25 stp interface root-protection ............................................................................ 30-24
30.1.26 stp interface transmit-limit ............................................................................... 30-25
30.1.27 stp loop-protection........................................................................................... 30-26
30.1.28 stp max-hops................................................................................................... 30-27
30.1.29 stp mcheck ...................................................................................................... 30-28
30.1.30 stp mode.......................................................................................................... 30-29
30.1.31 stp pathcost-standard...................................................................................... 30-29
30.1.32 stp point-to-point ............................................................................................. 30-30
30.1.33 stp port priority ................................................................................................ 30-31
30.1.34 stp region-configuration................................................................................... 30-32
30.1.35 stp reset-arp .................................................................................................... 30-33
30.1.36 stp instance root secondary ............................................................................ 30-33
30.1.37 stp root-protection ........................................................................................... 30-34
30.1.38 stp tc-protection............................................................................................... 30-35
30.1.39 stp timer forward-delay.................................................................................... 30-36
30.1.40 stp timer hello .................................................................................................. 30-37
30.1.41 stp timer max-age ........................................................................................... 30-38
30.1.42 stp timer-factor ................................................................................................ 30-39
30.1.43 stp transmit-limit .............................................................................................. 30-40
30.1.44 stp update-arp ................................................................................................. 30-40
30.1.45 vlan-mapping modulo...................................................................................... 30-41
Chapter 31 802.1x Configuration Commands .......................................................................... 31-1
31.1 802.1x Configuration Commands .................................................................................. 31-1
31.1.1 display dot1x ....................................................................................................... 31-1
31.1.2 dot1x.................................................................................................................... 31-2
TOC-19
3Com Switch 8800 Command Reference Guide TOC
31.1.3 dot1x authentication-method............................................................................... 31-3
31.1.4 dot1x dhcp-launch............................................................................................... 31-4
31.1.5 dot1x guest-vlan .................................................................................................. 31-4
31.1.6 dot1x max-user.................................................................................................... 31-4
31.1.7 dot1x port-control ................................................................................................ 31-4
31.1.8 dot1x port-method ............................................................................................... 31-4
31.1.9 dot1x quiet-period ............................................................................................... 31-4
31.1.10 dot1x retry ......................................................................................................... 31-4
31.1.11 dot1x supp-proxy-check .................................................................................... 31-4
31.1.12 dot1x timer......................................................................................................... 31-4
31.1.13 reset dot1x statistics.......................................................................................... 31-4
Chapter 32 AAA and RADIUS/TACACS+ Protocol Configuration Commands ..................... 32-4
32.1 AAA Configuration Commands...................................................................................... 32-4
32.1.1 access-limit.......................................................................................................... 32-4
32.1.2 accounting optional ............................................................................................. 32-4
32.1.3 attribute ............................................................................................................... 32-4
32.1.4 cut connection ..................................................................................................... 32-4
32.1.5 display connection............................................................................................... 32-4
32.1.6 display domain .................................................................................................... 32-4
32.1.7 display local-user ................................................................................................ 32-4
32.1.8 domain................................................................................................................. 32-4
32.1.9 idle-cut................................................................................................................. 32-4
32.1.10 ip pool................................................................................................................ 32-4
32.1.11 level ................................................................................................................... 32-4
32.1.12 local-user........................................................................................................... 32-4
32.1.13 local-user password-display-mode.................................................................... 32-4
32.1.14 password ........................................................................................................... 32-4
32.1.15 scheme.............................................................................................................. 32-4
32.1.16 private-group-id mode standard ........................................................................ 32-4
32.1.17 self-service-url ................................................................................................... 32-4
32.1.18 service-type ....................................................................................................... 32-4
32.1.19 state................................................................................................................... 32-4
32.2 RADIUS Protocol Configuration Commands ................................................................. 32-4
32.2.1 accounting optional ............................................................................................. 32-4
32.2.2 data-flow-format .................................................................................................. 32-4
32.2.3 display local-server ............................................................................................. 32-4
32.2.4 display radius ...................................................................................................... 32-4
32.2.5 display radius statistics ....................................................................................... 32-4
32.2.6 display stop-accounting-buffer ............................................................................ 32-4
32.2.7 key....................................................................................................................... 32-4
32.2.8 local-server.......................................................................................................... 32-4
32.2.9 primary accounting.............................................................................................. 32-4
TOC-20
3Com Switch 8800 Command Reference Guide TOC
32.2.10 primary authentication....................................................................................... 32-4
32.2.11 radius scheme ................................................................................................... 32-4
32.2.12 reset radius statistics......................................................................................... 32-4
32.2.13 reset stop-accounting-buffer ............................................................................. 32-4
32.2.14 retry ................................................................................................................... 32-4
32.2.15 retry realtime-accounting................................................................................... 32-4
32.2.16 retry stop-accounting......................................................................................... 32-4
32.2.17 secondary accounting ....................................................................................... 32-4
32.2.18 secondary authentication .................................................................................. 32-4
32.2.19 server-type ........................................................................................................ 32-4
32.2.20 state................................................................................................................... 32-4
32.2.21 stop-accounting-buffer enable........................................................................... 32-4
32.2.22 timer .................................................................................................................. 32-4
32.2.23 timer realtime-accounting.................................................................................. 32-4
32.2.24 user-name-format.............................................................................................. 32-4
32.3 TACACS+ Configuration Commands ............................................................................ 32-4
32.3.1 data-flow-format .................................................................................................. 32-4
32.3.2 debugging tacacs+ .............................................................................................. 32-4
32.3.3 display tacacs+.................................................................................................... 32-4
32.3.4 display stop-accounting-buffer tacacs+-scheme................................................. 32-4
32.3.5 tacacs+ nas-ip ..................................................................................................... 32-4
32.3.6 tacacs+ scheme .................................................................................................. 32-4
32.3.7 key....................................................................................................................... 32-4
32.3.8 nas-ip................................................................................................................... 32-4
32.3.9 primary accounting.............................................................................................. 32-4
32.3.10 primary authentication....................................................................................... 32-4
32.3.11 primary authorization......................................................................................... 32-4
32.3.12 reset tacacs+ statistics ...................................................................................... 32-4
32.3.13 reset stop-accounting-buffer ............................................................................. 32-4
32.3.14 retry stop-accounting......................................................................................... 32-4
32.3.15 secondary accounting ....................................................................................... 32-4
32.3.16 secondary authentication .................................................................................. 32-4
32.3.17 secondary authorization .................................................................................... 32-4
32.3.18 timer quiet.......................................................................................................... 32-4
32.3.19 timer realtime-accounting.................................................................................. 32-4
32.3.20 timer response-timeout ..................................................................................... 32-4
32.3.21 user-name-format.............................................................................................. 32-4
Chapter 33 VRRP Configuration Commands ........................................................................... 33-1
33.1 VRRP Configuration Commands ................................................................................... 33-1
33.1.1 debugging vrrp .................................................................................................... 33-1
33.1.2 display vrrp .......................................................................................................... 33-1
33.1.3 display vrrp statistics ........................................................................................... 33-3
TOC-21
3Com Switch 8800 Command Reference Guide TOC
33.1.4 display vrrp summary .......................................................................................... 33-4
33.1.5 reset vrrp statistics .............................................................................................. 33-5
33.1.6 vrrp authentication-mode .................................................................................... 33-5
33.1.7 vrrp method ......................................................................................................... 33-5
33.1.8 vrrp ping-enable .................................................................................................. 33-5
33.1.9 vrrp un-check ttl................................................................................................... 33-5
33.1.10 vrrp vrid preempt-mode..................................................................................... 33-5
33.1.11 vrrp vrid priority.................................................................................................. 33-5
33.1.12 vrrp vrid timer .................................................................................................... 33-5
33.1.13 vrrp vrid track..................................................................................................... 33-5
33.1.14 vrrp vrid virtual-ip............................................................................................... 33-5
Chapter 34 HA Configuration Commands ................................................................................ 34-5
34.1 HA Configuration Commands ........................................................................................ 34-5
34.1.1 display switchover state ...................................................................................... 34-5
34.1.2 display xbar ......................................................................................................... 34-5
34.1.3 slave auto-update config ..................................................................................... 34-5
34.1.4 slave restart......................................................................................................... 34-5
34.1.5 slave switchover .................................................................................................. 34-5
34.1.6 slave update configuration .................................................................................. 34-5
34.1.7 xbar ..................................................................................................................... 34-5
Chapter 35 File System Management Commands ................................................................... 35-1
35.1 File System .................................................................................................................... 35-1
35.1.1 cd......................................................................................................................... 35-1
35.1.2 copy..................................................................................................................... 35-1
35.1.3 delete................................................................................................................... 35-2
35.1.4 dir ........................................................................................................................ 35-3
35.1.5 execute................................................................................................................ 35-4
35.1.6 file prompt............................................................................................................ 35-5
35.1.7 fixdisk .................................................................................................................. 35-5
35.1.8 format .................................................................................................................. 35-6
35.1.9 mkdir.................................................................................................................... 35-6
35.1.10 more .................................................................................................................. 35-7
35.1.11 move.................................................................................................................. 35-8
35.1.12 pwd.................................................................................................................... 35-9
35.1.13 rename ............................................................................................................ 35-10
35.1.14 reset recycle-bin .............................................................................................. 35-11
35.1.15 rmdir ................................................................................................................ 35-11
35.1.16 umount ............................................................................................................ 35-12
35.1.17 undelete........................................................................................................... 35-12
35.2 Configuration File Management Commands ............................................................... 35-13
35.2.1 display current-configuration ............................................................................. 35-13
35.2.2 display saved-configuration............................................................................... 35-18
TOC-22
3Com Switch 8800 Command Reference Guide TOC
35.2.3 display this......................................................................................................... 35-19
35.2.4 display startup ................................................................................................... 35-20
35.2.5 reset saved-configuration.................................................................................. 35-20
35.2.6 save................................................................................................................... 35-21
35.2.7 startup saved-configuration............................................................................... 35-22
35.3 FTP Server Configuration Commands ........................................................................ 35-23
35.3.1 display ftp-server ............................................................................................... 35-23
35.3.2 display ftp-user .................................................................................................. 35-23
35.3.3 ftp disconnect .................................................................................................... 35-24
35.3.4 ftp server enable ............................................................................................... 35-24
35.3.5 ftp timeout.......................................................................................................... 35-25
35.3.6 local-user........................................................................................................... 35-25
35.3.7 local-user password-display-mode.................................................................... 35-26
35.3.8 password ........................................................................................................... 35-27
35.3.9 service-type ....................................................................................................... 35-28
35.4 FTP Client Commands ................................................................................................ 35-29
35.4.1 ascii ................................................................................................................... 35-29
35.4.2 binary................................................................................................................. 35-29
35.4.3 bye..................................................................................................................... 35-30
35.4.4 cd....................................................................................................................... 35-30
35.4.5 cdup................................................................................................................... 35-31
35.4.6 close .................................................................................................................. 35-31
35.4.7 debugging.......................................................................................................... 35-32
35.4.8 delete................................................................................................................. 35-32
35.4.9 dir ...................................................................................................................... 35-33
35.4.10 disconnect ....................................................................................................... 35-33
35.4.11 ftp .................................................................................................................... 35-34
35.4.12 get ................................................................................................................... 35-34
35.4.13 lcd.................................................................................................................... 35-35
35.4.14 ls...................................................................................................................... 35-35
35.4.15 mkdir................................................................................................................ 35-36
35.4.16 open ................................................................................................................ 35-36
35.4.17 passive ............................................................................................................ 35-37
35.4.18 put ................................................................................................................... 35-37
35.4.19 pwd.................................................................................................................. 35-38
35.4.20 quit................................................................................................................... 35-38
35.4.21 remotehelp ...................................................................................................... 35-39
35.4.22 rmdir ................................................................................................................ 35-39
35.4.23 user ................................................................................................................. 35-40
35.4.24 verbose............................................................................................................ 35-40
35.5 TFTP Configuration Commands .................................................................................. 35-41
35.5.1 tftp get ............................................................................................................... 35-41
35.5.2 tftp put ............................................................................................................... 35-41
TOC-23
3Com Switch 8800 Command Reference Guide TOC
Chapter 36 MAC Address Table Management Commands ..................................................... 36-1
36.1 MAC Address Table Management Commands ............................................................. 36-1
36.1.1 display mac-address aging-time ......................................................................... 36-1
36.1.2 display mac-address ........................................................................................... 36-1
36.1.3 mac-address........................................................................................................ 36-3
36.1.4 mac-address max-mac-count.............................................................................. 36-4
36.1.5 mac-address max-mac-count enable forward..................................................... 36-5
36.1.6 mac-address max-mac-count alarm ................................................................... 36-5
36.1.7 mac-address timer .............................................................................................. 36-7
36.1.8 reset mac-address .............................................................................................. 36-8
Chapter 37 Device Management Commands ........................................................................... 37-1
37.1 Device Management Commands .................................................................................. 37-1
37.1.1 boot boot-loader .................................................................................................. 37-1
37.1.2 boot bootrom ....................................................................................................... 37-1
37.1.3 display boot-loader .............................................................................................. 37-2
37.1.4 display cpu .......................................................................................................... 37-3
37.1.5 display device...................................................................................................... 37-4
37.1.6 display environment ............................................................................................ 37-5
37.1.7 display fan ........................................................................................................... 37-5
37.1.8 display memory ................................................................................................... 37-6
37.1.9 display power ...................................................................................................... 37-7
37.1.10 display schedule reboot .................................................................................... 37-7
37.1.11 reboot slot.......................................................................................................... 37-8
37.1.12 schedule reboot at............................................................................................. 37-8
37.1.13 schedule reboot delay ....................................................................................... 37-9
37.1.14 temperature-limit ............................................................................................. 37-10
37.1.15 update l3plus ................................................................................................... 37-11
Chapter 38 System Maintenance Commands .......................................................................... 38-1
38.1 Basic System Configuration and Management Commands .......................................... 38-1
38.1.1 clock datetime ..................................................................................................... 38-1
38.1.2 clock summer-time .............................................................................................. 38-1
38.1.3 clock timezone..................................................................................................... 38-3
38.1.4 ping-distribute enable.......................................................................................... 38-3
38.1.5 sysname .............................................................................................................. 38-4
38.2 System Status and System Information Display Commands ........................................ 38-5
38.2.1 display clock ........................................................................................................ 38-5
38.2.2 display debugging ............................................................................................... 38-6
38.2.3 display fiber-module ............................................................................................ 38-6
38.2.4 display users ....................................................................................................... 38-9
38.2.5 display version................................................................................................... 38-10
38.3 System Debug Commands.......................................................................................... 38-11
38.3.1 debugging.......................................................................................................... 38-11
TOC-24
3Com Switch 8800 Command Reference Guide TOC
38.3.2 display diagnostic-information........................................................................... 38-12
38.4 Network Connection Test Commands ......................................................................... 38-13
38.4.1 ping.................................................................................................................... 38-13
38.4.2 tracert ................................................................................................................ 38-15
38.5 Log Commands............................................................................................................ 38-17
38.5.1 display channel.................................................................................................. 38-17
38.5.2 display info-center ............................................................................................. 38-17
38.5.3 display logbuffer ................................................................................................ 38-19
38.5.4 display logbuffer summary ................................................................................ 38-21
38.5.5 display trapbuffer............................................................................................... 38-22
38.5.6 info-center channel name.................................................................................. 38-23
38.5.7 info-center console channel .............................................................................. 38-24
38.5.8 info-center enable ............................................................................................. 38-25
38.5.9 info-center logbuffer .......................................................................................... 38-26
38.5.10 info-center logfile ............................................................................................. 38-26
38.5.11 info-center loghost........................................................................................... 38-27
38.5.12 info-center loghost source............................................................................... 38-28
38.5.13 info-center monitor channel............................................................................. 38-29
38.5.14 info-center snmp channel................................................................................ 38-29
38.5.15 info-center source ........................................................................................... 38-30
38.5.16 info-center timestamp...................................................................................... 38-35
38.5.17 info-center trapbuffer....................................................................................... 38-36
38.5.18 reset logbuffer ................................................................................................. 38-37
38.5.19 reset trapbuffer ................................................................................................ 38-37
38.5.20 terminal debugging.......................................................................................... 38-38
38.5.21 terminal logging ............................................................................................... 38-38
38.5.22 terminal monitor .............................................................................................. 38-39
38.5.23 terminal trapping ............................................................................................. 38-40
Chapter 39 SNMP Configuration Commands ........................................................................... 39-1
39.1 SNMP Configuration Commands................................................................................... 39-1
39.1.1 display snmp-agent ............................................................................................. 39-1
39.1.2 display snmp-agent community........................................................................... 39-1
39.1.3 display snmp-agent group................................................................................... 39-2
39.1.4 display snmp-agent mib-view.............................................................................. 39-3
39.1.5 display snmp-agent statistics .............................................................................. 39-5
39.1.6 display snmp-agent sys-info................................................................................ 39-6
39.1.7 display snmp-agent usm-user ............................................................................. 39-7
39.1.8 enable snmp trap ................................................................................................ 39-9
39.1.9 snmp-agent community....................................................................................... 39-9
39.1.10 snmp-agent group ........................................................................................... 39-10
39.1.11 snmp-agent local-engineid .............................................................................. 39-11
39.1.12 snmp-agent mib-view ...................................................................................... 39-12
TOC-25
3Com Switch 8800 Command Reference Guide TOC
39.1.13 snmp-agent packet max-size .......................................................................... 39-13
39.1.14 snmp-agent sys-info........................................................................................ 39-13
39.1.15 snmp-agent target-host ................................................................................... 39-14
39.1.16 snmp-agent trap enable .................................................................................. 39-15
39.1.17 snmp-agent trap life ........................................................................................ 39-16
39.1.18 snmp-agent trap queue-size ........................................................................... 39-17
39.1.19 snmp-agent trap source .................................................................................. 39-18
39.1.20 snmp-agent usm-user ..................................................................................... 39-18
39.1.21 undo snmp-agent ............................................................................................ 39-19
Chapter 40 RMON Configuration Commands .......................................................................... 40-1
40.1 RMON Configuration Commands .................................................................................. 40-1
40.1.1 display rmon alarm .............................................................................................. 40-1
40.1.2 display rmon event .............................................................................................. 40-2
40.1.3 display rmon eventlog ......................................................................................... 40-3
40.1.4 display rmon history ............................................................................................ 40-4
40.1.5 display rmon prialarm.......................................................................................... 40-5
40.1.6 display rmon statistics ......................................................................................... 40-7
40.1.7 rmon alarm .......................................................................................................... 40-7
40.1.8 rmon event .......................................................................................................... 40-9
40.1.9 rmon history....................................................................................................... 40-10
40.1.10 rmon prialarm .................................................................................................. 40-11
40.1.11 rmon statistics ................................................................................................. 40-12
Chapter 41 NTP Configuration Commands .............................................................................. 41-1
41.1 NTP Configuration Commands...................................................................................... 41-1
41.1.1 debugging ntp-service......................................................................................... 41-1
41.1.2 display ntp-service sessions ............................................................................... 41-2
41.1.3 display ntp-service status.................................................................................... 41-2
41.1.4 display ntp-service trace ..................................................................................... 41-4
41.1.5 ntp-service access .............................................................................................. 41-4
41.1.6 ntp-service authentication enable ....................................................................... 41-5
41.1.7 ntp-service authentication-keyid.......................................................................... 41-6
41.1.8 ntp-service broadcast-client ................................................................................ 41-6
41.1.9 ntp-service broadcast-server............................................................................... 41-7
41.1.10 ntp-service max-dynamic-sessions ................................................................... 41-8
41.1.11 ntp-service multicast-client................................................................................ 41-8
41.1.12 ntp-service multicast-server .............................................................................. 41-9
41.1.13 ntp-service refclock-master ............................................................................. 41-10
41.1.14 ntp-service reliable authentication-keyid......................................................... 41-11
41.1.15 ntp-service source-interface............................................................................ 41-12
41.1.16 ntp-service unicast-peer.................................................................................. 41-13
41.1.17 ntp-service unicast-server ............................................................................... 41-14
TOC-26
3Com Switch 8800 Command Reference Guide TOC
Chapter 42 SSH Terminal Service Configuration Commands ................................................ 42-1
42.1 SSH Server Configuration Commands .......................................................................... 42-1
42.1.1 debugging ssh server.......................................................................................... 42-1
42.1.2 display rsa local-key-pair public .......................................................................... 42-2
42.1.3 display rsa peer-public-key ................................................................................. 42-3
42.1.4 display ssh server ............................................................................................... 42-4
42.1.5 display ssh user-information ............................................................................... 42-4
42.1.6 peer-public-key end............................................................................................. 42-5
42.1.7 protocol inbound.................................................................................................. 42-6
42.1.8 public-key-code begin ......................................................................................... 42-7
42.1.9 public-key-code end ............................................................................................ 42-7
42.1.10 rsa local-key-pair create.................................................................................... 42-8
42.1.11 rsa local-key-pair destroy .................................................................................. 42-9
42.1.12 rsa peer-public-key.......................................................................................... 42-10
42.1.13 ssh server authentication-retries ..................................................................... 42-10
42.1.14 ssh server compatible_ssh1x enable .............................................................. 42-11
42.1.15 ssh server rekey-interval ................................................................................. 42-11
42.1.16 ssh server timeout ........................................................................................... 42-12
42.1.17 ssh user assign rsa-key .................................................................................. 42-13
42.1.18 ssh user authentication-type ........................................................................... 42-13
42.2 SSH Client Configuration Commands ......................................................................... 42-14
42.2.1 display ssh server-info ...................................................................................... 42-14
42.2.2 quit..................................................................................................................... 42-15
42.2.3 ssh client assign rsa-key ................................................................................... 42-15
42.2.4 ssh client first-time enable................................................................................. 42-16
42.2.5 ssh2................................................................................................................... 42-17
42.3 SFTP Server Configuration Commands ...................................................................... 42-18
42.3.1 sftp server enable.............................................................................................. 42-18
42.3.2 ssh user service-type ........................................................................................ 42-19
42.4 SFTP Client Configuration Commands ....................................................................... 42-19
42.4.1 bye..................................................................................................................... 42-19
42.4.2 cd....................................................................................................................... 42-20
42.4.3 cdup................................................................................................................... 42-20
42.4.4 delete................................................................................................................. 42-21
42.4.5 dir ...................................................................................................................... 42-21
42.4.6 exit..................................................................................................................... 42-22
42.4.7 get ..................................................................................................................... 42-22
42.4.8 help.................................................................................................................... 42-23
42.4.9 ls ........................................................................................................................ 42-23
42.4.10 mkdir................................................................................................................ 42-24
42.4.11 put ................................................................................................................... 42-25
42.4.12 pwd.................................................................................................................. 42-25
42.4.13 quit................................................................................................................... 42-26
TOC-27
3Com Switch 8800 Command Reference Guide TOC
42.4.14 remove ............................................................................................................ 42-26
42.4.15 rename ............................................................................................................ 42-27
42.4.16 rmdir ................................................................................................................ 42-27
42.4.17 sftp................................................................................................................... 42-28
Chapter 43 PoE Configuration Commands .............................................................................. 43-1
43.1 PoE Configuration Commands ...................................................................................... 43-1
43.1.1 display poe interface ........................................................................................... 43-1
43.1.2 display poe interface power ................................................................................ 43-2
43.1.3 display poe pse ................................................................................................... 43-3
43.1.4 display poe slot.................................................................................................... 43-4
43.1.5 poe enable........................................................................................................... 43-4
43.1.6 poe max-power.................................................................................................... 43-5
43.1.7 poe max-power slot............................................................................................. 43-6
43.1.8 poe mode ............................................................................................................ 43-6
43.1.9 poe priority........................................................................................................... 43-7
Chapter 44 PoE PSU Supervision Commands ......................................................................... 44-1
44.1 PoE PSU Supervision Display Commands ................................................................... 44-1
44.1.1 display poe-power ac-input state ........................................................................ 44-1
44.1.2 display poe-power alarm ..................................................................................... 44-2
44.1.3 display poe-power dc-output state ...................................................................... 44-3
44.1.4 display poe-power dc-output value ..................................................................... 44-3
44.1.5 display poe-power switch state ........................................................................... 44-4
44.1.6 display supervision-module information .............................................................. 44-4
44.2 PoE PSU Supervision Configuration Commands.......................................................... 44-6
44.2.1 poe-power input-thresh lower.............................................................................. 44-6
44.2.2 poe-power input-thresh upper ............................................................................. 44-6
44.2.3 poe-power output-thresh lower ........................................................................... 44-7
44.2.4 poe-power output-thresh upper........................................................................... 44-7
TOC-28
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
Chapter 1 Logging into Switch Commands
1.1 Logging into Switch Commands
1.1.1 authentication-mode
Syntax
authentication-mode { password | scheme | none }
View
User interface view
Parameter
password: Performs local password authentication.
scheme: Performs local or remote authentication of username and password.
none: Login without authentication.
Description
Use the authentication-mode command to configure the authentication method for login user.
Use the authentication-mode none command to configure no authentication.
This command with the password parameter indicates to perform local password authentication, that is, you need to configure a login password using the set
authentication password { cipher | simple } password command.
This command with the scheme parameter indicates to perform authentication of local or remote username and password. The type of the authentication depends on your configuration. For detailed information, see “Security” section.
By default, terminal authentication is not required for local users log in via the Console port. However, password authentication is required for local users and remote Modem users log in via the AUX port, and Telnet users log in through Ethernet port.
Example
Configure local password authentication.
[SW8800-ui-aux0] authentication-mode password
1-1
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
auto-execute command
Syntax
auto-execute command text
undo auto-execute command
View
User interface view
Parameter
text: Specifies the command to be run automatically.
Description
Use the auto-execute command command to configure to automatically run a specified command. When a user logs in, the command configured will be executed automatically. The user will be disconnected after that.
Use the undo auto-execute command command to configure not to run the command automatically.
This command is usually used to configure the telnet command on the terminal, which will connect the user to a designated device automatically.
By default, auto run is disabled.
Caution:
z z
If you execute this command, the user-interface can no longer be used to perform routine configurations on the local system. Therefore use caution when using this command.
Ensure that you will be able to log into the system in some other way to cancel the configuration, before you configure the auto-execute command command and save the configuration.
Example
Configure to automatically telnet 10.110.100.1 after the user logs in via VTY 0.
[SW8800-ui-vty0] auto-execute command telnet 10.110.100.1
1-2
3Com Switch 8800 Command Reference Guide
1.1.2 command-privilege level
Chapter 1 Logging into Switch Commands
Syntax
command-privilege level level view view command
undo command-privilege view view command
View
System view
Parameter
level: Specifies the command level, ranging from 0 to 3.
view: Specifies the command view, which can be any of the views supported by the switch.
command: Specifies the command to be configured.
Description
Use the command-privilege level command to configure the priority of the specifically command of the specifically view.
Use the undo command-privilege view command to restore the default command priority.
The command levels include visit, monitoring, configuration, and management, which are identified as 0 through 3 respectively. An administrator assigns authorities as per user requirements and allows them to operate in corresponding views. When a user logs in the switch, the command level that it can access depends on two points. One is the command level that the user itself can access, the other is the set command level of this user interface. If the two levels are different, the former will be taken. For example, the command level of VTY 0 user interface is 1, however, user Tom has the right to access commands of level 3; if Tom logs in from VTY 0 user interface, he can access commands of level 3 and lower.
By default, ping, tracert, and telnet are at visit level (0); display and debugging are at monitoring level (1); all the configuration commands are at configuration level (2); and
FTP, TFTP and commands for file system operations are at management level (3).
Example
Configure the precedence of the command "interface" as 0.
[SW8800] command-privilege level 0 view system interface
1-3
3Com Switch 8800 Command Reference Guide
1.1.3 databits
Chapter 1 Logging into Switch Commands
Syntax
databits { 7 | 8 }
undo databits
View
User interface view
Parameter
Description
Use the databits command to configure the data bits for the user interface.
Use the undo databits command to restore the default bits of the user interface.
This command can only be performed in Console and AUX user interface view.
By default, the value is 8.
Example
7: Sets 7 data bits.
8: Sets 8 data bits.
Configure the data bits of AUX port to 7 bits.
[SW8800-ui-aux0] databits 7
1.1.4 display history-command
Syntax display history-command
View
Any view
Parameter
None
Description
Use the display history-command command to view the saved history commands.
Related command: history-command max-size.
Example
Display history commands.
1-4
3Com Switch 8800 Command Reference Guide
<SW8800> display history-command
sys
quit
display his
Chapter 1 Logging into Switch Commands
1.1.5 display user-interface
Syntax
display user-interface [ type number | number ] [ summary ]
View
Any view
Parameter
type: Specifies the type of a user interface.
number: Specifies the number of a user interface.
Summary: Displays the summary of a user interface.
Description
Use the display user-interface command to view the relational information of the user interface. This command without the summary parameter displays user interface type, absolute/relative index, transmission speed, priority, authentication methods, and physical location. This command with the summary parameter displays one user interface in use totally and user interface name etc.
Example
Display the relational information of user interface 0.
<SW8800> display user-interface 0
Idx Type Tx/Rx Modem Privi Auth Int
+ 0 CON 0 9600 - 3 N -
+ : Current user-interface is active.
F : Current user-interface is active and work in async mode.
Idx : Absolute index of user-interface.
Type : Type and relative index of user-interface.
Privi: The privilege of user-interface.
Auth : The authentication mode of user-interface.
Int : The physical location of UIs.
A: Authenticate use AAA.
N: Current UI need not authentication.
P: Authenticate use current UI's password.
1-5
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
Table 1-1 Description on the fields of the display user-interface command
+
F
Field
Idx
Type
Tx/Rx
Modem
Privi
Description
Current user interface is in use
Current user interface is in use and work in asynchronous mode
Absolute index of user interface
Type and relative index of user interface
User interface speed
Modem operation mode
Which levels of commands can be used after logging in from the user interface
User interface authentication method
The physical location of user interfaces
Auth
Int
Display the summary information of user interface 0.
<SW8800> display user-interface 0 summary
0: U
1 character mode users. (U)
1 total UIs in use.
UI's name: con0
Table 1-2 Description on the fields of the display user-interface summary command
0: U
1 character mode users.
1 total UIs in use.
UI's name
Field Description
User interface type
One type user interface
One user interface in use totally
User interface name
1-6
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
1.1.6 display users
Syntax
display users [ all ]
View
Any view
Parameter
all: Displays the information of all user interfaces.
Description
Use the display users command to view the information of the user interface.
Example
Display the information of the current user interface.
[SW8800] display users
UI Delay Type Ipaddress Username
+ 0 CON 0 00:00:00
Table 1-3 Description on the fields of the display users command
Field
+
UI
Delay
Description
Current user interface is in use and work in asynchronous mode.
Number of the first list is the absolute number of user interface.
Number of the second list is the relative number of user interface.
Indicates the interval from the latest input till now in seconds.
IPaddress
Username
Displays initial connection location, namely the host IP address of the incoming connection.
Display the name of the user using this user interface, namely the login username of the user.
1-7
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
1.1.7 flow-control
Syntax
flow-control { hardware | none | software }
undo flow-control
View
User interface view
Parameter
Description
Use the flow-control command to configure the flow control mode on the user interface.
Use the undo flow-control command to restore the default flow control mode.
By default, the value is none. That is, no flow control will be performed.
This command can only be performed in Console and AUX user interface view.
Example
hardware: Configures to perform hardware flow control.
none: Configures no flow control.
software: Configures to perform software flow control.
Configure software flow control on AUX port.
[SW8800-ui-aux0] flow-control software
1.1.8 free user-interface
Syntax
free user-interface [ type ] number
View
User view
Parameter
type: Specifies the user interface type.
number: Specifies the absolute/relative number of the user interface. Configured together with the type, it will specify the user interface number of the corresponding type. If the type is not specified, number will specify an absolute user interface number.
1-8
3Com Switch 8800 Command Reference Guide
Description
Chapter 1 Logging into Switch Commands
Use the free user-interface command to reset a specified user interface. The user interface will be disconnected after the command is executed.
Note that the current user interface cannot be cleared.
Example
Reset user interface 1 after logged in to the switch via user interface 0.
<SW8800> free user-interface 1
After the command is executed, user interface 1 will be disconnected. It will not be connected to the switch until you log in via the user interface 1 for the next time.
1.1.9 header
Syntax
header [ shell | incoming | login ] text
undo header [ shell | incoming | login ]
View
System view
Parameter
login: Login information in case of authentication. It is displayed before the user is prompted to enter user name and password.
shell: User conversation established header, the information output after user conversation has been established. If authentication is required, it is prompted after the user passes authentication.
incoming: Login header, the information output after a Modem user logs in. If authentication is required, it is prompted after the user passes authentication. In this case, no shell information is output.
text: Specifies the title text. If you do not choose any keyword in the command, the system displays the login information by default. The system supports two types of input modes: one is to input all the text in one line, and altogether 256 characters, including command key word, can be input; the other is to input all the text in several lines using the <Enter> key, and altogether 1024 characters, excluding command key word, can be input. The text starts and ends with the first character. After inputting the end character, press the <Enter> key to exit the interact process.
Description
Use the header command to configure to display header when user login.
Use the undo header command to configure not to display the header.
1-9
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
When the users log in the switch, if a connection is activated, the login header will be displayed. After the user successfully logs in the switch, the shell header will be displayed.
Note that if you press <Enter> after typing any of the three keywords shell, login and
incoming in the command, then what you type after the word header is the contents of the login information, instead of identifying header type.
You can judge whether the initial character can be used as the header contents this way:
1) If there is only one character in the first line and it is used as the identifier, this initial character pairs with the ending character and is not the header contents.
2) If there are many characters in the first line but the initial and ending characters are different, this initial character pairs with the ending character and is the header contents.
3) There are many characters in the first line and the initial character is identical with the ending character, this initial character is not the header contents.
Example
Configure the header of setting up a session.
Mode 1: Input in one line
[SW8800] header shell %SHELL: Hello! Welcome%
(The starting and ending characters must be the same, and press the <Enter> key to finish a line)
When you log on the switch again, the terminal displays the configured session establishment title.
[SW8800] quit
<SW8800> quit
Please press ENTER
SHELL: Hello! Welcome
(The initial character “%” is not the header contents)
<SW8800>
Mode 2: Input in several lines
[SW8800] header shell % SHELL:
(After you pressing the <Enter> key, the system prompts the following message:)
Input banner text, and quit with the character '%'.
Go on inputting the rest text and end your input with the first letter:
Hello! Welcome %
(Press the <Enter> key)
[SW8800]
When you log on the switch again, the terminal displays the configured session establishment title.
[SW8800] quit
<SW8800> quit
1-10
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
Please press ENTER
%SHELL:
(The initial character “%” is the header contents)
Hello! Welcome
<SW8800>
1.1.10 history-command max-size
Syntax
history-command max-size value
undo history-command max-size
View
User interface view
Parameter
value: Defines the size of the history buffer, ranging from 0 to 256. By default, the size is
10, that is, 10 history commands can be saved.
Description
Use the history-command max-size command to configure the size of the history command buffer.
Use the undo history-command max-size command to restore default size of the history command buffer.
Example
Set the history buffer to 20, namely saving 20 history commands.
[SW8800-ui-aux0] history-command max-size 20
1.1.11 idle-timeout
Syntax
idle-timeout minutes [ seconds ]
undo idle-timeout
View
User interface view
Parameter
minutes: Specifies the minute, ranging from 0 to 35791.
seconds: Specifies the second, ranging from 0 to 59.
1-11
3Com Switch 8800 Command Reference Guide
Description
Chapter 1 Logging into Switch Commands
Use the idle-timeout command to configure the timeout function. If there is no user operation performed before idle-timeout expires, the user interface will be disconnected.
Use the undo idle-timeout command to restore the default idle-timeout.
idle-timeout 0 means disabling idle-timeout.
By default, idle-timeout is set to 10 minutes.
Example
Configure the timeout value to 1 minute on the AUX user interface.
[SW8800-ui-aux0] idle-timeout 1 0
1.1.12 language-mode
Syntax
language-mode { chinese | english }
View
User view
Parameter
chinese: Configures the language environment of command line interface as Chinese.
english: Configures the language environment of command line interface as English.
Description
Use the language-mode command to switch between different language environments of command line interface for convenience of different users.
By default, the value is English.
Example
Switch from English mode to Chinese mode.
<SW8800> language-mode chinese
1.1.13 lock
Syntax lock
View
User view
1-12
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 1 Logging into Switch Commands
Description
Use the lock command to lock the user interface to prevent unauthorized user from operating it.
Example
Lock the current user interface.
<SW8800> lock
Password: xxxx
Again: xxxx
1.1.14 modem
Syntax
modem [ call-in | both ]
undo modem [ call-in | both ]
View
User interface view
Parameter
call-in: Configures to allow call-in.
both: Configures to allow call-in and call-out.
Description
Use the modem command to configure the call-in and call-out attributes of the Modem.
Use the undo modem command to cancel the configuration of Modem call-in and call-out attributes.
The modem command without parameters is used to allow call-in and call-out.
The undo modem command without parameters is used to ban call-in and call-out.
This command can only be performed in AUX user interface view.
Example
Configure to allow call-in and call-out of Modem on the AUX port.
[SW8800-ui-aux0] modem both
1-13
3Com Switch 8800 Command Reference Guide
1.1.15 modem auto-answer
Chapter 1 Logging into Switch Commands
Syntax
View
User interface view
Parameter
None
Description
Use the modem auto-answer command to configure the answer mode as auto-answer.
Use the undo modem auto-answer command to configure the answer mode as manual answer.
By default, the mode is set to manual answer.
This command can only be performed in AUX user interface view.
Example
modem auto-answer
undo modem auto-answer
Configure the answer mode of the Modem on the AUX port as auto-answer.
[SW8800-ui-aux0] modem auto-answer
1.1.16 modem timer answer
Syntax
modem timer answer seconds
undo modem timer answer
View
User interface view
Parameter
seconds: Specifies the timer answer in seconds, ranging from 1 to 60.The default value is 30s.
Description
Use the modem timer answer command to configure the timer answer from off-hook to carrier detected when establishing the call in connection.
1-14
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
Use the undo modem timer answer command to restore the default timeout value.
This command can only be performed in AUX user interface view.
Example
Set the timer answer of AUX 0 to 45s.
[SW8800-ui-aux0] modem timer answer 45
1.1.17 parity
Syntax
parity { even | mark | none | odd | space }
undo parity
View
User interface view
Parameter
Description
Use the parity command to configure the parity mode on the user interface.
Use the undo parity command to restore the default parity mode.
This command can only be performed in Console and AUX user interface view.
By default, the mode is set to none.
Example
even: Configures to perform even parity.
mark: Configures to perform mark parity.
none: Configures not to perform parity.
odd: Configures to perform odd parity.
space: Configures to perform space parity.
Set mark parity on the AUX port.
[SW8800-ui-aux0] parity mark
1.1.18 protocol inbound
Syntax
protocol inbound { all | telnet | ssh }
View
User interface view
1-15
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 1 Logging into Switch Commands
all: Specifies to support all the protocols including Telnet and SSH.
ssh: Specifies to support SSH protocol only.
telnet: Specifies to support Telnet protocol only.
Description
Use the protocol inbound command to set the protocols to be used when logging in.
By default, all the protocols are set to be used for user login
Related command: user-interface vty.
Example
Set the Telnet protocol to be used for user login.
[SW8800-ui-aux0] protocol inbound telnet
1.1.19 quit
Syntax
quit
View
Any view
Parameter
None
Description
Use the quit command to return to the lower level view from the current view. If the current view is user view, you can quit the system.
There are three levels of views, which are listed from low to high as follows: z z z
User view
System view
VLAN view, Ethernet port view, and so on.
Related command: see return, system-view.
Example
Return to user view from system view.
[SW8800] quit
<SW8800>
1-16
3Com Switch 8800 Command Reference Guide
1.1.20 return
Chapter 1 Logging into Switch Commands
Syntax
return
View
System view or above
Parameter
None
Description
Use the return command to return to user view from a view other than user view.
Combination key <Ctrl+Z> performs the same function with the return command.
Related command: quit.
Example
Return to user view from system view.
[SW8800] return
<SW8800>
1.1.21 screen-length
Syntax
screen-length screen-length
undo screen-length
View
User interface view
Parameter
screen-length: Specifies how many lines can be displayed on a screen, ranging from 0 to 512. The default value is 24.
Description
Use the screen-length command to configure how many lines that can be displayed on a screen of the terminal.
Use the undo screen-length command to restore the default number of terminal information lines displayed on the terminal screen.
The screen-length 0 command is used to disable this function.
1-17
3Com Switch 8800 Command Reference Guide
Example
Chapter 1 Logging into Switch Commands
Configure the lines that can be displayed on a screen as 20 lines.
[SW8800-ui-aux0] screen-length 20
1.1.22 send
Syntax
send { all | number | type number }
View
User view
Parameter
Description
Use the send command to send messages between different user interfaces.
Example
all: Configures to send message to all user interfaces.
type: Specifies the user interface type, which can be console, aux or vty.
number: Specifies the absolute/relative number of the user interface. If the type is specified, it is a relative number. For aux or console user type, it can be 0 only. For vty user type, it ranges from 0 to 4. If the type is not specified, it is an absolute number, which ranges from 0 to 6.
Send message to all the user interfaces.
<SW8800> send all
1.1.23 service-type telnet
Syntax
service-type telnet [ level level ]
undo service-type telnet [ level ]
View
Parameter
Local-user view
level: Specifies which level of command a user can use after logon, ranging from 0 to 3 and defaults to level 1.
1-18
3Com Switch 8800 Command Reference Guide
Description
Chapter 1 Logging into Switch Commands
Use the service-type telnet command to configure which level of command a user can use after logon.
Use the undo service-type telnet command to restore the default level of command a user can use after logon.
Commands are classified into four levels, namely visit level, monitoring level, configuration level and management level. They are introduced as follows: z z z z
Visit level: Commands of this level involve command of network diagnosis tool
(such as ping and tracert), command of switch between different language environments of user interface ( language-mode), and telnet command etc. The operation of saving configuration file is not allowed on this level of commands.
Monitoring level: Commands of this level, including the display command and the
debugging command, are used for system maintenance, service fault diagnosis, etc. The operation of saving the configuration file is not allowed on this level of commands.
Configuration level: Service configuration commands, including routing command and commands on each network layer, are used to provide direct network service to the user.
Management level: These are commands that influence the basic operation of the system and system support module, which plays a supporting role on service.
Commands of this level involve file system commands, FTP commands, TFTP commands, XModem downloading commands, user management commands, and level setting commands.
Example
Configure the user zbr to use commands at level 0 after logon.
[SW8800] local-user zbr
[SW8800-luser-zbr] service-type telnet level 0
Quit the system and logs on with username “zbr” again. Now only the commands at level 0 are listed on the terminal.
[SW8800] quit
<SW8800> ?
User view commands:
debugging Enable system debugging functions
language-mode Specify the language environment
ping Ping function
quit
super
telnet
Exit from current command view
Privilege current user a specified priority level
Establish one TELNET connection
tracert Trace route function
undo Cancel current setting
1-19
3Com Switch 8800 Command Reference Guide
1.1.24 set authentication password
Chapter 1 Logging into Switch Commands
Syntax
set authentication password { cipher | simple } password
undo set authentication password
View
User interface view
Parameter
cipher: Displays the current password with cipher text.
simple: Displays the current password with plain text.
password: If the authentication is in the simple mode, the password must be in plain text. If the authentication is in the cipher mode, the password can be either in encrypted text or in plain text. The result is determined by the input. A plain text password is a sequential character string of no more than 16 digits, for example,
SW8800918. The length of an encrypted password must be 24 digits and in encrypted text, for example, _(TT8F]Y\5SQ=^Q`MAF4<1!!.
Description
Use the set authentication password command to configure the password for local authentication.
Use the undo set authentication password command to cancel local authentication password.
The password in plain text is required when performing authentication, regardless whether the configuration is plain text or encrypted text.
Note:
By default, password is required to be set for authenticating local users and remote
Modem users log in via the AUX port, and Telnet users log in through Ethernet port. If no password has been set, the following prompt will be displayed “Login password has not been set.”
Example
Configure the local authentication password on VTY 0 to aaa.
[SW8800-ui-vty0] set authentication password simple aaa
1-20
3Com Switch 8800 Command Reference Guide
1.1.25 shell
Chapter 1 Logging into Switch Commands
Syntax shell undo shell
View
User interface view
Parameter
None
Description
Use the shell command to enable terminal service of a user interface.
Use the undo shell command to disable the terminal service of a user interface.
By default, terminal service is enabled. z z
When using the undo shell command, note the following points. z
The undo shell command can only be used on the user interfaces other than the
Console user interface.
You cannot use this command on the user interface via which you log in.
You will be asked to confirm before executing this command on any legal user interface.
Example
Disable terminal service on the vty user interface 0 to 4 after logging in to the switch via user interface 0.
[SW8800] user-interface vty 0 4
[SW8800-ui-vty0-4] undo shell
1.1.26 speed
Syntax
speed speed-value
undo speed
View
User interface view
1-21
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 1 Logging into Switch Commands
speed-value: Specifies the transmission rate on the user interface in bit/s, which can be
300, 600, 1200, 2400, 4800, 9600, 19200, 38400, 57600, or 115200. The default rate is
9600bit/s.
Description
Use the speed command to configure the transmission rate on the user interface. Use the undo speed command to restore the default rate. This command can only be performed in Console and AUX user interface view.
Note that AUX user interface does not support the transmission rate: 57600bit/s and
115200bit/s.
Example
Configure the transmission speed on the AUX port as 9600bit/s.
[SW8800-ui-aux0] speed 9600
1.1.27 stopbits
Syntax
stopbits { 1 | 1.5 | 2 }
undo stopbits
View
User interface view
Parameter
1: Sets 1 stop bit.
1.5: Sets 1.5 stop bits.
2: Sets 2 stop bits.
Description
Use the stopbits command to configure the stop bits on the user interface.
Use the undo stopbits command to restore the default stop bits.
This command can only be performed in Console and AUX user interface view.
By default, the value is 1.
Note that setting 1.5 stop bits is not available on the Switch 8800.
1-22
3Com Switch 8800 Command Reference Guide
Example
Configure 2 stop bits on the AUX port.
[SW8800-ui-aux0] stopbits 2
Chapter 1 Logging into Switch Commands
1.1.28 super
Syntax
super [ level ]
View
User view
Parameter
level: User level, ranging 0 to 3. The default value is 3.
Description
Use the super command to enable the user to change to user level from the current user level. If the user has set the super password [ level level ] { simple | cipher }
password, then user password of the higher level is needed, or the former user level will not change.
Login users are classified into four levels that correspond to the four command levels respectively. After users of different levels log in, they can only use commands at the levels that are equal to or lower than its own level.
Related command: super password, quit.
Example
change to user level 3 from the current user level.
<SW8800> super 3
Password:
1.1.29 super password
Syntax
super password [ level level ] { simple | cipher } password
undo super password [ level level ]
View
System view
1-23
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 1 Logging into Switch Commands
level: Specifies the entering password of the specified priority, ranging from 1 to 3. The default value is 3, i.e. do not specify user level. It means the password to be set is used for entering level 3.
simple: Displays the current password with plain text.
cipher: Displays the current password with cipher text.
password: If the authentication is in the simple mode, the password must be in plain text. If the authentication is in the cipher mode, the password can either be in encrypted text or in plain text. The result is determined by the input. A plain text password is a sequential character string of no more than 16 digits, for example,
SW8800918. The length of an encrypted password must be 24 digits and in encrypted text, for example, _(TT8F]Y\5SQ=^Q`MAF4<1!!.
Description
Use the super password command to configure the password for changing the user from a lower level to a higher level. In order to prevent unauthorized users from illegal intrusion, user ID authentication is performed when users switch from a lower level to a higher level. For the sake of confidentiality, on the screen the user cannot see the password that he entered. Only when correct password is input for three times, can the user switch to the higher level. Otherwise, the original user level will remain unchanged.
Use the undo super password command to cancel the current settings.
The password in plain text is required when performing authentication, regardless whether the configuration is plain text or encrypted text.
Example
Configure the password to zbr for changing the user from the current level to level 3.
[SW8800] super password level 3 simple zbr
1.1.30 sysname
Syntax
sysname text
undo sysname
View
Parameter
System view
text: Specifies the hostname with a character string, ranging from 1 to 30 characters.
The default name is SW8800.
1-24
3Com Switch 8800 Command Reference Guide
Description
Chapter 1 Logging into Switch Commands
Use the sysname command to configure the hostname of the switch.
Use the undo sysname command to restore the default hostname.
Changing the hostname of the switch will affect the prompt of command line interface.
For example, if the hostname of the switch is SW8800, the prompt in user view will be
<SW8800>.
Example
Configure the hostname of switch to Switch.
[SW8800] sysname Switch
[Switch]
1.1.31 system-view
Syntax system-view
View
User view
Parameter
None
Description
Use the system-view command to enter system view from user view.
Related command: quit, return.
Example
Enter system view from user view.
<SW8800> system-view
System View: return to User View with Ctrl+Z..
[SW8800]
1.1.32 telnet
Syntax
telnet [ vpn-instance vpn-instance-name ] { hostname | ip-address } [ service-port ]
View
User view
1-25
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 1 Logging into Switch Commands
vpn-instance vpn-instance-name: Specifies vpn-instance of MPLS VPN.
hostname: Specifies the host name of the remote system. It is configured using the ip
host command.
ip-address: Specifies the IP address of the remote switch.
service-port: Designates the TCP port on the remote switch providing Telnet service, ranging from 0 to 65535.
Description
Use the telnet command to log in to another switch from the current one via telnet for remote management. To terminate the Telnet logon, press <Ctrl+K>.
By default, when the service-port is not specified, the default telnet port number is 23.
Related command: display tcp status.
Example
Log in to switch SW88002 at 129.102.0.1 from the current SW88001 switch.
<SW88001> telnet 129.102.0.1
Trying 129.102.0.1...
Press CTRL+K to abort
Connected to 129.102.0.1...
<SW88002>
1.1.33 user-interface
Syntax
user-interface [ type ] first-number [ last-number ]
View
System view
Parameter
type: Specifies the user interface type, which can be aux, console or vty.
first-number: Specifies the number of the first user interface to be configured. It must be an integer in the range of 0 to 6.
last-number: Specifies the number of the last user interface to be configured. It must be an integer in the range of 1 to 6 and it must be greater than the value of first-number.
Description
Use the user-interface command to enter single user interface view to configure the corresponding user interfaces.
1-26
3Com Switch 8800 Command Reference Guide
Example
Chapter 1 Logging into Switch Commands
Enter vty 0 user interface view for configuration.
[SW8800] user-interface vty 0
[SW8800-ui-vty0]
1.1.34 user privilege level
Syntax
user privilege level level
undo user privilege level
View
User interface view
Parameter
level: Specifies which level of command a user can use after logon from the specifically user interface, ranging from 0 to 3.
Description
Use the user privilege level command to configure which level of command a user can use after logon from the specifically user interface, so that a user can use all the available commands at this level.
Use the undo user privilege level command to restore the default level of command a user can use after logon from the specifically user interface.
By default, a user can access the commands at Level 3 after logging in through the
Console user interface, and the commands at Level 0 after logging in through the AUX or VTY user interface.
Example
Configure to use commands level 0 after logging in from VTY 0 user interface.
[SW8800-ui-vty0] user privilege level 0
After you telnet from VTY 0 user interface to the switch, you will view the terminal only displays commands at level 0.
<SW8800> ?
User view commands:
debugging Enable system debugging functions
language-mode Specify the language environment
ping Ping function
quit Exit from current command view
super Privilege current user a specified priority level
1-27
3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands
telnet
tracert
Establish one TELNET connection
Trace route function
undo Cancel current setting
1-28
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
Chapter 2 Ethernet Port Configuration Commands
2.1 Ethernet Port Configuration Commands
2.1.1 broadcast-suppression
Syntax
broadcast-suppression pct
undo broadcast-suppression
View
Ethernet port view
Parameter
pct: Specifies the maximum wire speed ratio of the broadcast traffic allowed on the port, the smaller the ratio is, the smaller the broadcast traffic is allowed. For the Ethernet port, the value ranges from 5 to 100, in steps of 5. By default, the value is 50. For the 1000
Mbps or 10 Gbps port, the value ranges from 1 to 100, in steps of 1. By default, the value is 50.
Description
Use the broadcast-suppression command to configure the broadcast traffic size enabled on port. Once the broadcast traffic exceeds the value set by the user, the system will discard some broadcast to ensure network service so that the traffic ratio of broadcast is maintained in a proper range.
Use the undo broadcast-suppression command to restore the default broadcast traffic enabled on port, that is, 50.
Example
Enable 20% broadcast traffic to pass, i.e. 80% broadcast storm suppression is made on broadcast traffic of port.
[SW8800-Ethernet2/1/1] broadcast-suppression 20
2.1.2 copy configuration
Syntax
copy configuration source { interface-type interface-number | interface-name |
aggregation-group agg-id } destination { interface_list [ aggregation-group agg-id ]
| aggregation-group agg-id }
2-1
3Com Switch 8800 Command Reference Guide
View
System view
Parameter
Chapter 2 Ethernet Port Configuration Commands
interface_type: Source port type.
interface_num: Source port number.
interface_name: Source port name, in the format of interface_name = interface_type
interface_num. For more information, see the parameter item for the interface command.
interface_list: Destination port list, interface_list = { interface_type interface_num |
interface_name } [ to { interface_type interface_num | interface_name } ] &<1-10>.
&<1-10> indicates that the former parameter can be input 10 times repeatedly at most.
agg-id: Source or destination aggregation group ID. If it is a source aggregation group, the port with minimum port number is the source port; if it is a destination aggregation group, the configurations of all its member ports change to be consistent with that of the source.
Description
Use the copy configuration command to copy the configuration of a specific port to other ports, to ensure consistent configuration.
Example
Copy the configuration of aggregation group 1 to aggregation group 2.
[SW8800] copy configuration source aggregation-group 1 destination aggregation-group 2
2.1.3 description
Syntax
description text
undo description
View
Ethernet port view
Parameter
text: Port description character string, with 80 characters at most.
2-2
3Com Switch 8800 Command Reference Guide
Description
Chapter 2 Ethernet Port Configuration Commands
Use the description command to configure the description character string for
Ethernet port.
Use the undo description command to cancel the port description character string.
By default, the port description character string is null.
Example
Configure the description character string of Ethernet port Ethernet2/1/1 as lanswitch-interface.
[SW8800-Ethernet2/1/1] description lanswitch-interface
2.1.4 display counters
Syntax
display counters [ rate ] { inbound | outbound } interface [ interface-type ]
View
Any view
Parameter
rate: Displays the rate information of the ports in UP status during the latest sampling period. If this keyword is not specified in the command, the system displays packet counts.
inbound: Displays the import statistic information.
outbound: Displays the export statistic information.
interface-type: Specifies the port type. The available types are: Ethernet,
GigabitEthernet.
Description
Use the display counters command to view the statistics on the ports of the specified types. If the port type is not specified, the system displays statistics orderly on all the ports.
Example
Display the inbound statistics on the GigabitEthernet ports.
<SW8800> display counters inbound interface GigabitEthernet
Interface Total(pkts) BroadCast(pkts) MultiCast(pkts) Err(pkts)
GE3/2/1 12,345,678,912,345 OverFlow 12,345,678,912,345 1,234,567
GE3/2/2 0 0 0 0
GE3/2/3 0 0 0 0
2-3
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
GE3/2/4 0 0 0 0
OverFlow :more than 14 decimal digits(7 digits for column "Err").
:not supported.
Note:
Statistic values are comma-separated decimal numbers. For the Total, BroadCast and
MultiCast items, decimal numbers of 14 digits can be displayed at most, and those of more than 14 digits are indicated with “OverFlow”; for the Err item, decimal numbers of
7 digits can be displayed at most, and those of more than 7 digits are indicated with
“OverFlow”.
2.1.5 display interface
Syntax
display interface [ interface_type | interface_type interface_num [packets] |
interface_name ]
View
Any view
Parameter
Description
Use the display interface command to view the configuration information on the port.
If the port type and number are not specified when displaying the port information, the information of all the ports will be displayed. If only the port type is specified, all the information of the ports of this type will be displayed. If both port type and port number are specified, the information of the designated port will be displayed.
Example
interface_type: Specifies the port type.
interface_num: Specifies the port number.
interface_name: Specifies the port name in the interface_name= interface_type
interface_num format.
For parameter description, refer to the interface command.
Display configuration information of Ethernet2/1/1.
<SW8800> display interface ethernet2/1/1
Ethernet2/1/1 current state : UP
2-4
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is
00e0-fc00-85ff
The Maximum Transmit Unit is 1500
Media type is twisted pair, loopback not set
Port hardware type is 100_BASE_TX
100Mbps-speed mode, full-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Flow-control is not enabled
The Maximum Frame Length is 1552
Broadcast MAX-ratio: 100%
Allow jumbo frame to pass
MixInsert-Port VPN status:not enable MixInsert access
PVID: 48
Mdi type: auto
Port link-type: access
Tagged VLAN ID : none
Untagged VLAN ID : 48
Last 300 seconds input: 0 packets/sec 61 bits/sec 1%
Last 300 seconds output: 0 packets/sec 0 bits/sec 1%
Input(total): 54 packets, 7465 bytes
42 broadcasts, 5 multicasts
Input(normal): 54 packets, 7465 bytes
- broadcasts, - multicasts
Input: 0 input errors, 0 runts, 0 giants, 0 throttles, 0 CRC
0 frame, 0 overruns, - aborts, 0 ignored, - parity errors
Output(total): 1 packets, 64 bytes
0 broadcasts, 0 multicasts, 0 pauses
Output(normal): 1 packets, 64 bytes
- broadcasts, - multicasts, 0 pauses
Output: 0 output errors, - underruns, - buffer failures
0 aborts, 0 deferred, - collisions, 0 late collisions
- lost carrier, - no carrier
Receive Packet Peak Value Info: 7215 bytes, happened at 03:30:35 3-7-2001
Transmit Packet Peak Value Info: 64 bytes, happened at 03:30:35 3-7-2001
Table 2-1 Description on the fields of the display interface command
Field
Ethernet2/1/1 current state
IP Sending Frames' Format
Hardware address
The Maximum Transmit Unit
Description
The current status of Ethernet port
(enabled or disabled)
Ethernet frame format
Port hardware address
Maximum transmit unit
2-5
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
Field
Media type loopback not set
Port hardware type
Description
Type of media
Port loopback test status
Port hardware type
100 Mbps-speed mode, full-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Both the duplex mode and the rate are set to auto-negotiation. The rate of
100 Mbps and the mode of full-duplex are adopted after negotiating with its peer
Flow-control is not enabled
The Maximum Frame Length
Port flow control status
Maximum length of the Ethernet frames that can pass the port
Broadcast MAX-ratio
Allow jumbo frame to pass
Port broadcast storm suppression ratio
Jumbo frame is allowed to pass the port
Port VPN status
PVID
Mdi type
Port link-type
Tagged VLAN ID
Port VPN status (enable or not VPN access)
Port default VLAN ID
Cable type
Port link type
The VLANs with packets tagged
Untagged VLAN ID The VLANs with packets untagged
Last 300 seconds input: 0 packets/sec 0 bits/sec
Last 300 seconds output: 0 packets/sec 0 bits/sec
The input/output rate and the passing packet number on this port in the last
300 seconds.
2-6
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
Field Description
Input(total): 0 packets, 0 bytes
0 broadcasts, 0 multicasts
Input(normal): 0 packets, 0 bytes
- broadcasts, - multicasts
Input: 0 input errors, 0 runts, 0 giants, 0 throttles, 0 CRC
0 frame, 0 overruns, - aborts, 0 ignored, - parity errors
Output(total): 0 packets, 0 bytes
0 broadcasts, 0 multicasts, 0 pauses
Output(normal): 0 packets, 0 bytes
- broadcasts, - multicasts, 0 pauses
Output: 0 output errors, - underruns, - buffer failures
0 aborts, 0 deferred, - collisions, 0 late collisions
- lost carrier, - no carrier
The statistics information of input/output packets and errors on this port. “-” indicates that the item doesn’t supported by the switch.
2.1.6 display port
Syntax
display port { hybrid | trunk }
View
Any view
Parameter
Description
Use the display port command to view the ports in the current system, whose link type is Hybrid or Trunk. If there is any such port, display the corresponding port name.
Example
hybrid: Displays Hybrid port.
trunk: Displays Trunk port.
Display the Hybrid ports in the current system.
<SW8800> display port hybrid
The following hybrid ports exist:
Ethernet2/1/1 Ethernet2/1/2
2-7
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
The above information displays that the current system has two Hybrid ports,
Ethernet2/1/1 and Ethernet2/1/2.
2.1.7 display port vlan-vpn
Syntax display port vlan-vpn
View
Any view
Parameter
None
Description
Use the display port vlan-vpn command to view the ports on which VLAN VPN has been enabled and the VLAN ID of the VLAN VPN.
Example
Display the related information of the port VLAN VPN feature.
<SW8800> display port vlan-vpn
Ethernet2/1/1
VLAN-VPN status: enabled
VLAN-VPN VLAN: 1
Ethernet2/1/2
VLAN-VPN status: enabled
VLAN-VPN VLAN: 2
Table 2-2 Description on the fields of the display port vlan-vpn command
Field
Ethernet2/1/1
VLAN-VPN status
VLAN-VPN VLAN
Description
The Ethernet port on which VLAN VPN has been enabled.
VLAN VPN status.
VLAN ID of the VLAN VPN.
2.1.8 duplex
Syntax
duplex { auto | full | half }
undo duplex
2-8
3Com Switch 8800 Command Reference Guide
View
Ethernet port view
Chapter 2 Ethernet Port Configuration Commands
Parameter
auto: Port auto-negotiation attribute.
full: Port full-duplex attribute.
half: Port half-duplex attribute.
Description
Use the duplex command to configure the duplex attribute of the Ethernet port.
Use the undo duplex command to restore the duplex attribute of the port to default auto-negotiation mode.
By default, the duplex attribute is auto.
Related command: speed.
Example
Configure the Ethernet port Ethernet2/1/1 as auto-negotiation attribute.
[SW8800-Ethernet2/1/1] duplex auto
2.1.9 flow-control
Syntax flow-control undo flow-control
View
Ethernet port view
Parameter
None
Description
Use the flow-control command to enable flow control feature on the Ethernet port to avoid discarding data packets due to congestion.
Use the undo flow-control command to disable flow control feature.
By default, flow control on the Ethernet port is disabled.
Example
Enable flow control on Ethernet2/1/1.
2-9
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
[SW8800-Ethernet2/1/1] flow-control
2.1.10 link-status hold
Syntax
link-status hold hold-time
undo link-status hold
View
System view
Parameter
hold-time: Sets time interval (in seconds) for port suppression. The value 0 indicates no suppression. By default, the time interval is 3 seconds.
Description
Use the link-status hold hold-time command to set port hold time. When you enable/disable ports frequently, the switch may fail. Therefore, the function is provided to prohibit frequent change of the port status.
Use the undo link-status hold command to restore the default port hold time, 3 seconds.
2.1.11 interface
Syntax
interface { interface_type interface_num | interface_name }
View
Parameter
System view
interface_type: Specifies the port type. It can be Aux, Ethernet, Loopback, M-Ethernet,
NULL, VLAN-interface, GigabitEthernet, and 10-GigabitEthernet.
interface_num: Specifies the port number. It adopts slot-number/subslot-number/
port-number format. slot-number specifies the I/O module slot number of the port. For the 7-slot chassis, it ranges from 2 to 6. For the 10-slot chassis, it ranges from 0 to 3 and 6 to 9 (slot number 4 and 5 are for the Fabric). For the 14-slot chassis, it ranges from 0 to 5 and 8 to 13 (slot number 6 and 7 are for the Fabric). subslot-number specifies the sub-slot number of the port and ranges from 1 to 3. port-number specifies the port number on the daughter card. It is 1 or ranges from 1 to 12, 20, or 48, depending on the service board type. M-Ethernet is used to update and maintain. It ranges from 0/0/0.
2-10
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
interface_name: Specifies the port name in the interface_type interface_num format.
Description
Use the interface command to enter the Ethernet port view.
If the user wants to configure the related parameters of the Ethernet port, he must first use this command to enter the Ethernet port view.
Example
Enter the Ethernet2/1/1 port view.
[SW8800] interface ethernet2/1/1
2.1.12 jumboframe enable
Syntax
jumboframe enable [ jumboframe-value ]
undo jumboframe enable
View
Ethernet port view
Parameter
Description
Use the jumboframe enable command to permit jumbo frame to pass the current
Ethernet port.
Use the undo jumboframe enable command to prohibit jumbo frame to pass the current Ethernet port.
By default, the jumbo frame is permitted to pass the Ethernet port.
Note that, the values can be consecutive, but the effective values are discrete. The effective frame length for the FE port is 1,552. The effective frame length for the GE port and 10 GE port is 1,552, 9,022, 9,192 and 10,240. You can execute the display
interface command to view the configured effective value for the port.
Example
jumboframe-value: Size of jumbo frame permitted to pass the port, in the range of 1,536 to 1,552 for an FE port, and 1,536 to 10,240 for a GE or 10 GE port.
Permit jumbo frame to pass Ethernet2/1/1.
[SW8800-Ethernet2/1/1] jumboframe enable
2-11
3Com Switch 8800 Command Reference Guide
2.1.13 loopback
Chapter 2 Ethernet Port Configuration Commands
Syntax
View
Ethernet port view
Parameter
external: Ethernet port in external loop mode. The Switch 8800 does not support external mode.
internal: Ethernet port in internal loop mode.
Description
Use the loopback command to set the Ethernet port in loop mode.
Use the undo loopback command to cancel the loop setting.
By default, the Ethernet port is not in loop mode.
Example
loopback { external | internal }
undo loopback
Configure Ethernet2/1/1 in internal loop mode.
[SW8800-Ethernet2/1/1] loopback internal
2.1.14 mdi
Syntax
mdi { across | auto | normal }
undo mdi
View
Parameter
Ethernet port view
across: Network cable type is cross-over cable.
auto: Network cable will be recognized whether it is straight-through cable or cross-over cable.
normal: Network cable of the port is straight-through cable.
2-12
3Com Switch 8800 Command Reference Guide
Description
Chapter 2 Ethernet Port Configuration Commands
Use the mdi command to configure the network cable type of the Ethernet ports. Use the undo mdi command to restore the default type.
By default, the network cable type will be recognized automatically.
Note that the settings only take effect on the 10/100 Mbps and 10/100/1000 Mbps electrical ports.
Example
Configure the network cable type of Ethernet port Ethernet2/1/1 as auto.
[SW8800-Ethernet2/1/1] mdi auto
2.1.15 port access vlan
Syntax
port access vlan vlan_id
undo port access vlan
View
Ethernet port view
Parameter
vlan_id: VLAN ID defined in IEEE802.1Q, ranging from 2 to 4,094.
Description
Use the port access vlan command to join the access port to a specified VLAN.
Use the undo port access vlan command to cancel the access port from the VLAN.
The use condition of this command is the VLAN indicated in vlan_id must exist.
Example
Join Ethernet2/1/1 port to VLAN3 (VLAN3 has existed).
[SW8800-Ethernet2/1/1] port access vlan 3
2.1.16 port hybrid pvid vlan
Syntax
port hybrid pvid vlan vlan_id
undo port hybrid pvid
View
Ethernet port view
2-13
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 2 Ethernet Port Configuration Commands
vlan_id: VLAN ID defined in IEEE802.1Q, ranging from 1 to 4,094 and the default
vlan_id is 1.
Description
Use the port hybrid pvid vlan command to configure the default VLAN ID of the local hybrid port.
Use the undo port hybrid pvid command to restore the default VLAN ID of the local hybrid port.
The default VLAN ID of local hybrid port shall be consistent with that of the peer one, otherwise, the packet cannot be properly transmitted.
Related command: port link-type.
Example
Configure the default VLAN of the hybrid port Ethernet2/1/1 to 100.
[SW8800-Ethernet2/1/1] port hybrid pvid vlan 100
2.1.17 port hybrid vlan
Syntax
port hybrid vlan vlan_id_list { tagged | untagged }
undo port hybrid vlan vlan_id_list
View
Ethernet port view
Parameter
vlan_id_list: vlan_id_list = [ vlan_id1 [ to vlan_id2 ] ]&<1-10>: Specifies which VLAN the hybrid port will be added to. It can be discrete. The vlan_id ranges from 1 to 4,094.
&<1-10> indicates that the former parameter can be input 10 times repeatedly at most.
tagged: Packet of specified VLAN will have tag.
untagged: Packet of specified VLAN will not have tag.
Description
Use the port hybrid vlan command to join the hybrid port to specified existing VLAN.
Use the undo port hybrid vlan command to cancel the hybrid port from the specified
VLAN.
Hybrid port can belong to multiple VLANs. If the port hybrid vlan vlan_id_list { tagged
| untagged } command is used for many times, the VLANs carried by the hybrid port is the set of vlan_id_list.
2-14
3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands
This command can be used on condition that the VLAN specified with vlan_id must
have been existed.
Related command: port link-type.
Example
Join hybrid port Ethernet2/1/1 to VLAN of 2, 4 and 50-100, and these VLAN will have tags.
[SW8800-Ethernet2/1/1] port hybrid vlan 2 4 50 to 100 tagged
2.1.18 port link-type
Syntax
port link-type { access | hybrid | trunk }
undo port link-type
View
Ethernet port view
Parameter
access: Configures the port as access port.
hybrid: Configures the port as hybrid port.
trunk: Configures the port as trunk port
Description
Use the port link-type command to configure the link type of Ethernet port.
Use the undo port link-type command to restore the port as default status, i.e. access port.
You can configure three types of ports concurrently on the same switch, but you cannot switch between trunk port and hybrid port. You must turn it first into access port and then set it as other type. For example, you cannot configure a trunk port directly as hybrid port, but first set it as access port and then as hybrid port.
By default, the port is access port.
Example
Configure Ethernet port Ethernet2/1/1 as trunk port.
[SW8800-Ethernet2/1/1] port link-type trunk
2-15
3Com Switch 8800 Command Reference Guide
2.1.19 port-mode
Chapter 2 Ethernet Port Configuration Commands
Syntax
port-mode { wan | lan }
undo port-mode
View
Ethernet port view
Parameter
wan: Configures the port works in WAN mode, and then only common data exchange can be implemented on the port.
lan: Configures the port works in LAN mode, and then data can be transferred on the port.
Description
Use the port-mode command to configure network mode available on the port. Most ports adopt the LAN mode for general data exchange. The port must work in WAN mode, however, if it needs to transfer data (such as in fiber transmission).
Use the undo port-mode command to restore the default mode of the port.
By default, the Ethernet port works in LAN mode.
Note that only GE or 10GE port supports this command.
Example
Set port GigabitEthernet2/2/1 to work in WAN mode.
[SW8800-GigabitEthernet2/2/1] port-mode wan
Restore the default (LAN) mode on port GigabitEthernet2/2/1.
[SW8800-GigabitEthernet2/2/1] undo port-mode
2.1.20 port trunk permit vlan
Syntax
port trunk permit vlan { vlan_id_list | all }
undo port trunk permit vlan { vlan_id_list | all }
View
Ethernet port view
2-16
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 2 Ethernet Port Configuration Commands
vlan_id_list: vlan_id_list = [ vlan_id1 [ to vlan_id2 ] ]&<1-10> is the VLAN range joined by the trunk port. It can be discrete. The vlan_id ranges from 2 to 4,094. &<1-10> indicates that the former parameter can be input 10 times repeatedly at most.
all: Joins the trunk port to all VLANs.
Description
Use the port trunk permit vlan command to join trunk port to specified VLAN.
Use the undo port trunk permit vlan command to cancel trunk port from specified
VLAN.
Trunk port can belong to multiple VLANs. If the port trunk permit vlan command is used many times, then the VLAN enabled to pass on trunk port is the set of these
vlan_id_list.
Related command: port link-type.
Example
Remove the trunk port from the default VLAN.
[SW8800-Ethernet2/1/1] undo port trunk permit vlan 1
Add the trunk port to all VLANs.
[SW8800-Ethernet2/1/1] port trunk permit vlan all
2.1.21 port trunk pvid vlan
Syntax
port trunk pvid vlan vlan_id
undo port trunk pvid
View
Ethernet port view
Parameter
vlan_id: VLAN ID defined in IEEE802.1Q, ranging from1 to 4,094 and the default
vlan_id is 1.
Description
Use the port trunk pvid vlan command to configure the default VLAN ID of trunk port.
Use the undo port trunk pvid command to restore the default VLAN ID of the port.
The default VLAN ID of local trunk port should be consistent with that of the peer one, otherwise, the packet cannot be properly transmitted.
2-17
3Com Switch 8800 Command Reference Guide
Related command: port link-type.
Example
Chapter 2 Ethernet Port Configuration Commands
Configure the default VLAN of the trunk port Ethernet2/1/1 to 100.
[SW8800-Ethernet2/1/1] port trunk pvid vlan 100
2.1.22 reset counters interface
Syntax
reset counters interface [ interface_type | interface_type interface_num |
interface_name ]
View
User view
Parameter
interface_type: Specifies the port type.
interface_num: Specifies the port number.
interface_name: Specifies the port name in the interface_name= interface_type
interface_num format.
For parameter description, refer to the interface command.
Description
Use the reset counters interface command to reset the statistical information on the port and count the related information again on the port for the user.
If the port type and number are not specified when clearing the port information, information of all ports on the switch will be cleared. If only the port type is specified, all the information on the ports of this type will be cleared. If both port type and port number are specified, the information on the designated port will be cleared.
You cannot clear statistics on the 802.1x-enabled port.
Example
Reset statistical information on Ethernet port Ethernet2/1/1.
<SW8800> reset counters interface ethernet2/1/1
2.1.23 shutdown
Syntax
shutdown
undo shutdown
2-18
3Com Switch 8800 Command Reference Guide
View
Ethernet port view
Parameter
None
Chapter 2 Ethernet Port Configuration Commands
Description
Use the shutdown command to disable the Ethernet port.
Use the undo shutdown command to enable the Ethernet port.
By default, the Ethernet port is enabled.
Example
Enable Ethernet port Ethernet2/1/1.
[SW8800-Ethernet2/1/1] undo shutdown
2.1.24 speed
Syntax
speed { 10 | 100 | 1000 | 10000 | auto }
undo speed
View
Ethernet port view
Parameter
10: Speed on the port is 10 Mbps.
100: Speed on the port is 100 Mbps.
1000: Speed on the port is 1000 Mbps.
10000: Speed on the port is 10 Gbps.
auto: Port speed is in peer auto-negotiation status.
Description
Use the speed command to configure the port speed.
Use the undo speed command to restore the default speed.
By default, the speed is auto.
Related command: duplex.
Example
Configure Ethernet port Ethernet2/1/1 port speed as 100 Mbps.
2-19
3Com Switch 8800 Command Reference Guide
[SW8800-Ethernet2/1/1] speed 100
Chapter 2 Ethernet Port Configuration Commands
2.1.25 vlan-vpn enable
Syntax
vlan-vpn enable
undo vlan-vpn
View
Ethernet port view
Parameter
None
Description
Use the vlan-vpn enable command to enable port VLAN VPN.
Use the undo vlan-vpn command to disable port VLAN VPN.
Note that if anyone of GVRP, STP, NTP or 802.1x has been enabled on a port, VLAN
VPN cannot be enabled on it.
By default, the port VLAN VPN is disabled.
Example
Enable VLAN VPN on Ethernet2/1/1.
[SW8800-Ethernet2/1/1] vlan-vpn enable
2-20
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
Chapter 3 Ethernet Link Aggregation
Configuration Commands
3.1 Ethernet Link Aggregation Configuration Commands
3.1.1 debugging lacp packet
Syntax
debugging lacp packet [ interface { interface-type interface-number | interface-name }
[ to { interface-type interface-num | interface-name } ] ]
undo debugging lacp packet [ interface { interface-type interface-number |
interface-name } [ to { interface-type interface-num | interface-name } ] ]
View
System view
Parameter
interface { interface_type interface_ num | interface_name } [ to { interface_type
interface_ num | interface_name } ]: Specifies a port. The command without the to parameter specifies a port, while the command with the to parameter specifies several consecutive ports. interface_name indicates port name and is in the format of
interface_name=interface_type interface_num. interface_type indicates port type.
interface_num indicates port number. For more information, see the parameter description of the interface command.
Description
Use the debugging lacp packet command to enable LACP packet debugging for the port. If you do not specify a port, the command enables packet debugging on all
LACP-enabled ports.
Use the undo debugging lacp packet command to disable LACP packet debugging for the port.
Example
Enable LACP packet debugging for Ethernet port Ethernet1/1/1.
<SW8800> debugging lacp packet interface ehternet1/1/1
3-1
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
3.1.2 debugging lacp state
Syntax
debugging lacp state [ interface { interface-type interface-number | interface-name }
[ to { interface-type interface-num | interface-name } ] ] { { actor-churn | mux |
partner-churn | ptx | rx }* | all }
undo debugging lacp state [ interface { interface-type interface-number |
interface-name } [ to { interface-type interface-num | interface-name } ] ] { { actor-churn
| mux | partner-churn | ptx | rx }* | all }
View
User view
Parameter
interface { interface_type interface_ num | interface_name } [ to { interface_type
interface_ num | interface_name } ]: Specifies a port. The command without the to parameter specifies a port, while the command with the to parameter specifies several consecutive ports. interface_name indicates port name and is in the format of
interface_name=interface_type interface_num. interface_type indicates port type.
interface_num indicates port number.
actor-churn: Actor-churn state debugging.
mux: MUX state debugging.
partner-churn: Partner-churn state debugging.
ptx: PTX state debugging.
rx: RX state debugging.
all: All state debugging.
Description
Use the debugging lacp state command to enable LACP state debugging for the port.
Use the undo debugging lacp state command to disable LACP state debugging for the port.
Example
Enable all LACP state debugging.
<SW8800> debugging lacp state all
3.1.3 debugging link-aggregation error
Syntax debugging link-aggregation error
3-2
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
undo debugging link-aggregation error
View
User view
Parameter
None
Description
Use the debugging link-aggregation error command to enable link aggregation error debugging.
Use the undo debugging link-aggregation error command to disable link aggregation error debugging.
Example
Enable link aggregation error debugging.
<SW8800> debugging link-aggregation error
3.1.4 debugging link-aggregation event
Syntax debugging link-aggregation event
undo debugging link-aggregation event
View
User view
Parameter
None
Description
Use the debugging link-aggregation event command to enable link aggregation event debugging.
Use the undo debugging link-aggregation event command to disable link aggregation event debugging.
Example
Enable link aggregation event debugging.
<SW8800> debugging link-aggregation event
3-3
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
3.1.5 display lacp system-id
Syntax display lacp system-id
View
Any view
Parameter
None
Description
Use the display lacp system-id command to display the device ID of local system, including system priority and system MAC address.
Related command: link-aggregation.
Example
Display the device ID of the local system.
<SW8800> display lacp system-id
Actor System ID: 0x8000, 00e0-fc00-0100
Table 3-1 Description on the fields of the display lacp system-id command
Field
Actor System ID
Description
The device ID of the local system, including system priority and system MAC address.
3.1.6 display link-aggregation summary
Syntax display link-aggregation summary
View
Any view
Parameter
None
Description
Use the display link-aggregation summary command to view summary information of all aggregation groups, including actor system ID, aggregation group ID, aggregate
3-4
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds group type, partner system ID, number of active ports, number of standby ports, load sharing type and master port number.
Example
Display summary information of all aggregation information.
<SW8800> display link-aggregation summary
Aggregation Group Type:D -- Dynamic, S -- Static , M -- Manual
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor ID: 0x8000, 00e0-fc23-0d90
AL AL Partner ID Select Standby Share Master
ID Type Ports Ports Type Port
--------------------------------------------------------------------------
------
1 M none 2 0 Shar GigabitEthernet3/1/1
3 M none 4 0 Shar Ethernet4/1/45
Table 3-2 Description on the fields of the display link-aggregation summary command
Field
Actor ID
AL ID
AL Type
Partner ID
Select Ports
Standby Ports
Share Type
Master Port
Description
Local device ID
Aggregation group ID
Aggregation group type
Peer device ID
Number of selected ports
Number of standby ports
Load sharing type
Master port number
Note that some aggregation indexes are reserved, so the first aggregation index will be reported as 193.
3.1.7 display link-aggregation verbose
Syntax
display link-aggregation verbose agg-id
View
Any view
3-5
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
Parameter
agg-id: Aggregation group ID, which must be existing ones, in the range of 1 to 728.
Description
Use the display link-aggregation verbose command to view detailed information of a designated port, including aggregation group ID, aggregation group type, load sharing type, aggregation group description and detailed local information (system ID, member ports, port status, port priority, flag, operation key) and detailed remote information
(local port, indexes of remote ports, port priority, flag, operation key and system ID, here local and remote are in a relative sense).
Note that since the manual aggregation group cannot get the information of the peer end, every item of the peer end is displayed as 0, which does not indicate the actual status of the peer system.
Example
Display detailed information of aggregation group 1.
<SW8800> display link-aggregation verbose 1
Loadsharing Type: Shar – Loadsharing, NonS – Non-Loadsharing
Aggregation ID: 1, AggregationType: Manual, Loadsharing Type: Shar
Aggregation Descripiton:
System ID: 0x8000, 00e0-fc00-8512
Port Status: S -- Selected, T -- sTandby
Local:
Port Status Priority Flag Oper-Key
Ethernet2/1/1 S 32768 0x00 1
Ethernet2/1/2 S 32768 0x00 1
Remote:
Actor Partner Priority Flag Oper-Key SystemID
Ethernet2/1/1 0 0 0x00 0 0x0,0000-0000-0000
Ethernet2/1/2 0 0 0x00 0 0x0,0000-0000-0000
Table 3-3 Description on the fields of the display link-aggregation verbose command
Aggregation ID
Field
Aggregation Type
Loadsharing Type
Description
Aggregation group ID
Aggregation group type, which can be dynamic, static and manual
Load sharing type
3-6
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
Field Description
Aggregation Descripiton
System ID
Aggregation group description
Local device ID
Port State Port state
Local:
Port Status Priority Flag Oper-key
Other information of the local end, including member ports, port state, port priority, flag bit and operation key
Remote:
Detailed information about the peer device,
Actor Partner Priority Flag including local port, peer port index, port
Oper-key SystemID priority, flag, operation key and device ID
Note that some aggregation indexes are reserved, so the first aggregation index will be reported as 193.
3.1.8 display link-aggregation interface
Syntax
display link-aggregation interface { interface-type interface-number |
interface-name } [ to { interface-type interface-num | interface-name } ]
View
Any view
Parameter
interface { interface_type interface_ num | interface_name } [ to { interface_type
interface_ num | interface_name } ]: Specifies ports. You can specify multiple sequential ports with the to parameter, instead of specifying only one port. interface_name specifies port name, in the format of interface_name = interface_type interface_num.
interface_type specifies port type and interface_num port number. For more information, see the parameter item for the interface command.
Description
Use the display link-aggregation interface command to view detailed link aggregation information at a designated port, including aggregation group ID for the port, port priority, operation key, flag, partner information (system ID, port number, port priority, operation key, flag).
Note that since the manual aggregation group cannot get the information of the peer end, every item of the peer end is displayed as 0, which does not indicate the actual status of the peer system.
Example
Display detailed link aggregation information of link aggregation group.
3-7
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
<SW8800> display link-aggregation interface ethernet2/1/1
Ethernet2/1/1:
Attached AggID: 1
Local:
Port-Priority: 32768, Oper key: 1, Flag: 0x00
Remote:
System ID: 0x0, 0000-0000-0000
Port Number: 0, Port-Priority: 0, Oper-key: 0, Flag: 0x00
Table 3-4 Description on the fields of the display link-aggregation interface command
Attached AggID
Field Description
Aggregation group ID for the specified port
Local:
Port-Priority: 32768, Oper key: 1,
Flag: 0x00
Port priority, operation key, LACP state flag of the local end
Remote:
System ID: 0x0, 0000-0000-0000
Port Number: 0, Port-Priority: 0,
Oper-key: 0, Flag: 0x00
Device ID, port priority, operation key,
LACP state flag of the remote end
3.1.9 lacp enable
Syntax lacp enable undo lacp enable
View
Ethernet port view
Parameter
None
Description
Use the lacp enable command to enable LACP.
Use the undo lacp enable command to disable LACP.
Example
Enable LACP for Ethernet port Ethernet1/1/1.
3-8
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
[SW8800-Ethernet1/1/1] lacp enable
3.1.10 lacp port-priority
Syntax
lacp port-priority port-priority-value
undo lacp port-priority
View
Ethernet port view
Parameter
port-priority-value: Port priority, in the range of 0 to 65,535. By default, it is 32,768.
Description
Use the lacp port-priority command to configure port priority.
Use the undo lacp port-priority command to restore the default port priority.
Related command: display link-aggregation verbose and display link-aggregation
interface.
Example
Set port priority to 64.
[SW8800-Ethernet1/1/1] lacp port-priority 64
3.1.11 lacp system-priority
Syntax
lacp system-priority system-priority-value
undo lacp system-priority
View
System view
Parameter
system-priority-value: System priority, in the range of 0 to 65,535. By default, it is
32,768.
Description
Use the lacp system-priority command to configure system priority.
Use the undo lacp system-priority command to restore the default system priority.
3-9
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
Related command: display lacp system-id.
Example
Set system priority to 64.
[SW8800] lacp system-priority 64
3.1.12 link-aggregation
Syntax
link-aggregation interface_name1 to interface_name2 [ both ]
View
System view
Parameter
interface_name1: Starting range value of Ethernet port joined the Ethernet link aggregation.
interface_name2: Last range value of Ethernet port joined the Ethernet link aggregation.
both: Configures that the sub-ports in the link aggregation share outgoing load on the port depending on the source address and destination MAC address.
Description
Use the link-aggregation command to configure a series of ports to aggregation port.
Related command: link-aggregation group agg-id mode, port link-aggregation
group.
Example
Configure outgoing load balance on the port depending on the source and destination
MAC addresses.
[SW8800] link-aggregation ethernet2/1/1 to ethernet2/1/2 both
3.1.13 link-aggregation group agg-id description
Syntax
link-aggregation group agg-id description alname
undo link-aggregation group agg-id description
View
System view
3-10
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
Parameter
agg-id: Aggregation group ID, in the range of 1 to 31.
alname: Aggregation group name, character string with 1 to 32 characters.
Description
Use the link-aggregation group agg-id description command to configure description for an aggregation group.
Use the undo link-aggregation group agg-id description command to delete aggregation group description.
Related command: display link-aggregation verbose.
Example
Configure myal1 as the description of aggregation group 22.
[SW8800] link-aggregation group 22 description myal1
3.1.14 link-aggregation group agg-id mode
Syntax
link-aggregation group agg-id mode { manual | static }
undo link-aggregation group agg-id
View
System view
Parameter
agg-id: Aggregation group ID, in the range of 1 to 31.
Description
Use the link-aggregation group agg-id mode command to create an aggregation group.
Use the undo link-aggregation group command to delete an aggregation group.
Related command: display link-aggregation summary.
Example
Create manual aggregation group 22.
[SW8800] link-aggregation group 22 mode manual
3-11
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
3.1.15 port link-aggregation group
Syntax
port link-aggregation group agg-id
undo port link-aggregation group
View
Ethernet port view
Parameter
agg-id: Aggregation group ID, in the range of 1 to 31.
Description
Use the port link-aggregation group command to add an Ethernet port into a manual or static aggregation group. Use the undo port link-aggregation group command to delete an Ethernet port from an aggregation group.
Related command: display link-aggregation verbose.
Example
Add Ethernet2/1/1 into aggregation group 22.
[SW8800-Ethernet2/1/1] port link-aggregation group 22
3.1.16 reset lacp statistics
Syntax
reset lacp statistics [ interface { interface-type interface-number | interface-name }
[ to { interface-type interface-num | interface-name } ] ]
View
Parameter
System view
interface { interface_type interface_ num | interface_name } [ to { interface_type
interface_ num | interface_name } ]: Specifies a port. The command without the to parameter specifies a port, while the command with the to parameter specifies several consecutive ports. interface_name indicates port name and is in the format of
interface_name=interface_type interface_num. interface_type indicates port type.
interface_num indicates port number.
3-12
3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds
Description
Use the reset lacp statistics command to clear LACP statistics for the port. If you do not specify a port, the command clears LACP statistics for all the ports.
Related command: display link-aggregation interface.
Example
Clear LACP statistics for all Ethernet ports.
<SW8800> reset lacp statistics
3-13
3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands
Chapter 4 VLAN Configuration Commands
4.1 VLAN Configuration Commands
4.1.1 description
Syntax
description string
undo description
View
VLAN view, VLAN interface view
Parameter
string: Description character string of current VLAN or VLAN interface. For VLAN, it ranges from 1 to 32 characters. For VLAN interface, it ranges from 1 to 64 characters.
The default description character string of current VLAN is VLAN ID of the VLAN, e.g.
VLAN 0001. The default description character string of VLAN interface is the interface name, e.g., Vlan-interface1 Interface.
Description
Use the description command to configure a description for the current VLAN or VLAN interface.
Use the undo description command to restore the default description of current VLAN or VLAN interface.
Related command: display vlan, display interface vlan-interface.
Example
# Specify a description character string “RESEARCH” for the current VLAN.
[S8800-vlan1] description RESEARCH
4.1.2 display interface vlan-interface
Syntax
display interface vlan-interface [ vlan_id ]
View
Any view
4-1
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 4 VLAN Configuration Commands
vlan_id: ID of VLAN interface, ranging from 1 to 4094.
Description
Use the display interface vlan-interface command to view the related information about specified or all VLAN interfaces such as physical protocol status and link protocol status of VLAN interface, Ethernet sending frame format, MAC address, IP address and sub-net mask, description character string and MTU, etc.
With vlan_id specified, only the information about the specified VLAN interface will be displayed. If no vlan_id is specified, the information about all the existing VLAN interfaces will be displayed.
Related command: interface vlan-interface.
Example
# Display related information about VLAN-interface 1.
<S8800> display interface vlan-interface 1
Vlan-interface1 current state : DOWN
Line protocol current state : DOWN
IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is
00e0-fc07-4101
Internet Address is 10.1.1.1/24 Primary
Description : Vlan-interface1 Interface
The Maximum Transmit Unit is 1500
Table 4-1 Description on the fields of the display interface vlan-interface 1 command
Field
Vlan-interface1 current state
Line protocol current state
IP Sending Frames' Format
Hardware address
Internet Address
Description
The Maximum Transmit Unit
Description
Current state of the VLAN interface
Current state of the Line protocol
Format of the IP sending frames
Corresponding MAC address of the
VLAN interface
IP address
Description of the VLAN interface
Maximum Transmit Unit (MTU)
4-2
3Com Switch 8800 Command Reference Guide
4.1.3 display vlan
Chapter 4 VLAN Configuration Commands
Syntax
display vlan [ vlan_id to vlan_id | all | static | dynamic ]
View
Any view
Parameter
Description
Use the display vlan command to view related information about the specified or all
VLANs.
If vlan_id or all is specified, information of specified VLAN or all VLANs is displayed. It includes: VLAN ID, VLAN type (dynamic or static), whether the routing function has been enabled on this VLAN (if enabled, the main IP address and mask will be displayed), VLAN description, and the ports VLAN contains.
If parameter is not specified, information of the VLANs that has been created is displayed. If the parameter dynamic or static is selected, information of VLANs created dynamically or statically by the system is displayed.
Related command: vlan.
Example
vlan_id: Displays information of the specified VLAN.
all: Displays information of all VLANs.
static: Displays information of VLANs created statically by the system.
dynamic: Displays information of VLANs created dynamically by the system.
# Display the information about VLAN2.
[S8800] display vlan 2
VLAN ID: 2
VLAN Type: static
Route interface: not configured
Description: VLAN 0002
Tagged Ports: none
Untagged Ports:
Ethernet2/1/1 Ethernet2/1/2 Ethernet2/1/3
4-3
3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands
Table 4-2 Description on the fields of the display vlan 2 command
Field
VLAN ID
VLAN Type
Route interface
Description
VLAN ID
Configuration type of VLAN: either dynamic or static
Whether the route interface exists
Tagged Ports
Untagged Ports
The ports on which VLAN packets need tag
The ports on which VLAN packets need not tag
4.1.4 interface vlan-interface
Syntax
interface vlan-interface vlan_id
undo interface vlan-interface vlan_id
View
System view
Parameter
vlan_id: ID of VLAN interface, ranging from 1 to 4094.
Description
Use the interface vlan-interface command to configure VLAN interface or enter VLAN interface view.
Use the undo interface vlan-interface command to cancel one VLAN interface.
Related command: display interface vlan-interface.
Example
# Enter the view of the VLAN-interface 1.
[S8800] interface vlan-interface 1
4.1.5 shutdown
Syntax
shutdown
undo shutdown
4-4
3Com Switch 8800 Command Reference Guide
View
VLAN interface view
Parameter
None
Chapter 4 VLAN Configuration Commands
Description
Use the shutdown command to disable the VLAN interface.
Use the undo shutdown command to enable the VLAN interface.
By default, when all the Ethernet ports in a VLAN are in the DOWN state, this VLAN interface is also DOWN. When there are one or more Ethernet ports in the UP state, this VLAN interface is also UP..
This command can be used to start interface after the related parameters and protocols of VLAN interface are set. Or when the VLAN interface fails, the interface can be shut down first and then restarted. In this way, the interface may be restored to normal status.
Shutting down or starting VLAN interface will not take any effect on any Ethernet port of this VLAN.
Example
# Restart interface after shutting down the interface.
[S8800-Vlan-interface1] shutdown
[S8800-Vlan-interface1] undo shutdown
4.1.6 vlan
Syntax
vlan vlan_id
undo vlan { vlan_id [ to vlan_id ] | all }
View
System view
Parameter
vlan_id: Specifies the ID of a VLAN to be created and/or entered, ranging from 1 to
4094.
all: Deletes all VLANs.
Description
Use the vlan command to enter VLAN view.
4-5
3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands
If the specified VLAN is not created, create it first.
Use the undo vlan command to cancel the specified VLAN.
VLAN 1 is the default VLAN and cannot be deleted.
Related command: display vlan.
Example
# Enter the view of VLAN 1.
[S8800] vlan 1
4.2 Port-Based VLAN Configuration Commands
4.2.1 port
Syntax
port interface_list
undo port interface_list
View
VLAN view
Parameter
interface_list: List of Ethernet ports to be added to or deleted from a certain VLAN, expressed as interface_list= {{ interface_type interface_num | interface_name } [ to
{ interface_type interface_num | interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. The interface number after the keyword to must be larger than or equal to the interface number before to. &<1-10> represents the repeatable times of parameters, ranging from 1 to 10.
Description
Use the port command to add one port or one group of ports to VLAN.
Use the undo port command to cancel one port or one group of ports from VLAN.
Note that you can add/delete trunk port and hybrid port to/from VLAN by the port and
undo port commands in Ethernet port view, but not in VLAN view.
Related command: display vlan.
Example
# Add Ethernet2/1/1 through Ethernet2/1/3 to VLAN 2.
[S8800-vlan2] port ethernet2/1/1 to ethernet2/1/3
4-6
3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands
4.3 Protocol-Based VLAN Configuration Commands
4.3.1 display vlan-protocol interface
Syntax
display vlan-protocol interface { interface_list | all }
View
Any view
Parameter
Description
Use the display vlan-protocol interface command to view the protocol information and protocol index configured on the specific port, to which you can refer when you use the protocol-based VLAN and add/delete a protocol.
Related command: display interface.
Example
interface_list: Displays the protocol information of a specified interface, in the form of
interface_list = { interface_num [ to interface_num2 ] }. interface_num indicates the interface number of the protocol to be displayed; interface_num2 indicates the interface number of a specified range.
all: Displays the protocol information of all ports.
# Display the protocol information and protocol index configured on Ethernet2/1/1.
[S8800] display vlan-protocol interface ethernet2/1/1
Interface:Ethernet2/1/1
Vlan-ID Protocol-Index Protocol-Type
100 1 ethernetii
4.3.2 display vlan-protocol vlan
Syntax
display vlan-protocol vlan { vlan_list | all }
View
Any view
Parameter
vlan_list: Specifies a VLAN list. It is expressed in the form of vlan_list = { vlan_id [ to
vlan_id2 }, among which the vlan id and vlan id2 argument are the border VLAN IDs that define the VLAN list.
4-7
3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands
all: Displays the protocol information of all VLANs.
Description
Use the display vlan-protocol vlan command to view the protocol information and protocol index configured for a VLAN, to which you can refer when you use the protocol-based VLAN and add/delete a protocol.
Related command: display vlan.
Example
# Display the protocol information and protocol index configured on the VLAN 522.
[S8800] display vlan-protocol vlan 522
VLAN ID: 522
VLAN Type: Protocol-based VLAN
Protocol-Index Protocol-Type
0 ethernetii etype 0x0600
1 llc dsap 0x12 ssap 0x34
2 snap etype 0x0600
4.3.3 port hybrid protocol-vlan vlan
Syntax
port hybrid protocol-vlan vlan vlan-id { vlan-protocol_list | all }
undo port hybrid protocol-vlan vlan vlan-id { vlan-protocol_list | all }
View
Ethernet port view
Parameter
vlan_id: ID of the VLAN which a protocol is added to or deleted from.
vlan-protocol_list: The VLAN protocol list to be added to or to be deleted from a certain port, in the form of vlan-protocol_list = { protocol_index [ to protocol_end ] }.
protocol_index indicates the initial value of protocol index; protocol_end indicates the ending value of protocol index.
all: All protocols.
Description
Use the port hybrid protocol-vlan vlan command to associate protocol VLAN to a specified port.
Use the undo port hybrid protocol-vlan vlan command to delete the protocol VLAN associate with the port.
4-8
3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands
Note that only the Hybrid port supports this feature at present. The port must belong to the VLAN before being associated with the VLAN. Otherwise, it cannot be associated.
Related command: display vlan-protocol interface.
Example
# Associate Ethernet1/1/1 port with VLAN 3, with the protocol index in the range from 4 through 7.
[S8800-Ethernet1/1/1] port hybrid protocol-vlan vlan 3 4 to 7
4.3.4 protocol-vlan
Syntax
protocol-vlan [ protocol-index ] { ip ip_address [ net_mask ] | mode { ethernetii etype
etype_id | llc dsap dsap_id ssap ssap_id | snap etype etype_id } }
undo protocol-vlan { protocol_index [ to protocol_end ] | all }
View
VLAN view
Parameter
ip [ ip_address [ net_mask ]: IP protocol based VLAN. net_mask is the IP address mask; if not specified, it defaults to 255.255.255.0.
mode: Specifies the VLAN based on other protocols.
ethernetii etype etype_id: EthernetII protocol based VLAN. etype_id is the Ethernet type of the incoming packet, ranging from 600 to FFFF.
llc dsap dsap_id ssap ssap_id: Logical link control protocol based VLAN. dsap_id is the destination service access point, ranging from 0 to FF. ssap_id is source service access point, ranging from 0 to FF.
snap etype etype_id: Sub-Network Access Protocol (SNAP) based protocol. etype_id is the Ethernet type of the incoming packet, ranging from 600 to FFFF.
protocol_index: Initial value of protocol index, ranging from 0 to 7. It must be less than
protocol_end.
protocol_end: End value of protocol index, ranging from 0 to 7
all: All protocols.
Description
Use the protocol-vlan command to specify the parameters of the VLAN based on IP or
IPX.
Use the undo protocol-vlan command to cancel this configuration.
4-9
3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands
Related command: display vlan-protocol vlan.
Example
# Specify VLAN 3 to be based on the IP protocol.
[S8800-vlan3] protocol-vlan ip
# Specify VLAN 5 to be based on the 123.34.56.0 network segment.
[S8800-vlan5] protocol-vlan ip 123.34.56.0
4-10
3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands
Chapter 5 GARP/GVRP Configuration Commands
5.1 GARP Configuration Commands
5.1.1 display garp statistics
Syntax
display garp statistics [ interface interface_list ]
View
Any view
Parameter
Description
Use the display garp statistics command to view the GARP statistics information, including the number of received/sent packets and the number of packets discarded by
GVRP/GMRP.
Example
interface_list: List of Ethernet ports to be displayed, expressed as interface _list =
{ { interface_type interface_num | interface_name } [ to { interface_type interface_num
| interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.
# Display the GARP statistics information on Ethernet port Ethernet2/1/1.
<S8800> display garp statistics interface ethernet2/1/1
GARP statistics on port Ethernet2/1/1
Number Of GMRP Frames Received : 0
Number Of GVRP Frames Received : 0
Number Of GMRP Frames Transmitted : 0
Number Of GVRP Frames Transmitted : 0
Number Of Frames Discarded : 0
The above information indicates that the number of received/sent packets and the number of packets discarded by GVRP/GMRP on Ethernet2/1/1 are all 0.
5-1
3Com Switch 8800 Command Reference Guide
5.1.2 display garp timer
Chapter 5 GARP/GVRP Configuration Commands
Syntax
display garp timer [ interface interface_list ]
View
Any view
Parameter
interface_list: List of Ethernet ports to be displayed, expressed as interface _list =
{ { interface_type interface_num | interface_name } [ to { interface_type interface_num
| interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.
Description
Use the display garp timer command to view the value of GARP timer, including Hold timer, Join timer, Leave timer and LeaveAll timer.
Related command: garp timer, garp timer leaveall.
Example
# Display GARP timer on Ethernet2/1/1.
<S8800> display garp timer interface ethernet2/1/1
GARP timers on port Ethernet2/1/1
GARP JoinTime : 20 centiseconds
GARP Leave Time : 60 centiseconds
GARP LeaveAll Time : 1000 centiseconds
GARP Hold Time : 10 centiseconds
5.1.3 garp timer
Syntax
garp timer { hold | join | leave } timer_value
undo garp timer { hold | join | leave }
View
Ethernet port view
Parameter
hold: GARP Hold timer. After receiving certain registration information, the GARP application entity will not send Join Message at once. Instead, it starts the Hold timer.
5-2
3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands
All the registration information received within duration of the Hold timer will be transmitted in the same frame after the Hold timer times out, thereby saving the bandwidth resource.
join: GARP Join timer. GARP application entity will send out Join message after the
Join timer goes timeout to make other GARP application entity register its own information.
leave: GARP Leave timer . When a GARP application entity wants to deregister certain attribute information, it sends Leave message. The GARP application entity receiving the message starts Leave timer. If the entity receives no Join message before the timer goes timeout, it will deregister the attribute information. z z
timer_value: Value of GARP hold timer, join timer and leave timer in centiseconds. The step is five centiseconds. By default, Hold timer is 10 centiseconds, Join timer is 20 centiseconds, Leave timer is 60 centiseconds.
The range conforms to the following rule: z
The value of Join timer should be no less than the doubled value of Hold timer.
The value of Leave timer should be greater than the doubled value of Join timer and smaller than the Leaveall timer value.
The minimal value of Join timer is 10 centiseconds.
Description
Use the garp timer command to set the value of GARP timer (including Hold timer, Join timer and Leave timer) of the port.
Use the undo garp timer command to restore the default value of GARP timer.
The value range of a timer varies with the values of other timers. So if the value of a timer you want to set is not within the available value range, you can change the value range by changing the values of other related timers. z z z z
The lower limit of Hold timer is 10 centiseconds. You can change its upper limit by changing the value of Join timer.
You can change the lower limit and upper limit of Join timer by changing the value of Hold timer and Leave timer respectively.
You can change the lower limit and upper limit of Leave timer by changing the value of Join timer and LeaveAll timer respectively.
The upper limit of LeaveAll timer is 32765 centiseconds. You can change its lower limit by changing the value of Leave timer.
Related command: display garp timer.
Example
# Set Join timer of GARP as 300ms.
[S8800-Ethernet2/1/1] garp timer join 30
5-3
3Com Switch 8800 Command Reference Guide
5.1.4 garp timer leaveall
Chapter 5 GARP/GVRP Configuration Commands
Syntax
View
System view
Parameter
timer_value: Value of GARP LeaveAll timer in centiseconds, ranging from 65 to 32765.
The step is five centiseconds. The value of LeaveAll timer should be greater than the value of Leave timer.
By default, the value of LeaveAll timer is 1000 centiseconds, i.e., 10s.
Description
Use the garp timer leaveall command to configure GARP LeaveAll timer.
Use the undo garp timer leaveall command to restore the default value.
After every GARP application entity is started, the LeaveAll timer will be started simultaneously. The GARP application entity will send LeaveAll message after the timer times out to make other application entities re-register all attribute information on the entities themselves. Then, the LeaveAll timer is started and the new cycle begins.
Related command: display garp timer.
Example
garp timer leaveall timer_value
undo garp timer leaveall
# Set GARP LeaveAll timer as 1s.
[S8800] garp timer leaveall 100
5.1.5 reset garp statistics
Syntax
reset garp statistics [ interface interface_list ]
View
User view
Parameter
interface_list: Specifies a list of Ethernet ports, on which the GARP statistics information will be cleared, expressed as interface_list = { { interface_type
interface_num | interface_name } [ to { interface_type interface_num |
interface_name } ] }&<1-10>. interface_type is interface type, interface_num is
5-4
3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands interface number and interface_name is interface name. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.
Description
Use the reset garp statistics command to reset the GARP statistics information (such as the received/sent packets or packets discarded by GVRP/GMRP). If the command has no parameter, it will clear the GARP statistics information of all the ports.
Related command: display garp statistics.
Example
# Clear GARP statistics information.
<S8800> reset garp statistics
5.2 GVRP Configuration Commands
5.2.1 display gvrp statistics
Syntax
display gvrp statistics [ interface interface_list ]
View
Any view
Parameter
interface_list: List of Ethernet ports to be displayed, expressed as interface _list =
{ { interface_type interface_num | interface_name } [ to { interface_type interface_num
| interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.
Description
Use the display gvrp statistics command to view the GVRP statistics information of all the Trunk ports, including GVRP status information, failed GVRP registration entries and the last GVRP data unit origin.
Example
# Display the GVRP statistics information about Ethernet2/1/1.
<S8800> display gvrp statistics interface ethernet2/1/1
GVRP statistics on port Ethernet2/1/1
GVRP Status : Enabled
GVRP Failed Registrations : 0
GVRP Last Pdu Origin : 0000-0000-0000
5-5
3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands
GVRP Registration Type : Normal
Table 5-1 Description on the fields of the display gvrp statistics command
Field
GVRP Status
GVRP Failed Registrations
GVRP Last Pdu Origin
GVRP Registration Type
Description
GVRP status, that is, enabled or disabled
Failed GVRP registration entries
The source of the last GVRP data unit. If GVRP data unit is not received, the system displays
0000-0000-0000; if received from a device, the
GVRP data unit received last time is regarded as coming from this MAC address of this device.
GVRP registration type, that is, fixed, forbidden or normal
5.2.2 display gvrp status
Syntax display gvrp status
View
Any view
Parameter
None
Description
Use the display gvrp status command to view the global status information about
GVRP.
Example
# Display the global status information about GVRP.
<S8800> display gvrp status
GVRP is enabled
The above information means that the global GVRP is enabled.
5.2.3 gvrp
Syntax
gvrp
undo gvrp
5-6
3Com Switch 8800 Command Reference Guide
View
System view/Ethernet port view
Parameter
None
Chapter 5 GARP/GVRP Configuration Commands
Description
Use the gvrp command to enable GVRP.
Use the undo gvrp command to disable GVRP.
By default, GVRP is disabled.
This command can be used to enable/disable global GVRP in system view or enable/disable port GVRP in Ethernet port view.
Before enabling port GVRP, you must enable global GVRP first. In addition, port GVRP must be enabled/disabled on Trunk port.
Related command: display gvrp status.
Example
# Enable global GVRP.
[S8800] gvrp
5.2.4 gvrp registration
Syntax
gvrp registration { fixed | forbidden | normal }
undo gvrp registration
View
Ethernet port view
Parameter
fixed: Enables to create or register VLAN on the port manually and disables to register or deregister VLAN dynamically.
forbidden: Deregisters all VLANs except VLAN 1 and disables to create or register any other VLAN on the port.
normal: Enables to create, register and deregister VLAN on the port manually or dynamically.
Description
Use the gvrp registration command to configure GVRP registration type.
5-7
3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands
Use the undo gvrp registration command to restore the default type.
By default, the registration type is normal.
This command can be only used on Trunk port.
Related command: display gvrp statistics.
Example
# Set the GVRP registration type of Ethernet2/1/1 as fixed.
[S8800-Ethernet2/1/1] gvrp registration fixed
5-8
3Com Switch 8800 Command Reference Guide Chapter 6 Super VLAN Configuration Commands
Chapter 6 Super VLAN Configuration Commands
6.1 Super VLAN Configuration Commands
6.1.1 display supervlan
Syntax
display supervlan [ supervlan_id ]
View
Any view
Parameter
Description
Use the display supervlan command to display mapping relationship between a specified super VLAN and sub VLANs, and the ports that identify the mapping relationship.
Related command: supervlan, subvlan.
Example
supervlan_id: VLAN ID of a configured super VLAN. This argument ranges from 1 to
4094.
# Display the mapping relationship between the super VLAN and the sub VLAN.
[S8800] display supervlan 2
Supervlan ID : 2
ARP proxy : enabled
Subvlan ID : 3-5
Subvlan in which arp proxy is disabled: None
# Display detailed information about the super VLAN and the sub VLANs displayed above.
[S8800]display vlan 2
VLAN ID: 2
VLAN Type: static
It is a Super VLAN.
ARP proxy enabled.
Route Interface: configured
IP Address: 10.153.1.41
Subnet Mask: 255.255.255.0
6-1
3Com Switch 8800 Command Reference Guide Chapter 6 Super VLAN Configuration Commands
Description: VLAN 0002
Tagged Ports: none
Untagged Ports: none
[S8800]display vlan 3
VLAN ID: 3
VLAN Type: static
It is a Sub VLAN. And the Super VLAN is VLAN 2
ARP proxy enabled.
Route Interface: not configured
Description: VLAN 0003
Tagged Ports: none
Untagged Ports:
Ethernet5/1/1
[S8800]display vlan 4
VLAN ID: 4
VLAN Type: static
It is a Sub VLAN. And the Super VLAN is VLAN 2
ARP proxy enabled.
Route Interface: not configured
Description: VLAN 0004
Tagged Ports: none
Untagged Ports:
Ethernet5/1/2
[S8800]display vlan 5
VLAN ID: 5
VLAN Type: static
It is a Sub VLAN. And the Super VLAN is VLAN 2
ARP proxy enabled.
Route Interface: not configured
Description: VLAN 0005
Tagged Ports: none
Untagged Ports:
Ethernet5/1/3
6.1.2 subvlan
Syntax
subvlan sub-vlan-list
undo subvlan [sub-vlan-list ]
View
VLAN view of super VLAN
6-2
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 6 Super VLAN Configuration Commands
sub-vlan-list: List of sub VLANs. It is expressed in the form of vlan_list = { vlan_id [ to
vlan_id2 }&<1-10>, where vlan_id is a VLAN ID ranging from 1 to 4094. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.
Description
Use the subvlan command to associate a specified super VLAN to sub VLANs.
Use the undo subvlan command to cancel the mapping relationship between the super VLAN and sub VLANs.
Note that: z z z
The VLANs configured to be the sub VLANs of a super VLAN must be existing
VLANs.
You can still add/remove ports to/from a VLAN after the mapping relationship is established.
The undo subvlan command cancels all mapping relationships between the specified super VLAN and all sub VLANs. If you do not specify the sub-vlan-list argument. Otherwise, this command cancels the mapping relationship between the specified sub VLAN and the specified super VLAN.
Related command: display supervlan.
Example
# Establish mapping relationship between super VLAN 10 and sub VLANs with VLAN
IDs of 3, 4, 5 and 9.
[S8800-vlan10] subvlan 3 to 5 9
6.1.3 supervlan
Syntax supervlan
undo supervlan
View
VLAN view
Parameter
None
Description
Use the supervlan command to set a VLAN to be a super VLAN.
Use the undo supervlan command to cancel the super VLAN type of a VLAN.
6-3
3Com Switch 8800 Command Reference Guide Chapter 6 Super VLAN Configuration Commands
By default, no type is configured for a VLAN.
Note that: z z z
You cannot add ports to a super VLAN.
The ARP proxy of the interfaces of a VLAN are enabled automatically and cannot be disabled when the VLAN is set to be a super VLAN.
The default VLANs cannot be super VLANs.
Related command: display supervlan.
Example
# Set VLAN 2 to be a super VLAN.
[S8800-vlan2] supervlan
6-4
3Com Switch 8800 Command Reference Guide Chapter 7 IP Address Configuration Commands
Chapter 7 IP Address Configuration Commands
7.1 IP Address Configuration Commands
7.1.1 display ip host
Syntax display ip host
View
Any view
Parameter
None
Description
Use the display ip host command to display all the host names and the corresponding IP addresses.
Example
Display all host names and the corresponding IP addresses of the hosts.
<SW8800> display ip host
Table 7-1 Description on the fields of the display ip host command
Field Description
Flags Flags
Address Host IP address
7.1.2 display ip interface
Syntax
display ip interface interface-type interface-num
7-1
3Com Switch 8800 Command Reference Guide
View
Any view
Chapter 7 IP Address Configuration Commands
Parameter
Description
Use the display ip interface command to display information about an interface.
Example
interface-type interface-num: Interface type and interface number. Refer to the
interface command in Port Command Manual for more information.
Display the information about interface VLAN-interface 1.
<SW8800> display ip interface vlan-interface 1
Vlan-interface1 current state : DOWN
Line protocol current state : DOWN
Internet Address is 1.1.1.1/8 Primary
Broadcast address : 1.255.255.255
The Maximum Transmit Unit : 1500 bytes input packets : 0, bytes : 0, multicasts : 0 output packets : 0, bytes : 0, multicasts : 0
TTL invalid packet number: 0
ICMP packet input number: 0
Echo reply: 0
Unreachable: 0
Source quench: 0
Routing redirect: 0
Echo request: 0
Router advert: 0
Router solicit: 0
Time exceed: 0
IP header bad: 0
Timestamp request: 0
Timestamp reply: 0
Information request: 0
Information reply: 0
Netmask request: 0
Netmask reply: 0
Unknown type: 0
7-2
3Com Switch 8800 Command Reference Guide Chapter 7 IP Address Configuration Commands
Table 7-2 Description on the fields of the display ip interface command
Field
Vlan-interface1 current state
Line protocol current state
Internet Address
TTL invalid packet number
ICMP packet input number
Echo reply:
Unreachable:
Source quench:
Routing redirect:
Echo request:
Router advert:
Router solicit:
Time exceed:
IP header bad:
Timestamp request:
Timestamp reply:
Information request:
Information reply:
Netmask request:
Netmask reply:
Unknown type:
Description
Current state of the VLAN interface 1
Current state of the Line protocol
IP address
Broadcast address
The Maximum Transmit Unit
Broadcast address
Maximum transmission unit input packets : 0, bytes : 0, multicasts : 0 output packets : 0, bytes : 0, multicasts :
0
The number of the input/output unicast packets, bytes and broadcast packets are all 0
The number of the received packets with invalid TTLs
Total received ICMP packets, including:
Echo reply packets, unreachable packets, source quench packets, routing redirect packets, echo request packets, route advertisement packets, route solicitation packets, packets that exceed the time, packets with bad IP headers, timestamp request packets, timestamp reply packets, information request packets, information reply packets, netmask request packets, netmask reply packets and unknown packets.
7.1.3 ip address
Syntax
ip address ip-address { mask | mask-length } [ sub ]
undo ip address [ ip-address { mask | mask-length } [ sub ] ]
View
VLAN interface view, loopback interface view, or console view
7-3
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 7 IP Address Configuration Commands
ip-address: IP address of VLAN interface in dotted decimal format.
mask: Corresponding subnet mask in dotted decimal format.
mask-length: Mask length. That is, the number of bits with a value of 1.
sub: Specifies the IP address to be configured to be the secondary IP address of the
VLAN interface/loopback interface/console interface.
Description
Use the ip address command to assign an IP address and the corresponding subnet mask to the VLAN interface/loopback interface/console interface.
Use the undo ip address command to remove the IP address and the corresponding subnet mask assigned to the VLAN interface/loopback interface/console interface.
By default, a VLAN interface/loopback interface/console interface does not have an IP address configured.
Normally, a VLAN interface/loopback interface/console interface only needs to be configured with one IP address. But you can also assign up to ten IP addresses to a
VLAN interface/loopback interface/console interface to enable it to connect to multiple subnets. Of all the IP addresses assigned to a VLAN interface/loopback interface/console interface, one is the primary IP address, and the other are secondary IP addresses. The relationship between primary and secondary addresses is: z z
When you configure a primary IP address for an interface already has a primary
IP address configured, the newly configured one replaces the old one.
If you execute the undo ip address command without providing any parameter, the switch removes both primary and secondary IP addresses of the interface.
The undo ip address [ ip-address { mask | mask-length } command can be used to delete the primary IP address, while the undo ip address [ ip-address { mask
| mask-length } sub command can be used to delete the secondary IP address.
Related command: display ip interface.
Example
Assign 129.12.0.1 to VLAN interface 1, with a subnet mask of 255.255.255.0.
[SW8800-Vlan-interface1] ip address 129.12.0.1 255.255.255.0
Assign 129.12.0.10 to Ethernet4/0/0, with a 24-bit subnet mask.
[SW8800-M-Ethernet4/0/0] ip address 129.12.0.10 24
7-4
3Com Switch 8800 Command Reference Guide
7.1.4 ip host
Chapter 7 IP Address Configuration Commands
Syntax
ip host hostname ip-address
undo ip host hostname [ ip-address ]
View
System view
Parameter
hostname: Name of the host. It is a character string that consists of 1 to 20 characters, including letters, numbers, "_", or ",", and it must contain at least one letter.
ip-address: Host IP address (the corresponding IP address to the host name) in dotted decimal notation.
Description
Use the ip host command to configure the host name and the host IP address.
Use the undo ip host command to cancel the host name and the host IP address.
By default, host name and corresponding IP address are null.
Related command: display ip host.
Example
Set Lanswtich1’s IP address to be 10.110.0.1.
[SW8800] ip host Lanswitch1 10.110.0.1
7-5
3Com Switch 8800 Command Reference Guide Chapter 8 ARP Configuration Commands
Chapter 8 ARP Configuration Commands
8.1 ARP Configuration Commands
8.1.1 anti-attack arp
Syntax
anti-attack { arp | dot1x | ip }{ disable | enable }
View
System view
Parameter
None
Description
Use the anti-attack enable command to enable the scheme of preventing attack from packets.
Use the anti-attack disable command to disable the mechanism.
By default, the scheme of preventing attack from IP packets is enabled. The scheme of preventing attack from ARP packets and dot1x packets is disabled.
Example
Enable the scheme of preventing attack from ARP packets.
[SW8800] anti-attack arp enable
Disable the scheme of preventing attack from IP packets.
[SW8800] anti-attack ip disable
8.1.2 arp check enable
Syntax arp check enable undo arp check enable
View
System view
8-1
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 8 ARP Configuration Commands
Description
Use the arp check enable command to enable the checking of ARP entry, that is, the device does not learn the ARP entry where the MAC address is a multicast MAC address.
Use the undo arp check enable command to disable the checking of ARP entry, that is, the device learns the ARP entry where the MAC address is a multicast MAC address.
By default, the checking of ARP entry is enabled, that is, the device does not learn the
ARP entry where the MAC address is a multicast MAC address.
Example
Configure that the device learns the ARP entry where the MAC address is a multicast
MAC address.
[SW8800] undo arp check enable
8.1.3 arp static
Syntax
arp static ip-address mac-address [ vlan-id { interface_type interface_num |
interface_name } | vpn-instance-name ]
undo arp ip-address
View
System view
Parameter
ip-address: IP address of the ARP mapping entry.
mac-address: MAC address of the ARP mapping entry, whose format is H-H-H ( H indicates a hexadecimal number).
vlan-id: VLAN to which the static ARP entry belongs, which is in the range of 1 to
4094.
interface_name: Port to which the static ARP entry belong, represented with
interface_type interface_num. interface_type is port type and interface_num is port number. For details about interface_type, interface_num and interface_name, refer to the Port Command Manual.
vpn-instance-name: VPN instance name in MPLS VPN.
8-2
3Com Switch 8800 Command Reference Guide
Description
Chapter 8 ARP Configuration Commands
Use the arp static command to configure the static ARP mapping entries in an ARP mapping table.
Use the undo arp static command to cancel a static ARP mapping entry from the
ARP table.
By default, the mapping table of the system ARP is empty and the switch can obtain its address mapping by means of dynamic ARP.
Note that: z z z
As long as a switch operates, its static ARP mapping entries remain valid and work unless you perform operations that make ARP invalid, such as change or remove VLAN virtual interfaces, remove a VLAN, or remove an interface from a
VLAN. These operations cause the corresponding ARP mapping entries to be automatically removed.
The vlan-id argument must be the ID of a VLAN that has been created by the user, and the Ethernet port specified behind this parameter must belong to the
VLAN.
ARP map entries with port parameters cannot be configured for aggregated ports.
Related command: reset arp, display arp, debugging arp.
Example
Associate the IP address 202.38.10.2 with the MAC address 00e0-fc01-0000, and the
ARP mapping entry belongs to the Ethernet port Ethernet2/1/1 on VLAN1.
[SW8800] arp static 202.38.0.10 00e0-fc01-0000 1 ethernet2/1/1
8.1.4 arp timer aging
Syntax
arp timer aging aging-time
undo arp timer aging
View
System view
Parameter
aging-time: Aging time of dynamic ARP aging timer, which is in the range of 1 to 1440 minutes. By default, the aging time is 20 minutes.
Description
Use the arp timer aging command to configure the dynamic ARP aging timer.
8-3
3Com Switch 8800 Command Reference Guide Chapter 8 ARP Configuration Commands
Use the undo arp timer aging command to restore the default dynamic ARP aging timer.
Related command: display arp timer aging.
Example
Configure the dynamic ARP aging timer to 10 minutes.
[SW8800] arp timer aging 10
8.1.5 debugging arp
Syntax
debugging arp { error | info | packet }
undo debugging arp { error | info | packet }
View
User view
Parameter
error: ARP error debugging.
info: ARP mapping table and information management debugging.
packet: ARP packet debugging.
Description
Use the debugging arp command to enable ARP debugging.
Use the undo debugging arp command to disable the corresponding ARP debugging.
By default, no ARP debugging is enabled.
Related command: arp static, display arp.
Example
Enable ARP packet debugging.
<SW8800> debugging arp packet
*0.771346-ARP-8-S1-arp_send:Send an ARP Packet, operation : 1, sender_eth_addr :
00e0-fc00-3500,sender_ip_addr : 10.110.91.159, target_eth_addr :
0000-0000-0000
, target_ip_addr : 10.110.91.193
*0.771584-ARP-8-S1-arp_rcv:Receive an ARP Packet, operation : 2, sender_eth_addr
8-4
3Com Switch 8800 Command Reference Guide Chapter 8 ARP Configuration Commands
: 0050-ba22-6fd7, sender_ip_addr : 10.110.91.193, target_eth_addr :
00e0-fc00-3
500, target_ip_addr : 10.110.91.159
Table 8-1 Description on the fields of the debugging arp command
Field
operation
Description
Kind of ARP packets: 1 ARP request packet; 2 ARP reply packet sender_ip_addr target_eth_addr
IP address of the sender
Target Ethernet address. If the packet is a ARP request packet, the target IP address will be 0. It changes to the correct address when the target responds.
Target IP address target_ip_addr
8.1.6 display arp
Syntax
display arp [ ip-address | [ dynamic | static ] [ | { begin | include | exclude } text ] ]
View
Any view
Parameter
dynamic: Displays the dynamic ARP entries in ARP mapping table.
static: Displays the static ARP entries in ARP mapping table.
ip-address: Displays ARP mapping entries according to specified IP address.
begin: Starts displaying from the first ARP entry that contains the specified character string “text”.
include: Displays only the ARP entries that contain the specified character string
“text”.
exclude: Displays only the ARP entries that do not contain the specified character string “text”.
text: Character string. The ARP entries that contain this character string are displayed.
Description
Use the display arp command to view the ARP mapping table.
Related command: arp static, reset arp, debugging arp.
8-5
3Com Switch 8800 Command Reference Guide
Example
Chapter 8 ARP Configuration Commands
Display all the ARP entries.
<SW8800> display arp | inc 2.2.1
Type: S-Static D-Dynamic
IP Address MAC Address VLAN ID Port Name Aging Type
2.2.2.231 0001-0001-0001 N/A N/A N/A S
2.2.1.2 0002-0002-0002 N/A N/A N/A S
-- 2 entries found ---
Note:
Character of “.” in a regular expression is a wildcard. So, as for “2.2.2.231”, “2.2.1” matches its sub-string “2.231” and thus the ARP mapping entry with an IP address of
2.2.2.231 is displayed as a matched entry.
Table 8-2 Description on the fields of the display arp command
Field
IP Address
Description
IP address of the ARP mapping entry
MAC Address MAC address of the ARP mapping entry
VLAN ID ID of the VLAN to which the static ARP entry belongs
Port Name
Aging
Type
Name of the port to which the static ARP entry belongs
Aging time of dynamic ARP entry in minutes
Type of ARP entry
8.1.7 display arp timer aging
Syntax display arp timer aging
View
Parameter
Any view
None
8-6
3Com Switch 8800 Command Reference Guide
Description
Chapter 8 ARP Configuration Commands
Use the display arp timer aging command to view the current setting of the dynamic
ARP aging timer.
Related command: arp timer aging.
Example
Display the current setting of the ARP aging timer.
[SW8800] display arp timer aging
Current ARP aging time is 10 minute(s)
You can see that the ARP aging time is 10 minutes.
8.1.8 reset arp
Syntax
reset arp [ dynamic | static | interface { interface_type interface_num |
interface_name } | all ]
View
User view
Parameter
Description
Use the reset arp command to reset the ARP mapping entries.
Related command: arp static, display arp.
Example
dynamic: Clears the dynamic ARP mapping entries.
static: Clears the static ARP mapping entries
interface_name: Clears the ARP mapping entries that are related to the specified port, represented with interface_type interface_num. interface_type is port type and
interface_num is port number. For details about interface_type, interface_num and
interface_name, refer to the Port Command Manual.
all: Clears all the ARP mapping entries.
Reset the static ARP entries.
<SW8800> reset arp static
8-7
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
Chapter 9 DHCP Configuration Commands
9.1 General DHCP Configuration Commands
9.1.1 dhcp enable
Syntax dhcp enable undo dhcp enable
View
System view
Parameter
None
Description
Use the dhcp enable command to enable DHCP service.
Use the undo dhcp enable command to disable the DHCP service.
For both DHCP server and DHCP relay, you must enable DHCP service first before performing other DHCP configurations. The other related DHCP configurations take effect only after DHCP service is enabled.
Example
Enable DHCP service.
[SW8800] dhcp enable
9.1.2 dhcp select
Syntax
In VLAN interface view:
dhcp select { global | interface | relay }
undo dhcp select
In system view:
dhcp select { global | interface | relay } { interface vlan-interface vlan_id [ to
vlan-interface vlan_id ] | all }
undo dhcp select { interface vlan-interface vlan_id [ to vlan-interface vlan_id ] |
all }
9-1
3Com Switch 8800 Command Reference Guide
View
VLAN interface view, system view
Chapter 9 DHCP Configuration Commands
Parameter
Description
Use the dhcp select command to specify a method used by the switch to process the
DHCP packets it received. You can use this command in VLAN interface view to specify a processing method of DHCP packets for current VLAN interface, or in system view to specify a processing method for multiple VLAN interfaces.
Use the undo dhcp select command to revert to the default processing mode of
DHCP packets.
By default, the switch forwards the DHCP packets it received to the local DHCP server and let the local server assign IP addresses in global address pools to DHCP clients.
(That is, the switch processes the DHCP packets in the global method.)
Example
global: Specifies to forward DHCP packets to local DHCP server and let the local server assign IP addresses in global address pools to DHCP clients.
interface: Specifies to forward DHCP packets to local DHCP server and let the local server assign IP addresses in VLAN interface address pool to DHCP clients.
relay: Specifies to forward DHCP packets to remote DHCP servers and let remote servers assign IP addresses to DHCP clients. In this case, the current switch operates as a DHCP relay.
interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies a VLAN interface or a range of VLAN interfaces.
all: Specifies all the VLAN interfaces.
Specify to forward DHCP packets to the local DHCP server and let the local server assign IP addresses in global address pools to DHCP clients.
[SW8800-Vlan-interface1] dhcp select global
9.1.3 dhcp server detect
Syntax dhcp server detect undo dhcp server detect
View
System view
9-2
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 9 DHCP Configuration Commands
Description
Use the dhcp server detect command to enable fake DHCP server detection.
Use the undo dhcp server detect command to disable fake DHCP server detection.
Fake DHCP server detection is disabled by default.
Example
Enable fake DHCP server detection.
[SW8800] dhcp server detect
9.2 DHCP Server Configuration Commands
9.2.1 debugging dhcp server
Syntax
debugging dhcp server { all | error | event | packet }
undo debugging dhcp server { all | error | event | packet }
View
User view
Parameter
Description
Use the debugging dhcp server command to enable debugging for DHCP server.
Use the undo debugging dhcp server command to disable debugging for DHCP server.
Each type of debugging concerning DHCP servers is disabled by default.
Example
all: Used to enable/disable all types of debugging for DHCP server.
error: Used to enable/disable error debugging for DHCP server errors, including those occur when a DHCP server processes DHCP packets or assigns IP addresses.
event: Used to enable/disable debugging for DHCP server events, including the assigning of IP addresses and timing out of ping packets.
packet: Specifies debugging for packets received/sent by DHCP servers, including
DHCP packets and ping packets.
Enable debugging for DHCP server events.
9-3
3Com Switch 8800 Command Reference Guide
<SW8800> debugging dhcp server event
Chapter 9 DHCP Configuration Commands
9.2.2 dhcp server dns-list
Syntax
In VLAN interface view:
dhcp server dns-list ip-address [ ip-address ]
undo dhcp server dns-list { ip-address | all }
In system view:
dhcp server dns-list ip-address [ ip-address ] { interface vlan-interface vlan_id [ to
vlan-interface vlan_id ] | all }
undo dhcp server dns-list { ip-address | all } { interface vlan-interface vlan_id [ to
vlan-interface vlan_id ] | all }
View
VLAN interface view, system view
Parameter
ip-address: IP address of a DHCP server. You can specify up to eight IP addresses
(separated by spaces) in one command.
interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one VLAN interface, or a range of VLAN interfaces.
all: Specifies all VLAN interfaces or all configured IP addresses.
Description
Use the dhcp server dns-list command to configure one or more DNS server addresses for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
Use the undo dns-list command to remove one or more DNS server addresses configured for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
By default, no DNS server address is configured.
With eight DNS server addresses already configured, if you add a new DNS server address by executing the dhcp server dns-list command, the newly configured one overwrites the oldest one.
Related command: dns-list.
Example
Configure the DNS server address 1.1.1.254 for the DHCP address pool of VLAN interface 1.
9-4
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
[SW8800] interface Vlan-interface 1
[SW8800-Vlan-interface1] dhcp server dns-list 1.1.1.254
9.2.3 dhcp server domain-name
Syntax
In VLAN interface view:
dhcp server domain-name domain-name
undo dhcp server domain-name
In system view:
dhcp server domain-name domain-name { interface vlan-interface vlan_id [ to
vlan-interface vlan_id ] | all }
undo dhcp server domain-name domain-name { interface vlan-interface vlan_id
[ to vlan-interface vlan_id ] | all }
View
DHCP address pool view, VLAN interface view, system view
Parameter
domain-name: DHCP client domain name for DHCP address pool of specified VLAN interface, a string that is of 3 to 50 characters in length.
interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one VLAN interface, or a range of VLAN interfaces.
all: Specifies all VLAN interfaces.
Description
Use the dhcp server domain-name command to configure a DHCP client domain name for the DHCP address pool of the current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
Use the undo dhcp server domain-name command to remove the DHCP client domain name configured for the DHCP address pool of the current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
No DHCP client domain name is configured by default.
Related command: domain-name.
Example
Configure the DHCP client domain name of the DHCP address pool of the current
VLAN interface to vlan-interface1.com.
[SW8800] interface vlan-interface 1
[SW8800-Vlan-interface1] dhcp server domain-name vlan-interface1.com
9-5
3Com Switch 8800 Command Reference Guide
9.2.4 dhcp server expired
Chapter 9 DHCP Configuration Commands
Syntax
In VLAN interface view:
dhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited }
undo dhcp server expired
In system view:
dhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited }
{ interface vlan-interface vlan_id [ to vlan-interface vlan_id ] | all }
undo dhcp server expired { interface vlan-interface vlan_id [ to vlan-interface
vlan_id ] | all }
View
VLAN interface view, system view
Parameter
day day: Sets the number of days. The day argument ranges from 0 to 365.
hour hour: Sets the number of hours. The hour argument ranges from 0 to 23.
minute minute: Sets the number of minutes. The minute argument ranges from 0 to
59.
unlimited: Sets an unlimited lease time.
interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one VLAN interface, or a range of VLAN interfaces.
all: Specifies all VLAN interfaces.
Description
Use the dhcp server expired command to set the IP address lease time for the
DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
Use the undo dhcp server expired command to revert to the default IP address lease time for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
The default lease time is one day.
Related command: expired.
Example
Set the IP address lease time of the DHCP address pool of VLAN interface 1 to unlimited.
[SW8800] interface vlan-interface 1
9-6
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
[SW8800-Vlan-interface1] dhcp server expired unlimited
9.2.5 dhcp server forbidden-ip
Syntax
dhcp server forbidden-ip low-ip-address [ high-ip-address ]
undo dhcp server forbidden-ip low-ip-address [ high-ip-address ]
View
System view
Parameter
Description
Use the dhcp server forbidden-ip command to forbid a range of IP addresses to be automatically assigned to DHCP clients.
Use the undo dhcp server forbidden-ip command to cancel the forbiddance.
All IP addresses in a DHCP address pool can be automatically assigned by default.
Related command: dhcp server ip-pool, network, static-bind ip-address, and
dhcp server static-bind.
Example
low-ip-address: Minimum IP address in the forbidden IP address range.
high-ip-address: The highest IP address in the forbidden IP address range. Note that the value of this argument must be larger than (or equal to) that of the low-ip-address argument. If you do not provide this argument, then the forbidden IP address range contains only the IP address specified by the low-ip-address argument.
Forbid the IP addresses from 10.110.1.1 to 10.110.1.63 to be automatically assigned.
[SW8800] dhcp server forbidden-ip 10.110.1.1 10.110.1.63
9.2.6 dhcp server ip-pool
Syntax
dhcp server ip-pool pool-name
undo dhcp server ip-pool pool-name
View
System view
9-7
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 9 DHCP Configuration Commands
pool-name: Name of the address pool, a string that is of 1 to 35 characters in length.
An address pool name uniquely identifies an address pool.
Description
Use the dhcp server ip-pool command to create a global DHCP address pool and enter the corresponding DHCP address pool view.
Use the undo dhcp server ip-pool command to remove a specified global DHCP address pool.
No global DHCP address pool is created by default.
Related command: dhcp enable.
Example
Create a global DHCP address pool with a name of 0.
[SW8800] dhcp server ip-pool 0
[SW8800-dhcp-0]
9.2.7 dhcp server nbns-list
Syntax
In VLAN interface view:
dhcp server nbns-list ip-address [ ip-address ]
undo dhcp server nbns-list { ip-address | all }
In system view:
dhcp server nbns-list ip-address [ ip-address ] { interface vlan-interface vlan_id
[ to vlan-interface vlan_id ] | all }
undo dhcp server nbns-list { ip-address | all } { interface vlan-interface vlan_id [ to
vlan-interface vlan_id ] | all }
View
VLAN interface view, system view
Parameter
ip-address: NetBIOS server IP address. You can specify up to eight IP addresses
(separated by spaces) in one command.
interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one VLAN interface, or a range of VLAN interfaces.
all: Specifies all VLAN interfaces or all configured IP addresses.
9-8
3Com Switch 8800 Command Reference Guide
Description
Chapter 9 DHCP Configuration Commands
Use the dhcp server nbns-list command to configure one or more NetBIOS server
IP addresses for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
Use the undo dhcp server nbns-list command to remove one or all NetBIOS server
IP addresses configured for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s)..
By default, no NetBIOS server IP address is configured.
With eight NetBIOS server addresses already configured, if you add a new one by executing the dhcp server nbns-list command, the newly configured one overwrites the oldest one.
Related command: nbns-list, dhcp server netbios-type.
Example
Configure the NetBIOS server with an IP address of 10.12.1.99 for the DHCP address pool of VLAN interface 1.
[SW8800] interface vlan-interface 1
[SW8800-Vlan-interface1] dhcp server nbns-list 10.12.1.99
9.2.8 dhcp server netbios-type
Syntax
In VLAN interface view:
dhcp server netbios-type { b-node | h-node | m-node | p-node }
undo dhcp server netbios-type
In system view:
dhcp server netbios-type { b-node | h-node | m-node | p-node } { interface
vlan-interface vlan_id [ to vlan-interface vlan_id ] | all }
undo dhcp server netbios-type { interface vlan-interface vlan_id [ to
vlan-interface vlan_id ] | all }
View
Parameter
VLAN interface view, system view
b-node: Specifies b-node to be the NetBIOS node type. DHCP clients of this node type establish host name-to-IP address mapping by broadcasting. (b stands for broadcast.)
9-9
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
p-node: Specifies p-node to be the NetBIOS node type. DHCP clients of this node type establish host name-to-IP address mapping by communicating with NetBIOS server. (p stands for peer-to-peer.)
m-node: Specifies m-node to be the NetBIOS node type. DHCP clients of this node type are p nodes which take some broadcast features. (m stands for mixed.)
h-node: Specifies h-node to be the NetBIOS node type. DHCP clients of this node type are b nodes which take peer-to-peer mechanism. (h stands for hybrid.)
Description
Use the dhcp server netbios-type command to configure the NetBIOS node type for
DHCP clients of DHCP address pool of current or specified VLAN interface.
Use the undo dhcp server netbios-type command to remove the NetBIOS node type configured for DHCP clients of DHCP address pool of current or specified VLAN interface.
The default DHCP client NetBIOS node type is h-node.
Related command: netbios-type, dhcp server nbns-list.
Example
Configure p-node as the NetBIOS node type for DHCP clients of the DHCP address pool of VLAN interface 1.
[SW8800] interface vlan-interface 1
[SW8800-Vlan-interface1] dhcp server netbios-type p-node
9.2.9 dhcp server option
Syntax
In VLAN interface view:
dhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address
[ ip-address ] }
undo dhcp server option code
In system view:
dhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address
[ ip-address ] } { interface vlan-interface vlan_id [ to vlan-interface vlan_id ] | all }
undo dhcp server option code { interface vlan-interface vlan_id [ to
vlan-interface vlan_id ] | all }
View
VLAN interface view, system view
9-10
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 9 DHCP Configuration Commands
code: Option code customized by user. This argument ranges from 2 to 254.
ascii ascii-string: Specifies a string comprising ASCII characters. The string can be of
1 to 63 characters in length.
hex hex-string: Specifies a numeric string containing 2 or 4 hexadecimal digits (hh or hhhh).
ip-address ip-address [ ip-address ]: Specifies one or more IP addresses. You can specify up to eight IP addresses (separated by spaces) in one command.
interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one or more
VLAN interfaces.
all: Specifies all VLAN interfaces.
Description
Use the dhcp server option command to configure a custom DHCP option for the
DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
Use the undo dhcp server option command to remove a custom DHCP option configured for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).
If you execute the dhcp server option command multiple times, the new configurations overwrite the corresponding old ones.
Related command: option.
Example
Configure a custom DHCP option for the DHCP address pool of VLAN interface 1, with the code argument of 100 and the hex-string argument of 0x11 and 0x22.
[SW8800] interface vlan-interface 1
[SW8800-Vlan-interface1] dhcp server option 100 hex 11 22
9.2.10 dhcp server ping
Syntax
dhcp server ping { packets number | timeout milliseconds }
undo dhcp server ping { packets | timeout }
View
System view
9-11
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 9 DHCP Configuration Commands
packets number: Sets the maximum times to send ping packets. The number argument ranges from 0 to 10 and defaults to 2. Value of 0 specifies not to send any ping packet.
timeout milliseconds: Sets the maximum time to wait for a response to a ping packet.
The milliseconds argument is in the unit of milliseconds; it ranges from 0 to 10000 and defaults to 500.
Description
Use the dhcp server ping command to set the maximum times to send ping packets or the maximum time for the DHCP server to wait for a response after sending a ping packet.
Use the undo dhcp server ping command to revert to the corresponding default setting.
Example
Set the maximum times to send ping packets to 10, and the maximum time to wait for a response to a ping packet to 500 milliseconds.
[SW8800] dhcp server ping packets 10
9.2.11 dhcp server static-bind
Syntax
dhcp server static-bind ip-address ip-address mac-address mac-address
undo dhcp server static-bind { ip-address ip-address | mac-address
mac-address }
View
VLAN interface view
Parameter
ip-address: IP address to be bound statically. Note that the IP address must be a valid
IP address in the address pool of the current VLAN interface.
mac-address: MAC address for the IP address to be bound to.
Description
Use the dhcp server static-bind command to statically bind an IP address in the address pool of the current VLAN interface to a MAC address.
Use the undo dhcp server static-bind command to remove a statically bound IP address entry.
9-12
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
IP addresses in the address pool of a VLAN interface are not statically bound by default.
VLAN interface address pool only supports one-to-one MAC-IP binding.
Example
Statically bind the IP address 10.1.1.1 to the MAC address 0000-e03f-0305.
[SW8800-Vlan-interface1] dhcp server static-bind 10.1.1.1 0000-e03f-0305
9.2.12 display dhcp server conflict
Syntax
display dhcp server conflict { all | ip ip-address }
View
Any view
Parameter
all: Specifies all IP addresses.
ip ip-address: Specifies an IP address.
Description
Use the display dhcp server conflict command to display the statistics about DHCP address conflicts.
Related command: reset dhcp server conflict.
Example
Display the statistics about DHCP address conflicts.
<SW8800> display dhcp server conflict all
Address Discover Time
10.110.1.2 Jan 11 2003 11:57: 7 PM
Table 9-1 Description on the fields of the display dhcp server conflict command
Field
Address
Discover Time
Description
The IP address that causes the conflict
The time when the conflict is discovered
9-13
3Com Switch 8800 Command Reference Guide
9.2.13 display dhcp server expired
Chapter 9 DHCP Configuration Commands
Syntax
display dhcp server expired { ip ip-address | pool [ pool-name ] | interface
[ vlan-interface vlan_id ] | all }
View
Any view
Parameter
ip ip-address: Specifies an IP address.
pool [ pool-name ]: Specifies a global address pool. If you do not input a pool-name, all global address pools are included.
interface [ vlan-interface vlan_id ]: Specifies a VLAN interface address pool. If you do not input a vlan_id, all VLAN interface address pools are included.
all: Specifies all DHCP address pools.
Description
Use the display dhcp server expired command to display information about lease-expired addresses. If no available IP address exists in a DHCP address pool, the DHCP server assigns the lease-expired IP addresses in the pool to DHCP clients as needed.
Example
Display information about lease-expired addresses.
<SW8800> display dhcp server expired all
Global pool:
IP address Hardware address Lease expiration Type
Interface pool:
IP address Hardware address Lease expiration Type
Table 9-2 Description on the fields of the display dhcp server expired command
Field
Global pool
Interface pool
IP address
Hardware address
Lease expiration
Description
The information followed is about expired IP addresses in global address pool(s)
The information followed is about lease-expired IP addresses in VLAN interface address pool(s)
Bound IP addresses
Bound MAC addresses
The time when an IP address expires
9-14
3Com Switch 8800 Command Reference Guide
Field
Chapter 9 DHCP Configuration Commands
Description
9.2.14 display dhcp server free-ip
Syntax display dhcp server free-ip
View
Any view
Parameter
None
Description
Use the display dhcp server free-ip command to display the ranges of available
(unassigned) IP addresses in DHCP address pools.
Example
Display the ranges of available (unassigned) IP addresses in DHCP address pools.
<SW8800> display dhcp server free-ip
IP Range from 1.0.0.0 to 2.2.2.1
IP Range from 2.2.2.3 to 2.255.255.255
IP Range from 4.0.0.0 to 4.255.255.255
IP Range from 5.5.5.0 to 5.5.5.0
IP Range from 5.5.5.2 to 5.5.5.255
9.2.15 display dhcp server ip-in-use
Syntax
display dhcp server ip-in-use { ip ip-address | pool [ pool-name ] | interface
[ vlan-interface vlan_id ] | all }
View
Any view
Parameter
ip ip-address: Specifies an IP address.
pool [ pool-name ]: Specifies a global address pool. If you do not input a pool-name, all global address pools are included.
9-15
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
interface [ vlan-interface vlan_id ]: Specifies a VLAN interface address pool. If you do not input a vlan_id, all VLAN interface address pools are included.
all: Specifies all DHCP address pools.
Description
Use the display dhcp server ip-in-use command to display information about IP address binding in DHCP address pool(s).
Related command: reset dhcp server ip-in-use.
Example
Display information about IP address binding in all DHCP address pools.
<SW8800> display dhcp server ip-in-use all
Global pool:
IP address Hardware address Lease expiration Type
Interface pool:
IP address Hardware address Lease expiration Type
5.5.5.1 0050-ba28-930a Jun 5 2003 10:56: 7 AM Auto:COMMITED
Table 9-3 Description on the fields of the display dhcp server ip-in-use command
Fields
Global pool
Interface pool
Description
The information followed is about bound IP addresses in global address pool(s)
The information followed is about bound IP addresses in
VLAN interface address pool(s)
IP address Bound IP addresses
Hardware address Bound MAC addresses
Lease expiration The time when an IP address expires
9.2.16 display dhcp server statistics
Syntax display dhcp server statistics
View
Any view
9-16
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 9 DHCP Configuration Commands
Description
Use the display dhcp server statistics command to display statistics information about the DHCP server.
Related command: reset dhcp server statistics.
Example
Display statistics information about the DHCP server.
<SW8800> display dhcp server statistics
Global Pool:
Pool Number: 5
Binding
Auto: 0
Manual: 1
Expire: 0
Interface Pool:
Pool Number: 1
Binding
Auto: 1
Manual: 0
Expire: 0
Boot Request: 6
Dhcp Discover: 1
Dhcp Request: 4
Dhcp Decline: 0
Dhcp Release: 1
Dhcp Inform: 0
Boot Reply: 4
Dhcp Offer: 1
Dhcp Ack: 3
Dhcp Nak: 0
Bad Messages: 0
Table 9-4 Description on the fields of the display dhcp server statistics command
Field
Global Pool
Interface Pool
Description
The information followed is about the statistics of the global address pools
The information followed is about the statistics of the address pools of VLAN interfaces
9-17
3Com Switch 8800 Command Reference Guide
Field
Pool Number
Auto
Manual
Expire
Boot Request: 6
Dhcp Discover: 1
Dhcp Request: 4
Dhcp Decline: 0
Dhcp Release: 1
Dhcp Inform: 0
Boot Reply: 4
Dhcp Offer: 1
Dhcp Ack: 3
Dhcp Nak: 0
Bad Messages
Total and categorized DHCP packets received by the
DHCP server
Total and categorized DHCP packets sent by the DHCP server
Chapter 9 DHCP Configuration Commands
Description
Number of address pools
Number of automatically bound IP addresses
Number of manually bound IP addresses
Number of expired IP addresses
Number of bad DHCP packets
9.2.17 display dhcp server tree
Syntax
display dhcp server tree { pool [ pool-name ] | interface [ vlan-interface vlan_id ] |
all }
View
Any view
Parameter
pool [ pool-name ]: Specifies a global address pool. If you do not specify a global address pool, all global address pools are included.
interface [ vlan-interface vlan_id ]: Specifies the address pool of a VLAN interface. If you do not specify a VALN interface, address pools of all VLAN interfaces are included.
all: Specifies all addresses pools.
Description
Use the display dhcp server tree command to display information about DHCP address pool hierarchy.
9-18
3Com Switch 8800 Command Reference Guide
Example
Chapter 9 DHCP Configuration Commands
Display information about DHCP address pool hierarchy.
<SW8800>display dhcp server tree all
Global pool:
Pool name: 5 network 10.10.1.0 mask 255.255.255.0
Child node:6
Sibling node:7
option 1 ip-address 255.0.0.0
expired 1 0 0
option 58 hex 00 00 A8 C0
option 59 hex 00 00 00 3C
Pool name: 6
static-bind ip-address 10.10.1.2 mask 255.0.0.0
static-bind mac-address 00e0-00fc-0001
Parent node:5
option 1 ip-address 255.255.0.
expired 1 0 0
option 58 hex 00 00 A8 C0
option 59 hex 00 00 00 3C
Pool name: 7 network 10.10.1.64 mask 255.255.255.192
PrevSibling node:5
option 1 ip-address 255.0.0.0
gateway-list 2.2.2.2
dns-list 1.1.1.1
domain-name 444444
nbns-list 3.3.3.3
expired 1 0 0
option 58 hex 00 00 A8 C0
option 59 hex 00 00 00 3C
Table 9-5 Description on the fields of the display dhcp server tree command
Field
Global pool
Interface pool
Pool Name
Network
Description
The information followed is about global address pools
The information followed is about VLAN interface address pools
The name of an address pool
Range of addresses available for assigning
9-19
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
Field Description
static-bind ip-address
10.10.1.2 mask
255.0.0.0
An IP address and the corresponding MAC address statically bound to it static-bind mac-address
00e0-00fc-0001 child node:6
The address pool named 6 is a child node of the one named 5
Based on the node position of the address pool named 5, the node type displayed here includes the following:
Child node: Indicates the node to which the address pool named 6 corresponds is a child node of that of the address pool named 5. In this case, node 6 stands for a subnet of the network node 5 stands for
Parent node: Indicates the node to which the address pool named 6 corresponds is the parent node of that of the address pool named 5. In this case, node 6 stands for the network segment
Sibling node: Indicates the node to which the address pool named 6 corresponds is the next sibling node of that of the address pool named 5. Information about these address pools is displayed in the order they are established
PrevSibling node: Indicates the node to which the address pool named 6 corresponds is the previous sibling node of that of the address pool named 5 expired gateway-list dns-list domain-name nbns-list
9.2.18 dns-list
Syntax
dns-list ip-address [ ip-address ]
undo dns-list { ip-address | all }
View
DHCP address pool view
The valid period of the leased IP addresses in the address pool, including number of days, hours and minutes
The list of outbound gateways configured for the DHCP clients
The list of DNS servers configured for the DHCP clients
The domain name configured for the DHCP clients
The NetBIOS server configured for the DHCP clients
9-20
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 9 DHCP Configuration Commands
ip-address: IP address of a DNS server. You can specify up to eight IP addresses
(separated by spaces) in one command.
all: Specifies all configured DNS server IP addresses.
Description
Use the dns-list command to configure one or more DNS server IP addresses for a global DHCP address pool.
Use the undo dns-list command to remove one or all DNS server IP addresses configured for a global DHCP address pool.
By default, no DNS server IP address is configured for a global DHCP address pool.
With eight DNS server addresses already configured, if you add a new one by executing the dns-list command, the new one overwrites the oldest one.
Related command: dhcp server dns-list, dhcp server ip-pool.
Example
Configure a DNS server with an IP address of 1.1.1.254 for the global DHCP address pool 0.
[SW8800] dhcp server ip-pool 0
[SW8800-dhcp-0] dns-list 1.1.1.254
9.2.19 domain-name
Syntax
domain-name domain-name
undo domain-name
View
DHCP address pool view
Parameter
domain-name: Domain name, a string that is of 3 to 50 characters in length.
Description
Use the domain-name command to configure a domain name for the DHCP clients of a global DHCP address pool.
Use the undo domain-name command to remove the domain name configured for the DHCP clients of a global DHCP address pool.
By default, no domain name is configured for the DHCP clients of a global DHCP address pool.
9-21
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
Related command: dhcp server ip-pool, dhcp server domain-name.
Example
Configure a domain name (mydomain.com) for the DHCP clients of the global DHCP address pool 0.
[SW8800] dhcp server ip-pool 0
[SW8800-dhcp-0] domain-name mydomain.com
9.2.20 expired
Syntax
expired { day day [ hour hour [ minute minute ] ] | unlimited }
undo expired
View
DHCP address pool view
Parameter
Description
Use the expired command to set the valid period for a global DHCP address pool.
Use the undo expired command to revert to the default valid period.
The default valid period is 1 day.
Related command: dhcp server ip-pool, dhcp server expired.
Example
day day: Specifies the number of days. The day argument ranges from 0 to 365.
hour hour: Specifies the number of hours. The hour argument ranges from 0 to 23.
minute minute: Specifies the number of minutes. The minute argument ranges from 0 to 59.
unlimited: Specifies an unlimited lease time.
Set the IP address lease time of the global DHCP address pool 0 to one day plus two hours and three minutes.
[SW8800] dhcp server ip-pool 0
[SW8800-dhcp-0] expired day 1 hour 2 minute 3
9.2.21 gateway-list
Syntax
gateway-list ip-address [ ip-address ]
9-22
3Com Switch 8800 Command Reference Guide
undo gateway-list { ip-address | all }
View
DHCP address pool view
Parameter
Chapter 9 DHCP Configuration Commands
ip-address: IP address of an outbound gateway. You can specify up to eight IP addresses (separated by spaces) in one command.
all: Specifies all outbound gateway IP addresses.
Description
Use the gateway-list command to configure one or more outbound gateway addresses for DHCP clients.
Use the undo gateway-list command to remove one or all outbound gateway addresses configured for DHCP clients.
By default, no outbound gateway address is configured for DHCP clients.
With eight outbound gateway addresses already configured, if you add a new outbound gateway address by executing the gateway-list command, the new one overwrites the oldest one.
Example
Configure an outbound gateway with an IP address of 10.110.1.99 for DHCP clients of global DHCP address pool 0.
[SW8800] dhcp server ip-pool 0
[SW8800-dhcp-0] gateway-list 10.110.1.99
9.2.22 nbns-list
Syntax
nbns-list ip-address [ ip-address ]
undo nbns-list { ip-address | all }
View
DHCP address pool view
Parameter
ip-address: IP address of a NetBIOS server. You can specify up to eight IP addresses
(separated by spaces) in one command.
all: Specifies all configured NetBIOS server IP addresses.
9-23
3Com Switch 8800 Command Reference Guide
Description
Chapter 9 DHCP Configuration Commands
Use the nbns-list command to configure one or more NetBIOS server addresses for a global DHCP address pool.
Use the undo nbns-list command to remove one or all NetBIOS server addresses configured for a global DHCP address pool.
By default, no NetBIOS server address is configured for a global DHCP address pool.
With eight NetBIOS server addresses already configured, if you add a new NetBIOS server address by executing the nbns-list command, the new one overwrites the oldest one.
Related command: dhcp server ip-pool, dhcp server nbns-list, netbios-type.
Example
Configure a NetBIOS server with an IP address of 10.12.1.99 for the global DHCP address pool named 0.
[SW8800] dhcp server ip-pool 0
[SW8800-dhcp-0] nbns-list 10.12.1.99
9.2.23 netbios-type
Syntax
netbios-type { b-node | h-node | m-node | p-node }
undo netbios-type
View
Parameter
DHCP address pool view
b-node: Specifies the NetBIOS node type of DHCP clients to be b-node (b stands for broadcast). Nodes of this type establish their host name-to-IP address mappings by broadcasting.
p-node: Specifies the NetBIOS node type of DHCP clients to be p-node (p stands for peer-to-peer). Nodes of this type establish their host name-to-IP address mappings by communicating with NetBIOS server.
m-node: Specifies the NetBIOS node type of DHCP clients to be m-node (m stands for mixed). Nodes of this type are p nodes which take some broadcast features.
h-node: Specifies the NetBIOS node type of DHCP clients to be h-node (h stands for hybrid). Nodes of this type are b nodes which take peer-to-peer mechanism.
9-24
3Com Switch 8800 Command Reference Guide
Description
Chapter 9 DHCP Configuration Commands
Use the netbios-type command to configure the NetBIOS node type for DHCP clients of a global DHCP address pool.
Use the undo netbios-type command to remove NetBIOS node type configuration of a global DHCP address pool.
By default, the DHCP clients are of h-node type.
Related command: dhcp server ip-pool, dhcp server netbios-byte, nbns-list.
Example
Configure the NetBIOS node type of DHCP clients of the global DHCP address pool 0 to b-node.
[SW8800] dhcp server ip-pool 0
[SW8800-dhcp-0] netbios-type b-node
9.2.24 network
Syntax
network ip-address [ mask netmask ]
undo network
View
DHCP address pool view
Parameter
ip-address: Address range for dynamic IP address assigning.
mask netmask: Specifies the subnet mask of the address pool. If you do not provide this argument, the default subnet mask is used.
Description
Use the network command to configure an address range for dynamic IP address assignment.
Use the undo network command to remove the address range configured for dynamic IP address assignment.
By default, no IP address range is configured for dynamic IP address assignment.
Each DHCP address pool can be configured with only one address range. If you execute the network command multiple times, then only the last configured address range works.
Related command: dhcp server ip-pool, dhcp server forbidden-ip.
9-25
3Com Switch 8800 Command Reference Guide
Example
Chapter 9 DHCP Configuration Commands
Configure 192.168.8.0/24 as the address range for the global DHCP address pool 0.
[SW8800-dhcp-0] network 192.168.8.0 mask 255.255.255.0
9.2.25 option
Syntax
option code { ascii ascii-string | hex hex-string | ip-address ip-address
[ ip-address ] }
undo option code
View
DHCP address pool view
Parameter
code: Customized option value, a number ranging from 2 to 254.
ascii ascii-string: Specifies an ASCII string. The ascii-string argument is a string that is of 1 to 63 characters in length.
hex hex-string: Specifies a numeric string containing two or four hexadecimal digits
(hh or hhhh).
ip-address ip-address [ ip-address ]: Specifies one or more IP addresses. You can specify up to eight IP addresses (separated by spaces) in one command.
Description
Use the option command to configure a custom DHCP option for a global DHCP address pool.
Use the undo option command to remove a custom DHCP option configured for the global DHCP address pool.
If you execute the option command multiple times, the new configurations overwrite the corresponding old ones
Related command: dhcp server ip-pool, dhcp server option.
Example
Configure a custom option for the global DHCP address pool, with an option value of
100 and two hexadecimal numbers of 0x11 and 0x22.
[SW8800] dhcp server ip-pool 0
[SW8800-dhcp-0] option 100 hex 11 22
9-26
3Com Switch 8800 Command Reference Guide
9.2.26 reset dhcp server conflict
Chapter 9 DHCP Configuration Commands
Syntax
reset dhcp server conflict { ip ip-address | all }
View
User view
Parameter
ip-address: Clears statistics about the specified IP address conflicts.
all: Clears all statistics about address conflicts.
Description
Use the reset dhcp server conflict command to clear statistics information about
DHCP address conflicts.
Related command: display dhcp server conflict.
Example
Clear all statistics information about DHCP address conflicts.
<SW8800> reset dhcp server conflict all
9.2.27 reset dhcp server ip-in-use
Syntax
reset dhcp server ip-in-use{ all | interface [ vlan-interface vlan_id ] | ip ip-address
| pool [ pool-name ] }
View
User view
Parameter
all: Specifies all binding entries.
ip-address: Specifies the binding entry that contains the specified IP address.
pool-name: Specifies a global DHCP address pool. If you do not provide this argument, then all global DHCP address pools are included.
interface_name: Specifies a VLAN interface DHCP address pool. If you do not provide this argument, then all VLAN interface DHCP address pools are included.
Description
Use the reset dhcp server ip-in-use command to clear configuration about dynamically bound DHCP addresses.
9-27
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
Related command: display dhcp server ip-in-use.
Example
Clear the binding entries that contain the IP address of 10.110.1.1.
<SW8800> reset dhcp server ip-in-use ip 10.110.1.1
9.2.28 reset dhcp server statistics
Syntax reset dhcp server statistics
View
User view
Parameter
None
Description
Use the reset dhcp server statistics command to clear statistics information about the DHCP servers, such as the number of DHCP address pools, the number of automatically bound, manually bound IP addresses and expired IP addresses, and the number of unrecognized packets, DHCP_Request packets and DHCP_ACK packets.
Related command: display dhcp server statistics.
Example
Clear statistics information about the DHCP servers.
<SW8800> reset dhcp server statistics
9.2.29 static-bind ip-address
Syntax
static-bind ip-address ip-address [ mask netmask ]
undo static-bind ip-address
View
DHCP address pool view
Parameter
ip-address: IP address to be bound.
9-28
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
mask netmask: Specifies the subnet mask of the IP address to be bound. If you do not provide the argument, the default subnet mask is used.
Description
Use the static-bind ip-address command to specify the IP address to be statically bound.
Use the undo static-bind ip-address command to free a statically bound IP address.
By default, no IP address is statically bound.
The static-bind ip-address command and the static-bind mac-address command must be coupled when you configure statically bound entries to specify the corresponding IP address bound to the MAC address specified by the static-bind
mac-address command.
Related command: dhcp server ip-pool, static-bind mac-address.
Example
Bind the PC with a MAC address of 0000-e03f-0305 to 10.1.1.1, whose subnet mask is 255.255.255.0.
[SW8800-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0
[SW8800-dhcp-0] static-bind mac-address 0000-e03f-0305
9.2.30 static-bind mac-address
Syntax
static-bind mac-address mac-address
undo static-bind mac-address
View
DHCP address pool view
Parameter
mac-address: MAC address to be bound.
Description
Use the static-bind mac-address command to specify the MAC address to be statically bound.
Use the undo static-bind mac-address command to free a statically bound MAC address.
By default, no MAC address is statically bound.
The static-bind mac-address command and the static-bind ip-address command must be coupled when you configure statically bound entries to specify the
9-29
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands corresponding MAC address bound to the IP address specified by the static-bind
ip-address command.
Related command: dhcp server ip-pool and static-bind ip-address.
Example
Bind the PC with a MAC address of 0000-e03f-0305 to 10.1.1.1, whose subnet mask is 255.255.255.0.
[SW8800-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0
[SW8800-dhcp-0] static-bind mac-address 0000-e03f-0305
9.3 DHCP Relay Configuration Commands
9.3.1 debugging dhcp relay
Syntax
debugging dhcp relay { all| packet | error | event }
undo debugging dhcp relay { all| packet | error | event }
View
User view
Parameter
Description
Use the debugging dhcp-relay command to enable debugging for DHCP Relay.
Use the undo debugging dhcp-relay command to disable specified type of debugging concerning DHCP Relay.
Debugging for DHCP Relay is disabled by default.
Example
all: Enables all types of debugging concerning DHCP Relay.
packet: Enables debugging for packets.
error: Enables debugging for error messages.
event: Enables debugging for events.
Enable debugging for DHCP Relay.
<SW8800> debugging dhcp relay
*0.7200205-DHCP-8-dhcp_debug:
From client to server:
Interface: VLAN-Interface 1
Type: dhcp-request
9-30
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
ClientHardAddress: 0010-dc19-695d
ServerIpAddress: 192.168.1.2
*0.7200230-DHCP-8-dhcp_debug:
From server to client:
Interface: VLAN-Interface 1
ServerGroupNo: 0
Type: dhcp-ack
ClientHardAddress: 0010-dc19-695d
your ip address: 10.1.1.1
*0.7200580-DHCP-8-largehop:
Discard DHCP request packet because of too large hop count!
*0.7200725-DHCP-8-invalidpkt:
Wrong DHCP packet!
Table 9-6 Description on the fields of the debugging dhcp-relay command
Field
Interface
Type
ClientHardAddress
ServerIpAddress your ip address
Description
The VLAN interface that forwards DHCP packets
Type of the forwarded DHCP packet
The MAC address of the DHCP client
The IP address of the DHCP server
The IP address assigned to the DHCP client
9.3.2 dhcp relay security
Syntax
dhcp relay security ip_address mac_address static
undo dhcp relay security ip_address
View
System view
Parameter
ip_address: IP address the user uses.
mac_address: MAC address the user owns.
static: Specifies the user address entry is static.
9-31
3Com Switch 8800 Command Reference Guide
Description
Chapter 9 DHCP Configuration Commands
Use the dhcp relay security command to add a user address entry for the DHCP server.
Use the undo dhcp relay security command to remove a user address entry configured for the DHCP server.
Before adding/removing a user address entry, you can check user address entries configured for the DHCP server using the display dhcprelay-security command.
Example
Configure a user address entry for a DHCP server, with an IP address of 1.1.1.1 and a
MAC address of 0005-5D02-F2B3.
[SW8800] dhcp relay security 1.1.1.1 0005-5D02-F2B3 static
9.3.3 dhcp relay security address-check
Syntax
dhcp relay security address-check { enable | disable }
View
VLAN interface view
Parameter
None
Description
Use the dhcp relay security address-check enable command to enable security address checking on a VLAN interface.
Use the dhcp relay security address-check disable command to disable security address checking on a VLAN interface.
For a VLAN interface, security address checking is disabled by default.
Example
Enable security address checking on VLAN interface 1.
[SW8800-Vlan-interface1] dhcp relay security address-check enable
9.3.4 dhcp-server detect
Syntax
dhcp server detect
undo dhcp server detect
9-32
3Com Switch 8800 Command Reference Guide
View
System view
Chapter 9 DHCP Configuration Commands
Parameter
None
Description
Use the dhcp server detect command to enable fake DHCP server detecting.
A private DHCP server in a network also answers IP address request packets and issues IP addresses to DHCP clients. However, the IP addresses they issued always bring addresses conflicts and cause users cannot access networks. This kind of
DHCP servers are known as fake DHCP servers.
Use the undo dhcp server detect command to disable fake DHCP server detecting.
Example
Enable fake DHCP server detecting.
[SW8800] dhcp server detect
9.3.5 display dhcp relay address
Syntax
display dhcp relay address { interface vlan-interface vlan-id | all }
View
Any view
Parameter
Description
Use the display dhcp relay address command to display information about DHCP servers configured for a VLAN interface.
Example
vlan-id: VLAN interface number.
interface vlan-interface: Specifies to display information about the DHCP servers configured for the VLAN interface.
all: Specifies to display information about the DHCP servers configured for all VLAN interfaces.
Display information about DHCP servers configured for all VLAN interfaces.
[SW8800]display dhcp relay address all
9-33
3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands
** Vlan-interface192 DHCP Relay Address **
Relay Address [0] : 193.193.1.1
Relay Address [1] : 1.1.1.1
Display information about DHCP servers configured for VLAN interface 192.
[SW8800]display dhcp relay address interface vlan 192
** Vlan-interface192 DHCP Relay Address **
Relay Address [0] : 193.193.1.1
Relay Address [1] : 1.1.1.1
9.3.6 display dhcprelay-security
Syntax
display dhcprelay-security [ ip_address ]
View
Any view
Parameter
ip_address: User IP address.
Description
Use the display dhcprelay-security command to display information about user address entries that the DHCP server maintains.
Example
Display information about all user address entries that the DHCP server maintains.
<SW8800> display dhcprelay-security
IP Address MAC Address IP Address Type
--- 2 dhcp-security item(s) found ---
Table 9-7 Description on the fields of the display dhcp-security command
Field
IP Address
MAC Address
IP Address Type
Description
User IP address
User MAC address
Type of the user address entry, which can be static or dynamic
9-34
3Com Switch 8800 Command Reference Guide
9.3.7 ip relay address
Chapter 9 DHCP Configuration Commands
Syntax
ip relay address ip_address
undo ip relay address { ip_address | all }
View
VLAN interface view
Parameter
ip_address: IP address of the DHCP server to which the DHCP packets received by this VLAN interface are forwarded.
all: Specifies all DHCP servers configured for the VLAN interface to forward DHCP packets to.
Description
Use the ip relay address command to specify the VLAN interface to operate in
DHCP Relay mode and to specify the DHCP server to which the DHCP packets received by this VLAN interface are forwarded.
Use the undo ip relay address command to remove the DHCP server configured for the VLAN interface to forward DHCP packets.
No DHCP server is configured for a VLAN interface by default.
Example
Specify users belonging to VLAN interface 1 to acquire their IP addresses from a specified DHCP server.
<SW8800>system-view
System View: return to User View with Ctrl+Z.
[SW8800]interface vlan1
[SW8800-Vlan-interface1] ip relay address 255.255.255.10
9-35
3Com Switch 8800 Command Reference Guide Chapter 10 DNS Configuration Commands
Chapter 10 DNS Configuration Commands
10.1 Static DNS Configuration Commands
10.1.1 ip host
Syntax
ip host hostname ip-address
undo ip host hostname [ ip-address ]
View
System view
Parameter
Description
Use the ip host command to configure the host name and the host IP address.
Use the undo ip host command to cancel the host name and the host IP address.
By default, Host name and corresponding IP address are null.
Related command: display ip host.
Example
hostname: Name of the host. It is a character string that consists of 1 to 20 characters, including letters, numbers, "_" or “,”, and it must contain at least one letter.
ip-address: Host IP address (the corresponding IP address to the host name) in dotted decimal notation.
Set Lanswtich1’s IP address to be 10.110.0.1.
[SW8800] ip host Lanswitch1 10.110.0.1
10.1.2 display ip host
Syntax display ip host
View
Any view
10-1
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 10 DNS Configuration Commands
Description
Use the display ip host command to view all the host names and the corresponding
IP addresses.
Example
Display all host names and the corresponding IP addresses of the hosts.
<SW8800> display ip host
Table 10-1 Description on the fields of the display ip host command
Field Description
Age Valid period
Flags Flags
Address Host IP address
10.2 Dynamic DNS Configuration Commands
10.2.1 debugging dns
Syntax debugging dns
undo debugging dns
View
User view
Parameter
None
Description
Use the debugging dns command to enable DNS debugging.
Use the undo debugging dns command to disable DNS debugging.
By default, DNS debugging is disabled.
10-2
3Com Switch 8800 Command Reference Guide
Example
Chapter 10 DNS Configuration Commands
Enable DNS debugging
<SW8800> debugging dns make DNS packet for name 3Com.com succeed
The information above indicates that the query packet for the domain name
“3Com.com” is generated. send the packet to 172.16.1.1 DNS server for 1 time
The information above indicates that the first query is performed to the domain name with the IP address of “172.16.1.1”. receive a right answer from server 0xAC100101
The information above indicates that a correct answer packet is received from the server. query timeout
The information above indicates that the query for a domain name from a server times out because no answer is received.
10.2.2 display dns domain
Syntax
display dns domain [ dynamic ]
View
Any view
Parameter
dynamic: Displays the domain name suffix information dynamically obtained through
DHCP protocol or other protocols.
Description
Use the display dns domain command to view the domain name suffix list.
Related command: dns domain.
Example
View domain name suffix list.
<SW8800> display dns domain
No Domain-name
0 3Com.com
10-3
3Com Switch 8800 Command Reference Guide Chapter 10 DNS Configuration Commands
Table 10-2 Description on the fields of the display dns domain command
Field Description
Domain-name
10.2.3 display dns dynamic-host
Domain name suffix name
Syntax
display dns dynamic-host
View
Any view
Parameter
None
Description
Use the display dns dynamic-host command to view the dynamic domain name buffer.
Example
View the dynamic domain name buffer.
<SW8800> display dns dynamic-host
No Domain-name Ipaddress TTL Alias
0 www.baidu.com 202.108.249.134 63000
1 www.yahoo.akadns.net 66.94.230.39 24
2 www.hotmail.com 207.68.172.239 3585
3 www.eyou.com 61.136.62.70 3591
Table 10-3 Description on the fields of the display dns dynamic-host command
Field Description
Ipaddress
TTL
Alias
Corresponding IP name of the domain name
Time to live, that is, the time for an entry to be stored, in seconds.
Alias of the domain name. There can be four of them at the most.
10-4
3Com Switch 8800 Command Reference Guide
10.2.4 display dns server
Chapter 10 DNS Configuration Commands
Syntax
display dns server [ dynamic ]
View
Any view
Parameter
Description
Use the display dns server command to view the related information of the domain name server.
Related command: dns server.
Example
dynamic: Displays the domain name server information dynamically obtained through the DHCP protocol or other protocols.
View the related information of the domain name server.
<SW8800> display dns server
0 172.16.1.1
1 172.16.1.2
Table 10-4 Description on the fields of the display dns server command
Field
Domain-server
Ipaddress
Domain name server
Description
Corresponding IP address of the domain name server
10.2.5 dns domain
Syntax
dns domain domain-name
undo dns domain [ domain-name ]
View
System view
Parameter
domain-name: Domain name suffix.
10-5
3Com Switch 8800 Command Reference Guide
Description
Chapter 10 DNS Configuration Commands
Use the dns domain command to add the domain name suffix.
Use the undo dns domain command to delete the domain name suffix.
The system supports up to 10 domain name suffixes. To delete the domain name suffix, input the suffix name, and the specific suffix is deleted. Otherwise, all of the suffixes are deleted.
Related command: display dns domain.
Example
Configure a domain name suffix “com”.
[SW8800] dns domain com
10.2.6 dns resolve
Syntax
dns resolve
undo dns resolve
View
System view
Parameter
None
Description
Use the dns resolve command to enable the dynamic domain name resolution function.
Use the undo dns resolve command to disable the dynamic domain name resolution function.
By default, the dynamic domain name resolution function is disabled.
Example
Enable dynamic domain name resolution.
[SW8800] dns resolve
10.2.7 dns server
Syntax
dns server ip-address
undo dns server [ ip-address ]
10-6
3Com Switch 8800 Command Reference Guide
View
System view
Chapter 10 DNS Configuration Commands
Parameter
ip-address: IP address of the domain name server.
Description
Use the dns server command to configure the IP address of a domain name server.
Use the undo dns server command to delete the IP address of a domain name server.
The system supports up to six domain name server. To delete the domain name server, input the IP address, and the specific server is deleted. Otherwise, all of the servers are deleted.
Related command: display dns server.
Example
Configure a domain name server, with an IP address of 172.16.1.1.
[SW8800] dns server 172.16.1.1
10.2.8 reset dns dynamic-host
Syntax
reset dns dynamic-host
View
User view
Parameter
None
Description
Use the reset dns dynamic-host command to clear the dynamic domain name buffer.
Related command: display dns dynamic-host.
Example
Clear the dynamic domain name buffer.
<SW8800> reset dns dynamic-host
10-7
3Com Switch 8800 Command Reference Guide
Chapter 11 IP Performance Configuration
Commands
Chapter 11 IP Performance Configuration
Commands
11.1 IP Performance Configuration Commands
11.1.1 display fib
Syntax
display fib
View
Any view
Parameter
None
Description
Use the display fib command to view the entries of the forwarding information base.
Each line outputs indicates a FIB entry. The information includes destination address/mask length, next hop, current flag, timestamp and outbound interface.
Example
Display the entries of the Forwarding Information Base.
<SW8800> display fib
Destination/Mask Nexthop Flag TimeStamp Interface
10.153.17.0/24 10.153.17.99 U t[0] Vlan-interface1
10.153.18.88/32 127.0.0.1 GHU t[0] InLoopBack0
10.153.18.0/24 10.153.18.88 U t[0] LoopBack0
10.153.17.99/32 127.0.0.1 GHU t[0] InLoopBack0
127.0.0.0/8 127.0.0.1 U t[0] InLoopBack0
Table 11-1 Description on the fields of the display fib command
Field Description
Destination/Mask Destination address/Mask length
Nexthop The forwarding next hop address
11-1
3Com Switch 8800 Command Reference Guide
Field
Chapter 11 IP Performance Configuration
Commands
Flag
Description
The flag options include:
B – Blackhole route
D – Dynamic route
G – Gateway route
H – Local host route
S – Static route
U – Route in UP status
R – Unreachable route
L – Route generated by ARP or ESIS
Timestamp Timestamp
Interface The forwarding interface
11.1.2 display fib ip_address
Syntax
display fib ip_address1 [ { mask1 | mask-length1 } [ ip_address2 { mask2 |
mask-length2 } | longer ] | longer ]
View
Any view
Parameter
ip_address1, ip_address2: Destination IP address, in dotted decimal format.
ip_address1 and ip_address2 jointly define an address range. The FIB entries in this address range are displayed.
mask1, mask2: IP address mask, in dotted decimal format.
mask-length1, mask-length2: An integer in the range of 0 to 32 to represent the mask length.
longer: Specifies to display the FIB entries that match the specified IP address/subnet mask pairs.
Description
Use the display fib ip_address command to view the FIB entries matching the destination IP address (range). Each line outputs a FIB entry and the display contents for each entry include destination address/mask length, next hop, current flag, timestamp and outbound interface.
11-2
3Com Switch 8800 Command Reference Guide
Example
Chapter 11 IP Performance Configuration
Commands
Display the FIB entries whose destination addresses match 169.253.0.0 in the natural mask range or which match most of 169.253.0.0..
<SW8800> display fib 169.253.0.0
Route Entry Count: 1
Destination/Mask Nexthop Flag
Display the FIB entries whose destination addresses are in the range of
169.254.0.0/16 to 169.254.0.6/16.
<SW8800> display fib 169.254.0.0 255.255.0.0 169.254.0.6 255.255.0.0
Route Entry Count: 1
Destination/Mask Nexthop TimeStamp
For the descriptions of the displayed fields, refer to Table 11-1.
11.1.3 display fib acl
Syntax
display fib acl { number | name }
View
Any view
Parameter
number: ACL in number form, in the range 2000 to 2999
name: ACL in name form, a string of 1 to 32 characters.
Description
Use the display fib command to view the FIB entries matching a specific ACL.
Example
Display the FIB entries matching ACL 2000.
<SW8800> display fib acl 2000
Route entry matched by access-list 2000:
Summary counts: 1
For the descriptions of the displayed fields, refer to Table 11-1.
11-3
3Com Switch 8800 Command Reference Guide
11.1.4 display fib |
Chapter 11 IP Performance Configuration
Commands
Syntax
display fib | { { begin | include | exclude } text }
View
Any view
Parameter
Description
Use the display fib | command to view the FIB entries which are output from the buffer according to regular expression and related to the specific character string.
Example
begin: Displays the FIB entries from the first one containing the character string text.
include: Displays only those FIB entries containing the character string text.
exclude: Displays only those FIB entries excluding the character string text.
text: Character string.
Display the lines starting from the first one containing the string 169.254.0.0
<SW8800> display fib | begin 169.254.0.0
Destination/Mask Nexthop TimeStamp
For the descriptions of the displayed fields, refer to Table 11-1.
11.1.5 display fib ip-prefix
Syntax
display fib ip-prefix listname
View
Any view
Parameter
listname: Prefix list name, a string of 1 to 19 characters in length.
Description
Use the display fib command to view the FIB entries matching the specific prefix list.
11-4
3Com Switch 8800 Command Reference Guide
Example
Chapter 11 IP Performance Configuration
Commands
Display the FIB entries matching the prefix list abc0.
<SW8800> display fib ip-prefix abc0
Route Entry matched by prefix-list abc0:
Summary count: 3
Destination/Mask Nexthop TimeStamp
For the descriptions of the displayed fields, refer to Table 11-1.
11.1.6 display fib statistics
Syntax
display fib statistics
View
Any view
Parameter
None
Description
Use the display fib statistics command to view the total number of FIB entries.
Example
Display the total number of FIB entries.
<SW8800> display fib statistics
Route Entry Count : 30
11.1.7 display icmp statistics
Syntax display icmp statistics
View
Any view
Parameter
None
11-5
3Com Switch 8800 Command Reference Guide
Description
Chapter 11 IP Performance Configuration
Commands
Use the display icmp statistics command to view the statistics information about
ICMP packets.
Related command: display ip interface, reset ip statistics.
Example
View statistics about ICMP packets.
<SW8800> display icmp statistics
Input: bad formats 0 bad checksum 0
echo 5 destination unreachable 0
source quench 0 redirects 0
echo reply 10 parameter problem 0
timestamp 0 information request 0
mask requests 0 mask replies 0
time exceeded 0
Output:echo 10 destination unreachable 0
source quench 0 redirects 0
echo reply 5 parameter problem 0
timestamp 0 information reply 0
mask requests 0 mask replies 0
time exceeded 0
Table 11-2 Description on the fields of the display icmp statistics command
Field
bad formats bad checksum echo destination unreachable
Description
Number of input packets in bad format
Number of input packets with wrong checksum
Number of input/output echo request packets
Number of input/output packets with unreachable destination source quench redirects
Number of input/output source quench packets
Number of input/output redirected packets echo reply Number of input/output echo reply packets parameter problem Number of input/output packets with parameter problems timestamp Number of input/output timestamp packets information request Number of input information request packets mask requests mask replies information reply
Number of input/output mask request packets
Number of input/output mask reply packets
Number of output information reply packets
11-6
3Com Switch 8800 Command Reference Guide
Field
time exceeded
Chapter 11 IP Performance Configuration
Commands
Description
Number of packets that exceeds the time
11.1.8 display ip socket
Syntax
display ip socket [ socktype sock-type ] [ task-id socket-id ]
View
Any view
Parameter
Description
Use the display ip socket command to display the information about the sockets in the current system.
Example
sock-type: The type of a socket (tcp:1, udp: 2, raw ip: 3).
task-id: The ID of a task, with the value ranging from 1 to 100.
socket-id: The ID of a socket, with the value ranging from 0 to 3072.
Display the information about the socket of TCP type.
<SW8800> display ip socket socktype 1
SOCK_STREAM:
Task = VTYD(18), socketid = 1, Proto = 6,
LA = 0.0.0.0:23, FA = 0.0.0.0:0, sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0, socket option = SO_ACCEPTCONN SO_KEEPALIVE SO_SENDVPNID SO_SETKEEPALIVE, socket state = SS_PRIV SS_ASYNC
Task = VTYD(18), socketid = 2, Proto = 6,
LA = 10.153.17.99:23, FA = 10.153.17.56:1161, sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0, socket option = SO_KEEPALIVE SO_OOBINLINE SO_SENDVPNID SO_SETKEEPALIVE, socket state = SS_ISCONNECTED SS_PRIV SS_ASYNC
Task = VTYD(18), socketid = 3, Proto = 6,
LA = 10.153.17.99:23, FA = 10.153.17.82:1121, sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0, socket option = SO_KEEPALIVE SO_OOBINLINE SO_SENDVPNID SO_SETKEEPALIVE,
11-7
Chapter 11 IP Performance Configuration
3Com Switch 8800 Command Reference Guide socket state = SS_ISCONNECTED SS_PRIV SS_ASYNC
Commands
Table 11-3 Description on the fields of the display ip socket command
Field
SOCK_STREAM The socket type
Task socketid
The ID of a task
The ID of a socket
Proto sndbuf rcvbuf sb_cc rb_cc
Description
The protocol number used by the socket
The sending buffer size of the socket
The receiving buffer size of the socket
The current data size in the sending buffer. The value makes sense only for the socket of TCP type, because only TCP is able to cache data
The current data size in the receiving buffer socket option socket state
The option of the socket
The state of the socket
11.1.9 display ip statistics
Syntax display ip statistics
View
Any view
Parameter
None
Description
Use the display ip statistics command to view the statistics information about IP packets.
Related command: display ip interface, reset ip statistics.
Example
View statistics about IP packets.
<SW8800> display ip statistics
Input: sum 7120 local 112
bad protocol 0 bad format 0
11-8
Chapter 11 IP Performance Configuration
3Com Switch 8800 Command Reference Guide
bad checksum 0 bad options 0
Commands
Output: forwarding 0 local 27
dropped 0 no route 2
compress fails 0
Fragment:input 0 output 0
dropped 0
fragmented 0 couldn't fragment 0
Reassembling:sum 0 timeouts 0
Table 11-4 Description on the fields of the display ip statistics command
Input:
Output:
Fragment:
Reassem bling: sum
Field
local bad protocol bad format bad checksum bad options forwarding local dropped no route compress fails input output dropped fragmented couldn't fragment sum timeouts
Description
Sum of input packets
Number of received packets whose destination is the local device
Number of packets with wrong protocol number
Number of packets in bad format
Number of packets with wrong checksum
Number of packets that have wrong options
Number of forwarded packets
Number of packets that are sent by the local device
Number of dropped packets during transmission
Number of packets that cannot be routed
Number of packets that cannot be compressed
Number of input fragments
Number of output fragments
Number of dropped fragments
Number of packets that are fragmented
Number of packets that cannot be fragmented
Number of packets that are reassembled
Number of packets that time out
11-9
3Com Switch 8800 Command Reference Guide
11.1.10 display tcp statistics
Chapter 11 IP Performance Configuration
Commands
Syntax
display tcp statistics
View
Any view
Parameter
None
Description
Use the display tcp statistics command to view the statistics information about TCP packets.
For the related commands, see display tcp status, reset tcp statistics.
Example
View statistics about TCP packets.
[SW8800]display tcp statistics
Received packets:
Total: 753
packets in sequence: 412 (11032 bytes)
window probe packets: 0, window update packets: 0
checksum error: 0, offset error: 0, short error: 0
duplicate packets: 4 (88 bytes), partially duplicate packets: 5 (7 bytes)
out-of-order packets: 0 (0 bytes)
packets of data after window: 0 (0 bytes)
packets received after close: 0
ACK packets: 481 (8776 bytes)
duplicate ACK packets: 7, too much ACK packets: 0
Sent packets:
Total: 665
urgent packets: 0
control packets: 5 (including 1 RST)
window probe packets: 0, window update packets: 2
data packets: 618 (8770 bytes) data packets retransmitted: 0 (0 bytes)
ACK-only packets: 40 (28 delayed)
Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0
Keepalive timeout: 0, keepalive probe: 0, Keepalive timeout, so connections disconnected : 0
11-10
3Com Switch 8800 Command Reference Guide
Chapter 11 IP Performance Configuration
Commands
Initiated connections: 0, accepted connections: 0, established connections:
0
Closed connections: 0 (dropped: 0, initiated dropped: 0)
Packets dropped with MD5 authentication: 0
Packets permitted with MD5 authentication: 0
Table 11-5 Description on the fields of the display tcp statistics command
Received packets
Total:753
Field Description
Information followed is about received packets
Total number of received packets: 753 packets in sequence: 412 (11032 bytes)
Up to 412 packets (total of 11,032 bytes) arrive in sequence window probe packets: 0, window
Number of window probe packets: 0 update packets: 0
Number of window update packets: 0 checksum error: 0, offset error: 0, short error: 0
Number of checksum errors: 0
Number of offset errors: 0
Number of short errors: 0 duplicate packets: 4 (88 bytes), partially duplicate packets: 5 (7 bytes)
Number of duplicate packets: 4 (total of
88 bytes)
Number of partially duplicate packets: 5
(total of 7 bytes) out-of-order packets: 0 (0 bytes) packets of data after window: 0 (0 bytes)
Number of out-of-order packets: 0 (0 byte)
Number of packets out of receiving window: 0 (0 byte) packets received after close: 0
ACK packets: 481 (8776 bytes) control packets: 5 (including 1 RST)
Number of packets received after the connection closed: 0
Number of ACK packets: 481 (total of
8776 bytes of data acknowledged)
Number of duplicate ACK packets: 7 duplicate ACK packets: 7, too much
ACK packets: 0
Number of too-much ACK packets: 0
(ACK packets that acknowledge data not sent)
Sent packets
Information followed is about sent packets
Total: 665 urgent packets: 0
Total number of sent packets: 665
Number of urgent packets: 0
Number of control packets: 5 (including
1 RST packet)
11-11
3Com Switch 8800 Command Reference Guide
Field
Chapter 11 IP Performance Configuration
Commands
Description
window probe packets: 0, window
Number of window probe packets: 0 update packets: 2
Number of window update packets: 2 data packets: 618 (8770 bytes) data packets retransmitted: 0 (0 bytes)
Number of data packets: 618 (total of
8770 bytes)
Number of data packets retransmitted: 0
(0 byte)
ACK-only packets: 40 (28 delayed)
Number of ACK packets: 40 (28 of which delayed)
Number of retransmitted timeout events:
0
Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0
Number of connections dropped due to the number of retransmitted timeout events exceeding the specified value: 0
Keepalive timeout: 0, keepalive probe:
0, Keepalive timeout, so connections
Number of keepalive timeout events: 0
Number of keepalive probe packets sent: 0 disconnected : 0
Number of connections disconnected when keepalive probes fail: 0
Initiated connections: 0, accepted
Number of initiated connections: 0 connections: 0
Number of established connection: 0
Number of closed connection: 0
Closed connections: 0 (dropped: 0, initiated dropped: 0)
Number of dropped connections (after
SYN messages received): 0
Number of connections initiated drooped: 0 authentication: 0 authentication: 0 authentication: 0 authentication: 0
11.1.11 display tcp status
Syntax display tcp status
View
Any view
11-12
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 11 IP Performance Configuration
Commands
Description
Use the display tcp status command to view all TCP connection states. This helps user monitor TCP connection at any time.
Example
Display the state of all TCP connections.
<SW8800> display tcp status
04217174 100.0.0.204:23 100.0.0.253:65508 Established
The displayed information indicates that a TCP connection is established. The local IP address of this TCP connection is 100.0.0.204, and the local port number is 23. The remote IP address is 100.0.0.253, and the remote port number is 65508. In addition, there is a local server process which listens to the port 4001.
11.1.12 display udp statistics
Syntax
display udp statistics
View
Any view
Parameter
None
Description
Use the display udp statistics command to view UDP traffic statistic information.
It displays the statistic information of all current UDP connections. The statistics information about UDP packets are divided into two major kinds which are received packets and sent packets. The packets are further divided into different types such as check packets and error packets. There are also some statistics related closely to the connections, such as the number of broadcast packets. All these displayed information are measured in packets.
Related command: reset udp statistics.
Example
Display the UDP traffic statistic information.
11-13
Chapter 11 IP Performance Configuration
3Com Switch 8800 Command Reference Guide
<SW8800> display udp statistics
Received packet:
Total:0 checksum error:0 shorter than header:0, data length larger than packet:0 no socket on port:0 broadcast:0 not delivered, input socket full:0 input packets missing pcb cache:0
Sent packet:
Total:0
Commands
Table 11-6 Description on the fields of the display udp statistics command
Field
Received packet:
Total: 0
Description
Total received UDP packets: 0 checksum error: 0 Number of checksum errors: 0 shorter than header: 0, data length larger than packet: 0
Cases that the length of the packets is shorter than the header: 0
Cases that the data length exceeds the packet length: 0 no socket on port: 0 broadcast: 0
Cases that there is no socket on port: 0
Number of broadcast packets: 0 not delivered, input socket full: 0
Cases that the packets are not forwarded because the socket buffer is full: 0 input packets missing pcb cache:
0
Cases that the packets cannot find pcb: 0
Sent packet:
Total: 0
Total sent UDP packets: 0
11.1.13 reset ip statistics
Syntax reset ip statistics
View
User view
Parameter
None
11-14
3Com Switch 8800 Command Reference Guide
Description
Chapter 11 IP Performance Configuration
Commands
Use the reset ip statistics command to clear the IP statistics information.
Related command: display ip interface, display ip statistics.
Example
Clear the IP statistics information.
<SW8800> reset ip statistics
11.1.14 reset tcp statistics
Syntax
reset tcp statistics
View
User view
Parameter
None
Description
Use the reset tcp statistics command to clear the TCP statistics information.
Related command: display tcp statistics.
Example
Clear the TCP statistics information.
<SW8800> reset tcp statistics
11.1.15 reset udp statistics
Syntax
reset udp statistics
View
User view
Parameter
None
Description
Use the reset udp statistics command to can clear the UDP statistics information.
11-15
3Com Switch 8800 Command Reference Guide
Example
Clear the UDP traffic statistics information.
<SW8800> reset udp statistics
Chapter 11 IP Performance Configuration
Commands
11.1.16 tcp timer fin-timeout
Syntax
tcp timer fin-timeout time-value
undo tcp timer fin-timeout
View
System view
Parameter
Description
Use the tcp timer fin-timeout command to configure the TCP finwait timer.
Use the undo tcp timer fin-timeout command to restore the default value of the TCP finwait timer.
When the TCP connection state changes from FIN_WAIT_1 to FIN_WAIT_2, the finwait timer is enabled. If the switch does not receive FIN packets before the finwait timer times out, the TCP connection is terminated.
Related command: tcp timer syn-timeout, tcp window.
Example
time-value: TCP finwait timer value in second, with the value ranging from 76 to 3600;
By default, it is 675 seconds.
Configure the TCP finwait timer value as 800 seconds.
[SW8800] tcp timer fin-timeout 800
11.1.17 tcp timer syn-timeout
Syntax
tcp timer syn-timeout time-value
undo tcp timer syn-timeout
View
System view
11-16
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 11 IP Performance Configuration
Commands
time-value: TCP synwait timer value measured in seconds, whose value ranges from
2 to 600. The default time-value is 75 seconds.
Description
Use the tcp timer syn-timeout command to configure the TCP synwait timer.
Use the undo tcp timer syn-timeout command to restore the default value of the timer.
TCP enables the synwait timer if a SYN packet is sent. The TCP connection is terminated if the response packet is not received.
Related command: tcp timer fin-timeout, tcp window.
Example
Configure the TCP synwait timer value as 80 seconds.
[SW8800] tcp timer syn-timeout 80
11.1.18 tcp window
Syntax
tcp window window-size
undo tcp window
View
System view
Parameter
Description
Use the tcp window command to configure the size of the sending and receiving buffers of the connection-oriented Socket.
Use the undo tcp window command to restore the default size of the buffer.
Related command: tcp timer fin-timeout, tcp timer syn-timeout.
Example
window-size: The size of the sending and receiving buffers measured in kilobytes
(KB), whose value ranges from 1 to 32. By default, the window-size is 8KB.
Configure the size of the sending and receiving buffers as 3KB.
[SW8800] tcp window 3
11-17
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
Chapter 12 Static Route Configuration Commands
Note:
When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch
8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.
For the configuration of VPN instance, refer to the MPLS module in 3Com Switch 8800
Configuration Guide.
12.1 Display Commands of the Routing Table
12.1.1 display ip routing-table
Syntax display ip routing-table
View
Any view
Parameter
None
Description
Use display ip routing-table command to view the routing table summary.
This command displays routing table information in summary form. Each line represents one route. The contents include destination address/mask length, protocol, preference, metric, next hop and output interface.
Only current used route, namely, best route, is displayed using display ip
routing-table command.
Example
View the summary of the routing table.
<SW8800> display ip routing-table
Routing Table: public net
12-1
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
Destination/Mask Protocol Pre Cost Nexthop Interface
1.1.1.0/24 DIRECT 0 0 1.1.1.1 Vlan-interface1
1.1.1.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0
2.2.2.0/24 DIRECT
2.2.2.1/32 DIRECT
0 0
0 0
2.2.2.1 Vlan-interface2
127.0.0.1 InLoopBack0
3.3.3.0/24 DIRECT
3.3.3.1/32 DIRECT
4.4.4.0/24 DIRECT
4.4.4.1/32 DIRECT
127.0.0.0/8 DIRECT
127.0.0.1/32 DIRECT
0
0
0
0
0
0
0
0 0
0 0
0
3.3.3.1
127.0.0.1
4.4.4.1
Vlan-interface3
InLoopBack0
Vlan-interface4
127.0.0.1 InLoopBack0
127.0.0.1 InLoopBack0
127.0.0.1 InLoopBack0
Table 12-1 Description on the fields of the display ip routing-table command
Field Description
Destination/Mask Destination address/Mask length
Pre Routing preference
Cost Cost
Nexthop
Interface
Next hop address
Output interface, through which the data packet destined for the destination network segment is sent
12.1.2 display ip routing-table acl
Syntax
display ip routing-table acl { acl-number | acl-name } [ verbose ]
View
Any view
Parameter
acl-number: The number of basic ACL, ranging from 2000 to 2999.
acl-name: The basic ACL name introduced via names.
verbose: With the parameter, this command displays the verbose information of both the active and inactive routes that passed filtering rules. Without the parameter, this command only displays the summary of the active routes that passed filtering rules.
12-2
3Com Switch 8800 Command Reference Guide
Description
Chapter 12 Static Route Configuration Commands
Use the display ip routing-table acl command to view the route filtered through specified basic access control list (ACL).
This command is used in track display of route policy to display the route that passed the filtering rule according the input basic ACL number or name.
The command is only applicable to display the route that passed basic ACL filtering rules.
Example
Display the summary of active routes that are filtered through basic acl 2000.
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255
[SW8800-acl-basic-2000] rule deny source any
[SW8800-acl-basic-2000] display ip routing-table acl 2000
Routes matched by access-list 2000:
Summary count: 4
Destination/Mask Protocol Pre Cost Nexthop Interface
10.1.1.0/24 DIRECT 0 0 10.1.1.2 Vlan-interface1
10.1.1.2/32 DIRECT 0 0 127.0.0.1 InLoopBack0
For detailed description of the output information, see Table 12-1.
Display the verbose information of the active and inactive routes that are filtered through basic acl 2000.
<SW8800> display ip routing-table acl 2000 verbose
Routes matched by access-list 2000:
+ = Active Route, - = Last Active, = Both * = Next hop in use
Summary count: 2
**Destination: 10.1.1.0 Mask: 255.255.255.0
Protocol: #DIRECT Preference: 0
*NextHop: 10.1.1.2 Interface: 10.1.1.2(Vlan-interface1)
Vlinkindex: 0
State: <Int ActiveU Retain Unicast>
Age: 7:24 Cost: 0/0 Tag: 0
**Destination: 10.1.1.2 Mask: 255.255.255.255
Protocol: #DIRECT Preference: 0
*NextHop: 127.0.0.1 Interface: 127.0.0.1(InLoopBack0)
Vlinkindex: 0
State: <NoAdvise Int ActiveU Retain Gateway Unicast>
Age: 7:24 Cost: 0/0 Tag: 0
12-3
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
Table 12-2 Description on the fields of the display ip routing-table acl verbose command
Field
Destination Destination address
Mask Mask
Description
Nexthop
Interface
Next hop address
Output interface, through which the data packet destined for the destination network segment is sent
Vlinkindex Virtual link index
12-4
3Com Switch 8800 Command Reference Guide
Field
State
Chapter 12 Static Route Configuration Commands
Description
Route state description:
ActiveU Valid unicast route. U stands for unicast.
Blackhole
Blackhole route is similar to Reject route, but it will not send the ICMP unreachable message to the source end
Delete The route is deleted
Gateway Indicates that the route is not directly reachable
Hidden
Holddown
Int
NoAdvise
The route exists, but it is unavailable temporarily for some reasons (e.g., configured policy or interface is
Down). Moreover, you do not wish to delete it.
Therefore, you need to hide it, so as to restore it again later
Holddown is one kind of route redistribution policy adopted by some distance-vector (D-V) routing protocols (e.g., RIP), through which these routing protocols can avoid the flooding of error routes and deliver the routing unreachable message accurately.
For example, the RIP imports a certain route every a period of time regardless of whether the actually found routes destined for the same destination change. For more details, refer to the specific routing protocols.
The route is discovered by interior gateway protocol
(IGP).
The routing protocol does not import NoAdvise route when it imports routes based on the policy.
NotInstall
Reject
Retain
Static
The routing protocol generally selects the route with the highest precedence from its routing table, then places it in its core routing table and imports it. Although the
NotInstall route cannot be placed in the core routing table, it is possibly that it is selected and imported.
Unlike the normal routes, the Reject route will discard the packets that select it as their route, and the router will send ICMP unreachable message to the source end. Reject route is usually used for the network test
When the routes from the core routing table are deleted, the routes with the Retain flag will not be deleted. Using this function you can set the Retain flag for some static routes, so that they can exist in the core routing table.
The route with Static flag will not be cleared from the routing table after you save it and reboot the router.
Generally, the static route configured manually in the router belongs to a Static route.
12-5
3Com Switch 8800 Command Reference Guide
Field
Age
Cost
Chapter 12 Static Route Configuration Commands
Description
Lifetime of a route entry, in hh : mm : ss, where hh is hours, mm is minutes, and ss is seconds. The displayed time should be read from right to left. For example, 7:24 indicates that the lifetime of a route is seven hours and 24 minutes.
Value of the cost
12.1.3 display ip routing-table ip_address
Syntax
display ip routing-table ip_address [ mask ] [ longer-match ] [ verbose ]
View
Any view
Parameter
ip_address: Destination IP address, in dotted decimal format.
mask: IP address mask, length in dotted decimal notation or integer. It ranges from 0 to
32 when it is expressed with integer.
verbose: With the verbose argument, this command displays the verbose information of both the active and inactive routes. Without the parameter, this command only displays the summary of active routes.
longer-match: Address route matching the destination address in natural mask range.
Description
Use the display ip routing-table ip_address command to view the routing information of the specified destination address.
With different parameters, the output of command is different. The following is the output description for different forms of this command: z
display ip routing-table ip_address
If destination address, ip_address, has corresponding route in natural mask range, this command will display all subnet routes or only the route best matching the destination address, ip_address, is displayed. And only the active matching route is displayed. z
display ip routing-table ip_address mask,
This command only displays the route fully matching with specified destination address and mask. z
display ip routing-table ip_address longer-match
12-6
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
This command displays all destination address route matching with destination address in natural mask range.
Example
There is a corresponding route in natural mask range. Display the summary.
<SW8800> display ip routing-table 169.0.0.0
Destination/Mask Protocol Pre Cost Nexthop Interface
169.0.0.0/16 STATIC 60 0 192.168.1.2 Vlan-interface10
169.0.0.0/8 STATIC 60 0 192.168.1.2 Vlan-interface10
For detailed description of the output information, see Table 12-1.
There is no corresponding route (only the longest matching route is displayed) in natural mask range and summary is displayed.
<SW8800> display ip routing-table 192.168.1.2
Destination/Mask Protocol Pre Cost Nexthop Interface
192.168.1.0/24 DIRECT 0 0 192.168.1.1 Vlan-interface10
There are corresponding routes in the natural mask range. Display the detailed information.
<SW8800> display ip routing-table 169.0.0.0 verbose
Routing tables:
Generate Default: no
+ = Active Route, - = Last Active, = Both * = Next hop in use
Summary count: 3
**Destination: 169.0.0.0 Mask: 255.255.0.0
Protocol: #STATIC Preference: 60
*NextHop: 192.168.1.2 Interface: 192.168.1.1(Vlan-interface10)
Vlinkindex: 0
State: <Int ActiveU Gateway Static Unicast>
Age: 10:20 Cost: 0/0 Tag: 0
**Destination: 169.0.0.0 Mask: 255.0.0.0
Protocol: #STATIC Preference: 60
*NextHop: 192.168.1.2 Interface: 192.168.1.1(Vlan-interface10)
Vlinkindex: 0
State: <Int ActiveU Gateway Static Unicast>
Age: 4:39 Cost: 0/0 Tag: 0
There are no corresponding routes in the natural mask range (only displaying the longest matched route). Display the detailed information.
<SW8800> display ip routing-table 169.168.1.2 verbose
Routing tables:
12-7
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
Generate Default: no
+ = Active Route, - = Last Active, = Both * = Next hop in use
Summary count: 1
**Destination: 192.168.1.0 Mask: 255.255.255.0
Protocol: #DIRECT Preference: 0
*NextHop: 192.168.1.1 Interface: 192.168.1.1(Vlan-interface10)
Vlinkindex: 0
State: <Int ActiveU Retain Unicast>
Age: 12:51 Cost: 0/0 Tag: 0
For detailed description of the output information, see Table 12-2.
12.1.4 display ip routing-table ip_address1 ip_address2
Syntax
display ip routing-table ip_address1 mask1 ip_address2 mask2 [ verbose ]
View
Any view
Parameter
Description
Use the display ip routing-table ip_address1 ip_address2 command to view the route information in the specified address range.
Example
ip_address1, ip_address2: Destination IP address in dotted decimal notation.
ip_address1, mask1, mask2 and ip_address2 determine one address range together.
Anding ip_address1 with mask1 specifies the start of the range while anding
ip_address2 with mask2 specifies the end. This command is used to display the routes in this address range.
mask1, mask2: IP address mask, length in dotted decimal notation or integer form. It ranges from 0 to 32 when it is presented in integer.
verbose: With the verbose keyword, this command displays the verbose information of both the active and inactive routes. Without the parameter, this command only displays the summary of active routes.
Display the routing information of destination addresses ranging from 1.1.1.0 to 2.2.2.0.
<SW8800>display ip routing-table 1.1.1.0 24 2.2.2.0 24
Routing tables:
Summary count: 3
12-8
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
Destination/Mask Protocol Pre Cost Nexthop Interface
1.1.1.0/24 DIRECT 0 0 1.1.1.1 Vlan-interface1
1.1.1.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0
2.2.2.0/24 DIRECT 0 0 2.2.2.1 Vlan-interface2
For detailed description of the output information, see Table 12-1.
12.1.5 display ip routing-table ip-prefix
Syntax
display ip routing-table ip-prefix ip-prefix-name [ verbose ]
View
Any view
Parameter
ip-prefix-name: ip prefix list name.
verbose: With the parameter, this command displays the verbose information of both the active and inactive routes that passed filtering rules. Without the parameter, this command displays the summary of the active routes that passed filtering rules.
Description
Use the display ip routing-table ip-prefix command to view the route information that passed the filtering rule according the input ip prefix list name.
This command is mainly used to trace the route-policy and display the corresponding route information.
If there is no specified address prefix list, this command will display the verbose information of all active and inactive routes with the verbose keyword and it will display the summary of all active routes without the verbose keyword.
Example
Configure the ip prefix list abc2, allowing the routes with the prefix as 10.1.1.0 and a mask length in the range 24 to 32 to pass.
[SW8800] ip ip-prefix abc2 permit 10.1.1.0 24 less-equal 32
<SW8800> dis ip routing-table protocol static
STATIC Routing tables:
Summary count: 3
STATIC Routing table status:<active>:
Summary count: 3
Destination/Mask Protocol Pre Cost Nexthop Interface
10.1.0.0/16 STATIC 60 0 48.48.48.2 Vlan-interface48
10.1.1.0/24 STATIC 60 0 48.48.48.2 Vlan-interface48
12-9
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
10.1.1.2/32 STATIC 60 0 48.48.48.2 Vlan-interface48
STATIC Routing table status:<inactive>:
Summary count: 0
<SW8800> display ip routing-table ip-prefix abc2
Routes matched by ip-prefix abc2:
Summary count: 2
Destination/Mask Protocol Pre Cost Nexthop Interface
10.1.1.0/24 STATIC 60 0 48.48.48.2 Vlan-interface48
10.1.1.2/32 STATIC 60 0 48.48.48.2 Vlan-interface48
For detailed description of the output information, see Table 12-1.
Display the details of the active and inactive routes filtered by the prefix list abc2.
<SW8800>display ip routing-table ip-prefix abc2 verbose
Routes matched by ip-prefix abc2:
Generate Default: no
+ = Active Route, - = Last Active, = Both * = Next hop in use
Summary count: 2
**Destination: 10.1.1.0 Mask: 255.255.255.0
Protocol: #STATIC Preference: 60
*NextHop: 48.48.48.2 Interface: 48.48.48.1(Vlan-interface48)
Vlinkindex: 0
State: <Int ActiveU Gateway Static Unicast>
Age: 12:42 Cost: 0/0 Tag: 0
**Destination: 10.1.1.2 Mask: 255.255.255.255
Protocol: #STATIC Preference: 60
*NextHop: 48.48.48.2 Interface: 48.48.48.1(Vlan-interface48)
Vlinkindex: 0
State: <Int ActiveU Gateway Static Unicast>
Age: 12:48 Cost: 0/0 Tag: 0
For explanations of the above information, see Table 12-2.
12.1.6 display ip routing-table protocol
Syntax
display ip routing-table protocol protocol [ inactive | verbose ] [ vpn-instance
vpn-instance-name ]
View
Any view
12-10
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 12 Static Route Configuration Commands
inactive: With the parameter, this command displays the inactive route information.
Without the parameter, this command displays the active and inactive route information.
verbose: With the verbose keyword, this command displays the verbose route information. Without the parameter, this command displays the route summary.
protocol: The parameter has multiple selectable values: z z z z z z z z
direct: Displays direct connection route information
static: Displays the static route information.
bgp: Displays BGP route information.
isis: Displays IS-IS route information.
ospf: Displays OSPF route information.
ospf-ase: Displays OSPF ASE route information.
ospf-nssa: Displays OSPF NSSA route information.
rip: Displays RIP route information. vpn-instance-name: Indicates a VPN instance name.
Description
Use the display ip routing-table protocol command to view the route information of specified protocol.
Example
Display all direct connection routes summary.
<SW8800> display ip routing-table protocol direct
DIRECT Routing tables:
Summary count: 4
DIRECT Routing tables status:<active>:
Summary count: 3
Destination/Mask Protocol Pre Cost Nexthop Interface
DIRECT Routing tables status:<inactive>:
Summary count: 1
Destination/Mask Protocol Pre Cost Nexthop
210.0.0.1/32 DIRECT
View the static routing table.
<SW8800> display ip routing-table protocol static
STATIC Routing tables:
Summary count: 1
Interface
12-11
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
STATIC Routing tables status:<active>:
Summary count: 0
STATIC Routing tables status:<inactive>:
Summary count: 1
Destination/Mask Protocol Pre Cost Nexthop Interface
1.2.3.0/24 STATIC 60 0 1.2.4.5 Vlan-interface10
STATIC Routing tables status:<inactive>:
Summary count: 1
For detailed description of the output information, see Table 12-1.
12.1.7 display ip routing-table radix
Syntax display ip routing-table radix
View
Any view
Parameter
None
Description
Use the display ip routing-table radix command to view route information in tree format.
Example
Display route information in tree format.
<SW8800> display ip routing-table radix
Radix tree for INET (2) inodes 7 routes 5:
+-32+--{210.0.0.1
+--0+
| | +--8+--{127.0.0.0
| | | +-32+--{127.0.0.1
+--8+--{20.0.0.0
+-32+--{20.1.1.1
Table 12-3 Description on the fields of the display ip routing-table radix command
Field Description
inodes Number of nodes
12-12
3Com Switch 8800 Command Reference Guide routes
12.1.8 display ip routing-table statistics
Chapter 12 Static Route Configuration Commands
Number of routes
Syntax
display ip routing-table statistics
View
Any view
Parameter
None
Description
Use the display ip routing-table statistics command to view the integrated routing information.
The integrated routing information includes total route amount, the route amount added or deleted by protocol, amount of the routes that are labeled deleted but not deleted, and the active route amount.
Example
Display the integrated route information.
<SW8800> display ip routing-table statistics
Routing tables:
Proto route active added deleted
DIRECT 24 4 25 1
STATIC 4 1 4 0
BGP 0 0 0 0
RIP 0 0 0 0
IS-IS 0 0 0 0
OSPF 0 0 0 0
O_ASE 0 0 0 0
O_NSSA 0 0 0 0
AGGRE 0 0 0 0
Total 28 5 29 1
12-13
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
Table 12-4 Description on the fields of the display ip routing-table statistics command
Field
Proto route active added deleted
Total
Description
Routing protocol. O_ASE indicates OSPF_ASE routes, O_NSSA indicates OSPF_NSSA routes and AGGRE indicates aggregated routes.
Number of routes
Number of active routes
Number of added routes after the router is rebooted or the routing table is cleared last time
Number of deleted routes (such routes will be freed in a period of time)
Total number of the different kinds of routes
12.1.9 display ip routing-table vpn-instance
Syntax
display ip routing-table vpn-instance vpn-instance-name
View
Any view
Parameter
Description
Use the display ip routing-table vpn-instance command to view the routing information about the VPN instance.
Example
vpn-instance: Specifies VPN instance parameter.
vpn-instance-name: VPN instance name.
View the routing information about the VPN instance.
<SW8800> dis ip routing-table vpn-instance vpn49-1
vpn49-1 Route Information
Routing Table: vpn49-1 Route-Distinguisher: 49:1
Destination/Mask Protocol Pre Cost Nexthop Interface
77.77.77.77/32 STATIC 60 0 195.195.1.10 Vlan-interface1016
195.168.130.0/24 DIRECT 0 0 195.168.130.1 Vlan-interface1013
195.168.130.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0
195.195.0.0/16 DIRECT 0 0 195.195.1.1 Vlan-interface1016
12-14
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
195.195.1.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0
12.1.10 display ip routing-table verbose
Syntax display ip routing-table verbose
View
Any view
Parameter
None
Description
Use the display ip routing-table verbose command to view the verbose routing table information.
With the verbose keyword, this command displays the verbose routing table information. The descriptor describing the route state will be displayed first, then the statistics of the entire routing table will be output and finally the verbose description of each route will be output.
All current routes, including inactive route and invalid route, can be displayed using the
display ip routing-table verbose command.
Example
Display the verbose routing table information.
<SW8800> display ip routing-table verbose
Routing Tables:
Generate Default: no
+ = Active Route, - = Last Active, = Both * = Next hop in use
Destinations: 3 Routes: 3
Holddown: 0 Delete: 62 Hidden: 0
**Destination: 1.1.1.0 Mask: 255.255.255.0
Protocol: #DIRECT Preference: 0
*NextHop: 1.1.1.1 Interface: 1.1.1.1(Vlan-interface1)
State: <Int ActiveU Retain Unicast>
Age: 20:17:41 Cost: 0/0
**Destination: 1.1.1.1 Mask: 255.255.255.255
Protocol: #DIRECT Preference: 0
*NextHop: 127.0.0.1 Interface: 127.0.0.1(InLoopBack0)
State: <NoAdvise Int ActiveU Retain Gateway Unicast>
Age: 20:17:42 Cost: 0/0
**Destination: 2.2.2.0 Mask: 255.255.255.0
12-15
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
Protocol: #DIRECT Preference: 0
*NextHop: 2.2.2.1 Interface: 2.2.2.1(Vlan-interface2)
State: <Int ActiveU Retain Unicast>
Age: 20:08:05 Cost: 0/0
First, display statistics of the whole routing table and then output detailed information of
every route entry in turn. The meaning of route status is shown in Table 12-2, and the
statistics of routing table is shown in the following table.
Table 12-5 Description on the fields of the display ip routing-table verbose command
Field
Holddown
Delete
Hidden
Description
Number of held-down routes
Number of deleted routes
Number of hidden routes
12.2 Static Route Configuration Commands
12.2.1 delete static-routes all
Syntax delete static-routes all
View
System view
Parameter
None
Description
Use the delete static-routes all command to delete all the static routes.
The system will request your confirmation before it deletes all the configured static routes.
Related command: ip route-static, display ip routing-table.
Example
Delete all the static routes in the router.
[SW8800] delete static-routes all
This will erase all unicast static routes and their configurations, you must reconfigure all static routes
Are you sure to delete all the static routes?[Y/N]
12-16
3Com Switch 8800 Command Reference Guide
12.2.2 delete vpn-instance
Chapter 12 Static Route Configuration Commands
Syntax
delete vpn-instance vpn-instance-name static-routes all
View
System view
Parameter
vpn-instance: Specifies VPN instance parameter.
vpn-instance-name: VPN instance name.
static-routes: VPN static route.
Description
Use the delete vpn-instance command to remove all the static routes of the VPN.
When you use this command to remove the static routes, the system will prompt your acknowledgement. The system removes all configured static routes after the acknowledgement.
Related command: ip route-static, display ip routing-table vpn-instance.
Example
Remove all static routes of the VPN.
[SW8800] delete vpn-instance vp1 static-routes all
Are you sure to delete all the VPN static routes?[Y/N]
12.2.3 ip route-static
Syntax
ip route-static [ vpn-instance vpn-instance-name ]* ip-address { mask | mask-length }
{ interface-type interface-number | [ vpn-instance
vpn-instance-name
]
gateway-address } [ preference preference-value ] [ reject | blackhole ]
undo ip route-static [ vpn-instance vpn-instance-name ]* ip-address { mask |
mask-length } [ interface-type interface-number | [ vpn-instance vpn-instance-name ]
gateway-address ] [ preference preference-value ]
View
Parameter
System view
vpn-instance: Specifies VPN instance parameter.
vpn-instance-name: VPN instance name.
12-17
3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands
ip-address: Destination IP address in dotted decimal notation.
mask: Mask.
mask-length: Mask length. Since "1" s in the 32-bit mask are required to be consecutive, the mask in dotted decimal format can be replaced by mask-length, which is the number of the consecutive "1" s in the mask.
vpn-instance-name: Name of a VPN instance.
interface-type interface-number: Specifies the outgoing interface for the next hop. The null interface is a kind of virtual interface, where data packets are discarded directly to decrease the system load.gateway-address: Specifies the next hop IP address of the route, in dotted decimal format.
preference-value: Preference level of the route in the range from 1 to 255.
reject: Indicates an unreachable route. When a static route to a destination has the
"reject" attribute, all the IP packets to this destination will be discarded, and the source host will be informed that the destination is unreachable.
blackhole: Indicates a blackhole route. If a static route to a destination has the
“blackhole” attribute, the outgoing interface of this route is the Null 0 interface regardless of the next hop address, and any IP packets addressed to this destination are dropped without notifying the source host.
Description
Use the ip route-static command to configure a static route.
Use the undo ip route-static command to delete the configured static route.
By default, the system can obtain the sub-net route directly connected with the router. If it is not specified as reject or blackhole, the route will be reachable by default.
Precautions for static route configuration: z z
When the destination IP address and the mask are both 0.0.0.0, it is the configured default route. If it is failed to detect the routing table, a packet will be forwarded along the default route.
For different configuration of preference level, flexible routing management policy can be adopted.
Related command: display ip routing-table, delete static-routes all.
Example
Configure the next hop of the default route as 129.102.0.2.
[SW8800] ip route-static 0.0.0.0 0.0.0.0 129.102.0.2
Configure static route 129.102.0.2 255.255.255.0 in multiple VPNs.
[SW8800] ip route-static vpn-instance vpn1 vpn2 vpn3 129.102.0.2 255.255.255.0 null 0
12-18
3Com Switch 8800 Command Reference Guide Chapter 13 RIP Configuration Commands
Chapter 13 RIP Configuration Commands
Note:
When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch
8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.
For the configuration of VPN instance, refer to the MPLS module in 3Com Switch 8800
Configuration Guide.
13.1 RIP Configuration Commands
13.1.1 checkzero
Syntax
checkzero
undo checkzero
View
RIP view
Parameter
None
Description
Use the checkzero command to check the zero field of RIP-1 packet.
Use the undo checkzero command to disable the checking of the zero fields.
By default, RIP-1 performs the zero field checking.
According to the protocol (RFC1058) specifications, some fields in RIP-1 packets must be zero, called zero fields. With the checkzero command, the zero check operation of
RIP-1 can be enabled or disabled. During the zero check operation, if the RIP-1 packet in which the zero fields are not zeros is received, it will be rejected.
This command is ineffective to RIP-2 since RIP-2 packets have no zero fields.
13-1
3Com Switch 8800 Command Reference Guide
Example
Chapter 13 RIP Configuration Commands
Configure not to perform zero check for RIP-1 packet.
[SW8800-rip] undo checkzero
13.1.2 default cost
Syntax
default cost value
undo default cost
View
RIP view
Parameter
value: The default routing cost to be set, ranging from 1 to 16. The default value is 1.
Description
Use default cost command to set the default routing cost of an imported route.
Use the undo default cost command to restore the default value.
If no specific routing cost is specified when importing the route of another routing protocol with the import-route command, the redistribution will be performed with the default routing cost specified with the default cost command.
Related command: import-route.
Example
Set the default routing cost of the imported route of another routing protocol to 3.
[SW8800-rip] default cost 3
13.1.3 display rip
Syntax
display rip [ routing | vpn-instance ]
View
Parameter
Any view
routing: Displays RIP routing information.
vpn-instance: Displays VPN instance information.
13-2
3Com Switch 8800 Command Reference Guide
Description
Chapter 13 RIP Configuration Commands
Use the display rip command to view the current RIP running state and its configuration information.
Example
Display the current running state and configuration information of the RIP.
<SW8800> display rip
RIP is running
public net VPN-Instance
Checkzero is on Default cost : 1
Summary is on Preference : 100
Traffic-share is off
Period update timer : 30
Timeout timer : 180
Garbage-collection timer : 120
No peer router
Network :
202.38.168.0
Table 13-1 Description on the fields of the display rip command
Field
RIP is running public net VPN-Instance
Checkzero is on
Default cost : 1
Summary is on
Preference : 100
Traffic-share is off
Period update timer : 30
Timeout timer : 180
Garbage-collection timer : 120
RIP is active
Description
Public network in the VPN
Enable zero field checking
The default route cost is 1
Routes are summarized automatically
The preference of RIP is 100
Load balancing state for the interface
Three timers of RIP
No peer router
Network :202.38.168.0
No destination address of a transmission is specified
Enable RIP on network segment
202.38.168.0
13-3
3Com Switch 8800 Command Reference Guide
13.1.4 filter-policy export
Chapter 13 RIP Configuration Commands
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]
undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]
View
RIP view
Parameter
acl-number: Access control list number used for filtering the destination addresses of the routing information.
ip-prefix-name: Name of address prefix list used for filtering the destination addresses of the routing information.
routing-protocol: Routing protocol whose routing information is to be filtered, including
direct, isis, bgp, ospf, ospf-ase, ospf-nssa and static at present.
Description
Use the filter-policy export command to configure to filter the advertised routing information by RIP.
Use the undo filter-policy export command to configure not to filter the advertised routing information.
By default, RIP does not filter the advertised routing information.
Related command: acl, filter-policy import, ip ip-prefix.
Example
Filter the advertised route information according to ACL 2000.
[SW8800-rip] filter-policy 2000 export
13.1.5 filter-policy import
Syntax
filter-policy gateway ip-prefix-name import
undo filter-policy gateway ip-prefix-name import
filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] }
import
undo filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] }
import
13-4
3Com Switch 8800 Command Reference Guide
View
RIP view
Chapter 13 RIP Configuration Commands
Parameter
acl-number: Access control list number used for filtering the destination addresses of the routing information.
ip-prefix-name: Name of address prefix list used for filtering the destination addresses of the routing information.
gateway ip-prefix-name: Name of address prefix list used for filtering the addresses of the neighboring routers advertising the routing information.
Description
Use the filter-policy gateway import command to configure to filter the received routing information distributed from the specified address.
Use the undo filter-policy gateway import command to configure not to filter the received routing information distributed from the specified address.
Use the filter-policy import command to configure the filtering to the received global routing information.
Use the undo filter-policy import command to disable filtering to the received global routing information
By default, RIP does not filter the received routing information.
Related command: acl, filter-policy export, ip ip-prefix.
Example
Configure the filtering of the received global routing information according to acl 2000.
[SW8800-rip] filter-policy 2000 import
13.1.6 host-route
Syntax
host-route
undo host-route
View
Parameter
RIP view
None
13-5
3Com Switch 8800 Command Reference Guide
Description
Chapter 13 RIP Configuration Commands
Use the host-route command to control the RIP to accept the host route.
Use the undo host-route command to reject the host route.
By default, RIP accepts the host route.
In some special cases, RIP receives a great number of host routes in the same network segment. These routes cannot help the path searching much but occupy a lot of resources. In this case, the undo host-route command can be used to reject a host route.
Example
Configure RIP to reject a host route.
[SW8800-rip] undo host-route
13.1.7 import-route
Syntax
import-route protocol [ cost value | route-policy route-policy-name ]*
undo import-route protocol
View
RIP view
Parameter
protocol: Specifies the source routing protocol to be imported by RIP. At present, RIP can import the following routes: direct, bgp, ospf, ospf-ase, ospf-nssa, isis and
static.
value: Cost value of the route to be imported.
route-policy route-policy-name: Configures to import the route matching the condition of the specified Route-policy only.
Description
Use the import-route command to import the routes of other protocols into RIP.
Use the undo import-route command to cancel the routes imported from other protocols.
By default, RIP does not import any other route.
The import-route command is used to import the route of another protocol by using a certain cost value. RIP regards the imported route as its own route and transmits it with the specified cost value. This command can greatly enhance the RIP capability of obtaining routes, thus increasing the RIP performance.
13-6
3Com Switch 8800 Command Reference Guide Chapter 13 RIP Configuration Commands
If the cost value is not specified, routes will be imported according to the default cost ranging from 1 to 16. If the imported route cost value is 16, then RIP continues to announce this cost to other routers running RIP, and marks this route with HOLDDOWN.
However, this router can still forward packets until the Garbage Collection timer times out (defaults to 120 seconds).
Related command: default cost.
Example
Import a static route with cost as 4.
[SW8800-rip] import-route static cost 4
Set the default cost and import an OSPF route with the default cost.
[SW8800-rip] default cost 3
[SW8800-rip] import-route ospf
13.1.8 network
Syntax
network network-address
undo network network-address
View
RIP view
Parameter
network-address: Address of the network enabled/disabled. It can be the IP network address of any interface.
Description
Use the network command to enable Routing Information Protocol (RIP) for the specified network connected to the router.
Use the undo network command to disable the RIP on the interface.
By default, all RIP interfaces are disabled.
RIP route processes are disabled on all interfaces by default. To enable a RIP route process on an interface, use the network command.
The undo network command is similar to the undo rip work command in terms of function. But they are not identical. Their similarity is that the interface using either command will not receive/transmit RIP routes. The difference between them is that, in the case of undo rip work, other interfaces will still forward the routes of the interface using the undo rip work command. In the case of undo network, other interfaces will
13-7
3Com Switch 8800 Command Reference Guide Chapter 13 RIP Configuration Commands not forward the routes of the interface using this command and it seems that the interface disappeared.
When the network command is used on an address, the effect is that the interface on the network segment at this address is enabled. For example, the results of viewing the
network 129.102.1.1 with both the display current-configuration command and the
display rip command are shown as the network 129.102.0.0.
Related command: rip work.
Example
Enable the RIP on the interface with the network address as 129.102.0.0.
[SW8800-rip] network 129.102.0.0
13.1.9 peer
Syntax
View
RIP view
Parameter
ip-address: The interface IP address of the peer router, in dotted decimal format.
Description
Use the peer command to configure the sending destination address of the peer device.
Use the undo peer command to cancel the set destination address.
By default, do not send RIP packet to any destination.
RIP exchanges routing information with non-broadcasting networks in unicast view.
This command specifies the sending destination address to fit some non-broadcast networks. Usually, it is not recommended to use this command.
Example
peer ip-address
undo peer ip-address
Specify the sending destination address 202.38.165.1.
[SW8800-rip] peer 202.38.165.1
13.1.10 preference
Syntax
preference value
13-8
3Com Switch 8800 Command Reference Guide
undo preference
View
RIP view
Parameter
Chapter 13 RIP Configuration Commands
value: Preference level, ranging from 1 to 255. By default, the value is 100.
Description
Use the preference command to configure the route preference of RIP.
Use the undo preference command to restore the default preference.
Every routing protocol has its own preference. Its default value is determined by the specific routing policy. The preference will finally determine the routing algorithm to obtain the optimal route in the IP routing table. This command can be used to modify the RIP preference manually.
Example
Specify the RIP preference as 20.
[SW8800-rip] preference 20
13.1.11 reset
Syntax
reset
View
RIP view
Parameter
None
Description
Use the reset command to reset the system configuration parameters of RIP.
When you need to re-configure parameters of RIP, this command can be used to restore to the default setting.
Example
Reset the RIP system.
[SW8800-rip] reset
13-9
3Com Switch 8800 Command Reference Guide
13.1.12 rip
Chapter 13 RIP Configuration Commands
Syntax
rip
undo rip
View
system view
Parameter
None
Description
Use the rip command to enable the RIP and enter the RIP view.
Use the undo rip command to disable RIP.
By default, the system does not run RIP.
To enter the RIP view to configure various RIP global parameters, RIP should be enabled first. Whereas the configuration of parameters related to the interfaces is not restricted by enabling/disabling RIP.
Note:
Note that the interface parameters configured previously would be invalid when RIP is disabled.
Example
Enable the RIP and enter the RIP view.
[SW8800] rip
[SW8800-rip]
13.1.13 rip authentication-mode
Syntax
rip authentication-mode { simple password | md5 { usual key-string | nonstandard
key-string key-id } }
undo rip authentication-mode
View
Interface view
13-10
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 13 RIP Configuration Commands
simple: Simple text authentication mode.
password: Simple text authentication key. It is a character string of 1 to 16 characters.
md5: MD5 cipher text authentication mode.
usual: Specifies the MD5 cipher text authentication packet to use the general packet format (RFC1723 standard format).
key-string: MD5 cipher text authentication key. If it is input in a plain text form, MD5 key is a character string not exceeding 16 characters. And it will be displayed in a cipher text form in a length of 24 characters when the display current-configuration command is executed. Inputting the MD5 key in a cipher text form with 24 characters long is also supported.
nonstandard: Specifies the MD5 cipher text authentication packet to use a nonstandard packet format described in RFC2082.
key-id: MD5 cipher text authentication identifier, ranging from 1 to 255.
Description
Use the rip authentication-mode command to configure RIP-2 authentication mode and its parameters.
Use the undo rip authentication-mode command to cancel the RIP-2 authentication.
RIP-1 does not support authentication. There are two RIP authentication modes: simple authentication and MD5 cipher text authentication for RIP-2. When MD5 cipher text authentication mode is used, there are two types of packet formats. One of them is that described in RFC 1723, which was brought forward earlier. The other format is the one described specially in RFC 2082. The router supports both of the packet formats and the user can select either of them on demands.
Related command: rip version.
Example
Specify Interface Vlan-interface 10 to use the simple authentication with the key as aaa.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] rip version 2
[SW8800-Vlan-interface10] rip authentication-mode simple aaa
Set MD5 authentication at Vlan-interface 10 with the key string as aaa and the packet type as usual.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] rip version 2
[SW8800-Vlan-interface10] rip authentication-mode md5 usual aaa
13-11
3Com Switch 8800 Command Reference Guide
13.1.14 rip input
Chapter 13 RIP Configuration Commands
Syntax
rip input
undo rip input
View
Interface view
Parameter
None
Description
Use the rip input command to allow an interface to receive RIP packets.
Use the undo rip input command to disable an interface to receive RIP packets.
By default, all interfaces except loopback interfaces are enabled to receive RIP packets.
This command is used in cooperation with the other two commands: rip output and rip
work. Functionally, rip work is equivalent to rip input & rip output. The latter two control the receipt and the transmission of RIP packets respectively on an interface.
The former command equals the functional combination of the latter two commands.
Related command: rip output, rip work.
Example
Specify Vlan-interface 10 not to receive RIP packets.
[SW8800-Vlan-interface10] undo rip input
13.1.15 rip metricin
Syntax
rip metricin value
undo rip metricin
View
Interface view
Parameter
value: Additional route metric added when an interface receives a packet, ranging from
0 to 16. By default, the value is 0.
13-12
3Com Switch 8800 Command Reference Guide
Description
Chapter 13 RIP Configuration Commands
Use the rip metricin command to configure the additional route metric added to the route when an interface receives RIP packets.
Use the undo rip metricin command to restore the default value of this additional route metric.
Related command: rip metricout.
Example
Specify the additional route metric to 2 when the interface Vlan-interface 10 receives
RIP packets.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] rip metricin 2
13.1.16 rip metricout
Syntax
rip metricout value
undo rip metricout
View
Interface view
Parameter
value: Additional route metric added when an interface transmits a packet, ranging from
1 to 16. By default, the value is 1.
Description
Use the rip metricout command to configure the additional route metric to the route when an interface transmits RIP packets.
Use the undo rip metricout command to restore the default value of this additional route metric.
Related command: rip metricin.
Example
Set the additional route metric to 2 when the interface Vlan-interface 10 transmits RIP packets.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] rip metricout 2
13-13
3Com Switch 8800 Command Reference Guide
13.1.17 rip output
Chapter 13 RIP Configuration Commands
Syntax
rip output
undo rip output
View
Interface view
Parameter
None
Description
Use the rip output command to allow an interface to transmit RIP packets to the external.
Use the undo rip output command to disable an interface to transmit RIP packets to the external.
By default, all interfaces except loopback interfaces are enabled to transmit RIP packets to the external.
This command is used in cooperation with the other two commands: rip input and rip
work. Functionally, rip work is equivalent to rip input & rip output. The latter two control the receipt and the transmission of RIP packets respectively on an interface.
The former command equals the functional combination of the latter two commands.
Related command: rip input, rip work.
Example
Disable the interface Vlan-interface 10 to transmit RIP packets.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] undo rip output
13.1.18 rip split-horizon
Syntax
rip split-horizon
undo rip split-horizon
View
Interface view
13-14
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 13 RIP Configuration Commands
Description
Use the rip split-horizon command to configure an interface to use split horizon when transmitting RIP packets.
Use undo rip split-horizon command to configure an interface not to use split horizon when transmitting RIP packets.
By default, an interface is enabled to use split horizon when transmitting RIP packets.
Normally, split horizon is necessary for reducing route loop. Only in some special cases, you need to disable split horizon to ensure the correct execution of protocols. When doing that, make sure that it is necessary.
Example
Specify the interface Vlan-interface 10 not to use split horizon when processing RIP packets.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] undo rip split-horizon
13.1.19 rip version
Syntax
rip version 1
rip version 2 [ broadcast | multicast ]
undo rip version
View
Interface view
Parameter
1: Version of RIP packets on an interface is RIP-1.
2: Version of RIP packets on an interface is RIP-2.
broadcast: Transmission mode of RIP-2 packet is broadcast.
multicast: Transmission mode of RIP-2 packet is multicast.
Description
Use the rip version command to configure the version of RIP packets on an interface.
Use the undo rip version command to restore the default value of RIP packet version on the interface.
13-15
3Com Switch 8800 Command Reference Guide Chapter 13 RIP Configuration Commands
By default, the interface RIP version is RIP-1. RIP-1 transmits packets in broadcast mode, while RIP-2 transmits packets in multicast mode by default.
When running RIP-1, the interface only receives and transmits RIP-1 broadcast packets, and receives RIP-2 broadcast packets, but does not receive RIP-2 multicast packets. When running RIP-2 in broadcast mode, the interface only receives and transmits RIP-2 broadcast packets, receives RIP-1 packets and RIP-2 multicast packets. When running RIP-2 in multicast mode, the interface only receives and transmits RIP-2 multicast packets, receives RIP-2 broadcast packets, but does not receive RIP-1 packets.
Example
Configure the interface Vlan-interface 10 as RIP-2 broadcast mode.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] rip version 2 broadcast
13.1.20 rip work
Syntax
rip work
undo rip work
View
Interface view
Parameter
None
Description
Use the rip work command to enable the running of RIP on an interface.
Use the undo rip work command to disable the running of RIP on an interface.
By default, RIP is running on an interface.
This command is used in cooperation with rip input, rip output and network commands. Refer to the usage guideline of the related commands.
Related command: network, rip input, rip output.
Example
Disable the interface Vlan-interface 10 to run the RIP.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] undo rip work
13-16
3Com Switch 8800 Command Reference Guide
13.1.21 summary
Chapter 13 RIP Configuration Commands
Syntax summary undo summary
View
RIP view
Parameter
None
Description
Use the summary command to configure to activate RIP-2 automatic route summarization.
Use the undo summary command to disable RIP-2 automatic route summarization.
By default, RIP-2 route summarization is used.
Route aggregation can be performed to reduce the routing traffic on the network as well as to reduce the size of the routing table. If RIP-2 is used, route summarization function can be disabled with the undo summary command, when it is necessary to broadcast the subnet route.
RIP-1 does not support subnet mask. Forwarding subnet route may cause ambiguity.
Therefore, RIP-1 uses route summarization all the time. Thus, the undo summary command does not take effect on RIP-1.
Related command: rip version.
Example
Set RIP version on the interface Vlan-interface 10 as RIP-2 and disable the route aggregation.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] rip version 2
[SW8800-Vlan-interface10] quit
[SW8800] rip
[SW8800-rip] undo summary
13.1.22 timers
Syntax
timers { update update-timer-length | timeout timeout-timer-length } *
undo timers { update | timeout } *
13-17
3Com Switch 8800 Command Reference Guide
View
RIP view
Parameter
Chapter 13 RIP Configuration Commands
update-timer-length: Value of the Period Update timer, ranging from 1 to 3600 seconds.
By default, it is 30 seconds.
timeout-timer-length: Value of the Timeout timer, ranging from 1 to 3600 seconds. By default, it is 180 seconds.
Description
Use the timers command to modify the values of the three RIP timers: Period Update,
Timeout, and Garbage-collection.
Use the undo timers command to restore the default settings.
By default, the values of Period Update, Timeout, and Garbage-collection timers are 30 seconds, 180 seconds, and 120 seconds respectively.
Generally, it is regarded that the value of Garbage-collection timer is fixed to four times of that of Period Update timer. Adjusting Period Update timer will affect
Garbage-collection timer.
The modification of RIP timers is validated immediately.
Related command: display rip.
Example
Set the values of Period Update timer and Timeout timer of RIP to 10 seconds and 30 seconds respectively.
[SW8800] rip
[SW8800-rip] timers update 10 timeout 30
13-18
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Chapter 14 OSPF Configuration Commands
Note:
When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch
8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.
14.1 OSPF Configuration Commands
14.1.1 abr-summary
Syntax
abr-summary ip-address mask [ advertise | not-advertise ]
undo abr-summary ip-address mask
View
OSPF Area view
Parameter
ip-address: Network segment address.
mask: Network mask.
advertise: Advertises only the summarized route that matches the specified IP address and mask.
not-advertise : Not advertises routes matching the specified IP address and mask.
Description
Use the abr-summary command to configure the route aggregation on the area border router.
Use the undo abr-summary command to disable the function of route aggregation on the area border router.
By default, the area border router does not aggregate routes.
This command is applicable only to the area border router (ABR) and is used for the route aggregation in an area. The ABR only transmits an aggregated route to other areas. Route aggregation refers to that the routing information is processed in the ABR
14-1
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands and for each network segment configured with route aggregation, there is only one route transmitted to other areas.
You can summarize multiple network segments in one OSPF area.
Example
Aggregate the two network segments, 36.42.10.0 and 36.42.110.0, in OSPF area 1 into one aggregate route 36.42.0.0 and transmit it to other areas.
[SW8800-ospf-1] area 1
[SW8800-ospf-1-area-0.0.0.1] network 36.42.10.0 0.0.0.255
[SW8800-ospf-1-area-0.0.0.1] network 36.42.110.0 0.0.0.255
[SW8800-ospf-1-area-0.0.0.1] abr-summary 36.42.0.0 255.255.0.0
14.1.2 area
Syntax
View
OSPF view
Parameter
area-id: ID of the OSPF area, which can be a decimal integer (ranging from 0 to
4,294,967,295) or in IP address format.
Description
Use the area command to enter OSPF Area view.
Use the undo area command to remove the specified area.
Example
area area-id
undo area area-id
Enter OSPF Area 0 view.
[SW8800-ospf-1] area 0
[SW8800-ospf-1-area-0.0.0.0]
14.1.3 asbr-summary
Syntax
asbr-summary ip-address mask [ not-advertise | tag value ]
undo asbr-summary ip-address mask
14-2
3Com Switch 8800 Command Reference Guide
View
OSPF view
Chapter 14 OSPF Configuration Commands
Parameter
ip-address: Matched IP address in dotted decimal format.
mask: IP address mask in dotted decimal format.
not-advertise: Do not advertise routes matching the specified IP address and mask.
tag value: Tag value, which is mainly used to control advertisement of routes via route-policy. It is in the range from 0 to 4,294,967,295. The default tag value is 1.
Description
Use the asbr-summary command to configure summarization of imported routes by
OSPF.
Use the undo asbr-summary command to cancel the summarization.
By default, summarization of imported routes is disabled.
After the summarization of imported routes is configured, if the local router is an autonomous system border router (ASBR), this command summarizes the imported
Type-5 LSAs in the summary address range. When NSSA is configured, this command will also summarize the imported Type-7 LSAs in the summary address range.
If the local router acts as both an ABR and a router in the NSSA, this command summarizes Type-5 LSAs transformed from Type-7 LSAs. If the router is not the router in the NSSA, the summarization is disabled.
Related command: display ospf asbr-summary.
Example
Set summarization of imported routes.
[SW8800] ospf
[SW8800-ospf-1] asbr-summary 10.2.0.0 255.255.0.0 not-advertise
14.1.4 authentication-mode
Syntax
authentication-mode { simple | md5 }
undo authentication-mode
View
Parameter
OSPF area view
simple: Uses simple text authentication mode.
14-3
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
md5: Uses MD5 cipher text authentication mode.
Description
Use the authentication-mode command to configure one area of OSPF to support the authentication attribute.
Use the undo authentication-mode command to cancel the authentication attribute of this area.
By default, an area does not support authentication attribute.
All the routers in one area must use the same authentication mode (no authentication, simple text authentication or MD5 cipher text authentication). If the mode of supporting authentication is configured, all routers on the same segment must use the same authentication key. To configure a simple text authentication key, use the ospf
authentication-mode simple command. Use the ospf authentication-mode md5 command to configure the MD5 cipher text authentication key if the area is configured to support MD5 cipher text authentication mode.
Related command: ospf authentication-mode.
Example
Enter area 0 view.
[SW8800-ospf-1] area 0
Specify the OSPF area 0 to support MD5 cipher text authentication:
[SW8800-ospf-1-area-0.0.0.0] authentication-mode md5
14.1.5 debugging ospf
Syntax
debugging ospf [ process-id ] { event | packet [ ack | dd | hello | interface
interface-type interface-num | request | update ] | lsa-originate | spf }
undo debugging ospf [ process-id ] { event | packet [ ack | dd | hello | interface
interface-type interface-num | request | update ] | lsa-originate | spf }
View
User view
Parameter
process-id: Process ID of OSPF. The command enables/disables all process debugging if you do not specify a process ID.
event: Enables/Disables OSPF event debugging.
packet: Enables/Disables OSPF packet debugging. OSPF packets include:
ack: LSAck packet.
14-4
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
dd: Database Description packet.
hello: Hello packet.
request: Link State Request packet.
update: Link State Update packet.
interface interface-type interface-num: Interface type and number, which indicates to enable/disable debugging for the OSPF packets obtained on the specified interface.
lsa-originate: Enables/Disables OSPF LSA packet debugging.
spf: Enables/Disables OSPF minimum tree calculation debugging.
Description
Use the debugging ospf command to enable OSPF process debugging.
Use the undo debugging ospf command to disable OSPF process debugging.
If you do not specify a process ID, the command is applied to all processes. While the router is operating, the debugging state always remains regardless of the existing
OSPF process. If you specify a process ID, the command is only applied to the specified process.
Related command: display debugging ospf.
Example
Enable OSPF packet debugging.
<SW8800> debugging ospf packet
14.1.6 default cost
Syntax
default cost value
undo default cost
View
OSPF view
Parameter
value: Default routing cost of an external route imported by OSPF, ranging from 0 to
16,777,214. By default, its value is 1.
Description
Use the default cost command to configure the default cost for OSPF to import external routes.
14-5
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Use the undo default cost command to restore the default value of the default routing cost configured for OSPF to import external routes.
Since OSPF can import external routing information, whose routing cost can influence routing selection and calculation, and propagate it to the entire autonomous system, it is necessary to specify the default routing cost for the protocol to import external routes.
Example
Specify the default routing cost for OSPF to import external routes as 10.
[SW8800-ospf-1] default cost 10
14.1.7 default interval
Syntax
default interval seconds
undo default interval
View
OSPF view
Parameter
seconds: Default interval in seconds for importing external routes. It ranges from 1 to
2,147,483,647 and defaults to 1.
Description
Use the default interval command to configure the default interval for OSPF to import external routes.
Use the undo default interval command to restore the default value of the default interval for importing external routes.
Because OSPF can import the external routing information and broadcast it to the entire autonomous system, and importing routes too often will greatly affect the performances of the device, it is necessary to specify the default interval for the protocol to import external routes.
Example
Specify the default interval for OSPF to import external routes as 10 seconds.
[SW8800-ospf-1] default interval 10
14.1.8 default limit
Syntax
default limit routes
14-6
3Com Switch 8800 Command Reference Guide
undo default limit
View
Chapter 14 OSPF Configuration Commands
OSPF view
Parameter
routes: Default value to the imported external routes in a unit time, ranging from 200 to
2,147,483,647. By default, the value is 1000.
Description
Use the default limit command to configure the default value of maximum number of imported routes.
Use the undo default limit command to restore the default value.
OSPF can import external routing information and advertise them to the whole AS.
Importing too much external routes once will greatly affect the performances of the device.
Related command: default interval.
Example
Specify the default value of OSPF imported external routes as 200.
[SW8800-ospf-1] default limit 200
14.1.9 default tag
Syntax
default tag tag
undo default tag
View
OSPF view
Parameter
tag: Default tag, ranging from 0 to 4,294,967,295.
Description
Use the default tag command to configure the default tag that OSPF assigns to imported routes.
Use the undo default tag command to restore the default of the default tag that OSPF assigns to imported routes.
14-7
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
When OSPF imports a route found by other routing protocols in the router and uses it as the external routing information of its own autonomous system, some additional parameters are required, including the default cost and the default tag of the route.
Related command: default type.
Example
Set the default tag that OSPF assigns to imported routes to 10.
[SW8800-ospf-1] default tag 10
14.1.10 default type
Syntax
default type { 1 | 2 }
undo default type
View
OSPF view
Parameter
type 1: External routes of type 1.
type 2: External routes of type 2.
Description
Use the default type command to configure the default type when OSPF imports external routes.
Use the undo default type command to restore the default type when OSPF imports external routes.
By default, the external routes of type 2 are imported.
OSPF specifies the two types of external routing information. The command described in this section can be used to specify the default type when external routes are imported.
Related command: default tag.
Example
Specify the default type as type 1 when OSPF imports an external route.
[SW8800-ospf-1] default type 1
14-8
3Com Switch 8800 Command Reference Guide
14.1.11 default-cost
Chapter 14 OSPF Configuration Commands
Syntax
default-cost value
undo default-cost
View
OSPF Area view
Parameter
value: Specifies the cost value of the default route transmitted by OSPF to the stub or
NSSA area, ranging from 0 to 16,777,214. The default value is 1.
Description
Use the default-cost command to configure the cost of the default route transmitted by
OSPF to the stub or NSSA area.
Use the undo default-cost command to restore the cost of the default route transmitted by OSPF to the STUB or NSSA area to the default value.
This command only applies to the border routers connected to the stub or NSSA areas.
To configure a stub area, you need to use two commands: stub and default-cost. The
stub command is used to configure the stub attribute for this area.
Related command: stub, nssa.
Example
Set the area 1 as the stub area and the cost of the default route transmitted to this stub area to 60.
[SW8800-ospf-1] area 1
[SW8800-ospf-1-area-0.0.0.1] network 20.0.0.0 0.255.255.255
[SW8800-ospf-1-area-0.0.0.1] stub
[SW8800-ospf-1-area-0.0.0.1] default-cost 60
14.1.12 default-route-advertise
Syntax
default-route-advertise [ always | cost value | type type-value | route-policy
route-policy-name ]*
undo default-route-advertise [ always | cost | type | route-policy ]*
View
OSPF view
14-9
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 14 OSPF Configuration Commands
always: The parameter will generate an ase lsa which describes the default route and will advertise it if the local router is not configured with the default route. If this parameter is not set, the local router cannot import the ase lsa, which generates the default route only when it is configured with the default route.
cost value: The cost value of this ase lsa. The metric-value ranges from 0 to
16,777,214. If the parameter is not configured, the default value is 1.
type type-value: Cost type of this ase lsa. It ranges from 1 to 2. If the parameter is not configured, the default value is 2.
route-policy route-policy-name: If the default route match the route-policy specified by
route-policy-name, route-policy will affect the value in ase lsa. The length of
route-policy-name argument is a character string of 1 to 19 characters.
Description
Use the default-route-advertise command to import default route to OSPF route area.
Use the undo default-route-advertise command to cancel the redistribution of default route.
By default, OSPF does not import default route.
The import-route command cannot import the default route. To import the default route to the route area, this command must be used. When local router is not configured with default route, the keyword always should be used by ase lsa to generate default route.
Related command: import-route.
Example
If local route has no default route, the ase lsa of default route will be generated.
Otherwise, it will not be generated.
[SW8800-ospf-1] default-route-advertise
The ase lsa of default route will be generated and advertised to OSPF route area even the local router has no default route.
[SW8800-ospf-1] default-route-advertise always
14.1.13 display debugging ospf
Syntax display debugging ospf
View
Any view
14-10
3Com Switch 8800 Command Reference Guide
Description
Chapter 14 OSPF Configuration Commands
Use the display debugging ospf command to view the debugging states of global
OSPF and all processes.
Related command: debugging ospf.
Example
Display the debugging states of global OSPF and all processes.
<SW8800> display debugging ospf
OSPF global debugging state:
OSPF SPF debugging is on
OSPF LSA debugging is on
OSPF process 100 debugging state:
OSPF SPF debugging is on
OSPF process 200 debugging state:
OSPF SPF debugging is on
OSPF LSA debugging is on
14.1.14 display ospf abr-asbr
Syntax
display ospf [ process-id ] abr-asbr
View
Any view
Parameter
Description
Use the display ospf abr-asbr command to view the information about the ABR and
ASBR of OSPF.
Example
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
Display the information of the OSPF area border routers and autonomous system border routers.
<SW8800> display ospf abr-asbr
OSPF Process 1 with Router ID 10.110.98.138
Routing Table to ABR and ASBR
I = Intra i = Inter A = ASBR B = ABR S = SumASBR
14-11
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Destination Area Cost Nexthop Interface
IA 2.2.2.2 0.0.0.0 10 10.153.17.89 Vlan-interface1
Table 14-1 Description on the fields of the display ospf abr-asbr command
Destination
Area
Cost
Field Description
Router ID of the ABR or ASBR
Area where the router is connected with ASBR
The routing overhead value of the route
Interface The local output interface
14.1.15 display ospf asbr-summary
Syntax
display ospf [ process-id ] asbr-summary [ ip-address mask ]
View
Any view
Parameter
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
ip-address: Matched IP address in dotted decimal format.
mask: IP address mask in dotted decimal format.
Description
Use the display ospf asbr-summary command to view the summary information of
OSPF imported route.
If the parameters are not set, the summary information of all OSPF imported routes will be displayed.
Related command: asbr-summary.
Example
Display the summary information of all OSPF imported routes.
<SW8800> display ospf asbr-summary
OSPF Process 1 with Router ID 1.1.1.1
Summary Addresses
Total summary address count: 2
14-12
3Com Switch 8800 Command Reference Guide
Summary Address net : 168.10.0.0 mask : 255.254.0.0 tag : 1 status : Advertise
The Count of Route is 0
Summary Address net : 1.1.0.0 mask : 255.255.0.0 tag : 100 status : DoNotAdvertise
The Count of Route is 0
Chapter 14 OSPF Configuration Commands
Table 14-2 Description on the fields of the display ospf asbr-summary command
Field Description
mask Mask tag Tag status
Status information, including two values:
DoNotAdvertise
The summary routing information to the network segment will not be advertised
Advertise
The summary routing information to the network segment will be advertised
14.1.16 display ospf brief
Syntax
display ospf [ process-id ] brief
View
Any view
Parameter
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
Description
Use the display ospf brief command to view the main summary of OSPF.
14-13
3Com Switch 8800 Command Reference Guide
Example
Chapter 14 OSPF Configuration Commands
Display the OSPF summary.
<SW8800> display ospf brief
OSPF Process 1 with Router ID 10.110.95.189
OSPF Protocol Information
RouterID: 10.110.95.189 Border Router: Area AS spf-schedule-interval: 5
Routing preference: Inter/Intra: 10 External: 150
Default ASE parameters: Metric: 1 Tag: 0.0.0.1 Type: 2
SPF computation count: 16
Area Count: 1 Nssa Area Count: 0
Area 0.0.0.0:
Authtype: none Flags: <>
SPF scheduled: <>
Interface: 201.1.1.4 (Vlan-interface1)
Cost: 1 State: DR Type: Broadcast
Priority: 1
Designated Router: 201.1.1.4
Backup Designated Router: 201.1.1.3
Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1
Table 14-3 Description on the fields of the display ospf brief command
Field
RouterID
Border Router
Router ID of the router
Description
Border routers for connection to the area, including autonomous system border router (ASBR) and area border router (ABR) spf-schedule-interval Interval of SPF schedule in seconds
Authtype Authentication type of OSPF
Routing preference
Routing preference of OSPF. The internal route of OSPF includes intra/inter area route, and its default routing preference is 10. While that of the external route of OSPF is 150 by default and tag parameters count
Area Count
Nssa Area Count
SPF scheduled
Areas for connection to this router
Number of NSSA areas
SPF scheduled (flag)
14-14
3Com Switch 8800 Command Reference Guide
Interface
Field
Cost
Chapter 14 OSPF Configuration Commands
Description
Interface name belonging to this area
Cost of routes
Type Network type of OSPF interface
Priority Priority
Designated Router IP address of designated router (DR)
Backup Designated
IP address of backup designated router (BDR)
Router
Timers
Transmit Delay
OSPF timers, defining as follows:
Hello Interval of hello packet
Dead
Poll
Interval of dead neighbors
Interval of poll
Retransmit Interval of retransmitting LSA
Delay time of transmitting LSA
14.1.17 display ospf cumulative
Syntax
display ospf [ process-id ] cumulative
View
Any view
Parameter
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
Description
Use the display ospf cumulative command to view the OSPF cumulative information.
Example
Display the OSPF cumulative information.
<SW8800> display ospf cumulative
OSPF Process 1 with Router ID 1.1.1.1
Cumulations
IO Statistics
14-15
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Link-State Update 48 53
ASE: 1 Checksum Sum: FCAF
LSAs originated by this router
Router: 50 SumNet: 40 SumASB: 2
LSAs Originated: 92 LSAs Received: 33
Area 0.0.0.0:
Neighbors: 1 Interfaces: 1
Spf: 54 Checksum Sum F020
rtr: 2 net: 0 sumasb: 0 sumnet: 1
Area 0.0.0.1:
Neighbors: 0 Interfaces: 1
Spf: 19 Checksum Sum 14EAD
rtr: 1 net: 0 sumasb: 1 sumnet: 1
Routing Table:
Intra Area: 2 Inter Area: 0 ASE: 1
Table 14-4 Description on the fields of the display ospf cumulative command
IO Statistics
Field
Type
Input
Output
ASE checksum sum
LSAs
Router
SumNet
SumASB
Area originated received
Description
Type of input/output OSPF packet
Number of received packets
Number of transmitted packets
Number of all ASE LSAs
Checksum of ASE LSA
Number of originated LSAs
Number of received LSAs generated by other routers
Number of all Router LSAs
Number of all Sumnet LSAs
Neighbors
Interfaces
Spf
Number of all SumASB LSAs
Number of neighbors in this area
Number of interfaces in this area
Number of SPF computation count in this area rtr, net, sumasb, sumnet
Number of all LSAs in this area
14-16
3Com Switch 8800 Command Reference Guide
Field
Intra Area
Routing Table Inter Area
ASE
14.1.18 display ospf error
Chapter 14 OSPF Configuration Commands
Description
Number of intra-area routes
Number of inter-area routes
Number of external routes
Syntax
display ospf [ process-id ] error
View
Any view
Parameter
Description
Use the display ospf error command to view the OSPF error information.
Example
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
Display the OSPF error information.
<SW8800> display ospf error
OSPF Process 1 with Router ID 1.1.1.1
OSPF packet error statistics:
0: IP: received my own packet 0: OSPF: wrong packet type
0: OSPF: wrong version 0: OSPF: wrong checksum
0: OSPF: wrong area id 0: OSPF: area mismatch
0: OSPF: wrong virtual link 0: OSPF: wrong authentication type
0: OSPF: wrong authentication key 0: OSPF: too small packet
0: OSPF: packet size > ip length 0: OSPF: transmit error
0: OSPF: interface down 0: OSPF: unknown neighbor
0: HELLO: netmask mismatch 0: HELLO: hello timer mismatch
0: HELLO: dead timer mismatch 0: HELLO: extern option mismatch
0: HELLO: router id confusion 0: HELLO: virtual neighbor unknown
0: HELLO: NBMA neighbor unknown 0: DD: neighbor state low
0: DD: router id confusion 0: DD: extern option mismatch
0: DD: unknown LSA type 0: LS ACK: neighbor state low
0: LS ACK: wrong ack 0: LS ACK: duplicate ack
0: LS ACK: unknown LSA type 0: LS REQ: neighbor state low
14-17
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
0: LS REQ: empty request 0: LS REQ: wrong request
0: LS UPD: neighbor state low 0: LS UPD: newer self-generate LSA
0: LS UPD: LSA checksum wrong 0: LS UPD: received less recent LSA
0: LS UPD: unknown LSA type 0: OSPF routing: next hop not exist
0: DD: MTU option mismatch 0: ROUTETYPE: wrong type value
Table 14-5 Description on the fields of the display ospf error command
Field
IP: received my own packet
OSPF: wrong packet type
OSPF: wrong version
OSPF: wrong checksum
OSPF: wrong area id
OSPF: area mismatch
OSPF: wrong virtual link
Description
Received my own packet
OSPF packet type error
OSPF version error
OSPF checksum error
OSPF area ID error
OSPF area mismatch
OSPF virtual link error
OSPF: wrong authentication type OSPF authentication type error
OSPF: wrong authentication key OSPF authentication key error
OSPF: too small packet
OSPF: packet size > ip length
OSPF packet too small
OSPF packet size exceeds IP packet length
OSPF: transmit error
OSPF: interface down
OSPF: unknown neighbor
HELLO: netmask mismatch
HELLO: hello timer mismatch
HELLO: dead timer mismatch
OSPF transmission error
OSPF interface is down, unavailable
OSPF neighbors are unknown
Network mask mismatch
Interval of HELLO packet is mismatched
Interval of dead neighbor packet is mismatched
HELLO: extern option mismatch
HELLO: router id confusion
Extern option of Hello packet is mismatched
Hello packet: Router ID confusion
HELLO: virtual neighbor unknown Hello packet: unknown virtual neighbor
HELLO: NBMA neighbor unknown Hello packet: unknown NBMA neighbor
DD: neighbor state low
DD: unknown LSA type
LS ACK: neighbor state low
LS ACK: wrong ack
Database description (DD) packet: asynchronous neighbor state
DD packet: unknown LSA type
Link state acknowledgment (LS ACK) packet: states of neighbors are not synchronized.
Link state acknowledgment packet: ack error
14-18
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Field
LS ACK: duplicate ack
LS ACK: unknown LSA type
LS REQ: neighbor state low
LS REQ: empty request
LS REQ: wrong request
LS UPD: neighbor state low
LS UPD: newer self-generate LSA
LS UPD: LSA checksum wrong
LS UPD: received less recent LSA
LS UPD: unknown LSA type
OSPF routing: next hop not exist
DD: MTU option mismatch
ROUTETYPE: wrong type value
Description
Link state acknowledgment packet: ack duplication
Link state acknowledgment packet: unknown
LSA type
Link state request (LS REQ) packet
Link state request packet: empty request
Link state request packet: erroneous request
Link state update packet: The states of neighbors are synchronized.
Link state update packet: newer LSA generated by itself
Link state update packet: LSA checksum error
Link state update packet: received less recent LSA
Link state update packet: unknown LSA type
Next hop of OSPF routing does not exist
MTU option of DD packet is mismatched
Route type: the value of the type is wrong
14.1.19 display ospf interface
Syntax
display ospf [ process-id ] interface [ interface-type interface-number ]
View
Any view
Parameter
Description
Use the display ospf interface command to view the OSPF interface information.
Example
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
interface-type interface-number: Specifies an interface.
Display the OSPF interface information of Vlan-interface1.
14-19
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
<SW8800> display ospf interface vlan-interface 1
OSPF Process 1 with Router ID 1.1.1.1
Interfaces
Interface: 10.110.10.2 (Vlan-interface1)
Cost: 1 State: BackupDR Type: Broadcast
Priority: 1
Designated Router: 10.110.10.1
Backup Designated Router: 10.110.10.2
Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1
Table 14-6 Description on the fields of the display ospf interface command
Cost
State
Type
Priority
Field
Designated Router
Description
Cost of the interface
State of the interface state machine
Network type of OSPF on the interface
Priority of the interface for DR election in its network
DR on the network in which the interface resides
Backup Designated Router BDR on the network in which the interface resides
OSPF timers, defining as follows:
Hello Interval of hello packet
Timers
Transmit Delay
Dead
Poll
Interval of dead neighbors
Interval of poll
Retransmit Interval of retransmitting LSA
Delay time of transmitting LSA
14.1.20 display ospf lsdb
Syntax
display ospf [ process-id ] [ area-id ] lsdb [ brief | [ asbr | ase | network | nssa |
router | summary ] [ ip-address ] [ originate-router ip-address | self-originate ] ]
View
Parameter
Any view
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
14-20
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
area-id: ID of the OSPF area, which can be a decimal integer in the range 0 to
4,294,967,295 or in IP address format.
brief: Views brief database information.
asbr: Views the database information of Type-4 LSA (summary-Asbr-LSA).
ase: Views the database information of Type-5 LSA (AS-external-LSA).
network: Views the database information of Type-2 LSA (Network-LSA).
nssa: Views the database information of Type-7 LSA (NSSA-external-LSA).
router: Views the database information of Type-1 LSA (Router-LSA).
summary: Views the database information of Type-3 LSA (Summary-Net-LSA).
ip-address: Link state ID in IP address format.
originate-router ip-address: Views the IP address of the LSA generator.
self-originate: Views the database information of self-originated LSA.
Description
Use the display ospf lsdb command to view the link-state database (LSDB) of OSPF.
Example
Display the LSDB of OSPF.
<SW8800> display ospf lsdb
OSPF Process 1 with Router ID 1.1.1.1
Link State Database
Area: 0.0.0.0
Type LinkState ID AdvRouter Age Len Sequence Metric Where
Rtr 2.2.2.2 2.2.2.2 465 36 8000000c 0 SpfTree
Rtr 1.1.1.1 1.1.1.1 449 36 80000004 0 SpfTree
Net 10.153.17.89 2.2.2.2 465 32 80000004 0 SpfTree
SNet 10.153.18.0 1.1.1.1 355 28 80000003 10 Inter List
Area: 0.0.0.1
Type LinkState ID AdvRouter Age Len Sequence Metric Where
Rtr 1.1.1.1 1.1.1.1 449 36 80000004 0 SpfTree
Rtr 3.3.3.3 3.3.3.3 429 36 8000000a 0 Clist
Net 10.153.18.89 3.3.3.3 429 32 80000003 0 SpfTree
SNet 10.153.17.0 1.1.1.1 355 28 80000003 10 Inter List
ASB 2.2.2.2 1.1.1.1 355 28 80000003 10 SumAsb List
AS External Database:
Type LinkState ID AdvRouter Age Len Sequence Metric Where
ASE 10.153.18.0 1.1.1.1 1006 36 80000002 1 Ase List
ASE 10.153.16.0 2.2.2.2 798 36 80000002 1 Uninitialized
ASE 10.153.17.0 2.2.2.2 623 36 80000003 1 Uninitialized
ASE 10.153.17.0 1.1.1.1 1188 36 80000002 1 Ase List
14-21
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Table 14-7 Description on the fields of the display ospf lsdb command
Field
Type
LinkStateID
AdvRouter
Age
Len
Sequence
Metric
Where
<SW8800> display ospf lsdb ase
OSPF Process 1 with Router ID 1.1.1.1
Link State Data Base
type : ASE
ls id : 2.2.0.0
adv rtr: 1.1.1.1
ls age: 349
Description
Type of the LSA
Link state ID of the LSA
Router ID of the router originating the LSA
Age of the LSA, in seconds
Length of the LSA
Sequence number of the LSA
Cost from the router originating the LSA to LSA destination
Location of the LSA
seq#: 80000001
chksum: 0xfcaf
Options: (DC)
Net mask:255.255.0.0
Tos 0 metric: 1
Forwarding Address: 0.0.0.0
Tag: 1
Table 14-8 Description on the fields of the display ospf lsdb ase command
Field
type ls id adv rtr ls age len seq# chksum
Description
Type of the LSA
Link state ID of the LSA
Router ID of the router originating the LSA
Age of the LSA in seconds
Length of the LSA
Sequence number of the LSA
Checksum of the LSA
14-22
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Options
Net mask
E type
Forwarding Address
Options of the LSA
Network mask
Type of external route
Forwarding address
Tag Tag
14.1.21 display ospf nexthop
Syntax
display ospf [ process-id ] nexthop
View
Any view
Parameter
Description
Use the display ospf nexthop command to view the information about the next-hop.
Example
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
Display the OSPF next-hop information.
<SW8800> display ospf nexthop
OSPF Process 1 with Router ID 1.1.1.1
Address Type Refcount Intf Addr Intf Name
---------------------------------------------------------------------
Vlan-interface2
202.38.160.2 Neighbor 1
Table 14-9 Description on the fields of the display ospf nexthop command
Field
Address
Type
Refcount
Intf Addr
Intf Name
Address of next hop
Type of next hop
Description
Reference count of the next hop, i.e., number of routes using this address as the next hop
IP address of the outgoing interface to the next hop
The outgoing interface to the next hop
14-23
3Com Switch 8800 Command Reference Guide
14.1.22 display ospf peer
Chapter 14 OSPF Configuration Commands
Syntax
display ospf [ process-id ] peer [ brief ]
View
Any view
Parameter
process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.
Description
Use the display ospf peer command to view information about OSPF peers.
Use the display ospf peer brief command to view the brief information of every peer in
OSPF, mainly the numbers of peers at all states in every area.
Example
View information about OSPF peers.
<SW8800> display ospf peer
OSPF Process 1 with Router ID 1.1.1.1
Neighbors
Area 0.0.0.0 interface 10.153.17.88(Vlan-interface1)'s neighbor(s)
RouterID: 2.2.2.2 Address: 10.153.17.89
State: Full Mode: Nbr is Master Priority: 1
DR: 10.153.17.89 BDR: 10.153.17.88
Dead timer expires in 31s
Neighbor has been up for 01:14:14
Table 14-10 Description on the fields of the display ospf peer command
RouterID
Address
State
Mode
Priority
DR
Field Description
Router ID of neighbor router
Address of the interface, through which neighbor router communicates with the router
State of adjacency relation
Master/Slave mode formed by negotiation in exchanging DD packet
Priority of the neighbor in DR/BDR election
IP address of the interface of elected DR
14-24
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
BDR
Dead timer expires in 31s
IP address of the interface of elected BDR
Remaining time before the neighbor is considered dead.
Neighbor has been up for
01:14:14
Time of neighbor connection
View the brief information of every peer.
<SW8800> display ospf peer brief
OSPF Process 1 with Router ID 1.1.1.1
Neighbor Statistics
Area ID Down Attempt Init 2-Way ExStart Exchange Loading Full Total
0.0.0.0 0 0 0 0 0 0 0 1 1
0.0.0.1 0 0 0 0 0 0 0 1 1
Total 0 0 0 0 0 0 0 2 2
Table 14-11 Description on the fields of the display ospf peer brief command
Field
Area ID
Down
Attempt
Description
Area ID
Initial state for OSPF to establish neighbor relation, which indicates that OSPF router does not receive any message from a certain neighbor router within a period of time
It is enabled in NBMA environment, such as Frame Relay, X.25 or
ATM. It indicates that OSPF router does not receive the message from a certain neighbor router within a period of time, but still attempts to send Hello packet to the adjacent routers for their communications with a lower frequency.
Init
2-Way
Loading
Full
It indicates that OSPF router has received Hello packet from a neighbor router, but its IP address is not contained in the Hello packet.
Therefore, a two-way communication between them has not been established.
It indicates that a two-way communication between OSPF router and neighbor router has been established. DR and BDR can be selected in this state (or higher state).
ExStart
In this state, the router determines the sequence number of initial database description (DD) packet used for data exchange, so that it can obtain the latest link state information
Exchange
It indicates that OSPF router sends DD packet to its neighbor routers to exchange link state information
In this state, OSPF router requests neighbor routers based on the updated link state information from neighbor routers and its expired information, and waits for response from neighbor routers
It indicates that database synchronization between the routers that have established neighbor relation has been completed, and their link state databases have been consistent
14-25
3Com Switch 8800 Command Reference Guide
14.1.23 display ospf request-queue
Chapter 14 OSPF Configuration Commands
Syntax
display ospf [ process-id ] request-queue
View
Any view
Parameter
Description
Use the display ospf request-queue command to view the information about the
OSPF request-queue.
Example
process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.
Display the information of OSPF request-queue.
<SW8800> display ospf request-queue
The Router's Neighbors is
RouterID: 1.1.1.1 Address: 1.1.1.1
Interface: 1.1.1.3 Area: 0.0.0.0
LSID:1.1.1.3 AdvRouter:1.1.1.3 Sequence:80000017 Age:35
Table 14-12 Description on the fields of the display ospf request-queue command
Field
RouterID
Address
Sequence
Age
Description
Router ID of neighbor router
Address of the interface, through which neighbor routers communicate with the router
Interface
Area
Address of the interface on the network segment
Number of an OSPF area
LSID:1.1.1.3 Link State ID of the LSA
AdvRouter Router ID of the router originating the LSA
Sequence number of the LSA, used to discover old and repeated
LSAs
Age in seconds of the LSA
14-26
3Com Switch 8800 Command Reference Guide
14.1.24 display ospf retrans-queue
Chapter 14 OSPF Configuration Commands
Syntax
display ospf [ process-id ] retrans-queue
View
Any view
Parameter
Description
Use the display ospf retrans-queue command to view information about the OSPF retransmission queue.
Example
process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.
Display information about the OSPF retransmission queue.
<SW8800> display ospf retrans-queue
OSPF Process 200 with Router ID 103.160.1.1
Retransmit List
The Router's Neighbors is
RouterID: 162.162.162.162 Address: 103.169.2.2
Interface: 103.169.2.5 Area: 0.0.0.1
Retrans list:
Type: ASE LSID:129.11.77.0 AdvRouter:103.160.1.1
Type: ASE LSID:129.11.108.0 AdvRouter:103.160.1.1
Table 14-13 Description on the fields of the display ospf retrans-queue command
Field
RouterID Router ID of neighbor router
Description
Address
Address of the interface, through which neighbor routers communicate with the router
Interface
Area
Type
LSID
Address of the interface on the network segment
Number of an OSPF area
Type of the LSA
Link State ID of the LSA
AdvRouter Router ID of the router originating the LSA
14-27
3Com Switch 8800 Command Reference Guide
14.1.25 display ospf routing
Chapter 14 OSPF Configuration Commands
Syntax
display ospf [ process-id ] routing
View
Any view
Parameter
Description
Use the display ospf routing command to view information about the OSPF routing table.
Example
process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.
View the OSPF routing table.
<SW8800> display ospf routing
OSPF Process 1 with Router ID 1.1.1.1
Routing Tables
Routing for Network
Destination Cost Type NextHop AdvRouter Area
10.110.0.0/16 1 Net 10.110.10.1 1.1.1.1 0
10.10.0.0/16 1 Stub 10.10.0.1 3.3.3.3 0
Total Nets: 2
Intra Area: 2 Inter Area: 0 ASE: 0 NSSA: 0
Table 14-14 Description on the fields of the display ospf routing command
Field Description
Cost
Type
NextHop
AdvRouter
Intra Area
Inter Area
ASE
Cost of route
Type of route
Next hop of route
Router ID of the router advertising the route
Number of intra-area routes
Number of inter-area routes
Number of external routes
14-28
3Com Switch 8800 Command Reference Guide
NSSA
14.1.26 display ospf vlink
Chapter 14 OSPF Configuration Commands
Number of NSSA routes
Syntax
display ospf [ process-id ] vlink
View
Any view
Parameter
Description
Use the display ospf vlink command to view the information about OSPF virtual links.
Example
process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.
View OSPF virtual links information.
<SW8800> display ospf vlink
OSPF Process 1 with Router ID 1.1.1.1
Virtual Links
Virtual-link Neighbor-id -> 2.2.2.2, State: Full
Cost: 0 State: Full Type: Virtual
Transit Area: 0.0.0.2
Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1
Table 14-15 Description on the fields of the display ospf vlink command
Field Description
Virtual-link Neighbor-id Router ID of virtual-link neighbor router
State State
Interface IP address the interface on the virtual link
Cost
Type
Transit Area
Timers
Route cost of the interface
Type: virtual link
ID of transit area that the virtual link passes, and it cannot be backbone area, STUB area and NSSA area
OSPF timers, defining as follows:
Hello Interval of hello packet
14-29
3Com Switch 8800 Command Reference Guide
Transmit Delay
Chapter 14 OSPF Configuration Commands
Dead
Poll
Interval of dead neighbors
Interval of poll
Retransmit
Interval for retransmitting LSA on the interface
Delay time of transmitting LSA on the interface
14.1.27 filter-policy export
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]
undo filter-policy { acl-number | ip-prefix ip-prefix-name} export [ routing-protocol ]
View
OSPF view
Parameter
acl-number: Number of a basic or advanced access control list.
ip-prefix-name: Name of the address prefix list used for filtering the destination addresses in routing information.
routing-protocol: Protocol advertising the routing information, including direct, isis,
bgp, rip and static at present.
Description
Use the filter-policy export command to configure the rule used by OSPF to filter advertised routing information.
Use the undo filter-policy export command to cancel the filtering rules that have been set.
By default, no filtering of the advertised routing information is performed.
In some cases, it may be required that only the routing information meeting some conditions can be advertised. Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be advertised.
This command takes effect on the routes imported by OSPF using the import-route command. If the routing-protocol argument is specified, only the routes imported from this specified protocol are filtered. If the routing-protocol argument is not specified, all imported routes are filtered.
Related command: acl, ip ip-prefix.
14-30
3Com Switch 8800 Command Reference Guide
Example
Chapter 14 OSPF Configuration Commands
Configure OSPF to advertise only the routing information permitted by acl 2000.
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule permit source 11.0.0.0 0.255.255.255
[SW8800-acl-basic-2000] rule deny source any
[SW8800-ospf-1] filter-policy 2000 export
14.1.28 filter-policy import
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name | gateway ip-prefix-name } import
undo filter-policy { acl-number | ip-prefix ip-prefix-name | gateway ip-prefix-name }
import
View
OSPF view
Parameter
acl-number: Number of a basic or advanced access control list used for filtering the destination addresses of the routing information.
ip-prefix-name: Name of the address prefix list used for filtering the destination addresses of the routing information.
gateway ip-prefix-name: Name of the address prefix list used for filtering the addresses of the neighboring routers advertising the routing information.
Description
Use the filter-policy import command to configure the OSPF rules of filtering the routing information received.
Use the undo filter-policy import command to cancel the filtering of the routing information received.
By default, no filtering of the received routing information is performed.
In some cases, it may be required that only the routing information meeting some conditions can be received. Then, the filter-policy command can be used to set the filtering conditions for the routing information to be received. Only the routing information passing the filtration can be received.
The filter-policy import command is used to filter the routes calculated by OSPF. Only the routes that pass the filter are added into the routing table. The command can filter the routes by next hop or by destination address.
Because OSPF is a link state-based dynamic routing protocol, its routing information is hidden in LSAs. OSPF, however, cannot filter advertised and received LSAs.
14-31
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Compared with the case with vector-based routing protocols, the use of this command is rather limited with OSPF.
Example
Filter the received routing information according to the rule defined by the access control list 2000.
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule permit source 20.0.0.0 0.255.255.255
[SW8800-acl-basic-2000] rule deny source any
[SW8800-ospf-1] filter-policy 2000 import
14.1.29 import-route
Syntax
import-route protocol [ cost value | type value | tag value | route-policy
route-policy-name ]*
undo import-route protocol
View
OSPF view
Parameter
protocol: Specifies the source routing protocol that can be imported. At present, it includes direct, rip, isis, bgp, ospf-ase, ospf-nssa and static.
cost value: Specifies the cost of imported route.
type value: Specifies the cost type of imported external routes. The value ranges from
1 to 2.
tag value: Specifies the value of tag for imported external routes.
route-policy route-policy-name: Configures only to import the routes matching the specified Route-policy.
Description
Use the import-route command to import routes from another routing protocol. Use the undo import-route command to disable OSPF to import routes from the specified routing protocol.
By default, the routing information of other protocols is not imported.
14-32
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
Note:
You are recommended to configure the route type, cost and tag together in one command. Otherwise, the new configuration overwrites the old one.
Example
Specify an imported RIP route as the route of type 2, with the route tag as 33 and the route cost as 50.
[SW8800-ospf-1] import-route rip type 2 tag 33 cost 50
14.1.30 network
Syntax
network ip-address ip-mask
undo network ip-address ip-mask
View
OSPF Area view
Parameter
Description
Use the network command to configure the interfaces running OSPF.
Use the undo network command to cancel the interfaces running OSPF.
By default, interfaces do not belong to any OSPF area.
With the two parameters, ip-address and ip-mask, one or more interfaces can be configured as an area. To run the OSPF protocol on one interface, the main IP address of this interface must belong to the network segment specified by this command. If only the secondary IP address of the interface is in the range of the network segment specified by this command, this interface will not run OSPF.
Related command: ospf.
Example
ip-address: Address of the network segment where the interface resides.
ip-mask: IP address wildcard (similar to the complement of the IP address mask), which also supports IP address mask input.
Specify the interfaces whose main IP addresses are in the segment range of
10.110.36.0 to run OSPF and specify the number of the OSPF area (where these interfaces are located) as 6.
14-33
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
[SW8800-ospf-1] area 6
[SW8800-ospf-1-area-0.0.0.6] network 10.110.36.0.0 0.0.0.255
14.1.31 nssa
Syntax
nssa [ default-route-advertise ] [ no-import-route ] [ no-summary ]*
undo nssa
View
OSPF area view
Parameter
Description
Use the nssa command to configure the type of an OSPF area as a NSSA area.
Use the undo nssa command to cancel the function.
By default, NSSA area is not configured.
For all the routers connected to the NSSA area, the command nssa must be used to configure the area as the NSSA attribute.
The default-route-advertise keyword is used to generate default type-7 LSA. No matter whether there is route 0.0.0.0 in routing table on ABR, type-7 LSA default route will be generated always. Only when there is route 0.0.0.0 in routing table on ASBR, will type-7 LSA default route be generated.
On ASBR, the no-import-route keyword enables the external route imported by OSPF through import-route command not to be advertised to NSSA area.
Example
default-route-advertise: Imports default route to NSSA area.
no-import-route: Configures not to import route to NSSA area.
no-summary: ABR is disabled to transmit summary_net LSAs to the NSSA area.
Configure area 1 as a NSSA area.
[SW8800-ospf-1] area 1
[SW8800-ospf-1-area-0.0.0.1] network 36.0.0.0 0.255.255.255
[SW8800-ospf-1-area-0.0.0.1] nssa
14.1.32 ospf
Syntax
ospf [ process-id [ router-id router-id | vpn-instance vpn-instance-name] ]
14-34
3Com Switch 8800 Command Reference Guide
undo ospf [ process-id ]
View
System view
Chapter 14 OSPF Configuration Commands
Parameter
Description
Use the ospf command to enable the OSPF protocol.
Use the undo ospf command to disable the OSPF protocol.
After starting OSPF protocol, the user can make the corresponding configuration in the
OSPF protocol view.
By default, the system does not run the OSPF protocol.
Related command: network.
Example
process-id: ID of an OSPF process, in the range 1 to 65,535. By default, the process ID is 1. process-id is locally significant.
router-id: Router ID in dotted decimal format for the specified OSPF process.
vpn-instance: Specifies VPN instance parameter.
vpn-instance-name: VPN instance name.
Enable the running of the OSPF protocol.
[SW8800] router id 10.110.1.8
[SW8800] ospf
[SW8800-ospf-1]
Enable the running of the OSPF protocol with process ID specified as 120.
[SW8800] router id 10.110.1.8
[SW8800] ospf 120
[SW8800-ospf-120]
Enable the OSPF process 120, bind the VPN instance and run the OSPF protocol.
[SW8800] ospf 120 router id 9.9.9.9 vpn-instance vpn9
[SW8800-ospf-120]
14.1.33 ospf authentication-mode
Syntax
ospf authentication-mode { simple password | md5 key-id key }
undo ospf authentication-mode { simple | md5 }
14-35
3Com Switch 8800 Command Reference Guide
View
Interface view
Chapter 14 OSPF Configuration Commands
Parameter
simple password: Enables plain text authentication and specifies a password not exceeding 8 characters.
key-id: ID of the authentication key in MD5 authentication mode in the range from 1 to
255.
key: MD5 authentication key. If it is input in a plain text form, MD5 key is a character string in the range 1 to 16 characters. It will be displayed in a cipher text form in a length of 24 characters when the display current-configuration command is executed.
Inputting the MD5 key in a cipher text form with 24 characters is also supported.
Description
Use the ospf authentication-mode command to configure the authentication mode and key between adjacent routers.
Use the undo ospf authentication-mode command to cancel the authentication key that has been set.
By default, the interface does not authenticate OSPF packets.
The passwords for authentication keys of the routers on the same network segment must be identical. In addition, using the authentication-mode command, you can set the authentication type of the area so as to validate the configuration.
Related command: authentication-mode.
Example
Set the area 1 where the network segment 131.119.0.0 of Interface Vlan-interface 1 is located to support MD5 cipher text authentication. The authentication key identifier is set to 15 and the authentication key is 3Com.
[SW8800-ospf-1] area 1
[SW8800-ospf-1-area-0.0.0.1] network 131.119.0.0 0.0.255.255
[SW8800-ospf-1-area-0.0.0.1] authentication-mode md5
[SW8800-Vlan-interface1] ospf authentication-mode md5 15 3Com
14.1.34 ospf cost
Syntax
ospf cost value
undo ospf cost
14-36
3Com Switch 8800 Command Reference Guide
View
Interface view
Chapter 14 OSPF Configuration Commands
Parameter
value: Cost for running OSPF protocol, ranging from 1 to 65,535.
Description
Use the ospf cost command to configure different message sending costs so as to send messages from different interfaces.
Use the undo ospf cost command to restore the default cost.
For a Switch 8800, the default cost for running OSPF protocol on the VLAN interface is
10.
Example
Specify the cost spent when an interface runs OSPF as 33.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] ospf cost 33
14.1.35 ospf dr-priority
Syntax
ospf dr-priority value
undo ospf dr-priority
View
Interface view
Parameter
value: Interface priority for electing the "designated router", ranging from 0 to 255. The default value is 1.
Description
Use the ospf dr-priority command to configure the priority for electing the "designated router" on an interface.
Use the undo ospf dr-priority command to restore the default value.
The priority of the interface determines the qualification of the interface when the
"designated router" is elected. The interface with higher priority will be considered first when vote collision occurs.
14-37
3Com Switch 8800 Command Reference Guide
Example
Chapter 14 OSPF Configuration Commands
Set the priority of the interface Vlan-interface 10 to 8, when electing the DR.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] ospf dr-priority 8
14.1.36 ospf mib-binding
Syntax
ospf mib-binding process-id
undo ospf mib-binding
View
System view
Parameter
process-id: ID of an OSPF process, in the range 1 to 65,535. If no OSPF process is specified, the default process ID 1 applies.
Description
Use the ospf mib-binding command to bind the MIB operation to the specified OSPF process.
Use the undo ospf mib-binding command to restore the default.
When OSPF protocol enables the first process, it always binds MIB operation to this process. You can use this command to bind MIB operation to another OSPF process.
Execute the undo ospf mib-binding command if you want to cancel the setting. OSPF will automatically re-bind MIB operation to the first process that it enables.
By default, MIB operation is bound to the first enabled OSPF process.
Example
Bind MIB operation to OSPF process 100.
[SW8800] ospf mib-binding 100
Bind MIB operation to OSPF process 200.
[SW8800] ospf mib-binding 200
Cancel the binding of MIB operation.
[SW8800] undo ospf mib-binding
14-38
3Com Switch 8800 Command Reference Guide
14.1.37 ospf mtu-enable
Chapter 14 OSPF Configuration Commands
Syntax
View
Interface view
Parameter
None
Description
Use the ospf mtu-enable command to enable the interface to write MTU value when sending DD packets.
Use the undo ospf mtu-enable command to restore the default settings.
By default, The MTU value is 0 when the interface sends DD packets, i.e. the actual
MTU value of the interface is not written.
Database Description (DD) packets are used to describe its own LSDB when the router running OSPF protocol is synchronizing the database.
The default MTU value of DD packet is 0. With this command, the specified interface can be set manually to write the MTU value area in DD packets when sending DD packets, namely, the actual MTU value of the interface is written in.
Example
ospf mtu-enable
undo ospf mtu-enable
Set interface Vlan-interface 3 to write MTU value field when sending DD packets.
[SW8800] interface Vlan-interface 3
[SW8800-Vlan-interface3] ospf mtu-enable
14.1.38 ospf network-type
Syntax
ospf network-type { broadcast | nbma | p2mp | p2p }
undo ospf network-type
View
Interface view
Parameter
broadcast: Changes the interface network type to broadcast.
14-39
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
nbma: Changes the interface network type to NBMA.
p2mp: Changes the interface network type to p2mp.
p2p: Changes the interface network type to point-to-point.
Description
Use the ospf network-type command to configure the network type of OSPF interface.
Use the undo ospf network-type command to restore the default network type of the
OSPF interface.
OSPF divides networks into four types by link layer protocol: z z z z
Broadcast: If Ethernet or FDDI is adopted, OSPF defaults the network type to broadcast.
Non-Broadcast Muli-access (nbma): If Frame Relay, ATM, HDLC or X.25 is adopted, OSPF defaults the network type to NBMA.
Point-to-Multipoint (p2mp): OSPF will not default the network type of any link layer protocol to p2mp. The general undertaking is to change a partially connected
NBMA network to p2mp network if the NBMA network is not fully-meshed.
Point-to-point (p2p): If PPP or LAPB is adopted, OSPF defaults the network type to p2p.
Change the interface type to NBMA if the router does not support multicast addresses on the broadcast network. You can also change the interface type NBMA to broadcast.
A non-broadcast network with the multi-access capability is considered an NBMA network only when it is fully meshed, meaning any two routers on it have a direct virtual circuit between them. If the network is not fully meshed, you must change the network type of the interface connected to it to p2mp. This allows two routers that are not directly reachable to exchange routing information through a router that is directly reachable for both of them.
Change the interface type to p2p if the router has only one peer on the NBMA network.
Note: When the network type of an interface is NBMA or it is changed to NBMA manually, the peer command must be used to configure the neighboring point.
Related command: ospf dr-priority.
Example
Set the interface Vlan-interface 10 to NBMA type.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] ospf network-type nbma
14.1.39 ospf timer dead
Syntax
ospf timer dead { seconds | minimal multi-hello packets }
14-40
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
undo ospf timer dead [ minimal multi-hello ]
View
Interface view
Parameter
seconds: Dead interval of the OSPF neighbor. It is in seconds and ranges from 1 to
65,535.
minimal: Specifies the port to run fast hello function.
multi-hello: Sends multiple hello packets.
packets: Number of hello packets sent within one second.
Description
Use the ospf timer dead command to configure the dead interval of the OSPF peer.
Use the undo ospf timer dead command to restore the default value of the dead interval of the peer.
By default, the dead interval for the OSPF peers of p2p and broadcast interfaces are
40 seconds, and that for those of p2mp and nbma interfaces is 120 seconds.
The dead of OSPF peers means that within this interval, if no Hello message is received from the peer, the peer will be considered to be invalid. The value of dead
seconds should be at least four times that of the Hello seconds. The dead seconds for the routers on the same network segment must be identical.
Related command: ospf timer hello.
Use the ospf timer dead minimal multi-hello packets command to set fast hello function on the port. The fixed dead interval is 1. The packets argument is the specified number of sent hello packets.
Example
Set the peer dead timer on the interface Vlan-interface 10 to 80 seconds.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] ospf timer dead 80
Configure the number of hello packets sent on the port Vlan-interface 10 within three seconds.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] ospf timer dead minimal multi-hello 3
14.1.40 ospf timer hello
Syntax
ospf timer hello seconds
14-41
3Com Switch 8800 Command Reference Guide
undo ospf timer hello
View
Chapter 14 OSPF Configuration Commands
Interface view
Parameter
seconds: Interval in seconds for an interface to transmit hello packet. It ranges from 1 to
255.
Description
Use the ospf timer hello command to configure the interval for transmitting Hello messages on an interface.
Use the undo ospf timer hello command to restore the interval to the default value.
By default, the interval is 10 seconds for an interface of p2p or broadcast type to transmit Hello messages, and 30 seconds for an interface of nbma or p2mp type.
Related command: ospf timer dead.
Example
Configure the interval for transmitting Hello messages on the interface Vlan-interface
10 to 20 seconds.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] ospf timer hello 20
14.1.41 ospf timer poll
Syntax
ospf timer poll seconds
undo ospf timer poll
View
Interface view
Parameter
seconds: Specifies the poll Hello interval, ranging from 1 to 65,535 and measured in seconds. The default value is 120 seconds.
Description
Use the ospf timer poll command to configure the poll Hello packet interval on an
NBMA or p2mp network.
Use the undo ospf timer poll command to restore the default poll interval.
14-42
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
On an NBMA or p2mp network, if a neighbor is invalid, the Hello packet will be transmitted regularly according to the poll seconds. You can configure the poll
seconds to specify how often the interface transmits Hello packet before it establishes adjacency with the adjacent router. Poll seconds should be no less than three times of
Hello.
Example
Configure to transmit poll Hello packets from interface Vlan-interface 20 every 130 seconds.
[SW8800-Vlan-interface20] ospf timer poll 130
14.1.42 ospf timer retransmit
Syntax
ospf timer retransmit interval
undo ospf timer retransmit
View
Interface view
Parameter
interval: Interval in seconds for re-transmitting LSA on an interface. It ranges from 1 to
65,535. The default value is 5 seconds.
Description
Use the ospf timer retransmit command to configure the interval for LSA re-transmitting on an interface.
Use the undo ospf timer retransmit command to restore the default interval value for
LSA re-transmitting on the interface.
If a router running OSPF transmits a "link state advertisement" (LSA) to the peer, it needs to wait for the acknowledgement packet from the peer. If no acknowledgement is received from the peer within the LSA retransmit, this LSA will be re-transmitted. This command can change the interval of re-transmitting LSA. However, according to
RFC2328, the LSA retransmit between adjacent routers should not be set too short.
Otherwise, unexpected re-transmission will be caused.
Example
Specify the retransmit for LSA transmitting between the interface Vlan-interface 10 and the adjacent routers to 12 seconds.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] ospf timer retransmit 12
14-43
3Com Switch 8800 Command Reference Guide
14.1.43 ospf trans-delay
Chapter 14 OSPF Configuration Commands
Syntax
ospf trans-delay seconds
undo ospf trans-delay
View
Interface view
Parameter
seconds: Transmitting delay of LSA on an interface. It ranges from 1 to 3600. By default, the value is 1 second.
Description
Use the ospf trans-delay command to configure the LSA transmitting delay on an interface.
Use the undo ospf trans-delay command to restore the default value of the LSA transmitting delay on an interface.
LSA will age in the "link state database" (LSDB) of the router as time goes by (add 1 for every second), but it will not age during network transmission. Therefore, it is necessary to add a period of time set by this command to the aging time of LSA before transmitting it.
Example
Specify the trans-delay of transmitting LSA on the interface Vlan-interface 10 as 3 seconds.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] ospf trans-delay 3
14.1.44 preference
Syntax
preference [ ase ] value
undo preference [ ase ]
View
Parameter
OSPF view
value: OSPF protocol route preference, ranging from 1 to 255.
ase: Indicates the preference of an imported external route of the AS.
14-44
3Com Switch 8800 Command Reference Guide
Description
Chapter 14 OSPF Configuration Commands
Use the preference command to configure the preference of an OSPF protocol route.
Use the undo preference command to restore the default value of the OSPF protocol route.
By default, the preference of an OSPF protocol internal route is 10 and the preference of an external route is 150.
Because multiple dynamic routing protocols could be running on a router, there is the problem of routing information sharing among routing protocols and selection.
Therefore, a default preference is specified for each routing protocol. When a route is identified by different protocols, the protocol with a high preference will play a decisive role.
Example
Specify the preference of an imported external route of the AS as 160.
[SW8800-ospf-1] preference ase 160
14.1.45 reset ospf
Syntax
reset ospf [ statistics ] { all | process-id }
View
User view
Parameter
statistics: Resets OSPF statistics.
all: Resets all OSPF processes.
process-id: ID of an OSPF process. If no OSPF process is specified, all OSPF processes are reset.
Description
Use the reset ospf all command to reset all OSPF processes.
Use the reset ospf process-id command to reset the corresponding OSPF process. z z z z
The following are the benefits of the reset ospf all command:
Clear invalid LSA immediately without waiting for LSA timeout.
If the Router ID changes, a new Router ID will take effect by executing the command.
Re-elect DR and BDR conveniently.
OSPF configuration before the restart will not lose.
14-45
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
The system will require the user to confirm whether to re-enable the OSPF protocol after execution of the command.
Example
Reset all the OSPF processes.
<SW8800> reset ospf all
Reset OSPF process 200.
<SW8800> reset ospf 200
14.1.46 router id
Syntax
router id router-id
undo router id
View
System view
Parameter
router-id: Router ID that is a 32-bit unsigned integer.
Description
Use the router id command to configure the ID of a router running the OSPF protocol.
Use the undo router id command to cancel the router ID that has been set.
By default, if LoopBack interface addresses exist, the system chooses the LoopBack address with the greatest IP address value as the router ID; if no LoopBack interface is configured, then the address of the physical interface with the greatest IP address value will be the router ID.
Router ID is a 32-bit unsigned integer that uniquely identifies a router in an OSPF autonomous system. The user can specify the ID for a router. If the user doesn’t specify router ID, the router will automatically select one from configured IP address as the ID of this router. If no IP address is configured for any interface of the router, the router ID must be configured in OSPF view. Otherwise, OSPF protocol cannot be enabled.
When the router ID is configured manually, the IDs of any two routers cannot be same in the autonomous system. So, the IP address of certain interface might as well be selected as the ID of this router.
Note:
The modified router ID will not be valid unless OSPF is re-enabled.
14-46
3Com Switch 8800 Command Reference Guide
Related command: ospf.
Example
Set the router ID to 10.1.1.3.
[SW8800] router id 10.1.1.3
Chapter 14 OSPF Configuration Commands
14.1.47 silent-interface
Syntax
silent-interface silent-interface-type silent-interface-number
undo silent-interface silent-interface-type silent-interface-number
View
OSPF view
Parameter
silent-interface-type: Specifies the interface type
silent-interface-number: Specifies the interface number.
Description
Use the silent-interface command to disable an interface to transmit OSPF packets.
Use the undo silent-interface command to restore the default setting.
By default, the interface is enabled to transmit OSPF packets.
You can use this command to disable an interface to transmit OSPF packets, so as to prevent the router on some network from receiving the OSPF routing information. On a switch, this command can disable/enable a VLAN interface to send OSPF packets.
Example
Disable interface Vlan-interface 20 to transmit OSPF packets.
[SW8800-ospf-1] silent-interface Vlan-interface 20
14.1.48 sham-link
Syntax
sham-link source-ip destination-ip dead minimal multi-hello packets
undo sham-link source-ip destination-ip
View
OSPF area view
14-47
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 14 OSPF Configuration Commands
sham-link: Sham-link link.
source-ip: Source IP address.
destination-ip: Destination IP address.
dead: Dead interval time.
minimal: Sends multiple hello packets within 1 second. The fixed dead interval is 1 second.
multi-hello: Sends multiple hello packets.
packets: Number of sent hello packets, in the range of 3 to 10.
Description
Use the sham-link command to run fast hello function on the sham-link link, that is, to specify multiple fast hello packets to be sent within one second. The default dead interval time is one second.
Example
Specify the sham-link link 1.1.1.1 2.2.2.2 to run fast hello function. The dead interval time is one second. Five hello packets are sent within one second.
[SW8800-ospf-1] area 0.0.0.0
[SW8800-ospf-1-area-0.0.0.0] sham-link 1.1.1.1 2.2.2.2 dead minimal multi-hello 5
14.1.49 snmp-agent trap enable ospf
Syntax
snmp-agent trap enable ospf [ process-id ] [ ifstatechange | virifstatechange |
nbrstatechange | virnbrstatechange | ifcfgerror | virifcfgerror | ifauthfail |
virifauthfail | ifrxbadpkt | virifrxbadpkt | txretransmit | viriftxretransmit |
originatelsa | maxagelsa | lsdboverflow | lsdbapproachoverflow ]
undo snmp-agent trap enable ospf [ process-id ] [ ifstatechange | virifstatechange
| nbrstatechange | virnbrstatechange | ifcfgerror | virifcfgerror | ifauthfail |
virifauthfail | ifrxbadpkt | virifrxbadpkt | txretransmit | viriftxretransmit |
originatelsa | maxagelsa | lsdboverflow | lsdbapproachoverflow ]
View
Parameter
System view
process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.
14-48
3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands
ifstatechange, virifstatechange, nbrstatechange, virnbrstatechange, ifcfgerror,
virifcfgerror, ifauthfail, virifauthfail, ifrxbadpkt, virifrxbadpkt, txretransmit,
viriftxretransmit, originatelsa, maxagelsa, lsdboverflow, lsdbapproachoverflow:
Types of TRAP packets that the switch produces in case of OSPF anomalies.
Description
Use the snmp-agent trap enable ospf command to enable the OSPF TRAP function.
Use the undo snmp-agent trap enable ospf command to disable the OSPF TRAP function.
This command cannot be applied to the OSPF processes that are started after the command is executed.
By default, the switch does not send TRAP packets in case of OSPF anomalies.
For detailed configuration of SNMP TRAP, refer to the module “System Management" in this manual.
Example
Enable the TRAP function for OSPF process 100.
<SW8800> snmp-agent trap enable ospf 100
14.1.50 spf-schedule-interval
Syntax
spf-schedule-interval interval
undo spf-schedule-interval
View
OSPF view
Parameter
interval: SPF calculation interval of OSPF, which is in the range of 1 to 10 and is measured in seconds. The default value is five seconds.
Description
Use the spf-schedule-interval command to configure the route calculation interval of
OSPF.
Use the undo spf-schedule-interval command to restore the default setting.
According to the Link State Database (LSDB), the router running OSPF can calculate the shortest path tree taking itself as the root and determine the next hop to the destination network according to the shortest path tree. By adjusting SPF calculation interval, frequent network change can be restrained, which may lead to excessive bandwidth and router resource consumption.
14-49
3Com Switch 8800 Command Reference Guide
Example
Chapter 14 OSPF Configuration Commands
Set the OSPF route calculation interval to six seconds.
[SW8800-ospf-1] spf-schedule-interval 6
14.1.51 stub
Syntax
stub [ no-summary ]
undo stub
View
OSPF area view
Parameter
no-summary: ABR is disabled to transmit Summary LSAs to the STUB area.
Description
Use the stub command to configure the type of an OSPF area as “stub”.
Use the undo stub command to cancel the settings.
By default, no area is set to be the STUB area.
If the router is an ABR, it will send a default route to the connected stub area. Using the
default-cost command, you can configure the default route cost.
In addition, on an ABR, you can configure the no-summary argument in the stub command to prevent type-3 LSAs from entering the stub area connected to this ABR.
Related command: default-cost.
Example
Set the type of OSPF area 1 to the STUB area.
[SW8800-ospf-1] area 1
[SW8800-ospf-1-area-0.0.0.1] stub
14.1.52 vlink-peer
Syntax
vlink-peer router-id [ dead { seconds | minimal multi-hello packets } | retransmit
seconds | trans-delay seconds | hello seconds | simple password | md5 keyid key ]*
undo vlink-peer router-id
View
OSPF area view
14-50
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 14 OSPF Configuration Commands
route-id: Router ID of virtual link peer.
dead seconds: Specifies the interval of death timer. It ranges from 1 to 8192 seconds.
This value must equal the dead seconds of the router virtually linked to it and must be at least four times of the hello seconds. The default value is 40 seconds.
dead minimal multi-hello packets: Specifies the virtual link to run fast hello function.
The default dead is 1 second. The packets argument refers to the number of hello packets sent within 1 second, in the range of 3 to 10.
retransmit seconds: Specifies the interval for re-transmitting the LSA packets on an interface. It ranges from 1 to 8192 seconds. The default value is 5 seconds.
trans-delay seconds: Specifies the interval for delaying transmitting LSA packets on an interface. It ranges from 1 to 8192 seconds. By default, the value is 1 second.
hello seconds: Specifies the interval for sending Hello packets on an interface. It ranges from 1 to 8,192 (in seconds). This value must equal the hello seconds value of the router virtually linked to the interface. By default, the value is 10 seconds.
simple password: Specifies the simple text authentication password, not exceeding 8 characters, of the interface. This value must equal the authentication key of the virtually linked peer.
keyid: Specifies the MD5 authentication key ID. Its value ranges from 1 to 255. It must be equal to the authentication key ID of the virtually linked peer.
key: Specifies the MD5 authentication key. If it is input in a plain text form, MD5 key is a character string in the range 1 to 16 characters. It will be displayed in a cipher text form in a length of 24 characters when the display current-configuration command is executed. Inputting the MD5 key in a cipher text form with 24 characters is also supported.
Description
Use the vlink-peer command to create and configure a virtual link.
Use the undo vlink-peer command to cancel an existing virtual link.
According to RFC2328, the OSPF area should be connected with the backbone network. You can use the vlink-peer command to keep the connectivity. Virtual link can be regarded as a common interface that uses OSPF so that you can easily understand why to configure the parameters such as hello, retransmit, and trans-delay on it.
One thing should be mentioned. When configuring virtual link authentication, the
authentication-mode command is used to set the authentication mode as MD5 cipher text or simple text on the backbone network.
Related command: authentication-mode, display ospf.
14-51
3Com Switch 8800 Command Reference Guide
Example
Chapter 14 OSPF Configuration Commands
Create a virtual link to 10.110.0.3 and use the MD5 cipher authentication mode.
[SW8800-ospf-1] area 10.0.0.0
[SW8800-ospf-1-area-10.0.0.0] vlink-peer 10.110.0.3 md5 3 345
Specify this virtual link to run fast hello function and send five hello packets.
[SW8800-ospf-1-area-10.0.0.0] vlink-peer 10.110.0.3 dead minimal multi-hello
5
14-52
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
Chapter 15 Integrated IS-IS Configuration
Commands
Note:
When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch
8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.
For the configuration of VPN instance, refer to the MPLS module in the 3Com Switch
8800 Configuration Guide.
15.1 Integrated IS-IS Configuration Commands
15.1.1 area-authentication-mode
Syntax
area-authentication-mode { simple | md5 } password [ ip | osi ]
undo area-authentication-mode { simple | md5 } [ ip | osi ]
View
IS-IS view
Parameter
simple: Configures to transmit the password in simple text.
md5: Configures to transmit the password encrypted with MD5 algorithm.
password: Configures a password. If simple authentication is used, the password must be a simple-text password. If MD5 authentication is used, the password can be a simple-text or a cipher-text password. A simple-text password can be a character string with no more than 16 characters, for example, 3Com918. Note that the simple-text password defined for MD5 authentication is displayed in cipher text. A cipher-text password must have 24 characters in cipher text, for example,
(TT8F]Y\5SQ=^Q`MAF4<1!!.
ip: If this argument is configured, the system checks the corresponding IP field in LSP.
15-1
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
osi: If this argument is configured, the system checks the corresponding OSI field in
LSP.
The configuration of ip or osi authentication password is independent of the real network environment.
Description
Use the area-authentication-mode command to configure ISIS to authenticate the received level-1 routing information packets (LSP, CSNP and PSNP), according to the pre-defined mode and password.
Use the undo area-authentication-mode command to configure ISIS not to authenticate the said packets.
In default configuration, the system will not authenticate the received level-1 routing packets, and there is no password. By using this command, all the level-1 routing packets, whose area authentication passwords do not consistent with the one set via this command will not be received. At the same time, this command will let ISIS insert the area authentication password into all the level-1 routing packets sent by this node, in a certain mode.
Related command: reset isis all, domain-authentication-mode, isis
authentication-mode.
Example
Set the area authentication password as “hello” and the authentication type as simple.
[SW8800] isis
[SW8800-isis] area-authentication-mode simple hello
15.1.2 cost-style
Syntax
cost-style { narrow | wide | wide-compatible | { compatible | narrow-compatible }
[ relax-spf-limit ] }
undo cost-style
View
Parameter
IS-IS view
narrow: Only receives/sends packets whose cost type is narrow
wide: Only receives/sends packets whose cost type is wide.
compatible: Receives/sends packets whose cost type is narrow or wide.
15-2
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
narrow-compatible: Receives packets whose cost type is narrow or wide, but only sends packets whose cost type is narrow
wide-compatible: Receives packets whose cost type is narrow or wide, but only sends packets whose cost type is wide.
relax-spf-metric: Permits to receive routes whose cost value is larger than 1024. If it is not set, routes whose metrics values are larger than 1024 will be discarded. This setting is only valid for compatible, narrow-compatible and wide-compatible.
Description
Use the cost-style command to set the cost type of an IS-IS packet received/sent by the router.
Use the undo cost-style command to restore the default settings.
By default, IS-IS only receives/sends packets whose cost type is narrow.
Related command: isis cost.
Example
Set IS-IS to receive packets whose cost type is narrow or wide, but only send packets whose cost type is narrow.
[SW8800] isis
[SW8800-isis] cost-style narrow-compatible
15.1.3 debugging isis
Syntax
debugging isis { adjacency | all | authentication-error | checksum-error |
circuit-information
| configuration-error | datalink-receiving-packet |
datalink-sending-packet
| general-error | interface-information |
memory-allocating
| receiving-packet-content | self-originate-update |
sending-packet-content | snp-packet | spf-event | spf-summary | spf-timer |
task-error | timer | update-packet }
undo debugging isis { adjacency | all | authentication-error | checksum-error |
circuit-information
| configuration-error | datalink-receiving-packet |
datalink-sending-packet
| general-error | interface-information |
memory-allocating
| receiving-packet-content | self-originate-update |
sending-packet-content | snp-packet | spf-event | spf-summary | spf-timer |
task-error | timer | update-packet }
View
User view
15-3
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 15 Integrated IS-IS Configuration Commands
adjacency: IS-IS adjacency related packets.
all: All IS-IS related debugging information.
authentication-error: IS-IS authentication errors.
checksum-error: IS-IS checksum errors.
circuit-information: Information about IS-IS enabled interface.
configuration-error: IS-IS configuration errors.
datalink-receiving-packet: Data link layer's packets-receiving status.
datalink-sending-packet: Data link layer's packets-sending status.
general-error: IS-IS error information.
interface-information: Information about IS-IS enabled data link layer.
memory-allocating: IS-IS memory allocating status.
receiving-packet-content: Packets received through IS-IS protocol.
self-originate-update: Packets locally updated through IS-IS protocol.
sending-packet-content: Packets sent through IS-IS protocol.
snp-packet: CSNP/PSNP packet of IS-IS.
spf-event: IS-IS SPF events.
spf-summary: Statistics about IS-IS performing SPF calculation.
spf-timer: IS-IS SPF trigger events.
task-error: IS-IS events status.
timer: IS-IS timer.
update-packet: Updated packets through IS-IS protocol.
Description
Use the debugging isis command to enable IS-IS debugging.
Use the undo debugging isis command to disable the function.
Example
Enable all the information debugging of IS-IS.
<SW8800> debugging isis all
15.1.4 default-route-advertise
Syntax
default-route-advertise [ route-policy route-policy-name ]
undo default-route-advertise [ route-policy route-policy-name ]
15-4
3Com Switch 8800 Command Reference Guide
View
IS-IS view
Chapter 15 Integrated IS-IS Configuration Commands
Parameter
route-policy-name: Name of a route-policy.
Description
Use the default-route-advertise command to create the default route of L1, L2 router.
Use the undo default-route-advertise command to cancel this configuration.
By default, L2 router creates the default route.
This command can be set on L1 router or L2 router. By default, the route is generated on L2 LSP. If the apply isis level-1 command is executed in route-policy view, the default route will be generated on L1 LSP. If the apply isis level-2 command is executed in Route-policy view, the default route will be generated on L2 LSP. If the
apply isis level-1-2 command is executed in route-policy view, the default route will be generated on both L1 LSP and L2 LSP.
Example
Set the router to create the default route in the LSP of correspond level.
[SW8800-isis] default-route-advertise
15.1.5 display isis interface
Syntax
display isis interface [ verbose ]
View
Any view
Parameter
verbose: If this parameter is used, the details of the interface will be displayed.
Description
Use the display isis interface command to view the information of the enabled IS-IS interface.
This command displays the information of the enabled IS-IS interface, including interface name, IP address of the interface, link state of the interface and so on.
Besides displaying all the information shown by the display isis interface command, the display isis interface verbose command displays such information about the
IS-IS parameters of the interface as CSNP packet broadcast interval, Hello packet broadcast interval and invalid number of Hello packet.
15-5
3Com Switch 8800 Command Reference Guide
Example
Chapter 15 Integrated IS-IS Configuration Commands
Display the information about the enabled IS-IS interface.
<SW8800> display isis interface
Interface IP Address Id Link.Sta IP.Sta MTU Type DIS
Vlan-interface1 172.16.1.2 001 Up Up 1497 L1 Yes
Display the details of the IS-IS enabled interface.
<SW8800> display isis interface verbose
Interface IP Address Id Link.Sta IP.Sta MTU Type DIS
Vlan-interface1 172.16.1.2 001 Up
Secondary IP Address :
Up 1497 L1 Yes
SNPA Address : 00e0.fc44.5f71
Csnp Interval : L1 10 L2 10
Hello Interval : L1 10 L2 10
Hold Time : L1 30 L2 30
Lsp Interval : 33
Cost : L1 10 L2 10
Priority : L1 64 L2 64
Retransmission interval : 5
15.1.6 display isis lsdb
Syntax
display isis lsdb [ [ l1 | l2 | level-1 | level-2 ] | [ [ LSPID | local ] | verbose ]* ]*
View
Any view
Parameter
l1 and Level-1: Both refer to the link state database of level-1.
l2 and level-2: Both refer to the link state database of level-2.
LSPID: Specifies the LSPID of the Network-entity-title.
local: Displays the LSP information generated locally.
verbose: Configures to display the verbose information of the link state database.
Description
Use the display isis lsdb command to view the link state database of the IS-IS.
Example
Display the information of an LSP.
<SW8800> display isis lsdb 0050.0500.5005.00-00
15-6
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
IS-IS Level-1 Link State Database
Lsp ID Sequence Holdtime A_P_O Checksum
>0050.0500.5005.00-00 0x00000328 780 0_0_0 0xf211
15.1.7 display isis mesh-group
Syntax display isis mesh-group
View
Any view
Parameter
None
Description
Use the display isis mesh-group command to view the IS-IS mesh group.
This command is used for displaying the configurations of the mesh-group of the current router interface.
Example
Add Interface Vlan-interface 10 and Interface Vlan-interface 20 running IS-IS into mesh group 100.
[SW8800-Vlan-interface10] isis mesh-group 100
[SW8800] interface Vlan-interface 20
[SW8800-Vlan-interface20] isis mesh-group 100
Display the information of IS-IS mesh-group.
[SW8800-Vlan-interface20] display isis mesh-group
Interface Mesh-group/Blocked
Vlan-interface 10 100
Vlan-interface 20 100
15.1.8 display isis peer
Syntax
display isis peer [ verbose ]
View
Any view
15-7
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 15 Integrated IS-IS Configuration Commands
verbose: When this parameter is configured, the area address carried in the Hello packet from the neighbor will be displayed. Otherwise, only the universal information will be displayed.
Description
Use the display isis peer command to view IS-IS peer information.
The display isis peer verbose command yields not only all the outputs of the display
isis peer command, but also the area address, Uptime and IP address of the directly connected interface of the peer.
Example
Display detailed information about IS-IS neighbors.
<SW8800> display isis peer verbose
System ID Interface Circuit ID State HoldTime Type Pri
0002.0000.0000 Vlan-interface251 0002.0000.0000.0a Up 6s L1 64
Area Address: 00.0001
IP Address: 192.3.1.3 192.4.1.3 192.5.1.3 192.6.1.3 192.7.1.3 192.8.1.3
192.9.1.3 192.10.1.3 192.11.1.3
Period: 22:27:42
System ID Interface Circuit ID State HoldTime Type Pri
0003.0000.0000 Vlan-interface251 0002.0000.0000.0a Up 22s L1 64
Area Address: 00.0001
IP Address: 192.3.1.2
Period: 22:31:18
View IS-IS peer Information.
<SW8800> display isis peer
System ID Interface Circuit ID State HoldTime Type Pri
0002.0000.0000 Vlan-interface251 0002.0000.0000.0a Up 6s L1 64
0003.0000.0000 Vlan-interface251 0002.0000.0000.0a Up 22s L1 64
15.1.9 display isis route
Syntax
display isis route
View
Any view
15-8
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 15 Integrated IS-IS Configuration Commands
Description
Use the display isis route command to view IS-IS routing information. .
Example
View IS-IS routing information.
<SW8800> display isis route
ISIS Level - 1 Forwarding Table :
Type - D -Direct, C -Connected, I -ISIS, S -Static, O -OSPF
B -BGP, R -RIP
Flags: R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set
Destination/Mask In.Met Ex.Met NextHop Interface Flags
--------------------------------------------------------------------------
I 3.3.3.0/24 20 7.7.7.7 Vlan-interface1000
R/-/-
6.6.6.6 Vlan-interface1001
I 0.0.0.0/0 10 7.7.7.7 Vlan-interface1000
R/-/-
6.6.6.6 Vlan-interface1001
D 7.7.7.0/25 10 Direct Vlan-interface1000
R/L/-
D 6.6.6.0/24 10 Direct Vlan-interface1001
R/L/-
I 10.1.1.0/24 10 7.7.7.7 Vlan-interface1000
R/-/-
6.6.6.6 Vlan-interface1001
15.1.10 display isis spf-log
Syntax
display isis spf-log
View
Parameter
Any view
None
15-9
3Com Switch 8800 Command Reference Guide
Description
Chapter 15 Integrated IS-IS Configuration Commands
Use the display isis spf-log command to view the SPF calculation log information of the IS-IS. .
Example
View the SPF calculation log of IS-IS.
<SW8800> display isis spf-log
Details of Level 1 SPF Run:
-------------------------------------------------------------------------
Trig.Event No.Of Nodes Duration(ms) StartTime
IS_SPFTRIG_LSPCHANGE 2 19 1:12:1
IS_SPFTRIG_LSPCHANGE 2 19 1:11:58
IS_SPFTRIG_LSPCHANGE 2 18 1:11:53
IS_SPFTRIG_CIRC_DOWN 2 19 1:11:46
IS_SPFTRIG_NEWADJ 2 20 1:11:39
IS_SPFTRIG_LSPCHANGE 2 19 1:11:35
IS_SPFTRIG_PERIODIC 3 18 1:3:25
IS_SPFTRIG_LSPCHANGE 2 22 0:55:51
IS_SPFTRIG_LSPCHANGE 2 18 0:55:46
IS_SPFTRIG_ADJDOWN 2 19 0:55:23
IS_SPFTRIG_NEWADJ 2 18 0:54:16
IS_SPFTRIG_LSPCHANGE 2 20 0:54:12
IS_SPFTRIG_LSPCHANGE 3 19 0:54:7
IS_SPFTRIG_PERIODIC 3 21 0:48:25
IS_SPFTRIG_LSPEXPIRED 3 19 0:34:10
IS_SPFTRIG_PERIODIC 3 19 0:33:25
IS_SPFTRIG_PERIODIC 3 18 0:18:25
IS_SPFTRIG_LSPCHANGE 3 19 0:13:26
IS_SPFTRIG_PERIODIC 3 19 0:3:25
IS_SPFTRIG_LSPCHANGE 2 19 1:12:7
15.1.11 domain-authentication-mode
Syntax
domain-authentication-mode { simple | md5 } password [ ip | osi ]
undo domain-authentication-mode { simple | md5 } [ ip | osi ]
View
IS-IS view
Parameter
simple: Configures to transmit the password in plain text.
15-10
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
md5: Configures to transmit the password encrypted with MD5 algorithm.
password: Configures a password. If simple authentication is used, the password must be a simple-text password. If MD5 authentication is used, the password can be a simple-text or a cipher-text password. A simple-text password can be a character string with no more than 16 characters, for example, 3Com918. Note that the simple-text password defined for MD5 authentication is displayed in cipher text. A cipher-text password must have 24 characters in cipher text, for example,
(TT8F]Y\5SQ=^Q`MAF4<1!!.
password: Specifies the authentication password which can be a character string with 1 to 16 characters. If md5 is specified, the password will be displayed in a cipher text form with 24 characters when the display current-configuration command is executed. Inputting password in a cipher text form with 24 characters is also supported.
ip: If this item is configured, the system checks the configuration of the corresponded field of the IP in LSP.
osi: If this item is configured, the system checks the configuration of the corresponded field of the OSI in LSP.
The configuration of ip or osi is independent of the real network environment.
Description
Use the domain-authentication-mode command to configure the IS-IS routing domain to authenticate the received level-2 routing packets (LSP, CSNP, PSNP), according to the pre-defined mode and password.
Use the undo domain-authentication-mode command to configure IS-IS not to authenticate the said packets.
In default configuration, the system will not authenticate the received level-2 routing packets, and there is no password. By using this command, all the level-2 routing packets, whose domain authentication passwords do not consist with the one set via this command will not be received. At the same time, this command will let IS-IS insert the domain authentication password into all the level-2 routing packets sent by this node, in a certain mode.
Related command: area-authentication-mode, isis authentication-mode.
Example
When you need to authenticate the level-2 routing packets, you can select the simple mode, and the password is “3Com”.
[SW8800] isis
[SW8800-isis] domain-authentication-mode simple 3Com
15-11
3Com Switch 8800 Command Reference Guide
15.1.12 filter-policy export
Chapter 15 Integrated IS-IS Configuration Commands
Syntax
filter-policy acl-number export [ protocol ]
undo filter-policy acl-number export [ protocol ]
View
IS-IS view
Parameter
acl-number: Specifies the number of the access control list, ranging from 2000 to 3999.
protocol: Specifies the protocols that distribute routing information, including direct, static, rip, bgp, ospf, ospf-nssa and ospf-ase. If it does not specify any protocol, the distributed routes of all the protocols will be filtered.
Description
Use the filter-policy export command to configure to filter the routes distributed by
IS-IS.
Use the undo filter-policy export command to cancel the filtering for the exporting routes.
By default, IS-IS does not filter any distributed routing information.
In some cases, only the routing information meeting the specified conditions will be distributed. You can configure the filter-policy to specify the filter conditions so as to distribute the desired routing information only.
Related command: filter-policy import.
Example
Use ACL 2000 to filter the routes distributed by IS-IS.
[SW8800-isis] filter-policy 2000 export
15.1.13 filter-policy import
Syntax
filter-policy acl-number import
undo filter-policy acl-number import
View
IS-IS view
15-12
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 15 Integrated IS-IS Configuration Commands
acl-number: Specifies the number of the access control list, ranging from 2000 to 3999.
Description
Use the filter-policy import command to configure to filter the routes received by IS-IS.
Use the undo filter-policy import command to configure not to filter the received routes.
By default, IS-IS does not filter the received routing information.
In some cases, only the routing information meeting the specified conditions will be accepted. You can configure the filter-policy to specify the filter conditions so as to accept the desired routing information only.
Related command: filter-policy export.
Example
Filter the received routes by using ACL 2000.
[SW8800-isis] filter-policy 2000 import
15.1.14 ignore-lsp-checksum-error
Syntax
ignore-lsp-checksum-error
undo ignore-lsp-checksum-error
View
IS-IS view
Parameter
None
Description
Use the ignore-lsp-checksum-error command to configure the IS-IS to discard LSPs with checksum errors.
Use the undo ignore-lsp-checksum-error command to configure the IS-IS to ignore the checksum error of LSP.
By default, the checksum error of LSP is ignored.
After receiving an LSP packet, the local IS-IS will calculate its checksum and compares the result with the checksum in the LSP packet. This process is the checksum authentication over the received LSP. By default, though the checksum in the packet is found not in consistent with the calculated result, the LSP is processed as normal.
However, after not ignoring LSP checksum error is set with the
15-13
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
ignore-lsp-checksum-error command, the LSP packet will be discarded silently if the checksum error is found.
Example
Discard the LSPs with checksum errors.
[SW8800-isis] ignore-lsp-checksum-error
15.1.15 import-route
Syntax
import-route protocol [ cost value | type { external | internal } | [ level-1 | level-1-2 |
level-2 ] | route-policy route-policy-name ]*
undo import-route protocol [ cost value | type { external | internal } | [ level-1 |
level-1-2 | level-2 ] | route-policy route-policy-name ]*
View
IS-IS view
Parameter
protocol: Specifies the source protocol for importing the routing information, which can be direct, static, rip, bgp, ospf, ospf-ase, and ospf-nssa.
value: Specifies the metric of the imported route, ranging from 0 to 63.
type: Type of routing cost: internal indicates the routing cost in the same area;
external indicates the routing cost among areas. By default, the routing cost is
internal.
level-1: Configures to import the route into Level-1 routing table.
level-2: Configures to import the route into Level-2 routing table. If the level is not specified, it defaults to importing the routes into level-2.
level-1-2: Configures to import the route into Level-1 and Level-2 routing table.
route-policy route-policy-name: Configures to import the routes matching the conditions defined in the specified route-policy only.
Description
Use the import-route command to configure IS-IS to import the routing information of other protocols.
Using the undo import-route command to disable IS-IS to import routing information from other protocols.
By default, IS-IS does not import the routing information of other protocols.
IS-IS regards all the routes imported into the routing domain as the external routes, which describe the way of routing outside the routing domain.
15-14
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
Related command: import-route isis level-2 into level-1.
Example
Import the static route. The cost value is 15.
[SW8800-isis] import-route static cost ip 15
15.1.16 import-route isis level-2 into level-1
Syntax
import-route isis level-2 into level-1 [ acl acl-number ]
undo import-route isis level-2 into level-1 [ acl acl-number ]
View
IS-IS view
Parameter
acl-number: ACL number. It is in the range of 2000 to 3999, which means basic ACLs and advanced ACLs can be used.
Description
Use the import-route isis level-2 into level-1 command to enable routing information in a Level-2 area to be imported to a Level-1 area.
Use the undo import-route isis level-2 into level-1 command to remove the function.
During routing leak configuration from Level-2 to Level-1, only the routes that are permitted by ACL can be imported to Level-1 area if an ACL has been specified.
By default, routing information in a Level-2 area is not imported to a Level-1 area.
Related command: import-route.
Example
Import routing information of a router from a Level-2 area to a Level-1 area.
[SW8800] isis
[SW8800-isis] import-route isis level2 into level1 acl 2100
15.1.17 isis
Syntax
isis [ tag ]
undo isis [ tag ]
15-15
3Com Switch 8800 Command Reference Guide
View
System view
Chapter 15 Integrated IS-IS Configuration Commands
Parameter
tag: The name given to the ISIS process. The name length should be no longer than
128 characters, and it can be 0, which means null.
Description
Use the isis command to start the corresponding IS-IS routing process and enter the
ISIS view.
Use the undo isis command to delete the specified IS-IS routing process.
By default, IS-IS routing process is not started
For the normal operation of the IS-IS protocol, the isis command must be used to enable the IS-IS process. Then the network-entity command is used to set a Network
Entity Title (NET) for the router. And, at last, the isis enable command is used to enable each interface which needs to run an IS-IS process. The IS-IS protocol is actually enabled upon the completion of these configurations.
Note:
Only one IS-IS routing process can be started on one router.
Related command: isis enable, network-entity.
Example
Start an IS-IS routing process, in which the system ID is 0000.0000.0002 and the area
ID is 01.0001.
[SW8800] isis
[SW8800-isis] network-entity 01.0001.0000.0000.0002.00
15.1.18 isis authentication-mode
Syntax
isis authentication-mode { simple | md5 } password [ { level-1 | level-2 } [ ip | osi ] ]
undo isis authentication-mode { simple | md5 } password [ { level-1 | level-2 } [ ip |
osi ] ]
View
VLAN interface view
15-16
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 15 Integrated IS-IS Configuration Commands
simple: Configures to transmit the password in plain text.
md5: Configures to transmit the password encrypted with MD5 algorithm.
password: Configures a password. If simple authentication is used, the password must be a simple-text password. If MD5 authentication is used, the password can be a simple-text or a cipher-text password. A simple-text password can be a character string with no more than 16 characters, for example, 3Com918. Note that the simple-text password defined for MD5 authentication is displayed in cipher text. A cipher-text password must have 24 characters in cipher text, for example,
(TT8F]Y\5SQ=^Q`MAF4<1!!.
level-1: Configures authentication password for L1.
level-2: Configures authentication password for L2.
ip: If this item is configured, the system checks the configuration of the corresponded field of the IP in LSP.
osi: If this item is configured, the system checks the configuration of the corresponded field of the OSI in LSP.
The configuration of ip or osi is independent of the real network environment.
Description
Use the isis authentication-mode command to configure the IS-IS to authenticate the hello packets of the corresponding level, in the specified mode and with the specified password on the IS-IS interface.
Use the undo isis authentication-mode command to cancel the authentication and delete the password at the same time.
By default, the password is not set and no authentication is executed.
If the password is set, but no parameter is specified, the default settings are level-1, plaintext and osi.
Related command: area-authentication-mode, domain-authentication-mode.
Example
Set the authentication password “tangshi” in plain text for the Level-1 neighboring relationship on Interface Vlan-interface 10.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis authentication-mode simple tangshi level-1
15.1.19 isis circuit-level
Syntax
isis circuit-level [ level-1 | level-1-2 | level-2 ]
15-17
3Com Switch 8800 Command Reference Guide
undo isis circuit-level
View
Interface view
Parameter
Chapter 15 Integrated IS-IS Configuration Commands
level-1: Configures Level-1, instead of Level-2, adjacency on the current interface only.
level-1-2: Configures Level-1-2 adjacency on the current interface.
level-2: Configures Level-2 adjacency on the current interface only.
Description
Use the isis circuit-level command to have the level-1-2 router set up link adjacency with the peer router.
Use the undo isis circuit-level command to restore the default setting of the link adjacency on the level-1-2 router.
By default, the value is level-1-2.
This command is only applicable to level-1-2 routers. If the local router is a level-1-2 router and it is required to establish a correlation with the peer router on a certain level
(level-1 or level-2), this command can specify the interface to send and receive hello packets of this level. Certainly, only one type of hello packet is sent and received on the point-to-point link. In this way, excessive processing is avoided, and the bandwidth is saved.
Related command: is-level.
Example
When interface Vlan-interface 10 is connected with a non-backbone router in the same area, you can set this interface as level-1, prohibiting the sending and receiving of level-2 hello packets.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis enable
[SW8800-Vlan-interface10] isis circuit-level level-1
15.1.20 isis cost
Syntax
isis cost value [ level-1 | level-2 ]
undo isis cost [ level-1 | level-2 ]
View
Interface view
15-18
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 15 Integrated IS-IS Configuration Commands
value: Specifies the link cost used in the SPF calculation of corresponding level. Its range is 0 to 63. By default, the value is 10.
level-1: Indicates that the link cost corresponds to level-1.
level-2: Indicates that the link cost corresponds to level-2
Description
Use the isis cost command to configure the link cost of this interface when performing
SPF calculation.
Use the undo isis cost command to restore the default link cost.
If neither Level 1 nor Level 2 is specified in the configuration, level-1 will be the default value.
The user is recommended to configure the appropriate link cost for all the interfaces.
Otherwise, the link cost in the calculation of IS-IS routes cannot reflect the link cost.
Example
Set the link cost of the Level-2 link on Interface Vlan-interface 10 to 5.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis cost 5 level-2
15.1.21 isis dis-priority
Syntax
isis dis-priority value [ level-1 | level-2 ]
undo isis dis-priority [ level-1 | level-2 ]
View
Interface view
Parameter
value: The priority when selecting DIS. Its value ranges 0 to 127, and the default priority is 64.
level-1: Specifies the priority when selecting level-1 DIS.
level-2: Specifies the priority when selecting level-2 DIS.
If the level is not specified, it defaults to setting the Level-1 priority.
Description
Use the isis dis-priority command to configure the priority of an interface for the DIS election.
15-19
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
Use the undo isis dis-priority command to restore the default priority.
The IS-IS protocol does not concern the concept of backup DIS. The router with the priority 0 can also run for the DIS, which is different from the DR election of OSPF.
Related command: area-authentication-mode, domain-authentication-mode.
Example
Set the priority of Interface Vlan-interface 10 to 127.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis dis-priority 127 level-2
15.1.22 isis enable
Syntax
isis enable [ tag ]
undo isis enable [ tag ]
View
Interface view
Parameter
tag: The name given to an IS-IS routing process, when executing the isis command in the system view. If not specified, it is null.
Description
Use the isis enable command to configure the interface to activate the corresponding
IS-IS routing process.
Use the undo isis enable command to cancel this designation.
By default, the IS-IS routing process is not enabled on an interface.
For the normal operation of the IS-IS protocol, the isis command must be used to enable the IS-IS process. Then the network-entity command is used to set a Network
Entity Title (NET) for the router. And, at last, the isis enable command is used to enable each interface which needs to run the IS-IS process. The IS-IS protocol is actually enabled upon the completion of these configurations.
Related command: isis, network-entity.
Example
Create an IS-IS routing process named “3Com”, and activate this routing process on interface Vlan-interface 10.
[SW8800] isis 3Com
[SW8800-isis] network-entity 10.0001.1010.1020.1030.00
15-20
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis enable 3Com
15.1.23 isis mesh-group
Syntax
isis mesh-group { mesh-group-number | mesh-blocked }
undo isis mesh-group
View
Interface view
Parameter
mesh-group-number: Specifies the mesh group number, ranging from 1 to
4,294,967,295.
mesh-blocked: Configures to block a specified interface, so that it will not flood the received LSP to other interfaces.
Description
Use the isis mesh-group command to add an interface to a specified mesh group.
Use the undo isis mesh-group command to delete this interface from the mesh group.
By default, the interface does not belong to any mesh group and floods LSP normally.
The interface beyond the mesh group floods the received LSP to other interfaces, following the normal procedure. This processing method applied to an NBMA network with higher connectivity and several point-to-point links will cause repeated LSP flooding and waste bandwidth.
The interface joining a mesh group only floods the received LSP to the interfaces beyond the local mesh group.
Make sure to provide some redundancy when adding an interface to a mesh group or blocking it, avoiding the affect to the normal flooding of the LSP due to link failure.
Example
Add Vlan-interface 20 running IS-IS to mesh group 3.
[SW8800-Vlan-interface20] isis mesh-group 3
15.1.24 isis timer csnp
Syntax
isis timer csnp seconds [ level-1 | level-2 ]
undo isis timer csnp [ level-1 | level-2 ]
15-21
3Com Switch 8800 Command Reference Guide
View
Interface view
Chapter 15 Integrated IS-IS Configuration Commands
Parameter
Description
Use the isis timer csnp command to configure the interval of sending CSNP packets on the broadcast network.
Use the undo isis timer csnp command to restore the default value, that is, 10 seconds.
Only DIS can periodically send CSNP packets, therefore, this command is valid only for the router that is selected as the DIS. Furthermore, DIS is divided into level-1 and level-2, and their intervals of sending CSNP packets must be set respectively.
Example
seconds: Specifies the CSNP packet interval on the broadcast network, ranging from 1 to 65535 and measured in seconds. By default, the value is 10 seconds.
level-1: Specifies the Level-1 CSNP packet interval.
level-2: Specifies the Level-2 CSNP packet interval.
Set the CSNP packet of Level-2 to be transmitted every 15 seconds on the interface
Vlan-interface 10.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis timer csnp 15 level-2
15.1.25 isis timer hello
Syntax
isis timer hello seconds [ level-1 | level-2 ]
undo isis timer hello [ level-1 | level-2 ]
View
Parameter
Interface view
seconds: Specifies the Hello interval, ranging from 3 to 255 and measured in seconds.
The default value is 10 seconds.
level-1: Specifies the Level-1 Hello interval.
level-2: Specifies the Level-2 Hello interval.
If the level is not specified, it defaults to setting the Hello interval at Level-1-2, that is, both Level-1 and Level-2 take effect.
15-22
3Com Switch 8800 Command Reference Guide
Description
Chapter 15 Integrated IS-IS Configuration Commands
Use the isis timer hello command to configure the interval of sending hello packet of corresponding level.
Use the undo isis timer hello command to restore the default value, that is, 10 seconds.
On a broadcast link, level-1 and level-2 hello packets will be sent respectively and their intervals should also be set respectively. Such settings are unnecessary on point-to-point links. The shorter the sending interval is, the more system resources are occupied to send hello packets. Therefore, the interval should not be too short and should be set according to actual conditions.
Related command: isis timer holding-multiplier.
Example
Set the Hello packet of Level-2 to be transmitted every 20 seconds on Interface
Vlan-interface 10.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis timer hello 20 level-2
15.1.26 isis timer holding-multiplier
Syntax
isis timer holding-multiplier value [ level-1 | level-2 ]
undo isis timer holding-multiplier [ level-1 | level-2 ]
View
Interface view
Parameter
value: Number of consecutive Hello messages that haven't been received from the
IS-IS neighbor for it to be considered dead. It ranges from 3 to 1000.
level-1: Level-1 IS-IS neighbor.
level-2: Level-2 IS-IS neighbor.
If you do not specify level-1 or level-2, the command applies to both level-1 and level-2
IS-IS neighbors.
Description
Use the isis timer holding-multiplier command to set the number of consecutive
Hello messages that haven’t been received from the IS-IS neighbor for it to be considered dead.
Use the undo isis timer holding-multiplier command to restore the default setting.
15-23
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
By default, an IS-IS neighbor is considered dead if three consecutive Hello messages haven’t been received from it.
Given a broadcast network, you may configure this command specific to level-1 or level-2 neighbors by specifying the keyword level-1 or level-2.
Given a PPP link, you do not need to specify level-1 or level-2, because only one kind of
Hello message is available.
This command virtually specifies a hold-down time. If the local router does not receive any Hello message from the peer within this time, the peer is considered dead.
The hold-down time is configured on a per-interface basis. Within one area, routers may have different holddown time settings.
To tune the hold-down time on a router, change the Hello timer setting of IS-IS or change the number of consecutive Hello messages that haven’t been received from an
IS-IS neighbor for it to be considered dead.
Related command: isis timer hello.
Example
On Vlan-interface 10, configure that the IS-IS neighbor is considered dead if five consecutive Hello messages haven’t been received from it.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis timer holding-multiplier 5
15.1.27 isis timer lsp
Syntax
isis timer lsp time
undo isis timer lsp
View
Interface view
Parameter
time: Specifies the LSP interval, ranging from 1 to 1000 and measured in milliseconds.
The default value is 33 milliseconds.
Description
Use the isis timer lsp command to configure the interval at which IS-IS sends link-state packets on the interface.
Use the undo isis timer lsp command to restore the default setting.
Related command: isis timer retransmit.
15-24
3Com Switch 8800 Command Reference Guide
Example
Chapter 15 Integrated IS-IS Configuration Commands
Set the LSP interval on Interface Vlan-interface 10 to 500 milliseconds.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis timer lsp 500
15.1.28 isis timer retransmit
Syntax
isis timer retransmit seconds
undo isis timer retransmit
View
Interface view
Parameter
seconds: Specifies the retransmission interval of LSP packets, in the unit of second, in the range from 1 to 300 and the default value is five seconds.
Description
Use the isis timer retransmit command to configure the LSP retransmission interval over the point-to-point link.
Use the undo isis timer retransmit command to restore the default setting.
Use caution when setting this parameter to avoid unnecessary retransmission.
The response is required when sending LSP packets on the point-to-point link, not the broadcast link, and therefore this command is unnecessary for the broadcast link.
Related command: isis timer lsp.
Example
Set the LSP retransmission interval to 10 seconds on Interface Vlan-interface 10.
[SW8800] interface Vlan-interface 10
[SW8800-Vlan-interface10] isis timer retransmit 10
15.1.29 is-level
Syntax
is-level { level-1 | level-1-2 | level-2 }
undo is-level
View
IS-IS view
15-25
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 15 Integrated IS-IS Configuration Commands
level-1: Configures the router to operate at Level-1, only calculate the intra-area routes and maintain the LSDB of L1.
level-1-2: Configures the router to operate at Level-2, calculate both the L1 and L2 routes and maintain the LSDB of L1 and L2.
level-2: Configures the router to operate at Level-2, only switch L2 LSP and calculate the L2 routes and maintain the LSDB of L2.
Description
Use the is-level command to configure the level of the IS-IS router.
Use the undo is-level command to restore the default value.
By default, the value is level-1-2.
We recommend setting the system Level, when you configure IS-IS.
If there is only one area, you are recommended to set the level of all the routers as
Level-1 or Level-2, because it is not necessary for all the routers to maintain two identical databases. You are recommended to set all the routers to Level-2 for convenient future extension, when applying them to IP network.
Related command: isis circuit-level.
Example
Set the current router to operate at Level-1.
[SW8800] isis
[SW8800-isis] is-level level-1
15.1.30 log-peer-change
Syntax log-peer-change undo log-peer-change
View
IS-IS view
Parameter
None
Description
Use the log-peer-change command to log the peer changes.
Use the undo log-peer-change command to configure not to log the peer changes.
15-26
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
By default, peer changes log disabled.
After peer changes log is enabled, the IS-IS peer changes will be output on the configuration terminal until the log is disabled.
Example
Configure to output the IS-IS peer changes on the current router.
[SW8800-isis] log-peer-change
15.1.31 md5-compatible
Syntax md5-compatible undo md5-compatible
View
IS-IS view
Parameter
None
Description
Use the md5-compatible command to set the IS-IS to use the MD5 algorithm which is compatible with that of the other vendors.
Use the undo md5-compatible command to return to the defaults.
By default, the system uses the MD5 algorithm in IS-IS which is compatible with that of
3Com.
To authenticate the devices of the vendors other than 3Com using MD5 algorithm in
IS-IS, configure this command.
Example
Set the IS-IS to use the MD5 algorithm compatible with that of the other vendors.
[SW8800] isis
[SW8800-isis] md5-compatible
15.1.32 network-entity
Syntax
network-entity network-entity-title
undo network-entity network-entity-title
15-27
3Com Switch 8800 Command Reference Guide
View
IS-IS view
Chapter 15 Integrated IS-IS Configuration Commands
Parameter
network-entity-title: Specify the network entity title in the X…X.XXXX....XXXX.00 format, in which the first “X…X” is the area address, the twelve Xs in the middle is the System
ID of the router, and the 00 in the end is SEL.
Description
Use the network-entity command to configure the name of Network Entity Title (NET) of the IS-IS routing process.
Use the undo network-entity command to delete a NET.
By default, no NET is defined.
NET means the Network Service Access Point (NSAP). An IS-IS NET is 8 to 20 bytes long.
It consists of three parts. Part one is area ID, which is variable (1 to 13 bytes), and the area IDs of the routers in the same area are identical. Part two is system ID (6 bytes) of this router, which must be unique in the whole area and backbone area. Part three, the last byte “SEL”, whose value must be “00”. Usually, one router can be configured with one NET. When the area is redesigned by combination or separation, after reconfiguration, the correctness and continuity of the routes must be ensured.
Related command: isis, isis enable.
Example
Specify NET as “10.0001.1010.1020.1030.00”, in which the system ID is
“1010.1020.1030”, area ID is “10.0001”.
[SW8800] isis
[SW8800-isis] network-entity 10.0001.1010.1020.1030.00
15.1.33 preference
Syntax
preference value
undo preference
View
Parameter
IS-IS view
value: Specifies the preference, ranging from1 to 255. By default, the value is 15.
15-28
3Com Switch 8800 Command Reference Guide
Description
Chapter 15 Integrated IS-IS Configuration Commands
Use the preference command to configure the preference of IS-IS protocol.
Use the undo preference command to restore the default value.
Several dynamic routing protocols could run simultaneously on a router. In this case, there is an issue of sharing and selecting the routing information among all the routing protocols. The system sets a preference for each routing protocol. When various routing protocols find the route to the same destination, the protocol with the higher preference will take effect.
Example
Configure the preference of IS-IS as 25.
[SW8800-isis] preference 25
15.1.34 reset isis all
Syntax reset isis all
View
User view
Parameter
None
Description
Use the reset isis all command to reset all the IS-IS data structures.
By default, IS-IS data structure will not be cleared.
This command is used when LSPs need refreshing immediately. For example, after the
area-authentication-mode and domain-authentication-mode commands are executed, the old LSP still remain on the router. This command can be used to clear them.
Related command: area-authentication-mode, domain-authentication-mode.
Example
Reset all the IS-IS data structures.
<SW8800> reset isis all
15-29
3Com Switch 8800 Command Reference Guide
15.1.35 reset isis peer
Chapter 15 Integrated IS-IS Configuration Commands
Syntax
reset isis peer system-id
View
User view
Parameter
system-id: Specifies the system ID of IS-IS neighbor.
Description
Use the reset isis peer command to reset the specified IS-IS peer.
By default, the IS-IS neighbor will not be cleared.
This command is used when you want to reconfigure a certain neighbor.
Example
Clear the IS-IS neighbor whose system ID is 0000.0c11.1111.
<SW8800> reset isis peer 0000.0c11.1111
15.1.36 set-overload
Syntax
set-overload
undo set-overload
View
IS-IS view
Parameter
None
Description
Use the set-overload command to set overload flag for the current router.
Use the undo set-overload command to cancel the overload flag.
By default, no overload flag is set.
If a router is configured with the overload flag, the routes it calculates will be ignored by other routers in SPF calculation. (However the directly connected routes will not be ignored.) And other routers should not send this router the packets which should be forwarded by it.
15-30
3Com Switch 8800 Command Reference Guide
Example
Chapter 15 Integrated IS-IS Configuration Commands
Set overload flag on the current router.
[SW8800-isis] set-overload
15.1.37 silent-interface
Syntax
silent-interface silent-interface-type silent-interface-number
undo silent-interface silent-interface-type silent-interface-number
View
IS-IS view
Parameter
silent-interface-type: Specifies the interface type.
silent-interface-number: Specifies the interface number.
Description
Use the silent-interface command to disable a specified interface to transmit IS-IS packet.
Use the undo silent-interface command to enable the interface to transmit IS-IS packet.
By default, all the interface are allowed to transmit/receive IS-IS packets.
The silent-interface command is only used to suppress the packets to be transmitted on the interface, but the routes of this interface will still be transmitted from other interfaces.
Example
Prohibit the IS-IS packets to be transmitted via Interface Vlan-interface 3.
[SW8800-isis] silent-interface Vlan-interface 3
15.1.38 spf-delay-interval
Syntax
spf-delay-interval number
undo spf-delay-interval
View
IS-IS view
15-31
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 15 Integrated IS-IS Configuration Commands
number: Specifies number of routes to process before releasing CPU. It is in unit of piece with the range from 1000 to 50000. By default, the value is 2500 pieces.
Description
Use the spf-delay-interval command to configure the number of routes to process before releasing CPU in the SPF calculation.
Use the undo spf-delay-interval command to restore the default setting.
When there are a large number of routes in the routing table, this command can be used to set that CPU resources are released automatically after a certain number of routes are processed. The unprocessed routes will be processed in one second. In this way, SPF calculation will not occupy the system resources for a long time, which has impact on the responding speed of the console.
The value of the number argument can be adjusted according to the capacity of the routing table. If the spf-slice-size command is also configured, the SPF calculation will be paused when any setting item is met.
By default, CPU is released once when every 2500 pieces of routes are processed.
Related command: spf-slice-size.
Example
Set IS-IS to release CPU once after processing every 3000 pieces of routes.
[SW8800-isis] spf-delay-interval 3000
15.1.39 spf-slice-size
Syntax
spf-slice-size seconds
undo spf-slice-size
View
Parameter
IS-IS view
seconds: Duration of one cycle in seconds of SPF calculation in the range from 0 to 120.
When the calculation duration time reaches or exceeds the set value, the calculation of this time ends. If seconds is set to 0, it indicates that SPF calculation is not divided into slices and it will operate until the end. By default, the value is 0.
15-32
3Com Switch 8800 Command Reference Guide
Description
Chapter 15 Integrated IS-IS Configuration Commands
Use the spf-slice-size command to enable IS-IS to calculate SPF routes in slices and configure the duration of each calculation.
Use the undo spf-slice-size command to restore the default setting.
When there are a large number of routes in the routing table, this command can be used to enable the SPF calculation in slices to prevent it from occupying the system resources for a long time.
The user is recommended to use the command when the number of routes reaches
150,000 or 200,000 and the value of seconds is recommended as 1. In other cases, the default setting should be used, that is, SPF runs to the end with no slice.
If the spf-delay-interval command is also configured, when SPF calculation is run, the
SPF calculation will be paused if any setting item is met.
Related command: spf-delay-interval.
Example
Set the SPF duration time to one second.
[SW8800-isis] spf-slice-size 1
15.1.40 summary
Syntax
summary ip-address mask [ level-1 | level-1-2 | level-2 ]
undo summary ip-address mask [ level-1 | level-1-2 | level-2 ]
View
IS-IS view
Parameter
ip-address: Aggregated network segment address.
mask: Aggregated network mask.
level-1: Configures to aggregate the routes imported into Level-1.
level-1-2: Configures to aggregate the routes imported into Level-1 and backbone area.
level-2: Configures to aggregate the routes imported into backbone area.
Description
Use the summary command to configure to aggregate IS-IS routes.
Use the undo summary command to cancel the summary.
By default, no routes will be summarized.
15-33
3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands
Similarly, the routes with the same next hops can be aggregated into one route. In this way, the sizes of the routing table, LSP packets and LSDB are reduced. Among them, the aggregated route can be either a route found by IS-IS protocol, or a imported route.
Furthermore, the cost value of the aggregated route adopts the smallest cost of the routes aggregated.
Example
Set a route summary of 202.0.0.0/8.
[SW8800-isis] summary 202.0.0.0 255.0.0.0
15.1.41 timer lsp-max-age
Syntax
timer lsp-max-age seconds
undo timer lsp-max-age
View
IS-IS view
Parameter
seconds: Specifies the maximum lifetime of LSP, measured in seconds. The range is 1 to 65535. The default value is 1200 seconds.
Description
Use the timer lsp-max-age command to configure the maximum lifetime of an LSP generated by the current router.
Use the undo timer lsp-max-age command to restore the default value.
When the router generates an LSP for the system, it adds the maximum lifetime to it.
When other routers receive this LSP, the lifetime of the LSP decreases continuously as time goes by. When this value reaches zero, the LSP times out. If no update is received before that, the timeout LSP will be deleted from the LSDB.
Related command: timer lsp-refresh.
Example
Set the lifetime of an LSP generated by the current system to 25 minutes, i.e., 1500 seconds.
[SW8800-isis] timer lsp-max-age 1500
15-34
3Com Switch 8800 Command Reference Guide
15.1.42 timer lsp-refresh
Chapter 15 Integrated IS-IS Configuration Commands
Syntax
timer lsp-refresh seconds
undo timer lsp-refresh
View
IS-IS view
Parameter
seconds: Specifies the LSP refreshment interval, measured in seconds. The range is 1 to 65535. The default value is 900 seconds.
Description
Use the timer lsp-refresh command to configure the refreshment interval of LSP.
Use the undo timer lsp-refresh command to restore the default value, that is, 900 seconds.
By this mechanism, the latest synchronization of the LSP within the entire area can be maintained.
Related command: timer lsp-max-age.
Example
Set the LSP refresh interval of the current system to 1500 seconds.
[SW8800-isis] timer lsp-refresh 1500
15.1.43 timer spf
Syntax
timer spf seconds [ level-1 | level-2 ]
undo timer spf [ level-1 | level-2 ]
View
IS-IS view
Parameter
seconds: Specifies the SPF calculation interval, ranging from 1 to 120 and measured in seconds. The default value is 10 seconds.
level-1: Sets Level-1 SPF calculation interval only.
level-2: Sets Level-2 SPF calculation interval only.
If the level is not specified, it defaults to setting Level-1 SPF calculation interval.
15-35
3Com Switch 8800 Command Reference Guide
Description
Chapter 15 Integrated IS-IS Configuration Commands
Use the timer spf command to configure the interval for the SPF calculation of corresponding level.
Use the undo timer spf command to restore the system default value, that is, 5 seconds.
In IS-IS, when the LSDB of the corresponding level is changed, SPF calculation is required. However, if the SPF calculation is performed too frequently, the system efficiency will be lowered. By setting a proper interval for performing SPF calculation, you can avoid the above situation. Certainly, the interval for SPF calculation cannot be set too long, because a long interval will prevent the current routing table from showing the actual network condition. This setting must be made according to actual conditions.
Example
Set the SPF calculation interval of the router to three seconds.
[SW8800-isis] timer spf 3
15-36
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
Chapter 16 BGP Configuration Commands
Note:
When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch
8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.
For the configuration of VPN instance, refer to the MPLS module in the 3Com Switch
8800 Configuration Guide.
16.1 BGP Configuration Commands
Note:
For the commands defining routing policies in BGP, refer to the “Routing Policy" of the next chapter.
16.1.1 aggregate
Syntax
aggregate address mask [ as-set | attribute-policy route-policy-name |
detail-suppressed | origin-policy route-policy-name | suppress-policy
route-policy-name ]*
undo aggregate address mask [ as-set | attribute-policy route-policy-name |
detail-suppressed | origin-policy route-policy-name | suppress-policy
route-policy-name ]*
View
BGP view
Parameter
address: Address of the aggregated route in dotted decimal format.
mask: Network mask of the aggregated route in dotted decimal format.
16-1
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
as-set: Creates a route with segment of AS_SET.
detail-suppressed: Only advertises the aggregated route.
suppress-policy route-policy-name: Suppresses the specific route selected and does not advertise part of the specific routes.
origin-policy route-policy-name: Selects the originate routes used for aggregation.
attribute-policy route-policy-name: Sets the attributes of the aggregated route.
Description
Use the aggregate command to establish an aggregated record in the BGP routing table.
Use the undo aggregate command to disable the function.
By default, there is no route aggregation.
The keywords are explained as follows:
Table 16-1 The use of the keywords
Keyword
as-set
Use
Used to produce an aggregated route, whose AS path information includes detailed routes. Use this keyword carefully when many AS paths need to be aggregated, for the frequent change of routes may lead to route vibration.
detail-suppressed
This keyword does not suppress any aggregated route, but it restrains the advertisement of all the specific routes. If only some specific routes are to be restrained, use the peer
filter-policy command carefully.
suppress-policy
Create an aggregated route with this keyword. At the same time, the advertisement of the specified route is restrained. If you want to restrain some specific routes selectively and leaves other routes still being advertised, use the if-match sub-statement of the route-policy command.
origin-policy
attribute-policy
Selects only the specific routes that are in accordance with route-policy to create an aggregated route.
Sets aggregated route attributes. The same work can be done by using the peer route-policy command, etc.
Example
Create an aggregated record in BGP routing table.
[SW8800-bgp] aggregate 168.328.0.0 255.255.0.0
16-2
3Com Switch 8800 Command Reference Guide
16.1.2 bgp
Chapter 16 BGP Configuration Commands
Syntax
View
System view
Parameter
as-number: The specified local AS number, in the range of 1 to 65535.
Description
Use the bgp command to enable BGP and enter the BGP view.
Use the undo bgp command to disable BGP.
By default, the system does not run BGP.
This command is used to enable and disable BGP as well as to specify the local AS number of BGP.
Example
bgp as-number
undo bgp [as-number ]
Enable BGP.
[SW8800] bgp 100
[SW8800-bgp]
16.1.3 compare-different-as-med
Syntax
compare-different-as-med
undo compare-different-as-med
View
BGP view
Parameter
None
Description
Use the compare-different-as-med command to enable comparison of MED values from different AS neighboring routes.
Use the undo compare-different-as-med command to disable the comparison.
16-3
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
By default, it is disabled to compare the MED attribute values from the routing paths of different AS peers.
If there are several routes available to one destination address, the route with smaller
MED parameter can be selected as the final route item.
Do not use this command unless it is determined that the same IGP and routing selection mode are adopted by different autonomous systems.
Example
[SW8800-bgp] compare-different-as-med
16.1.4 confederation id
Syntax
confederation id as-number
undo confederation id
View
BGP view
Parameter
as-number: The ID of BGP AS confederation. It is equal to the AS number which contains the AS numbers of multiple sub-ASs. The range is 1 to 65535.
Description
Use the confederation id command to configure confederation identifier.
Use the undo confederation id command to cancel the BGP confederation specified by as-number argument.
By default, the confederation ID is not configured.
Confederation can be adopted to solve the problem of too many IBGP full connections in a large AS domain. The solution is, first dividing the AS domain into several smaller sub-ASs, and each sub-ASs remains full-connected. These sub-ASs form a confederation. Key BGP attributes of the route, such as next hop, MED, local preference, are not discarded across each sub-ASs. The sub-ASs still look like a whole from the point of view of a confederation although these sub-ASs have EBGP relations.
This can assure the integrality of the former AS domain, and ease the problem of too many connections in the domain
Related command: confederation nonstandard, confederation peer-as.
Example
Confederation 9 consists of four sub-ASs, namely, 38, 39, 40 and 41. Here, the peer
10.1.1.1 is an internal member of the AS confederation while the peer 200.1.1.1 is an
16-4
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands external member of the AS confederation. For external members, Confederation 9 is a unified AS domain.
[SW8800] bgp 41
[SW8800-bgp] confederation id 9
[SW8800-bgp] confederation peer-as 38 39 40
[SW8800-bgp] group Confed38 external
[SW8800-bgp] peer Confed38 as-number 38
[SW8800-bgp] peer 10.1.1.1 group Confed38
[SW8800-bgp] group Remote98 external
[SW8800-bgp] peer Remote98 as-number 98
[SW8800-bgp] peer 200.1.1.1 group Remote98
16.1.5 confederation nonstandard
Syntax
confederation nonstandard
undo confederation nonstandard
View
BGP view.
Parameter
None
Description
Use the confederation nonstandard command to configure the router to be compatible with routers not following RFC1965.
Use the undo confederation nonstandard command to disable this function.
By default, it is in accordance with RFC1965.
Related command: confederation id, confederation peer-as.
Example
AS100 contains routers following nonstandard, which is composed of two sub-ASs,
64000 and 65000.
[SW8800] bgp 64000
[SW8800-bgp] confederation id 100
[SW8800-bgp] confederation peer-as 65000
[SW8800-bgp] confederation nonstandard
16-5
3Com Switch 8800 Command Reference Guide
16.1.6 confederation peer-as
Chapter 16 BGP Configuration Commands
Syntax
confederation peer-as as-number-1 [... as-number-n ]
undo confederation peer-as [ as-number-1 ] [... as-number-n ]
View
BGP view
Parameter
as-number-1...as-number-n: Sub-AS number. The range is 1 to 65535. This command can configure a maximum of 32 Sub-ASs belonging to a confederation.
Description
Use the confederation peer-as command to configure a confederation consisting of which Sub-ASs.
Use the undo confederation peer-as command to delete the specified Sub-AS in the confederation.
By default, no autonomous system is configured as a member of the confederation.
Before this command is performed, the confederation ID should be configured by the
confederation id command. Otherwise this configuration is invalid. The configured
ASs in this command are inside the confederation and each AS uses fully meshed network. The confederation appears as a single AS to the routers outside it.
Related command: confederation nonstandard, confederation id.
Example
Configure the confederation contains AS 2001 and 2002.
[SW8800-bgp]confederation peer-as 2000 2001
16.1.7 dampening
Syntax
dampening [ half-life-reachable half-life-unreachable reuse suppress ceiling ]
[ route-policy policy-name ]
undo dampening
View
BGP view
16-6
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 16 BGP Configuration Commands
half-life-reachable: Specifies the semi-dampening when the route is reachable. The range is 1 to 45 minutes. By default, the value is 15 minutes.
half-life-unreachable: Specifies the semi-dampening when the route is unreachable.
The range is 1 to 45 minutes. By default, the value is 15 minutes.
reuse: When the penalty is reduced under this value, the route is reused. The range is
1 to 20000. By default, the value is 750.
suppress: When the penalty exceeds this value, the route is suppressed. The range is
1 to 20000. By default, the value is 2000.
ceiling: The upper threshold of the penalty. The range is 1001 to 20000. By default, the value is 16000.
policy-name: Configures route policy name.
If these parameters are not set, their default values will be used.
The parameters are mutually dependent. Once one of these parameters is configured, all other parameters should also be specified.
Description
Use the dampening command to make BGP route attenuation valid or modify various
BGP route attenuation parameters.
Use the undo dampening command to make the characteristics invalid.
By default, no route attenuation is configured.
Related command: reset dampening, reset bgp flap-info, display bgp
routing-table dampened, display bgp routing-table flap-info.
Example
Modify the BGP route dampening parameters.
[SW8800-bgp] dampening 15 15 1000 2000 10000
16.1.8 debugging bgp
Syntax
debugging bgp { all | event | normal | { keepalive | mp-update | open | packet |
route-refresh | update } [ receive | send ] [ verbose ] }
undo debugging bgp { all | event | normal | keepalive | mp-update | open | packet |
route-refresh | update }
View
User view
16-7
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 16 BGP Configuration Commands
all: Indicates to enable all BGP information debugging.
event: Indicates to enable BGP event information debugging.
normal: Indicates to enable information debugging of BGP normal functions.
keepalive: Indicates to enable BGP Keepalive packet information debugging.
mp-update: Indicates to enable MBGP Update packet information debugging.
open: Indicates to enable BGP Open packet information debugging.
packet: Indicates to enable BGP packet information debugging.
route-refresh: Indicates to enable BGP route-refresh packet information debugging.
update: Indicates to enable BGP Update packet information debugging.
receive: Information of receiving packets.
send: Information of sending packets.
verbose: Detailed information.
Description
Use the debugging bgp all command to enable all the information debugging of BGP packet and events.
Use the debugging bgp event command to enable the information debugging of BGP events
Use the debugging bgp keepalive command to enable the information debugging of
BGP Keepalive packets.
Use the debugging bgp packet command to enable the information debugging of
BGP packets.
Use the undo debugging bgp command to disable the debugging functions.
Example
Enable the information debugging of BGP packets.
<SW8800> debugging bgp packet
16.1.9 default local-preference
Syntax
default local-preference value
undo default local-preference
View
BGP view
16-8
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 16 BGP Configuration Commands
value: Default local preference to be configured. The range is 0 to 4294967295. By default, its value is 100.
Description
Use the default local-preference command to configure the local preference.
Use the undo default local-preference command to restore the default value.
Configuring different local preferences will affect BGP routing selection.
Example
The two routers RTA and RTB in the same autonomous area connect with external autonomous areas. The command can be used to configure the default local preference of RTB as 180 so that the route via RTB is selected first when the same route goes through RTA and RTB at the same time.
[SW8800-bgp]default local-preference 180
16.1.10 default med
Syntax
default med med-value
undo default med
View
BGP view
Parameter
med-value: MED value to be specified. The range is 0 to 4294967295. By default, the
med-value is 0.
Description
Use the default med command to configure the default system metric.
Use the undo default med command to restore the default metric of the system.
Multi-Exit Discriminators (MED) attribute is the external metric of a route. Different from local preference, MED is exchanged between ASs. However, this attribute is non-transitive. When a router running BGP gets routes with the same destination address but different next hops from different external peers, it selects the route with the smallest MED as the optimum route, provided that all other conditions are the same.
16-9
3Com Switch 8800 Command Reference Guide
Example
Chapter 16 BGP Configuration Commands
Routers RTA and RTB belong to AS100 and router RTC belongs to AS200. RTC is the peer of RTA and RTB. So the MED of RTA can be configured as 25 to allow RTC to select the route transmitted by RTB first.
[SW8800-bgp] default med 25
16.1.11 display bgp group
Syntax
display bgp group [ group-name ]
View
Any view
Parameter
group-name: Specified a peer group.
Description
Use the display bgp group command to view the information of peer groups.
Example
View the information of the peer group aaa.
<SW8800> display bgp group aaa
Group : aaa type : external
as-number : 200 members in this group :
10.1.1.1 11.1.1.1
configuration within the group :
no export policy route-policy
no export policy filter-policy
no export policy acl
no export policy ip-prefix
route-policy specified in import policy : aaa
no import policy filter-policy
no import policy acl
no import policy ip-prefix
no default route produce
16-10
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
Table 16-2 Description on the fields of the display bgp group command
Field
Group type as-number members in this group route-policy filter-policy acl
Description
Name of peer group
Type of peer group: IBGP or EBGP
AS number of peer group
Members in this peer group
Name of configured route policy
Configured export and import route filter for BGP
Configured access control list
16.1.12 display bgp network
Syntax
display bgp network
View
Any view
Parameter
None
Description
Use the display bgp network command to view the routing information that has been configured.
Example
Display the routing information that has been configured.
<SW8800> display bgp network
Network Mask
133.1.1.0 255.255.255.0 None
Table 16-3 Description on the fields of the display bgp network command
Field Description
Network Network address
Mask Mask
16-11
3Com Switch 8800 Command Reference Guide
Field
Route-policy
16.1.13 display bgp paths
Chapter 16 BGP Configuration Commands
Description
Configured route policy
Syntax
display bgp paths as-regular-expression
View
Any view
Parameter
as-regular-expression: Matched AS path regular expression.
Description
Use the display bgp paths command to view the information about AS paths
Example
Display the information about the AS paths.
<SW8800> display bgp paths ^600$
Flags: - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Id Hash-Index References Aggregator Origin As-Path
--------------------------------------------------------------------
6 90 15 <null> IGP 600
Table 16-4 Description on the fields of the display bgp paths command
Field
Flags
Id
Hash-Index
References
Description
State flags:
- valid (valid)
^ - best (selected)
D – damped (discarded)
H – history (history)
I – internal (interior gateway protocol)
S - aggregate suppressed (suppressed)
Value of sequence number
Value of Hash-index
Count of times that the route is referenced
16-12
3Com Switch 8800 Command Reference Guide
Field
Aggregator
Origin
As-path
Chapter 16 BGP Configuration Commands
Description
Mask length of aggregate route
Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:
IGP
EGP
INC
The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command
network as inside of AS, and origin type as IGP.
The route is learned from exterior gateway protocol
(EGP).
Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE
AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided
16.1.14 display bgp peer
Syntax
display bgp peer peer-address verbose
display bgp peer [ verbose ]
View
Any view
Parameter
peer-address: Specifies the peer to be displayed.
verbose: Displays the detailed information of the peer.
Description
Use the display bgp peer command to view the information about BGP peers.
Example
Display the detail information of the peer 10.110.25.20.
<SW8800> display bgp peer 10.110.25.20 verbose
Peer: 10.110.25.20 Local: Unspecified
Type: External
State: Idle Flags: <Idled>
Last State: NoState Last Event: NoEvent
Last Error: None
16-13
3Com Switch 8800 Command Reference Guide
Options: <>
Configuration within the peer :
no export policy route-policy
no export policy ip-prefix
no export policy filter-policy
no export policy acl
no import policy route-policy
no import policy ip-prefix
no import policy filter-policy
no import policy acl
no default route produce
Chapter 16 BGP Configuration Commands
Table 16-5 Description on the fields of the display bgp peer verbose command
Field
Peer
Local
Type
State
Flags
Last State
Description
IP address of peer and port number used by the peer to establish
TCP connection
IP address and port number used to establish TCP connection of local end
Type of peer: Internal for IBGP, and External for EBGP
State of peer
Flags of peer
Last state before entering the current state
Last Event
Last Error
Last event of neighbor state machine
Last error of neighbor state machine
Options Options
16.1.15 display bgp routing-table
Syntax
display bgp routing-table [ ip-address [ mask ] ]
View
Any view
Parameter
ip-address: Destination of the network.
mask: Mask of the network.
16-14
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the display bgp routing-table command to view all the BGP routing information.
Example
Display all the BGP routing information.
<SW8800> display bgp routing-table
Flags: - valid ^ - active I - internal
D - damped H - history S - aggregate suppressed
Dest/Mask Next-hop Med Local-pref Origin As-path
-----------------------------------------------------------------------
#^ 129.1.1.0/24 5.5.5.5 IGP 600
#^ 129.1.2.0/24 5.5.5.5 IGP 600
#^ 129.1.3.0/24 5.5.5.5 IGP 600
#^ 129.1.4.0/24 5.5.5.5 IGP 600
#^ 129.1.5.0/24 5.5.5.5 IGP 600
#^ 129.1.6.0/24 5.5.5.5 IGP 600
#^ 129.1.7.0/24 5.5.5.5 IGP 600
#^ 129.1.8.0/24 5.5.5.5 IGP 600
#^ 129.1.9.0/24 5.5.5.5 IGP 600
#^ 129.1.10.0/24 5.5.5.5 IGP 600
Table 16-6 Description on the fields of the display bgp routing-table command
Field
Flags
Description
State flags:
- valid (valid)
^ - best (selected)
D – damped (discarded)
H – history (history)
I – internal (interior gateway protocol)
S - aggregate suppressed (suppressed)
Dest/Mask Destination address/Mask
Next Hop IP address of next hop
Med
MULTI_EXIT_DISC attribute value, which ranges from 0 to
4294967295
Local-Pref Local preference, which ranges from 0 to 4294967295
16-15
3Com Switch 8800 Command Reference Guide
Field
Origin
As-path
Chapter 16 BGP Configuration Commands
Description
Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:
IGP
The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command network as inside of AS, and origin type as IGP.
EGP The route is learned from exterior gateway protocol (EGP).
INC
Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE
AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided
16.1.16 display bgp routing-table as-path-acl
Syntax
display bgp routing-table as-path-acl acl-number
View
Any view
Parameter
acl-number: Specifies matched AS path list number ranging from 1 to 199.
Description
Use the display bgp routing-table as-path-acl command to view routes that match an as-path acl.
Example
Display routes that match the as-path-acl 1.
<SW8800> display bgp routing-table as-path-acl 1
Flags: - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Dest/Mask Pref Next-Hop Med Local-pref Origin As-path
--------------------------------------------------------------------
#^ 1.1.1.0/24 256 10.10.10.1 0 IGP 200
#^ 1.1.2.0/24 256 10.10.10.1 0 IGP 200
16-16
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
#^ 1.1.3.0/24 256 10.10.10.1 0 IGP 200
#^ 2.2.3.0/24 256 10.10.10.1 0 INC 200
#^ 4.4.4.0/24 256 10.10.10.1 0 INC 200
#^ 9.9.9.0/24 256 10.10.10.1 0 INC 200
#^ 10.10.10.0/24 256 10.10.10.1 0 IGP 200
#^ 22.1.0.0/16 256 200.1.7.2 100 INC 200
88.1.0.0/16 60 0.0.0.0 IGP
Table 16-7 Description on the fields of the display bgp routing-table as-path-acl command
Field
Dest/Mask Destination address/Mask
Description
Pref Preference
Nexthop IP address of next hop
Med MULTI_EXIT_DISC attribute value
Origin
As-path
Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:
IGP
The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command network as inside of AS, and origin type as IGP.
EGP The route is learned from exterior gateway protocol (EGP).
INC
Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE
AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided
16.1.17 display bgp routing-table cidr
Syntax
display bgp routing-table cidr
View
Any view
Parameter
None
16-17
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the display bgp routing-table cidr command to view the routing information about the non-natural mask (namely the classless interdomain routing, CIDR).
Example
<SW8800> display bgp routing-table cidr
Flags: - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Dest/Mask Pref Next-Hop Med Local-pref Origin As-path
--------------------------------------------------------------------
#^ 22.1.0.0/16 256 200.1.7.2 100 INC 200
88.1.0.0/16 60 0.0.0.0 IGP
For detailed description of the output information, see Table 16-6.
16.1.18 display bgp routing-table community
Syntax
display bgp routing-table community [ aa:nn | no-export-subconfed |
no-advertise | no-export ]* [ whole-match ]
View
Any view
Parameter
Description
Use the display bgp routing-table community command to view the routing information related to the specified BGP community number in the routing table.
Example
aa:nn: Specifies a community number.
no-export-subconfed: Does not send matched route outside AS.
no-advertise: Sends matched route to no peers.
no-export: Does not announce the route to the AS or the association outside, but can advertise to other sub-ASs.
whole-match: Configures to display the exactly matched routes.
Display the routing information matching BGP community number 11:22.
<SW8800> display bgp routing-table community 11:22
Flags: - valid, ^ - best,
16-18
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
D - damped, H - history,
I - internal, S – aggregate suppressed
Dest/Mask Pref Next-Hop Med Local-pref Origin As-path
--------------------------------------------------------------------
#^ 1.0.0.0/8 256 172.10.0.2 100 IGP
#^ 2.0.0.0/8 256 172.10.0.2 100 IGP
For detailed description of the output information, see Table 16-6.
16.1.19 display bgp routing-table community-list
Syntax
display bgp routing-table community-list community-list-number [ whole-match ]
View
Any view
Parameter
community-list-number: Specifies a community-list.
whole-match: Configures to display the exactly matched routes.
Description
Use the display bgp routing-table community-list command to view the routing information matching the specified BGP community list.
Example
Display the routing information matching BGP community list 1.
[SW8800] display bgp routing-table community-list 1
Flags: - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Destination/Mask Pref Next-hop Med Local-Pref Origin As-Path
-------------------------------------------------------------------
1.1.1.0/24 256 10.10.10.1 0 IGP 200
1.1.2.0/24 256 10.10.10.1 0 IGP 200
1.1.3.0/24 256 10.10.10.1 0 IGP 200
2.2.3.0/24 256 10.10.10.1 0 INC 200
4.4.4.0/24 256 10.10.10.1 0 INC 200
9.9.9.0/24 256 10.10.10.1 0 INC 200
10.10.10.0/24 0 10.10.10.2 0 IGP
10.10.10.0/24 256 10.10.10.1 0 IGP 200
For detailed description of the output information, see Table 16-6.
16-19
3Com Switch 8800 Command Reference Guide
16.1.20 display bgp routing-table dampened
Chapter 16 BGP Configuration Commands
Syntax
display bgp routing-table dampened
View
Any view
Parameter
None
Description
Use the display bgp routing-table dampened command to view BGP dampened routes.
Example
View BGP dampened information.
<SW8800> display bgp routing-table dampened
Flags: - valid, ^ - best,
I - internal, S – aggregate suppressed
Dest/Mask Source Damping-limit Origin As-path
-----------------------------------------------------------------
#D 11.1.0.0/16 133.1.1.2 1:20:00 IGP 200
Table 16-8 Description on the fields of the display bgp routing-table dampened command
Field
Flags
#D
Dest/Mask
Source
Damping-limit
Description
State flags:
- valid (valid)
^ - best (selected)
D – damped (discarded)
H – history (history)
I – internal (interior gateway protocol)
S - aggregate suppressed (suppressed)
The valid and damped route
The dampened route to the destination network 11.1.0.0
The nexthop of the route
The time before dampening turns invalid and the route can be reused.
16-20
3Com Switch 8800 Command Reference Guide
Field
Origin
As-path
Chapter 16 BGP Configuration Commands
Description
Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:
IGP
EGP
INC
The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command network as inside of AS, and origin type as IGP.
The route is learned from exterior gateway protocol
(EGP).
Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE
AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided
16.1.21 display bgp routing-table different-origin-as
Syntax
display bgp routing-table different-origin-as
View
Any view
Parameter
None
Description
Use the display bgp routing-table different-origin-as command to view routes that have different source autonomous systems
Example
View the routes that have different source ASs.
<SW8800> display bgp routing-table different-origin-as
Flags: - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Destination/Mask Pref Next-hop Med Local-Pref Origin As-Path
------------------------------------------------------------------
10.10.10.0/24 0 10.10.10.2 0 IGP
10.10.10.0/24 256 10.10.10.1 0 IGP 200
16-21
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
For detailed description of the output information, see Table 16-6.
16.1.22 display bgp routing-table flap-info
Syntax
display bgp routing-table flap-info [ { regular-expression as-regular-expression } |
{ as-path-acl acl-number } | { network-address [ mask [ longer-match ] ] } ]
View
Any view
Parameter
as-regular-expression: The route flap-info matching AS path regular expression.
acl-number: Number of the specified AS path to be matched, ranging from 1 to 199.
network-address: Displays the flap information of this IP address.
mask: Network mask.
longer-match: Shows the route flap-info that is more specific than address, mask.
Description
Use the display bgp routing-table flap-info command to view BGP flap-info. If the
network-address mask arguments are set to 0.0.0.0 0.0.0.0, this command displays the flap statistics of all BGP routes.
Example
Display BGP flap-info.
<SW8800> display bgp routing-table flap-info
Flags: - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Dest/Mask Source Keepup-time Damping-limit Flap-times Origin As-path
--------------------------------------------------------------------
#D 11.1.0.0/16 133.1.1.2 48 1:20:30 4 IGP 200
16-22
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
Table 16-9 Description on the fields of the display bgp routing-table flap-info command
Item
Flags
Description
State flags:
- valid (valid)
^ - best (selected)
D – damped (discarded)
H – history (history)
I – internal (interior gateway protocol)
S - aggregate suppressed (suppressed)
#D
Dest/Mask
The valid and damped route
The dampened route to the destination network 11.1.0.0
Source The nexthop of the route
Keepup-time The time that route damping has continued
Damping-limit
The time before dampening turns invalid and the route can be reused.
Flap-times The times of the route flap
Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:
Origin
As-path
IGP
The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command network as inside of AS, and origin type as IGP.
EGP The route is learned from exterior gateway protocol (EGP).
INC
Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE
AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided
16.1.23 display bgp routing-table peer
Syntax
display bgp routing-table peer peer-address { advertised | received }
[ network-address [ mask ] | statistic ]
View
Any view
16-23
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 16 BGP Configuration Commands
peer-address: Specifies the peer to be displayed.
advertised: Routing information advertised by the specified peer.
received: Routing information the specified peer received.
network-address mask : IP address and address mask of destination network.
statistic: Statistic routing information of peer.
Description
Use the display bgp routing-table peer command to view the routing information the specified BGP peer advertised or received.
Related command: display bgp peer.
Example
Display the routing information advertised by BGP peer 10.10.10.1.
[SW8800] display bgp routing table peer 10.10.10.1 advertised
Flags: - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Dest/mask Next -Hop Med Local-pref Origin As-path
*> 10.10.10.0/24 0.0.0.0 INC
For detailed description of the output information, see Table 16-6.
16.1.24 display bgp routing-table regular-expression
Syntax
display bgp routing-table regular-expression as-regular-expression
View
Any view
Parameter
as-regular-expression: Matched AS regular expression.
Description
Use the display bgp routing-table regular-expression command to view the routing information matching the specified AS regular expression
Example
Display the routing information matched with ^600$.
<SW8800> display bgp routing-table regular-expression ^600$
16-24
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
Flags: - valid, ^ - best,
D - damped, H - history,
I - internal, S – aggregate suppressed
Destination/Mask Pref Next-hop Med Local-Pref Origin Path
--------------------------------------------------------------------
1.1.1.0/24 256 10.10.10.1 0 IGP 200
1.1.2.0/24 256 10.10.10.1 0 IGP 200
1.1.3.0/24 256 10.10.10.1 0 IGP 200
2.2.3.0/24 256 10.10.10.1 0 INC 200
4.4.4.0/24 256 10.10.10.1 0 IGP 200
9.9.9.0/24 256 10.10.10.1 0 INC 200
10.10.10.0/24 256 10.10.10.1 0 IGP 200
For detailed description of the output information, see Table 16-6.
16.1.25 filter-policy export
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
View
BGP view
Parameter
acl-number: Number of IP access control list, in the range of 2000 to 3999.
ip-prefix-name: Name of ip prefix list. Its length ranges from 1 to 19.
protocol: Specified protocols advertising routing information which include direct, ospf, ospf-ase, ospf-nssa, rip, isis and static.
Description
Use the filter-policy export command to filter the advertised routes and only the routes passing the filter can be advertised by BGP.
Use the undo filter-policy export command to cancel the filtration to the advertised routes.
By default, the advertised routes are not filtered.
If the protocol argument is specified, only the imported route generated by the specified protocol is filtered and the imported routes generated by other protocols are not affected. If the protocol argument is not specified, the imported route generated by any protocol will be filtered.
16-25
3Com Switch 8800 Command Reference Guide
Example
Chapter 16 BGP Configuration Commands
Use ACL 2000 to filter the routing information advertised by BGP.
[SW8800-bgp] filter-policy 2000 export
16.1.26 filter-policy import
Syntax
filter-policy gateway ip-prefix-name import
undo filter-policy gateway ip-prefix-name import
filter-policy { acl-number | ip-prefix ip-prefix-name } import
undo filter-policy { acl-number | ip-prefix ip-prefix-name } import
View
BGP view
Parameter
acl-number: Number of IP access control list, in the range of 2000 to 3999.
ip-prefix-name: Name of an address prefix list. It is used for filtering routing information by destination address. Its length ranges from 1 to 19.
gateway ip-prefix-name: Name of a peer-router address prefix list. It is used for filtering routing information by peer-router address. Its length ranges from 1 to 19.
Description
Use the filter-policy gateway import command to filter the learned routing information advertised by the peer with the specified address.
Use the undo filter-policy gateway import command to cancel the filtration to the routing information advertised by the peer with specified address.
Use the filter-policy import command to filter the received global routing information.
Use the undo filter-policy import command to remove the filtration to the received global routing information.
By default, filtration to the received routing information is not configured.
This command can be used to filter the routes received by BGP and determines whether to add the routes to the BGP routing table.
Example
Use ACL 2000 to filter the routing information received by BGP.
[SW8800-bgp] filter-policy 2000 import
16-26
3Com Switch 8800 Command Reference Guide
16.1.27 group
Chapter 16 BGP Configuration Commands
Syntax
group group-name [ internal | external ]
undo group group-name
View
BGP view
Parameter
group-name: Specifies the name of the peer group. It can consist of numbers or letters with a length ranging from 1 to 47. group-name is locally significant.
internal: Specifies the type of the peer group as IBGP.
external: Specifies the type of the peer group as EBGP, including other groups of other sub-ASs in the confederation.
Description
Use the group group-name command to establish a peer group.
Use the undo group group-name command to cancel the configured peer group.
The default type of BGP peer group is internal.
Rather than existing alone, a BGP peer must belong to a peer group. Therefore, when creating a BGP peer, you must create a BGP peer group first and then add the peer into the group.
All member peers must use the same update policy as the peer group, but they may use different ingress policies.
Example
Create an IBGP group named test.
[SW8800-bgp] group test
16.1.28 import-route
Syntax
import-route protocol [ med med-value | route-policy route-policy-name ]
undo import-route protocol
View
BGP view
16-27
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 16 BGP Configuration Commands
protocol: Specifies source routing protocols which can be imported, which include direct, ospf, ospf-nssa , ospf-ase, rip, isis and static at present.
med med-value: Specifies the MED value loaded by an imported route, ranging from 0 to 4294967295.
route-policy route-policy-name: Specifies a route-policy used for filtering imported routes of other protocols. It can consist of numbers and letters with a length ranging from 1 to 19.
Description
Use the import-route command to import routes of other protocols.
Use the undo import-route command to cancel importing routes of other protocols.
By default, BGP does not import routes of other protocols.
Example
Import routes of RIP.
[SW8800-bgp] import-route rip
16.1.29 network
Syntax
network ip-address [ address-mask ] [ route-policy route-policy-name ]
undo network ip-address [ address-mask ] [ route-policy route-policy-name ]
View
BGP view
Parameter
ip-address: Network address that BGP advertises.
address-mask: Mask of the network address.
route-policy-name: Route-policy applied to advertised routes.
Description
Use the network command to configure the network routes advertised by the local
BGP.
Use the undo network command to cancel the existing configuration.
By default, the local BGP does not advertise any routes.
16-28
3Com Switch 8800 Command Reference Guide
Example
Chapter 16 BGP Configuration Commands
Advertise routes to the network segment 10.0.0.0/16.
[SW8800-bgp] network 10.0.0.1 255.255.0.0
16.1.30 peer advertise-community
Syntax
peer group-name advertise-community
undo peer group-name advertise-community
View
BGP view
Parameter
group-name: Name of a peer group.
Description
Use the peer advertise-community command to enable the transmission of the community attribute to a peer group.
Use the undo peer advertise-community command to cancel the existing configuration.
By default, the community attribute is not transmitted to any peer group.
Related command: if-match community-list, apply community.
Example
Transmit community attribute to the peer group named test.
[SW8800-bgp] peer test advertise-community
16.1.31 peer allow-as-loop
Syntax
peer { group-name | peer-address } allow-as-loop [ number ]
undo peer { group-name | peer-address } allow-as-loop
View
BGP view
Parameter
group-name: Specifies name of the peer group.
peer-address: Specifies IP address of the peer.
16-29
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
number: Specifies the repeating times of local AS, ranging from 1 to 10.
Description
Use the peer allow-as-loop command to configure the repeating time of local AS.
Use the undo peer allow-as-loop command to remove the repeating time of local AS.
Related command: display current-configuration, display bgp routing-table peer,
display bgp routing-table group.
Example
Specify to configure the repeating times of local AS to 2.
[SW8800-bgp] peer 1.1.1.1 allow-as-loop 2
16.1.32 peer as-number
Syntax
peer group-name as-number as-number
undo peer group-name as-number
View
BGP view
Parameter
Description
Use the peer as-number command to configure the peer AS number of the specified peer group.
Use the undo peer as-number command to delete the peer AS number of the specified peer group.
By default, no peer AS number of the specified peer group is configured.
Example
group-name: Name of peer group.
as-number: Peer AS number of the peer group, the range is 1 to 65535.
Specify the peer AS number for the peer group test as 100.
[SW8800-bgp] peer test as-number 100
16.1.33 peer as-path-acl export
Syntax
peer group-name as-path-acl acl-number export
16-30
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
undo peer group-name as-path-acl acl-number export
View
BGP view
Parameter
group-name: Specifies name of the peer group.
acl-number: Number of an AS path list, in the range of 1 to 199.
export: Applies the AS path list to advertised routes.
Description
Use the peer as-path-acl export command to configure filtering Policy of BGP advertised routes based on AS path list.
Use the undo peer as-path-acl command to cancel the existing configuration.
By default, the peer group has no AS path list.
This command can only be configured on the peer group. The acl-number specifies the number of the AS path list. It is configured by the ip as-path-acl command rather than the acl command.
Related command: peer as-path-acl import, ip as-path-acl.
Example
Configure to filter the routes advertised by the peer group test using the AS path-list 1.
[SW8800-bgp] peer test as-path-acl 1 export
16.1.34 peer as-path-acl import
Syntax
peer { group-name | peer-address } as-path-acl acl-number import
undo peer { group-name | peer-address } as-path-acl acl-number import
View
BGP view
Parameter
group-name: Specifies the name of the peer group.
peer-address: Specifies IP address of the peer, in dotted decimal format.
acl-number: Specifies the filter list number of an AS regular expression. The range is 1 to 199.
import: Applies the AS path list to received routes.
16-31
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the peer as-path-acl import command to configure filtering policy of BGP received routes based on AS path list.
Use the undo peer as-path-acl import command to cancel the existing configuration.
By default, the peer/peer group has no AS path list.
The priority of the inbound filter policy configured for the peer is higher than that configured for the peer group.
Related command: peer as-path-acl export.
Example
Set the AS path ACL of the peer group test to filter BGP received routes.
[SW8800-bgp] peer test as-path-acl 1 import
16.1.35 peer connect-interface
Syntax
peer { group-name | peer-address } connect-interface interface-name
undo peer { group-name | peer-address } connect-interface interface-name
View
BGP view
Parameter
group-name: Specified peer group.
peer-address: IP address of the peer.
interface-name: Interface name.
Description
Use the peer connect-interface command to specify the source interface of a route update packet.
Use the undo peer connect-interface command to restore the best source interface.
By default, BGP uses the best source interface.
Usually, BGP uses the optimal route to update the source interface of the packets.
However, you can set the mode of the interface to Loopback in order to send route updates even if the interface is not work normally.
Example
Specify loopback0 as the source interface of a route update packet.
[SW8800-bgp] peer test connect-interface loopback 0
16-32
3Com Switch 8800 Command Reference Guide
16.1.36 peer default-route-advertise
Chapter 16 BGP Configuration Commands
Syntax
peer group-name default-route-advertise
undo peer group-name default-route-advertise
View
BGP view
Parameter
group-name: Specifies name of the peer group.
Description
Use the peer default-route-advertise command to configure a peer group to generate a default route for a peer.
Use the undo peer default-route-advertise command to cancel the existing configuration.
By default, a peer group does not import the default route.
For this command, no default route needs to exist in the routing table. A default route is sent unconditionally to a peer with the next hop as itself.
Example
Configure a peer group named test to generate a default route.
[SW8800-bgp] peer test default-route-advertise
16.1.37 peer description
Syntax
peer { group-name | peer-address } description description-line
undo peer { group-name | peer-address } description
View
BGP view
Parameter
group-name: Group name.
peer-address: Address of the peer.
description-line: Description information configured, which can be letters or numbers with the maximum length of 79.
16-33
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the peer description command to configure the description information of the peer/peer group.
Use the undo peer description command to cancel the description information of the peer/peer group.
By default, description information of peers/peer group is not configured.
Related command: display current-configuration, display bgp routing-table peer,
display bgp routing-table group.
Example
Configure the description information of the peer whose name is group1 as marlboro1.
[SW8800-bgp] peer group1 description marlboro1
16.1.38 peer ebgp-max-hop
Syntax
peer group-name ebgp-max-hop [ ttl ]
undo peer group-name ebgp-max-hop
View
BGP view
Parameter
Description
Use the peer ebgp-max-hop command to allow the router to establish EBGP connection with the peer on indirectly connected network.
Use the undo peer ebgp-max-hop command to cancel the existing configuration.
By default, this feature is disabled.
Example
group-name: Specifies the name of the peer group.
ttl: Maximum hop value. The range is 1 to 255. By default, the value is 64.
Allow the router to establish EBGP connection with the peer group named test indirectly connected.
[SW8800-bgp] peer test ebgp-max-hop
16-34
3Com Switch 8800 Command Reference Guide
16.1.39 peer enable
Chapter 16 BGP Configuration Commands
Syntax
peer { group-name | peer-address } enable
undo peer { group-name | peer-address } enable
View
BGP view
Parameter
group-name: Specifies the name of the peer group which specifies the entire peer group.
peer-address: IP address of a peer, which specifies a certain peer.
Description
Use the peer enable command to enable the specified peer/peer group.
Use the undo peer enable command to disable the specified peer/peer group.
By default, BGP peer/peer group is enabled.
If the specified peer/peer group is disabled, the router will not exchange routing information with the specified peer/peer group.
Example
Disable the specified peer. After the configuration, the local router does not exchange
BGP routing information with the specified peer.
[SW8800-bgp] peer 18.10.0.9 group group1
[SW8800-bgp] undo peer 18.10.0.9 enable
16.1.40 peer filter-policy export
Syntax
peer group-name filter-policy acl-number export
undo peer group-name filter-policy acl-number export
View
BGP view
Parameter
group-name: Specifies the name of the peer group.
acl-number: Specifies an IP acl number, ranging from 2000 to 3999.
export: Egress filter policy. It is only applicable to peer groups.
16-35
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the peer filter-policy export command to configure the filter-policy list of routes advertised by a peer group.
Use the undo peer filter-policy export command to cancel the existing configuration.
By default, a peer/peer group has no access control list (acl).
The peer filter-policy export command can only be configured on peer groups.
Related command: peer filter-policy export, ip as-path-acl, peer as-path-acl.
Example
Configure to use acl 2000 to filter the routes advertised by the peer group test.
[SW8800-bgp] peer test filter-policy 2000 export
16.1.41 peer filter-policy import
Syntax
peer { group-name | peer-address } filter-policy acl-number import
undo peer { group-name | peer-address } filter-policy acl-number import
View
BGP view
Parameter
group-name: Specifies the name of the peer group.
peer-address: Specifies the IP address of the peer.
acl-number: Specifies an IP acl number, ranging from 2000 to 3999. That is, you can use basic ACLs or advanced ACLs.
import: Ingress filter policy. It is only applicable to peer groups.
Description
Use the peer filter-policy import command to configure the filter-policy list of the routes received by a peer/peer group.
Use the undo peer filter-policy import command to cancel the existing configuration.
By default, a peer/peer group has no access control list (acl).
Related command: ip as-path-acl, peer as-path-acl export and peer as-path-acl
import.
The priority of the inbound filter policy configured for the peer is higher than that configured for the peer group.
16-36
3Com Switch 8800 Command Reference Guide
Example
Chapter 16 BGP Configuration Commands
Configure to use acl 2000 to filter the routes received by the peer group test..
[SW8800-bgp] peer test filter-policy 2000 import
16.1.42 peer group
Syntax
peer peer-address group group-name [ as-number as-number ]
undo peer peer-address
View
BGP view
Parameter
group-name: Specifies the name of the peer group, which can consist of letters and numbers with a length ranging from 1 to 47.
peer-address: Specifies the IP address of the peer.
as-number: Peer AS number of the peer/peer group, in the range of 1 to 65535.
Description
Use the peer group command to add a peer to the existing peer group.
Use the undo peer group command to delete the specified peer.
When you add a peer to an IBGP peer group, the as-number as-number argument is not available.
When a peer is added to an EBGP peer group that has been assigned an AS number, the peer inherits the configuration of the group. You cannot assign an AS number to the peer separately. If the peer group is not assigned an AS number, you need to assign an
AS number to each peer when adding it to the group. The peers in the same peer group may use different AS numbers.
Example
Add a peer to the peer group TEST.
[SW8800-bgp] group TEST
[SW8800-bgp] peer TEST as-number 2004
[SW8800-bgp] peer 10.1.1.1 group TEST
16.1.43 peer ip-prefix export
Syntax
peer group-name ip-prefix prefixname export
16-37
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
undo peer group-name ip-prefix prefixname export
View
BGP view
Parameter
group-name: Name of peer group.
prefixname: Name of the specified ip-prefix. It is a character string of 1 to 19 characters.
export: Applies the filtering policy on the route transmitted to the specified peer/peer group.
Description
Use the peer ip-prefix export command to configure the route filtering policy of routes advertised by the peer group based on the ip-prefix.
Use the undo peer ip-prefix export command to cancel the route filtering policy of the peer/peer group based on the ip-prefix.
By default, the route filtering policy of the peer group is not specified.
The peer ip-prefix export command can only be configured on peer groups.
Related command: peer ip-prefix import.
Example
Configure the route filtering policy of the peer group based on the ip-prefix 1.
[SW8800-bgp] peer group1 ip-prefix list1 export
16.1.44 peer ip-prefix import
Syntax
peer { group-name | peer-address } ip-prefix prefixname import
undo peer { group-name | peer-address } ip-prefix prefixname import
View
Parameter
BGP view
group-name: Name of peer group.
peer-address: IP address of the peer.
prefixname: Name of the specified ip-prefix.
import: Applies the filtering policy on the route received by the specified peer/peer group.
16-38
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the peer ip-prefix import command to configure the route filtering policy of routes received by the peer/peer group based on the ip-prefix.
Use the undo peer ip-prefix import command to cancel the route filtering policy of the peer/peer group based on the ip-prefix.
By default, the route filtering policy of the peer/peer group is not specified.
The priority of the inbound filter policy configured for the peer is higher than that configured for the peer group.
Related command: peer ip-prefix export.
Example
Configure the route filtering policy of the peer group based on the ip-prefix 1.
[SW8800-bgp] peer group1 ip-prefix list1 import
16.1.45 peer next-hop-local
Syntax
peer group-name next-hop-local
undo peer group-name next-hop-local
View
BGP view
Parameter
group-name: Specifies the name of the peer group.
Description
Use the peer next-hop-local command to configure to perform the process of the next hop in the route to be advertised to the peer/peer group and take the address of itself as the next hop.
Use the undo peer next-hop-local command to cancel the existing configuration.
Example
When BGP distributes the routes to the peer group “test”, it will take its own address as the next hop.
[SW8800-bgp] peer test next-hop-local
16-39
3Com Switch 8800 Command Reference Guide
16.1.46 peer password
Chapter 16 BGP Configuration Commands
Syntax
View
BGP view
Parameter
group-name: Name of the peer group.
peer-address: IP address of the peer, in dotted decimal format.
cipher: Displays the configured password in cipher text mode.
simple: Displays the configured password in simple text mode.
password: Password in character string form with 1 to 16 characters when parameter
simple is configured in the command or in the event of inputting the password in simple text mode but parameter cipher is configured in the command; with 24 characters in the event of inputting the password in cipher text mode when parameter cipher is configured in the command.
Description
Use the peer password command to configure MD5 authentication for BGP during
TCP connection setup.
Use the undo peer password command to cancel the configuration.
By default, BGP does not perform MD5 authentication when TCP connection is set up.
Once MD5 authentication is enabled, both parties involved in the authentication must be configured with identical authentication modes and passwords. Otherwise, TCP connection will not be set up because of the failed authentication.
This command is used to configure MD5 authentication for the specific peer only when the peer group to which the peer belongs is not configured with MD5 authentication.
Otherwise, the peer should be consistent with the peer group.
Example
peer { group-name | peer-address } password { cipher | simple } password
undo peer { group-name | peer-address } password
Adopt MD5 authentication on the TCP connection set up between the local router at
10.1.100.1 and the peer router at 10.1.100.2.
[SW8800-bgp] peer 10.1.100.2 password simple 3Com
Perform the similar configuration on the peer.
[SW8800-bgp] peer 10.1.100.1 password simple 3Com
16-40
3Com Switch 8800 Command Reference Guide
16.1.47 peer public-as-only
Chapter 16 BGP Configuration Commands
Syntax
peer group-name public-as-only
undo peer group-name public-as-only
View
BGP view
Parameter
group-name: Name of a peer group.
Description
Use the peer public-as-only command to configure not to carry the AS number when transmitting BGP update packets.
Use the undo peer public-as-only command to configure to carry the AS number when transmitting BGP update packets.
By default, private AS number is carried when transmitting BGP update packets.
Generally, BGP transmits BGP update packets with the AS number (either public AS number or private AS number). To enable some outbound routers to ignore the AS number when transmitting update packets, you can configure not to carry the AS number when transmitting BGP update packets.
Example
Configure not to carry the private AS number when transmitting BGP update packets to the peer named test.
[SW8800-bgp] peer test public-as-only
16.1.48 peer reflect-client
Syntax
peer group-name reflect-client
undo peer group-name reflect-client
View
BGP view
Parameter
group-name: Name of peer group.
16-41
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the peer reflect-client command to configure a peer group as the route reflector client.
Use the undo peer reflect-client command to cancel the existing configuration.
By default, there is no route reflector in an AS.
This command only applies to IBGP peer groups.
Related command: reflect between-clients, reflector cluster-id.
Example
Configure the peer group “test” as the route reflector client.
[SW8800-bgp] peer test reflect-client
16.1.49 peer route-policy export
Syntax
peer group-name route-policy route-policy-name export
undo peer group-name route-policy route-policy-name export
View
BGP view
Parameter
group-name: Name of peer group.
route-policy-name: The specified Route-policy.
Description
Use the peer route-policy export command to assign the Route-policy to the routes advertised to the peer group.
Use the undo peer route-policy export command to delete the specified
Route-policy.
By default, the peer/peer group has no Route-policy association.
The peer route-policy export command only applies to peer groups.
Related command: peer route-policy import.
Example
Apply the Route-policy named test-policy to the route going out of the peer group test.
[SW8800-bgp] peer test route-policy test-policy export
16-42
3Com Switch 8800 Command Reference Guide
16.1.50 peer route-policy import
Chapter 16 BGP Configuration Commands
Syntax
peer { group-name | peer-address } route-policy route-policy-name import
undo peer { group-name | peer-address } route-policy route-policy-name import
View
BGP view
Parameter
Description
Use the peer route-policy import command to assign the Route-policy to the route coming from the peer/peer group.
Use the undo peer route-policy import command to delete the specified
Route-policy.
By default, the peer/peer group has no Route-policy association.
The priority of the inbound filter policy configured for the peer is higher than that configured for the peer group.
Related commands, see peer route-policy export.
Example
group-name: Name of peer group.
peer-address: IP address of the peer.
route-policy-name: The specified Route-policy.
Apply the Route-policy named test-policy to the route coming from the peer group test.
[SW8800-bgp] peer test route-policy test-policy import
16.1.51 peer route-update-interval
Syntax
peer group-name route-update-interval seconds
undo peer group-name route-update-interval
View
BGP view
Parameter
group-name: Specifies the name of the configured peer group.
16-43
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
seconds: The minimum interval of sending BGP update packets route. The range is from 0 to 600 seconds. By default, the advertisement interval is five seconds for internal peer/peer group, and 30 seconds for external peer/peer group.
Description
Use the peer route-update-interval command to configure the interval for the transmission route of a peer group.
Use the undo peer route-update-interval command to restore the interval to the default value.
Example
Configure the interval of sending the route update packet of the BGP peer group “test” as 10 seconds.
[SW8800-bgp] peer test as-number 100
[SW8800-bgp] peer test route-update-interval 10
16.1.52 peer shutdown
Syntax
peer { peer-address | group-name } shutdown
undo peer { peer-address | group-name } shutdown
View
BGP view, BGP multicast view, BGP L2VPN view and BGP VRF view
Parameter
Description
Use the peer shutdown command to disconnect and not to reconnect bgp connections without deleting bgp configurations.
Example
group-name: Peer group names, which contain letters and numbers. The name length ranges from 1 to 47.
peer-address: Peer IP address.
Disconnect but not reconnect peer 1.1.1.1 in the BGP unicast view.
[SW8800-bgp] peer 1.1.1.1 shutdown
Disconnect but not reconnect the out group in the BGP unicast view.
[SW8800-bgp] peer out shutdown
Disconnect but not reconnect peer 1.1.1.1 in the BGP vrf view.
16-44
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
[SW8800-bgp-af-vpn-instance] peer 1.1.1.1 shutdown
Disconnect but not reconnect the out group in the BGP vrf view.
[SW8800-bgp-af-vpn-instance] peer out shutdown
16.1.53 peer timer
Syntax
peer { group-name | peer-address } timer keep-alive keepalive-interval hold
holdtime-interval }
undo peer { group-name | peer-address } timer
View
BGP view
Parameter
group-name: Name of peer group.
peer-address: IP address of the peer.
keepalive-interval: Keepalive interval to be specified. The range is 1 to 4294967295. By default, its value is 60 seconds.
holdtime-interval: Holdtime interval to be specified. The range is 3 to 4294967295. By default, its value is 180 seconds.
Description
Use the peer timer command to configure the Keepalive and Holdtime intervals for the specified peer/peer group.
Use the undo peer timer command to restore the default timer settings.
The timer configured by using this command has a higher priority than the one configured by using the timer command.
Example
Configure Keepalive and Holdtime intervals of the peer group “test”.
[SW8800-bgp] peer test timer keep-alive 60 hold 180
16.1.54 preference
Syntax
preference ebgp-value ibgp-value local-value
undo preference
16-45
3Com Switch 8800 Command Reference Guide
View
BGP view
Chapter 16 BGP Configuration Commands
Parameter
ebgp-value: Sets preference value for routes learned from external peers.
ibgp-value: Sets preference value for routes learned from internal peers.
local-value: Sets preference value for local-originated routes.
The ebgp-value, ibgp-value and local-value arguments are in the range of 1 to 256. By default, the first two is 256 and the last one is 130.
Description
Use the preference command to configure BGP preference.
Use the undo preference command to restore the default preference.
Three types of routes may be involved in BGP: routes learned from external peers, routes learned from internal peers and local-originated routes. You can set preference values for the three types of route.
Example
Set the preference of EBGP routes, IBGP routes and local-originated routes all to 170.
[SW8800-bgp] preference 170 170 170
16.1.55 reflect between-clients
Syntax
reflect between-clients
undo reflect between-clients
View
BGP view
Parameter
None
Description
Use the reflect between-clients command to configure the between-client reflection of a route.
Use the undo reflect between-clients command to disable this function.
After the route reflector is configured, the route reflector reflects the routes of one client to other clients by default.
16-46
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
By default, the clients of a route reflector need not be fully connected. If the clients are fully connected, a route reflector is not required.
Related command: reflector cluster-id, peer reflect-client.
Example
Disable the reflection between clients.
[SW8800-bgp] undo reflect between-clients
16.1.56 reflector cluster-id
Syntax
reflector cluster-id { cluster-id | address }
undo reflector cluster-id
View
BGP view
Parameter
cluster-id: Specifies the cluster ID of the route reflector with the range from 1 to
4294967295. It is an integer.
address: Used as the interface address of the route reflector’s cluster ID.
Description
Use the reflector cluster-id command to configure the cluster ID of the route reflector.
Use the undo reflector cluster-id command to delete the cluster ID of the route reflector.
By default, each route reflector uses its Router ID as the cluster ID.
Usually, there is only one route reflector in a cluster. In this case, the cluster is identified by the router ID of the route reflector. You can configure multiple route reflectors to improve network stability. If there are multiple route reflectors, you can use this command to configure the same cluster ID for all these route reflectors.
Related command: reflect between-clients, peer reflect-client.
Example
Set the cluster ID of the route reflector as 80.
[SW8800-bgp] reflector cluster-id 80
[SW8800-bgp] peer 172.38.160.10 reflect-client
16-47
3Com Switch 8800 Command Reference Guide
16.1.57 refresh bgp
Chapter 16 BGP Configuration Commands
Syntax
refresh bgp { all | peer-address | group group-name } { import | export }
View
User view
Parameter
Description
Use the refresh bgp command to request the peer to refresh advertised routes or refresh the routes advertised to the peer.
After the BGP connection is established, only incremental routes are sent. However, some special cases exist. For example, when the routing policy changes, the routes advertised to the peer or the advertised routes from the peer need refreshing so that they can be filtered according to the new policy.
Example
all: Resets all the connections with BGP.
peer-address: Resets the connection with a specified BGP peer.
group-name: Resets the connection with a specified BGP peer group.
import: Requests the peer for all its routes by sending Route-refresh packets to the peer.
export: Refreshes routes advertised to the peers.
Request all peers to re-send the routes.
<SW8800>refresh bgp all import
16.1.58 reset bgp
Syntax
reset bgp { all | peer-address [ flap-info ] }
View
User view
Parameter
peer-address: Resets the connection with a specified BGP peer.
all: Resets all the connections with BGP.
flap-info: Resets the flap-info of a record at this peer address.
16-48
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the reset bgp peer-address command to reset the connection of BGP with a specified BGP peer.
Use the reset bgp all command to reset all the connections with BGP.
If the BGP policy or the protocol configuration changes, resetting the BGP connection can make the newly configured policy take effect immediately.
Example
Reset all the BGP connections to enable the new configuration (after configuring the new Keepalive interval and Holdtime interval using the timer command).
<SW8800>reset bgp all
16.1.59 reset bgp flap-info
Syntax
reset bgp flap-info [ regular-expression as-regular-expression | as-path-acl
acl-number } | network-address [ mask ] ]
View
User view
Parameter
Description
Use the reset bgp flap-info command to reset the flap-info of a route.
Related command: dampening.
Example
regular-expression as-regular-expression: Resets the flap-info matching the AS path regular expression.
as-path-acl acl-number: Resets the flap-info in consistency with a specified filter list.
The range of the acl-number argument is 1 to 199.
network-address: Resets the flap-info of a record at this IP address.
mask: Network mask.
Reset the flap-info of all the routes that go through filter list 1.
<SW8800> reset bgp flap-info as-path-acl 1
16-49
3Com Switch 8800 Command Reference Guide
16.1.60 reset bgp group
Chapter 16 BGP Configuration Commands
Syntax
reset bgp group group-name
View
User view
Parameter
group-name: Specifies the name of the peer group. It is a character string of 1 to 47 characters.
Description
Use the reset bgp group command to reset the connections between the BGP and all the members of a group.
Related command: peer group.
Example
Reset BGP connections of all members from group1.
<SW8800> reset bgp group group1
16.1.61 reset dampening
Syntax
reset bgp dampening [ network-address [ mask ] ]
View
User view
Parameter
network-address: Network IP address related to the clearing attenuation information.
mask: Network mask.
Description
Use the reset dampening command to reset route attenuation information and release suppressed routes.
Related command: dampening, display bgp routing-table dampened.
Example
Reset the route attenuation information of the specified route 20.1.0.0, and release the suppression of a suppressed route.
16-50
3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands
<SW8800>reset dampening 20.1.0.0 255.255.0.0
16.1.62 summary
Syntax
summary
undo summary
View
BGP view
Parameter
None
Description
Use the summary command to configure auto aggregation of sub-network routes.
Use the undo summary command to disable auto aggregation of sub-network routes.
By default, no auto aggregation of sub-network routes is executed.
After the summary is configured, BGP cannot receive the sub-network routes imported from the IGP, so the amount of the routing information can be reduced.
Example
Make the auto aggregation of the sub-network routes.
[SW8800-bgp] summary
16.1.63 timer
Syntax
timer keep-alive keepalive-interval hold holdtime-interval
undo timer
View
BGP view
Parameter
keepalive-interval: Sets the interval time value for keepalive time which ranges from 1 to 4294967295. By default, its value is 60 seconds.
holdtime-interval: Sets the interval time value for hold time which ranges from 3 to
4294967295. By default, its value is 180 seconds.
16-51
3Com Switch 8800 Command Reference Guide
Description
Chapter 16 BGP Configuration Commands
Use the timer command to configure the Keep-alive and Hold-time timer of BGP.
Use the undo timer command to restore the default value of the Keep-alive and
Hold-time of the timer.
Example
Configure the Keep-alive timer as 120 seconds and Hold-time timer as 360 seconds.
[SW8800-bgp] timer keep-alive 120 hold 360
16.1.64 undo synchronization
Syntax undo synchronization
View
BGP view
Parameter
None
Description
Use the undo synchronization command to cancel the synchronization of BGP and
IGP.
By default, BGP does not synchronize with IGP.
If the local BGP is not set synchronous with the IGP and the next hop of the learned
BGP route is reachable, the local BGP will add this BGP route into its routing table immediately after it learns the route, rather than waiting till the IGP also learns the route.
This command means BGP does not synchronize with IGP in current system. You need not configure it for the Switch 8800 because they do not support synchronization of
BGP and IGP at present.
Example
Cancel the synchronization of BGP and IGP.
[SW8800-bgp] undo synchronization
16-52
3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands
Chapter 17 IP Routing Policy Configuration
Commands
Note:
When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or an Switch
8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.
For the configuration of VPN instance, refer to the MPLS module in the 3Com Switch
8800 Configuration Guide.
17.1 IP Routing Policy Configuration Commands
17.1.1 apply as-path
Syntax
apply as-path as-number-1 [ as-number-2 [ as-number-3 ... ] ]
undo apply as-path
View
Route policy view
Parameter
as-number-1... as-number-n: AS number to be added.
Description
Use the apply as-path command to configure AS number to be added in front of the original AS path in Route-policy.
Use the undo apply as-path command to cancel the AS sequence number added in front of the original AS path.
By default, no AS number is set.
If the match condition of Route-policy is matched, the AS attribute of the transmitting route will be changed. You can add up to 10 AS numbers.
17-1
3Com Switch 8800 Command Reference Guide
Example
Chapter 17 IP Routing Policy Configuration Commands
Configure AS 200 to be added in front of the original AS path in Route-policy.
[SW8800-route-policy] apply as-path 200
17.1.2 apply community
Syntax
apply community [ [ aa:nn | no-export-subconfed | no-export | no-advertise ] *
[ additive ] | additive | none ]
undo apply community
View
Route policy view
Parameter
none: Community attribute of the deleted route.
aa:nn: Community number.
no-export-subconfed: Does not send matched route outside the sub-AS.
no-advertise: Does not send matched route to any peer.
no-export: Does not announce the route to the AS or the association outside, but can advertises to other sub-ASs.
additive: Community attribute of the additive route.
Description
Use the apply community command to configure the set BGP community attribute of
Route-policy.
Use the undo apply community command to cancel the set BGP community attribute.
By default, BGP community attribute is not set.
If the matching conditions defined in the Route-policy are satisfied, the BGP community attribute is set.
Related command: ip community-list, if-match community-list, route-policy,
display bgp routing-table community.
Example
Configure one Route-policy setcommunity, whose node serial number is 16 and match mode is permit, and enter Route policy view to set match conditions and attribute modification actions to be executed.
[SW8800] route-policy permit node 16
[SW8800-route-policy] if-match as-path 8
17-2
3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands
[SW8800-route-policy] apply community no-export
17.1.3 apply cost
Syntax
apply cost value
undo apply cost
View
Route policy view
Parameter
value: Specifies the route cost value of route information.
Description
Use the apply cost command to configure the route cost value of route information.
Use the undo apply cost command to cancel the apply sub-statement.
By default, no apply sub-statement is defined.
This command is one apply sub-statement of Route-policy. It configures the route cost value of the routing information that passes the filtration.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply
local-preference, apply origin and apply tag.
Example
Define one apply sub-statement. When it is used for setting route information attribute, it sets the route metric value of route information as 120.
[SW8800-route-policy] apply cost 120
17.1.4 apply cost-type
Syntax
apply cost-type [ internal | external ]
undo apply cost-type
View
Route policy View
17-3
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 17 IP Routing Policy Configuration Commands
internal: For BGP, it indicates when a BGP peer advertises routes to its EBGP peer, the peer uses the cost value of IGP as the MED value of BGP. For IS-IS, it indicates the internal cost. For other protocols, it is invalid.
external: It is only valid for IS-IS and it indicates external cost type of IS-IS.
Description
Use the apply cost-type command to configure the route cost type of route information.
Use the undo apply cost-type command to cancel the apply sub-statement.
By default, route cost type is not set.
Example
Set the cost type of IGP as MED value of BGP.
[SW8800-route-policy] apply cost-type internal
17.1.5 apply ip next-hop
Syntax
apply ip next-hop ip-address
undo apply ip next-hop
View
Route policy view
Parameter
ip-address: The next-hop address.
Description
Use the apply ip next-hop command to configure the next hop address of route information.
Use the undo apply ip next-hop command to cancel the apply sub-statement.
By default, no apply sub-statement is defined.
This command is one of the apply sub-statements of Route-policy. When it is used for setting route information attribute, it sets the next hop address area of route information passing filtration.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, if-match tag, route-policy, apply local-preference, apply
cost, apply origin and apply tag.
17-4
3Com Switch 8800 Command Reference Guide
Example
Chapter 17 IP Routing Policy Configuration Commands
Define an apply sub-statement. Set the next hop address of route information as
193.1.1.8 when it is used for setting route information attribute.
[SW8800-route-policy] apply ip next-hop 193.1.1.8
17.1.6 apply isis
Syntax
apply isis [ level-1 | level-2 | level-1-2 ]
undo apply isis
View
Route policy view
Parameter
Description
Use the apply isis command to configure to apply the level of a matched route to be imported to level-1, level-2 or level-1-2.
Use the undo apply isis command to cancel the apply sub-statement.
By default, no apply clause is defined.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply cost,
apply origin, apply tag.
Example
level-1: Sets to import the matched route to level-1 area.
level-2: Sets to import the matched route to level-2 area.
level-1-2: Sets to import the matched route to both level-1 and levle-2 area.
Define an apply clause, setting to import the route to a level-2 area.
[SW8800-route-policy] apply isis level-2
17.1.7 apply local-preference
Syntax
apply local-preference local-preference
undo apply local-preference
View
Route policy view
17-5
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 17 IP Routing Policy Configuration Commands
local-preference: Newly set local preference.
Description
Use the apply local-preference command to configure to apply the local preference of route information.
Use the undo apply local-preference command to cancel the apply sub-statement.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply
local-preference, apply origin and apply tag.
Example
Define an apply sub-statement. Apply the local preference level of route information as
130 when this apply sub-statement is used for setting route information attribute. .
[SW8800-route-policy] apply local-preference 130
17.1.8 apply origin
Syntax
apply origin { igp | egp as-number | incomplete }
undo apply origin
View
Route policy view
Parameter
igp: Sets the BGP route information source as internal route.
egp: Sets the BGP route information source as external route
as-number: Specifies AS number of external route.
incomplete: Sets the BGP route information source as unknown source.
Description
Use the apply origin command to configure to apply the route source.
Use the undo apply origin command to cancel the apply sub-statement.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply
local-preference, apply cost and apply tag.
17-6
3Com Switch 8800 Command Reference Guide
Example
Chapter 17 IP Routing Policy Configuration Commands
Define an apply sub-statement. Define one apply sub-statement. When it is used for setting route information attribute, it sets the route source of BGP route information as igp.
[SW8800-route-policy] apply origin igp
17.1.9 apply tag
Syntax
View
Route policy view
Parameter
value: Specifies the tag value of route information.
Description
Use the apply tag command to configure to set the tag area of OSPF route information.
Use the undo apply tag command to cancel the apply sub-statement.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply
local-preference, apply cost and apply origin.
Example
apply tag value
undo apply tag
Define one apply sub-statement. When it is used for setting route information attribute, it sets the tag area of route information as 100.
[SW8800-route-policy] apply tag 100
17.1.10 display ip ip-prefix
Syntax
display ip ip-prefix [ ip-prefix-name ]
View
Any view
Parameter
ip-prefix-name: Specifies displayed address prefix list name.
17-7
3Com Switch 8800 Command Reference Guide
Description
Chapter 17 IP Routing Policy Configuration Commands
Use the display ip ip-prefix command to view the address prefix list.
If no ip-prefix-name is specified, all configured address prefix lists are displayed.
Related command: ip ip-prefix.
Example
Display the information of the address prefix list named as p1.
<SW8800> display ip ip-prefix p1 name index conditions ip-prefix / mask GE LE p1 10 permit 10.1.0.0/16 17 18
Table 17-1 Description on the fields of the display ip ip-prefix command
Field
name index conditions ip-prefix / mask
GE
LE
Name of ip-prefix
Description
Internal sequence number of ip-prefix
Mode: permit or deny
Address and network segment length of ip-prefix
Greater-equal value of ip-prefix network segment length
Less-equal value of ip-prefix network segment length
17.1.11 display route-policy
Syntax
display route-policy [ route-policy-name ]
View
Any view
Parameter
route-policy-name: Specifies displayed Route-policy name.
Description
Use the display route-policy command to view the configured Route-policy.
If the route-policy-name argument is not specified, all configured Route-policies are displayed.
Related command: route-policy.
17-8
3Com Switch 8800 Command Reference Guide
Example
Chapter 17 IP Routing Policy Configuration Commands
Display the information of Route-policy named as policy1.
<SW8800> display route-policy policy1
Route-policy : policy1
Permit 10 : if-match (prefixlist) p1
apply cost 100
matched : 0 denied : 0
Table 17-2 Description on the fields of the display route-policy command
Field
Route-policy Name of ip-prefix
Description
Information of the route-policy with mode configured as permit and node as 10: if-match
(prefixlist) p1
The configured if-match clause
Permit 10 apply cost 100 matched denied
Apply routing cost 100 to the routes matching the conditions defined by if-match clause
Number of routes matching the conditions set by if-match clause
Number of routes not matching the conditions set by if-match clause
17.1.12 filter-policy export
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
View
Routing protocol view
Parameter
acl-number: Number of the access control list used for matching the destination address field of the routing information.
ip-prefix-name: Address prefix list used for matching the routing information destination address field.
protocol: The routing information of which kind of route protocol to be filtered.
17-9
3Com Switch 8800 Command Reference Guide
Description
Chapter 17 IP Routing Policy Configuration Commands
Use the filter-policy export command to configure to set the filtering conditions of the routing information advertised by a certain type of routing protocols.
Use the undo filter-policy export command to cancel the filtering conditions set.
By default, the advertised routing information is not filtered.
In some cases, it may be required that only the routing information meeting some conditions can be advertised. Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be advertised.
Related command: filter-policy import.
Example
Define the filtering rules for advertising the routing information of RIP. Only the routing information passing the filtering of address prefix list p1 will be advertised by RIP.
[SW8800-rip] filter-policy ip-prefix p1 export
17.1.13 filter-policy import
Syntax
filter-policy gateway ip-prefix-name import
undo filter-policy gateway ip-prefix-name import
filter-policy { acl-number | ip-prefix ip-prefix-name } import
undo filter-policy { acl-number | ip-prefix ip-prefix-name } import
View
Routing protocol view
Parameter
acl-number: The access control list number used for matching the destination address field of the routing information.
ip-prefix ip-prefix-name: The prefix address list name. Its matching object is the destination address field of the routing information.
gateway ip-prefix-name: The prefix address list name of the neighbor router address.
Its matching object is the routing information advertised by the specified neighbor router.
Description
Use the filter-policy gateway import command to filter the received routing information advertised by a specified router.
17-10
3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands
Use the undo filter-policy gateway import command to cancel the setting of the filtering condition.
Use the filter-policy import command to set the condition for filtering the routing information.
Use the undo filter-policy import command to cancel the setting of filter condition
By default, the received routing information is not filtered.
You may use the filter-policy command to filter routing information based on certain condition when receiving of only some routing information is desired.
Related command: filter-policy export.
Example
Define the filtering rule for receiving routing information of RIP. Only the routing information filtered through the address prefix list p1 can be received by RIP.
[SW8800-rip] filter-policy ip-prefix p1 import
17.1.14 if-match { acl | ip-prefix }
Syntax
if-match { acl acl-number | ip-prefix ip-prefix-name }
undo if-match { acl | ip-prefix }
View
Route policy view
Parameter
acl-number: Specifies the number of the access control list used for filtration.
ip-prefix-name: Specifies the name of the prefix address list used for filtration.
Description
Use the if-match { acl | ip-prefix } command to specify one matching rule for the route-policy and configure the IP address range to match the Route-policy.
Use the undo if-match { acl | ip-prefix } command to cancel the setting of the match rule.
Filtration is performed by quoting an ACL or a prefix address list.
Related command: if-match interface, if-match ip next-hop, if-match cost, if-match
tag, route-policy, apply ip next-hop, apply cost, apply local-preference, apply
origin and apply tag.
17-11
3Com Switch 8800 Command Reference Guide
Example
Chapter 17 IP Routing Policy Configuration Commands
Define one if-match sub-statement. When the sub-statement is used for filtering route information, the route information filtered by route destination address through address prefix list p1 can pass the if-match sub-statement.
[SW8800-route-policy] if-match ip-prefix p1
17.1.15 if-match as-path
Syntax
if-match as-path acl-number
undo if-match as-path
View
Route policy view
Parameter
acl-number: AS path list number, ranging from 1 to 199.
Description
Use the if-match as-path command to match the AS path domain of the BGP routing information.
Use the undo if-match as-path command to cancel the match of AS path domain.
By default, AS path list number is not matched.
This command is one if-match sub-statement of route-policy. It is used to filter BGP routing information and specifies match conditions according to the AS path attribute of routing information.
Example
An as-path numbered as 2 is defined first, allowing the routing information of AS 200 and 300. Then the route-policy named test is defined. The node number 10 of this route-policy defines an if-match sub-statement, which quotes the definition of as-path.
[SW8800] ip as-path-acl 2 permit 200:300
[SW8800] route-policy test permit node 10
[SW8800-route-policy] if-match as-path 2
17.1.16 if-match community
Syntax
if-match community { basic-community-number [ whole-match ] |
adv-community-number }
17-12
3Com Switch 8800 Command Reference Guide
undo if-match community
View
Route policy view
Parameter
Chapter 17 IP Routing Policy Configuration Commands
basic-community-list-number: Basic community list number, ranging from 1 to 99.
adv-community-list-number: Advanced community list number, ranging from 100 to
199.
whole-match: Exact match. That is, all specified communities must be present and only these communities are present.
Description
Use the if-match community command to match the community attribute of the BGP information.
Use the undo if-match community command to cancel the match of the community attribute.
By default, no match operation is done on the community attribute of BGP routes.
This if-match sub-statement of route-policy is used to filter BGP routing information.
The match condition is specified according to the community attributes of the routing information.
Related command: route-policy, ip community-list.
Example
A community-list numbered as 1 is defined first, allowing the autonomous system number to contain the routing information of 100 and 200. Then, the route-policy named test is defined. The node number 10 of the route-policy defines an if-match sub-statement, which quotes the definition of the community-list.
[SW8800] ip community-list 1 permit 100:200
[SW8800] route-policy test permit node 10
[SW8800-route-policy] if-match community 1
17.1.17 if-match cost
Syntax
if-match cost value
undo if-match cost
View
Route policy view
17-13
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 17 IP Routing Policy Configuration Commands
value: Specifies the required route metric value, ranging from 0 to 4294967295.
Description
Use the if-match cost command to configure one of the match rules of the route-policy to match the cost of the routing information.
Use the undo if-match cost command to cancel the configuration of the match rule.
By default, no if-match sub-statement is defined.
This command is one if-match sub-statement of route-policy. If the cost of a route matches the specified cost, the route matches this if-match sub-statement.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match tag, route-policy, apply ip next-hop, apply local-preference,
apply cost, apply origin, apply tag.
Example
A if-match sub-statement is defined, which allows the routing information with routing cost 8 to pass this if-match sub-statement.
[SW8800-route-policy] if-match cost 8
17.1.18 if-match interface
Syntax
if-match interface { interface-name | interface-type interface-number }
undo if-match interface
View
Route policy view
Parameter
interface-type: Specifies interface type.
interface-number: Specifies interface number.
interface-name: Specifies interface name.
Description
Use the if-match interface command to configure to match the route whose next hop is designated interface.
Use the undo if-match interface command to cancel the setting of matching condition.
By default, no if-match sub-statement is defined.
17-14
3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands
This command is one if-match sub-statement of route-policy. It matches the corresponding interface of route next hop when filtering route.
Related commands: if-match acl, if-match ip-prefix, if-match ip next-hop, if-match
cost, if-match tag, route-policy, apply ip next-hop, apply cost, apply
local-preference, apply origin and apply tag.
Example
Define one if-match sub-statement to match the route whose next hop interface is
Vlan-interface 1
[SW8800-route-policy] if-match interface Vlan-interface 1
17.1.19 if-match ip next-hop
Syntax
if-match ip next-hop { acl acl-number | ip-prefix ip-prefix-name }
undo if-match ip next-hop [ ip-prefix ]
View
Route policy view
Parameter
acl-number: Specifies the number of the access control list used for filtration. The range is 2000 to 2999.
ip-prefix-name: Specifies the name of the prefix address list used for filtration. Its length ranges from 1 to 19.
Description
Use the if-match ip next-hop command to configure one match rule on next hop address of routing information for the route-policy.
Use the undo if-match ip next-hop command to cancel the setting of ACL matching condition.
Use the undo if-match ip next-hop ip-prefix command to cancel the setting of address prefix list matching condition.
Filtration is performed by quoting an ACL or an address prefix list.
By default, no if-match sub-statement is defined.
This command is one if-match sub-statement of route-policy. It filters routing information based on next hop address by referencing an ACL or an address prefix list.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match
cost, if-match tag, route-policy, apply ip next-hop, apply cost, apply
local-preference, apply origin and apply tag.
17-15
3Com Switch 8800 Command Reference Guide
Example
Chapter 17 IP Routing Policy Configuration Commands
Define an if-match sub-statement. It permits the routing information, whose route next hop address passes the filtration of the prefix address list p1, to pass this if-match sub-statement.
[SW8800-route-policy] if-match ip next-hop ip-prefix p1
17.1.20 if-match tag
Syntax
if-match tag value
undo if-match tag
View
Route policy view
Parameter
value: Specifies the value in tag field of OSPF route information.
Description
Use the if-match tag command to configure to match the tag field of OSPF route information.
Use the undo if-match tag command to cancel the existing matching rules.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, route-policy, apply ip next-hop, apply cost, apply
local-preference, apply origin and apply tag.
Example
Define one if-match sub-statement and enable the OSPF route information whose value of tag is 8 to pass the if-match sub-statement.
[SW8800-route-policy] if-match tag 8
17.1.21 ip as-path-acl
Syntax
ip as-path-acl acl-number { permit | deny } as-regular-expression
undo ip as-path-acl acl-number
View
System view
17-16
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 17 IP Routing Policy Configuration Commands
acl-number: Number of AS path list ranging from 1 to 199.
as-regular-expression: AS regular expression.
Description
Use the ip as-path-acl command to configure an AS path regular express.
Use the undo ip as-path-acl command to disable the defined regular expression.
The configured AS path list can be used in BGP policy.
Related command: peer as-path-acl, display bgp routing-table as-path-acl.
Example
Configure an AS path list.
[SW8800] ip as-path-acl 10 permit 200,300
17.1.22 ip community-list
Syntax
ip community-list basic-comm-list-number { permit | deny } [ aa:nn | internet |
no-export-subconfed | no-advertise | no-export ]*
ip community-list adv-comm-list-number { permit | deny } comm-regular-expression
undo ip community-list { basic-comm-list-number | adv-comm-list-number }
View
Parameter
System view
basic-comm-list-number: Number of the basic community list ranging from 1 to 99.
adv-comm-list-number: Number of the advanced community list ranging from 100 to
199.
permit: Permits those that match conditions to access.
deny: Denies those that match conditions to access.
aa:nn: Community number.
internet: Advertises all routes.
no-export-subconfed: Used not to advertise the matched route beyond the sub-ASs.
no-advertise: Used not to send the matched route to any peer.
no-export: Does not advertise routes beyond the AS or the confederation, but can advertise routes to other sub-ASs within the confederation.
comm-regular-expression: Community attribute in regular expression format.
17-17
3Com Switch 8800 Command Reference Guide
Description
Chapter 17 IP Routing Policy Configuration Commands
Use the ip community-list command to configure a BGP community list.
Use the undo ip community-list command to cancel the configured BGP community list.
The configured community list can be used in BGP policy.
Related command: apply community, display bgp routing-table community-list.
Example
Define a community attribute list which does not advertise routes with the community attribute beyond the local AS.
[SW8800] ip community-list 6 permit no-export-subconfed
17.1.23 ip ip-prefix
Syntax
ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } network len
[ greater-equal greater-equal | less-equal less-equal ]
undo ip ip-prefix ip-prefix-name [ index index-number | permit | deny ]
View
System view
Parameter
ip-prefix-name: The specified address prefix list name. It identifies one address prefix list uniquely.
index-number: Identifies an item in the prefix address list. The item with a smaller index-number will be tested first.
permit: Specifies the match mode of the defined address prefix list items as permit mode. In this case, if the IP address of the route to be filtered matches an entry in the address prefix list, the route passes the filtering and no further check is performed. If not, it is check against the next entry.
deny: Specifies the match mode of the defined address prefix list items as deny mode.
In this case, if the IP address of the route to be filtered matches an entry in the address prefix list, the route is denied without further check. If otherwise, the IP address is checked against the next address prefix entry.
network: The IP address prefix range (IP address). If it is 0.0.0.0 0, all the IP addresses are matched.
len: The IP address prefix range (mask length). If it is 0.0.0.0 0, all the IP addresses are matched.
17-18
3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands
greater-equal, less-equal: The address prefix range [greater-equal, less-equal] to be matched after the address prefix network len has been matched. The meaning of
greater-equal is "larger than or equal to", and the meaning of less-equal is "less than or equal to". The range is len <= greater-equal <= less-equal <= 32. When only
greater-equal is used, it denotes the prefix range [greater-equal, 32]. When only
less-equal is used, it denotes the prefix range [len, less-equal].
Description
Use the ip ip-prefix command to configure an address prefix list or one of its items.
Use the undo ip ip-prefix command to delete an address prefix list or one of its items.
The address prefix list is used for IP address filtering. An address prefix list may contain several items, and each item specifies one address prefix range. The inter-item filtering relation is "OR", i.e. passing an item means passing the filtering of this address prefix list. Not passing the filtering of any item means not passing the filtration of this prefix address list.
The address prefix range may contain two parts, which are determined by len and
[greater-equal, less-equal] respectively. If the prefix ranges of these two parts are both specified, the IP to be filtered must match the prefix ranges of these two parts.
If you specify network len as 0.0.0.0 0, it only matches the default route.
If you specify network len as 0.0.0.0 0 less-equal 32, it matches all routes.
Example
Define an address prefix list named p1, permitting the routes of the network segment
10.0.192.0 8 with a mask length of 17 or 18 to pass.
[SW8800] ip ip-prefix p1 permit 10.0.192.0 8 greater-equal 17 less-equal 18
17.1.24 route-policy
Syntax
route-policy route-policy-name { permit | deny } node node-number
undo route-policy route-policy-name [ permit | deny | node node-number ]
View
System view
Parameter
route-policy-name: Specifies the Route-policy name to identify one Route-policy uniquely.
permit: Specifies the match mode of the defined Route-policy node as permit mode.
When a route satisfy all if-match sub-statements of this node and pass the filtration, the
17-19
3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands apply sub-statement of this node will be executed on the route. Otherwise, the route will be tested by the next node.
deny: Specifies the match mode of the defined Route-policy node as deny mode.
When a route satisfy all if-match sub-statements of this node and fails to pass the filtration, it will not tested by the next node.
node: Node of the route policy.
node-number: Index of the node in the route-policy. When this route-policy is used for routing information filtration, the node with a smaller node-number will be tested first.
Description
Use the route-policy command to create a route-policy and enter its view.
Use the undo route-policy command to delete the established Route-policy.
By default, no Route-policy is defined.
Route-policy is used for route information filtration or policy routing. One Route-policy comprises of some nodes and each node comprises of some match and apply sub-statements. The if-match sub-statement defines the match rules of this node and the apply sub-statement defines the actions after passing the filtration of this node. The filtering relationship between the if-match sub-statements of the node is “and”, i.e., all if-match sub-statements that meet the node. The filtering relation between Route-policy nodes is "OR", i.e. passing the filtering of one node means passing the filtering of this
Route-policy. If the information does not pass the filtration of any nodes, it cannot pass the filtration of this Route-policy.
Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip
next-hop, if-match cost, if-match tag, apply ip next-hop, apply local-preference,
apply cost, apply origin and apply tag.
Example
Configure one Route-policy policy1, whose node number is 10 and if-match mode is permit, and enter Route policy view.
[SW8800] route-policy policy1 permit node 10
[SW8800-route-policy]
17-20
3Com Switch 8800 Command Reference Guide Chapter 18 IGMP Snooping Configuration Commands
Chapter 18 IGMP Snooping Configuration
Commands
18.1 IGMP Snooping Configuration Commands
18.1.1 display igmp-snooping configuration
Syntax display igmp-snooping configuration
View
Any view
Parameter
None
Description
Use the display igmp-snooping configuration command to view the IGMP Snooping configuration information.
When IGMP Snooping is enabled, the information displayed includes whether IGMP
Snooping is enabled, router port aging time, maximum response time of a query and multicast group port aging time.
Related command: igmp-snooping.
Example
Display the IGMP Snooping configuration information of the switch.
<SW8800> display igmp-snooping configuration
Enable IGMP-Snooping.
Enable IGMP-Snooping.
The router port timeout is 105 second(s).
The max response timeout is 1 second(s).
The host port timeout is 260 second(s).
Enable IGMP-Snooping Non-Flooding.
The information above tells us that: IGMP Snooping is enabled; the router port aging time is set to be 105 seconds; the max response time of a query is set to be 1 seconds; the aging time of a multicast group member is set to be 260 seconds. Non-broadcasting of unknown multicast data packets in a VLAN is enabled.
18-1
3Com Switch 8800 Command Reference Guide
18.1.2 display igmp-snooping group
Chapter 18 IGMP Snooping Configuration Commands
Syntax
display igmp-snooping group [ vlan vlanid ]
View
Any view
Parameter
Description
Use the display igmp-snooping group command to view the IP multicast group and
MAC multicast group information of a VLAN or all the VLAN where the Ethernet switch is located. It displays the information such as VLAN ID, router port, IP multicast group address, member ports in the IP multicast group, MAC multicast group, MAC multicast group address, and the member ports in the MAC multicast group.
Example
vlan vlanid: Specifies the VLAN where the multicast group to be viewed is located.
When the parameter is omitted, the command will display the information about all the multicast groups on the VLAN.
Display the multicast group information about VLAN2.
<SW8800> display igmp-snooping group vlan 2
***************Multicast group table***************
Vlan(id):2.
Router port(s):Ethernet3/1/1
IP group(s):the following ip group(s) match to one mac group.
IP group address:230.45.45.1
Member port(s):Ethernet3/1/12
MAC group(s):
MAC group address:01-00-5e-2d-2d-01
Member port(s):Ethernet3/1/12 z z z z z z
We can know from the information listed above that :
There is a multicast group in VLAN 2;
The router port is Ethernet 2/1/1;
The IP multicast group address is 230.45.45.1;
The member of the IP multicast group is Ethernet 2/1/2;
MAC multicast group is 0100-5e2d-2d01;
The member of the MAC multicast group is Ethernet 2/1/2.
18-2
3Com Switch 8800 Command Reference Guide Chapter 18 IGMP Snooping Configuration Commands
18.1.3 display igmp-snooping statistics
Syntax display igmp-snooping statistics
View
Any view
Parameter
None
Description
Use the display igmp-snooping statistics command to view the statistics information on IGMP Snooping.
This command displays the information such as the number of received general IGMP query packets, received IGMP group-specific query packets, received IGMP v1 packets, received IGMP v2 packets, received IGMP leave packets and error packets, and sent
IGMP group-specific query packets.
Related command: igmp-snooping.
Example
Display statistics information about IGMP Snooping.
<SW8800> display igmp-snooping statistics
Received IGMP general query packet(s) number:0.
Received IGMP specific query packet(s) number:0.
Received IGMP V1 report packet(s) number:0.
Received IGMP V2 report packet(s) number:0.
Received IGMP leave packet(s) number:0.
Received error IGMP packet(s) number:0.
Sent IGMP specific query packet(s) number:0. z z z z z z
The above information displays that IGMP Snooping receives:
0 IGMP general query packets
0 IGMP group-specific query packets
0 IGMP v1 report packets
0 IGMP v2 report packets
0 IGMP leave packets o IGMP error packets
IGMP Snooping sends: z
0 IGMP group-specific query packets
18-3
3Com Switch 8800 Command Reference Guide
18.1.4 igmp-snooping
Chapter 18 IGMP Snooping Configuration Commands
Syntax
igmp-snooping { enable | disable }
View
System view, VLAN view
Parameter
Description
Use the igmp-snooping command to enable/disable IGMP Snooping.
You’d better notice that when configuring IGMP Snooping, it is necessary to globally enable IGMP Snooping in system view, then enable IGMP Snooping in VLAN view, otherwise IGMP Snooping function can not be performed.
By default, the switch disables IGMP Snooping.
Example
enable: Enables IGMP Snooping.
disable: Disables IGMP Snooping;
Enable IGMP Snooping in system view.
[SW8800] igmp-snooping enable
Enable IGMP Snooping on VLAN 1
[SW8800] vlan 1
[SW8800-vlan1] igmp-snooping enable
18.1.5 igmp-snooping host-aging-time
Syntax
igmp-snooping host-aging-time seconds
undo igmp-snooping host-aging-time
View
Parameter
System view
seconds: Port aging time for the multicast group member, ranging from 200 to 1000 and measured in seconds. By default, it is 260.
18-4
3Com Switch 8800 Command Reference Guide
Description
Chapter 18 IGMP Snooping Configuration Commands
Use the igmp-snooping host-aging-time command to configure the port aging time of the multicast group members.
Use the undo igmp-snooping host-aging-time command to restore the default value.
This command is used to set the aging time of the multicast group member so that the refresh frequency can be controlled. When the group members change frequently, the aging time should be comparatively short, and vice versa.
Related command: igmp-snooping.
Example
Set the aging time to 300 seconds.
[SW8800] igmp-snooping host-aging-time 300
18.1.6 igmp-snooping max-response-time
Syntax
igmp-snooping max-response-time seconds
undo igmp-snooping max-response-time
View
System view
Parameter
seconds: Maximum response time for a query ranging from 1 to 25 and measured in seconds. By default, it is 1.
Description
Use the igmp-snooping max-response-time command to configure the maximum response time for a query.
Use the undo igmp-snooping max-response-time command to restore the default value.
The set maximum response time decides the time limit for the switch to respond to
IGMP Snooping query packets.
Related command: igmp-snooping and igmp-snooping router-aging-time.
Example
Configure to respond the IGMP Snooping packet within 15s.
[SW8800] igmp-snooping max-response-time 15
18-5
3Com Switch 8800 Command Reference Guide Chapter 18 IGMP Snooping Configuration Commands
18.1.7 igmp-snooping nonflooding-enable
Syntax
View
System view
Parameter
None
Description
Use the igmp-snooping nonflooding-enable command to enable unknown multicast data packets not to be broadcasted within a VLAN.
Use the undo igmp-snooping nonflooding-enable command to disable unknown multicast data packets not to be broadcasted within a VLAN.
Note that if IGMP snooping is not enabled on the VLAN (nor Layer 3 multicast), unknown multicast packets are broadcasted within the VLAN no matter whether this function is enabled or not. To make unknown multicast data packets not be broadcasted within the VLAN, you need to enable igmp-snooping in this VLAN and enable igmp-snooping nonflooding-enable globally.
By default, unknown multicast data packets are broadcasted within the VLAN.
Example igmp-snooping nonflooding-enable undo igmp-snooping nonflooding-enable
Enable multicast packets not to be broadcasted within the VLAN.
[SW8800] igmp-snooping nonflooding-enable
18.1.8 igmp-snooping router-aging-time
Syntax
igmp-snooping router-aging-time seconds
undo igmp-snooping router-aging-time
View
System view
Parameter
seconds: Specifies the router port aging time, ranging from 1 to 1000 measured in seconds; By default, it is 105.
18-6
3Com Switch 8800 Command Reference Guide
Description
Chapter 18 IGMP Snooping Configuration Commands
Use the igmp-snooping router-aging-time command to configure the router port aging time of IGMP Snooping.
Use the undo igmp-snooping router-aging-time command to restore the default value.
The port here refers to the Ethernet switch port connected to the router. The Layer-2
Ethernet switch receives general query packets from the router via this port. The timer should be set to about 2.5 times of the general query period of the router.
Related command: igmp-snooping and igmp-snooping max-response-time.
Example
Set the aging time of the IGMP Snooping router port to 500 seconds.
[SW8800] igmp-snooping router-aging-time 500
18.1.9 reset igmp-snooping statistics
Syntax reset igmp-snooping statistics
View
User view
Parameter
None
Description
Using reset igmp-snooping statistics command, you can reset the IGMP Snooping statistic information.
Related command: igmp-snooping.
Example
Clear IGMP Snooping statistic information.
<SW8800> reset igmp-snooping statistics
18-7
3Com Switch 8800 Command Reference Guide Chapter 19 Multicast VLAN Configuration Commands
Chapter 19 Multicast VLAN Configuration
Commands
19.1 Multicast VLAN Configuration Commands
19.1.1 service-type multicast
Syntax service-type multicast undo service-type multicast
View
VLAN view
Parameter
None
Description
Use the service-type multicast command to configure the current VLAN as multicast
VLAN.
Use the undo service-type multicast command to remove the configuration.
By default, all VLANs are not multicast VLANs.
If you configure multicast VLAN, add the corresponding switch ports to the multicast
VLAN and enable IGMP Snooping, users in different VLANs can share one multicast
VLAN, and multicast flow can be transmitted in the multicast VLAN only, thus saving bandwidth. The completely isolated multicast VLAN and user VLAN can effectively ensure security.
Example
Configure VLAN 2 as multicast VLAN.
<SW8800> system-view
[SW8800] vlan 2
[SW8800-vlan2] service-type multicast
19-1
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands
Chapter 20 IP Multicast Common Configuration
Commands
20.1 IP Multicast Common Configuration Commands
20.1.1 debugging multicast forwarding
Syntax
View
User view
Parameter
None
Description
Use the debugging multicast forwarding command to enable multicast packet forwarding debugging functions.
Use the undo debugging multicast forwarding command to disable the debugging functions.
By default, the debugging function is disabled.
Example debugging multicast forwarding undo debugging multicast forwarding
Enable multicast packet forwarding debugging functions.
<SW8800> debugging multicast forwarding
20.1.2 debugging multicast kernel-routing
Syntax debugging multicast kernel-routing undo debugging multicast kernel-routing
View
User view
20-1
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 20 IP Multicast Common Configuration Comm ands
Description
Use the debugging multicast kernel-routing command to enable multicast kernel routing debugging functions.
Use the undo debugging multicast kernel-routing command to disable the debugging functions.
By default, the multicast kernel routing debugging is disabled.
Example
Enable multicast kernel routing debugging functions.
<SW8800> debugging multicast kernel-routing
20.1.3 debugging multicast status-forwarding
Syntax debugging multicast status-forwarding undo debugging multicast status-forwarding
View
User view
Parameter
None
Description
Use the debugging multicast status-forwarding command to enable multicast forwarding status debugging functions.
Use the undo debugging multicast status-forwarding command to disable the debugging functions.
By default, the multicast forwarding status debugging is disabled.
Example
Enable multicast forwarding status debugging functions.
<SW8800> debugging multicast status-forwarding
20-2
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands
20.1.4 display multicast forwarding-table
Syntax
display multicast forwarding-table [ group-address [ mask { mask | mask-length } ] |
source-address [ mask { mask | mask-length } ] | incoming-interface{ interface-type
interface-number | null NULL-interface- number | register} ] *
View
Any view
Parameter
Description
Use the display multicast forwarding-table command to view the information of IP multicast forwarding table.
Note that before you view the information of IP multicast forwarding table, you must use
multicast routing-enable command in system view to enable IP multicast router.
Related command: display multicast routing-table.
Example
group-address: Multicast group address, used to specify a multicast group, ranging from 224.0.0.0 to 239.255.255.255.
source-address: Unicast IP address of the multicast source.
incoming-interface: Incoming interface of the multicast forwarding table.
interface-type interface-number: Interface type and interface number.
null: Incoming-interface is null.
NULL-interface-number: The only number is 0.
register: Register interface of PIM-SM.
View the multicast forwarding table information.
<SW8800> display multicast forwarding-table
Multicast Forwarding Cache Table
Total 2 entries
00001. (4.4.4.4, 224.2.254.84), iif Vlan-interface1, 0 oifs
Matched 240 pkts(11288 bytes), Wrong If 0 pkts
Forwarded 232 pkts(11288 bytes)
00002. (4.4.4.4, 224.2.149.17), iif Vlan-interface1, 1 oifs
List of outgoing interface:
01: Vlan-interface2
20-3
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands
Matched 236 pkts(3267 bytes), Wrong If 0 pkts
Forwarded 233 pkts(3267 bytes)
Matched 2 entries
The descriptions about the displayed information are shown in Table 20-1.
Table 20-1 Description of information generated by the command display multicast
forwarding-table
Field
Multicast Forwarding Cache Table
Total 2 entries
00002
(4.4.4.4, 224.2.149.17)
Description
Multicast forwarding cache table
Total number of entries
Sequence number of entries iif Vlan-interface1, 1 oifs
(s,g)
Multicast forwarding cache table has an incoming interface Vlan-interface 1 and one outgoing interface
List of outgoing interface:
01: Vlan-interface2
List of outgoing interface has an outgoing interface Vlan-interface 2
Matched 236 pkts(3267 bytes), Wrong If
0 pkts
Forwarded 233 pkts(3267 bytes)
236 matched packets (3267 bytes); 0 matched packets means wrong; 233 forwarded packets (3267 bytes)
Matched 2 entries 2 matched entries
20.1.5 display multicast routing-table
Syntax
display multicast routing-table [ group-address [ mask { mask | mask-length } ] |
source-address [ mask { mask | mask-length } ] | incoming-interface { interface-type
vlan-interface | register } ]*
View
Any view
Parameter
group-address: Multicast group address, used to specify a multicast group and display the corresponding routing table information of the group. The value ranges from
224.0.0.0 to 239.255.255.255.
source-address: Unicast IP address of the multicast source.
incoming-interface: Incoming interface of the multicast route entry.
20-4
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands vlan-interface interface-number: VLAN interface number.
register: Register interface of PIM-SM.
Description
Use the display multicast routing-table command to view the information of IP multicast routing table.
Notice that before you view the information of IP multicast forwarding table, you must use multicast routing-enable command in system view to enable IP multicast router.
This command displays the multicast routing table information, while the display
multicast forwarding-table command displays the multicast forwarding table information.
Example
View the route entry information in the multicast routing table.
[SW8800]display multicast routing-table
Multicast Routing Table
Total 3 entries
(4.4.4.4, 224.2.149.17)
Uptime: 00:15:16, Timeout in 272 sec
Upstream interface: Vlan-interface1(4.4.4.6)
Downstream interface list:
Vlan-interface2(2.2.2.4), Protocol 0x1: IGMP
(4.4.4.4, 224.2.254.84)
Uptime: 00:15:16, Timeout in 272 sec
Upstream interface: Vlan-interface1(4.4.4.6)
Downstream interface list: NULL
(4.4.4.4, 239.255.2.2)
Uptime: 00:02:57, Timeout in 123 sec
Upstream interface: Vlan-interface1(4.4.4.6)
Downstream interface list: NULL
Matched 3 entries
The descriptions about the displayed information are shown in Table 20-2.
20-5
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands
Table 20-2 Description of information generated by the command display multicast routing-table
Field
Multicast Routing Table
Total 3 entries
(4.4.4.4, 224.2.149.17)
3 entries in total
(s, g)
Description
Multicast routing table
Uptime: 00:15:16, Timeout in 272 sec
Upstream
Vlan-interface1(4.4.4.6) interface:
Downstream interface list:
Vlan-interface2(2.2.2.4), Protocol
0x1: IGMP
Multicast routing table lasts 15’16” and times out in 272 seconds.
Upstream interface vlan-interface 1 (its
IP address is 4.4.4.6).
Downstream interface list: has an interface Vlan-interface 2 (its IP address is 2.2.2.4). The downstream interface is configured with IGMP groups.
Matched 3 entries
3 entries in total meeting the requirement
20.1.6 multicast
Syntax
multicast ip-address
undo multicast { ip-address | all }
View
Local user view
Parameter
ip-address: Multicast group IP address.
Description
Use the multicast command to configure the multicast groups that users can join (the controlled multicast).
Use the undo multicast command to remove the configuration.
If users join the multicast group, the port-based controlled multicast controls their authority. Users must pass the 802.1x authentication for the port first. Moreover, users can only join the multicast group configured particularly for them. The port-based controlled multicast prohibits users without authority from joining, controlling users’ access to the specific multicast group.
20-6
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands
Caution:
In local user view, before configuring this command, you must configure user service type as LAN-ACCESS, which the controlled multicast supports exclusively at present.
You can use the service-type lan-access command to configure service type in local user view.
Related command: display local-user, service-type lan-access.
Example
Allow users to join the multicast group at 255.255.255.1.
[SW8800-luser-3com] multicast 255.255.255.1
20.1.7 multicast route-limit
Syntax
multicast route-limit limit
undo multicast route-limit
View
System view
Parameter
limit: Limits the capacity of multicast routing table, in the range of 0 to 512.
Description
Use the multicast route-limit command to limit the capacity of multicast routing table.
When the preset capacity is exceeded, the router will discard new (S, G) protocol and data packets.
Use the undo multicast route-limit command to restore the limit to the default value.
By default, the capacity of multicast routing table is set to 512.
If the existing route entries exceed the capacity value you configured during using this command, the system will not delete the existing entries, but prompts the information
“Existing route entries exceed the configured capacity value”.
The new configuration overwrites the old one if you run the command for a second time.
Example
Limit multicast routing table capacity at 128.
20-7
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm
[SW8800] multicast route-limit 128 ands
20.1.8 multicast routing-enable
Syntax multicast routing-enable undo multicast routing-enable
View
System view
Parameter
None
Description
Use the multicast routing-enable command to enable IP multicast routing.
Use the undo multicast routing-enable command to disable IP multicast routing.
By default, IP multicast routing is disabled.
Related command: pim dm, pim sm and igmp enable.
Example
Enable IP multicast routing.
<SW8800> system-view
[SW8800] multicast routing-enable
20.1.9 reset multicast forwarding-table
Syntax
reset multicast forwarding-table [ statistics ] { all | { group-address [ mask
{ group-mask | group-mask-length } ] | source-address [ mask { source-mask |
source-mask-length } ] | incoming-interface { null NULL-interface-number |
interface-type interface-number } }* }
View
User view
Parameter
statistics: If it is selected, the system clears the statistic information of MFC forward entries. Otherwise, the system clears MFC forward entries.
all: All MFC forward entries.
20-8
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands
group-address: Specifies multicast group address.
group-mask: Specifies Mask of multicast group address
group-mask-length: Specifies mask length of multicast group address.
source-address: Specifies source address.
source-mask: Specifies mask of source address.
source-mask-length: Specifies mask length of source address.
incoming-interface: Specifies incoming interface for the multicast forward entry.
null: Incoming-interface is null.
NULL-interface-number: The only number is 0.
interface-type interface-number: Interface type and interface number.
Description
Use the reset multicast forwarding-table command to clear MFC forwarding entries or statistic information of MFC forwarding entries.
You can type in source address first and group address after in the command, as long as they both are valid addresses. The system prompts error information if you type in invalid addresses.
Related command: reset pim routing-table, reset multicast routing-table and
display multicast forwarding-table.
Example
Clear the forwarding entry with address of 225.5.4.3 from the MFC forwarding table.
<SW8800> reset multicast forwarding-table 225.5.4.3
Clear statistic information of the forwarding entry with address of 225.5.4.3 from the
MFC forwarding table.
<SW8800> reset multicast forwarding-table statistics 225.5.4.3
20.1.10 reset multicast routing-table
Syntax
reset multicast routing-table { all | { group-address [ mask { group-mask |
group-mask-length } ] | source-address [ mask { source-mask | source-mask-length } ]
| incoming-interface vlan-interface interface-number } * }
View
User view
Parameter
all: All route entries in the core multicast routing table.
20-9
3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands
group-address: Specifies multicast group address.
group-mask: Specifies Mask of multicast group address
group-mask-length: Specifies mask length of multicast group address.
source-address: Specifies source address.
source-mask: Specifies mask of source address.
source-mask-length: Specifies mask length of source address.
incoming-interface: Specifies incoming interface for the multicast forward entry.
vlan-interface-type interface-number: Interface type and VLAN virtual interface number.
Description
Use the reset multicast routing-table command to clear route entries from the core multicast routing table, as well as MFC forwarding entries.
You can type in source address first and group address after in the command, as long as they both are valid addresses. The system prompts error information if you type in invalid addresses.
Related command: reset pim routing-table, reset multicast forwarding-table and
display multicast forwarding-table.
Example
Clear the route entry with address of 225.5.4.3 from the core multicast routing table.
<SW8800> reset multicast routing-table 225.5.4.3
20-10
3Com Switch 8800 Command Reference Guide Chapter 21 IGMP Configuration Commands
Chapter 21 IGMP Configuration Commands
21.1 IGMP Configuration Commands
21.1.1 debugging igmp
Syntax
debugging igmp { all | event | host | packet | timer }
undo debugging igmp { all | event | host | packet | timer }
View
User view
Parameter
all: All the debugging information of IGMP.
event: Debugging information of IGMP event.
host: Debugging information of IGMP host.
packet: Debugging information of IGMP packets.
timer: Debugging information of IGMP timers.
Description
Use the debugging igmp command to enable IGMP debugging functions.
Use the undo debugging igmp command to disable the debugging functions.
By default, IGMP debugging functions are disabled.
Example
Enable all IGMP debugging functions
<SW8800> debugging igmp all
21.1.2 display igmp group
Syntax
display igmp group [ group-address | interface vlan-interface interface-number ]
View
Any view
21-1
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 21 IGMP Configuration Commands
group-address: Address of the multicast group.
vlan-interface interface-number: VLAN interface number.
Description
Use the display igmp group command to view the member information of the IGMP multicast group.
You can specify to show the information of a group or the member information of the multicast group on a VLAN interface. The information displayed contains the multicast groups which are joined by the downstream hosts through IGMP or through command line.
Related command: igmp host-join.
Example
Display the IGMP group members in a directly-connected subnet.
<SW8800> display igmp group
LoopBack0 (20.20.20.20): Total 3 IGMP Groups reported:
Group Address Last Reporter Uptime Expires
225.1.1.1 20.20.20.20 00:02:04 00:01:15
225.1.1.3 20.20.20.20 00:02:04 00:01:15
225.1.1.2 20.20.20.20 00:02:04 00:01:17
Table 21-1 Output description of the display igmp group command
Field
Group address
Last Reporter
Uptime
Expires
Multicast group address
Description
The last host reporting to join in the multicast group
Time passed since multicast group is discovered (hh: mm: ss).
Specifies when the member will be removed from the multicast group (hh: mm: ss).
21.1.3 display igmp interface
Syntax
display igmp interface [ vlan-interface interface-number ]
View
Any view
21-2
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 21 IGMP Configuration Commands
vlan-interface interface-number: VLAN interface number of the router, used to specify the interface. If the parameters are omitted, information about all the interfaces running
IGMP will be displayed.
Description
Use the display igmp interface command to view the IGMP configuration and running information on an interface.
Example
View the IGMP configuration and running information of all interfaces.
<SW8800> display igmp interface
Vlan-interface1 (10.153.17.99):
IGMP is enabled
Current IGMP version is 2
Value of query interval for IGMP(in seconds): 60
Value of other querier time out for IGMP(in seconds): 120
Value of maximum query response time for IGMP(in seconds): 10
Value of robust count for IGMP: 2
Value of startup query interval for IGMP(in seconds): 15
Value of last member query interval for IGMP(in seconds): 1
Value of query timeout for IGMP version 1(in seconds): 400
Policy to accept IGMP reports: none
Querier for IGMP: 10.153.17.99 (this router)
IGMP group limit is 1024
No IGMP group reported
Table 21-2 Description on the fields of the display igmp interface command
Field
IGMP version query interval querier timeout max query response time robust count startup query interval last member query interval
Description
IGMP version number
General query interval
Querier timeout
Maximum query response time
IGMP robust count. That is, the times of sending
IGMP group-specific query packets for the IGMP querier when it receives an IGMP leave packet from a host.
Startup query interval
The interval of sending IGMP group-specific query packets for the IGMP querier when it receives an
IGMP leave packet from a host
21-3
3Com Switch 8800 Command Reference Guide Chapter 21 IGMP Configuration Commands
Field
query timeout
Description
Query timeout for IGMP V1
Policy to accept IGMP Filter policy for the IGMP multicast group to control reports the accesses to the IP multicast group
Querier for IGMP
IGMP group limit
IGMP querier
Quantity limit of IGMP groups joined on the interface. After the limit is reached, the router does not process the IGMP join messages.
21.1.4 igmp enable
Syntax igmp enable undo igmp enable
View
VLAN interface view
Parameter
None
Description
Use the igmp enable command to enable IGMP on an interface.
Use the undo igmp enable command to disable IGMP on the interface.
By default, IGMP is not enabled.
Only multicast function is enabled can the igmp enable command be executed. After this, you can initiate IGMP feature configuration.
Related command: multicast routing-enable.
Example
Enable IGMP on Vlan-interface 10.
[SW8800-Vlan-interface10] igmp enable
21.1.5 igmp group-limit
Syntax
igmp group-limit limit
undo igmp group-limit
21-4
3Com Switch 8800 Command Reference Guide
View
VLAN interface view
Parameter
Chapter 21 IGMP Configuration Commands
limit: Quantity of multicast groups, in the range of 0 to 512.
Description
Use the igmp group-limit command to limit multicast groups on an interface. After the limit is reached, the router does not process IGMP join messages.
Use the undo igmp group-limit command to restore the default setting.
By default, the maximum number is 512.
If the existing IGMP groups exceed the quantity limit you configured during using this command, the system will not delete the existing entries.
The new configuration overwrites the old one if you run the command for a second time.
Example
Limit the maximum IGMP groups at Vlan-interface10 to 100.
[SW8800-Vlan-interface10] igmp group-limit 100
21.1.6 igmp group-policy
Syntax
igmp group-policy acl-number [ 1 | 2 | port { interface_type interface_ num |
interface_name } [ to { interface_type interface_ num | interface_name } ] ]
undo igmp group-policy [ port { interface_type interface_ num | interface_name } [ to
{ interface_type interface_ num | interface_name } ] ]
View
Parameter
VLAN interface view
acl-number: Number of the basic IP access control list number, defining a multicast group range. The value ranges from 2000 to 2999.
1: IGMP version 1.
2: IGMP version 2. If IGMP version is not specified, version 1 and version 2 will be used as default.
port: Packets received and sent by the port(s) and applied to the conditions set by the
ACL will be filtered. And the port(s) must belong to the VLAN interface being configured
21-5
3Com Switch 8800 Command Reference Guide Chapter 21 IGMP Configuration Commands by this command. When ports do not belong to this VLAN interface, you can still configure the filter, however, the configured filter is not valid.
Description
Use the igmp group-policy command to set the filter of multicast groups on an interface to control the accessing to the IP multicast groups.
Use the undo igmp group-policy command to remove the filter configured.
By default, no filter is configured, that is, a host can join any multicast group.
If you do not want the hosts on the network that the interface is on to join some multicast groups and receive the packets from the multicast groups, you can use this command to limit the range of the multicast groups serviced by the interface.
Related command: igmp host-join.
Example
Configure the acl 2000.
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255
Configure that only the hosts contained in the acl 2000 connected to the
VLAN-interface10 can be added to the multicast group, which is configured to use
IGMP version 2.
[SW8800-vlan-interface10] igmp group-policy 2000 2
21.1.7 igmp group-policy vlan
Syntax
igmp group-policy acl-number vlan vlanid
undo igmp group-policy vlan vlanid
View
Ethernet port view
Parameter
acl-number: Basic IP ACL number, in the range of 2000~2999, defining a multicast group range.
vlanid: VLAN where the port belongs to.
Description
Use the igmp group-policy vlan command to set multicast group filter on port , so that you can control the access to IP multicast group.
Use the undo igmp group-policy vlan command to remove the filter configured.
21-6
3Com Switch 8800 Command Reference Guide Chapter 21 IGMP Configuration Commands
By default, no filter is set and the host can join any multicast group.
The command can limit the multicast group members, so that you can prevent the host to join some multicast groups and to receive the packets from the multicast group. The function is the same as that of igmp group-policy command.
Note that the port must belong to the specified VLAN which enables IGMP. Otherwise the configuration will not work.
Related command: igmp group-policy, igmp host-join port and igmp host-join
vlan.
Example
Configure at the port Ethernet2/1/1 that only the hosts contained in the acl 2000 connected to the VLAN-interface10 can be added to the multicast group.
[SW8800-Vlan-interface10] igmp enable
[SW8800-Vlan-interface10] quit
[SW8800] interface Ethernet 2/1/1
[SW8800-Ethernet2/1/1] port access vlan 10
[SW8800-Ethernet2/1/1] igmp group-policy 2000 vlan 10
21.1.8 igmp host-join port
Syntax
igmp host-join group-address port { interface_type interface_ num | interface_name }
[ to { interface_type interface_ num | interface_name } ]
undo igmp host-join group-address port { interface_type interface_ num |
interface_name } [ to { interface_type interface_ num | interface_name } ]
View
VLAN interface view
Parameter
group-address: Multicast address of the multicast group that an interface will join.
port: Specifies the port in the VLAN interface.
Description
Use the igmp host-join command to enable a port in the VLAN interface of an
Ethernet switch to join a multicast group.
Use the undo igmp host-join command to disable the configuration.
By default, an interface does not join any multicast group.
Related command: igmp group-policy.
21-7
3Com Switch 8800 Command Reference Guide
Example
Chapter 21 IGMP Configuration Commands
Add port Ethernet 2/1/1 in VLAN-interface10 to the multicast group at 225.0.0.1.
[SW8800-Vlan-interface10] igmp host-join 225.0.0.1 port Ethernet 2/1/1
21.1.9 igmp host-join vlan
Syntax
igmp host-join group-address vlan vlanid
undo igmp host-join group-address vlan vlanid
View
Ethernet port view
Parameter
Description
Use the igmp host-join vlan command to make an Ethernet join in multicast group.
Use the undo igmp host-join vlan command to cancel the configuration.
By default, Ethernet join no multicast group.
Related command: igmp group-policy.
Example
group-address: Address of the multicast group to be joined.
vlanid: VLAN where the port belongs to.
Add port Ethernet 2/1/1 to the multicast group at 225.0.0.1
[SW8800-Vlan-interface10] igmp enable
[SW8800-Vlan-interface10] quit
[SW8800] interface Ethernet 2/1/1
[SW8800-Ethernet2/1/1] port access vlan 10
[SW8800-Ethernet2/1/1] igmp host-join 225.0.0.1 vlan 10
21.1.10 igmp lastmember-queryinterval
Syntax
igmp lastmember-queryinterval seconds
undo igmp lastmember-queryinterval
View
Interface view
21-8
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 21 IGMP Configuration Commands
seconds: Time interval before IGMP query router sends the IGMP group query message after it receives the IGMP Leave message from the host. It is in the range of 1 to 5 seconds. By default, it is 1 second.
Description
Use the igmp lastmember-queryinterval command to set the time interval before
IGMP query router sends the IGMP group query message after it receives the IGMP
Leave message from the host.
Use the undo igmp lastmember-queryinterval command to restore the default value.
In the shared network, that is, a same network segment including multiple hosts and multicast routers, the query router is responsible for maintaining the IGMP group membership on the interface. When the IGMP v2 host leaves a group, it sends an
IGMP Leave message. When receiving the IGMP Leave message, IGMP query router must send the IGMP group query message for specified times (by the robust-value parameter in the igmp robust-count command, with default value as 2) in a specified time interval (by the seconds parameter in the igmp lastmember-queryinterval command, with default value as 1 second). If other hosts which are interested in the specified group receive the IGMP query message from the IGMP query router, they will sends back the IGMP Membership Report message within the specified maximum response time interval. If it receives the IGMP Membership Report message within the defined period (equal to robust-value
× seconds), the IGMP query router continue to maintain the membership of this group. When receiving no IGMP Membership Report message from any hosts within the defined period, the IGMP query router considers it as timeout and stops membership maintenance for the group.
This command is only valid for the IGMP v2 query router. If the IGMP v1 host leaves a group, it does not send an IGMP Leave message. And then this command is invalid for the IGMP query router.
Related command: igmp robust-count and display igmp interface.
Example
Set the query interval at the Vlan-interface10 as 3 seconds.
[SW8800-Vlan-interface10] igmp lastmember-queryinterval 3
21.1.11 igmp max-response-time
Syntax
igmp max-response-time seconds
undo igmp max-response-time
21-9
3Com Switch 8800 Command Reference Guide
View
VLAN Interface view
Chapter 21 IGMP Configuration Commands
Parameter
Description
Use the igmp max-response-time command to configure the maximum response time contained in the IGMP query messages.
Use the undo igmp max-response-time command to restore the default value.
The maximum query response time determines the period for a router to quickly detect that there are no more directly connected group members in a LAN.
Related command: display igmp group.
Example
seconds: Maximum response time in the IGMP query messages in second in the range from 1 to 25. By default, the value is 10 seconds.
Set the maximum response time carried in host-query message to 8 seconds.
[SW8800-Vlan-interface10] igmp max-response-time 8
21.1.12 igmp robust-count
Syntax
igmp robust-count robust-value
undo igmp robust-count
View
VLAN interface view
Parameter
robust-value: IGMP robust value, number of sending the IGMP group query message after the IGMP query router receives the IGMP Leave message from the host. It is in the range of 2 to 5. By default, it is 2.
Description
Use the igmp robust-count command to set the number of sending the IGMP group query message after the IGMP query router receives the IGMP Leave message from the host.
Use the undo igmp robust-count command to restore the default value.
Related command: igmp lastmember-queryinterval and display igmp interface.
21-10
3Com Switch 8800 Command Reference Guide
Example
Chapter 21 IGMP Configuration Commands
Set the robust value at the Vlan-interface 10 as 3.
[SW8800-Vlan-interface10] igmp robust-count 3
21.1.13 igmp timer other-querier-present
Syntax
igmp timer other-querier-present seconds
undo igmp timer other-querier-present
View
VLAN interface view
Parameter
seconds: IGMP querier present timer value in second ranging from 1 to 131070. By default, the value is twice the value of IGMP query message interval, i.e., 120 seconds.
Description
Use the igmp timer other-querier-present command to configure the timer of presence of the IGMP querier.
Use the undo igmp timer other-querier-present command to restore the default value.
On a shared network, i.e., there are multiple multicast routers on the same network segment, the query router (querier for short) takes charge of sending query messages periodically on the interface. If other non-queriers receive no query messages within the valid period, the router will consider the previous query to be invalid and the router itself becomes a querier.
In IGMP version 1, the selection of a query is determined by the multicast routing protocol. In IGMP version 2, the router with the lowest IP address on the shared network segment acts as the querier.
Related command: igmp timer query and display igmp interface.
Example
Set querier to expire after 300 seconds.
[SW8800-Vlan-interface10] igmp timer other-querier-present 300
21.1.14 igmp timer query
Syntax
igmp timer query seconds
21-11
3Com Switch 8800 Command Reference Guide
undo igmp timer query
View
Chapter 21 IGMP Configuration Commands
VLAN interface view
Parameter
seconds: Interval at which a router transmits IGMP query messages in second in the range from 1 to 65535. By default, the value is 60 seconds.
Description
Use the igmp timer query command to configure the interval at which a router interface sends IGMP query messages.
Use the undo igmp timer query command to restore the default value.
A multicast router periodically sends out IGMP query messages to check whether there are multicast group members on the network. The query interval can be modified according to the practical conditions of the network.
Related command: igmp timer other-querier-present.
Example
Configure to transmit the host-query message every 150 seconds via VLAN-interface2.
[SW8800-Vlan-interface2] igmp timer query 150
21.1.15 igmp version
Syntax
igmp version { 1 | 2 }
undo igmp version
View
VLAN interface view
Parameter
1: IGMP Version 1.
2: IGMP Version 2. By default, IGMP Version 2 is used.
Description
Use the igmp version command to specify the version of IGMP that a router uses.
Use the undo igmp version command to restore the default value.
All routers on a subnet must support the same version of IGMP. After detecting the presence of IGMP Version 1 system, a router cannot automatically switch to Version 2.
21-12
3Com Switch 8800 Command Reference Guide
Example
Chapter 21 IGMP Configuration Commands
Run IGMP Version 1 on VLAN-interface10.
[SW8800-Vlan-interface10] igmp version 1
21.1.16 reset igmp group
Syntax
reset igmp group { all | interface vlan-interface interface-number { all |
group-address [ group-mask ] } }
View
User view
Parameter
Description
Use the reset igmp group command to delete an existing IGMP group from the interface. The deleted group can added again on the interface.
Example
all: All IGMP groups.
interface vlan-interface interface-number: VLAN virtual interface type and number.
group-address: IGMP group address.
group-mask: Segment mask of the IGMP group address.
Delete all IGMP groups on all the interfaces.
<SW8800> reset igmp group all
Delete all IGMP groups on the Vlan-intrface10.
<SW8800> reset igmp group interface Vlan-interface10 all
Delete the group 225.0.0.1 from the Vlan-interface10.
<SW8800> reset igmp group interface Vlan-interface10 225.0.0.1
Delete the IGMP groups ranging from 225.1.1.0 to 225.1.1.255 on the
Vlan-interface10.
<SW8800> reset igmp group interface Vlan-interface10 225.1.1.0 255.255.255.0
21-13
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
Chapter 22 PIM Configuration Commands
22.1 PIM Configuration Commands
22.1.1 bsr-policy
Syntax
bsr-policy acl-number
undo bsr-policy
View
PIM view
Parameter
acl-number: ACL number imported in BSR filtering policy, in the range of 2000 to 2999.
Description
Use the bsr-policy command to limit the range of legal BSRs to prevent BSR proofing.
Use the undo bsr-policy command to restore the default setting, that is, no range limit is set and all received messages are taken as legal.
In the PIM SM network using BSR (bootstrap router) mechanism, every router can set itself as C-BSR (candidate BSR) and take the authority to advertise RP information in the network once it wins in the contention. To prevent the legal BSR from being replaced maliciously in the network, the following two measures need to be taken: z z
Prevent the router from being spoofed by hosts though faking legal BSR messages to modify RP mapping. BSR messages are of multicast type and their
TTL is 1, so this type of attacks often hit edge routers. Fortunately, BSRs are inside the network, while assaulting hosts are outside, therefore neighbor and
RPF checks can be used to stop this type of attacks.
If a router in the network is manipulated by an attacker, or an illegal router is accessed into the network, the attacker may set itself as C-BSR and try to win the contention and gain authority to advertise RP information among the network.
Since the router configured as C-BSR shall propagate BSR messages, which are multicast messages sent hop by hop with TTL as 1, among the network, then the network cannot be affected as long as the peer routers do not receive these BSR messages. One way is to configure bsr-policy on each router to limit legal BSR range, for example, only 1.1.1.1/32 and 1.1.1.2/32 can be BSR, thus the routers cannot receive or forward BSR messages other than these two. Even legal BSRs cannot contest with them.
22-1
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
Problems may still exist if a legal BSR is attacked, though these two measures can effectively guarantee high BSR security.
The source parameter in the rule command is translated as BSR address in the
bsr-policy command.
Related command: acl and rule.
Example
Configure BSR filtering policy on routers, only 101.1.1.1/32 can be BSR and all others are illegal.
[SW8800-pim] bsr-policy 2000
[SW8800-pim] quit
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule 0 permit source 101.1.1.1 0
22.1.2 c-bsr
Syntax
c-bsr interface interface-type interface-number hash-mask-len [ priority ]
undo c-bsr
View
PIM view
Parameter
interface-type interface-number: Specifies the interface. The candidate BSR is configured on the interface. PIM-SM must be enabled on the interface first.
hash-mask-len: Length of the mask. The value ranges from 0 to 32.
priority: Priority of the candidate BSR. The larger the value of the priority, the higher the priority of the BSR. The value ranges from 0 to 255. By default, the priority is 0.
Description
Use the c-bsr command to configure a candidate BSR.
Use the undo c-bsr command to remove the candidate BSR configured.
By default, no candidate BSR is set.
When configure the candidate BSR, the larger bandwidth should be guaranteed since a great amount of information will be exchanged between BSR and other devices in the
PIM domain.
Related command: pim sm.
22-2
3Com Switch 8800 Command Reference Guide
Example
Chapter 22 PIM Configuration Commands
Configure the Ethernet switch as C-BSR with priority 2 (and the C-BSR address is designated as the IP address of VLAN-interface10).
[SW8800] pim
[SW8800-pim] c-bsr vlan-interface 10 24 2
22.1.3 c-rp
Syntax
c-rp interface-type interface-number [ group-policy acl-number | priority
priority-value ]*
undo c-rp { interface-type interface-number | all }
View
PIM view
Parameter
interface-type interface-number: Specifies interface with the IP address advertised as a candidate RP address.
acl-number: Number of the basic ACL that defines a group range, which is the service range of the advertised RP. The value ranges from 2000 to 2999.
priority-value: Priority value of candidate RP, in the range of 0 to 255. By default, it is 0.
The greatest value corresponds to the lowest priority level
all: Removes all candidate RP configurations.
Description
Use the c-rp command to configure the router to advertise itself as a candidate RP.
Use the undo c-rp command to remove the configuration.
By default, no candidate RP is configured.
When configuring the candidate RP, a relatively large bandwidth should be reserved for the router and other devices in the PIM domain.
Related command: c-bsr.
Example
Configure the switch to advertise itself as a C-RP in the PIM domain to BSR. The standard access list 2000 defines the groups related to the RP. The address of C-RP is designated as the IP address of VLAN-interface10.
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255
[SW8800] pim
22-3
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
[SW8800-pim] c-rp vlan-interface 10 group-policy 2000
22.1.4 crp-policy
Syntax
crp-policy acl-number
undo crp-policy
View
PIM view
Parameter
acl-number: ACL number imported in C-RP filtering policy, ranging from 3000 to 3999.
Description
Use the crp-policy command to limit the range of legal C-RP, as well as target service group range of each C-RP, and prevent C-RP proofing.
Use the undo crp-policy command to restore the default setting, that is, no range limit is set and all received messages are taken as legal.
In the PIM SM network using BSR mechanism, every router can set itself as C-RP
(candidate rendezvous point) servicing particular groups. If elected, a C-RP becomes the RP servicing the current group.
In BSR mechanism, a C-RP router unicasts C-RP messages to the BSR, which then propagates the C-RP messages among the network by BSR message.
To prevent C-RP spoofing, you need to configure crp-policy on the BSR to limit legal
C-RP range and their service group range. Since each C-BSR has the chance to become BSR, you must configure the same filtering policy on each C-BSR router.
This command uses the ACLs numbered between 3000 and 3999. The source parameter in the rule command is translated as C-RP address in the crp-policy command, and the destination parameter as the service group range of this C-RP address. For the C-RP messages received, only when their C-RP addresses match the
source address and their server group addresses are subset of those in ACL, can the be considered as matched.
Related command: acl and rule.
Example
Configure C-RP filtering policy on the C-BSR routers, allowing only 1.1.1.1/32 as C-RP and to serve only for the groups 225.1.0.0/16.
[SW8800-pim] crp-policy 3000
[SW8800-pim] quit
[SW8800] acl number 3000
22-4
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
[SW8800-acl-adv-3000] rule 0 permit source 1.1.1.1 0 destination 225.1.0.0
0.0.255.255
22.1.5 debugging pim common
Syntax
debugging pim common { all | event | packet | timer }
undo debugging pim common { all | event | packet | timer }
View
User view
Parameter
Description
Use the debugging pim common command to enable common PIM debugging functions.
Use the undo debugging pim common command to disable the debugging functions.
By default, common PIM debugging functions are disabled.
Example
all: All the common debugging information of PIM.
event: Debugging information of common PIM event.
packet: Debugging information of PIM hello packet.
timer: Debugging information of common PIM timer.
Enable all common PIM debugging functions
<SW8800> debugging pim common all
22.1.6 debugging pim dm
Syntax
debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert |
graft | graft-ack | join | prune } }
undo debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all |
assert | graft | graft-ack | join | prune } }
View
User view
22-5
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 22 PIM Configuration Commands
alert: Interoperation event debugging information of PIM-DM
all: All the debugging information of PIM-DM.
mrt: Debugging information of PIM-DM multicast routing table.
timer: Debugging information of PIM-DM timer.
warning: Debugging information of PIM-DM warning message.
recv: Debugging information of PIM-DM receiving packets.
send: Debugging information of PIM-DM sending packets.
assert | graft | graft-ack | join | prune: Packets type.
Description
Use the debugging pim dm command to enable PIM-DM debugging functions.
Use the undo debugging pim dm command to disable the debugging functions.
By default, PIM-DM debugging functions are disabled.
Example
Enable all PIM-DM debugging functions
<SW8800> debugging pim dm all
22.1.7 debugging pim sm
Syntax
debugging pim sm { all | mbr { alert | fresh } | verbose | mrt | msdp | timer { assert
| bsr | crpadv | jp | jpdelay | mrt | probe | spt } | warning | { recv | send } { assert |
bootstrap | crpadv | jp | reg | regstop } }
undo debugging pim sm { all | mbr { alert | fresh } | verbose | mrt | msdp | timer
{ assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt } | warning | { recv | send }
{ assert | bootstrap | crpadv | jp | reg | regstop } }
View
Parameter
User view
all: All debugging information of PIM-SM.
mbr: Debugging information of PIM-SM multicast border router event. Alert stands for debugging alert information of PIM-SM multicast border router fresh stands for debugging renew information of PIM-SM multicast.
verbose: Debugging detail information of PIM-SM.
22-6
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
mrt: Debugging information of PIM-SM multicast routing table.
msdp: Debugging information of correspondence between PIM SM and MSDP.
timer: Debugging information of PIM-SM timer.
assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt: PIM-SM timer type.
warning: Debugging information of PIM-SM warning message.
recv: Debugging information of PIM-SM receiving packets.
send: Debugging information of PIM-SM sending packets.
assert | bootstrap | crpadv | jp | reg | regstop: Packets type.
Description
Use the debugging pim sm command to enable PIM-SM debugging functions.
Use the undo debugging pim sm command to disable the debugging functions.
By default, PIM-SM debugging functions are disabled.
Example
Enable all PIM-SM debugging functions
<SW8800> debugging pim sm all
22.1.8 display pim bsr-info
Syntax display pim bsr-info
View
Any view
Parameter
None
Description
Use the display pim bsr command to view the BSR information.
Related command: c-bsr and c-rp.
Example
[SW8800] display pim bsr-info
Current BSR Address: 192.168.1.1
Priority: 0
Mask Length: 30
Expires: 00:01:26
Bootstrap-Period: 60 seconds
22-7
3Com Switch 8800 Command Reference Guide
Bootstrap-Timeout: 130 seconds
Local host is BSR
Chapter 22 PIM Configuration Commands
Table 22-1 Output description of the display pim bsr command
Field
BSR
Priority
Mask Length: 30
Expires: 00:01:55
BootStrap-Period: 60 seconds
Bootstrap-timeout: 130 second
Description
Boot trap router
Priority of BSR
Length of mask
Expire time
Boot trap interval
Boot trap timeout
22.1.9 display pim interface
Syntax
display pim interface [interface interface-type interface-number ]
View
Any view
Parameter
interface-type interface-number: Interface type and interface number, used to specify the interface.
Description
Use the display pim interface command to view the PIM interface configuration information.
If no interface type or interface number is specified, this command displays the PIM configurations on all interfaces. If the interface type and interface number are specified, only the PIM configuration on the specified interface is displayed.
Example
Display the PIM configuration information on an interface.
<SW8800> display pim interface vlan 2
PIM information of VLAN-interface 2:
IP address of the interface is 10.10.1.20
PIM is enabled on interface
PIM version is 2
PIM mode is Sparse
22-8
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
PIM query interval is 30 seconds
PIM neighbor hold-time is 105 seconds
PIM neighbor limit is 128
PIM neighbor policy is none
Total 1 PIM neighbor on interface
PIM DR(designated router) is 10.10.1.20
Table 22-2 Output description of the display pim interface command
Field
PIM version
PIM mode
PIM query interval
PIM neighbor hold-time
PIM neighbor limit
PIM neighbor policy
PIM DR
Description
Version of PIM
PIM mode enabled on the interface (DM or SM)
Hello packet interval
Hold-time of PIM neighbor
Limit of the PIM neighbors on an interface. No neighbor can be added any more when the limit is reached
Filtering policy of the PIM neighbors on the current interface
Designated router
22.1.10 display pim neighbor
Syntax
display pim neighbor [ interface interface-type interface-number ]
View
Any view
Parameter
interface interface-type interface-number: Interface type and interface number, used to specify the interface.
Description
Use the display pim neighbor command to view the PIM neighbor information discovered by the switch interface. If the interface type and interface number are specified, this command only displays the PIM neighbor information on the specified interface.
22-9
3Com Switch 8800 Command Reference Guide
Example
Chapter 22 PIM Configuration Commands
Display PIM neighbor information discovered by the switch interface.
<SW8800> display pim neighbor
Neighbor's Address Interface Name Uptime Expires
90.0.0.2 Vlan-interface90 00:00:36 00:01:40
Table 22-3 Output description about PIM neighbors
Field
Neighbor Address Neighbor address
Interface
Uptime
Description
Interface where the neighbor has been discovered
Time passed since the multicast group has been discovered
22.1.11 display pim routing-table
Syntax
display pim routing-table [ { { *g [ group-address [ mask { mask-length | mask } ] ] |
**rp [ rp-address [ mask { mask-length | mask } ] ] } | { group-address [ mask
{ mask-length | mask } ] | source-address [ mask { mask-length | mask } ] } * } |
incoming-interface { interface interface-type interface-number | null } |
{ dense-mode | sparse-mode } ] *
View
Any view
Parameter
*g: (*, G) route entry.
mask: IP address mask.
mask-length: Length of the IP address mask.
**rp: (*, *, p) route entry.
rp-address: Address of the RP.
group-address: Address of the multicast group.
source-address: IP address of the multicast source.
incoming-interface interface interface-type interface-number: Route entry with the specified incoming interface.
null: Specifies the incoming interface type as Null.
dense-mode: Specifies the multicast routing protocol as PIM-DM.
22-10
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
sparse-mode: Specifies the multicast routing protocol as PIM-SM.
Description
Use the display pim routing-table command to view the contents of the PIM multicast routing table. The displayed information of the PIM multicast routing table includes the
SPT and RPF information.
Example
View the contents of the PIM multicast routing table on the router.
<SW8800> display pim routing-table
PIM-SM Routing Table
Total 0 (*,*,RP)entry, 0 (*,G)entry, 2 (S,G)entries
(192.168.1.2, 224.2.178.130),
Protocol 0x20: PIMSM, Flag 0x4: SPT
UpTime: 23:59, Timeout after 196 seconds
Upstream interface: VLAN-interface2, RPF neighbor: NULL
Downstream interface list: NULL
(192.168.1.2, 224.2.181.90),
Protocol 0x20: PIMSM, Flag 0x4: SPT
UpTime: 23:59, Timeout after 196 seconds
Upstream interface: VLAN-interface2, RPF neighbor: NULL
Downstream interface list: NULL
Total 2 entries listed
Table 22-4 Output description about PIM routing table
Field Description
(S,G) (source address, multicast group)
SPT
RPF
22.1.12 display pim rp-info
Syntax
display pim rp-info [ group-address ]
View
Shortest Path Tree
Reverse Path Forwarding
22-11
3Com Switch 8800 Command Reference Guide
Any view
Parameter
Chapter 22 PIM Configuration Commands
group-address: Specifies the group address to display. If no multicast group is specified, the RP information about all multicast groups will be displayed.
Description
Use the display pim rp-info command to view the RP information of multicast group.
In addition, this command can also display the BSR and static RP information.
Example
View the RP information of multicast group.
<SW8800> display pim rp-info
PIM-SM RP-SET information:
BSR is: 20.20.20.20
Group/MaskLen: 224.0.0.0/4
RP 20.20.20.20
Version: 2
Priority: 0
Uptime: 00:00:05
Expires: 00:02:25
Adv-Period: 60 seconds
Holdtime: 150 seconds
The following table details the display information.
Table 22-5 Description of the information for display pim rp-info
Field
PIM-SM RP-SET information:
BSR is: 4.4.4.6
Description
RP information
BSR is the virtual interface of the node
4.4.4.6.
Group/MaskLen: 224.0.0.0/4
RP 4.4.4.6
Version: 2
Priority: 0
Uptime: 00:39:50
Expires: 00:01:40
Adv-Period: 60 seconds
Holdtime: 150 seconds
The RP with IP address 224.0.0.0 and mask length of 4 is the virtual interface of the node 4.4.4.6, in version 2 and priority
0; it has been active for 39 minutes and
50 seconds and shall expire in one minute and 40 seconds; the advertisement interval is 60 seconds and holdtime is 150 seconds.
22-12
3Com Switch 8800 Command Reference Guide
22.1.13 pim
Chapter 22 PIM Configuration Commands
Syntax pim undo pim
View
System view
Parameter
None
Description
Use the pim command to enter the PIM view and configure the PIM global parameters.
Note that the command does not enable the PIM protocol.
Use the undo pim command to return to system view, clear the PIM global parameters configured before and clear the PIM view.
Example
Enter the PIM view.
<SW8800> system-view
[SW8800] multicast routing-enable
[SW8800] pim
[SW8800-pim]
22.1.14 pim bsr-boundary
Syntax pim bsr-boundary undo pim bsr-boundary
View
VLAN interface view
Parameter
None
Description
Use the pim bsr-boundary command to configure an interface to be the PIM domain border.
Use the undo pim bsr-boundary command to remove the border.
22-13
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
By default, no domain border is set.
You can use this command to set border of bootstrap messages, that is to say, bootstrap messages cannot pass interfaces that are configured with pim
bsr-boundary command while other PIM messages can. In this way, the network is divided into different BSR domains. Each domain uses a different bootstrap router.
Note that this command cannot build a multicast boundary. It just sets up the boundary for PIM bootstrap messages.
Related command: c-bsr.
Example
Configure domain border on VLAN-interface10.
[SW8800-Vlan-interface10] pim bsr-boundary
22.1.15 pim dm
Syntax pim dm undo pim dm
View
VLAN interface view
Parameter
None
Description
Use the pim dm command to enable PIM-DM.
Use the undo pim dm command to disable PIM-DM.
By default, PIM-DM is disabled.
Before enabling PIM-DM, you must execute the multicast routing-enable command in system view to enable the multicast routing protocol first.
Example
Enable PIM-DM on VLAN-interface10 of the Ethernet switch.
[SW8800] multicast routing-enable
[SW8800-Vlan-interface10] pim dm
22-14
3Com Switch 8800 Command Reference Guide
22.1.16 pim neighbor-limit
Chapter 22 PIM Configuration Commands
Syntax
View
VLAN interface view
Parameter
limit: Limits of PIM neighbors on the interface, in the range of 0~128.
Description
Use the pim neighbor-limit command to limit the PIM neighbors on an interface. No neighbor can be added any more when the limit is reached.
Use the undo pim neighbor-limit command to restore the default setting.
By default, the PIM neighbors on the interface are limited to 128.
If the existing PIM neighbors exceed the configured value during configuration, they will not be deleted.
Example
pim neighbor-limit limit
undo pim neighbor-limit
Limit the PIM neighbors on the Vlan-interface10 to 50.
[SW8800-Vlan-interface10] pim neighbor-limit 50
22.1.17 pim neighbor-policy
Syntax
pim neighbor-policy acl-number
undo pim neighbor-policy
View
VLAN interface view
Parameter
acl-number: Basic ACL number, in the range of 2000 to 2999.
Description
Use the pim neighbor-policy command to set to filter the PIM neighbors on the current interface.
Use the undo pim neighbor-policy command to remove the setting.
22-15
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
Only the routers that match the filtering rule in the ACL can serve as a PIM neighbor of the current interface.
The new configuration overwrites the old one if you run the command for a second time.
Example
Configure that 10.10.1.2 can serve as a PIM neighbor of the Vlan-interface10, but not
10.10.1.1.
[SW8800-Vlan-interface10] pim neighbor-policy 2000
[SW8800-Vlan-interface10] quit
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule permit source 10.10.1.2 0
[SW8800-acl-basic-2000] rule deny source 10.10.1.1 0
22.1.18 pim sm
Syntax pim sm undo pim sm
View
VLAN interface view
Parameter
None
Description
Use the pim sm command to enable the PIM-SM protocol on an interface.
Use the undo pim sm command to disable the PIM-SM protocol.
By default, PIM-SM is disabled.
Users need to configure the PIM-SM protocol on each interface. Generally, the PIM-SM protocol needs to be enabled on each interface.
Related command: multicast routing-enable.
Example
Enable PIM-SM on VLAN-interface10.
[SW8800-Vlan-interface10] pim sm
22-16
3Com Switch 8800 Command Reference Guide
22.1.19 pim timer hello
Chapter 22 PIM Configuration Commands
Syntax
pim timer hello seconds
undo pim timer hello
View
VLAN interface view
Parameter
seconds: Time interval for a port to send Hello packets, in the range of 1 to 18,000 (in seconds). By default, the time interval is 30 seconds.
Description
Use the pim timer hello command to configure the time interval for a port to send Hello packets.
Use the undo pim timer hello command to restore the default time interval.
After the protocol independent multicast-sparse mode (PIM-SM) protocol is enabled for a port, a switch sends Hello packets periodically to all network devices supporting protocol independent multicast (PIM) to find its neighbors. If a port receives the Hello packets, it indicates the port has a neighbor network device supporting PIM, and the port adds the neighbor to its port neighbor list. If a port does not receive the Hello packets from the existing neighbors in its neighbor list in the specified time, the system assumes the neighbor has left the multicast group.
Note:
Note that when you configure the time interval for a port to send Hello packets, the pim neighbor hold-time value automatically turns into 3.5 times the time interval value.
Therefore you need not configure a value for pim neighbor hold-time.
Example
Set the time interval to send Hello packets for VLAN-interface10 to 40 seconds.
[SW8800-Vlan-interface10] pim timer hello 40
22.1.20 register-policy
Syntax
register-policy acl-number
22-17
3Com Switch 8800 Command Reference Guide
undo register-policy
View
Chapter 22 PIM Configuration Commands
PIM view
Parameter
acl-number: Number of IP advanced ACL, defining the rule of filtering the source and group addresses. The value ranges from 3000 to 3999.
Description
Use the register-policy command to configure a RP to filter the register messages sent by the DR in the PIM-SM network and to accept the specified messages only.
Use the undo register-policy command to remove the configured message filtering.
Example
If the local device is the RP in the network, using the following command can only accept multicast message register of the source sending multicast address in the range of 225.1.0.0/16 on network segment 10.10.0.0/16.
<SW8800> system-view
[SW8800] acl number 3010
[SW8800-acl-adv-3010] rule permit ip source 10.10.0.0 0.0.255.255 destination
225.1.0.0 0.0.255.255
[SW8800-acl-adv-3010] quit
[SW8800] multicast routing-enable
[SW8800] pim
[SW8800-pim] register-policy 3010
22.1.21 reset pim neighbor
Syntax
reset pim neighbor { all | { neighbor-address | interface interface-type
interface-number } * }
View
Parameter
User view
all: All PIM neighbors
neighbor-address: Specifies neighbor address.
interface interface-type interface-number: Specifies interface.
22-18
3Com Switch 8800 Command Reference Guide
Description
Chapter 22 PIM Configuration Commands
Use the reset pim neighbor command to clear a PIM neighbor.
Related command: display pim neighbor.
Example
Clear the PIM neighbor 25.5.4.3.
<SW8800> reset pim neighbor 25.5.4.3
22.1.22 reset pim routing-table
Syntax
reset pim routing-table { all | { group-address [ mask group-mask | mask-length
group-mask-length ] | source-address [ mask source-mask | mask-length
source-mask-length ] | { incoming-interface { interface-type interface number } } } * }
View
User view
Parameter
all: All PIM neighbors.
group-address: Specifies group address.
mask group-mask: Specifies group mask.
mask-length group-mask-length: Specifies mask length of the group address.
source-address: Specifies source address.
mask source-mask: Specifies source mask.
mask-length source-mask-length: Specifies mask length of the group address.
incoming-interface: Specifies incoming interface for the route entry in PIM routing table.
interface-type interface-number: Specifies the interface.
Description
Use the reset pim routing-table command to clear a PIM route entry.
You can type in source address first and group address after in the command, as long as they are valid. Error information will be given if you type in invalid addresses.
If in this command, the group-address is 224.0.0.0/24 and source-address is the RP address (where group address can have a mask, but the resulted IP address must be
224.0.0.0, and source address has no mask), then it means only the (*, *, RP) item will be cleared.
22-19
3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands
If in this command, the group-address is any a group address, and source-address is 0
(where group address can have a mask, and source address has no mask), then only the (*, G) item will be cleared.
This command shall clear not only multicast route entries from PIM routing table, but also the corresponding route entries and forward entries in the multicast core routing table and MFC.
Related command: reset multicast routing-table, reset multicast forwarding-table and display pim routing-table.
Example
Clear the route entries with group address 225.5.4.3 from the PIM routing table.
<SW8800> reset pim neighbor 25.5.4.3
22.1.23 source-policy
Syntax
source-policy acl-number
undo source-policy
View
PIM view
Parameter
acl-number: Basic or advanced ACL, in the range of 2000 to 3999.
Description
Use the source-policy command to set the router to filter the multicast data packets based on source (or group) address.
Use the undo static-rp command to remove the configuration.
If resource address filtering is configured, as well as basic ACLs, then the router filters the resource addresses of all multicast data packets received. Those not matched will be discarded.
If resource address filtering is configured, as well as advanced ACLs, then the router filters the resource and group addresses of all multicast data packets received. Those not matched will be discarded.
When this feature is configured, the router filters not only multicast data, but the multicast data encapsulated in the registration packets.
The new configuration overwrites the old one if you run the command for a second time.
22-20
3Com Switch 8800 Command Reference Guide
Example
Chapter 22 PIM Configuration Commands
Set to receive the multicast data packets from source address 10.10.1.2, but discard those from 10.10.1.1.
[SW8800] multicast routing-enable
[SW8800] pim
[SW8800-pim] source-policy 2000
[SW8800-pim] quit
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule permit source 10.10.1.2 0
[SW8800-acl-basic-2000] rule deny source 10.10.1.1 0
22.1.24 static-rp
Syntax
static-rp rp-address [ acl-number ]
undo static-rp
View
PIM view
Parameter
Description
Use the static-rp command to configure static RP.
Use the undo static-rp command to remove the configuration.
Static RP functions as the backup of dynamic RP so as to improve the network robusticity. If the RP elected by BSR mechanism is valid, static RP will not work.
All routers in the PIM domain should be configured with this command and be specified with the same RP address.
The new configuration overwrites the old one if you run the command for a second time.
Related command: display pim rp-info.
Example
rp-address: Static RP address, only being legal unicast IP address.
acl-number: Basic ACL, used to control the range of multicast group served by static
RP, which ranges from 2000 to 2999. If an ACL is not specified upon configuration, static RP will serve all multicast groups; if an ACL is specified, static RP will only serve the multicast group passing the ACL.
Configure 10.110.0.6 as a static RP.
22-21
3Com Switch 8800 Command Reference Guide
[SW8800] multicast routing-enable
[SW8800] pim
[SW8800-pim] static-rp 10.110.0.6
Chapter 22 PIM Configuration Commands
22-22
3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands
Chapter 23 MSDP Configuration Commands
Note:
An Ethernet switch functions as a router when it supports the layer 3 protocols. A router that is referred to in the following represents a generalized router or a layer 3 Ethernet switch running related protocols.
23.1 MSDP Configuration Commands
23.1.1 cache-sa-enable
Syntax cache-sa-enable undo cache-sa-enable
View
MSDP view
Parameter
None
Description
Use the cache-sa-enable command to enable the router to cache SA state.
Use the undo cache-sa-enable command to remove the cache from the router.
By default, the router caches the SA state, i.e., (S, G) entry after it receives SA messages.
If the router is in cache state, it will not send SA request message to the specified
MSDP peer when it receives a new group join message.
Example
Configure the router to cache all the SA states.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] cache-sa-enable
23-1
3Com Switch 8800 Command Reference Guide
23.1.2 debugging msdp
Chapter 23 MSDP Configuration Commands
Syntax
debugging msdp { all | connect | event | packet | source-active }
undo debugging msdp { all | connect | event | packet | source-active }
View
User view
Parameter
all: All the debugging information of MSDP.
connect: Debugging information of MSDP peer connection reset.
event: Debugging information of MSDP event.
packet: Debugging information of MSDP packet.
source-active: Debugging information of active MSDP source.
Description
Use the debugging msdp command to enable MSDP debugging functions.
Use the undo debugging msdp command to disable MSDP debugging functions.
By default, MSDP debugging functions are disabled.
Example
Enable all common MSDP debugging functions.
<SW8800> debugging msdp all
23.1.3 display msdp brief
Syntax display msdp brief
View
Any view
Parameter
None
Description
Use the display msdp brief command to view the state of MSDP peer.
23-2
3Com Switch 8800 Command Reference Guide
Example
Chapter 23 MSDP Configuration Commands
Display the state of MSDP peer.
<SW8800> display msdp brief
MSDP Peer Brief Information
Peer's Address State Up/Down time AS SA Count Reset Count
20.20.20.20 Up 00:00:13 100 0 0
23.1.4 display msdp peer-status
Syntax
display msdp peer-status [ peer-address ]
View
Any view
Parameter
peer-address: Address of MSDP peer.
Description
Use the display msdp peer-status command to view the detailed information of
MSDP peer.
Related command: peer.
Example
Display the detailed information of the MSDP peer 10.110.11.11.
<SW8800> display msdp peer-status 10.110.11.11
MSDP Peer 20.20.20.20, AS 100
Description:
Information about connection status:
State: Up
Up/down time: 14:41:08
Resets: 0
Connection interface: LoopBack0 (20.20.20.30)
Number of sent/received messages: 867/947
Number of discarded output messages: 0
Elapsed time since last connection or counters clear: 14:42:40
Information about (Source, Group)-based SA filtering policy:
Import policy: none
Export policy: none
Information about SA-Requests:
Policy to accept SA-Request messages: none
23-3
3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands
Sending SA-Requests status: disable
Minimum TTL to forward SA with encapsulated data: 0
SAs learned from this peer: 0, SA-cache maximum for the peer: none
Input queue size: 0, Output queue size: 0
Counters for MSDP message:
Count of RPF check failure: 0
Incoming/outgoing SA messages: 0/0
Incoming/outgoing SA requests: 0/0
Incoming/outgoing SA responses: 0/0
Incoming/outgoing data packets: 0/0
23.1.5 display msdp sa-cache
Syntax
display msdp sa-cache [ group-address | source-address |
autonomous-system-number ]*
View
Any view
Parameter
group-address: Group address of (S, G) entry.
source-address: Source address of (S, G) entry. With no source address specified, all the source information of the specified group will be displayed.
If neither group address nor source address is determined, all SA caches will be displayed.
autonomous-system-number: Displays (S, G) entries from specified autonomous system.
Description
Use the display msdp sa-cache command to view (S, G) state learnt from MSDP peer.
Only cache-sa-enable command is configured, can cache state be displayed.
Example
Display the (S, G) state learned from MSDP peer.
<SW8800> display msdp sa-cache
MSDP Total Source-Active Cache - 5 entries
(Source, Group) Origin RP Pro AS Uptime Expires
(10.10.1.2, 225.1.1.1) 10.10.10.10 BGP 100 00:00:10 00:05:50
23-4
3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands
(10.10.1.3, 225.1.1.1) 10.10.10.10 BGP 100 00:00:11 00:05:49
(10.10.1.2, 225.1.1.2) 10.10.10.10 BGP 100 00:00:11 00:05:49
(10.10.2.1, 225.1.1.2) 10.10.10.10 BGP 100 00:00:11 00:05:49
(10.10.1.2, 225.1.2.2) 10.10.10.10 BGP 100 00:00:11 00:05:49
MSDP matched 5 entries
23.1.6 display msdp sa-count
Syntax
display msdp sa-count [ as-number ]
View
Any view
Parameter
as-number: Number of sources and groups from the specified autonomous system.
Description
Use the display msdp sa-count command to view the number of sources and groups in MSDP cache.
The cache-sa-enable command must be configured before the configuration of this command.
Example
view the number of sources and groups in MSDP cache.
<SW8800> display msdp sa-count
Number of cached Source-Active entries, counted by Peer
Peer's Address Number of SA
10.10.10.10 5
Number of source and group, counted by AS
AS Number of source Number of group
? 3 3
Total Source-Active entries: 5
23.1.7 import-source
Syntax
import-source [ acl acl-number ]
undo import-source
23-5
3Com Switch 8800 Command Reference Guide
View
MSDP view
Chapter 23 MSDP Configuration Commands
Parameter
Description
Use the import-source command to configure which (S, G) entries in the domain need to be advertised when a MSDP originates an SA message.
Use the undo import-source command to remove the configuration.
By default, all the (S, G) entries in the domain are advertised by the SA message.
Besides controlling SA messages creation, you can filter the forwarded SA messages by the commands peer sa-policy import and peer sa-policy export.
Example
acl-number: Number of basic or advanced IP ACL, ranging from 2000 to 3999, controlling which sources SA messages will advertise and to which groups it will be sent in the domain. Basic ACL performs filtering to source and advanced ACL performs filtering to source/group. If no ACL is specified, no multicast source will be advertised.
Configure which (S, G) entries from the multicast routing table will be advertised in SA messages originated by the MSDP peer.
<SW8800> system-view
[SW8800] acl number 3001
[SW8800-acl-adv-3001] rule permit ip source 10.10.0.0 0.0.255.255 destination
225.1.0.0 0.0.255.255
[SW8800-acl-adv-3001] quit
[SW8800] msdp
[SW8800-msdp] import-source acl 3001
23.1.8 msdp
Syntax msdp undo msdp
View
System view
Parameter
None
23-6
3Com Switch 8800 Command Reference Guide
Description
Chapter 23 MSDP Configuration Commands
Use the msdp command to enable MSDP and enter the MSDP view.
Use the undo msdp command to clear all configurations of MSDP, release all resources that MSDP occupies, and restore the initial state.
Related command: peer.
Example
Clear all configurations of MSDP.
<SW8800> system-view
[SW8800] undo msdp
23.1.9 msdp-tracert
Syntax
msdp-tracert source-address group-address rp-address [ max-hops max-hops |
next-hop-info | sa-info | peer-info | skip-hops skip-hops ]*
View
Any view
Parameter
source-address: Multicast source address.
group-address: Multicast group address.
rp-address: IP address of RP.
max-hops: The maximum number of hops that are traced, ranging from 1 to 255. By default, the value is 16.
next-hop-info: Flag bit for collecting the next hop information.
sa-info: Flag bit for collecting SA entity information.
peer-info: Flag bit for collecting MSDP peer information.
skip-hops: Number of hops that are skipped before collecting detailed information, ranging from 0 to 255. By default, the value is 0.
Description
Use the msdp-tracert command to trace the transmission path of SA messages in the network, which helps to locate the faults such as information loss and configuration error. After the transmission path of SA messages is determined, correct configuration can avoid the overflow of SA messages.
23-7
3Com Switch 8800 Command Reference Guide
Example
Chapter 23 MSDP Configuration Commands
Trace (10.10.1.1, 225.2.2.2, 20.20.20.20) path information.
<SW8800> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20
Specify the maximum number of hops that are traced and collect detailed information of
SA and MSDP peer.
<SW8800> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20 max-hops 10 sa-info peer-info
MSDP tracert: press CTRL_C to break
D-bit: set if have this (S,G) in cache but with a different RP
RP-bit: set if this router is an RP
NC-bit: set if this router is not caching SA's
C-bit: set if this (S,G,RP) tuple is in the cache
MSDP Traceroute path information:
Router Address: 20.20.1.1
Fixed-length response info:
Peer Uptime: 10 minutes, Cache Entry Uptime: 30 minutes
D-bit: 0, RP-bit: 1, NC-bit: 0, C-bit: 1
Return Code: Reached-max-hops
Next Hop info:
Next-Hop Router Address: 0.0.0.0
SA info:
Count of SA messages received for this (S,G,RP): 0
Count of encapsulated data packets received for this (S,G,RP):0
SA cache entry uptime: 00:30:00 , SA cache entry expiry time: 00:03:32
Peering info:
Peering Uptime: 10 minutes, Count of Peering Resets: 3
Table 23-1 Description of msdp-tracert command domain
Item
Router Address
Peer Uptime
Description
Address where the local router creates Peering session with
Peer-RPF neighbor.
Time for which the local router performs Peering session with
Peer-RPF neighbor in minute, with the maximum value of
255.
Uptime
D-bit: 1
RP-bit: 1 router, in minute, with the maximum value of 255.
(S, G, RP) entry existing in SA cache of the local router.
But the RP is different from the RP specified in the request message.
The local router is an RP, but it is not necessarily the source
RP in (S, G, RP) entry.
23-8
3Com Switch 8800 Command Reference Guide
Item
NC-bit: 0
C-bit: 1
Chapter 23 MSDP Configuration Commands
Description
The local router enables SA cache.
(S, G, RP) entry exists in SA cache of the local router.
Return reason is the reached maximum hops and other
Reached-max-hops
Hit-src-RP: The local hop router is the source RP in (S, G,
RP) entry.
Address: 0.0.0.0 address will be displayed.
Count of SA
Number of SA messages received for tracing this (S, G, RP) messages received entry. for this (S,G,RP)
Count of encapsulated data Number of encapsulated data packets received for tracing for this (S,G,RP)
SA cache entry
Present time of SA cache entry. uptime
SA cache entry expiry time
Expiry time of SA cache entry.
Peering Uptime: 10 minutes
Time for which the local router performs Peering session with
Peer-RPF neighbor.
Count of Peering
Number of Peering session resets.
Resets
23.1.10 originating-rp
Syntax
originating-rp interface-type interface-number
undo originating-rp
View
MSDP view
Parameter
interface-type: Interface type.
interface-number: Interface number.
Description
Use the originating-rp command to allow a MSDP to use the IP address of specified interface as the RP address when the SA message originated.
23-9
3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands
Use the undo originating-rp command to remove the configuration.
By default, the RP address in the SA message is the RP address configured by PIM.
Configure logical RP by using this command.
Example
Configure IP address of the interface Vlan-interface10 as the RP address in the SA message originated.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] originating-rp Vlan-interface 10
23.1.11 peer
Syntax
peer peer-address connect-interface interface-type interface-number
undo peer peer-address
View
MSDP view
Parameter
peer-address: Address of MSDP peer.
connect-interface interface-type interface-number: Interface type and number whose primary address is used by the local router as the source IP address to establish TCP connection with remote MSDP peers.
Description
Use the peer command to configure an MSDP peer.
Use the undo peer command to remove the MSDP peer configured.
If the local router is also in BGP peer relation with a MSDP peer, the MSDP peer and the BGP peer should use the same IP address.
Related command: static-rpf-peer.
Example
Configure the router using IP address 125.10.7.6 as an MSDP peer of the local router.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] peer 125.10.7.6 connect-interface Vlan-interface 10
23-10
3Com Switch 8800 Command Reference Guide
23.1.12 peer description
Chapter 23 MSDP Configuration Commands
Syntax
peer peer-address description text
undo peer peer-address description
View
MSDP view
Parameter
peer-address: Address of MSDP peer.
text: Descriptive text, being case sensitive. The maximum length is 80 characters.
Description
Use the peer description command to configure descriptive text to MSDP peer.
Use the undo peer description command to remove the descriptive text configured.
By default, an MSDP peer has no descriptive text.
Administrator can conveniently differentiate MSDP peers by configuring descriptive text.
Related command: display msdp peer-status.
Example
Add descriptive text CstmrA to router 125.10.7.6 to specify that the router is Client A.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] peer 125.10.7.6 description router CstmrA
23.1.13 peer mesh-group
Syntax
peer peer-address mesh-group name
undo peer peer-address mesh-group name
View
MSDP view
Parameter
name: Name of a Mesh Group, being case sensitive. The maximum length is 32 characters.
peer-address: Address of an MSDP peer to be a member of the Mesh Group.
23-11
3Com Switch 8800 Command Reference Guide
Description
Chapter 23 MSDP Configuration Commands
Use the peer mesh-group command to configure an MSDP peer to join an Mesh
Group.
Use the undo peer mesh-group command to remove the configuration.
By default, an MSDP peer is not a member of any Mesh Group.
Example
Configure the MSDP peer with address 125.10.7.6 to be a member of the Mesh Group
Grp1.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] peer 125.10.7.6 mesh-group Grp1
23.1.14 peer minimum-ttl
Syntax
peer peer-address minimum-ttl ttl
undo peer peer-address minimum-ttl
View
MSDP view
Parameter
Description
Use the peer minimum-ttl command to configure the minimum TTL (Time-to-Live) value of the multicast data packets encapsulated in SA messages to be sent to specified MSDP peer.
Use the undo peer minimum-ttl command to restore the default TTL threshold.
By default, the value of TTL threshold is 0.
Related command: peer.
Example
peer-address: Address of the MSDP peer to which the TTL limitation applies.
ttl: TTL threshold, ranging from 0 to 255.
Configure the TTL threshold value to 10, i.e., only those multicast data packets with a
TTL value greater than or equal to 10 can be forwarded to the MSDP peer 110.10.10.1.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] peer 110.10.10.1 minimum-ttl 10
23-12
3Com Switch 8800 Command Reference Guide
23.1.15 peer request-sa-enable
Chapter 23 MSDP Configuration Commands
Syntax
peer peer-address request-sa-enable
undo peer peer-address request-sa-enable
View
MSDP view
Parameter
peer-address: Address of MSDP peer.
Description
Use the peer request-sa-enable command to enable the router to send SA request message to the specified MSDP peer when receiving a new group join message.
Use the undo peer request-sa-enable command to remove the configuration.
By default, when receiving a new group join message, the router sends no SA request messages to MSDP peers but waits to receive the next SA message.
Related command: cache-sa-enable.
Example
Configure to send SA request message to the MSDP peer 125.10.7.6.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] peer 125.10.7.6 request-sa-enable
23.1.16 peer sa-cache-maximum
Syntax
peer peer-address sa-cache-maximum sa-limit
undo peer peer-address sa-cache-maximum
View
Parameter
MSDP view
peer-address: Address of MSDP peer.
sa-limit: Maximum value that the SA cache allows, ranging from 1 to 2048.
23-13
3Com Switch 8800 Command Reference Guide
Description
Chapter 23 MSDP Configuration Commands
Use the peer sa-cache-maximum command to limit the number of caches originated when the router receives SA messages from an MSDP peer.
Use the undo peer sa-cache-maximum command to restore the default configuration.
By default, the maximum number of SA caches is 2048.
This configuration is recommended for all MSDP peers in the networks possibly attacked by DoS.
Related command: display msdp, sa-count, display msdp peer-status and display
msdp brief.
Example
Limit the number of caches originated to 100 when the router receives SA messages from the MSDP peer 125.10.7.6.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] peer 125.10.7.6 sa-cache-maximum 100
23.1.17 peer sa-policy
Syntax
peer peer-address sa-policy { import | export } [ acl acl-number ]
undo peer peer-address sa-policy { import | export }
View
MSDP view
Parameter
import: Receives SA messages from the specified MSDP peer.
export: Forwards SA messages from the specified MSDP peer.
peer-address: Address of the MSDP peer whose SA messages need to be filtered.
acl acl-number: Number of advanced IP ACL, ranging from 3000 to 3999. If no ACL is specified, all (S, G) entries are filtered.
Description
Use the peer sa-policy command to configure a filter list for SA messages received or forwarded from the specified MSDP peer.
Use the undo peer sa-policy command to remove the configuration.
23-14
3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands
By default, messages received or forwarded will not be filtered. All SA messages are received or forwarded from an MSDP peer.
Related command: peer.
Example
Forward only those SA messages that passed the advanced IP ACL.
<SW8800> system-view
[SW8800] acl number 3000
[SW8800-acl-adv-3000] rule permit ip source 170.15.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255
[SW8800-acl-adv-3000] quit
[SW8800] msdp
[SW8800-msdp] peer 125.10.7.6 connect-interface Vlan-interface 10
[SW8800-msdp] peer 125.10.7.6 sa-policy export acl 3000
23.1.18 peer sa-request-policy
Syntax
peer peer-address sa-request-policy [ acl acl-number ]
undo peer peer-address sa-request-policy
View
MSDP view
Parameter
peer-address: Address from which the local router receives SA request messages sent by the specified MSDP peer.
acl acl-number: Number of basic IP ACL, describing multicast group address, ranging from 2000 to 2999. If no ACL is specified, all SA request messages will be ignored.
Description
Use the peer sa-request-policy command to limit SA request messages that the router receives from MSDP peers.
Use the undo peer sa-request-policy command to remove the limitation.
By default, the router receives all SA request messages from the MSDP peer.
If no ACL is specified, all SA requests will be ignored. If ACL is specified, only those SA request messages from the groups permitted by the ACL will be processed and all the others will be ignored.
Related command: peer.
23-15
3Com Switch 8800 Command Reference Guide
Example
Chapter 23 MSDP Configuration Commands
Configure the ACL for filtering SA request messages from the MSDP peer 175.58.6.5.
The SA request messages from group address range 225.1.1.0/8 will be received and all the others will be ignored.
<SW8800> system-view
[SW8800] acl number 2000
[SW8800-acl-basic-2000] rule permit source 225.1.1.0 0.0.0.255
[SW8800-acl-basic-2000] quit
[SW8800] msdp
[SW8800-msdp] peer 175.58.6.5 sa-request-policy acl 2000
23.1.19 reset msdp peer
Syntax
reset msdp peer peer-address
View
User view
Parameter
peer-address: Address of MSDP peer.
Description
Use the reset msdp peer command to reset TCP connection with the specified MSDP peer, and clear all the statistics of the specified MSDP peer.
Related command: peer.
Example
Clear TCP connection and statistics of the MSDP peer 125.10.7.6.
<SW8800> reset msdp peer 125.10.7.6
23.1.20 reset msdp sa-cache
Syntax
reset msdp sa-cache [ group-address ]
View
User view
23-16
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 23 MSDP Configuration Commands
group-address: Address of the group, (S, G) entries matching this address are cleared from the SA cache. If no multicast group address is specified, all SA cache entries will be cleared.
Description
Use the reset msdp sa-cache command to clear SMDP SA cache entries.
Related command: cache-sa-enable and display msdp sa-cache.
Example
Clear the cache entries with group address 225.5.4.3 from the SA cache.
<SW8800> reset msdp sa-cache 225.5.4.3
23.1.21 reset msdp statistics
Syntax
reset msdp statistics [ peer-address ]
View
User view
Parameter
Description
Use the reset msdp statistics command to clear statistics of one or more MSDP peers without resetting the MSDP peer.
Example
peer-address: Address of the MSDP peer whose statistics, resetting information and input/output information will be cleared. If no MSDP peer address is specified, all
MSDP peers statistics will be cleared.
Clear the statistics of the MSDP peer 25.10.7.6.
<SW8800> reset msdp statistics 125.10.7.6
23.1.22 shutdown
Syntax
shutdown peer-address
undo shutdown peer-address
23-17
3Com Switch 8800 Command Reference Guide
View
MSDP view
Chapter 23 MSDP Configuration Commands
Parameter
peer-address: IP address of MSDP peer.
Description
Use the shutdown command to disable the MSDP peer specified.
Use the undo shutdown command to remove the configuration.
By default, no MSDP peer is disabled.
Related command: peer.
Example
Disable the MSDP peer 125.10.7.6.
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] shutdown 125.10.7.6
23.1.23 static-rpf-peer
Syntax
static-rpf-peer peer-address [ rp-policy ip-prefix-name ]
undo static-rpf-peer peer-address
View
MSDP view
Parameter
peer-address: Address of the static RPF peer to receive SA messages.
rp-policy ip-prefix-name: Filter policy based on RP address, which filters the RP in SA messages. If the parameter is not specified, all SA messages from static RPF peer will be accepted. If the parameter rp-policy ip-prefix-name is specified and filter policy is configured, the router will only accept SA messages from the RP which passes filtering.
If no filter policy is configured, the router will still accept all SA messages from the static
RPF peer.
Description
Use the static-rpf-peer command to configure static RPF peer.
Use the undo static-rpf-peer command to remove the static RPF peer.
By default, no static RPF peer is configured.
23-18
3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands
You must configure the peer command before using the static-rpf-peer command.
If you do not want to perform RPF check to SA messages from a same MSDP peer or if only an MSDP peer is configured on a router, this MSDP peer will be regarded as static
RPF peer.
Related command: peer and ip prefix-list.
Example
Configure two static RPF peers.
<SW8800> system-view
[SW8800] ip ip-prefix list1 permit 130.10.2.3 32
[SW8800] ip ip-prefix list2 permit 130.10.2.4 32
[SW8800] msdp
[SW8800-msdp] peer 130.10.7.6 connect-interface Vlan-interface 10
[SW8800-msdp] peer 130.10.7.5 connect-interface Vlan-interface 10
[SW8800-msdp] static-rpf-peer 130.10.7.6 rp-policy list1
[SW8800-msdp] static-rpf-peer 130.10.7.5 rp-policy list2
In the above commands, 130.10.2.3 is the IP address of the RP for 130.10.7.5 and
130.10.2.4 is the IP address of the RP of 130.10.7.6.
23.1.24 timer retry
Syntax
timer retry seconds
undo timer retry
View
MSDP view
Parameter
seconds: Value of connection request retry period in second, ranging from 1 to 60.
Description
Use the timer retry command to configure the value of connection request re-try period.
Use the undo timer retry command to restore the default value.
By default, the value of connection request re-try period is 30 seconds.
Related command: peer.
Example
Configure the connection request re-try period to 60 seconds.
23-19
3Com Switch 8800 Command Reference Guide
<SW8800> system-view
[SW8800] msdp
[SW8800-msdp] timer retry 60
Chapter 23 MSDP Configuration Commands
23-20
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands
Chapter 24 MBGP Multicast Extension
Configuration Commands
24.1 MBGP Multicast Extension Configuration Commands
24.1.1 aggregate
Syntax
aggregate address mask [ as-set | attribute-policy route-policy-name |
detail-suppressed | origin-policy route-policy-name | suppress-policy
route-policy-name ]*
undo aggregate address mask [ as-set | attribute-policy route-policy-name |
detail-suppressed | origin-policy route-policy-name | suppress-policy
route-policy-name ]*
View
IPv4 multicast sub-address family view
Parameter
address: Address of the aggregated route.
mask: Network mask of the aggregated route.
as-set: Generates a route with AS_SET segment. This parameter is not recommended when aggregating many AS paths.
attribute-policy route-policy-name: Sets aggregate attribute.
detail-suppressed: Advertises the aggregated routes rather than the specific routes.
origin-policy route-policy-name: Filters the originate routes of the aggregate.
suppress-policy route-policy-name: Does not advertise the specific routes selected.
Description
Use the aggregate command to create a multicast aggregated record in the BGP routing table.
Use the undo aggregate command to disable this function.
By default, no route is aggregated.
Use the aggregate command without parameters to create one local aggregated route and set atomic aggregation attributes.
24-1
3Com Switch 8800 Command Reference Guide
Example
Chapter 24 MBGP Multicast Extension Configuration C ommands
Create an aggregation entry in the MBGP routing table, with aggregated route address as 192.213.0.0.
[SW8800-bgp-af-mul] aggregate 192.213.0.0 255.255.0.0
24.1.2 compare-different-as-med
Syntax compare-different-as-med undo compare-different-as-med
View
IPv4 multicast sub-address family view
Parameter
None
Description
Use the compare-different-as-med command to enable to compare the route MED values of neighbors from different ASs.
Use the undo compare-different-as-med command to disable this function.
By default, the comparison function is disabled.
If there are multiple routes available to the same destination address, you can select the route with the smallest MED value.
This command is not recommended unless you make sure that different ASs use the same IGP and route selection modes.
Example
Enable to compare the route MED values of neighbors from different ASs.
[SW8800-bgp-af-mul] compare-different-as-med
24.1.3 debugging bgp mp-update
Syntax
debugging bgp mp-update [ receive | send ] [ verbose ]
undo debugging bgp mp-update
View
User view
24-2
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 24 MBGP Multicast Extension Configuration C ommands
receive: Debugs the MBGP Update messages received.
send: Debugs the MBGP Update messages sent.
verbose: Debugs detailed information.
Description
Use the debugging bgp mp-update command to enable to debug MBGP Update messages.
Use the undo debugging bgp mp-update command to disable the debugging.
By default, the debugging function is disabled.
Example
Enable MBGP Update message debugging.
<SW8800> debugging bgp mp-update
24.1.4 default local-preference
Syntax
default local-preference value
undo default local-preference
View
IPv4 multicast sub-address family view
Parameter
Description
Use the default local-preference command to configure the default local precedence.
Use the undo default local-preference command to restore the default value.
You can affect BGP route selection by configuring different local precedence values.
Example
value: Configures default local precedence, in the range of 0 to 4294967295. By default, it is 100. The greatest value corresponds to the highest precedence level.
Configure the default local precedence value as 180.
[SW8800-bgp-af-mul] default local-preference 180
24-3
3Com Switch 8800 Command Reference Guide
24.1.5 default med
Chapter 24 MBGP Multicast Extension Configuration C ommands
Syntax
default med med-value
undo default med
View
IPv4 multicast sub-address family view
Parameter
med-value: Specifies MED value, in the range of 0 to 4294967295. By default, it is 0.
Description
Use the default med command to configure system MED value.
Use the display bgp multicast group command to restore the default value.
Multi-exit discriminator (MED) attribute is the external metric for a route. Unlike local precedence attribute, MED is exchanged, between ASs, and one it enters an AS, it does not leave the AS. MED attribute is used in best route selection. When a router running BGP travels through different external peers and get the routes with identical destination, but different next-hop addresses, it selects these routes according to their
MED values. The route with smaller MED value will be selected as the external AS route if other attributes are the same.
Example
Configure system MED value as 25.
[SW8800-bgp-af-mul] default med 25
24.1.6 display bgp multicast group
Syntax
display bgp multicast group [ group-name ]
View
Any view
Parameter
group-name: Specified peer group. If no peer group is specified, the information about all peer groups will be displayed.
24-4
3Com Switch 8800 Command Reference Guide
Description
Chapter 24 MBGP Multicast Extension Configuration C ommands
Use the display bgp multicast group command to view the information about peer groups.
Example
View the information about the peer group named my_peer.
<SW8800> display bgp multicast group my_peer
24.1.7 display bgp multicast network
Syntax display bgp multicast network
View
Any view
Parameter
None
Description
Use the display bgp multicast network command to view the routing information that
MBGP advertises.
Example
View the network segment routing information MBGP advertises.
<SW8800> display bgp multicast network
24.1.8 display bgp multicast peer
Syntax
display bgp multicast peer [ peer-address ] [ verbose ]
View
Any view
Parameter
peer-address: Peer address, in dotted decimal format.
verbose: Displays detailed information.
Description
Use the display bgp multicast peer command to view the MBGP peer information.
24-5
3Com Switch 8800 Command Reference Guide
Example
Chapter 24 MBGP Multicast Extension Configuration C ommands
View the MBGP peer detailed information.
<SW8800> display bgp multicast peer verbose
24.1.9 display bgp multicast routing-table
Syntax
display bgp multicast routing-table [ ip-address [ mask ] ]
View
Any view
Parameter
ip-address: Displays the MBGP routing information with specified IP address.
Description
Use the display bgp multicast routing-table command to view MBGP routing information.
Example
Display MBGP routing information of network segment 14.1.0.0.
<SW8800> display bgp multicast routing-table 14.1.0.0
24.1.10 display bgp multicast routing-table as-path-acl
Syntax
display bgp multicast routing-table as-path-acl acl-number
View
Any view
Parameter
acl-number: Specifies matched AS path list number ranging from 1 to 199.
Description
Use the display bgp multicast routing-table as-path-acl command to view routes that match an as-path acl.
Example
Display routes that match the as-path-acl 2.
<SW8800> display bgp multicast routing-table as-path-acl 2
24-6
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands
24.1.11 display bgp multicast routing-table cidr
Syntax display bgp multicast routing-table cidr
View
Any view
Parameter
None
Description
Use the display bgp multicast routing-table cidr command to view the mask of non-natural network mask (that is, classless inter-domain routing, CIDR).
Example
View CIDR routing information.
<SW8800> display bgp multicast routing-table cidr
24.1.12 display bgp multicast routing-table community
Syntax
display bgp multicast routing-table community [ aa:nn | no-export-subconfed |
no-advertise | no-export ]* [ whole-match ]
View
Any view
Parameter
aa:nn: Specified community number.
no-export-subconfed: Does not send matched routes outside the local autonomous system.
no-advertise: Does not advertise matched routes to any peer.
no-export: Does not advertise routes outside the local autonomous system but advertise routes to other sub-autonomous systems.
whole-match: Exact match.
Description
Use the display bgp multicast routing-table community command to view routing information of a specified MBGP community.
24-7
3Com Switch 8800 Command Reference Guide
Example
Chapter 24 MBGP Multicast Extension Configuration C ommands
Display routing information of the specified MBGP community
<SW8800> display bgp multicast routing-table community 600:1
24.1.13 display bgp multicast routing-table community-list
Syntax
display bgp multicast routing-table community-list community-list-number
[ whole-match ]
View
Any view
Parameter
Description
Use the display bgp multicast routing-table community-list command to view the routing information of a specified MBGP community list.
Example
community-list-number: Number of the specified community list.
exact-match: Exact match.
Display routing information of the specified MBGP community list.
<SW8800> display bgp multicast routing-table community-list 1
24.1.14 display bgp multicast routing-table different-origin-as
Syntax display bgp multicast routing-table different-origin-as
View
Any view
Parameter
None
Description
Use the display bgp multicast routing-table different-origin-as command to view
AS routes of different origins.
24-8
3Com Switch 8800 Command Reference Guide
Example
Chapter 24 MBGP Multicast Extension Configuration C ommands
Display AS routes of different origins.
<SW8800> display bgp multicast routing-table different-origin-as
24.1.15 display bgp multicast routing-table peer
Syntax
display bgp multicast routing-table peer peer-address { received | advertised }
[ network-address [ mask ] | statistic ]
View
Any view
Parameter
peer-address: Specified peer address, in dotted decimal format.
received: Routing information received from a specified peer.
advertised: Routing information advertised from a specified peer.
network-address: IP address of the destination network.
mask: Mask of the destination network.
statistic: Displays statistic information of the route.
Description
Use the display bgp multicast routing-table peer command to view the routes received/advertised at/to the specified peer.
Example
Display routing information advertised to the peer 10.10.1.11.
<SW8800> display bgp multicast routing-table peer 10.10.1.11 advertised
24.1.16 display bgp multicast routing-table regular-expression
Syntax
display bgp multicast routing-table regular-expression as-regular-expression
View
Parameter
Any view
as-regular-expression: AS regular expression matched.
24-9
3Com Switch 8800 Command Reference Guide
Description
Chapter 24 MBGP Multicast Extension Configuration C ommands
Use the display bgp multicast routing-table regular-expression command to view the routing information matching the specified AS regular expression.
Example
Display routing information matching AS regular expression ^600$.
<SW8800> display bgp multicast routing-table regular-expression ^600$
24.1.17 filter-policy export
Syntax
View
IPv4 multicast sub-address family view
Parameter
acl-number: Specifies the ACL used in matching the destination address domain of routing information, in the range of 2000 to 3999.
ip-prefix-name: Specifies the IP prefix used in matching the destination address domain of routing information, in the range of 1 to 19.
Protocol: Specifies which kind of routing information shall be filtered out, with options currently available include direct, ospf, ospf-ase, ospf-nssa, rip, is-is and static.
Description
Use the filter-policy export command to set to filter the advertised routes. Only those pass through the filter can be advertised by BGP.
Use the undo filter-policy export command to cancel route filtering.
By default, filtering the advertised routes is not enabled.
The command affects route advertising by BGP. If you specify the protocol parameter, the router only filters the routes with the specified protocol imported, without influence on the routes importing other protocols. Otherwise, the router filters the routes importing any protocols.
Example
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
Filter all BGP-advertised routes using ACL 2000.
[SW8800-bgp-af-mul] filter-policy 2000 export
24-10
3Com Switch 8800 Command Reference Guide
24.1.18 filter-policy import
Chapter 24 MBGP Multicast Extension Configuration C ommands
Syntax
filter-policy gateway ip-prefix-name import
undo filter-policy gateway ip-prefix-name import
filter-policy { acl-number | ip-prefix ip-prefix-name } import
undo filter-policy { acl-number | ip-prefix ip-prefix-name } import
View
IPv4 multicast sub-address family view
Parameter
Description
Use the filter-policy gateway import command to set to filter the routes advertised by a specified neighbor router. Only those pass through the filter can be advertised by
BGP.
Use the undo filter-policy gateway import command to cancel route filtering.
Use the filter-policy import command to set to filter the global routes received.
Use the undo filter-policy import command to cancel route filtering.
By default, filtering the received routes is not enabled.
This configuration determines whether to add the routes into the BGP routing table.
Example
acl-number: Specifies the ACL used in matching the destination address domain of routing information, in the range of 2000 to 3999.
ip-prefix ip-prefix-name: Specifies the IP prefix used in matching the destination address domain of routing information, in the range of 1 to 19.
gateway ip-prefix-name: IP prefix of the neighbor router, in the range of 1 to 19, to filter the routing information advertised by a specified neighbor router.
Filter all BGP-received routes using ACL 2000.
[SW8800-bgp-af-mul] filter-policy 2000 import
24.1.19 import-route
Syntax
import-route protocol [ route-policy route-policy-name | med med-value ]*
undo import-route protocol
24-11
3Com Switch 8800 Command Reference Guide
View
Chapter 24 MBGP Multicast Extension Configuration C ommands
IPv4 multicast sub-address family view
Parameter
protocol: Specifies the source routing protocols that can be imported, which can be direct, ospf, ospf-ase, ospf-nssa, rip, isis and static.
med-value: Specifies the metric value loaded by an imported route, ranging from 0 to
4,294,967,295.
route-policy-name: Specifies the route policy used for importing routes.
Description
Use the import-route command to import routing information of other protocols into
MBGP.
Use the undo import-route command to cancel the importing.
By default, MBGP will not import routing information of other protocols.
Example
Import static routes.
[SW8800-bgp-af-mul] import-route static
24.1.20 ipv4-family multicast
Syntax ipv4-family multicast undo ipv4-family multicast
View
BGP view, VPN instance sub-address family view, VPNv4 sub-address family view
Parameter
None
Description
Use the ipv4-family multicast command to enter the IPv4 multicast sub-address family view.
Use the undo ipv4-family multicast command to exit the IPv4 multicast sub-address family view, return to the unicast view and remove all the information in multicast.
Example
Enter the IPv4 multicast sub-address family view.
24-12
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C
<SW8800> system-view
[SW8800] bgp 100
[SW8800-bgp] ipv4-family multicast
[SW8800-bgp-af-mul] ommands
24.1.21 network
Syntax
network ip-address [ address-mask ] [ route-policy route-policy-name ]
undo network ip-address [ address-mask ] [ route-policy route-policy-name ]
View
IPv4 multicast sub-address family view
Parameter
ip-address: Network address that BGP advertises.
address-mask: Mask of the network address.
route-policy policy-name: Route-policy applied to the routes advertised.
Description
Use the network command to configure the network addresses to be sent by the local
MBGP.
Use the undo network command to remove the configuration.
By default, the local MBGP does not send any route.
Example
Advertise routes to network segment 10.0.0.0/16.
[SW8800-bgp-af-mul] network 10.0.0.1 255.255.0.0
24.1.22 peer advertise-community
Syntax
peer group-name advertise-community
undo peer group-name advertise-community
View
IPv4 multicast sub-address family view
Parameter
group-name: Name of the peer group.
24-13
3Com Switch 8800 Command Reference Guide
Description
Chapter 24 MBGP Multicast Extension Configuration C ommands
Use the peer advertise-community command to set to send community attributes to a peer group.
Use the undo peer advertise-community command to remove the configuration.
By default, no community attribute is sent to any peer group.
Example
Set to send community attributes to peer group “test”.
[SW8800-bgp-af-mul] peer test advertise-community
24.1.23 peer allow-as-loop
Syntax
peer { group-name | peer-address } allow-as-loop [ number ]
undo peer { group-name | peer-address } allow-as-loop
View
IPv4 multicast sub-address family view
Parameter
Description
Use the peer allow-as-loop command to specify repetition number of local AS IDs.
Use the undo peer allow-as-loop command to remove the configuration.
Related command: display current-configuration, display bgp routing-table peer and display bgp routing-table group.
Example
group-name: Name of the peer group.
peer-address: IP address of the peer.
number: Repetition number of local AS IDs, in the range of 1 to 10. By default ,the repetition number is 3.
Configure repetition number of local AS IDs as 2.
[SW8800-bgp-af-mul] peer 1.1.1.1 allow-as-loop 2
24.1.24 peer as-path-acl export
Syntax
peer group-name as-path-acl acl-number export
24-14
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands
undo peer group-name as-path-acl acl-number export
View
IPv4 multicast sub-address family view
Parameter
Description
Use the peer as-path-acl export command to configure filtering Policy of MBGP advertised routes based on AS path list.
Use the undo peer as-path-acl command to cancel the existing configuration.
By default, the peer group has no AS path list.
This command can only be configured on peer group.
Related command: peer as-path-acl import, ip as-path-acl (refer to the Routing
Protocol part).
Example
group-name: Specifies name of the peer group.
acl-number: Specifies the filter list number of an AS regular expression. The range is 1 to 199.
export: Uses the AS path list to filter the advertised routes.
Configure the peer group test to use AS path list 2 to filter the advertised routes.
[SW8800-bgp-af-mul] peer test as-path-acl 2 export
24.1.25 peer as-path-acl import
Syntax
peer { group-name | peer-address } as-path-acl acl-number import
undo peer { group-name | peer-address } as-path-acl acl-number import
View
Parameter
IPv4 multicast sub-address family view
group-name: Specifies name of the peer group.
peer-address: Specifies IP address of the peer.
acl-number: Specifies the filter list number of an AS regular expression. The range is 1 to 199.
import: Uses the AS path list to filter the received routes.
24-15
3Com Switch 8800 Command Reference Guide
Description
Chapter 24 MBGP Multicast Extension Configuration C ommands
Use the peer as-path-acl import command to configure filtering Policy of MBGP received routes based on AS path list.
Use the undo peer as-path-acl import command to cancel the existing configuration.
By default, the peer/peer group has no AS path list.
The inbound filter policy configured for the peer takes precedence over the configurations for the peer group.
Related command: peer as-path-acl export, ip as-path-acl (refer to the Routing
Protocol part).
Example
Set the AS path ACL of the peer group test to filter BGP received routes.
[SW8800-bgp-af-mul] peer test as-path-acl 3 import
24.1.26 peer enable
Syntax
peer group-name enable
undo peer group-name enable
View
IPv4 multicast sub-address family view
Parameter
group-name: Name of the multicast peer group.
Description
Use the peer enable command to enable the MBGP peer group.
Use the undo peer enable command to disable the MBGP peer group.
By default, the MBGP peer group is disabled.
Only after the peer group is enabled, can the router establishes connection with the multicast peer.
Example
Enable peer group group1.
[SW8800-bgp-af-mul] peer group1 enable
24-16
3Com Switch 8800 Command Reference Guide
24.1.27 peer filter-policy export
Chapter 24 MBGP Multicast Extension Configuration C ommands
Syntax
peer group-name filter-policy acl-number export
undo peer group-name filter-policy acl-number export
View
IPv4 multicast sub-address family view
Parameter
Description
Use the peer filter-policy export command to configure the peer group to apply the
ACL-based filter policy to the advertised routes. Use the undo peer filter-policy
export command to cancel the existing configuration.
By default, no ACL-based filter policy is configured.
The peer filter-policy export command can only be configured on peer groups.
Related command: peer filter-policy import, acl .
Example
group-name: Specifies the name of the peer group.
acl-number: Specifies an IP acl number, ranging from 2000 to 3999. That is, you can use basic ACLs or advanced ACLs.
export: Applies the filter policy to the advertised routes. This keyword is only valid for the peer groups.
Configure the peer group test to use ACL 2000 to filter the advertised routes.
[SW8800-bgp-af-mul] peer test filter-policy 2000 export
24.1.28 peer filter-policy import
Syntax
peer { group-name | peer-address } filter-policy acl-number import
undo peer { group-name | peer-address } filter-policy acl-number import
View
IPv4 multicast sub-address family view
Parameter
group-name: Specifies the name of the peer group.
peer-address: Specifies the IP address of the peer.
24-17
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands
acl-number: Specifies an IP acl number, ranging from 2000 to 3999. That is, you can use basic ACLs or advanced ACLs.
Description
Use the peer filter-policy import command to configure the peer to apply the
ACL-based filter policy to the received routes. Use the undo peer filter-policy import command to cancel the existing configuration.
By default, no ACL-based filter policy is configured.
Related command: peer filter-policy export, acl.
The inbound filter policy configured for the peer takes precedence over the configurations for the peer group.
Example
Configure the peer group test to use ACL 2000 to filter the received routes.
[SW8800-bgp-af-mul] peer test filter-policy 2000 import
24.1.29 peer group
Syntax
peer peer-address group group-name
undo peer peer-address
View
IPv4 multicast sub-address family view
Parameter
Description
Use the peer group command to add a peer into a peer group.
Use the undo peer group command to delete the peer.
Note that you must first add in BGP view the specific peer in the peer group and enable the peer group in IPv4 multicast sub-address family view, before using this command.
Example
peer-address: IP address of the peer, in dotted decimal format.
group-name: Name of the peer, consisting of one to 47 alphanumeric characters.
Add peer 10.1.1.1 to EBGP peer group TEST.
[SW8800-bgp] group TEST
[SW8800-bgp] peer TEST as-number 2004
[SW8800-bgp] peer 10.1.1.1 group TEST
24-18
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C
[SW8800-bgp] ipv4-family multicast
[SW8800-bgp-af-mul] peer TEST enable
[SW8800-bgp-af-mul] peer 10.1.1.1 group TEST ommands
24.1.30 peer ip-prefix export
Syntax
peer group-name ip-prefix prefixname export
undo peer group-name ip-prefix prefixname export
View
IPv4 multicast sub-address family view
Parameter
group-name: Name of peer group.
prefixname: Name of the specified ip-prefix.
Description
Use the peer ip-prefix export command to configure the route filtering policy of routes advertised by the peer group based on the ip-prefix.
Use the undo peer ip-prefix export command to cancel the route filtering policy of the peer/peer group based on the ip-prefix.
By default, the route filtering policy of the peer group is not specified.
The peer ip-prefix export command can only be configured on the peer groups.
Related command: ip ip-prefix, peer ip-prefix import.
Example
Configure the route filtering policy of the peer group1 based on the ip-prefix list1.
[SW8800-bgp-af-mul] peer group1 ip-prefix list1 export
24.1.31 peer ip-prefix import
Syntax
peer { group-name | peer-address } ip-prefix prefixname import
undo peer { group-name | peer-address } ip-prefix prefixname import
View
IPv4 multicast sub-address family view
24-19
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 24 MBGP Multicast Extension Configuration C ommands
group-name: Name of peer group.
peer-address: IP address of the peer, in dotted decimal format.
prefixname: Name of the specified ip-prefix, a character string of 1 to 19 characters.
Description
Use the peer ip-prefix import command to configure the route filtering policy of routes received by the peer based on the ip-prefix.
Use the undo peer ip-prefix import command to cancel the route filtering policy of the peer based on the ip-prefix.
By default, the route filtering policy of the peer is not specified.
The inbound route policy configured for the peer takes precedence over the configurations for the peer group.
Related command: peer ip-prefix export.
Example
Configure the route filtering policy of the peer group1 based on the ip-prefix list1.
[SW8800-bgp-af-mul] peer group1 ip-prefix list1 import
24.1.32 peer next-hop-local
Syntax
peer group-name next-hop-local
undo peer group-name next-hop-local
View
IPv4 multicast sub-address family view
Parameter
group-name: Name of the peer group.
Description
Use the peer next-hop-local command to remove the processing of the next hop in routes which BGP will advertise to the peer group and set the local address as the next hop.
Use the undo peer next-hop-local command to remove the configuration.
Example
Set the local address as next-hop when advertising routes to peer group named test.
24-20
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C
[SW8800-bgp-af-mul] peer test next-hop-local ommands
24.1.33 peer public-as-only
Syntax
peer group-name public-as-only
undo peer group-name public-as-only
View
IPv4 multicast sub-address family view
Parameter
group-name: Name of the peer group.
Description
Use the peer public-as-only command to set to contain only public AS IDs in the
MBGP Update message, but not private AS IDs.
Use the undo peer public-as-only command to restore the default setting, the router contains only private AS IDs in the MBGP Update message.
By default, the private AS ID is carried when BGP sends MBGP Update message.
Generally, MBGP sends MBGP Update message with the AS ID (which can be either the public AS number or private AS number) contained. To enable some egress routers to ignore the private AS ID when sending MBGP Update message, you can configure not to carry the private AS IDs when sending MBGP Update message.
Example
Set not to carry private AS IDs when sending MBGP Update message to peer group
"test”.
[SW8800-bgp-af-mul] peer test public-as-only
24.1.34 peer reflect-client
Syntax
peer group-name reflect-client
undo peer group-name reflect-client
View
IPv4 multicast sub-address family view
Parameter
group-name: Name of the peer group.
24-21
3Com Switch 8800 Command Reference Guide
Description
Chapter 24 MBGP Multicast Extension Configuration C ommands
Use the peer reflect-client command to configure a peer (group) as a client of the route reflector.
Use the undo peer reflect-client command to remove the configuration.
By default, there is no route reflector in the autonomous system.
Example
Configure peer group “test” as the client of the route reflector.
[SW8800-bgp-af-mul] peer test reflect-client
24.1.35 peer route-policy export
Syntax
peer group-name route-policy policy-name export
undo peer group-name route-policy policy-name export
View
IPv4 multicast sub-address family view
Parameter
group-name: Name of peer group.
peer-address: IP address of the peer.
Description
Use the peer route-policy export command to assign the Route-policy to the routes advertised to the peer group.
Use the undo peer route-policy export command to delete the specified
Route-policy.
By default, the peer/peer group has no Route-policy association.
Related command: peer route-policy import.
Example
Apply the Route-policy named test-policy to the route coming from the peer group test.
[SW8800-bgp-af-mul] peer test route-policy test-policy export
24.1.36 peer route-policy import
Syntax
peer { group-name | peer-address } route-policy policy-name import
24-22
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands
undo peer { group-name | peer-address } route-policy policy-name import
View
IPv4 multicast sub-address family view
Parameter
group-name: Name of peer group.
peer-address: IP address of the peer.
policy-name: Name of the applied route policy.
Description
Use the peer route-policy import command to assign the Route-policy to the route coming from the peer..
Use the undo peer route-policy import command to delete the specified
Route-policy.
By default, the peer has no Route-policy association.
The inbound route policy configured for the peer takes precedence over the configurations for the peer group.
Related command: peer route-policy export.
Example
Apply the Route-policy named test-policy to the route coming from the peer group test.
[SW8800-bgp-af-mul] peer test route-policy test-policy import
24.1.37 preference
Syntax
preference ebgp-value ibgp-value local-vlaue
undo preference
View
IPv4 multicast sub-address family view
Parameter
ebgp-value: EBGP route priority, in the range of 1 to 256. By default, it is 256.
ibgp-value: IBGP route priority, in the range of 1 to 256. By default, it is 256.
local-value: Local route priority, in the range of 1 to 256. By default, it is 130.
Description
Use the preference command to configure MBGP protocol priority.
24-23
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands
Use the undo preference command to restore the default priority.
You can configure different priority values for different types of MBGP routes.
Example
Set the priority of EBGP, IBGP and local routes all as 170.
[SW8800-bgp-af-mul] preference 170 170 170
24.1.38 reflect between-clients
Syntax reflect between-clients undo reflect between-clients
View
IPv4 multicast sub-address family view
Parameter
None
Description
Use the reflect between-clients command to enable route reflection between clients.
Use the undo reflect between-clients command to disable route reflection between clients.
When configured, the route reflector can reflect routes of a client to other clients.
By default, all-connection is not required for the clients with route reflectors configured, since the routes are by default reflected from one client to others. For all-connection clients, route reflection is unnecessary.
Related command: reflector cluster-id and peer reflect-client.
Example
Disable route reflection function.
[SW8800-bgp-af-mul] undo reflect between-clients
24.1.39 refresh bgp multicast
Syntax
refresh bgp { all | peer-address | group group-name } multicast { import | export }
View
User view
24-24
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 24 MBGP Multicast Extension Configuration C ommands
all: Refreshes multicast sub-address family router of all peer .
peer-address: Refreshes multicast sub-address family router of all specified address peer .
group-name: Refreshes multicast sub-address family router of all member of specified peer .
import: Sends ROUTE-REFRESH packets, request the peer to send all multicast sub-address family router again .
export: Sends all multicast sub-address family router again .
Description
Use the refresh bgp multicast command to request the peer to send multicast sub-address family router again, or send multicast sub-address family router again.
Example
Request all the peers to send multicast sub-address family router again.
<SW8800> refresh bgp all multicast import
24.1.40 reflector cluster-id
Syntax
reflector cluster-id { cluster-id | address }
undo reflector cluster-id
View
IPv4 multicast sub-address family view
Parameter
cluster-id: Route reflector cluster ID, in integer number or IP address format, range 1 to
4294967295.
address: Route reflector cluster ID in IP address format.
Description
Use the reflector cluster-id command to configure route reflector cluster ID.
Use the undo reflector cluster-id command to delete route reflector cluster ID.
By default, each route reflector uses its own route ID as cluster ID.
In general, one cluster has only one route reflector, and then the router ID for the route reflector can be used to identify the cluster. If a cluster has several route reflectors, for
24-25
3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands multiple route reflectors can improve network stability, then you can use this command to specify the same cluster ID for them all.
Related command: reflect between-clients and peer reflect-client.
Example
Specify cluster ID for local router, one of the router reflectors.
[SW8800-bgp-af-mul] reflector cluster-id 80
[SW8800-bgp-af-mul] peer test reflect-client
24.1.41 summary
Syntax summary undo summary
View
IPv4 multicast sub-address family view
Parameter
None
Description
Use the summary command to set to auto-aggregate subnet routes.
Use the undo summary command to remove the configuration.
By default, subnet routes can not be aggregated automatically.
After the summary command is executed, MBGP cannot receive the subnet routes imported by IGP. You can use this command to reduce route selection information.
Example
Enable subnet route auto-aggregation.
[SW8800-bgp-af-mul] summary
24-26
3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands
Chapter 25 ACL Commands
Caution:
z z
The syntax of the QoS/ACL command used for service processor cards
(LSBM1NATB cards in the context of this document) is somewhat different from that for interface cards. Refer to related description in the manual.
Service processor cards do not support Layer 2 ACL.
25.1 ACL Commands
25.1.1 acl
Syntax
acl { number acl-number | name acl-name [ advanced | basic | link | user ] }
[ match-order { config | auto } ]
undo acl { number acl-number | name acl-name | all }
View
Parameter
System view
number acl-number: Serial number of ACL, in the range of:
2000 to 2999: Represents basic ACL.
3000 to 3999: Represents advanced ACL.
4000 to 4999: Represents Layer 2 ACL.
5000 to 5999: Represents user-defined ACL.
name acl-name: Character string, which must be started with an English letter (i.e., a-z or A-Z), and there should not be a space or quotation mark in it; case insensitive, key words all and any are not allowed to use.
advanced: Advanced ACL.
basic: Basic ACL.
link: Layer 2 ACL.
user: User-defined ACL.
25-1
3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands
config: In configuration order during matching ACL rules.
auto: In depth-first order during matching ACL rules.
all: Deletes all ACLs (both number- and name-identified ones).
Description
Use the acl command to define a number- or name-identified ACL and enter its view.
Use the undo acl command to delete all rules of an ACL or all ACLs.
By default, the system matches ACL rules in configuration order.
Using the acl command, you can create an ACL named “acl-name”. And the type of this
ACL is decided by keywords: “advanced”, ”basic”, ”link”, or "user”. If you don’t specify the ACL type, the system create a link ACL by default. After entering a corresponding
ACL view, no matter the ACL is identified by a number or a name, you can use the rule command to create sub-rules of this named ACL (you can exit ACL view by using the
quit command).
You can select the match-order keyword to specify whether to match ACL rules in configuration order or depth-first order (matching the rules with smaller range first). By default, the former mode is selected. You cannot modify the matching order once you specify it. To do so, you have to delete all sub-rules of the ACL and specify a matching order for it again.
Note:
The user-defined ACL matching order takes effect only when multiple rules of one ACL are applied at the same time. For example, an ACL has two rules. If the two rules are not applied simultaneously, even if you configure the matching order to be depth first, the switch still matches them according to their application order.
If one rule is a subset of another rule in an ACL, it is recommended to apply the rules according to the range of the specified packets. The rule with the smallest range of the specified data packets is applied first, and then other rules are applied based on this principle.
Related command: rule.
Example
Specify depth first order as the match order of number 2000 ACL.
[SW8800] acl number 2000 match-order auto
25-2
3Com Switch 8800 Command Reference Guide
25.1.2 display acl config
Chapter 25 ACL Commands
Syntax
display acl config { all | acl-number | acl-name }
View
Any view
Parameter
Description
Use the display acl config command to view the configuration details of the ACL, including all the sub-rules, their serial numbers, quantities and number of bytes of matched packets.
The matched times here refer to the software matched times, that is, the matched times of the ACLs that needed to be processed by CPU. You can collect hardware matched times value by using the traffic-statistic command.
Example
all: Displays all ACLs (both number- and name-identified ones).
acl-number: Serial number of the ACL to be displayed, in the range of 2000 to 5999.
acl-name: Name of the ACL to be displayed. String parameter which must start with an
English letter ([a-z, A-Z]) and no space is allowed in it.
Display contents of all ACLs.
<SW8800>display acl config all
Link ACL 4000, 1 rule,
rule 0 permit ingress any egress any
Basic ACL traffic-of-host, 1 rule,
rule 1 deny source 10.1.1.1 0 time-range 3com(0 times matched) (Active)
25.1.3 display acl running-packet-filter
Syntax
display acl running-packet-filter { all | interface { interface-name | interface-type
interface-num } | vlan vlan-id }
View
Any view
25-3
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 25 ACL Commands
all: Displays all ACLs (both number- and name-identified ones).
interface { interface-name | interface-type interface-num }: Port of the switch, for detailed description, refer to Command Manual – Port. Specifying this parameter can display ACL delivery information on a specific port of an interface card.
vlan: Displays the information about the ACLs configured under a VLAN for a service processor card.
vlan-id : ID of VLAN interface, ranging from 1 to 4094.
Description
Use the display acl running-packet-filter command to view ACL delivery information, including ACL name, sub-rule and the delivery state.
Example
Display the ACLs activated on Ethernet3/1/1.
<SW8800> display acl running-packet-filter all
Ethernet3/1/1
Inbound:
Acl 4000 rule 0 running
Display the ACLs activated on VLAN2.
<SW8800> display acl running-packet-filter vlan 2
Vlan 2
Inbound:
Acl 2000 rule 1 slot 6 running
25.1.4 display flow-template
Syntax
display flow-template [ default | interface interface-type interface-num | slot slotid |
user-defined]
View
Parameter
Any view
default: Displays the default flow template configuration of system.
interface interface-type interface-num: Displays the flow template applied on the specified port.
slot slotid: Displays the flow template applied on the specified slot.
user-defined: Displays the configuration of user-defined flow template.
25-4
3Com Switch 8800 Command Reference Guide
Description
Chapter 25 ACL Commands
Use the display flow-template command to view the configuration of flow template.
The configuration includes the defined information of flow template, the port and slot for which the flow template has applied.
The Switch 8800 supports two flow templates: one is user-defined; the other is the default one. If you do not input any parameter for this command, the detailed configuration of all flow templates will be displayed.
Related command: flow-template user-defined.
Example
Display the default flow-template. default flow template : ip-protocol tcp-flag sport dport icmp-type icmp-code sip 0.0.0.0 dip 0.0.0.0
25.1.5 display time-range
Syntax
display time-range { all | name }
View
Any view
Parameter
all: Displays all time ranges.
name: Time range name, string starting with an English letter ([a-z, A-Z]) and in the range of 1 to 32 characters.
Description
Use the display time-range command to view the configuration and status of current time range. For active time range, the system shows “active” and “inactive” for inactive time range.
A delay, about one minute, exists in system’s updating ACLs, but the result of the
display time-range command is based on the current time. Then there may the case where a time range have been shown active using the display time-range command, while it is still inactive in importing the ACL. You just take it as a normal case.
Related command: time-range.
Example
Display all time ranges.
<SW8800> display time-range all
25-5
3Com Switch 8800 Command Reference Guide
Current time is 14:36:36 4-3-2003 Thursday
Time-range : hhy ( Inactive )
from 08:30 2-5-2005 to 18:00 2-19-2005
Time-range : hhy1 ( Inactive )
from 08:30 2-5-2003 to 18:00 2-19-2003
Display time range tm1.
<SW8800> display time-range tm1
Current time is 14:37:31 4-3-2003 Thursday
Time-range : tm1 ( Inactive ) from 08:30 2-5-2005 to 18:00 2-19-2005
Chapter 25 ACL Commands
25.1.6 flow-template user-defined
Syntax
flow-template user-defined
undo flow-template user-defined
View
Ethernet port view / port group view
Parameter
None.
Description
Use the flow-template user-defined command to apply the user-defined flow template to current port or current port group.
Use the undo flow-template user-defined command to cancel the applied flow template on current port or current port group.
Related command: display flow-template, flow-template user-defined slot slotid
template-info.
Example
Apply the user-defined flow template to current port Ethernet4/1/1.
[SW8800-Ethernet4/1/1] flow-template user-defined
25-6
3Com Switch 8800 Command Reference Guide
25.1.7 flow-template user-defined template-info
Chapter 25 ACL Commands
Syntax
flow-template user-defined slot slotid template-info
undo flow-template user-defined slot slotid
View
Parameter
System view z z z z z z z z z z z z z z z z z z
template-info: Information available in defining traffic classification, its value can be: z z z cos: 802.1p priority, in the length of 1 byte. dip wildcard: Destination IP domain in the IP packet header, in the length of 4 bytes. dmac wildcard: Destination MAC domain in the Ethernet packet header, in the length of 6 bytes. dport: Destination port domain, in the length of 2 bytes. dscp: DSCP domain in the IP packet header, in the length of 1 byte. ethernet-protocol: Protocol type domain in the Ethernet packet header, in the length of 2 bytes. exp: EXP field in MPLS packet, in the length of 1 byte. fragment-flags: Flag field of fragment in IP packed header, no bytes in flow template. icmp-code: ICMP code domain, in the length of 1 byte. icmp-type: ICMP type domain, in the length of 1 byte. ip-precedence: IP priority domain in the IP packet header, in the length of 1 byte. ip-protocol: Protocol type domain in the IP packet header, in the length of 1 byte. sip wildcard : Source IP domain in the IP packet header, in the length of 4 bytes. smac wildcard: Source MAC domain in the Ethernet packet header, in the length of 6 bytes. sport: Source port domain, in the length of 2 bytes. tcp-flag: Flag domain in the TCP packet header, in the length of 1 byte. tos: TOS (type of service) domain in the IP packet header, in the length of 1 byte. vlanid: VLAN ID in the packet, in the length of 2 bytes. c-tag-cos: 802.1p priority in the Internal 802.1Q tag (internal tag of QinQ tag-in-tag application), 2 bytes. c-tag-vlanid: Vlan ID in the internal 802.1Q tag (internal tag of QinQ tag-in-tag application), 2 bytes. bt-flag: Flag for Bit Torrent peer-to-peer service, 2 bytes
slot slotid: Specifies the slot on which the flow template applied.
25-7
3Com Switch 8800 Command Reference Guide
Description
Chapter 25 ACL Commands
Use the flow-template user-defined slot slotid template-info command to define a flow template.
Use the undo flow-template user-defined slot slotid command to delete a flow template.
In defining a flow template, the total length of all elements should not be more than 16 bytes.
A flow template is defined by default, which includes these items: ip-protocol tcp-flag sport dport icmp-type icmp-code sip 0.0.0.0 dip 0.0.0.0.
You cannot modify or delete the default flow template, but those you have defined.
Related command: display flow-template, flow-template user-defined.
Example
Define a flow template which classifies traffic by source and destination IP addresses, source and destination TCP/UDP ports, DSCP domain in the IP packet header.
[SW8800] flow-template user-defined slot 3 sip 0.0.0.0 dip 0.0.0.0 sport dport dscp
25.1.8 packet-filter
Syntax
I. Command Format Which Only Applies IP Group ACL
In Ethernet port view or port group view:
packet-filter inbound ip-group { acl-number | acl-name } [ rule rule [ system-index
index ] ]
undo packet-filter inbound ip-group { acl-number | acl-name } [ rule rule ]
In VLAN view:
packet-filter inbound ip-group { acl-number | acl-name } [ rule rule ] [ system-index
index ] slot slotid
undo packet-filter inbound ip-group { acl-number | acl-name } [ rule rule ] slot slotid
II. Command Format Which Applies IP Group and Link Group ACL at Same time
In Ethernet port view or port group view:
packet-filter inbound ip-group { acl-number | acl-name } { rule rule link-group
{ acl-number | acl-name } [ rule rule [ system-index index ] ] | link-group { acl-number
| acl-name } rule rule }
25-8
3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands
undo packet-filter inbound ip-group { acl-number | acl-name } { rule rule link-group
{ acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } rule rule }
III. Command Format Which Only Applies Link Group ACL
In Ethernet port view or port group view:
packet-filter inbound link-group { acl-number | acl-name } [ rule rule [ system-index
index ] ]
undo packet-filter inbound link-group { acl-number | acl-name } [ rule rule ]
View
Ethernet port view / port group view / VLAN view
Parameter
inbound: Performs filtering to the packets received by the interface.
ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced
ACLs. acl-number : Sequence number of ACL, ranging from 2000 to 3999. acl-name:
Name of the ACL, which must be a character string starting with an English letter (a-z or
A-Z), and without any space or quotation mark in it.
link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.
rule rule: Specifies the sub-rule of an active ACL, ranging from 0 to 127; if not specified, all sub-rules of ACL will be activated.
system-index index: Intra-system index of the rule. This parameter is used for trouble-shooting. User must not use this parameter during configuration.
slot slotid: Slot number of a service processor card.
Description
Use the packet-filter command to activate an ACL.
Use the undo packet-filter command to deactivate an active ACL.
Note:
The interface cards support the command syntax in Ethernet port view; while the service processor cards (LSBM1NATB cards in the context of this document) support the command syntax in VLAN view because these cards have no egress port.
Before executing the packet-filter command on a service processor card, you must first configure traffic redirection in Ethernet port view to redirect packets of a specific
VLAN to the service processor card.
25-9
3Com Switch 8800 Command Reference Guide
Example
Chapter 25 ACL Commands
Activate ACL 2000.
[SW8800-Ethernet5/1/1] packet-filter inbound ip-group 2000
25.1.9 reset acl counter
Syntax
reset acl counter { all | acl-number | acl-name }
View
User view
Parameter
Description
Use the reset acl counter command to clear ACL statistics to zero.
Example
all: Displays all ACLs (both number- and name-identified ones).
acl-number: Serial number of the ACL, in the range of 2000 to 3999.
acl-name: ACL name, string parameter. It must start with an English letter ([a-z, A-Z]).
No space or quotation mark is allowed in it. It is case insensitive. The keywords all is forbidden.
Clear the statistics of ACL 2000.
<SW8800> reset acl counter 2000
25.1.10 rule
Syntax
I. Define or delete the subrules of a basic ACL
rule [ rule-id ] { permit | deny } [ source { source-addr wildcard | any } | fragment |
time-range name | vpn-instance instance-name ]*
undo rule rule-id [ source | fragment | time-range | vpn-instance instance-name ]*
II. Define or delete the subrules of an advanced ACL
rule [ rule-id ] { permit | deny } protocol [ source { source-addr wildcard | any } ]
[ destination { dest-addr wildcard | any } ] [ source-port operator port1 [ port2 ] ]
[ destination-port operator port1 [ port2 ] ] [ icmp-type type code ] [ established ]
25-10
3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands
[ [ precedence precedence | tos tos ]* | dscp dscp ] [ fragment ] [ time-range name ]
[ vpn-instance instance-name ]
undo rule rule-id [ source | destination | source-port | destination-port | icmp-type
| precedence | tos | dscp | fragment | time-range | vpn-instance ]*
III. Define or delete the subrules of a Layer 2 ACL
rule [ rule-id ] { permit | deny } [ cos cos-value | { arp | ip | mpls [ l2lable-range ] [ exp
exp-value ] | nbx | pppoe-control | pppoe-data | rarp } | ingress { { source-vlan-id |
source-mac-addr source-mac-wildcard }* | any } | egress { dest-mac-addr
dest-mac-wildcard | any } | time-range name ]*
undo rule rule-id
View
Corresponding ACL view
Parameter
rule-id: Specifies a sub-rule of the ACL, in the range of 0 to 127
permit: Allows qualified packets to pass.
deny: Forbids qualified packets to pass.
time-range name: Time range name, optional parameter. It means the rule takes effect in this time range.
Note:
The following parameters are for the attributes of the packet. The ACL generates rules according to these attribute parameters. z
Parameters specific to basic ACLs:
source { source-addr wildcard | any }: source-addr wildcard specifies the source IP address and wildcard digit of source address represented in dotted decimal notation.
any represents all source addresses.
fragment: It is only effective to fragmented messages and is ignored by non-fragmented messages.
vpn-instance instance-name: VPN instance name. The specified MPLS VPN packets will be identified if this parameter is selected. z
Parameters specific to advanced ACLs:
protocol: Specifies the protocol type which is represented by a name or a number. For name format, the options include icmp, igmp, tcp, udp, ip, gre, ospf, ipinip etc. The IP
25-11
3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands parameter represents all IP protocols. For number format, the value ranges from 1 to
255.
source { source-addr wildcard | any }: source-addr wildcard specifies the source IP address and wildcard digit of source address represented, in dotted decimal notation.
any represents all source addresses.
destination { dest-addr wildcard | any }: dest-addr wildcard specifies the destination IP address and wildcard digit of destination address represented, in dotted decimal notation. any represents all destination addresses.
source-port operator port1 [ port2 ]: Source TCP or UDP port ID of the packet.
operator means port operator, with options including eq (equal to), gt (greater than), lt
(less than), neq (not equal to) and range (in the range of). Note that it is effective only when the protocol parameter is set as TCP or UDP. port1 [ port2 ] stands for source
TCP or UDP port ID of the packet, in characters or digits. Digital value ranges from 0 to
65535. For character options, see the port ID mnemonic symbol list. Only for the range operator, both port1 and port2 are active. For the rest operators, only port1 is required.
destination-port operator port1 [ port2 ]: Destination TCP or UDP port ID of the packet.
See source-port operator port1 [ port2 ] for detailed description.
icmp-type type code: It is active when the protocol is set as icmp. type code specifies an ICMP packet. type indicates ICMP packet type, in characters or digits. The digital value ranges from 0 to 255. code is ICMP code, which is active when ICMP is selected and ICMP packet type is not expression in characters. It ranges from 0 to 255.
established: (Optional) It is effective only to the first SYN packet established by TCP and active when protocol is set as tcp.
precedence precedence: (Optional) IP priority level, in a number (ranging from 0 to 7) or a name.
tos tos: (Optional) Indicating packets are classified by TOS value, in a number (ranging
0 to 15) or a name.
dscp dscp: (Optional) Indicating packets are classified by DSCP value, in a number
(ranging from 0 to 63) or a name.
fragment: It is only effective to fragmented messages and is ignored by non-fragmented messages.
vpn-instance instance-name: VPN instance name. The specified MPLS VPN packets will be identified if this parameter is selected. z
Parameters specific to Layer 2 ACLs:
cos: Specifies 802.1p priority.
cos-value: In number format (ranging 0 to 7) or just entering the priority name. See
Table 25-1 for their correspondence.
25-12
3Com Switch 8800 Command Reference Guide
Table 25-1 COS priority definition
Chapter 25 ACL Commands
Number Priority name
0 best-effort
1 background
2 spare
3 excellent-effort
4 controlled-load
5 video
6 voice
7 network-management
{ arp | ip | mpls [ l2lable-range ] [ exp exp-value ] | nbx | pppoe-control | pppoe-data
| rarp }: (Optional) Protocol type carried by Ethernet frame.
ingress { { source-vlan-id | source-mac-addr source-mac-wildcard }* | any }: Source information of the packet. source-vlan-id shows its source VLAN. source-mac-addr
source-mac-wildcard shows source MAC address and wildcard of the source address.
The two parameters work together to determine the range of the source MAC addresses in which the user is interested. For example, the source MAC wildcard
0-0-ffff means the user is interested in the last 16 bits (those corresponding to the wildcard 1). any represents all packets received at all the ports.
egress { dest-mac-addr dest-mac-wildcard | any }: Destination information of the packet. dest-mac-addr dest-mac-wildcard shows destination MAC address and wildcard of the destination address. The two parameters work together to determine the range of the destination MAC addresses in which the user is interested. For example, the destination MAC wildcard 0-0-ffff means the user is interested in the last 16 bits
(those corresponding to the wildcard 1). any represents all packets transferred at all the ports.
Description
Use the rule command to add a sub-rule to the ACL.
Use the undo rule command to delete a sub-rule from the ACL.
You can define multiple sub-rules for an ACL. Only the specified rules will be deleted if you select parameters in the undo rule command.
Related command: acl.
Example
Add a sub-rule to the advanced ACL.
25-13
3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands
[SW8800-acl-adv-3000] rule 1 permit tcp established source 1.1.1.1 0 destination 2.2.2.2 0
25.1.11 time-range
Syntax
time-range time-name { start-time to end-time days-of-the-week [ from start-time
start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time end-date ]
| to end-time end-date }
undo time-range time-name [ start-time to end-time days-of-the-week [ from
start-time start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time
end-date ] | to end-time end-date ]
View
System view
Parameter
time-name: Name of a particular time range, used as an import identifier.
start-time: (Optional) Starting time of the particular time range, in the format of hh:mm.
end-time: (Optional), End time of the particular time range, in the format of hh:mm.
days-of-the-week: (Optional) Indicating the particular time range takes effect on which day in a week. You can type these values: z z z z z
Number (ranging from 0 to 6);
Monday, Tuesday, Wednesday, Thursday, Friday, Saturday or Sunday;
Working-day: Monday through Friday inclusive;
Off-day: Saturday and Sunday; daily: Every day of a week.
from start-time start-date: (Optional) Starting date of the particular time range, in the format of hh:mm YYYY/MM/DD.
to end-time end-date: (Optional) End date of the particular time range, in the format of hh:mm YYYY/MM/DD.
Description
Use the time-range command to define a time range.
Use the undo time-range command to cancel a time range.
The defined time range includes absolute time range and period time range. start-time and end-time days-of-the-week define period time range together. from start-time
start-date and end-time end-date define absolute time range together.
If a time range only defines the period time range, the time range is only active within the period time range.
25-14
3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands
If a time range only defines the absolute time range, the time range is only active within the absolute time range.
If a time range defines the period time range and the absolute time range, the time range is only active when the period time range and the absolute time range are both matched. For example, a time range defines a period time range which is from 12:00 to
14:00 every Wednesday, and defines an absolute time range which is from 00:00
2004/1/1 to 23:59 2004/12/31. This time range is only active from 12:00 to 14:00 every
Wednesday in 2004.
If you input parameters in the undo time-range command, only the content corresponding to the specified time range will be canceled.
Example
Define a time range starting from 0:0, Jan. 1, 2000, effective for ever.
[SW8800] time-range test from 0:0 2000/1/1
25-15
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Chapter 26 QoS Commands
Caution:
z z z
The syntax of the QoS/ACL command used for service processor cards
(LSBM1NATB cards in the context of this document) is somewhat different from that for interface cards. Refer to related description in the manual.
Service processor cards do not support Layer 2 ACL.
If you configure QoS/ACL feature in the port group view, then the QoS/ACL configurations on all ports in the group are the same. When a single port is added into a group, its QoS/ACL configuration is replaced by the group configuration. Then subsequent configuration is achieved among the group.
26.1 QoS Commands
26.1.1 display port-group
Syntax
display port-group
View
Any view
Parameter
None.
Description
Use the display port-group command to view all the port groups existed on the switch.
Related command: port-group.
Example
Display the existed port groups on the switch.
[SW8800] display port-group
Now, the following port group exist(s): 1
26-1
3Com Switch 8800 Command Reference Guide
26.1.2 display port-group index
Chapter 26 QoS Commands
Syntax
display port-group index
View
Any view
Parameter
index: Port group index.
Description
Use the display port-group index command to view the configuration of a port group.
The information displayed includes the description of port group and its member ports.
Related command: port.
Example
Display the configuration of port group 1.
[SW8800] display port-group 1
Port-group ID : 1
Description: Port group 01
Port-group is unlocked.
Port(s) description:
Ethernet3/1/1 Ethernet3/1/2 Ethernet3/1/3
26.1.3 display mirroring-group
Syntax
display mirroring-group [ groupid ]
View
Any view
Parameter
groupid: mirroring group ID, in the range of 1 to 24.
Description
Use the display mirroring-group command to view the configuration of a port mirroring group. The information displayed includes the monitored ports, direction of monitored packets, monitoring ports, etc.
Related command: mirroring-group.
26-2
3Com Switch 8800 Command Reference Guide
Example
Chapter 26 QoS Commands
Display the parameter configuration of a port mirroring group.
[SW8800] display mirroring-group mirroring-group 1 inbound Ethernet6/1/1 mirrored-to Ethernet6/1/2
26.1.4 display qos conform-level
Syntax
display qos conform-level [ conform-level-value ] { dscp-policed-service-map
[ dscp-list ] | exp-policed-service-map | local-precedence-cos-map }
View
Any view
Parameter
conform-level-value: Conform level, in the range of 0 to 2. If you type value(s) for this parameter, then only the specified conform-level DSCP items will be displayed.
Otherwise, the system displays the whole mapping connection.
dscp-policed-service-map [ dscp-list ]: Displays “DSCP + Conform-level — >
Service-parameter” mapping table. dscp-list: DSCP value, which can be a single value or values, for example, you can type single DSCP value “46”, or DSCP values “0 8 10
16” (a space is required between two values). If you type value(s) for this parameter, then only the specified DSCP items will be displayed. Otherwise, the system displays the whole mapping connection. DSCP value is in the range of 0 to 63.
exp-policed-service-map: Displays “EXP + Conform-level —> Service-parameter” mapping table. EXP is MPLS priority of MPLS packets.
local-precedence-cos-map: Displays ”Local-precedence + Conform-level — >
Priority” mapping table
Description
Use the display qos conform-level command to view the “DSCP + Conform-level —>
Service-parameter” mapping table, “EXP + Conform-level — > Service-parameter” mapping table and “Local-precedence + Conform-level —> Priority” mapping table.
Example
Display the “DSCP + Conform-level —> Service-parameter” mapping table.
<SW8800> display qos conform-level 0 dscp-policed-service-map
Conform-level 0 :
Dscp-policed-service Map : dscp : dscp exp cos local-precedence drop-precedence
--------------------------------------------------------------------------
26-3
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
0 : 0 0 0 0 0
8 : 8 1 1 1 0
10 : 10 1 1 1 0
16 : 16 2 2 2 0
18 : 18 2 2 2 0
24 : 24 3 3 3 0
26 : 26 3 3 3 0
32 : 32 4 4 4 0
34 : 34 4 4 4 0
40 : 40 5 5 5 0
46 : 46 5 5 5 0
48 : 48 6 6 6 0
56 : 56 7 7 7 0
Display the “EXP + Conform-level —> Service-parameter” mapping table.
<SW8800> display qos conform-level 0 exp-policed-service-map conform-level 0 :
exp : dscp exp cos local-precedence drop-precedence
--------------------------------------------------------------------------
0 : 2 0 0 0 0
1 : 10 1 1 1 0
2 : 18 2 2 2 0
3 : 26 3 3 3 0
4 : 34 4 4 4 0
5 : 42 5 5 5 0
6 : 50 6 6 6 0
7 : 58 7 7 7 0
Display the “Local-precedence + Conform-level —> Priority” mapping table.
<SW8800> display qos conform-level 0 local-precedence-cos-map conform-level 0 :
local-precedence : 0 1 2 3 4 5 6 7
--------------------------------------------------------------------------
cos : 0 1 2 3 4 5 6 7
26.1.5 display qos cos-drop-precedence-map
Syntax
display qos cos-drop-precedence-map
View
Any view
26-4
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 26 QoS Commands
Description
Use the display qos cos-drop-precedence-map command to view the “CoS—>
Drop-precedence” mapping table.
Example
Display the “CoS—> Drop-precedence” mapping table.
<SW8800> display qos cos-drop-precedence-map cos-drop-precedence-map:
cos : 0 1 2 3 4 5 6 7
------------------------------------------------------------------- drop-precedence : 2 2 1 1 1 1 0 0
26.1.6 display qos cos-local-precedence-map
Syntax
display qos cos-local-precedence-map
View
Any view
Parameter
None
Description
Use the display qos cos-local-precedence-map command to view the “CoS —>
Local –precedence” mapping table.
Example
Display the “CoS —> Local –precedence” mapping table.
<SW8800> display qos cos-local-precedence-map cos-local-precedence-map:
cos : 0 1 2 3 4 5 6 7
--------------------------------------------------------------------------
local-precedence : 2 0 1 3 4 5 6 7
26-5
3Com Switch 8800 Command Reference Guide
26.1.7 display qos-interface all
Chapter 26 QoS Commands
Syntax
display qos-interface [ interface-name | interface-type interface-num ] all
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
Description
Use the display qos-interface all command to view the QoS configuration of all ports, including drop mode, queue scheduling, traffic shaping etc. If you specify port IDs, only their QoS configuration will be displayed.
Example
Display QoS configurations of all ports
<SW8800> display qos-interface all
26.1.8 display qos-interface drop-mode
Syntax
display qos-interface [ interface-name | interface-type interface-num ] drop-mode
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
Description
Use the display qos-interface drop-mode command to view drop mode configuration of outbound queues at a port. If no port is specified, drop mode configuration of all ports will be displayed.
Related command: drop-mode.
Example
Display drop mode and parameters.
26-6
3Com Switch 8800 Command Reference Guide
<SW8800> display qos-interface drop-mode
Chapter 26 QoS Commands
26.1.9 display qos-interface mirrored-to
Syntax
display qos-interface [ interface-name | interface-type interface-num ] mirrored-to
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
Description
Use the display qos-interface mirrored-to command to view traffic mirroring configuration of a port.
Related command: mirrored-to.
Example
Display traffic mirroring configuration.
<SW8800> display qos-interface mirrored-to
26.1.10 display qos-interface queue-scheduler
Syntax
display qos-interface [ interface-name | interface-type interface-num ]
queue-scheduler
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
Description
Use the display qos-interface queue-scheduler command to view queue scheduling mode and parameters of a port. If no port is specified, queue scheduling mode and the parameters of all ports will be displayed.
Related command: queue-scheduler.
26-7
3Com Switch 8800 Command Reference Guide
Example
Display queue scheduling mode and parameters.
<SW8800> display qos-interface queue-scheduler
Ethernet5/1/1 Port scheduling:
QID: scheduling-group weight
-----------------------------------
0 : sp 0
1 : sp 0
2 : sp 0
3 : wrr , group1 25
4 : sp 0
5 : wrr , group2 30
6 : sp 0
7 : sp 0
Ethernet5/1/ Port scheduling:
QID: scheduling-group weight
-----------------------------------
0 : sp 0
1 : sp 0
2 : sp 0
3 : sp 0
4 : sp 0
5 : sp 0
6 : sp 0
…
Chapter 26 QoS Commands
26.1.11 display qos-interface traffic-limit
Syntax
display qos-interface [ interface-name | interface-type interface-num ] traffic-limit
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
Description
Use the display qos-interface traffic-limit command to view the parameter setting of traffic rate limitation, including the target ACL, committed average rate, committed burst
26-8
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands size (CBS), maximum burst size (MBS), peak rate and the related monitoring actions etc.
Related command: traffic-limit.
Example
Display parameter configuration of traffic rate limitation,.
<SW8800> display qos-interface traffic-limit
26.1.12 display qos-interface traffic-priority
Syntax
display qos-interface [ interface-name | interface-type interface-num ] traffic-priority
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
Description
Use the display qos-interface traffic-priority command to view traffic priority configuration of a port, including the target ACL, priority type, priority values etc.
Related command: traffic-priority.
Example
Display traffic priority marking configuration.
<SW8800> display qos-interface traffic-priority
26.1.13 display qos-interface traffic-redirect
Syntax
display qos-interface [ interface-name | interface-type interface-num ] traffic-redirect
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
Description
26-9
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Use the display qos-interface traffic-redirect command to view traffic redirection configuration of a port, including the target ACL, target port etc.
Related command: traffic-redirect.
Example
Display traffic redirection configuration.
<SW8800> display qos-interface traffic-redirect
26.1.14 display qos-interface traffic-shape
Syntax
display qos-interface [ interface-name | interface-type interface-num ] traffic-shape
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
Description
Use the display qos-interface traffic-shape command to view traffic shaping configuration of a port, including the maximum rate, MBS (in units of kbyte), the maximum queue length. If no port is specified, traffic shaping configuration of all ports will be displayed.
Example
Display traffic shaping configuration.
[SW8800] display qos-interface traffic-shape
26.1.15 display qos-interface traffic-statistic
Syntax
display qos-interface [ interface-name | interface-type interface-num ]
traffic-statistic
View
Any view
Parameter
interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.
26-10
3Com Switch 8800 Command Reference Guide
Description
Chapter 26 QoS Commands
Use the display qos-interface traffic-statistic command to view traffic statistics of a port, including the target ACL, number of calculated packets etc.
Related command: traffic-statistics.
Example
Display traffic statistics.
<SW8800> display qos-interface traffic-statistic
26.1.16 display qos-vlan all
Syntax
display qos-vlan [ vlan-id ] all
View
Any view
Parameter
vlan-id: ID of a VLAN, in the range of 1 to 4094.
Description
Use the display qos-vlan all command to display the QoS configuration (including the configuration of priority marking, traffic policing, and traffic redirection) information about one specific VLAN (with vlan-id parameter) or all VLANs (without vlan-id parameter) on the switch.
Example
Display all the QoS parameter configurations.
<SW8800> display qos-vlan all
Vlan 1 traffic-limit
Inbound:
There is no configuration.
Vlan 1 traffic-priority
Inbound:
There is no configuration.
Vlan 1 traffic-redirect
Inbound:
There is no configuration.
Vlan 2 traffic-limit
Inbound:
Matches: Acl 2000 rule 1 running
26-11
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Committed Information Rate: 8192 Kbps
Committed Burst Size: 10000 byte(s)
Excess Burst Size: 20000 byte(s)
Peak Information Rate: 0 Kbps
Exceed action: drop
Vlan 2 traffic-priority
Inbound:
Matches: Acl 2000 rule 1 running
Priority action: remark-policed-service, untrusted, dscp: 13, cos: 6, local
-precedence: 6, drop-priority: 1
Vlan 2 traffic-redirect
Inbound:
Matches: Acl 2000 rule 1 running
Redirected to: next-hop 1.1.1.1
26.1.17 display qos-vlan traffic-limit
Syntax
display qos-vlan [ vlan-id ] traffic-limit
View
Any view
Parameter
vlan-id: ID of a VLAN, in the range of 1 to 4094.
Description
Use the display qos-vlan traffic-limit command to display the parameter configuration for traffic limit, including the configuration information about related ACL and policing actions.
Related command: traffic-limit and traffic-params.
Example
Display the parameter configuration of traffic limit.
<SW8800> display qos-vlan traffic-limit
Vlan 1 traffic-limit
Inbound:
There is no configuration.
Vlan 2 traffic-limit
Inbound:
Matches: Acl 2000 rule 3 running
26-12
3Com Switch 8800 Command Reference Guide
Committed Information Rate: 8192 Kbps
Committed Burst Size: 10000 byte(s)
Excess Burst Size: 20000 byte(s)
Peak Information Rate: 0 Kbps
Exceed action: drop
Chapter 26 QoS Commands
26.1.18 display qos-vlan traffic-priority
Syntax
display qos-vlan [ vlan-id ] traffic-priority
View
Any view
Parameter
vlan-id: ID of a VLAN, in the range of 1 to 4094.
Description
Use the display qos-vlan traffic-priority command to display the priority marking configuration, including the ACL associated with the traffic priority marking, the type and value of the priority marking.
Related command: traffic-priority.
Example
Display the priority marking configuration.
<SW8800> display qos-vlan traffic-priority
Vlan 1 traffic-priority
Inbound:
There is no configuration.
Vlan 2 traffic-priority
Inbound:
Matches: Acl 2000 rule 1 running
Priority action: remark-policed-service, untrusted, dscp: 13, cos: 6, local-precedence: 6, drop-priority: 1
26.1.19 display qos-vlan traffic-redirect
Syntax
display qos-vlan [ vlan-id ] traffic-redirect
View
Any view
26-13
3Com Switch 8800 Command Reference Guide
Parameter
vlan-id: ID of a VLAN, in the range of 1 to 4094.
Chapter 26 QoS Commands
Description
Use the display qos-vlan traffic-redirect command to display the parameter configuration for traffic redirection, including the related ACL and the destination port of the traffic redirection.
Related command: traffic-redirect.
Example
Display the parameter configuration for a traffic redirection.
<SW8800> display qos-vlan 2 traffic-redirect
Vlan 2 traffic-redirect
Inbound:
Matches: Acl 2000 rule 1 running
Redirected to: next-hop 1.1.1.1
26.1.20 display traffic-params
Syntax
display traffic-params [ traffic-index ]
View
Any view
Parameter
traffic-index: Traffic parameter index, in the range of 0 to 173 and defaulting to 1.
Description
Use the display traffic-params command to display the parameter configuration for traffic policing, including cir, cbs, ebs, pir, and so on.
Related command: traffic-params.
Example
Display the parameter configuration for traffic policing.
<SW8800> display traffic-params 1 traffic parameters configuration list:
index : cir cbs ebs pir
--------------------------------------------------------------------------
1 : 8192 10000 20000 0
26-14
3Com Switch 8800 Command Reference Guide
26.1.21 drop-mode
Chapter 26 QoS Commands
Syntax
View
Ethernet port view / port group view
Parameter
tail-drop: Tail drop mode.
wred: WRED drop mode.
wred-index: WRED index, in the range of 0 to 3. By default, it is 0. If you type nothing for this parameter, the system will use the parameters specified when WRED index is 0.
Description
Use the drop-mode command to configure drop mode for a port.
Use the undo drop-mode command to restore the default drop mode, i.e. tail drop mode.
By default, tail drop mode is selected.
In the case of network congestion, the switch drops packets to release system resources. And then no packets are put into long-delay queues. The following two drop modes are available: z z
Tail drop mode: different queues (red, yellow and green) are allocated with different drop thresholds. When these thresholds are exceeded respectively, excessive packets will be dropped.
WRED drop mode: Drop precedence is taken into account in drop action. When only min-thresholds of red, yellow and green packets are exceeded, packets between min-thresholds and max-thresholds are dropped randomly at a given slope. But when max-thresholds of red, yellow and green packets are exceeded, all excessive packets will be dropped.
Example
drop-mode { tail-drop | wred } [ wred-index ]
undo drop-mode
Set the port Ethernet3/1/1 in WRED drop mode; import WRED 0 as the threshold.
[SW8800-Ethernet3/1/1] drop-mode wred 0
26.1.22 dscp
Syntax
26-15
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
dscp
dscp-list : dscp-value exp-value cos-value
local-precedence-value drop-precedence
undo dscp dscp-list
View
Conform level view
Parameter
dscp-list: Original DSCP value, which can be a single value or several values, in the range of 0 to 63. For example, you can type single DSCP value “46”, or DSCP values “0
8 10 16” (space is required between two values).
dscp-value: Modified DSCP value, in the range of 0 to 63.
exp-value: Modified EXP value, in the range of 0 to 7. EXP is MPLS priority of MPLS packets.
cos-value: Modified 802.1p priority value, in the range of 0 to 7
local-precedence-value: Modified local precedence value, in the range of 0 to 7.
drop-precedence: Modified drop precedence value, in the range of 0 to 2.
Description
Use the dscp command to configure the “DSCP + Conform-level — >
Service-parameter” mapping table of current conform level.
Use the undo dscp command to restore default configuration of the “DSCP +
Conform-level —> Service- parameter” mapping table.
After entering conform level view, you can configure the “DSCP + Conform-level —>
Service-parameter” mapping table of the corresponding level. For example, you can enter conform level 0 view and configure the “DSCP + Conform-level 0 — >
Service-parameter” mapping table.
Example
Configure the " DSCP + Conform-level 0 —> Service-parameter ” mapping table.
[SW8800-conform-level-0] dscp 0: 0 0 0 0 0
[SW8800-conform-level-0] dscp 8 10 : 8 0 1 1 0
[SW8800-conform-level-0] dscp 16 18: 16 0 2 2 0
[SW8800-conform-level-0] dscp 24 26 : 24 0 3 3 0
[SW8800-conform-level-0] dscp 32 34 : 32 0 4 4 0
[SW8800-conform-level-0] dscp 40 46: 40 0 5 5 0
[SW8800-conform-level-0] dscp 48 : 48 0 6 6 0
[SW8800-conform-level-0] dscp 56 : 56 0 7 7 0
The configured mapping table:
26-16
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Table 26-1 “ DSCP + Conform-level
—> Service-parameter ” mapping table
DSCP
Conform
-level
Policed-
DSCP
Policed-
802.1p
Policed-L ocalprec
Policed-Drop
Precedence
0 0 0 0 0 0
8 0 8 1 1 0
16 0 16 2 2 0
18 0 16 2 2 0
24 0 24 3 3 0
26 0 24 3 3 0
32 0 32 4 4 0
34 0 32 4 4 0
40 0 40 5 5 0
46 0 40 5 5 0
48 0 48 6 6 0
56 0 56 7 7 0
26.1.23 exp
Syntax exp
exp-list : dscp-value exp-value cos-value
local-precedence-value drop-precedence
undo exp exp-list
View
Conform level view
Parameter
exp-list: Original EXP value, which can be a single value or several values, in the range of 0 to 7. For example, you can type single EXP value “2”, or EXP values “2 3 4” (space is required between values). EXP is MPLS priority of MPLS packets.
dscp-value: Modified DSCP value, in the range of 0 to 63.
exp-value: Modified EXP value, in the range of 0 to 7. EXP is MPLS priority of MPLS packets.
cos-value: Modified 802.1p priority value, in the range of 0 to 7.
26-17
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
local-precedence-value: Modified local precedence value, in the range of 0 to 7.
drop-precedence: Modified drop precedence value, in the range of 0 to 2.
Description
Use the exp command to configure the “EXP + Conform-level —> Service-parameter” mapping table of current conform level.
Use the undo exp command to restore default configuration of the “EXP +
Conform-level —> Service-parameter” mapping table.
After entering conform level view, you can configure the “EXP + Conform-level —>
Service-parameter” mapping table of the corresponding level. For example, you can enter conform level 0 view and configure the “EXP + Conform-level 0 — >
Service-parameter” mapping table.
Example
Configure the “EXP + Conform-level 0 —> Service-parameter” mapping table.
[SW8800-conform-level-0] exp 0: 0 0 0 0 0
26.1.24 local-precedence
Syntax
local-precedence cos-value0 cos-value1 cos-value2 cos-value3 cos-value4
cos-value5 cos-value6 cos-value7
undo local-precedence
View
Parameter
Conform level view
cos-value0: 802.1p priority value corresponding to Local-precedence 0, in the range of
0 to 7.
cos-value1: 802.1p priority value corresponding to Local-precedence 1, in the range of
0 to 7.
cos-value2: 802.1p priority value corresponding to Local-precedence 2, in the range of
0 to 7.
cos-value3: 802.1p priority value corresponding to Local-precedence 3, in the range of
0 to 7.
cos-value4: 802.1p priority value corresponding to Local-precedence 4, in the range of
0 to 7.
cos-value5: 802.1p priority value corresponding to Local-precedence 5, in the range of
0 to 7.
26-18
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
cos-value6: 802.1p priority value corresponding to Local-precedence 6, in the range of
0 to 7.
cos-value7: 802.1p priority value corresponding to Local-precedence 7, in the range of
0 to 7.
Description
Use the local-precedence command to configure the “Local-precedence +
Conform-level —> 802.1p priority” mapping table of current conform level.
Use the undo local-precedence command to restore default configuration of the
“Local-precedence + Conform-level —> 802.1p priority” mapping table.
After entering conform level view, you can configure the “ Local-precedence +
Conform-level —> 802.1p priority ” mapping table of the corresponding level. For example, you can enter conform level 0 view and configure the “ Local-precedence +
Conform-level 0 —> 802.1p priority “ mapping table.
Example
Configure the “Local-precedence + Conform-level 0 —> 802.1p priority” mapping table.
[SW8800-conform-level-0] local-precedence 0 1 2 3 5 5 6 7
The configured mapping table:
Table 26-2 Local-precedence + Conform-level
—> 802.1p priority ” mapping table
Local-precedence Conform-level 802.1p
0 0 0
1 0 1
2 0 2
3 0 3
4 0 5
5 0 5
6 0 6
7 0 7
26.1.25 mirrored-to
Syntax
I. Command Format Which Only Applies IP Group ACL
26-19
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
mirrored-to inbound ip-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] cpu
undo mirrored-to inbound ip-group { acl-number | acl-name } [ rule rule ]
II. Command Format Which Applies IP Group and Link Group ACL at Same time
mirrored-to inbound ip-group { acl-number | acl-name } { rule rule link-group
{ acl-number | acl-name } [ rule rule [ system-index index ] ] | link-group { acl-number
| acl-name } rule rule } cpu
undo mirrored-to inbound ip-group { acl-number | acl-name } { rule rule link-group
{ acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } rule rule }
III. Command Format Which Only Applies Link Group ACL
mirrored-to inbound link-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] cpu
undo mirrored-to inbound link-group { acl-number | acl-name } [ rule rule ]
View
Ethernet port view / port group view
Parameter
inbound: Mirrors inbound packets at the port.
ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced
ACLs. acl-number: Sequence number of ACL, ranging from 2000 to 3999. acl-name:
Name of the ACL, which must be a character string starting with an English letter (a-z or
A-Z), and without any space or quotation mark in it.
link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.
rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.
system-index index: Intra-system index of the rule, in the range of 0 to 3000. This parameter is used for trouble-shooting. User must not use this parameter during configuration.
cpu: Mirrors traffic to the CPU.
Description
Use the mirrored-to command to activate an ACL and mirror data streams to the CPU.
Use the undo mirrored-to command to remove traffic mirroring setting.
26-20
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
This configuration is only applicable to the packets which match the permitted rules in the ACL.
Related command: display qos-interface mirrored-to.
Example
Mirror the packets which match the permitted rules in the ACL 2000 to the CPU.
[SW8800-Ethernet2/1/1] mirrored-to inbound ip-group 2000 cpu
26.1.26 mirroring-group
Syntax
mirroring-group groupId { inbound | outbound } mirroring-port-list mirrored-to
monitor-port
undo mirroring-group groupId
View
System view
Parameter
groupId: mirroring group ID, in the range of 1 to 24
inbound: Monitors only the inbound packets at the port.
outbound: Monitors only the outbound packets at the port.
mirroring-port-list: Ethernet port list, including multiple Ethernet ports, in the form of
port-list = { interface_type interface_num | interface_name } &<1-8>. &<1-8> means the parameter can be typed eight times at most.
mirrored-to monitor-port: Specifies monitoring port.
Description
Use the mirroring-group command to configure a mirroring group for the port.
Use the undo mirroring-group command to remove mirroring group setting.
The switch supports multiple-to-one mirroring, that is, copying the packets at several ports to the monitoring port. For the Switch 8800, you can complete port mirroring setting by configuring mirroring groups. Each mirroring group may contain one monitoring port and several monitored ports. You can also specify the direction of the monitored packets.
The Switch 8800 supports up to 24 mirroring groups at a port.
Related command: display mirroring-group.
26-21
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Note:
The Switch 8800 supports cross-board mirroring, that is, the monitoring and monitored ports can be at different boards. z z z z
Consider these issues when configuring port mirroring: z z
For intra-board mirroring, only one monitoring port can be configured for the mirroring groups in the same direction. For example, if one mirroring group, with port A as its monitoring port, has been configured on a board to monitor those received packets, you need to choose port A as its monitoring port when configuring a second mirroring group to monitor those received packets. The same restriction applies to the mirroring group to monitor those packets sent.
For cross-board mirroring, only one monitoring port (which is on another board) can be configured for the mirroring groups in the same direction. For example, a mirroring group is configured on board 1, with port B on board 2 as its monitoring port. You must choose port B on board 1 as its monitoring port when configuring a second mirroring group in the same direction.
One mirroring group can contain eight monitored ports at most.
You can only configure eight monitored ports for all the mirroring groups in transmit group.
You can configure 24 mirroring groups in both directions in total.
One port can act as mirroring port and mirrored port at the same time for different mirroring group.
More issues for the GV48 board (LSBM1GV48DA): z z
For the mirroring (including incoming port mirroring and outgoing port mirroring) on the same GV48 board, only one monitoring port is allowed. For example, if you have configured a port mirroring group in a GV48 board, with port A as the monitoring port, then you can only choose port A as its monitoring port when configuring another port mirroring group.
For all port groups configured in the system, only one monitoring port is allowed on the same GV48 board.
Example
Configure mirroring group 1, the monitored ports are Ethernet3/1/1 to Ethernet3/1/3, and the monitoring port is Ethernet3/1/4, monitoring only inbound packets.
[SW8800] mirroring-group 1 inbound ethernet 3/1/1 ethernet 3/1/2 ethernet
3/1/3 mirrored-to ethernet 3/1/4
26.1.27 port
Syntax
26-22
3Com Switch 8800 Command Reference Guide
port interface_list
undo port interface_list
View
Port group view
Parameter
Chapter 26 QoS Commands
interface_list: list of Ethernet ports to be added to or deleted from a certain port group, expressed as interface_list= {{ interface_type interface_num | interface_name } [ to
{ interface_type interface_num | interface_name } ] }&<1-n>. interface_type is interface type, interface_num is interface number and interface_name is interface name. The interface number after keyword to must be larger than or equal to the port number before to. &<1-n>: Representing the repeatable times of parameters, 1 is the minimal and n is the maximal that the system allows.
Description
Use the port command to add the port to the port group.
Use the undo port command to delete the port from the group.
For the common interface boards except XP4, note that: z z z z
The port group members must be on the same board and only one port can be added to one port group.
The aggregated port cannot be added to the port group. If a port group member is to be aggregated, it exits from the port group automatically and the configuration of the primary port in an aggregated group overrides that of this port.
When a single port is added to a port group, its configuration is overridden by that of the port group and the ACL rule cannot be applied to the port any longer.
If there is no port in the port group, you cannot configure the QACL. If all the ports exist from the port group, the QACL of the group still exists. And this QACL is applied again when new ports are added.
Example
Add the ports Ethernet3/1/1, Ethernet3/1/2, Ethernet3/1/3 to port group 1.
[SW8800-port-group1] port Ethernet3/1/1 Ethernet3/1/2 Ethernet3/1/3
26.1.28 port-group
Syntax
port-group index
undo port-group index
View
26-23
3Com Switch 8800 Command Reference Guide
System view
Parameter
Chapter 26 QoS Commands
index : Port group index.
Description
Use the port-group command to create a port group and enter the port group view .
Use the undo port-group command to cancel a port group.
The port group index of interface cards (except XP4 card) is in the range of 1~128.
Example
Create port group 1 and enter port group view.
[SW8800] port-group 1
[SW8800-port-group1]
26.1.29 priority
Syntax
priority priority-level
undo priority
View
Ethernet port view / port group view
Parameter
priority-level: Port priority value, in the range of 0 to 7. By default, it is 0.
Description
Use the priority command to set the default local precedence value for a port.
Use the undo priority command to restore the default value of local precedence.
After receiving a packet, the switch allocates a set of service parameters to it according to a specific rule. The procedure to obtain local precedence: First obtain it according to the “CoS —>Local-precedence” mapping table. If failed, the system uses the default local precedence of the port as that for the packet.
Example
Set the defaulted local precedence value of the port Ethernet3/1/1 as 7.
[SW8800-Ethernet3/1/1] priority 7
26-24
3Com Switch 8800 Command Reference Guide
26.1.30 qos conform-level
Chapter 26 QoS Commands
Syntax
qos conform-level conform-level-value
View
System view
Parameter
conform-level conform-level-value: Conform level, in the range of 0 to 2 inclusive.
Description
Use the qos conform-level command to create a conform level and enter it.
There are three conform levels available, numbered as 0, 1 and 2. Type the conform level value and you can enter the corresponding view. In the conform level view, you can configure the “DSCP + Conform-level —> Service-parameter” mapping table, “EXP
+ Conform-level —> Service-parameter” mapping table and the “Local-precedence +
Conform-level —>802.1p” mapping table.
Example
Create the conform level 0 and enter it.
[SW8800] qos conform-level 0
[SW8800-conform-level-0]
26.1.31 qos cos-drop-precedence-map
Syntax
qos cos-drop-precedence-map
cos0-map-drop-prec cos1-map-drop-prec cos2-map-drop-prec cos3-map-drop-prec cos4-map-drop-prec cos5-map-drop-prec
cos6-map-drop-prec cos7-map-drop-prec
undo qos cos-drop-precedence-map
View
Parameter
System view
cos0-map-drop-prec: Mapping value from CoS 0 to drop precedence, in the range of 0 to 2.
cos1-map-drop-prec: Mapping value from CoS 1 to drop precedence, in the range of 0 to 2.
26-25
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
cos2-map-drop-prec: Mapping value from CoS 2 to drop precedence, in the range of 0 to 2.
cos3-map-drop-prec: Mapping value from CoS 3 to drop precedence, in the range of 0 to 2.
cos4-map-drop-prec: Mapping value from CoS 4 to drop precedence, in the range of 0 to 2.
cos5-map-drop-prec: Mapping value from CoS 5 to drop precedence, in the range of 0 to 2.
cos6-map-drop-prec: Mapping value from CoS 6 to drop precedence, in the range of 0 to 2.
cos7-map-drop-prec: Mapping value from CoS 7 to drop precedence, in the range of 0 to 2.
Description
Use the qos cos-drop-precedence-map command to configure the “CoS — >
Drop-precedence” mapping table.
Use the undo qos cos-drop-precedence-map command to restore the default values of the “CoS —> Drop-precedence” mapping table.
The system provides “CoS —> Drop-precedence” mapping table as the default value.
Table 26-3 Default “CoS
—> Drop-precedence” mapping table
CoS Value Drop-precedence
0 0
1 0
2 0
3 0
4 0
5 0
6 0
7 0
After receiving a packet, the switch allocates a set of service parameters to it according to a specific rule. The service parameters, including CoS value, local precedence and drop level, are determined according to the packet 802.1p priority value. CoS value is the packet 802.1p priority value, while local and drop precedence values are obtained according to the “CoS — > Local-precedence” mapping table and the “CoS — >
26-26
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Drop-precedence” mapping table. You can modify the CoS —> Drop-precedence mapping table using this command.
Example
Configure the “CoS —> Drop-precedence” mapping table.
[SW8800] qos cos-drop-precedence-map 2 2 1 1 1 0 0 0
Modified “CoS —> Drop-precedence” mapping table is shown as follows.
Table 26-4 Modified “CoS
—> Drop-precedence” mapping table
CoS Value Drop-precedence
0 2
1 2
2 1
3 1
4 1
5 0
6 0
7 0
26.1.32 qos cos-local-precedence-map
Syntax
qos cos-local-precedence-map
cos0-map-local-prec cos1-map-local-prec cos2-map-local-prec cos3-map-local-prec cos4-map-local-prec cos5-map-local-prec
cos6-map-local-prec cos7-map-local-prec
undo qos cos-local-precedence-map
View
System view
Parameter
cos0-map-local-prec: Mapping value from CoS 0 to local precedence, in the range of 0 to 7.
cos1-map-local-prec: Mapping value from CoS 1 to local precedence, in the range of 0 to 7.
cos2-map-local-prec: Mapping value from CoS 2 to local precedence, in the range of 0 to 7.
26-27
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
cos3-map-local-prec: Mapping value from CoS 3 to local precedence, in the range of 0 to 7.
cos4-map-local-prec: Mapping value from CoS 4 to local precedence, in the range of 0 to 7.
cos5-map-local-prec: Mapping value from CoS 5 to local precedence, in the range of 0 to 7.
cos6-map-local-prec: Mapping value from CoS 6 to local precedence, in the range of 0 to 7.
cos7-map-local-prec: Mapping value from CoS 7 to local precedence, in the range of 0 to 7.
Description
Use the qos cos-local-precedence-map command to configure the “CoS — >
Local-precedence” mapping table.
Use the undo qos cos-local-precedence-map command to restore the default values of the “CoS —> Local-precedence” mapping table.
The system provides “CoS —> Local-precedence” mapping table as the default value.
Table 26-5 Default “CoS
—> Local-precedence” mapping connection
CoS Value Local Precedence
0 2
1 0
2 1
3 3
4 4
5 5
6 6
7 7
After receiving a packet, the switch allocates a set of service parameters to it according to a specific rule. The service parameters, including CoS value, local precedence and drop level, are determined according to the packet 802.1p priority value. CoS value is the packet 802.1p priority value, while local and drop precedence values are obtained according to the “CoS — > Local-precedence” mapping table and the “CoS — >
Drop-precedence” mapping table. You can modify the “CoS —> Local-precedence” mapping table using this command.
26-28
3Com Switch 8800 Command Reference Guide
Example
Chapter 26 QoS Commands
Configure the “CoS —> Local-precedence” mapping table
[SW8800] qos cos-local-precedence-map 0 1 2 3 4 5 6 7
Configured “CoS —> Local-precedence” mapping table:
Table 26-6 Configured “CoS
—> Local-precedence” mapping table
CoS Value Local Precedence
0 0
1 1
2 2
3 3
4 4
5 5
6 6
7 7
26.1.33 queue
Syntax queue
queue-id green-min-threshhold green-max-threshhold green-max-prob
yellow-min-threshhold yellow-max-threshhold yellow-max-prob red-min-threshhold
red-max-threshhold red-max-prob exponent
undo queue queue-id
View
WRED index view
Parameter
queue-id: Outbound queue ID, in the range of 0 to 7
green-min-threshhold: Minimum queue length to trigger random green packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.
green-max-threshhold: Queue length to trigger complete green packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.
green-max-prob: Maximum drop probability for green packets, in the range of 1 to 15.
yellow-min-threshhold: Minimum queue length to trigger random yellow packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.
26-29
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
yellow-max-threshhold: Queue length to trigger complete yellow packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.
yellow-max-prob: Maximum drop probability for yellow packets, in the range of 1 to 15.
red-min-threshhold: Minimum queue length to trigger random red packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.
red-max-threshhold: Queue length to trigger complete red packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.
red-max-prob: Maximum drop probability for green packets, in the range of 1 to 15.
exponent: Weight for calculating average queue length, in the range of 1 to 15. By default, it is 9.
Description
Use the queue command to configure parameters for a WRED index.
Use the undo queue command to restore the default parameters for the WRED index.
The switch provides four sets of default WRED parameters, respectively numbered as
0, 1, 2 and 3. Each set includes 80 parameters, 10 parameters for each of the eight queues. The ten parameters are green-min-threshhold, yellow-min-threshhold,
red-min-threshhold, green-max-threshhold, yellow-max-threshhold,
red-max-threshhold, green-max-prob, yellow-max-prob, red-max-prob and exponent.
You can use the command to modify the parameters of a specific WRED index.
Example
Configure parameters for WRED 0: queue-id is 7; green-min-threshold is 150;
green-max-threshold is 500; green-max-prob is 5; yellow-min-threshold is 100;
yellow-max-threshold is 150; yellow-max-prob is 10; red-min-threshold is 50;
red-max-threshold is 100; red-max-prob is 15; exponent is 10.
[SW8800-wred-0] queue 7 150 500 5 100 150 10 50 100 15 10
26.1.34 queue-scheduler
Syntax
queue-scheduler wrr { group1 { queue-id queue-weight } &<1-8> | group2 { queue-id
queue-weight } &<1-8> }*
undo queue-scheduler [ queue-id ] &<1-8>
View
Ethernet port view / port group view
Parameter
wrr: Weighted round robin algorithm.
26-30
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
group1: Adds the queue to WRR priority group 1.
group2: Adds the queue to WRR priority group 2.
queue-id: Outbound queue ID, in the range of 0 to 7.
queue-weight: Queue weight, in the range of 1 to 255.
&<1-8>: You can input the queue-id and queue-weight parameters eight times at most.
Description
Use the queue-scheduler command to choose queue scheduling algorithm and parameters.
Use the undo queue-scheduler command to restore the default setting, SP algorithm.
By default, SP algorithm is selected for all outbound queues at a port.
The switch supports eight outbound queues at a port, with different scheduling algorithms for them. You can configure these queues into different scheduling groups:
SP group, WRR priority group 1 and group 2. For example, you can set queues 6 and 7 into SP group, queues 0, 1 and 2 into WRR priority group 1 and queues 3, 4 and 5 into
WRR priority group 2. Then a queue will be selected respectively for theses three groups according to their own scheduling algorithms. Then these three selected queues will scheduled in SP algorithm.
The queue weight is based on bandwidth. For example, if queues 0, 1 and 2 belong to
WRR priority group 1 and their weight is respectively as 20, 20 and 30, then in process, the proportion of their respective weight in the whole bandwidth is 20:20:30
Example
Set queues 0 to 5 in WRR algorithm, queues 0, 1 and 2 belong to group 1, with weight respectively as 20, 20 and 30; queues 3, 4 and 5 belong to group 2, with weight respectively as 20, 20 and 40. Set queues 6 and 7 in SP algorithm, the default one.
[SW8800-Ethernet3/1/1] queue-scheduler wrr group1 0 20 1 20 2 30 group2 3 20
4 20 5 40
26.1.35 reset traffic-statistic
Syntax
reset traffic-statistic inbound { { ip-group { acl-number | acl-name } rule rule |
link-group { acl-number | acl-name } }* | { ip-group { acl-number | acl-name } |
link-group { acl-number | acl-name } rule rule }* | ip-group { acl-number | acl-name }
rule rule link-group { acl-number | acl-name } rule rule }
View
Ethernet port view / port group view
26-31
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 26 QoS Commands
inbound: Clears statistics of the inbound packets at the port.
ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced
ACLs. acl-number: Sequence number of ACL, ranging from 2000 to 3999. acl-name:
Name of the ACL, which must be a character string starting with an English letter (a-z or
A-Z), and without any space or quotation mark in it.
link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.
rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.
Description
Use the reset traffic-statistic command to clear statistics of all traffic or traffic of a specific ACL.
Table 26-7 Comparison between two statistics clearing commands
Command
reset acl counter
Description
Clears ACL statistics. This command is for the ACLs that perform filtering and traffic classification to the packets processed by software. The cases for software to import
ACLs include ACL importing for routing policy, ACL importing for registered user control. The ACL ID available here is in the range of 2000 to 3999.
reset traffic-statistic
Clear traffic statistics. This command is for the ACLs sent to hardware for packet filtering and traffic classification.
This command usually clears the statistics collected with the traffic-statistic command.
Example
Clear traffic statistics of the ACL 4000.
[SW8800-Ethernet3/1/1] reset traffic-statistic inbound link-group 4000
26.1.36 traffic-limit
Syntax
I. Command format which only applies IP group ACL
In Ethernet port view or port group view:
26-32
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
traffic-limit inbound ip-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] [ tc-index index ] cir cbs ebs [ pir ] [ conform { { remark-cos |
remark-drop-priority }* | remark-policed-service } ] [ exceed { forward | drop } ]
undo traffic-limit inbound ip-group { acl-number | acl-name } [ rule rule ]
In VLAN view:
traffic-limit inbound ip-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] traffic-index index ] [ conform { { remark-cos | remark-policed-service } ]
[ exceed { forward | drop } ] slot slotid
undo traffic-limit inbound ip-group { acl-number | acl-name } [ rule rule ] slot slotid
II. Command format which applies IP group and link group ACL at the same time
In Ethernet port view or port group view:
traffic-limit inbound ip-group { acl-number | acl-name } { rule rule link-group
{ acl-number | acl-name } [ rule rule [ system-index index ] ] | link-group { acl-number
| acl-name } rule rule } [ tc-index index ] cir cbs ebs [ pir ] [ conform { { remark-cos |
remark-drop-priority }* | remark-policed-service } ] [ exceed { forward | drop } ]
undo traffic-limit inbound ip-group { acl-number | acl-name } { rule rule link-group
{ acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } rule rule }
III. Command format which only applies link group ACL
In Ethernet port view or port group view:
traffic-limit inbound link-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] [ tc-index index ] cir cbs ebs [ pir ] [ conform { { remark-cos |
remark-drop-priority }* | remark-policed-service } ] [ exceed { forward | drop } ]
undo traffic-limit inbound link-group { acl-number | acl-name } [ rule rule ]
View
Ethernet port view / port group view / VLAN view
Parameter
inbound: Sets traffic limitation for the inbound packets at the port.
ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced
ACLs. acl-number : Sequence number of ACL, ranging from 2000 to 3999. acl-name:
Name of the ACL, which must be a character string starting with an English letter (a-z or
A-Z), and without any space or quotation mark in it.
link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.
26-33
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.
system-index index: Intra-system index of the rule, in the range of 0 to 3000. This parameter is used for trouble-shooting. User must not use this parameter during configuration.
tc-index index: Index value of traffic conditioner, ranging from 0 to 12288. If you configured the same index value to different traffic rules during traffic policy configuration, then the sum of these traffics is restricted by the configured traffic policy parameter. For example, configure cir of the traffic that matches rule 1 to 10 kbps, and that of the rule 2 to 10 kbps too; and both of the rules have the same index value of traffic conditioner, then the sum of the average rates of rule 1 and rule 2 is restricted to
10 kbps.
Note: z z
The parameters of traffic policy must be the same if you configure the same tc-index for different traffic; otherwise the system prompts you for the wrong configuration.
For traffic policing configuration over the port group, all ports in the group shares the same bandwidth, that is, the traffic parameters you define take effect on all ports in the group.
cir: Committed information rate, in units of kbps and the range of 1 to 34120000.
cbs: Committed burst size, in units of byte and the range of 0 to 500000.
ebs: Excess burst size, in units of byte and the range of 0 to 500000.
pir: Peak information rate, in units of kbps and the range of 1 to 34120000.
remark-cos: Sets new 802.1p priority value for the packet according to its conform level and local precedence.
remark-drop-priority: Sets drop precedence value for the packet according to its conform level.
remark-policed-service: Sets new service parameters for the packet according to its conform level and DSCP value.
exceed: Optional parameter to set action for the case when traffic threshold is exceeded. z z forward: Forwards the packet. drop: Drops the packet.
traffic-index index: Traffic index.
slot slotid: Slot number of a service processor card.
26-34
3Com Switch 8800 Command Reference Guide
Description
Chapter 26 QoS Commands
Use the traffic-limit command to activate an ACL and set traffic limitation to take different actions for the packets within and beyond the preset traffic threshold.
Use the undo traffic-limit command to remove traffic limitation setting.
This command is only applicable to the packets which match the permitted rules in the
ACL.
It is required that CIR is less than PIR and CBS is less than or equal to CBS.
For the same traffic, you cannot select both the remark-cos and
remark-policed-service keywords, or both the remark-drop-priority and
remark-policed-service keywords.
Before selecting the remark-policed-service keyword, you must make sure you have configured the DSCP + Conform-Level —> Service parameter mapping table. Before selecting the remark-cos keyword, you must ensure you have configured the
Local-precedence + Conform-level—> 802.1p priority mapping table. For details about the two mapping tables, see the qos conform-level, dscp and local-precedence commands.
Note: z z
The interface cards support the command syntax in Ethernet port view; while the service processor cards (LSBM1NATB cards in the context of this document) support the command syntax in VLAN view.
Before executing the traffic-limit command on a service processor card, you must first configure traffic redirection in Ethernet port view to redirect Layer 3 packets of a specific VLAN to the service processor card.
Example
Set traffic limitation for the packets match the permitted rules in the ACL 4000: CIR is
200 kbps, CBS is 2000 bytes, EBS is 2500 bytes, drop the excessive packets.
[SW8800] traffic-limit inbound link-group 4000 200 2000 2500 conform remark-policed-service exceed drop
26.1.37 traffic-params
Syntax
traffic-params traffic-index cir commited-info-rate cbs commited-base-size ebs
exceed-base-size [ pir peak-info-rate ]
26-35
3Com Switch 8800 Command Reference Guide
View
System view
Chapter 26 QoS Commands
Parameter
Description
Use the traffic-params command to set the traffic parameters required by the
traffic-limit command used on the service processor card.
The requirements for setting these parameters are: cir<pir and cbs<=ebs.
Related command: display traffic-params.
Example
traffic-index: Traffic parameter index, in the range of 0 to 173.
cir commited-info-rate: Committed average information rate in Kbps.
cbs commited-burst-size: Committed burst size in bytes.
ebs exceed-burst-size: Maximum burst size in bytes.
pir peak-info-rate: Peak information rate in Kbps.
Set the traffic parameter index to 10, committed average information rate to 8192 Kbps, committed burst size to 2000 bytes, and the maximum bust size to 2500 bytes.
[SW8800] traffic-params 10 cir 8192 cbs 2000 ebs 2500
26.1.38 traffic-priority
Syntax
I. Command Format Which Only Applies IP Group ACL
In Ethernet port view or port group view:
traffic-priority inbound ip-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] { auto | remark-policed-service { trust-dscp | dscp dscp-value | untrusted
dscp dscp-value cos cos-value local-precedence local-precedence drop-priority
drop-level } }
undo traffic-priority inbound ip-group { acl-number | acl-name } [ rule rule ]
In VLAN view:
traffic-priority inbound ip-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] { auto | remark-policed-service { trust-dscp | dscp dscp-value | untrusted
dscp dscp-value cos cos-value local-precedence local-precedence drop-priority
drop-level } } slot slotid
undo traffic-priority inbound ip-group { acl-number | acl-name } [ rule rule ] slot
slotid
26-36
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
II. Command Format Which Applies IP Group and Link Group ACL at Same time
In Ethernet port view or port group view:
traffic-priority inbound ip-group { acl-number | acl-name } { rule rule link-group
{ acl-number | acl-name } [ rule rule [ system-index index ] ] | link-group { acl-number
| acl-name } rule rule } { auto | remark-policed-service { trust-dscp | dscp
dscp-value | untrusted dscp dscp-value cos cos-value local-precedence
local-precedence drop-priority drop-level } }
undo traffic-priority inbound ip-group { acl-number | acl-name } { rule rule
link-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name }
rule rule }
III. Command Format Which Only Applies Link Group ACL
In Ethernet port view or port group view:
traffic-priority inbound link-group { acl-number | acl-name } [ rule rule
[ system-index index ] ] { auto | remark-policed-service { trust-dscp | dscp
dscp-value | untrusted dscp dscp-value cos cos-value local-precedence
local-precedence drop-priority drop-level } }
undo traffic-priority inbound link-group { acl-number | acl-name } [ rule rule ]
View
Ethernet port view / port group view / VLAN view
Parameter
inbound: Sets traffic priority for inbounds packets at the port.
ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced
ACLs. acl-number: Sequence number of ACL, ranging from 2000 to 3999. acl-name:
Name of the ACL, which must be a character string starting with an English letter (a-z or
A-Z), and without any space or quotation mark in it.
link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.
rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.
system-index index: Intra-system index of the rule, in the range of 0 to 3000. This parameter is used for trouble-shooting. User must not use this parameter during configuration.
auto: Chooses the service parameters allocated automatically by the switch.
remark-policed-service: Reallocates service parameters.
26-37
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
trust-dscp: Reallocates service parameters according to packet DSCP values.
dscp dscp-value: Reallocates service parameters according to user’s DSCP values or
EXP values. For IP packets, dscp-value is the specified DSCP priority value (six bits in the packet header) and in the range of 0 to 63; for MPLS packets, other than that the
dscp-value stands for their DSCP priority value, the three high-order bits of the value represent the EXP flag field. Set the EXP value when defining the dscp-value.
untrusted dscp dscp-value cos cos-value local-precedence local-precedence
drop-priority drop-level: Customizes a set of service parameters. For IP packets,
dscp-value is the specified DSCP priority value (six bits in the packet header) and in the range of 0 to 63; for MPLS packets, other than that the dscp-value stands for their
DSCP priority value, the three high-order bits of the value represent the EXP flag field.
Set the EXP value when defining the dscp-value; local-precedence is local precedence, in number (ranging 0 to 7) or name; cos-value is 802.1p priority, in number (ranging 0 to
7) or name; drop-level is drop level, in number (ranging 0 to 2) or name.
slot slotid: Slot number of a service processor card.
Description
Use the traffic-priority command to activate an ACL and choose a set of service parameters for the matched traffic (only available to permitted ACL rules).
Use the undo traffic-priority command to remove service parameter setting.
The system can set service parameters for the matched traffic in one of following modes:
1) Employ the service parameters automatically allocated by the switch. Upon receiving a packet, the switch allocates a set of service parameters for it according to a specific rule. To choose this mode, you should select the auto keyword in this command.
2) Choose service parameters from the “DSCP + Conform-Level — >
Service-parameter” mapping table according to packet DSCP value and conform level. To choose this mode, you should select the remark-policed-service
trust-dscp keyword in this command.
3) Choose service parameters from the “ DSCP + Conform-Level — >
Service-parameter ” mapping table or “ EXP + Conform-Level — >
Service-parameter ” mapping table according to user’s DSCP or EXP value and packet conform level. To choose this mode, you should select the
remark-policed-service dscp dscp-value parameter in this command.
4) Customize a set of service parameters. To choose this mode, you should select the remark-policed-service untrusted dscp dscp-value cos cos-value
local-precedence local-precedence drop-priority drop-level parameter in this command.
26-38
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Note: z z z z
The interface cards support the command syntax in Ethernet port view; while the service processor cards (LSBM1NATB cards in the context of this document) support the command syntax in VLAN view.
Before executing the traffic-priority command on a service processor card, you must first configure traffic redirection in Ethernet port view to redirect Layer 3 packets of a specific VLAN to the service processor card.
The “DSCP + Conform-Level —> Service-parameter” mapping table and “ EXP +
Conform-Level —> Service-parameter ” mapping table here is that for the conform level 0.
Before selecting the second or third mode, you should make sure that you have configured the “DSCP + Conform-Level —> Service-parameter” mapping table and
“ EXP + Conform-Level —> Service-parameter ” mapping table. For more information about this mapping table, see the qos conform-level, dscp and exp commands.
Related command: display qos-interface traffic-priority.
Example
Choose auto service parameters for the packets which match the permitted rules in the
ACL 4000.
[SW8800-Ethernet5/1/2] traffic-priority inbound link-group 4000 auto
26.1.39 traffic-redirect
Syntax
I. Command Format Which Only Applies IP Group ACL
In Ethernet port view or port group view:
traffic-redirect inbound ip-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] { cpu | interface { interface-name | interface-type interface-num }
destination-vlan { l2-vpn | l3-vpn } | next-hop ip-addr1 [ ip-addr2 ] | slot slotid vlanid }
undo traffic-redirect inbound ip-group { acl-number | acl-name } [ rule rule ]
In VLAN view:
traffic-redirect inbound ip-group { acl-number | acl-name } [ rule rule [ system-index
index ] ] { cpu | next-hop ip-addr1 [ip-addr2] } slot slotid
undo traffic-redirect inbound ip-group { acl-number | acl-name } [ rule rule ] slot
slotid
26-39
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
II. Command Format Which Applies IP Group and Link Group ACL at Same time
In Ethernet port view or port group view:
traffic-redirect inbound ip-group { acl-number | acl-name } { rule rule link-group
{ acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } [ rule rule
[ system-index index ] } { cpu | interface { interface-name | interface-type
interface-num } destination-vlan { l2-vpn | l3-vpn } | next-hop ip-addr1 [ ip-addr2 ] |
slot slotid vlanid }
undo traffic-redirect inbound ip-group { acl-number | acl-name } { rule rule
link-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name }
rule rule } or undo traffic-redirect inbound link-group { acl-number | acl-name } { rule rule
ip-group { acl-number | acl-name } | ip-group { acl-number | acl-name } rule rule }
III. Command Format Which Only Applies Link Group ACL
In Ethernet port view or port group view:
traffic-redirect inbound link-group { acl-number | acl-name } [ rule rule
[ system-index index ] ] { cpu | interface { interface-name | interface-type
interface-num } destination-vlan l3-vpn | next-hop ip-addr1 [ ip-addr2 ] }
undo traffic-redirect inbound link-group { acl-number | acl-name } [ rule rule ]
View
Ethernet port view / port group view / VLAN view
Parameter
inbound: Sets traffic redirect for inbounds packets at the port.
ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced
ACLs. acl-number : Sequence number of ACL, ranging from 2000 to 3999. acl-name:
Name of the ACL, which must be a character string starting (1 to 32 characters) with an
English letter (a-z or A-Z), and without any space or quotation mark in it.
link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string (1 to 32 characters) started with an English letter (a-z or A-Z), and without any space or quotation mark in it.
rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.
system-index index: Intra-system index of the rule, in the range of 0 to 3000. This parameter is used for trouble-shooting. User must not use this parameter during configuration.
cpu: Redirects packets to the CPU.
26-40
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
interface { interface-name | interface-type interface-num } destination-vlan { l2-vpn |
l3-vpn : Redirects packets to the specified Ethernet port. interface-num and
interface-type together can define a port. interface-name is equivalent to interface-num plus interface-type. destination-vlan { l2-vpn | l3-vpn } is use to redirect MPLS packets.
l2-vpn means that MPLS l2-vpn packets are allowed to pass, and l3-vpn means that
MPLS l3-vpn packets are allowed to pass. destination-vlan must be the VLAN where the destination port belongs to.
next-hop ip-addr1 [ ip-addr2 ]: Redirects packets to the specified IP address. You can define two IP addresses at a stoke, but the first one is with higher priority. That is, the system redirects packets to the second IP address only if the first one is unreachable.
slot slotid: Redirects packets to the specified service processor card.
vlanid: Specifies the VLAN of the packets to be redirected.
Description
Use the traffic-redirect command to activate an ACL and configure traffic redirection.
Use the undo traffic-redirect command to remove traffic redirection setting.
You can redirect packets to the CPU, a specified Ethernet port, a specified IP address or a specified slot.
Note: z z z z z
The Interface cards support the command syntax in Ethernet port view; while the service processor cards (LSBM1NATB cards in the context of this document) support the command syntax in VLAN view.
Before executing the traffic-redirect command on a service processor card, you must first configure traffic redirection in Ethernet port view to redirect Layer 3 packets of a specific VLAN to the service processor card.
Traffic redirection setting is only available for the permitted rules in the ACL.
The packet redirected to the CPU cannot be forwarded normally.
You can achieve policy route by selecting the next-hop keyword in this command.
Related command: display qos-interface traffic-redirect.
Example
Configure traffic redirection on the interface cards for packets that match the permit rules in ACL 4000: packets are redirected to the port Ethernet5/1/1.the destination-vlan
ID is 4094, L3 VPN packet is permitted..
[SW8800-Ethernet5/1/2] traffic-redirect inbound link-group 4000 interface ethernet5/1/1 4094 l3-vpn
26-41
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Configure traffic redirection on a service processor card for packets that match the permit rules in ACL 3000.
1) Redirect the packets of VLAN4 that match the permit rules in ACL 3000 to a service processor card in Ethernet port view.
[SW8800-Ethernet5/1/2] traffic-redirect inbound ip-group 3000 slot 2 4
2) Redirect the packets that are distributed to the service processor card to the next hop 202.119.85.1 and 202.119.95.1 in VLAN view.
[SW8800-vlan4] traffic-redirect inbound ip-group 3000 next-hop 202.119.85.1
202.119.95.1 slot 2
26.1.40 traffic-shape
Syntax
traffic-shape [ queue queue-id ] max-rate burst-size
undo traffic-shape [ queue queue-id ]
View
Ethernet port view / port group view
Parameter
queue queue-id: Specifies queue ID, in the range of 0 to 7.
max-rate: Maximum traffic rate at the port, in units of Kpbs.
burst-size: Burst size, in units of KB.
Description
Use the traffic-shape command to enable traffic shaping.
Use the undo traffic-shape command to cancel traffic shaping.
The switch supports both shaping traffic based on port (shaping all traffic at the port) and shaping the traffic in a specified queue at the port. You can achieve the former mode by specifying no queue ID or the latter mode by specifying queue ID.
Example
Shape the traffic in the outbound queue 2 at the port: maximum rate 500 Kbps, burst size 12 Kbytes
[SW8800-Ethernet3/1/1] traffic-shape queue 2 500 12
26.1.41 traffic-statistic
Syntax
I. Command Format Which Only Applies IP Group ACL
26-42
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
traffic-statistic inbound ip-group { acl-number | acl-name } [ rule rule
[ system-index index ] ] [ tc-index index ]
undo traffic-statistic inbound ip-group { acl-number | acl-name } [ rule rule ]
II. Command Format Which Only Applies Link Group ACL
traffic-statistic inbound link-group { acl-number | acl-name } [ rule rule
[ system-index index ] ] [ tc-index index ]
undo traffic-statistic inbound link-group { acl-number | acl-name } [ rule rule ]
View
Ethernet port view / port group view
Parameter
inbound: Sets traffic statistics for inbound packets at the port.
ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced
ACLs. acl-number: Sequence number of ACL, ranging from 2000 to 3999. acl-name:
Name of the ACL, which must be a character string starting with an English letter (a-z or
A-Z), and without any space or quotation mark in it.
link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.
rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.
system-index index: Intra-system index of the rule, in the range of 0 to 3000. this parameter is used for trouble-shooting. User must not use this parameter during configuration.
tc-index index: Index value of traffic conditioner, ranging from 0 to 12288. If you configured the same index value to different traffic rules during traffic statistic configuration, then the statistic of these traffics is performed.
Description
Use the traffic-statistic command to activate an ACL and run traffic statistics (only available for the permitted rules in the ACL).
Use the undo traffic-statistic command to cancel traffic statistics.
The traffic-statistic command only counts the hardware matching times in packet forwarding. You can view the statistics using the display qos-interface
traffic-statistic commands.
26-43
3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands
Note:
The system counts the traffic on all ports in the group after you use the traffic-statistic command in port group view.
Related command: display qos-interface traffic-statistic.
Example
Run traffic statistics for the packets which match the permitted rules in the ACL 2000.
[SW8800-Ethernet3/1/1] traffic-statistic inbound ip-group 2000
26.1.42 wred
Syntax
wred wred-index
undo wred wred-index
View
System view
Parameter
wred-index: WRED index, in the range of 0 to 3.
Description
Use the wred command to create a WRED index view and enter it.
Use the undo wred command to restore the default WRED parameters.
The switch provides four sets of default WRED parameters, respectively numbered as
0, 1, 2 and 3. The ten parameters for a port are green-min-threshhold,
yellow-min-threshhold, red-min-threshhold, green-max-threshhold,
yellow-max-threshhold, red-max-threshhold, green-max-prob, yellow-max-prob,
red-max-prob and exponent. Red, yellow and green packets respectively refer to those with drop precedent levels 2, 1 and 0.
Example
Create WRED 0 view and enter it.
[SW8800] wred 0
[SW8800-wred-0]
26-44
3Com Switch 8800 Command Reference Guide Chapter 27 ACL Control Commands to Control Login U sers
Chapter 27 ACL Control Commands to Control
Login Users
27.1 The ACL Control Commands to Control Login Users
27.1.1 acl
Syntax
View
User interface view
Parameter
acl-number: Number identifier of basic number-based ACLs and advanced ACLs, ranging from 2000 to 3999.
inbound: Performs ACL control to the users who access the local switch using
TELNET.
outbound: Performs ACL control to the users who access other switches from the local switch using TELNET.
Description
Use the acl command to reference ACL and implement the ACL control to the TELNET users.
Use the undo acl command to remove the control to the TELNET users.
The ACLs referenced by this command can only be the basic number-based ACLs and advanced ACLs.
Example
acl acl-number { inbound | outbound }
undo acl { inbound | outbound }
Perform ACL control to the users who access the local switch using TELNET (basic
ACL 2000 has been defined).
[SW8800] user-interface vty 0 4
[SW8800-user-interface-vty0-4] acl 2000 inbound
27-1
3Com Switch 8800 Command Reference Guide
27.1.2 snmp-agent community
Chapter 27 ACL Control Commands to Control Login U sers
Syntax
snmp-agent community { read | write } community-name [ mib-view view-name ]
[ acl acl-number ]
undo snmp-agent community community-name
View
System view
Parameter
Description
Use the snmp-agent community command to set the community access name, permit the access to the switch using SNMP, and reference the ACL to perform ACL control to the network management users by acl-number.
Use the undo snmp-agent community command to remove the setting of community access name.
By default, SNMPV1 and SNMPV2C use community name to perform access.
Example
read: Indicates that this community name has the read-only right within the specified view.
write: Indicates that this community name has the read-write right within the specified view.
community-name: Community name, consisting of 1 to 32 characters.
mib-view: Set the MIB view name which can be accessed by the community name.
view-name: MIB view name, consisting of 1 to 32 characters.
acl acl-number: The number identifier of basic number-based ACLs, ranging from 2000 to 2999.
Set the community name as “3Com”, permit the user to perform read-only access by using this community name, and reference the ACL 2000 to perform ACL control to the network management users (basic ACL 2000 has already been defined ).
[SW8800] snmp-agent community read 3Com acl 2000
27.1.3 snmp-agent group
Syntax
snmp-agent group { v1 | v2c } group-name [ read-view read-view ] [ write-view
write-view ] [ notify-view notify-view ] [ acl acl-number ]
27-2
3Com Switch 8800 Command Reference Guide Chapter 27 ACL Control Commands to Control Login U sers
undo snmp-agent group { v1 | v2c } group-name
snmp-agent group v3 group-name [ authentication | privacy ] [ read-view
read-view ] [ write-view write-view ] [ notify-view notify-view ] [ acl acl-number ]
undo snmp-agent group v3 group-name [ authentication | privacy ]
View
System view
Parameter
v1: V 1 security mode.
v2c: V 2 security mode.
v3: V 3 security mode.
group-name: Group name, ranging from 1 to 32 bytes.
authentication: With this parameter, the system will authenticate SNMP data without encrypting it.
privacy: Authenticates and encrypts packets.
read-view: Sets read-only view.
read-view: Name of read-only view, ranging from 1 to 32 bytes.
write-view: Permits to set read-write view.
write-view: Name of read-write view, ranging from 1 to 32 bytes.
notify-view: Sets notify view.
notify-view: Name of notify view, ranging from 1 to 32 bytes.
acl acl-number: Number identifier of basic number-based ACLs, ranging from 2000 to
2999.
Description
Use the snmp-agent group command to configure a new SNMP group and reference the ACL to perform ACL control to the network management users by acl acl-number.
Use the undo snmp-agent group command to remove a specified SNMP group.
Example
Create a SNMP group “3Com”, and reference the ACL 2001 to perform ACL control to the network management users (basic ACL 2001 has already been defined).
[SW8800] snmp-agent group v1 3Com acl 2001
27-3
3Com Switch 8800 Command Reference Guide
27.1.4 snmp-agent usm-user
Chapter 27 ACL Control Commands to Control Login U sers
Syntax
snmp-agent usm-user { v1 | v2c } user-name group-name [ acl acl-number ]
undo snmp-agent usm-user { v1 | v2c } user-name group-name
snmp-agent usm-user v3 user-name group-name [ authentication-mode { md5 |
sha } auth-password ] [ privacy des56 priv-password ] [ acl acl-number ]
undo snmp-agent usm-user v3 user-name group-name { local | engineid
engineid-string }
View
System view
Parameter
v1: V 1 security mode.
v2c: V 2 security mode.
v3: V 3 security mode.
user-name: User name, ranging from 1 to 32 bytes.
group-name: Corresponding group name of the user, ranging from 1 to 32 bytes.
authentication-mode: Specifies the security level to “to be authenticated”
md5: Specifies the authentication protocol as HMAC-MD5-96.
sha: Specifies the authentication protocol as HMAC-SHA-96.
auth-password: Authentication password, character string, ranging from 1 to 64 bytes.
privacy: Specifies the security level as encryption.
des56: Specifies the DES encryption protocol.
priv-password: Encryption password, character string, ranging from 1 to 64 bytes.
acl acl-number: Number identifier of basic number-based ACLs, ranging from 2000 to
2999.
local: Local entity user.
engineid: Specifies the engine ID related to the user.
engineid-string: Engine ID character string.
Description
Use the snmp-agent usm-user command to add a new user to an SNMP group, and reference the ACL to perform ACL control to the network management users by acl
acl-number.
27-4
3Com Switch 8800 Command Reference Guide Chapter 27 ACL Control Commands to Control Login U sers
Use the undo snmp-agent usm-user command to remove the user from the related
SNMP group as well as the configuration of the ACL control of the user.
Example
Add a user “3Com” to the SNMP group “3Comgroup”. Specify the security level to “to be authenticated”, the authentication protocol to HMAC-MD5-96 and the authentication password to “SW8800”, and reference the ACL 2002 to perform ACL control to the network management users (basic ACL 2002 has already been defined).
[SW8800] snmp-agent usm-user v3 3Com 3Comgroup authentication-mode md5 SW8800 acl 2002
27-5
3Com Switch 8800 Command Reference Guide Chapter 28 MPLS Basic Configuration Commands
Chapter 28 MPLS Basic Configuration Commands
28.1 MPLS Basic Configuration Commands
28.1.1 debugging mpls lspm
Syntax
debugging mpls lspm { agent | all | event | ftn | interface | packet | policy | process
| vpn }
undo debugging mpls lspm { agent | all | event | ftn | interface | packet | policy |
process | vpn }
View
User view
Parameter
Description
Use the debugging mpls lspm command to enable various LSPM debugging.
Use the undo debugging mpls lspm command to disable the corresponding debugging.
By default, all debugging is disabled.
This command is used to the debug MPLS LSPM. As running the debugging will affect the performance of the Switch 8800, you are advised to use the command with caution.
Example
agent: Enables all MPLS Agent debugging.
all: Enables all MPLS-related debugging.
event: Enables debugging for various MPLS events.
ftn: Enables MPLS ftn debugging.
interface: Enables the MPLS debugging on the message sending/receiving interface.
packet: Enables MPLS packet debugging.
policy: Enables MPLS policy debugging.
process: Enables debugging of MPLS internal processing.
vpn: Enables all MPLS VPN debugging.
Enable all MPLS VPN debugging.
29-1
3Com Switch 8800 Command Reference Guide
<SW8800> debugging mpls lspm vpn
Chapter 28 MPLS Basic Configuration Commands
28.1.2 display mpls interface
Syntax display mpls interface
View
Any view
Parameter
None
Description
Use the display mpls interface command to view the information of all MPLS-enabled interfaces.
Related command: display mpls lsp, display mpls statistics and display static-lsp.
Example
Display the information of all MPLS-enabled interface.
[SW8800] display mpls interface
28.1.3 display mpls lsp
Syntax
display mpls lsp [ include text | verbose ]
View
Any view
Parameter
include text: Displays the matching string including the specified information.
verbose: Displays detailed information.
Description
Use the display mpls lsp command to display LSP information.
By default, the display mpls lsp command displays all LSP information.
Related command: display mpls interface, display mpls statistics and display
static-lsp.
29-2
3Com Switch 8800 Command Reference Guide
Example
Chapter 28 MPLS Basic Configuration Commands
Display all the LSPs including “-----------”.
[SW8800-Vlan-interface2000] display mpls lsp include ----------------
--------------------------------------------------------------------------
LSP Information: Ldp Lsp
NO FEC NEXTHOP I/O-LABEL OUT-INTERFACE
1 10.110.1.0/24 10.110.1.1 3/----- -------
2 10.10.10.0/24 10.10.10.1 3/----- -------
3 10.100.20.20/32 127.0.0.1 3/----- -------
4 5.5.5.5/32 127.0.0.1 3/----- -------
5 10.100.20.0/24 10.100.20.20 3/----- -------
6 80.80.80.80/32 127.0.0.1 3/----- -------
7 70.70.70.70/32 200.5.5.4 -----/3 Vlan2000
TOTAL: 7 Record(s) Found.
28.1.4 display mpls static-lsp
Syntax
display mpls static-lsp [ include text | verbose ]
View
Any view
Parameter
Description
Use the display mpls static-lsp command to view the information of one static LSP or all.
Related command: display mpls interface, display mpls lsp and display mpls
statistics.
Example
include text: Displays the matching string including the specified information .
verbose: Displays detailed information.
Display the static LSP information.
[SW8800-mpls]display mpls static-lsp
29-3
3Com Switch 8800 Command Reference Guide Chapter 28 MPLS Basic Configuration Commands
--------------------------------------------------------------------
LSP Information: Static Lsp
--------------------------------------------------------------------
NO FEC NEXTHOP I/O-LABEL OUT-INTERFACE
1 1.1.1.1/32 200.5.5.4 -----/1000 Vlan2000
TOTAL: 1 Record(s) Found.
28.1.5 display mpls statistics
Syntax
display mpls statistics { interface { Vlan-interface | all } | lsp { lsp-Index | all |
lsp-name }}
View
Any view
Parameter
interface { Vlan-interface | all }: Specifies one interface or all interfaces.
lsp { lsp-Index | all | lsp-name }: Specifies one label switching path or all label switching paths. Where lsp-Index is an LSP index, lsp-name is an LSP name, and all represents all LSPs.
Description
Use the display mpls statistics command to view the MPLS statistics about one specific VLAN virtual interface/LSP or all interfaces/LSPs.
Related command: display mpls interface and display mpls lsp.
Example
Display MPLS statistics about all LSPs
<SW8800>display mpls statistics lsp all
Building the information...
LSP Index/LSP Name : 10240/dynamic-lsp
There is no information of LSP incoming segment!
The statistics of lsp Out :
OutSegment octets of LSP is: 162876
OutSegment packets of LSP is: 2943
OutSegment errors of LSP is: 0
OutSegment discard packets of LSP is: 0
29-4
3Com Switch 8800 Command Reference Guide
28.1.6 lsp-trigger
Chapter 28 MPLS Basic Configuration Commands
Syntax
lsp-trigger { all | ip-prefix ip-prefix }
undo lsp-trigger { all | ip-prefix ip-prefix }
View
MPLS view
Parameter
all: Triggers LSPs at any route.
ip-prefix: Triggers LSPs only at the routes matching the specified IP prefix list.
ip-prefix: IP prefix list, ranging from 1 to 19.
Description
Use the lsp-trigger command to configure topology-triggered LSP creation policy.
Use the undo lsp-trigger command to remove the filtering conditions specified by parameters and disable LSP trigger creation at any route.
By default, all kinds of routing protocols are filtered out.
Note:
If no route-triggered policy is configured, LSPs can be triggered at all host routes with
32-bit masks.
If you import an IP-prefix rule without contents, LSPs can be triggered at all routes.
Related command: ip ip-prefix.
Example
Triggers LSPs at all routes.
[SW8800-mpls] lsp-trigger all
28.1.7 mpls
Syntax mpls undo mpls
29-5
3Com Switch 8800 Command Reference Guide
View
System view, VLAN interface view
Parameter
None
Chapter 28 MPLS Basic Configuration Commands
Description
In system, input the mpls command for an initial use to enable MPLS function globally and enter MPLS view. Later you can go straight to the MPLS view with this command.
Use the mpls command in VLAN interface view to enable MPLS on the VLAN interface.
Use the undo mpls command to disable MPLS function in the system view or on the
VLAN interface.
By default, you cannot enter this view.
After executing the command, you can enter MPLS view. Only after you enter MPLS view, can you configure other MPLS commands.
You must configure the mpls lsr-id command first and then you can enter MPLS view.
Example
Enter MPLS view from system view.
[SW8800] mpls
[SW8800-mpls]
Execute the mpls command in interface view.
[SW8800] vlan 201
[SW8800-Vlan201] port gigabitethernet 2/1/1
[SW8800-Vlan201] quit
[SW8800] interface vlan-interface 201
[SW8800-vlan-interface201] mpls
% Info: MPLS in the interface is starting, please wait...OK
28.1.8 mpls lsr-id
Syntax
mpls lsr-id ip-address
undo mpls lsr-id
View
System view
29-6
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 28 MPLS Basic Configuration Commands
ip-address: LSR ID, in the format of IP address, used to identify an LSR.
Description
Use the mpls lsr-id command to configure an LSR ID.
Use the undo mpls lsr-id command to delete an LSR ID.
By default, no LSR has an ID.
You must configure the mpls lsr-id command first and then you can use the other
MPLS-related commands.
An LSR ID is in the format of IP address, thus a loopback address is recommended.
Related command: display mpls interface.
Example
Set the LSR ID to 202.17.41.246.
[SW8800] mpls lsr-id 202.17.41.246
% Info: Mpls lsr-id changed.
28.1.9 snmp-agent trap enable ldp
Syntax snmp-agent trap enable ldp undo snmp-agent trap enable ldp
View
System view
Parameter
None
Description
Use the snmp-agent trap enable ldp command to enable Trap function in MPLS LDP creation.
Use the undo snmp-agent trap enable ldp command to disable Trap function in
MPLS LDP creation.
By default, Trap function is not enabled during MPLS LDP creation.
Example
Enable the Trap function during MPLS LDP creation.
[SW8800] snmp-agent trap enable ldp
29-7
3Com Switch 8800 Command Reference Guide
28.1.10 snmp-agent trap enable lsp
Chapter 28 MPLS Basic Configuration Commands
Syntax snmp-agent trap enable lsp undo snmp-agent trap enable lsp
View
System view
Parameter
None
Description
Use the snmp-agent trap enable lsp command to enable Trap function in MPLS LSP creation.
Use the undo snmp-agent trap enable lsp command to disable Trap function in
MPLS LSP creation.
By default, Trap function is disabled during MPLS LSP creation.
Example
Enable the Trap function during MPLS LSP creation.
[SW8800] snmp-agent trap enable lsp
28.1.11 static-lsp egress
Syntax
static-lsp egress lsp-name incoming-interface interface-type interface-num in-label
in-label-value
undo static-lsp egress lsp-name
View
Parameter
MPLS view
lsp-name: LSP name
interface-type Interface-num: Interface type, interface number.
in-label-value: Value of inbound label, ranging 3 (implicit empty label) and from 16 to
1023.
29-8
3Com Switch 8800 Command Reference Guide
Description
Chapter 28 MPLS Basic Configuration Commands
Use the static-lsp egress command to configure a static LSP for an egress LSR.
Use the undo static-lsp egress command to delete an LSP for an egress LSR.
Related command: static-lsp ingress, static-lsp transit and debugging mpls.
Example
Configure a static LSP named bj-sh on the egress LSR.
[SW8800-mpls] static-lsp egress bj-sh incoming-interface vlan-interface 201 in-label 233
28.1.12 static-lsp ingress
Syntax
static-lsp ingress lsp-name destination dest-addr { addr-mask | mask-length }
nexthop next-hop-addr out-label out-label-value
undo static-lsp ingress lsp-name
View
MPLS view
Parameter
lsp-name: LSP name
dest-addr: Destination IP address.
addr-mask: Destination IP address mask.
mask-length: Mask length of destination IP address
next-hop-addr: Next-hop address.
out-label-value: Value of outbound label, ranging 3 (implicit empty label) and from 16 to
1023.
Description
Use the static-lsp ingress command to configure a static LSP for an ingress LSR.
Use the undo static-lsp ingress command to delete an LSP for an ingress LSR.
Related command: static-lsp egress, static-lsp transit and debugging mpls.
Example
Configure a static LSP for the ingress LSR heading for the destination address
202.25.38.1.
[SW8800-mpls] static-lsp ingress bj-sh destination 202.25.38.1 24 nexthop
202.55.25.33 out-label 237
29-9
3Com Switch 8800 Command Reference Guide
28.1.13 static-lsp transit
Chapter 28 MPLS Basic Configuration Commands
Syntax
static-lsp transit lsp-name incoming-interface interface-type interface-num in-label
in-label-value nexthop next-hop-addr out-label out-label-value
undo static-lsp transit lsp-name
View
MPLS view
Parameter
lsp-name: LSP name
interface-type Interface-num: Interface type, interface number.
next-hop-addr: Next-hop address.
in-label-value: Value of inbound label, ranging from 16 to 1023.
out-label-value: Value of outbound label, ranging 3 (implicit empty label) and from 16 to
1023.
Description
Use the static-lsp transit command to configure a static LSP for a transit LSR.
Use the undo static-lsp transit command to delete an LSP for a transit LSR.
Related command: static-lsp egress and static-lsp ingress.
Example
Configure a static LSP for the VLAN201 virtual interface on a transit LSR, with an inbound label of 123 and an outbound label of 253.
[SW8800-mpls] static-lsp transit bj-sh incoming-interface vlan-interface 201 in-label 123 nexthop 202.34.114.7 out-label 253
28.2 LDP Configuration Commands
28.2.1 debugging mpls ldp
Syntax
debugging mpls ldp { all | main | advertisement | session | pdu | notification |
remote } [ interface interface-type interface-num]
undo debugging mpls ldp { all | main | advertisement | session | pdu | notification
| remote } [ interface interface-type interface-num ]
29-10
3Com Switch 8800 Command Reference Guide
View
User view
Chapter 28 MPLS Basic Configuration Commands
Parameter
Description
Use the debugging ldp command to enable the debugging of various LDP messages.
Use the undo debugging ldp command to disable the debugging of various LDP messages.
You are advised to use the debugging command cautiously.
Example
all: Displays all debugging information related to LDP.
main: Displays the debugging information of LDP main tasks.
advertisement: Displays the debugging information during LDP advertising.
session: Displays debugging information during LDP session processing.
pdu: Displays the debugging information during PDU packet processing.
notification: Displays the debugging information during notification.
remote: Displays debugging information of all remote peers.
interface-type interface-num: Interface type, interface number.
Enable LDP debugging.
<SW8800> debugging mpls ldp all
28.2.2 display mpls ldp
Syntax display mpls ldp
View
Any view
Parameter
None
Description
Use the display mpls ldp command to display LDP and LSR information.
By default, it displays information of LDP and LSR.
Related command: mpls ldp, mpls ldp hops-count, mpls ldp loop-detection and
mpls ldp path-vectors.
29-11
3Com Switch 8800 Command Reference Guide
Example
Chapter 28 MPLS Basic Configuration Commands
Display LDP and LSR information.
[SW8800] display mpls ldp
Label Distribution Protocol: V1
LSR ID: 10.10.10.10 LSR Status: Active
Loop Detection: Disabled.
Path Vector Limit: 32 Hop Count Limit: 32
DU Readvertisement: On Request Retry: Off
Label Retention Mode: Liberal DU Explicit Request: Off
Label Distribution Control Mode: Ordered.
28.2.3 display mpls ldp buffer-info
Syntax display mpls ldp buffer-info
View
Any view
Parameter
None
Description
Use the display mpls ldp buffer-info command to view the LDP buffer information.
Example
Display the LDP buffer information.
[SW8800] display mpls ldp buffer-info
---------------------------------------------------------------
Buffer-Name Buffer-ID Buffer-Size Total-Count Free-Count
---------------------------------------------------------------
ENTITY 0 292 199 195
LOCAL-IF 1 36 200 196
PEER-IF 2 40 201 195
PDU 3 204 249 249
ADJACENCY 4 56 201 198
PEER-INF 5 116 201 198
SESSION 6 176 201 198
US-BLK 7 264 1052 1028
DS-BLK 8 240 1052 1042
FEC 9 40 1042 1032
US-LIST 10 16 1052 1028
29-12
3Com Switch 8800 Command Reference Guide Chapter 28 MPLS Basic Configuration Commands
TRIG-BLK 11 56 2076 2071
LABEL-RANGE 12 20 198 198
CR-TUNNEL 13 124 128 128
ER-HOP 14 40 4096 4096
IF-MSG 15 24 9999 9999
-----------------------------------------------------------------
Buffer no error.
28.2.4 display mpls ldp interface
Syntax
display mpls ldp interface [ | begin text | exclude text | include text ]
View
Any view
Parameter
|: Displays matched outputs.
begin: Displays the outputs matching the regular expression from the first line.
exclude: Displays the outputs excluding those lines matching the regular expression.
include: Displays only those outputs matching the regular expression.
text: Contents of the regular expression.
Description
Use the display mpls ldp interface command to display information of the interface with LDP enabled and in the UP state.
Related command: mpls ldp enable and display mpls ldp session.
Example
Display the information of the interface with LDP enabled and in the UP state.
[SW8800-Ethernet3/1/0] display mpls ldp interface
28.2.5 display mpls ldp lsp
Syntax
display mpls ldp lsp [ | begin text | exclude text | include text ]
View
Any view
29-13
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 28 MPLS Basic Configuration Commands
|: Displays matched outputs.
begin: Displays the outputs matching the regular expression from the first line.
exclude: Displays the outputs excluding those lines matching the regular expression.
include: Displays only those outputs matching the regular expression.
text: Contents of the regular expression.
Description
Use the display mpls ldp lsp command to view relevant LSP information created via
LDP.
Related command: display mpls lsp.
Example
Display LSP.
[SW8800-Ethernet3/1/0] display mpls ldp lsp
28.2.6 display mpls ldp peer
Syntax
display mpls ldp peer [ | begin text | exclude text | include text ]
View
Any view
Parameter
Description
Use the display mpls ldp peer command to view peer information.
By default, it displays all the peer information.
Example
|: Displays matched outputs.
begin: Displays the outputs matching the regular expression from the first line.
exclude: Displays the outputs excluding those lines matching the regular expression.
include: Displays only those outputs matching the regular expression.
text: Contents of the regular expression.
Display peer information.
[SW8800] display mpls ldp peer
29-14
3Com Switch 8800 Command Reference Guide
28.2.7 display mpls ldp remote
Chapter 28 MPLS Basic Configuration Commands
Syntax
display mpls ldp remote [ | begin text | exclude text | include text ]
View
Any view
Parameter
Description
Use the display mpls ldp remote command to view the configured remote peer information.
By default, you can view all the remote peer configurations.
Related command: mpls ldp remote-peer and remote-ip.
Example
|: Displays matched outputs.
begin: Displays the outputs matching the regular expression from the first line.
exclude: Displays the outputs excluding those lines matching the regular expression.
include: Displays only those outputs matching the regular expression.
text: Contents of the regular expression.
Display the remote-peer configuration.
[SW8800] display mpls ldp remote
28.2.8 display mpls ldp session
Syntax
display mpls ldp session [ | begin text | exclude text | include text ]
View
Any view
Parameter
|: Displays matched outputs.
begin: Displays the outputs matching the regular expression from the first line.
exclude: Displays the outputs excluding those lines matching the regular expression.
include: Displays only those outputs matching the regular expression.
text: Contents of the regular expression.
29-15
3Com Switch 8800 Command Reference Guide
Description
Chapter 28 MPLS Basic Configuration Commands
Use the display mpls ldp session command to know the session between peer entities.
By default, it displays the session between peer entities.
Related command: mpls ldp enable.
Example
Display the session between peer entities.
[SW8800] display mpls ldp session
Local LDP ID: 1.1.1.9:5; Peer LDP ID: 4.4.4.9:0
TCP Connection: 1.1.1.9 <- 4.4.4.9
Session State: Operational
Session Role: Passive
Session existed time:
Basic Hello Packets Sent/Received: 85/67
KeepAlive Packets Sent/Received: 1/1
Negotiated Keepalive hold time: 60 Peer PV Limit: 0
LDP Basic Discovery Source((A) means active):
Inter vlan113(A) Inter vlan112
Inter vlan111
28.2.9 mpls ldp
Syntax mpls ldp undo mpls ldp
View
System view
Parameter
None
Description
Use the mpls ldp command to enable LDP.
Use the undo mpls ldp command to disable LDP.
By default, LDP is disabled.
Before enabling LDP, you must enable MPLS and configure LSR ID first.
Related command: mpls lsr-id.
29-16
3Com Switch 8800 Command Reference Guide
Example
Enable LDP.
[SW8800] mpls ldp
Chapter 28 MPLS Basic Configuration Commands
28.2.10 mpls ldp enable
Syntax mpls ldp enable mpls ldp disable
View
VLAN interface view
Parameter
None
Description
Use the mpls ldp enable command to enable LDP on a VLAN interface.
Use the mpls ldp disable command to disable LDP on a VLAN interface.
By default, LDP is disabled on an interface.
To enable an interface, you must enable LDP first. After LDP is enabled on an interface, peer discovery and session creation proceed.
Example
Enable LDP on a VLAN interface.
[SW8800] vlan 201
[SW8800-Vlan201] port gigabitethernet 2/1/1
[SW8800-Vlan201] quit
[SW8800] interface vlan-interface 201
[SW8800-Vlan-interface201] mpls
[SW8800-vlan-interface201] mpls ldp enable
28.2.11 mpls ldp hops-count
Syntax
mpls ldp hops-count hop-number
undo mpls ldp hops-count
View
System view
29-17
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 28 MPLS Basic Configuration Commands
hop-number: Maximum hop count of loop detection, ranging from 1 to 32.
Description
Use the mpls ldp hops-count command to set the maximum hop count of loop detection.
Use the undo mpls ldp hops-count command to restore the default value.
By default, the maximum hop count of loop detection is 32.
This command should be configured before LDP is enabled on all interfaces. Its value, which depends on actual networking, determines the loop detection speed during LSP creation
Related command: mpls ldp loop-detection and mpls ldp path-vector.
Example
Set the maximum hop count of loop detection to 22.
[SW8800] mpls ldp hops-count 22
Set the maximum hop count of loop detection to its default value 32.
[SW8800] undo mpls ldp hops-count
28.2.12 mpls ldp loop-detect
Syntax mpls ldp loop-detect undo mpls ldp loop-detect
View
System view
Parameter
None
Description
Use the mpls ldp loop-detect command to enable loop detection.
Use the undo mpls ldp loop-detect command to disable loop detection.
By default, loop detection is not enabled in the system.
This command should be configured before LDP is enabled on any interface.
Related command: mpls ldp hops-count and mpls ldp path-vectors.
29-18
3Com Switch 8800 Command Reference Guide
Example
Enable loop detection.
[SW8800] mpls ldp loop-detect
Disable loop detection.
[SW8800] undo mpls ldp loop-detect
Chapter 28 MPLS Basic Configuration Commands
28.2.13 mpls ldp password
Syntax
mpls ldp password [ cipher | simple ] password
undo mpls ldp password
View
VLAN interface view, remote-peer view
Parameter
cipher: The password in configuration file will be displayed in cipher-text.
simple: The password in configuration file will be displayed in plain-text.
password: User password.
Description
Use the mpls ldp password command to configure MD5 authentication password for the LDP. After this configuration, the MD5 authentication is adopted for LDP on the interface.
Use the undo mpls ldp password command to delete the configuration.
Example
Configure the LDP authentication mode as MD5, plain-text password 123.
[SW8800-vlan-interface201] mpls ldp password simple 123
28.2.14 mpls ldp path-vectors
Syntax
mpls ldp path-vectors pv-number
undo mpls ldp path-vectors
View
System view
29-19
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 28 MPLS Basic Configuration Commands
pv-number: Maximum value of path vector, ranging from 1 to 32.
Description
Use the mpls ldp path-vectors command to set the maximum value of path vector.
Use the undo mpls ldp path-vectors command to restore the default maximum value of path vector.
By default, pv-number is 32.
This command should be configured before LDP is enabled on all interfaces. Its value, which depends on actual networking situation, determines the loop detection speed during LSP creation
Related command: mpls ldp loop-detection and mps ldp hops-count.
Example
Set the maximum value of path vector to 23
[SW8800] mpls ldp path-vectors 23
Restore the default maximum value of path vector.
[SW8800] undo mpls ldp path-vectors
28.2.15 mpls ldp remote-peer
Syntax
mpls ldp remote-peer Index
undo mpls ldp remote-peer Index
View
System view or remote-peer view
Parameter
Index: Index that identifies a remote peer entity, ranging from 0 to 99.
Description
Use the mpls ldp remote-peer command to create a remote-peer entity and enter remote-peer view.
Use the undo mpls ldp remote-peer command to delete a remote-peer entity.
You can use this command to create a remote-peer and accordingly create a remote session.
Related command: remote-ip.
29-20
3Com Switch 8800 Command Reference Guide
Example
Chapter 28 MPLS Basic Configuration Commands
Create a remote-peer.
[SW8800] mpls ldp remote-peer 22
[SW8800-mpls-remote22]
Delete a remote-peer.
[SW8800-mpls-remote22] undo mpls ldp remote-peer 22
[SW8800]
28.2.16 mpls ldp reset-session
Syntax
mpls ldp reset-session peer-address
View
VLAN interface view
Parameter
peer-address: Corresponding remote LDP Peer address (in IP address format).
Description
Use the mpls ldp reset-session command to reset a specified session on an interface.
After LDP is configured on an interface and LDP session is created, this command can be used to reset a specific session on the interface. You only need to specify the address of the peer corresponding to the session to be reset.
Related command: mpls ldp and mpls ldp enable.
Example
Reset a specified session on the VLAN201 virtual interface.
[SW8800-Vlan-interface201] mpls ldp reset-session 10.1.1.1
28.2.17 mpls ldp timer
Syntax
In VLAN interface view:
mpls ldp timer { session-hold session-holdtime | hello hello-holdtime }
undo mpls ldp timer { session-hold | hello }
In remote-peer view:
29-21
3Com Switch 8800 Command Reference Guide Chapter 28 MPLS Basic Configuration Commands
mpls ldp timer { targeted-session-hold | targeted-hello } { holdtime holdtime |
interval interval }
undo mpls ldp timer { targeted-session-hold | targeted-hello } { holdtime |
interval }
View
VLAN interface view, remote-peer view
Parameter
hello hello-holdtime: Hold time (i.e. timeout time) of the Hello hold timer, in the range of
6~65535 (seconds). By default it is 15 seconds.
session-hold session-holdtime: Time interval for Session hold timer to send a session packet, in the range of 1~65535 (seconds). By default it is 60 seconds.
targeted-hello: Hold time (i.e. timeout time) of the Targeted-hello hold timer, in the range of 1~65535 (seconds). By default holdtime is 45 seconds and interval is 13 seconds.
targeted-session-hold: Time interval for Targeted-session hold timer to send a session packet, in the range of 1~65535 (seconds). By default holdtime is 60 seconds and interval is 24 seconds.
holdtime: Time interval for the hold timer.
interval: Time interval to send a keepalive packet.
Description
Use the mpls ldp timer command to set the hold time for the Hello hold timer and
Session hold timer.
Use the undo mpls ldp timer command to restore the default values.
The timeout of the Hello hold timer means that the adjacency with the peer goes down; the timeout of the Session hold timer means the session with the peer goes down.
targeted-hello interval refers to the time interval to send a targeted-hello packet. It cannot be greater than (targeted-hello holdtime)
× 0.3, so the maximum value is
65535
× 0.3 = 19660.5.
targeted-session-hold interval refers to the time interval to send a keepalive packet. It cannot be greater than (targeted-session-hold holdtime)
× 0.4.
In general, the time interval to send a hello/keepalive packet is one third of the hold time of Hello/Session hold timer.
You can usually use the default values if not in special cases, Note that you must reset the session to validate new values if you do modify these timer parameters.
Related command: mpls ldp and mpls ldp enable.
29-22
3Com Switch 8800 Command Reference Guide
Example
Chapter 28 MPLS Basic Configuration Commands
Modify the hold time of the Hello timer to 30 seconds.
[SW8800-Vlan-interface201] mpls ldp timer hello 30
28.2.18 mpls ldp transport-ip
Syntax
mpls ldp transport-ip { interface | ip-address }
undo mpls ldp transport-ip
View
VLAN interface
Parameter
interface: Sets the IP address of the current interface as the transport address.
ip-address: Sets the IP address as the transport address.
Description
Use the mpls ldp transport-ip command to configure an LDP transport address.
Use the undo mpls ldp transport-ip command to restore the default LDP transport address.
By default, LSR ID is set as a transport address.
When there are multiple directly-connected and MPLS LDP-enabled links between two
LSR neighbors, all these links must be configured with the same transport address (it is recommended to adopt the default LSR ID as the transport address). Otherwise, the system may be unable to set up a steady LDP session.
For a remote-peer, the transport address cannot be configured and is fixed to the LSR
ID.
By default, an LSR ID is the address of some loopback interface and the remote peer can route to this address for a session. For a local peer, the address of the local interface or the Router ID of LSR can be adopted as its transport address.
Example
Set the address of the current interface as a transport address.
[Quidwa-Vlan-interface201] mpls ldp transport-ip interface
Set the address of another interface as a transport address.
[SW8800-Vlan-interface201] mpls ldp transport-ip 10.1.11.2
29-23
3Com Switch 8800 Command Reference Guide
28.2.19 remote-ip
Chapter 28 MPLS Basic Configuration Commands
Syntax
remote-ip remoteip
View
remote-peer view
Parameter
remoteip: IP address of the remote peer.
Description
Use the remote-ip command to configure a remote-IP address. The address should be the LSR ID of the remote LSR. As remote peers adopt LSR ID as their transport addresses, the last two remote peers use the LSR ID as their transport addresses for creating TCP connection.
Related command: mpls ldp remote-peer.
Example
Configure the address of remote-peer.
[SW8800] mpls ldp remote-peer 12
[SW8800-mpls-remote12] remote-ip 192.168.1.1
29-24
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Chapter 29 BGP/MPLS VPN Configuration
Commands
29.1.1 aggregate
Syntax
aggregate address mask [ as-set | attribute-policy route-policy-name |
detail-suppressed | origin-policy route-policy-name | suppress-policy
route-policy-name ]*
undo aggregate address mask [ as-set | attribute-policy route-policy-name |
detail-suppressed | origin-policy route-policy-name | suppress-policy
route-policy-name ]*
View
VPN-instance subaddress family view
Parameter
address: IP address of an aggregated route, in dotted decimal format.
mask: Network mask of an aggregated route, in dotted decimal format.
as-set: Generates routes with AS sets.
detail-suppressed: Advertises only aggregated routes.
suppress-policy route-policy-name: Suppresses advertisement of some selected specific routes.
origin-policy route-policy-name: Selects source route for aggregation.
attribute-policy route-policy-name: Sets the attributes of an aggregated route.
Description
Use the aggregate command to create an aggregation entry in the BGP routing table of
VPN instance.
Use the undo aggregate command to disable this function.
By default, route aggregation is not enabled.
The function of the keywords involved in the above commands is shown in the following table:
29-1
3Com Switch 8800 Command Reference Guide
Table 29-1 Keywords function
Chapter 29 BGP/MPLS VPN Configuration Commands
Keyword
as-set
Function
By setting this keyword, you can create an aggregated route whose AS path contains the information of all the aggregation routes. This keyword is not recommended when aggregating many AS paths because frequent changes of the specific route may result in routing oscillation.
detail-suppressed
This keyword suppresses advertisement of all the specific routes, but not of the aggregated routes. Using the peer
filter-policy command, you can suppress some specific routes.
suppress-policy
origin-policy
This keyword enables the creation of an aggregate route but disables the advertising of the specified routes. Using the
if-match clause in the route-policy command, you can choose to suppress advertisement of some specific routes.
Using this command, you can only choose the specific routes matching the Route-policy to create aggregated route.
attribute-policy
Using this keyword, you can set the attributes of the aggregation route. The peer route-policy command can also enables you to complete the same setting.
Example
Create an aggregation entry in the BGP routing table of VPN instance.
[SW8800-bgp-af-vpn-instance] aggregate 192.213.0.0 255.255.0.0
29.1.2 apply mpls-label
Syntax apply mpls-label undo apply mpls-label
View
Route-policy view
Parameter
None
Description
Use the apply mpls-label command to configure the system to assign MPLS labels to the public network routes which meet the routing policy filter conditions.
Use the undo apply mpls-label command to cancel this configuration.
By default, the public network routes carry no labels.
29-2
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Related command: if-match mpls-label.
Example
Define an apply clause to assign labels to routes meeting the routing policy filter condition.
[SW8800-route-policy] apply mpls-label
29.1.3 debugging bgp
Syntax
debugging bgp { all | event | normal | { keepalive | mp-update | open | packet |
route-refresh | update } [ receive | send ] [ verbose ] }
undo debugging bgp { all | event | normal | keepalive | mp-update | open | packet |
route-refresh | update }
View
User view
Parameter
all: Enables all types of BGP debugging.
event: Enables BGP event debugging.
normal: Enables BGP common function debugging.
keepalive: Enables BGP Keepalive packet debugging.
mp-update: Enables multi-protocol BGP Update packet debugging.
open: Enables BGP Open packet debugging.
packet: Enables BGP packet debugging.
route-refresh: Enables BGP Route-Refresh packet debugging.
update: Enables BGP Update packet debugging.
receive: Displays receive information.
send: Displays send information.
verbose: Displays detailed information.
Description
Use the debugging bgp command to enable BGP debugging..
Use the undo debugging bgp command to disable BGP debugging.
Caution should be taken in deciding to enable BGP debugging, since debugging affects system performance. Remember to disable the debugging when it is completed.
29-3
3Com Switch 8800 Command Reference Guide
Example
Chapter 29 BGP/MPLS VPN Configuration Commands
Enable the debugging on the detailed information about BGP Keepalive packets.
<SW8800> debugging bgp keepalive verbose
29.1.4 display bgp routing-table label
Syntax display bgp routing-table label
View
Any view
Parameter
None
Description
Use the display bgp routing-table label command to view the routing and label information in the BGP routing table.
For common IPv4 routes that carries no label, null is displayed for the label. When the
display bgp routing-table address [ mask ] command is used, if the route carries a label, the label will also be displayed.
Example
View the BGP routing information.
<SW8800> display bgp routing-table label
Flags: - valid ^ - active I - internal
D - damped H - history S - aggregate suppressed
In/out
Dest/Mask Next-Hop Label
--------------------------------------------------------------
#^ 9.0.0.1/32 0.0.0.0 1024/-
View a specific route entry in BGP routing table.
<SW8800> display bgp routing-table 9.0.0.1
BGP routing table entry information of 9.0.0.1/32
Age : 00:00:32
From : local
State : valid, sourced, active,
Nexthop : 0.0.0.0
Origin : INC
As-path : (null)
Med : 1563
29-4
3Com Switch 8800 Command Reference Guide
In/Out label : 1024/-
Chapter 29 BGP/MPLS VPN Configuration Commands
29.1.5 default local-preference
Syntax
default local-preference value
undo default local-preference
View
VPNv4 subaddress family view
Parameter
value: Value of the local precedence, ranging from 0 to 4294967295. A greater value enjoys higher precedence. The default local precedence is 100.
Description
Use the default local-preference command to configure the local precedence for BGP routing in VPN.
Use the undo default local-preference command to restore the default configuration.
The value of the local precedence is advertised between IBGP peers and you can affect the BGP routing in VPN by changing the precedence.
Example
Set the local precedence to be 180, so that the system-advertised routing information will be preferred.
[SW8800-bgp-af-vpn] default local-preference 180
29.1.6 default med
Syntax
default med med-value
undo default med
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
med-value: MED value, ranging from 0 to 4294967295. The default value is 0.
Description
Use the default med command to configure the MED value of the system.
29-5
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Use the undo default med command to restore the default value.
MED attributes, switched between autonomous system (AS), is an external measurement for routes and does not leave AS once entering it. The route with smaller
MED value will be selected as the external one for AS when other conditions hold.
Example
The routers RTA and RTB belong to AS100 and the router RTC belongs to AS200. RTC associates with RTA and RTB. Set the MED value of RTA 25. This makes the RTC prefer the route sent by RTB.
[SW8800-bgp-af-vpn-instance] default med 25
29.1.7 description
Syntax
description vpn-instance-description
undo description
View
VPN-instance view
Parameter
vpn-instance-description: Specifies the description of a specified VPN instance.
Description
Use the description command to configure description for a specified VPN instance.
Use the undo description command to remove the description of this VPN instance.
Example
Display the VPN description.
[SW8800-vpn-vpna] description 3Com
29.1.8 display bgp vpnv4
Syntax
display bgp vpnv4 { all | route-distinguisher rd-value | vpn-instance
vpn-instance-name } { group [ group-name ] | network | peer [ [ peer-address ]
verbose ] | routing-table [ options ] }
View
Any view
29-6
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 29 BGP/MPLS VPN Configuration Commands
all: Displays all the VPNv4 routings.
route-distinguisher rd-value: Displays the information related to RD.
vpn-instance vpn-instance-name: Displays the information related to VPN instance.
group: Displays the information of a neighbor peer group.
network: Displays the advertised routing information.
peer: Displays the peer information.
verbose: Displays detailed peer information.
routing-table: Displays routing information.
options: Configures to view the routing information.
Description
Use the display bgp vpnv4 command to view the VPN address in BGP table.
Example
Display all the BGP VPNv4 routing tables.
[SW8800] display bgp vpnv4 all routing-table
Flags: - valid ^ - active I - internal
D - damped H - history S - aggregate suppressed
In/out As
Dest/mask Next-hop Med Local-pref label path
Route Distinguisher:1.1.1.1:1 (VPN instance:v1)
#^ 1.0.0.0 0.0.0.0
Routes total: 1
-/1024
29.1.9 display ip routing-table vpn-instance
Syntax
display ip routing-table vpn-instance vpn-instance-name [ [ ip-address ] | [ verbose ]
statistics ]
View
Any view
Parameter
vpn-instance-name: Name assigned to VPN-instance.
ip-address: Displays information of the a specified address.
statistics: Displays statistics of routes.
verbose: Displays detailed information.
29-7
3Com Switch 8800 Command Reference Guide
Description
Chapter 29 BGP/MPLS VPN Configuration Commands
Use the display ip routing-table vpn-instance command to view the specified information in the IP routing table of vpn-instance.
Example
Display the IP routing table associated with the VPN-instance.
<PEA>disp ip routing-table vpn-instance vpna-ce1
vpna-ce1 Route Information
Routing Table: vpna-ce1 Route-Distinguisher: 100:1
Destination/Mask Protocol Pre Cost Nexthop Interface
20.20.20.0/24 BGP 256 0 40.40.40.40 Vlan-interface24
40.40.40.0/24 DIRECT 0
40.40.40.10/32 DIRECT 0
0 40.40.40.10 Vlan-interface24
0 127.0.0.1 InLoopBack0
80.80.80.0/24 BGP 256 0 40.40.40.40 Vlan-interface24
200.200.200.0/24 BGP 256 0 40.40.40.40 Vlan-interface24
VPN Routing Table: Route-Distinguisher: 100:2
2.2.2.2 20.20.20.0/24 BGP 256 0
InLoopBack0
30.30.30.0/24 BGP 256 0 2.2.2.2
InLoopBack0
29.1.10 display ip vpn-instance
Syntax
display ip vpn-instance [ vpn-instance-name | verbose ]
View
Any view
Parameter
Description
Use the display ip vpn-instance command to view the information related to
VPN-instance, such as RD, description, and interfaces of the VPN instance.
Example
vpn-instance-name: Name assigned to VPN-instance.
verbose: Displays detailed information.
Display the information about VPN-instance VPN 1.
[SW8800] display ip vpn-instance vpn1
VPN-Instance : vpn1
29-8
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
No description
Route-Distinguisher : 100:6
Interfaces :
Vlan-interface1100
29.1.11 display mpls l3vpn-lsp
Syntax
display mpls l3vpn-lsp [ vpn-instance vpn-instance-name ] [ transit | egress |
ingress ] [ include text | verbose ]
View
Any view
Parameter
Description
Use the display mpls l3vpn-lsp command to view the information of L3VPN LSPs.
Example
transit: LSP for device P.
egress: LSP of egress VPN.
ingress: LSP of ingress VPN.
vpn-instance: Specifies the name of VPN routing/forwarding VPN-instance
include text: Only matches the string including the specified information.
verbose: Displays detailed information.
Display the information of all the MPLS L3VPN LSPs of P device.
<SW8800>display mpls l3vpn-lsp transit
--------------------------------------------------------------------
LSP Information: L3vpn Transit Lsp
--------------------------------------------------------------------
TOTAL: 0 Record(s) Found.
Display the information of MPLS L3VPN LSPs including the text 1024.
[SW8800] display mpls l3vpn-lsp include 1024
--------------------------------------------------------------------
LSP Information: L3vpn Ingress Lsp
--------------------------------------------------------------------
TOTAL: 0 Record(s) Found.
--------------------------------------------------------------------
LSP Information: L3vpn Egress Lsp
--------------------------------------------------------------------
29-9
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
NO VRFNAME INNER-LABEL NEXTHOP OUT-INTERFACE
1 vpn1 1024 0.0.0.0 InLoop0
TOTAL: 1 Record(s) Found.
--------------------------------------------------------------------
LSP Information: L3vpn Transit Lsp
--------------------------------------------------------------------
TOTAL: 0 Record(s) Found.
29.1.12 display rip vpn-instance
Syntax
display rip vpn-instance vpn-instance-name
View
Any view
Parameter
vpn-instance vpn-instance-name: Specifies a VPN instance name.
Description
Use the display rip vpn-instance command to view the configuration related to VPN instance of RIP.
Example
View the specified VPN instance configuration of RIP.
[SW8800] disp rip vpn vpn1
RIP is running
private net VPN-Instance: vpn1
Checkzero is on Default cost : 1
Summary is on Preference : 100
Period update timer : 30
Timeout timer : 180
Garbage-collection timer : 120
No peer router
Network :
192.168.0.0
29.1.13 domain-id
Syntax
domain-id { id-number | id-addr }
undo domain-id
29-10
3Com Switch 8800 Command Reference Guide
View
OSPF protocol view
Chapter 29 BGP/MPLS VPN Configuration Commands
Parameter
id-number: Domain ID for a VPN instance, an integer in the range of 0 to 4294967295.
By default, it is 0.
id-addr: IP address format of domain ID for a VPN instance. By default, it is 0.0.0.0.
Description
Use the domain-id command to specify domain ID for a VPN instance.
Use the undo domain-id command to restore the default domain ID.
For standard BGP/OSPF interoperability, when BGP routes are imported to OSPF at
PE, their original OSPF attributes cannot be restored. As these BGP VPN IP routes are issued to CE as ASE LSA (type-5 LSA), OSPF cannot distinguish them from the routes imported from other route domains. In order to distinguish external routes from OSPF internal routes, it is required to restore the attributes of BGP routes when they are imported to OSPF at the remote end. To achieve this goal, we can configure a domain
ID for each OSPF domain. A domain ID is attached to a BGP/VPN route when an
OSPF route is imported into BGP/VPN for transmission over BGP/VPN routes. Then when BGP routes are imported to the peer PE, LAS values are filled in according to the extended community attributes. If the received BGP VPN IP routes have the same domain ID, they are from the same VPN instance route.
By default, domain ID is 0.
Caution:
The specified domain ID will not take effect until the reset ospf command is executed.
Example
Set domain ID 100 to OSPF process 100.
[SW8800-ospf-100] domain-id 100
[SW8800-ospf-100] domain-id 0.0.0.100
29.1.14 filter-policy export
Syntax
filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
29-11
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]
View
VPNv4 subaddress family view, VPN instance subaddress family view
Parameter
acl-number: ACL number, ranging from 2000 to 3999, matching the destination address of routing.
ip-prefix-name: Name of IP prefix to match the destination of routing information.
protocol: Specifies the routing protocol whose routing information will be filtered. You can specify one of the following protocols: direct, static, isis, ospf, ospf-ase, ospf-nssa, or rip. If you specify ospf, ospf-ase, or ospf-nssa, the OSPF process ID is needed.
Description
Use the filter-policy export command to configure to filter routing information redistribute by a certain protocol. Only the filtered routing information can be advertised.
Use the undo filter-policy export command to cancel the configuration.
By default, the redistribute routing will not be filtered.
Related command: filter-policy import.
Example
Define that only the routes that can pass the filtering of ACL 3 can be received by BGP.
[SW8800-bgp-af-vpn-instance] filter-policy 3 export
29.1.15 filter-policy import
Syntax
filter-policy [ ip-prefix ip-prefix-name ] gateway ip-prefix-name import
undo filter-policy [ ip-prefix ip-prefix-name ] gateway ip-prefix-name import
filter-policy { acl-number | ip-prefix ip-prefix-name } import
undo filter-policy { acl-number | ip-prefix ip-prefix-name } import
View
VPNv4 subaddress family view, VPN instance subaddress family view
Parameter
acl-number: ACL number, ranging from 2000 to 3999 to match the destination address of routing.
ip-prefix ip-prefix-name: Name of IP prefix list to match destination of routing.
29-12
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
gateway ip-prefix-name: Name of the IP prefix list for the neighboring routers whose routing information will be filtered.
Description
Use the filter-policy gateway import command to filter the information imported from specified routers.
Use the undo filter-policy gateway import command to cancel the setting.
Use the filter-policy import command to set the filtering conditions to filter routing information.
Use the undo filter-policy import command to cancel the setting on filtering conditions.
By default, no filtering is performed to the received information.
Related command: filter-policy export.
Example
Define a filtering rule for receiving routing information: Only the routing information matching the IP prefix ACL P1 can it be received by VPN.
[SW8800-bgp-af-vpn-instance] filter-policy ip-prefix p1 import
29.1.16 group syntax
group group-name [ internal | external ]
undo group group-name
View
VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group. It can be expressed in string of letters and numbers from 1 to 47 in length.
internal: Creates an internal peer group.
external: Creates an external peer group including other sub-AS groups in federation.
Description
Use the group command to create a BGP peer group in VPN-instance.
Use the undo group command to delete a specified BGP peer group.
By default, the MP-IBGP peer is created.
29-13
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Members in one peer group must have the same routing export policy as the group does, but can have different ingress policies.
Example
Create an MP-EBGP peer group named test.
[SW8800-bgp-af-vpn-instance] group test external
29.1.17 if-match mpls-label
Syntax if-match mpls-label undo if-match mpls-label
View
Route-policy view
Parameter
None
Description
Use the if-match mpls-label command to configure the system to match only those public network routes which carry an MPLS label.
Use the undo if-match mpls-label command to cancel this configuration.
Related command: apply mpls-label.
Example
Define an if-match clause to allow label-carrying routes to pass the filtering of this clause.
[SW8800-route-policy] if-match mpls-label
29.1.18 if-match vpn-target
Syntax
if-match vpn-target { vpn-target | begin vpn-target count }
undo if-match vpn-target
View
Route-policy view
29-14
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 29 BGP/MPLS VPN Configuration Commands
vpn-target: Route VPN-target attribute values used for matching, in ASN:nn or
IP-address:nn format.
count: Number of the route vpn-target values used for matching, in the range of 2 to
65535.
Description
Use the if-match vpn-target command to match the route's vpn-target attribute. The match for a route succeeds only when the route's vpn-target attribute is a subset of the configured values, otherwise, if the route has no vpn-target attribute or has at least one attribute value that is not in the configuration range, the match fails.
Use the undo if-match vpn-target command to cancel the configuration.
Use the if-match vpn-target vpn-target command to list up to 10 vpn-target attribute values to be matched.
Use the if-match vpn-target begin vpn-target count command to set the start value and the total number of the vpn-target values to be matched.
Example
Define an if-match clause to match the following vpn-target attribute values: 100:1,
200:1, 300:1, 300:2 and 400:3.
[SW8800-route-policy] if-match vpn-target 100:1 200:1 300:1 300:2 400:3
With the above configuration, if a route's attribute value is 100:1 300:1, the route will pass the matching; if the route's attribute value is 200:1 500:1, it will not pass the matching because 500:1 is not one of the attribute values that have been configured.
Define an if-match clause to match ten vpn-target attribute values starting from 100:1, that is, 100:1 to 100:10.
[SW8800-route-policy] if-match vpn-target begin 100:1 10
Define an if-match clause to match five vpn-target attribute values starting from
1.1.1.1:65533, that is, 1.1.1.1:65533, 1.1.1.1:65534, 1.1.1.1:65535, 1.1.1.2:0, and
1.1.1.2:1.
[SW8800-route-policy] if-match vpn-target begin 1.1.1.1:65533 5
29.1.19 import-route syntax
import-route { { ospf | ospf-ase | ospf-nssa } [ process-id ] | direct | rip | static } [med
value | route-policy route-policyname ]
undo import-route { { ospf | ospf-ase | ospf-nssa } [ process-id ] | direct | rip | static }
29-15
3Com Switch 8800 Command Reference Guide
View
Chapter 29 BGP/MPLS VPN Configuration Commands
VPN-instance subaddress family view
Parameter
process-id: OSPF process ID, ranging from 1 to 65535. By default, it is 1.
ospf: Imports only the ASE internal route discovered by the OSPF process process-id as the external route.
ospf-ase: Imports only the OSPF-ASE route discovered by OSPF process with
process-id as the external route.
ospf-nssa: Imports only the OSPF-NSSA route discovered by OSPF process with
process-id as the external route.
med value: Route cost value, ranging from 0 to 4294967295.
route-policyname: Routing policy name, consisting of 1 to 19 characters
Description
Use the import-route ospf command to enable to import OSPF route.
Use the undo import-route ospf command to disable to import OSPF route.
Caution:
By default, the process ID is 1.
Example
Enable to import an OSPF route with process ID 100.
[SW8800]ip vpn-instance sphinx
[SW8800-vpn-sphinx]route-distinguisher 168.168.55.1:85
[SW8800-vpn-sphinx]quit
[SW8800]bgp 352
[SW8800-bgp]ip vpn-instance sphinx
[SW8800-bgp-af-vpn-instance] import-route ospf 100
29.1.20 ip binding vpn-instance
Syntax
ip binding vpn-instance vpn-instance-name
undo ip binding vpn-instance vpn-instance-name
29-16
3Com Switch 8800 Command Reference Guide
View
VLAN interface view
Parameter
Chapter 29 BGP/MPLS VPN Configuration Commands
vpn-instance-name: Name assigned to VPN-instance.
Description
Use the ip binding vpn-instance command to bind a VLAN virtual interface to a
VPN-instance.
Use the undo ip binding vpn-instance command to delete the binding.
By default, global routing table is used.
You need to reconfigure the IP address for an interface since this command deletes the original IP address.
Example
Bind the VLAN201 virtual interface to the VPN-instance VPN 1.
[SW8800] interface vlan-interface 201
[SW8800-Vlan-interface201] ip binding vpn-instance vpn1
29.1.21 ip route-static vpn-instance
Syntax
ip route-static vpn-instance
vpn-instance-name
[vpn-instance-name] …
destination-ip-address { mask | mask-length } [ interface-name | vpn-instance
vpn-nexthop-name ] nexthop-ip-address [ preference preference-value ] [ reject |
blackhole ]
undo ip route-static vpn-instance vpn-instance-name [vpn-instance-name] …
destination-ip-address { mask | mask-length } [ interface-name | vpn-instance
vpn-nexthop-name ] nexthop-ip-address [ preference preference-value ] [ reject |
blackhole ]
View
System view
Parameter
vpn-instance-name: Name of VPN-instance. 6 names can be configured at most, and this value of character string is ranging from 1 to 19 characters.
destination-ip-address: Destination address of a static route.
mask: Subnet mask.
29-17
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
mask-length: Length of the mask, ranging to 0 to 32. As it requires consecutive 1s in a
32-bit mask, the mask in dotted decimal format can be substituted by mask-length
(mask-length is represented by the number of consecutive 1s in the mask).
interface-name: Outgoing interface name of a static route. You can specify the interface of a public network or other VPN-instance as the outgoing-interface of the static route .NULL 0 shows the outgoing-interface is null.
vpn-nexthop-name: Specifies VPN-instance of the next hop for the static route.
nexthop-ip-address: Specifies IP address of the next hop for the static route.
preference-value: Specifies preference value, ranging from 1 to 255, By default it is 60..
reject: Configures a route as unreachable.
blackhole: Configures a route as blackhole.
Description
Use the ip route-static vpn-instance command to configure a static route by specifying an interface of a private network as a egress interface.
Use the undo ip route-static vpn-instance command to delete the configuration of this static route.
Example
Configure a static route with destination address 100.1.1.1 and next hop address
1.1.1.2.
[SW8800] ip route-static vpn-instance vpn1 100.1.1.1 16 vpn-instance vpn1
1.1.1.2
29.1.22 ip vpn-instance
Syntax
ip vpn-instance vpn-instance-name
undo ip vpn-instance vpn-instance-name
View
System view
Parameter
vpn-instance-name: Name assigned to VPN-instance.
Description
Use the ip vpn-instance command to create a VPN instance and enter VPN instance view.
Use the undo ip vpn-instance command to delete the specified VPN instance.
29-18
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
By default, VPN-instance is not defined. Neither input nor output list is associated with
VPN-instance. No route-map is associated with VPN-instance.
Use the ip vpn-instance command to create a VPN-instance named vpn-name.
Example
Create the VPN instance VPN 1.
[SW8800] ip vpn-instance vpn1
[SW8800-vpn-vpn1]
29.1.23 ipv4-family
Syntax
BGP view, VPN-instance sub-address family view or VPNv4 sub-address family view:
ipv4-family { vpn-instance vpn-instance-name | vpnv4 [ unicast ] }
undo ipv4-family { vpn-instance vpn-instance-name | vpnv4 [ unicast ] }
RIP view:
ipv4-family [ unicast ] vpn-instance vpn-instance-name
undo ipv4-family [ unicast ] vpn-instance vpn-instance-name
View
BGP view, VPN-instance sub-address family view or VPNv4 sub-address family view, and RIP view.
Parameter
vpn-instance vpn-instance-name: Associates a specified VPN-instance with the
MBGP address family. This parameter is used to enter MBGP VPN-instance subaddress family view.
vpnv4: Enters MBGP VPNv4 address family view.
unicast: Uses unicast sub–address family.
Description
Use the ipv4-family vpn-instance command to enter MBGP VPN-instance subaddress family view.
Use the undo ipv4-family vpn-instance command to delete the association of a
VPN-instance with MBGP address family, and return to BGP unicast view.
Use the ipv4-family vpnv4 command to enter MBGP VPNv4 subaddress family view.
Use the undo ipv4-family vpnv4 command to delete the configuration of MBGP
VPNv4 subaddress family view.
By default, unicast address is used when VPNv4 address family is configured.
29-19
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
By default, use the unicast address when configuring the MBGP address family.
Use this command to enter address family view and configure parameters related to
BGP address family in this view.
Related command: peer enable.
Example
Associate a specified VPN-instance with MBGP address family to enter MBGP
VPN-instance subaddress family view. You must first configure VPN-instance before you perform that configuration.
[SW8800] bgp 100
[SW8800–bgp] ipv4-family vpn-instance abc
[SW8800-bgp-af-vpn-instance]
Enter VPNv4 subaddress family view.
[SW8800] bgp 100
[SW8800-bgp] ipv4-family vpnv4 unicast
[SW8800-bgp-af-vpn]
29.1.24 nesting-vpn
Syntax
View
BGP-VPNv4 sub-address family view
Parameter
None
Description
Use the nesting-vpn command to enable the nested VPN function.
Use the undo nesting-vpn command to disable this function.
By default, the nested VPN function is disabled.
If VPNv4 route advertisement is needed for a CE connected to a PE, the nested VPN function must be enabled on the PE.
Example nesting-vpn undo nesting-vpn
Enable the nested VPN function.
[SW8800-bgp-af-vpn] nesting-vpn
29-20
3Com Switch 8800 Command Reference Guide
29.1.25 network
Chapter 29 BGP/MPLS VPN Configuration Commands
Syntax
network ip-address [ address-mask ] [ route-policy policy-name ]
undo network ip-address [ address-mask ] [ route-policy policy-name ]
View
VPN-instance subaddress family view
Parameter
Description
Use the network command to configure the network route advertised to the outside by local BGP.
Use the undo network command to cancel the configuration.
By default, local BGP does not advertise any route to the outside.
Example
ip-address: Network address advertised by BGP in dotted decimal format.
address-mask: Mask of the network address.
policy-name: Name of the routing policy applied to the advertised route.
Configure local router to advertise the routing with the destination network segment
10.0.0.0/16.
[SW8800-bgp-af-vpn-instance] network 10.0.0.1 255.255.0.0
29.1.26 ospf
Syntax
ospf process-id [ router-id router-id-number ] [ vpn-instance vpn-instance-name ]
undo ospf process-id
View
System view
Parameter
process-id: OSPF Process ID. The default process ID is 1.
router-id-number: Router ID for an OSPF process. It is optional.
vpn-instance-name: VPN instance bound to an OSPF process.
29-21
3Com Switch 8800 Command Reference Guide
Description
Chapter 29 BGP/MPLS VPN Configuration Commands
Use the ospf command to enable an OSPF process.
Use the undo ospf command to disable an OSPF process.
After enabling an OSPF process, you can perform the configuration related to OSPF in the OSPF protocol view.
By default, OSPF protocol is not used in the system.
VRP supports multiple OSPF processes, so you can specify different process IDs to enable multiple OSPF processes on a router.
You are recommended to specify route-id in a process using router-id when enabling the OSPF process. If you want to enable multiple processes on a router, you are recommended to specify different router IDs for different processes. z z
To enable an OSPF process belonging to a public network without a router ID, the following conditions should be satisfied:
RM (Route Manage) is configured with a router ID.
There is an interface that is configured with an IP address.
If you enable an OSPF process without specifying a router ID, and the process is to be bound to a VPN instance, the VPN instance should have an interface that is configured with an IP address.
If you want to bind a process to a VPN instance, you must specify the VPN instance name.
One VPN instance may include several processes. For example, for VPN instance 1, you can configure the commands ospf 1 vpn-instance vpn1, ospf 2 vpn-instance
vpn1, and ospf 3 vpn-instance vpn1. Accordingly, VPN instance 1 will include the processes 1, 2, and 3.
But one process belongs to one instance only. If you have configured ospf 1
vpn-instance vpn1, you cannot configure ospf 1 vpn-instance vpn2. Otherwise, the system prompts: “Wrong configuration. Process 1 has been bound to vpn-instance vpn-instance 1”. If you configure ospf 1 first and then ospf 1 vpn-instance vpn1, the system prompts: “Wrong configuration. Process 1 has been running in public domain”.
If you configure ospf 1 vpn-instance vpn1 first and then ospf 1, the system enters ospf 1 vpn-instance vpn1 mode. That is, the commands ospf 1 and ospf 1
vpn-instance vpn1 are equivalent.
When an OSPF process is bound to a VPN instance, the default OSPF router is PE router. After executing the display ospf process-id brief command, you will view the information: “PE router, connected to VPN backbone”.
29-22
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Caution:
z z z
A router can run no more than 1024 OSPF processes, with up to 10 processes enabled in each VPN instance.
If you bind an OSPF process to a nonexistent VPN instance, the configuration for the command fails and display the errors: The specified VPN-Instance does not exist, or the VPN-Instance's Route-Distinguisher is not specified.
When a VPN instance is deleted, all the related OSPF processes will be deleted.
For example, the VPN instance VPN 1 includes the OSPF processes 1, 2 and 3. If
VPN instance VPN 1 is deleted, the OSPF processes 1, 2 and 3 will all be deleted at the same time.
Related command: network.
Example
Enable OSPF protocol with the default process ID 1.
[SW8800] router id 10.110.1.8
[SW8800] ospf
Enable OSPF protocol with the process ID 120.
[SW8800] router id 10.110.1.8
[SW8800] ospf 120
[SW8800-ospf-120]
Enable OSPF process with the process ID 100, specify its route ID to 2.2.2.2, and bind it to VPN instance vpn1.
[SW8800] ospf 100 router-id 2.2.2.2 vpn-instance vpn1
[SW8800-ospf-100]
29.1.27 peer advertise-community
Syntax
peer group-name advertise-community
undo peer group-name advertise-community
View
VPNv4 subaddress family view, VPN-instance sub-address family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
29-23
3Com Switch 8800 Command Reference Guide
Description
Chapter 29 BGP/MPLS VPN Configuration Commands
Use the peer advertise-community command to configure to transmit the community attributes to a specified peer group.
Use the undo peer advertise-community command to cancel this configuration.
By default, the BGP advertiser does not transmit the community attributes to peer group.
Related command: if-match community-list and apply community.
Example
Transmit the community attributes to the peer group test.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test advertise-community
29.1.28 peer allow-as-loop
Syntax
peer { group-name | peer-address } allow-as-loop [asn-limit]
undo peer { group-name | peer-address } allow-as-loop
View
VPNv4 subaddress family view, VPN-instance sub-address family view
Parameter
group-name: Name of a peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: IP address of a specified peer.
asn-limit: Maximum times for which autonomous system (AS) number is allowed to receive in route updates.
Description
Use the peer allow-as-loop command to allow loop in the route updates in the hub & spoke networking mode.
Use the undo peer allow-as-loop command to prohibit loop in the route updates.
By default, loop is prohibited in the received routing updates; by using the peer
allow-as-loop command, loop is allowed in the received routing updates. The default value of asn-limit argument is 3.
Standard BGP tests loop using AS number. However, on a Hub & Spoke network running EBGP between PE and CE, PE carries its own AS number when advertising route information to CE. Accordingly, the updated route information will contain PE’s AS number when it is sent from CE. In this case, PE will not accept the route updates.
29-24
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
You can avoid this by using the peer allow-as-loop command, which makes PE router allow the route updates from CE to contain its AS number. You can define asn-imit to control the maximum times for which AS number is received by PE.
Example
Enable route loop.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer 1.1.1.1 allow-as-loop 1
29.1.29 peer as-number
Syntax
peer { group-name | [ peer-address group group-name ] }as-number as-number
undo peer { group-name | [ peer-address group group-name ] }as-number as-number
View
VPN-instance subaddress family view
Parameter
group-name: Name of a peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: IP address of peer group.
as-number: Opposite AS number of a peer (group).
Description
Use the peer as-number command to configure the opposite AS number of a specified peer (group).
Use the undo peer as-number command to remove the opposite AS number of a specified peer (group).
By default, the opposite end of a peer (group) has no AS number.
Example
Set the opposite AS number of a specified peer (group) to 100.
[SW8800-bgp] ipv4-family vpn-instance test
[SW8800-bgp-af-vpn-instance] peer test as-number 100
29.1.30 peer as-path-acl export
Syntax
peer group-name as-path-acl acl-number export
undo peer group-name as-path-acl acl-number export
29-25
3Com Switch 8800 Command Reference Guide
View
Chapter 29 BGP/MPLS VPN Configuration Commands
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
acl-number: AS regular expression ACL number, ranging 1 to 199.
Description
Use the peer as-path-acl export command to apply the routing filtering policy based on AS path list to the advertised routing information.
Use the undo peer as-path-acl export command to cancel the configuration.
By default, there is no filtering policy based on AS path list.
You can only use the peer as-path-acl export command in the peer group.
Related command: peer as-path-acl import.
Example
Configure the test peer group to filter the advertised routing information with the AS path ACL 3.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test as-path-acl 3 export
29.1.31 peer as-path-acl import
Syntax
peer { group-name | peer-address } as-path-acl acl-number import
undo peer { group-name | peer-address } as-path-acl acl-number import
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: IP address of the peer group in dotted decimal format.
acl-number: AS regular expression ACL number, ranging 1 to 199.
import: Filters the received routes with AS path list.
29-26
3Com Switch 8800 Command Reference Guide
Description
Chapter 29 BGP/MPLS VPN Configuration Commands
Use the peer as-path-acl import command to configure peers from filter received routing information with routing filtering policy based on AS path list.
Use the undo peer as-path-acl import command to cancel the configuration.
By default, there is no filtering policy based on AS path list.
The incoming filtering policy applied to peers takes precedence over the configuration to peer groups.
Example
Configure the test peer group to filter the received routes with AS path ACL 3.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test as-path-acl 3 import
29.1.32 peer connect-interface
Syntax
peer { group-name | ip-address } connect-interface { interface-type interface_num }
undo peer { group-name | ip-address } connect-interface
View
VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
ip-address: Peer IP address.
interface-type Interface-num: Interface type, interface number.
Description
Use the peer connect-interface command to configure to allow the internal BGP session to use any operable interface for a TCP connection.
Use the undo peer connect-interface command to restore the optimum local address for a TCP connection.
By default, BGP uses the optimum local address to implement a TCP connection.
Generally, BGP uses the optimum local address to implement a TCP connection. In order to make the TCP connection valid even when the interface fails, you can configure to allow the internal BGP session to use any operable interface for the TCP connection. Usually, Loopback interface is used.
29-27
3Com Switch 8800 Command Reference Guide
Example
Chapter 29 BGP/MPLS VPN Configuration Commands
Allow the internal BGP session to use any operable interface for a TCP connection.
[SW8800-bgp] ipv4-family vpn-instance test
[SW8800-bgp-af-vpn-instance] peer 1.1.1.1 connect-interface loopback 0
29.1.33 peer default-route-advertise
Syntax
peer group-name default-route-advertise
undo peer group-name default-route-advertise
View
VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
Description
Use the peer group-name default-route-advertise command to enable a peer (group) to transmit a default route.
Use the undo peer group-name default-route-advertise command to remove the existing configuration.
By default, a peer (group) does not transmit a default route.
This command does not require any default route in the routing table but transmits a default route whose next hop address is itself to the peer unconditionally.
Example
Enable the peer group test to transmit a default route.
[SW8800-bgp] ipv4-family vpn-instance a
[SW8800-bgp-af-vpn-instance] peer test default-route-advertise
29.1.34 peer default-route-advertise vpn-instance
Syntax
peer ip-address default-route-advertise vpn-instance vpn-instance name
undo peer ip-address default-route-advertise vpn-instance vpn-instance name
View
VPNv4 subaddress family view
29-28
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 29 BGP/MPLS VPN Configuration Commands
ip-address: Peer IP address.
vpn-instance name: Name of the created VPN instance.
Description
Use the peer ip-address default-route-advertise vpn-instance vpn-instance name command to enable a peer to import a default route.
Use the undo peer ip-address default-route-advertise vpn-instance vpn-instance
name to cancel the existing configuration.
By default, a peer does not import a default route.
This command does not require any default route in the routing table but transmits a default route whose next hop address is itself to the peer unconditionally.
Example
Enable the peer test to import a default route.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer 10.1.1.1 default-route-advertise vpn-instance test
29.1.35 peer description
Syntax
peer { group-name | peer-address } description description-line
undo peer { group-name | peer-address } description
View
VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: Peer IP address, in dotted decimal format.
description-line: Description of the configuration, up to 79 characters in length.
Description
Use the peer description command to set the description of a peer (group).
Use the undo peer description command to delete the description.
By default, there is no description for a peer (group).
The peer description is independent of the peer's group description.
Related command: display bgp peer verbose and display bgp group.
29-29
3Com Switch 8800 Command Reference Guide
Example
Chapter 29 BGP/MPLS VPN Configuration Commands
Set description of the peer group group1 to be city 1.
[SW8800-bgp-af-vpn-instance] peer group1 description city1
29.1.36 peer ebgp-max-hop
Syntax
peer group-name ebgp-max-hop [ ttl ]
undo peer group-name ebgp-max-hop
View
VPN-instance subaddress family view
Parameter
Description
Use the peer ebgp-max-hop command to enable to establish an EBGP connection with a specified neighbor which is attached to the network indirectly.
Use the undo peer ebgp-max-hop command to restore the default setting.
By default, you can only make a connection with a direct accessing EBGP neighbor.
Example
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: Peer IP address.
ttl: The maximum hops, in the rang of 1 to 255 and is 64 by default.
Enable the router to connect the EBGP peer group test that is attached to the network indirectly.
[SW8800-bgp] ipv4-family vpn-instance test
[SW8800-bgp-af-vpn-instance] peer test ebgp-max-hop
29.1.37 peer enable
Syntax
peer group-name enable
undo peer group-name enable
View
VPNv4 subaddress family view
29-30
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 29 BGP/MPLS VPN Configuration Commands
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
Description
Use the peer enable command to enable a specified peer group.
Use the undo peer enable command to disable a specified peer group.
For IPv4 address family, address switching is enabled by default.
Example
Enable the peer group 168.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer 168 enable
29.1.38 peer filter-policy export
Syntax
peer group-name filter-policy acl-number export
undo peer group-name filter-policy acl-number export
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
acl-number: IP ACL number ranging from 2000 to 3999. That is, you can use basic ACL or advanced ACL.
export: Uses the filtering policy for the advertised route and this policy is only effective for peer groups.
Description
Use the peer filter-policy export command to apply the ACL-based filtering policy to the advertised route for the peer group.
Use the undo peer filter-policy export command to cancel the configuration.
By default, there is no ACL-based filtering policy.
You can only use the peer filter-policy export command to configure peer group.
Related command: ip as-path-acl, peer as-path-acl and peer filter-policy export.
29-31
3Com Switch 8800 Command Reference Guide
Example
Chapter 29 BGP/MPLS VPN Configuration Commands
Configure the test peer group to filter the advertised route with ACL 3000.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test filter-policy 3000 export
29.1.39 peer filter-policy import
Syntax
peer { group-name | peer-address } filter-policy acl-number import
undo peer { group-name | peer-address } filter-policy acl-number import
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
Description
Use the peer filter-policy import command to apply the ACL-based filtering policy to the received routing information for peers.
Use the undo peer filter-policy import command to cancel the application.
By default, there is no ACL-based filtering policy.
Related command: ip as-path-acl and peer as-path-acl.
The incoming filtering policy configured for peers take precedence over the configuration for peer groups.
Example
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: Peer IP address, in dotted decimal format.
acl-number: IP ACL number from 2000 to 3999, that is, you can use basic or advanced
ACL.
import: Performs the filtering policy on the received routes.
Configure the test peer group to filter the received route with ACL 3000.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test filter-policy 3000 import
29-32
3Com Switch 8800 Command Reference Guide
29.1.40 peer group
Chapter 29 BGP/MPLS VPN Configuration Commands
Syntax
peer peer-address group group-name [ as-number as-number ]
undo peer peer-address
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
Description
Use the peer group command to add a peer to an existing peer group.
Use the undo peer command to delete a specified peer from the group.
In BGP view and VPN-instance subaddress family view, when adding a peer to an external group out of an AS, you need to specify an AS number. When adding a peer to an internal group or an external group in an AS, the AS number is not needed.
A peer must have been added in a group in BGP view before it can be added to another group in multicast subaddress family view or VPNv4 subaddress family view.
In different address families, one peer can be in different groups and one group may have different peers.
Example
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: Peer IP address in dotted decimal format.
as-number: Peer AS number in the range of 1 to 65535. This parameter is only effective in the BGP view and VPN-instance subaddress family view.
Add the peer with IP address 10.1.1.1 to the peer group test. In this example, the peer group is IBGP peer by default, thus you need not to specify the AS number when adding peers.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer 10.1.1.1 group test
29.1.41 peer ip-prefix export
Syntax
peer group-name ip-prefix prefixname export
undo peer group-name ip-prefix prefixname export
29-33
3Com Switch 8800 Command Reference Guide
View
Chapter 29 BGP/MPLS VPN Configuration Commands
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
prefixname: Name of prefix list, a string of one to 19 characters.
Description
Use the peer ip-prefix export command to apply the routing filtering policy based on
IP prefix list to advertised routing information for peer groups.
Use the undo peer ip-prefix export command to cancel the setting.
By default, the peer group does not perform the routing filtering policy. you can only configure the peer ip-prefix export command to the peer group.
Related command: peer ip-prefix import.
Example
Configure the peer group group1 to filter the advertised routing information with the IP prefix list list1.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer group1 ip-prefix list1 export
29.1.42 peer ip-prefix import
Syntax
peer { group-name | peer-addess } ip-prefix prefixname import
undo peer { group-name | peer-addess } ip-prefix prefixname import
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: Peer IP address in dotted decimal format.
prefixname: Name of the prefix list, a string of one to 19 characters.
Description
Use the peer ip-prefix import command to apply the filtering policy based on IP prefix list to the advertised route for peer groups.
29-34
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Use the undo peer ip-prefix import command to cancel the configuration.
By default, the peer dose not use the routing filtering policy.
The incoming filtering policy configured for peers take precedence over the configuration for peer groups.
Related command: peer ip-prefix export.
Example
Configure the peer group group1 to filter the received route with the IP prefix list 1.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer group1 ip-prefix list1 import
29.1.43 peer label-route-capability
Syntax
peer group-name label-route-capability
undo peer group-name label-route-capability
View
BGP view
Parameter
group-name: Name of a neighbor peer group.
Description
Use the peer label-route-capability command to enable a peer group to handle the label-carried IPv4 routes.
Use the undo peer label-route-capability command to disable a peer group from handling the label-carried IPv4 routes.
By default, a BGP peer group cannot handle label-carried IPv4 routes.
Example
Enable IBGP peer group and EBGP peer group to handle the label-carried IPv4 routes.
[SW8800-bgp] group ibgp internal
[SW8800-bgp] peer ibgp label-route-capability
[SW8800-bgp] group ebgp external
[SW8800-bgp] peer ebgp label-route-capability
29-35
3Com Switch 8800 Command Reference Guide
29.1.44 peer next-hop-local
Chapter 29 BGP/MPLS VPN Configuration Commands
Syntax
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
Description
Use the peer next-hop-local command to cancel the processing of the next hop in the routes that BGP advertises to a peer group and configure to use its own address as the next-hop.
Use the undo peer next-hop-local command to cancel the existing setting.
Example
peer group-name next-hop-local
undo peer group-name next-hop-local
Specify the current BGP address as the next-hop in its route advertising to a peer group.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test next-hop-local
29.1.45 peer password
Syntax
peer { group-name | peer-address } password { cipher | simple } password
undo peer { group-name | peer-address } password
View
VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: Peer IP address in dotted decimal format.
cipher: Displays the password in cipher text.
simple: Displays the password in plain text.
29-36
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
password: Password string. When you choose the cipher parameter and input the password in plain text, or you choose the simple parameter, the password is one to 16 characters in length. When you choose the cipher parameter, and input the password in cipher text, the password is to be 24 in length.
Description
Use the peer password command to enable BGP to perform the MD5 authentication when making a TCP connection.
Use the undo peer password command to cancel this function.
By default, BGP does not perform the MD5 authentication when setting up a TCP connection.
When the MD5 authentication is enabled, both parties must have the same authentication mode and password, otherwise, no TCP connection can be established because the MD5 authentication cannot be passed.
A specified peer can perform the MD5 authentication only when the group to which the peer belongs is not set the authentication. Otherwise, the configuration of the peer group applies.
Example
Assign MD5 authentication to a TCP connection between the local router 10.1.100.1 and the peer 10.1.100.2.
[SW8800-bgp-af-vpn-instance] peer 10.1.100.2 password simple 3Com
Perform a similar configuration to the remote end.
[SW8800-bgp-af-vpn-instance] peer 10.1.100.1 password simple 3Com
29.1.46 peer public-as-only
Syntax
peer group-name public-as-only
undo peer group-name public-as-only
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
29-37
3Com Switch 8800 Command Reference Guide
Description
Chapter 29 BGP/MPLS VPN Configuration Commands
Use the peer public-as-only command to configure BGP not to carry private AS numbers when transmitting update packets.
Use the undo peer public-as-only command to configure BGP to carry private AS numbers when transmitting update packets.
By default, private AS numbers are carried when BGP transmits update packets.
Generally, BGP carries AS number (either public or private AS number) when transmitting BGP update packets. BGP can be configured not to carry private AS number so that some egress routers may ignore private AS number when transmitting
BGP update packets.
Example
Send MBGP update packets without bearing private AS numbers.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer 168 public-as-only
29.1.47 peer reflect-client
Syntax
peer group-name reflect-client
undo peer group-name reflect-client
View
VPNv4 subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
Description
Use the peer reflect-client command to set a specified peer group to be a client of a router reflector.
Use the undo peer reflect-client command to cancel this setting.
By default, no router reflector exists in AS.
This configuration only applies to IBGP peer group.
Related command: reflect between-clients and reflect cluster-id.
Example
Set the peer group test as a client of a router reflector.
29-38
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test reflect-client
29.1.48 peer route-policy export
Syntax
peer group-name route-policy policy-name export
undo peer group-name route-policy policy-name export
View
VPNv4 subaddress family view, VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
policy-name: Name of a routing policy.
Description
Use the peer route-policy export command to apply the routing policy to peer group for advertised routing information.
Use the undo peer route-policy export command to cancel the configuration.
By default, there is no routing policy.
The peer route-policy export command is only used to configure peer groups.
Related command: peer route-policy import.
Example
Apply the routing policy test-policy to the outgoing routes of the peer group test.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test route-policy test-policy export
29.1.49 peer route-policy import
Syntax
peer { group-name | peer-address } route-policy policy-name import
undo peer { group-name | peer-address } route-policy policy-name import
View
VPNv4 subaddress family view, VPN-instance subaddress family view
29-39
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 29 BGP/MPLS VPN Configuration Commands
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: Peer IP address in dotted decimal format.
policy-name: Name of the applied routing policy.
Description
Use the peer route-policy import command to apply a routing policy to peer for received routing information.
Use the undo peer route-policy import command to delete the setting.
By default, there is no routing policy.
The incoming filtering policy configured for peers take precedence over the configuration for peer groups.
Related command: peer route-policy export.
Example
Apply the routing policy test-policy to the incoming routes of the peer group test.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer test route-policy test-policy import
29.1.50 peer route-update-interval
Syntax
peer group-name route-update-interval seconds
undo peer group-name route-update-interval
View
VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
seconds: Update interval in seconds, ranging from 0 to 600.
Description
Use the peer route-update-interval command to set the update interval for peers.
Use the undo peer route-update-interval command to restore the default setting.
By default, the update interval is 5 seconds for IBGP peer group, and for EBGP it is 30 seconds.
29-40
3Com Switch 8800 Command Reference Guide
Example
Chapter 29 BGP/MPLS VPN Configuration Commands
Set the minimum interval for sending routing update packet to the BGP peer group group1 to be 10 seconds.
[SW8800-bgp-af-vpn-instance] peer group1 route-update-interval 10
29.1.51 peer timer
Syntax
peer { group-name | peer-address } timer keep-alive keepalive-interval hold
holdtime-interval
undo peer { group-name | peer-address } timer
View
VPN-instance subaddress family view
Parameter
group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.
peer-address: Peer IP address in dotted decimal format.
keepalive-interval: Interval of sending the Keepalive message. It is in seconds, ranging from 1 to 65535, and with the default value 60.
holdtime-interval: Holdtime, ranging from 3 to 65535 in seconds, and with the default value 180 seconds.
Description
Use the peer timer command to set the Keepalive interval and holdtime for peers.
Use the undo peer timer command to restore the default setting.
The timer set with the peer timer command enjoys higher precedence than the timer with the timer command.
Related command: timer keep-alive hold.
Example
Set the Keepalive interval and holdtime for the peer group test.
[SW8800-bgp-af-vpn-instance] peer test timer keep-alive 60 hold 180
29.1.52 peer upe
Syntax
peer peer-address upe
29-41
3Com Switch 8800 Command Reference Guide
undo peer peer-address upe
View
VPNv4 subaddress family view
Parameter
peer-address: Peer IP address.
Chapter 29 BGP/MPLS VPN Configuration Commands
Description
Use the peer upe command to configure BGP peer as the UPE of hierarchical
BGP/MPLS VPN.
Use the undo peer upe command to delete this configuration.
Example
Configure BGP peer as the UPE of hierarchical BGP/MPLS VPN.
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer 1.1.1.1 upe
29.1.53 peer vpn-instance enable
Syntax
peer group-name vpn-instance vpn-instance-name enable
undo peer group-name vpn-instance vpn-instance-name enable
View
BGP-VPNv4 sub-address family view
Parameter
group-name: Name of a peer group.
vpn-instance-name: Name of the VPN instance the CE peer belongs to.
enable: Enable VPNv4 function for the CE.
Description
Use the peer vpn-instance enable command to enable the VPNv4 function for the
BGP peer group of a CE.
Use the undo peer vpn-instance enable command to disable the function.
By default, the VPNv4 function is disabled.
Example
Enable the VPNv4 function for the peer group of a CE.
29-42
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
[SW8800-bgp] ipv4-family vpn-instance vrf1
[SW8800-bgp-af-vpn-instance] group ebgp external
[SW8800-bgp-af-vpn-instance] quit
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer ebgp vpn-instance vrf1 enable
29.1.54 peer vpn-instance group
Syntax
peer peer-address vpn-instance vpn-instance-name group group-name
undo peer peer-address vpn-instance vpn-instance-name
View
BGP-VPNv4 sub-address family view
Parameter
peer-address: IP address of a peer, in dotted decimal notation.
vpn-instance-name: Name of the VPN instance the CE peer belongs to. group-name: Name of a peer group.
Description
Use the peer vpn-instance group command to join a CE neighbor into a BGP peer group.
Use the undo peer vpn-instance group command to clear the CE neighbor from the
BGP peer group.
By default, a CE neighbor does not belong to any peer group.
Example
Join a CE neighbor into a peer group.
[SW8800-bgp] ipv4-family vpn-instance vrf1
[SW8800-bgp-af-vpn-instance] peer 1.1.1.1 group ebgp as-number 600
[SW8800-bgp-af-vpn-instance] quit
[SW8800-bgp] ipv4-family vpnv4
[SW8800-bgp-af-vpn] peer 1.1.1.1 vpn-instance vrf1 group ebgp
29.1.55 peer vpn-instance route-policy import
Syntax
peer { peer-address | group-name } vpn-instance vpn-instance-name route-policy
policy-name import
29-43
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
undo peer { peer-address | group-name } vpn-instance vpn-instance-name
route-policy policy-name import
View
BGP-VPNv4 sub-address family view
Parameter
peer-address: IP address of a peer, in dotted decimal. group-name: Name of a peer group.
vpn-instance-name: Name of the VPN instance the CE peer belongs to.
policy-name: Name of the routing policy to be applied.
Description
Use the peer vpn-instance route-policy import command to configure the routing policy applied by the CE peer to VPNv4 routes it received.
Use the undo peer vpn-instance route-policy import command to cancel the configuration.
By default, no routing policy is configured.
The ingress routing policy configured for a peer takes precedence over the configuration for the peer group.
Example
Configure the peer group ebgp to apply the routing policy named comtest to the ingress routes.
[SW8800-bgp-af-vpn] peer ebgp vpn-instance vrf1 route-policy comtest import
29.1.56 peer vpn-instance substitute-as
Syntax
peer group-name vpn-instance vpn-instance-name substitute-as
undo peer group-name vpn-instance vpn-instance-name substitute-as
View
BGP-VPNv4 sub-address family view
Parameter
group-name: Name of a peer group.
vpn-instance-name: Name of the VPN instance the CE peer belongs to.
policy-name: Name of the routing policy to be applied.
29-44
3Com Switch 8800 Command Reference Guide
Description
Chapter 29 BGP/MPLS VPN Configuration Commands
Use the peer vpn-instance substitute-as command to enable the BGP AS number substitution on the PE.
Use the undo peer vpn-instance substitute-as command to disable the function.
By default, the BGP AS number substitution function is disabled.
After this function is enabled, when the PE advertises the specified peer the route information and the routed AS path has the same AS number as that of the peer, the AS number in the AS path will be replaced by the AS number of the PE before being advertised.
These commands take effect once being executed.
Example
Enable the BGP AS number substitution for the peer group 20.
[SW8800-bgp-af-vpn] peer 20 vpn-instance vrf1 substitute-as
29.1.57 policy vpn-target
Syntax policy vpn-target
undo policy vpn-target
View
VPNv4 subaddress family view
Parameter
None
Description
Use the policy vpn-target command to configure to filter the VPN-target extended community attributes of received routing information.
Use the undo policy vpn-target command to cancel the setting.
By default, the filtering of VPN-target extended community attribute is conducted.
Example
Filter the VPN-target extended community attributes of the received routing information.
[SW8800-bgp-af-vpn] policy vpn-target
29-45
3Com Switch 8800 Command Reference Guide
29.1.58 preference
Chapter 29 BGP/MPLS VPN Configuration Commands
Syntax
preference ebgp-preference ibgp-preference local-preference
undo preference
View
VPN-instance subaddress family view
Parameter
ebgp-preference: Preference of the routes learned from the EBGP peer, in the range 1 to 256.
ibgp-preference: Preference of the routes learned from the IBGP peer, in the range 1 to
256.
local-preference: Preference of the Local routes, in the range 1 to 256.
Description
Use the preference command to set preference value for a BGP route.
Use the undo preference command to remove the setting.
Example
Set the preference of the preference of the routes learned from the EBGP peer to 2, the preference of the routes learned from the IBGP peer to 3 and the preference of the local routes to 4.
[SW8800-bgp-af-vpn-instance] preference 2 3 4
29.1.59 reflect between-clients
Syntax reflect between-clients
undo reflect between-clients
View
VPNv4 subaddress family view
Parameter
None
Description
Use the reflect between-clients command to allow the routing reflection between clients.
29-46
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Use the undo reflect between-clients command to forbid routing reflection between clients (PE to PE).
By default, the routing reflection between clients is allowed.
The router reflector reflects one client’s route to others after configuration.
Related command: reflect cluster-id and peer reflect-client.
Example
Disable the routing reflection from client to client.
[SW8800-bgp-af-vpn] undo reflect between-clients
29.1.60 reflector cluster-id
Syntax
reflector cluster-id { cluster-id | address }
undo reflect cluster-id
View
VPNv4 subaddress family view
Parameter
cluster-id: Router reflector cluster ID in number format, in the range of 1 to
4294967295.
address: Router reflector cluster ID in IP address format.
Description
Use the reflector cluster-id command to configure a cluster ID of router reflector.
Use the undo reflector cluster-id command to delete the configuration.
By default, each router reflector uses his own ID as a cluster ID.
Usually, one cluster has one router reflector. And it is the router ID of the reflector to identify this cluster. Several router reflectors make the network more stable. If one cluster has several router reflectors, set the same cluster to all the reflectors ID with this command.
Related command: reflect between-clients and peer reflect-client.
Example
The local router is one of the reflectors in the cluster and identifies this cluster with the cluster ID.
[SW8800-bgp-af-vpn] reflect cluster-id 80
[SW8800-bgp-af-vpn] peer 11.128.160.10 reflect-client
29-47
3Com Switch 8800 Command Reference Guide
29.1.61 route-distinguisher
Chapter 29 BGP/MPLS VPN Configuration Commands
Syntax
route-distinguisher route-distinguisher
View
VPN-instance view
Parameter
route-distinguisher: Configures a VPN IPv4 prefix by adding an 8-byte value to a VPN
IPv4 prefix.
Description
Use the route-distinguisher command to configure RD for an MPLS VPN instance. A
VPN-instance cannot run until it is configured with an RD.
A route distinguisher (RD) creates route and forwarding list for a VPN and specifies the default route identifier. Add an RD to the beginning of a specific IPv4 prefix to make it a globally unique VPN IPv4 prefix.
If an RD is associated with an autonomous system number (ASN), it is composed of the
ASN and an arbitrary number; if the RD is associated with an IP address, it is a combination of the IP address and an arbitrary number.
RD has the following formats:
16-bit ASN (can be 0 here): A custom 32-bit number, for example, 101:3.
32-bit IP address (can be 0.0.0.0 here): A custom 16-bit number, for example,
192.168.122.15:1.
Example
Configure RD for an MPLS VPN instance.
[SW8800] ip vpn-instance vpn-instance_blue
[SW8800-vpn-vpn-instance_blue] route-distinguisher 100:3
[SW8800] ip vpn-instance vpn-instance_red
[SW8800-vpn-vpn-instance_red] route-distinguisher 173.13.0.12:200
29.1.62 route-tag
Syntax
route-tag tag-number
undo route-tag
29-48
3Com Switch 8800 Command Reference Guide
View
OSPF protocol view
Chapter 29 BGP/MPLS VPN Configuration Commands
Parameter
tag-number: Tag value to identify VPN import route, in the range of 0 to 4294967295.
By default, its first two bytes are fixed to 0xD000, while the last two bytes are the ASN of local BGP. For example, if the local BGP ASN is 100, then the default tag value in decimal is 3489661028. The value is an integer from 0 to 4294967295.
Description
Use the route-tag command to specify a tag value to identify VPN import route.
Use the undo route-tag command to restore the default value.
If a VPN site is linked to multiple PEs, when a route learned from MPLS/BGP is advertised by a PE router via its type-5 or type-7 LSA to the VPN site, the route may be received by another PE router. This will result in routing loop. To avoid routing loop, you should configure route-tag and you are recommended to configure the same route-tag for the PEs in the same VPN domain. The route-tag is included in the type-5/-7 LSA. It is not transmitted in the extended community attributes of BGP, and thus it is limited in the local area. Therefore, it can only be configured and function on the PE router which receives BGP routes and generates OSPF LSA. z z
Configure route-tag in OSPF protocol view. Different processes can be configured with a same route-tag. You can configure the same route-tag using different commands, but they are different in priority. z
Those configured with the import-route command are of the highest priority.
Those configured with the route-tag command are in the second place in terms of priority.
Those configure with the default tag command are of the lowest priority.
If the route-tag included in the type-5/-7 LSA is identical with its existing tag, the LSA received will be neglected in route calculation.
Caution:
The route-tag configured will not be validated until the reset ospf command is executed.
Related command: import-route and default.
29-49
3Com Switch 8800 Command Reference Guide
Example
Chapter 29 BGP/MPLS VPN Configuration Commands
Configure route-tag 100 to OSPF process 100.
[SW8800-ospf-100] route-tag 100
OSPF: Process 100's route tag has been changed
OSPF: Reboot the system or use the 'reset ospf ID' command for this to take
effect
29.1.63 timer
Syntax
timer keep-alive keepalive-interval hold holdtime-interval
undo timer
View
VPN-instance subaddress family view
Parameter
Description
Use the timer command to specify the time interval and hold time for sending
Keepalive messages.
Use the undo timer command to restore the default value.
The timer defined with the peer timer command takes preference over that with the
timer command.
Related command: peer timer.
Example
keepalive-interval: Time interval to send Keepalive messages, in seconds and ranging
1 to 65535. It defaults to 60 seconds.
holdtime-interval: Hold time, in seconds and ranging 3 to 65535. It defaults to 180 seconds.
Set the time interval and hold time for sending Keepalive messages.
[SW8800-bgp-af-vpn-instance] timer keep-alive 60 hold 180
29.1.64 traffic-redirect
Syntax
traffic-redirect inbound { link-group { acl-number | acl-name } [ rule rule
[ system-index index ] ] | ip-group { acl-number | acl-name } [ rule rule [ system-index
29-50
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
index ] ] } interface { interface-name | interface-type interface-num } destination-vlan
l3-vpn
undo traffic-redirect inbound { link-group { acl-number | acl-name } [ rule rule ] |
ip-group { acl-number | acl-name } [ rule rule ] }
View
Ethernet port view
Parameter
link-group { acl-number | acl-name } [ rule rule ]: Layer 2 ACL, acl-number is in the range of 4000 to 4999. acl-name is a string beginning with English letters (a to z and A to Z) with no spaces or quotation marks between. rule rule: Optional, ACL matching statement, in the range of 0 to 127. All matching statements will be selected if you skip this keyword.
ip-group { acl-number | acl-name } [ rule rule ]: Basic or advanced ACL. acl-number is in the range of 2000 to 3999. acl-name is a string beginning with English letters (a to z and A to Z) with no spaces or quotation marks between. rule rule: Optional, ACL matching statement, in the range of 0 to 127. All matching statements will be selected if you skip this keyword.
interface { interface-name | interface-type interface-num }: Redirect a packet to a specified Ethernet port. interface-type can be GigabitEthernet and Ethernet.
interface-num suggests a complete port name with interface-type. interface-name is composed of interface-type and interface-num.
system-index index: Intra-system index of the rule, in the range of 0~4294967295.
The system assigns automatically an index to it when delivering an ACL rule, for later retrieval. You can also assign a system index to it when delivering an ACL rule with this command. However, generally you are not recommended to do so.
Description
Use the traffic-redirect command to redirect the data flow at the port of the EX board to the port of the MX board and make the port on the EX board act as an MPLS VPN CE side interface.
Use the undo traffic-redirect command to cancel this configuration.
Example
Redirect the data flow at the Ethernet3/1/4 of the EX board to the MX board and set the port belong to VLAN 24.
[SW8800-Ethernet3/1/4] traffic-redirect inbound ip-group 2000 rule 0 system-index 1 interface Ethernet5/1/4 24 l3-vpn
Cancel the redirection configuration.
[SW8800-Ethernet5/1/4] undo traffic-redirect inbound ip-group 2000 rule 0
29-51
3Com Switch 8800 Command Reference Guide
29.1.65 routing-table limit
Chapter 29 BGP/MPLS VPN Configuration Commands
Syntax
routing-table limit integer { alarm-integer | syslog-alert }
undo routing-table limit
View
VPN-instance view
Parameter
integer: The Maximum routes allowed for a VPN instance, ranging from 1 to 65536.
alarm-integer: Route threshold for alarming.
syslog-alert: When the route maximum specified for a VPN-instance exceeds the threshold, routes can be added and only a SYSLOG error message is sent out.
Description
Use the routing-table limit command to limit the route maximum in a VPN-instance.
Use the undo routing-table limit command to cancel the limitation.
It is necessary to enter a VPN-instance sub-view before using the routing-table command. Create a VPN-instance routing table in this view and allocate a route distinguisher (RD) in either of the following formats:
16-bit ASN: A 32-bit user-defined number, for example, 100:1.
32-bit IP address: A 16-bit user-defined number, for example, 172.1.1.1:1.
Create a VPN-target extended community for a VPN-instance and specify ingress or egress interface or both of them for the vpn-target command. These parameters can be used to configure ingress/egress routing information of the VPN-target extended community for a router.
Example
Configure the maximum routes in VPN instance vpn1 to 1000.
[SW8800] ip vpn-instance vpn1
[SW8800-vpn-vpn1] route-distinguisher 100:1
[SW8800-vpn-vpn1] vpn-target 100:1 import-extcommunity
[SW8800-vpn-vpn1] routing-table limit 1000 syslog-alert
29-52
3Com Switch 8800 Command Reference Guide
29.1.66 sham-link
Chapter 29 BGP/MPLS VPN Configuration Commands
Syntax
sham-link source-addr destination-addr [ cost cost-value ] [ dead seconds ] [ hello
seconds ] [ md5 keyid key seconds ] [ retransmit seconds ] [ simple password ]
[ trans-delay seconds ]
undo sham-link source-addr destination-addr
View
OSPF area view
Parameter
source-addr: Source address of a sham-link, an interface address with a 32-bit mask.
destination-addr: Destination address of a sham-link, an interface address with a 32-bit mask.
cost-value: Cost at sham link, in the range of 1 to 65535. By default, it is 1.
password: Specifies authentication in plain text at the interface, 8 characters at most. It must be consistent with the authentication of a sham link peer.
keyid: Specifies the MD5 authentication identifier at the interface. The keyed is in the range of 1 to 255. It must be consistent with the authentication string of sham link peer.
key: Specifies the authentication at the interface. keyid is from 1 to 255 and key is a string up to 16 characters. It must be consistent with the authentication of a sham link peer. When the display current-configuration command is executed, the system displays the 24-character MD5 authentication in cipher text. You can also input a
24-character authentication in cipher text.
dead seconds: Specifies interval for the dead timer, in the range of 1 to 8192 seconds.
By default, it is 40 seconds. It must be consistent with the value of dead seconds for a sham link peer router.
hello seconds: Specifies interval between Hello message transmission at the interface, in the range of 1 to 8192 seconds. By default, it is 10 seconds. It must be consistent with the value of hello seconds for a sham link peer router.
retransmit seconds: Specifies internal for LSA packet retransmission at the interface, in the range of 1 to 8192 seconds. By default, it is 5 seconds.
trans-delay seconds: Specifies delay period for LSA packet transmission at the interface, in the range of 1 to 8192 seconds. By default, it is 1 second.
Description
Use the sham-link command to configure a sham link.
Use the undo sham-link command to delete a sham link.
29-53
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
In the OSPF PE-CE connection, suppose that in an OSPF area there are two sites which belong to the same VPN. They are connected to different PE routers and there is an intra-domain OSPF link (backdoor) between them. Though there may be other routes connecting the two sites via PE routers, these routes are intra-domain routes, and OSPF will first select those routes through the backdoor link. Sometimes, users desire to first select the routes through VPN backbone. Hence it is required to establish sham links between PE routers. In this case, the routes through VPN backbone are of the highest priority within the OSPF area.
The sham link between VPN PE routers is taken as a link within the OSPF area. Its source and destination addresses are both loopback interface addresses with a 32-bit mask, which must be bound to a VPN instance and imported into BGP through a direct-connect route. When configuring the sham link command, the optional parameters are not mutually exclusive. You can only choose in the undo command those parameters which are selected in the corresponding sham-link command.
Caution:
z z z z
The source and destination addresses of a sham link are both loopback interface addresses with a 32-bit mask, which must be bound to a VPN instance and imported into BGP through a direct-connect route.
The source and destination addresses of a sham link cannot be the same.
The same sham link cannot be configured for different OSPF processes.
50 sham links can be configured for an OSPF process at most.
Example
Configure a sham link, with its source address 1.1.1.1 and destination address 2.2.2.2.
[SW8800-ospf-100-area-0.0.0.1] sham-link 1.1.1.1 2.2.2.2 cost 100
29.1.67 summary
Syntax summary
undo summary
View
VPN-instance subaddress family view
Parameter
None
29-54
3Com Switch 8800 Command Reference Guide
Description
Chapter 29 BGP/MPLS VPN Configuration Commands
Use the summary command to enable BGP to perform auto summary to subnet routes.
Use the undo summary command to cancel this summary.
By default, BGP does not perform the auto summary to subnet routes.
After auto summary is enabled, BGP cannot receive the subnet routes imported from
IGP. Using this feature, you can reduce the amount of routing information.
Example
Perform auto summary to subnet routes.
[SW8800-bgp-af-vpn-instance] summary
29.1.68 vpn-instance-capability simple
Syntax vpn-instance-capability simple
undo vpn-instance-capability
View
OSPF protocol view
Parameter
None
Description
Use the vpn-instance-capability simple command to configure a router as
Multi-VPN-Instance CE.
Use the undo vpn-instance-capability command to cancel the configuration.
OSPF multi-VPN-instance is often run at a PE router. So a CE router, on which OSPF multi-VPN-instance runs, is called Multi-VPN-Instance CE. Though they both support multi-VPN-instance, Multi-VPN-Instance CE does not necessarily support BGP/OSPF interoperability.
When an OSPF process is bound to a VPN instance, the default OSPF router is PE router. This command will remove the default setting and change a router into a
Multi-VPN-Instance CE. . After the configuration, OSPF processes will reestablish all its neighbors. DN bits and route-tag will not be checked in routing calculation. To prevent route loss, routing loop test is disabled on PE routes. MGP/OSPF interoperability is also disabled to save system resources.
After the display ospf brief command is executed successfully, the system prompts the information:
29-55
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Multi-VPN-Instance enable on CE router.
Caution:
OSPF processes will set up all its neighbors again after this command is executed.
Example
Configure OSPF process 100 as Multi-VPN-Instance CE.
[SW8800-ospf-100] vpn-instance-capability simple
Restore the OSPF process 100 as PE.
[SW8800-ospf-100] undo vpn-instance-capability
29.1.69 vpn-target
Syntax
vpn-target vpn-target-ext-community [ import-extcommunity |
export-extcommunity | both ]
undo vpn-target vpn-target-ext-community [ import-extcommunity |
export-extcommunity | both ]
View
VPN-instance view
Parameter
import-extcommunity: Ingress route information from the extended community of target VPN.
export-extcommunity: Egress route information to the extended community of target
VPN.
both: Imports both ingress and egress route information to the extended community of target VPN.
vpn-target-ext-community: Adds VPN-target extended community attributes to the ingress and egress of VPN-instance or the VPN-target extended community list of ingress and egress.
Description
Use the vpn-target command to create a VPN-target extended community for
VPN-instance.
29-56
3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands
Use the undo vpn-target command to remove the VPN-target extended community attributes.
By default, the default value is both.
Use the vpn-target command you can create ingress and egress route target extended community lists for a specified VPN-instance. Execute this command once for each target community. Import the received routing information bearing the specific
VPN-target extended community to all VPN-instances, for which an extended community is configured as ingress VPN-target. VPN-target specifies a target VPN extended community. The same as RD, an extended community is either composed of an ASN and an arbitrary number, or composed of an IP address and an arbitrary number.
RD is in either of the following formats:
16-bit ASN (can be 0 here): A custom 32-bit number, for example, 101:3.
32-bit IP address (can be 0.0.0.0 here): A custom 16-bit number, for example,
192.168.122.15:1.
Example
Create a VPN-target extended community for the VPN-instance.
[SW8800] ip vpn-instance vpn-instance_blue
[SW8800-vpn-vpn-instance_blue] vpn-target 1000:1 both
[SW8800-vpn-vpn-instance_blue] vpn-target 1000:2 export-extcommunity
[SW8800-vpn-vpn-instance_blue] vpn-target 173.27.0.130:2 import-extcommunity
29-57
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Chapter 30 MSTP Configuration Commands
30.1 MSTP Configuration Commands
30.1.1 active region-configuration
Syntax active region-configuration
View
MST region view
Parameter
None
Description
Use the active region-configuration command to activate the configurations of MST region.
This command is used to manually activate the configurations of MST region.
Configuring the related parameters, especially the VLAN mapping table, of the MST region, will lead to the recalculation of spanning tree and network topology flapping. To avoid such flapping, MSTP applies the configured parameters and launches recalculation of the spanning tree only when you activate the configured MST region parameters or enable MSTP.
After you have entered this command, MSTP will apply the MST region parameters you have configured to the system and recalculate the spanning tree.
Related command: instance, region-name, revision-level, vlan-mapping modulo,
check region-configuration.
Example
Manually activate MST region configurations.
[SW8800-mst-region] active region-configuration
30.1.2 check region-configuration
Syntax
check region-configuration
30-1
3Com Switch 8800 Command Reference Guide
View
MST region view
Parameter
None
Chapter 30 MSTP Configuration Commands
Description
Use the check region-configuration command to view the configuration information
(including switch region name, revision level, and VLAN mapping table) to be activated.
MSTP defines that the user must ensure the correct region configurations, especially the VLAN mapping table configuration. The switches can be configured in the same region only if their region names, VLAN mapping tables, and MSTP revision levels are configured exactly the same. The switch may not be configured in the expected region due to any slight deviation. You can use this command to display the MST region configuration information to be activated to know to which MST regions the switch belongs and check if the MST region configurations are correct.
Related command: instance, region-name, revision-level, vlan-mapping modulo,
active region-configuration.
Example
Display the configuration information about the region.
[SW8800-mst-region] check region-configuration
Admin. Configuration
Format selector :0
Region name :00b010000001
Revision level :0
Instance Vlans Mapped
0 1 to 9, 11 to 4094
16 10
Table 30-1 Description on the fields of the check region-configuration command
Format selector
Region name
Field
Revision level
Instance Vlans Mapped
Description
The selector defined by MSTP
Region name of MST region
Revision level of MST region
VLAN mapping table of MST region
30-2
3Com Switch 8800 Command Reference Guide
30.1.3 debugging stp
Chapter 30 MSTP Configuration Commands
Syntax
debugging stp { global-error | global-event }
undo debugging stp { global-error | global-event }
View
User view
Parameter
None
Description
Use the debugging stp { global-error | global-event } command to enable STP global error or event debugging.
Use the undo debugging stp { global-error | global-event } command to disable the function.
Example
Enable STP global event debugging.
<SW8800>debugging stp global-event
30.1.4 display stp
Syntax
display stp [ instance instance-id ] [ interface interface-list | slot slot-num ] [ brief ]
View
Parameter
Any view
instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16. Instance 0 represents CIST.
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
slot slot-num: Displays STP information about a specified slot.
30-3
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
brief: Displays only port state, port protection type and port role in the corresponding instance.
Description
Use the display stp command to view the state information and statistics information of the spanning tree.
The MSTP state and statistics information can help analyze and maintain the network topology and maintain the normal operation of MSTP.
If no spanning tree instance ID or port list is specified, the command will display the spanning tree information of all the instances on all the ports in port number order. If the instance ID is specified, the command will display the spanning tree information of the specified instance on all the port in port number order. If only the port list is specified, the command will display the information about all the MSTIs on the port in port number order. If both instance ID and port list are specified, the command will display the spanning tree information of the specified instance and port according to the port list of the instance ID.
If there is an aggregation port, the command will only display the instance information on the master port.
MSTP state information includes:
1) Global CIST parameter: Protocol operation mode, switch priority in the CIST instance, MAC address, Hello Time, Max Age, Forward Delay, Max Hops, CIST common root, external path cost of the switch to the CIST common root, region root, internal path cost of the switch to the region root, CIST root port of the switch, and whether to enable BPDU protection; Number of received TC/TCN packets, time interval for receiving packets. If you specify the relationship between a master root and one or multiple slave roots, the global CIST parameters can also be displayed in CIST Root Type.
2) CIST port parameter: Port state, role, priority, path cost, path cost standard designated bridge, designated port, edge port/non-edge port, whether connected to the point-to-point link, port transit limit, whether to enable Root protection, whether being a region edge port, Hello Time, Max Age, Forward Delay,
Message-age time, and Remaining-hops; Num of Vlans Mapped, whether to remove MAC address table and dynamic ARP (address resolution protocol) table, number of sent BPDU packets, and number of received BPDU packets.
3) Global MSTIs parameter: MSTI instance ID, bridge priority of the instance, region root, internal path cost, MSTI root port, MASTER bridge, path cost to region root and number of the received TC packets. If you specify the relationship between master roots and slave roots in an instance, the global MSTI parameters can also be displayed in MSTI Root Type.
30-4
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
4) MSTIs port parameter: Port state, role, priority, path cost, path cost standard, designated bridge, designated port, and remaining hops. You can view Num of
Vlans Mapped in port view.
Statistics information: Count of TCN, CONFIG BPDU, RST, and MST BPDU transmitted/received via the port.
Related command: reset stp.
Example
Display the state and statistics information about the spanning tree.
<SW8800> display stp instance 0 interface Ethernet 2/1/1 to Ethernet 2/1/4
GigabitEthernet 3/2/1 to GigabitEthernet 3/2/4 GigabitEthernet 3/3/1 brief
MSTID Port Role STP State Protection
0 Ethernet2/1/1 ALTE DISCARDING LOOP
0 Ethernet2/1/2 DESI FORWARDING NONE
0 Ethernet2/1/3 DESI FORWARDING NONE
0 Ethernet2/1/4 DESI FORWARDING NONE
0 GigabitEthernet3/2/1 DESI FORWARDING NONE
0 GigabitEthernet3/2/2 DESI FORWARDING NONE
0 GigabitEthernet3/2/3 DESI FORWARDING NONE
0 GigabitEthernet3/2/4 DESI FORWARDING NONE
0 GigabitEthernet3/3/1 ROOT FORWARDING NONE
Table 30-2 Description on the fields of the display stp command
Field
MSTID
Port
Role
STP State
Protection
Description
MST instance ID in a MST region
Port number, corresponding to the related MST instance
Role of the port
Port STP state, including enabled status and disabled status, and also monitoring and learning status during transition
Protection type on the port
30.1.5 display stp region-configuration
Syntax display stp region-configuration
View
Any view
30-5
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 30 MSTP Configuration Commands
Description
Use the display stp region-configuration command to view the effective MST region configurations.
MST region configuration information includes: region name, region revision level, and associations between VLANs and MSTIs. All these configurations together determine to which MST region a switch belongs.
Related command: stp region-configuration.
Example
Display the MST region configuration information.
<SW8800> display stp region-configuration
Oper Configuration
Format selector :0
Region name :3Com
Revision level :0
Instance Vlans Mapped
0 21 to 4094
1 1 to 10
2 11 to 20
Table 30-3 Description on the fields of the display stp region-configuration command
Format selector
Region name
Field
Revision level
Instance Vlans Mapped
Description
Selector defined by MSTP
Region name of MST region
Revision level of MST region
VLAN mapping table of MST region
30.1.6 display stp tc
Syntax
display stp tc [ instance instanceid ] { all | detected | received | sent }
View
Any view
30-6
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 30 MSTP Configuration Commands
instance instanceid: Instance to be displayed. By default, TC (Topology Change) statistics of all the instances will be displayed.
detected: TC statistics detected by the bridge.
received: TC statistics received at the bridge.
sent: TC statistics sent from the bridge.
all: All TC statistics, including those detected, received and sent by the bridge.
Description
Use the display stp tc command to view TC (transaction capabilities) statistics.
Example
Display all TC statistics.
<SW8800>dis stp tc all
---------- Stp Instance 0 tc or tcn received count ----------
Port Ethernet3/1/1 0
Port Ethernet3/1/9 1
---------- Stp Instance 0 tc or tcn detected count ----------
Port Ethernet3/1/1 1
Port Ethernet3/1/9 0
---------- Stp Instance 0 tc or tcn sent count ----------
Port Ethernet3/1/1 1
Port Ethernet3/1/9 0
30.1.7 instance
Syntax
instance instance-id vlan vlan-list
undo instance instance-id [ vlan vlan-list ]
View
MST region view
Parameter
instance-id: Specifies the spanning tree instance ID, ranging from 0 to 48. The value 0 indicates a CIST.
vlan vlan-list: Specifies the VLAN list, ranging from 1 to 4094. vlan-list = { vlan-id [ to
vlan-id ] }&<1-10>. Where, &<1-10> represents that you can input vlan-ids up to 10 times
30-7
3Com Switch 8800 Command Reference Guide
Description
Chapter 30 MSTP Configuration Commands
Use the instance command to map the specified VLAN list to the specified MSTI.
Use the undo instance command to cancel the specified VLAN list from the specified
MSTI, and the removed VLAN will then be mapped to the CIST (i.e., the Instance 0). If no VLAN is specified in the undo command, all the VLANs associated with the specified MSTI will be mapped to CIST.
By default, all the VLANs are mapped to CIST, i.e., the Instance 0.
MSTP describes the association between VLANs and MSTIs with the VLAN mapping table. You can use this command to configure this table. Every VLAN can be mapped to an MSTI as per your configuration.
You cannot map one VLAN to different instances, while you can map multiple VLANs to one instance. When you remap the mapped VLAN to a different instance, the original mapping relation is removed automatically. The mapping relationship of VLANs and instances in the same MSTP domain must be correct. The data will be transmitted according to the spanning tree topology structure of the instance the VLAN maps to.
Related command: region-name, revision-level, check region-configuration,
vlan-mapping modulo, active region-configuration.
Example
Map VLAN 2 to MSTI 1.
[SW8800-mst-region] instance 1 vlan 2
Map VLAN5-10 to MSTI 3.
[SW8800-mst-region] instance 3 vlan 5 6 7 8 9 10
30.1.8 region-name
Syntax
region-name name
undo region-name
View
MST region view
Parameter
name: Specifies the MST region name of the switch with a character string not exceeding 32 bytes.
Description
Use the region-name command to configure the MST region name of a switch.
30-8
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Use the undo region-name command to restore the default MST region name.
By default, the MST region name of the switch is the switch MAC address in hexadecimal notation.
The switch region name, together with VLAN mapping table of the MST region and
MSTP revision level, is used for determining the region to which the switch belongs.
Related command: instance, revision-level, check region-configuration,
vlan-mapping modulo, active region-configuration.
Example
Set the MST region name of the switch as 3Com.
[SW8800-mst-region] region-name 3Com
30.1.9 reset stp
Syntax
reset stp [ interface interface-list ]
View
User view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
Description
Use the reset stp command to reset the spanning tree statistics information.
The spanning tree statistics information includes TCN, Config BPDU, RST, and MST
BPDU, received and transmitted on the port. Among them, STP BPDU and TCN BPDU are counted on CIST.
If you specify a port list, the command clears the spanning tree statistics information of the specified port. If you do not specify any port, the command clears the spanning tree statistics information of all ports.
Related command: display stp.
Example
Clear the statistics information on the ports from Ethernet2/1/1 through Ethernet2/1/3
<SW8800> reset stp interface Ethernet 2/1/1 to Ethernet 2/1/3
30-9
3Com Switch 8800 Command Reference Guide
30.1.10 revision-level
Chapter 30 MSTP Configuration Commands
Syntax
revision-level level
undo revision-level
View
MST region view
Parameter
level: Specifies the MSTP revision level, ranging from 0 to 65535. By default, MSTP revision level takes 0.
Description
Use the revision-level command to configure MSTP revision level of the switch.
Use the undo revision-level command to restore the default revision level.
MSTP revision level, together with region name and VLAN mapping table, is used for determining the MST region to which the switch belongs.
Related command: instance, region-name, check region-configuration,
vlan-mapping modulo and active region-configuration.
Example
Set the MSTP revision level of the switch MST region to 5.
[SW8800-mst-region] revision-level 5
30.1.11 stp
Syntax
stp { enable | disable }
undo stp
View
System view, Ethernet port view
Parameter
enable: Enables global or port MSTP.
disable: Disables global or port MSTP.
Description
Use the stp command to enable or disable MSTP on a device or a port.
30-10
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Use the undo stp command to restore the default MSTP state on a device or a port.
By default, MSTP is disabled on the switch.
After MSTP is enabled, the switch determines to run MSTP in STP-compatible mode or
MSTP mode as per your configurations. The switch serves as a transparent bridge after
MSTP is disabled.
After MSTP is enabled, it will dynamically maintain the spanning tree state of the corresponding VLAN according to the received configuration BPDU until it is disabled.
After MSTP is disabled, it will not maintain the state.
By default, global and port MSTP are disabled. When you enable MSTP on a device or a port, both global STP and port STP are enabled; if you do not enable MSTP globally, you will fail to use the stp enable command on a port.
Related command: stp mode, stp interface.
Example
Enable MSTP globally.
[SW8800] stp enable
Disable MSTP on Ethernet 2/1/1
[SW8800-Ethernet 2/1/1] stp disable
30.1.12 stp bpdu-protection
Syntax stp bpdu-protection undo stp bpdu-protection
View
System view
Parameter
None
Description
Use the stp bpdu-protection command to enable the BPDU protection on the switch.
Use the undo stp bpdu-protection command to restore the default state of BPDU protection.
By default, BPDU protection is disabled.
Generally, the access ports of the access layer devices are directly connected to user terminals (such as PC) or file servers. In this case, the access ports are set to edge ports to implement fast state transition. However, when such access ports receive configuration BPDU, the system will automatically set them to non-edge ports and
30-11
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands recalculate the spanning tree, which makes the network topology flap. These ports will not receive any STP configuration BPDU in normal cases. Anyway, if someone maliciously attacks the switch with fake configuration BPDU, the network will flap.
MSTP provides BPDU protection function to avoid such attack: After configured with
BPDU protection, the switch will disable the edge port through MSTP, which receives a
BPDU, and notify the network manager at same time. These ports can be resumed by the network manager only.
Example
Enable BPDU protection on the switch.
[SW8800] stp bpdu-protection
30.1.13 stp bridge-diameter
Syntax
stp bridge-diameter bridgenum
undo stp bridge-diameter
View
System view
Parameter
bridgenum: Ranges from 2 to 7 and defaults to 7.
Description
Use the stp bridge-diameter command to configure the switching network diameter.
Use the undo stp bridge-diameter command to restore the default network diameter.
The definition of network diameter: Maximum count of switches between the farthest communication ends.
The stp bridge-diameter command configures the switching network diameter and determines the three time parameters of MSTP accordingly. This configuration takes effect on CIST only but makes no sense for MSTI.
The spanning tree convergence can be speeded up, when Hello Time, Forward Delay, and Max Age are well configured. These parameters are related to the network scale.
You can configure the network scale to get the time parameters. When users configure the bridge-diameter parameter of the switch, MSTP will automatically set Hello Time,
Forward Delay, and Max Age to moderate values. When bridge-diameter defaults to 7, the time parameters also take their respective default values.
Related command: stp timer forward-delay, stp timer hello, stp timer max-age.
30-12
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Note:
The stp bridge-diameter command configures the switching network diameter and determines the three MSTP time parameters (Hello Time, Forward Delay, and Max Age) accordingly.
Example
Set the diameter of the switching network to 5.
[SW8800] stp bridge-diameter 5
30.1.14 stp cost
Syntax
stp [ instance instance-id ] cost cost
undo stp [ instance instance-id ] cost
View
Ethernet port view
Parameter
instance instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16.
The Instance 0 represents CIST.
cost cost: Port path cost. Its range depends on the selected standard of path cost.
Description
Use the stp instance cost command to configure the port path cost on the specified
MSTI for the current port.
Use the undo stp instance cost command to restore the path cost on the specified
MSTI.
By default, switch calculates the path costs of a port on different MSTIs.
You may specify the instance-id parameter as 0 to configure CIST path cost of the port.
The path cost has effect on the port role selection. A port can be configured with different path costs on different MSTIs. Thus the traffic from different VLANs can run over different physical links, thereby implementing the VLAN-based load-balancing.
MSTP will recalculate the port role and transit its state, upon the port path cost changes.
Related command: stp interface instance cost.
30-13
3Com Switch 8800 Command Reference Guide
Example
Chapter 30 MSTP Configuration Commands
Set the path cost of Ethernet 2/1/3 on MSTI 2 to 200.
[SW8800-Ethernet2/1/3] stp instance 2 cost 200
30.1.15 stp edged-port
Syntax
stp edged-port { enable | disable }
undo stp edged-port
View
Ethernet port view
Parameter
enable: Configures the current port as an edge port.
disable: Configures the current port as a non-edge port.
Description
Use the stp edged-port enable command to configure the current Ethernet port as an edge port.
Use the stp edged-port disable command to configure the current Ethernet port as a non-edge port.
Use the undo stp edged-port command to restore the default state, i.e., non-edge port.
By default, all the switch ports are configured as non-edge ports.
If the current Ethernet port is connected to other switch, you can use the stp edged-port
disable or no stp edged-port command to configure it as a non-edge port. The stp edged-port enable command is used for configuring the port as an edge port.
A port is considered as an edge port when it is directly connected to the user terminal, instead of any other switches or shared network segments. The edge port will not cause loop upon network topology changes. Accordingly, you can configure a port as an edge port, so that it can transit to forwarding state fast. For this purpose, configure the Ethernet port directly connected to the user terminal as an edge port.
Because the edge port is not connected to any other switches, it will not receive the configuration BPDUs from them. Before BPDU protection is enabled on the switch, the port received a BPDU runs as a non-edge port, even if it is configured as an edge port.
Related command: stp interface edged-port.
30-14
3Com Switch 8800 Command Reference Guide
Example
Chapter 30 MSTP Configuration Commands
Configure Ethernet 2/1/1 as a non-edge port.
[SW8800-Ethernet2/1/1] stp edged-port disable
30.1.16 stp instance root primary
Syntax
stp [ instance instance-id ] root primary [ bridge-diameter bridgenum [ hello-time
centi-senconds ] ]
undo stp [ instance instance-id ] root
View
System view
Parameter
instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16. Specify it as
0 to configure the root bridge of CIST.
root primary: Configures the current switch as the primary root of the specified MSTI.
bridge-diameter bridgenum: Specifies the network diameter of the spanning tree, ranging from 2 to 7.
hello-time centi-senconds: Specifies the Hello Time of the spanning tree, which is in the range from 100 to 1000 and measured in centiseconds.
Description
Use the stp root primary command to configure the current switch as the primary root of the specified MSTI.
Use the undo stp root command to cancel the current switch for the primary root of the designated MSTI.
If you execute these commands without using the instance instance-id option, your configuration takes effect only on the CIST instance.
When you set the instance-id parameter to 0, its following parameter setting takes effect.
By default, the switch does not server as a root bridge.
You can specify one root bridge for each MSTI regardless of the switch priority. When setting a root bridge, you can use this command to specify the switching network diameter and determine the three time parameters (Hello time, Forward Delay and Max
Age). Because the switch calculates inaccurate Hello time value, you can specify the switching network diameter and the Hello Time for the root bridge, and thus determine
30-15
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands other two parameter values for the root bridge. In general, you are recommended to determine the other two time parameter values by setting the network diameter.
Caution:
In a switching network, you can configure only one root bridge for each MSTI and one or more secondary switches. Do not configure more than one root bridge for an MSTI at the same time. Otherwise, the calculation result will be unpredictable.
After a switch is configured as a primary root bridge or a secondary root bridge, users cannot modify the bridge priority of the switch.
Example
Designate the current switch as the root bridge of MSTI 1 and specify the diameter of the switching network as 4 and the Hello Time as 500 centiseconds.
[SW8800] stp instance 1 root primary bridge-diameter 4 hello-time 500
30.1.17 stp interface
Syntax
stp interface interface-list { enable | disable }
View
System view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
enable: Enables MSTP on the port.
disable: Disables MSTP on the port.
Description
Use the stp interface command to enable/disable MSTP on a switch port in system view.
30-16
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
By default, if MSTP is enabled globally, it is enabled on every port. If MSTP is disabled globally, it is also disabled on every port.
When MSTP is disabled, the corresponding port stays in forwarding state and does not take part in any MSTI calculation.
Caution:
If you disable MSTP on a port, a loop may be generated.
Related command: stp mode, stp.
Example
Enable MSTP on Ethernet 2/1/1 in system view.
[SW8800] stp interface Ethernet 2/1/1 enable
30.1.18 stp interface instance cost
Syntax
stp interface interface-list [ instance instance-id ] cost cost
undo stp interface interface-list [ instance instance-id ] cost
View
System view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16. The instance
0 represents CIST.
cost: Port path cost. Its range depends on the selected standard of path cost.
Description
Use the stp interface cost command to configure the path cost of the specified port on the specified MSTI in system view.
30-17
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Use the undo stp interface cost command to restore the path cost of the specified port on the specified MSTI to the default value in system view.
By default, switch automatically calculates the path costs of a port on different MSTIs based on corresponding standard.
You may specify the instance-id parameter as 0 to configure CIST path cost of the port.
The path cost has effect on the port role selection. You can configure different path costs for different MSTIs on a port. Thus the traffic from different VLANs can run over different physical links, thereby implementing the VLAN-based load-balancing. MSTP will recalculate the port role and transit its state, upon the port path cost changes.
Related command: stp cost.
Example
Set the path cost of Ethernet 2/1/3 on MSTI 2 to 400 in system view.
[SW8800] stp interface Ethernet 2/1/3 instance 2 cost 400
30.1.19 stp interface edged-port
Syntax
stp interface interface-list edged-port {enable | disable }
undo stp interface interface-list edged-port
View
System view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
enable: Configures the current port as an edge port.
disable: Configures the current port as a non-edge port.
Description
Use the stp interface edged-port enable command to configure a port as an edge port in system view.
Use the stp interface edged-port disable command to configure a port as a non-edge port in system view.
30-18
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Use the undo stp interface edged-port command to restore the port to the default type (that is, non-edge port) in system view.
By default, all the switch ports are configured as non-edge ports.
If the current Ethernet port is connected to other switches, you can use the stp
interface edged-port disable or undo stp interface edged-port command to configure it as a non-edge port. The stp interface edged-port enable command is used for configuring the port as an edge port.
A port is considered as an edge port when it is directly connected to the user terminal, instead of any other switches or shared network segments. The edge port will not cause loop upon network topology changes. Accordingly, you can configure a port as an edge port, so that it can transit to forwarding state fast. For this purpose, configure the Ethernet port directly connected to the user terminal as an edge port.
Because the edge port is not connected to any other switches, it will not receive the configuration BPDUs from them. Before BPDU protection is enabled on the switch, the port that receives a BPDU runs as a non-edge port, even if it is configured as edge port.
Related command: stp edged-port.
Example
Configure Ethernet2/1/3 as an edge port in system view.
[SW8800] stp interface Ethernet 2/1/3 edged-port enable
30.1.20 stp interface instance port priority
Syntax
stp interface interface-list instance instance-id port priority priority
undo stp interface interface-list instance instance-id port priority
View
System view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16. The Instance
0 represents CIST.
30-19
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
port priority priority: Specifies the port priority, ranging from 0 to 240 with a step length of 16, e.g., 0, 16 and 32. By default, the port has a priority of 128 on every MSTI.
Description
Use the stp interface instance port priority command to configure the priority of the specified port on the specified MSTI in system view.
Use the undo stp interface instance port priority command to restore the default priority.
You may specify the instance-id parameter as 0 to configure CIST priority of the port.
The port priority has effect on the port role selection for the specified MSTI. A port can be configured with different priorities on different MSTIs. Thus the traffic from different
VLANs can run over different physical links, thereby implementing the VLAN-based load-balancing. MSTP will recalculate the port role and transit its state, upon the port priority changes.
Related command: stp instance port priority.
Example
Set the priority of Ethernet 2/1/3 on MSTI 2 to 16 in system view.
[SW8800] stp instance 2 interface Ethernet 2/1/3 port priority 16
30.1.21 stp interface loop-protection
Syntax
stp interface interface-list loop-protection
undo stp interface interface-list loop-protection
View
System view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
Description
Use the stp interface loop-protection command to enable loop protection on the switch in system view.
30-20
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Use the undo stp interface loop-protection command to restore the default loop protection state.
When port roles change, you can use the stp interface loop-protection command to change port state from forwarding state to discarding state, thus avoiding port loopback.
The root port and other blocked ports maintain their state according to the BPDUs sent by uplink switch. Due to link congestion or unidirection link failure, these ports may be unable to receive BPDUs and the switch will select root port again. In this case, the former root port will turn into the specified port and the former blocked ports will change to the forwarding state, and link loop appears.
The loop protection function can inhibit the generation of loop. After it is enabled, the root port role will change according to the uplink port state. The blocked port will maintain in discarding state and do not forward packets, thus avoiding link loop.
By default, loop protection is disabled.
Related command: stp loop-protection.
Note:
For a loopback port, if the port participates in STP calculation, it must be specified port regardless of internal loop or external loop. However, the port is always set to be in discarding state on all instances.
Example
Enable loop protection on the Ethernet2/1/1.
[SW8800] stp interface Ethernet2/1/1 loop-protection
30.1.22 stp interface mcheck
Syntax
stp interface interface-list mcheck
View
System view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions
30-21
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
Description
Use the stp interface mcheck command to perform mcheck operation on the port in system view.
If a port of an MSTP switch on a switching network has ever been connected to an STP switch, the port will automatically transit to operate in STP-compatible mode. However, when the STP switch is removed, the port stays in STP-compatible mode and cannot automatically transit back to MSTP mode. In this case, you can perform mCheck operation to transit the port to MSTP mode by force.
Note:
By default, MSTP runs in MSTP mode, which is compatible with RSTP and STP (This mode can recognize MSTP BPDU, STP config BPDU and RSTP config BPDU).
However, the STP switch can only recognize config BPDU (STP BPDU) sent by the
STP and RSTP bridges. After the switch running STP-compatible mode switches back to MSTP mode, it will not send MSTP BPDU if you do not execute the stp mcheck command. Therefore, the connected device still sends config BPDU (STP BPDU) to it, causing the same configuration exist in different regions and other problems.
Remember to perform stp interface mcheck after modifying stp mode.
Related command: stp mcheck, stp mode.
Example
Set mcheck parameter of Ethernet2/1/3 in system view.
[SW8800] stp interface Ethernet2/1/3 mcheck
30.1.23 stp interface point-to-point
Syntax
stp interface interface-list point-to-point { force-true | force-false | auto }
undo stp interface interface-list point-to-point
View
System view
30-22
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 30 MSTP Configuration Commands
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
force-true: Indicates the Ethernet port connected to a point-to-point link.
force-false: Indicates the Ethernet port not connected to a point-to-point link.
auto: Configures to automatically check if the link to the Ethernet port is a point-to-point link.
Description
Use the stp interface point-to-point command to configure a port (not) to be connected to a point-to-point link in system view.
Use the undo stp interface point-to-point command to restore the default state of the link to the Ethernet port.
By default, the parameter defaults to auto, that is, MSTP checks if the link to the
Ethernet port is a point-to-point link.
The port not connected with the point-to-point link cannot transit fast.
The master ports of the link aggregation and the ports operating in full-duplex mode are connected to the point-to-point link. You are recommended to keep the default settings and let MSTP detect the link state automatically.
This configuration takes effect on the CIST and all the MSTIs. The settings of a port whether to connect the point-to-point link will be applied to all the MSTIs where the port belongs. Note that a temporary loop may be redistributed if you configure a port not physically connected with the point-to-point link as connected to such a link by force.
Related command: stp point-to-point.
Example
Configure Ethernet2/1/3 to be connected to the point-to-point link in system view.
[SW8800] stp interface Ethernet2/1/3 point-to-point force-true
30.1.24 stp interface reset-arp
Syntax
stp interface interface-list reset-arp { enable | disable }
30-23
3Com Switch 8800 Command Reference Guide
View
System view
Parameter
Chapter 30 MSTP Configuration Commands
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
Description
Use the stp interface reset-arp enable command to enable reset-arp on the port of the device, removing the MAC address table and dynamic ARP table of the port.
Use the stp interface reset-arp disable command to disable reset-arp on the port.
After the port receives TC/TCN packets, the system checks whether the reset-arp is enabled for the stp-enabled ports of the whole switch. If reset-arp is enabled on the port, and the STP port is in active state, the system deletes MAC address and dynamic ARP tables on the port. In the case of TC/TCN entries of instance 0, the system deletes the
ARP entries of all instances. In the case of TC/TCN entries of any other instance, the system deletes the ARP entries of this instance.
By default, the function is disabled.
Related command: stp reset-arp.
Example
Enable reset-arp on the port Ethernet3/1/20 in system view.
[SW8800]stp interface Ethernet3/1/20 reset-arp enable
30.1.25 stp interface root-protection
Syntax
stp interface interface-list root-protection
undo stp interface interface-list root-protection
View
System view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
30-24
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
Description
Use the stp interface root-protection command to enable Root protection on the switch in system view.
Use the undo stp interface root-protection command to restore the default Root protection state.
By default, Root protection is disabled.
In case of configuration error or malicious attack, the legal primary root may receive the
BPDU with a higher priority and then loose its place, which causes network topology change errors. Due to the illegal change, the traffic supposed to travel over the high-speed link may be pulled to the low-speed link and congestion will occur on the network.
Root protection function is used against such problem. The port configured with Root protection only plays a role of designated port on every instance. Whenever such port receives a higher-priority BPDU, that is, it is about to turn into non-designated port, it will be set to listening state and not forward packets any more (as if the link to the port is disconnected). So, Root protection takes effect only when it is enabled on a designated port. If the port has not received any higher-priority BPDU for a certain period of time thereafter, it will resume its original state.
Related command: stp root-protection.
Example
Enable Root protection on the Ethernet2/1/1
[SW8800] stp interface Ethernet2/1/1root-protection
30.1.26 stp interface transmit-limit
Syntax
stp interface interface-list transmit-limit packetnum
undo stp interface interface-list transmit-limit
View
System view
Parameter
interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as
interface _list = { { interface_type interface_num | interface_name } [ to { interface_type
30-25
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,
interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.
packetnum: Maximum number of configuration BPDUs that can be transmitted via the port per Hello Time, ranging from 1 to 255 (expressed as a counter value without any units). By default, the transmission limit on every port is 3.
Description
Use the stp interface transmit-limit command to configure an amount limit to the configuration BPDU transmitted via a specified port during the Hello Time in system view.
Use the undo stp interface transmit-limit command to restore the default limit on the specified port in system view.
The larger the value is, the more packets can be transmitted in a time unit, yet the more switch resources will be occupied. With a moderate value, the amount of the BPDUs transmitted during Hello Time via every port can be limited and MSTP will not occupy too many bandwidth resources when the network topology flaps.
Related command: stp transmit-limit.
Example
Set a limit of 5 to the packets transmitted via Ethernet2/1/3 in system view.
[SW8800] stp interface Ethernet2/1/3transmit-limit 5
30.1.27 stp loop-protection
Syntax stp loop-protection undo stp loop-protection
View
Ethernet port view
Parameter
none
Description
Use the stp loop-protection command to enable loop protection function.
Use the undo stp loop-protection command to restore the default setting.
By default, the loop protection function is not enabled.
30-26
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Note:
The port configured with loop protection can only turn into discarding state on every instance. When such port receives no configuration message for a long time, only the port role changes, its discarding state remains unchanged, so no packets are forwarded. In this way, if the peer end cannot send BPDU packets due to error operation, and the port enters forwarding state directly for not receiving configuration message for a long time, no loop will be generated by enabling the loop protection.
Example
Enable loop protection function in Ethernet2/1/1.
[SW8800-Ethernet2/1/1] stp loop-protection
30.1.28 stp max-hops
Syntax
stp max-hops hop
undo stp max-hops
View
System view
Parameter
hop: Specifies the max hops, ranging from 1 to 40. By default, MST region Max Hops is
20.
Description
Use the stp max-hops command to configure the Max Hops of an MST region.
Use the undo stp max-hops command to restore the default Max Hops.
On CIST and MSTIs, the Max Hops configured on the region root determines the max switching network diameter supported by the local MST region. As the BPDU travels from the spanning tree root, each time when it is forwarded by a switch, the max hops will be reduced by 1. The switch discards the configuration BPDU with 0 hops left, thereby limiting the network scale inside the region. If the current switch is a CIST root bridge or MSTI root bridge in an MST region, the Max Hops configured on it will be the network diameter of the spanning tree to limit its scale in the local MST region. The Max
Hops configured on the root bridge in an MST region will be adopted by other switches in the same region.
30-27
3Com Switch 8800 Command Reference Guide
Example
Set the Max Hops of an MST region to 35.
[SW8800] stp max-hops 35
Chapter 30 MSTP Configuration Commands
30.1.29 stp mcheck
Syntax stp mcheck
View
Ethernet port view
Parameter
None
Description
Use the stp mcheck command to perform mcheck on the current port.
If a port of an MSTP switch on a switching network has ever been connected to an STP switch, the port will automatically transit to operate in STP-compatible mode. However, when the STP switch is removed, the port stays in STP-compatible mode and cannot automatically transit back to MSTP mode. In this case, you can perform mCheck operation to transit the port to MSTP mode by force.
Note:
By default, MSTP runs in MSTP mode, which is compatible with RSTP and STP (This mode can recognize MSTP BPDU, STP config BPDU and RSTP config BPDU).
However, the STP switch can only recognize config BPDU (STP BPDU) sent by the
STP and RSTP bridges. After the switch running STP-compatible mode switches back to MSTP mode, it will not send MSTP BPDU if you do not execute the stp mcheck command. Therefore, the connected device still sends config BPDU (STP BPDU) to it, causing the same configuration exist in different regions and other problems.
Remember to perform stp interface mcheck after modifying stp mode.
Related command: stp mode, stp interface mcheck.
Example
Set mcheck parameter for Ethernet2/1/1.
[SW8800-Ethernet2/1/1] stp mcheck
30-28
3Com Switch 8800 Command Reference Guide
30.1.30 stp mode
Chapter 30 MSTP Configuration Commands
Syntax
stp mode { stp | mstp }
undo stp mode
View
System view
Parameter
stp: Configures the MSTP operation mode as STP-compatible.
mstp: Configures the MSTP operation mode as MSTP.
Description
Use the stp mode command to configure MSTP operation mode of the switch.
Use the undo stp mode command to restore the default MSTP operation mode.
By default, switch work in MSTP mode
MSTP and RSTP are compatible and they can recognize the packets of each other.
However, STP cannot recognize MSTP packets. To implement the compatibility, MSTP provides two operation modes, STP-compatible mode and MSTP mode. In
STP-compatible mode, the switch sends STP BPDU packets via every port. In MSTP mode, the switch ports send MSTP BPDU packets. When detecting it is connected to an STP switch (it receives config BPDU packets from the STP switch), the switch port enters automatically STP-compatible mode and sends config BPDU packets from the
STP switch. The port enters MSTP mode only when receiving MSTP BPDU packets again.
Related command: stp mcheck, stp, stp interface, stp interface mcheck.
Example
Set MSTP operation mode as STP-compatible.
[SW8800] stp mode stp
30.1.31 stp pathcost-standard
Syntax
stp pathcost-standard { dot1t | dot1d-1998 | legacy }
View
System view
30-29
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 30 MSTP Configuration Commands
dot1t, dot1d-1998, legacy : Three standards of the path cost calculation on STP port.
Description
Use the stp pathcost-standard command to set the path cost calculation standard on
STP port.
The port rate must be obtained first before you can calculate the path cost of a port as the path cost is associated with the port rate. The three standards use their own way to work out the port rate, based on which each standard calculates the port path cost by a certain algorithm.
By default, DOT1T calculation standard is applied.
Example
Set the DOT1D-1998 as the path cost calculation standard on the STP port.
[SW8800]stp pathcost-standard dot1d-1998
30.1.32 stp point-to-point
Syntax
stp point-to-point { force-true | force-false | auto }
undo stp point-to-point
View
Ethernet port view
Parameter
force-true: Indicates the Ethernet port connected to a point-to-point link.
force-false: Indicates the Ethernet port not connected to a point-to-point link.
auto: Configures to automatically check if the link to the Ethernet port is a point-to-point link.
Description
Use the stp point-to-point command to configure the current Ethernet port (not) to connect with point-to-point link.
Use undo stp point-to-point command to configure the link state to the default state in which MSTP automatically detects if the link to the Ethernet port is point-to-point link.
By default, switch adopts auto mode.
The port not connected with the point-to-point link cannot transit fast.
30-30
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
The master ports of the link aggregation and the ports operating in full-duplex mode are connected to the point-to-point link. You are recommended to keep the default settings and let MSTP detect the link state automatically.
This configuration takes effect on the CIST and all the MSTIs. The settings of a port whether to connect the point-to-point link will be applied to all the MSTIs where the port belongs. Note that a temporary loop may be redistributed if you configure a port not physically connected with the point-to-point link as connected to such a link by force.
Related command: stp interface point-to-point.
Example
Configure Ethernet2/1/3 to be connected to the point-to-point link.
[SW8800-Ethernet2/1/3] stp point-to-point force-true
30.1.33 stp port priority
Syntax
stp [ instance instance-id ] port priority priority
undo stp [ instance instance-id ] port priority
View
Ethernet port view
Parameter
instance instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16.
The Instance 0 represents CIST.
port priority priority: Specifies the port priority, ranging from 0 to 240, with a step length of 16, e.g., 0, 16, and 32. By default, the priorities of a port on the MSTIs are 128.
Description
Use the stp port prioritycommand to configure the priority of a port on a specified
MSTI.
Use the undo stp port priority command to restore the default priority of the port on the specified MSTI.
You may specify the instance-id parameter as 0 to configure CIST priority of the port.
The port priority has effect on the port role selection. A port can be configured with different priorities on different MSTIs. Thus the traffic from different VLANs can run over different physical links, thereby implementing the VLAN-based load-balancing. MSTP will recalculate the port role and transit its state, upon the port priority changes.
If you execute these command without using the instance instance-id option, your configuration takes effect only on the CIST instance.
30-31
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Caution:
This command will affect the root bridge selection in different instances and even the common root bridge selection, as well as modify the whole network topology. Modify the configuration with caution after you configured them according to the network program.
Related command: stp interface port priority.
Example
Set the priority of Ethernet2/1/3 on MSTI 2 to 16.
[SW8800-Ethernet2/1/3] stp instance 2 port priority 16
30.1.34 stp region-configuration
Syntax stp region-configuration undo stp region-configuration
View
System view
Parameter
None
Description
Use the stp region-configuration command to enter MST region view.
Use the undo stp region-configuration command to restore the default MSTP region configurations.
By default, the three MST region parameters take the default values. The MST region name of the switch is the first MAC address, all the VLANs are mapped to CIST, and
MSTP revision level takes 0.
You can enter MST region view, using the stp region-configuration command. Then you can configure the parameters including region name, revision level, and VLAN mapping table of the region.
Example
Enter MST region view.
30-32
3Com Switch 8800 Command Reference Guide
[SW8800] stp region-configuration
[SW8800-mst-region]
Chapter 30 MSTP Configuration Commands
30.1.35 stp reset-arp
Syntax
stp reset-arp { enable | disable }
View
Ethernet port view
Parameter
None
Description
Use the stp reset-arp enable command to enable reset-arp on the port of the device, removing the MAC address table and dynamic ARP tables of the port.
Use the stp reset-arp disable command tot disable the function.
By default, the function is disabled.
Related command: stp interface reset-arp.
Example
Enable reset-arp on Ethernet port Ethernet3/1/20.
[SW8800-Ethernet3/1/20]stp reset-arp enable
30.1.36 stp instance root secondary
Syntax
stp [ instance instance-id ] root secondary [ bridge-diameter bridgenum ]
[ hello-time centi-senconds ]
undo stp [ instance instance-id ] root
View
System view
Parameter
instance instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16.
Specify it as 0 to configure CIST.
root secondary: Configures the current switch as the secondary root of the designated
MSTI.
30-33
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
bridge-diameter bridgenum: Specifies the network diameter of the spanning tree, ranging from 2 to 7.
hello-time centi-senconds: Specifies the Hello Time of the spanning tree, which is in the range from 100 to 1000 and is measured in centiseconds.
Description
Use thestp root secondary command to configure the current switch as the secondary root bridge of a specified MSTI.
Use the undo stp root command to cancel the current switch for the secondary root bridge of a specified MSTI.
Only when the instance-id parameter is set to 0, can its following parameters take effect.
By default, the switch does not server as a secondary root bridge.
You can configure one or more secondary root bridges in an MSTI. If the primary root is down or powered off, the secondary root will take its place. Among several secondary root bridges, the one with the smallest MAC address takes the place of the failed primary root.
When configuring the secondary root bridge, you may also specify the switching network diameter and the Hello Time of the switch, so that the other two parameters,
Forward Delay and Max Age, of the switch can be determined. To configure the current switch as the root bridge of CIST, simply specify instance-id as 0. You can configure only one root bridge for an MSTI and one or more secondary root bridges for it.
After a switch is configured as a primary root bridge or a secondary root bridge, users cannot modify the bridge priority of the switch.
Example
Configure the current switch as the secondary root bridge of MSTI 4 and specify the diameter of the switching network as 5 and the Hello Time of the switch as 300 centiseconds.
[SW8800] stp instance 4 root primary bridge-diameter 5 hello-time 300
30.1.37 stp root-protection
Syntax stp root-protection undo stp root-protection
View
Ethernet port view
30-34
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 30 MSTP Configuration Commands
Description
Use the stp root-protection command to enable on Root protection the switch.
Use the undo stp root-protection command to restore the default state of Root protection.
By default, Root protection is disabled.
In case of configuration error or malicious attack, the legal primary root may receive the
BPDU with a higher priority and then loose its place, which causes network topology change errors. Due to the illegal change, the traffic supposed to travel over the high-speed link may be pulled to the low-speed link and congestion will occur on the network.
MSTP provides Root protection function to protect the root bridge: The port configured with Root protection only plays a role of designated port on every instance. Whenever such a port receives a higher-priority BPDU, it will be set to listening state and not forward packets any more (as if the link to the port is disconnected). If the port has not received any higher-priority BPDU for a certain period of time thereafter, it will resume the normal state.
Related command: stp interface root-protection.
Example
Enable Root protection on the Ethernet2/1/1 port of the switch.
[SW8800-Ethernet2/1/1] stp root-protection
30.1.38 stp tc-protection
Syntax stp tc-protection enable stp tc-protection disable
View
System view
Parameter
None
Description
Use the stp tc-protection enable command to enable the protection function so that the switch is protected against attack from TC-BPDU packets.
30-35
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
Use the stp tc-protection disable command to disable the protection function.
By default, the protection against TC-BPDU packet attack is enabled.
As a general rule, the switch deletes the corresponding entries in the MAC address table and ARP table upon receiving TC-BPDU packets. Under malicious attacks of
TC-BPDU packets, the switch shall receive a great number of TC-BPDU packets in a very short period. Too frequent delete operations shall consume huge switch resources and bring great risk to network stability.
When the protection from TC-BPDU packet attack is enabled, the switch just perform one delete operation in a specified period (generally, 15 seconds) after receiving
TC-BPDU packets, as well as monitoring whether it receives TC-BPDU packets during this period. Even if it detects a TC-BPDU packet is received in a period shorter than the specified interval, the switch shall not run the delete operation till the specified interval is reached. This can avoid frequent delete operations to the MAC address table and
ARP table.
Example
Enable TC-BPDU protection on the switch.
[SW8800] stp tc-protection enable
30.1.39 stp timer forward-delay
Syntax
stp timer forward-delay centi-senconds
undo stp timer forward-delay
View
System view
Parameter
centi-senconds: Specifies Forward Delay, which is in the range from 400 to 3000 and measured in centiseconds. By default, the Forward Delay of the switch is 1500 centiseconds.
Description
Use the stp timer forward-delay command to configure Forward Delay for the switch.
Use the undo stp timer forward-delay command to restore the default Forward Delay.
To avoid temporary loop, MSTP defines a medium state, Learning, when the port switches from the Discarding state to Forwarding state. There is also a delay before state switchover to guarantee the synchronous switchover with the remote switch. The
Forward Delay configured on the root bridge determines the state transition time.
30-36
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
The root bridge will determine the state transition time according to the configured values, while the other switches will apply the forward delay configured on it.
When configuring Hello time, Forward Delay and Max Age, guarantee the following equations:
2 x (Forward Delay - 1.0 second) >= Max Age
Max Age >= 2 x (Hello Time + 1.0 second)
Only if the above-mentioned formulas are equal can the MSTP normally operate on the entire network. Otherwise, the network may flap frequently. You are recommended to use the stp instance root primary command to specify the diameter of the switching network, so that MSTP can automatically calculate and give the moderate values for the time parameters.
Note:
Hello time, Forward Delay and Max Age affect each other. Modifying any of them will affect the value of other two parameters.
Related command: stp timer hello, stp timer max-age, stp bridge-diameter.
Example
Set the Forward Delay of the device to 2000 centiseconds.
[SW8800] stp timer forward-delay 2000
30.1.40 stp timer hello
Syntax
stp timer hello centi-senconds
undo stp timer hello
View
System view
Parameter
centi-senconds: Specifies Hello Time value with an integer in the range of 100 to 1000 in units of centiseconds. By default, the Hello Time of the switch is 200 centiseconds.
Description
Use the stp timer hello command to configure Hello Time of the switch.
Use the undo stp timer hello command to restore the default Hello Time.
30-37
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
The STP defines to transmit configuration BPDU regularly at an interval specified with
Hello Time to keep the spanning tree stable. If the switch receives no BPDU packets for a period of time, it will recalculate the spanning tree upon the BPDU timeouts. The root bridge transmits BPDU packets at an interval as you configured, while other switches apply the Hello Time configured on the root bridge.
When configuring Hello time, Forward Delay and Max Age, remember to guarantee the following equations:
2 x (Forward Delay -1.0 second) >= Max Age
Max Age >= 2 x (Hello Time + 1.0 second)
Only if the earlier-mentioned formulas are equal can the MSTP normally operate on the entire network. Otherwise, the network may flap frequently. You are recommended to use the stp root primary command to specify the diameter of the switching network, so that MSTP can automatically calculate and give the moderate values for the time parameters.
Related command: stp timer forward-delay, stp timer max-age, stp
bridge-diameter.
Example
Set Hello Time of the switch to 400 centiseconds.
[SW8800] stp timer hello 400
30.1.41 stp timer max-age
Syntax
stp timer max-age centi-senconds
undo stp timer max-age
View
System view
Parameter
centiseconds: Specifies the Max Age, which is in the range from 600 to 4000 and measured with centiseconds. By default, the Max Age of the switch is 2000 centiseconds.
Description
Use the stp timer max-age command to configure the Max Age of the switch.
Use the undo stp timer max-age command to restore the default Max Age.
MSTP can detect the link fault and automatically resume the forwarding state of the redundant link. On the CIST, the switch checks if the configuration BPDU received via
30-38
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands the port expires according to the Max Age. If the BPDU expires, the MSTI has to be calculated again.
Max Age takes no effect on MSTIs. If the current switch is CIST root bridge, it will check if the configuration BPDU expires according to the configured Max Age. Otherwise, the switch adopts the Max Age configured on the CIST root bridge.
When you configure Hello time, Forward Delay and Max Age, remember to guarantee the following equations:
2 x (Forward Delay -1.0 second) >= Max Age
Max Age >= 2 x (Hello Time + 1.0 second)
Only if the earlier-mentioned formulas are equal can the MSTP normally operate on the entire network. Otherwise, the network may flap frequently. You are recommended to use the stp instance root primary command to specify the diameter of the switching network, so that MSTP can automatically calculate and give the moderate values for the time parameters.
Related command: stp timer forward-delay, stp timer hello, stp bridge-diameter.
Example
Set Max Age of the device to 1000 centiseconds.
[SW8800] stp timer max-age 1000
30.1.42 stp timer-factor
Syntax
stp timer-factor number
undo stp timer-factor
View
System view
Parameter
number: Specifies the multiple of hello time, in the range of 1 to 10. The default value is
3.
Description
Use the stp timer-factor command to configure the multiple of hello time for the switch.
Use the undo stp timer-factor command to restore the default multiple value.
The Ethernet switch transmits STP packets every hello time. Generally, if the switch does not receive the STP packets from the upstream switch for three times of hello time, the switch will decide the upstream switch is dead and will recalculate the topology of the network. Then in steady network, the recalculation may be caused when the
30-39
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands upstream is busy. In this case, users can redefine the timeout interval to a longer time
(four times the hello time or larger) by define the multiple of hello time. It is recommended to set 5, 6 or 7 as the value of multiple in the steady network.
Example
Set the multiple value of hello time to 7.
[SW8800] stp timer-factor 7
30.1.43 stp transmit-limit
Syntax
stp transmit-limit packetnum
undo stp transmit-limit
View
Ethernet port view
Parameter
packetnum: Specifies the amount limit to the transmitted packets, ranging from 1 to 255
(expressed as a counter value without any units). By default, the value is 3.
Description
Use the stp transmit-limit command to configure an amount limit to the configuration
BPDU transmitted via a port during the Hello Time.
Use the undo stp transmit-limit command to restore the default limit.
The larger the value is, the more packets can be transmitted in a time unit, yet the more switch resources will be occupied. With a moderate value, the amount of the BPDUs transmitted during Hello Time via every port can be limited and MSTP will not occupy too many bandwidth resources when the network topology flaps.
Related command: stp interface transmit-limit.
Example
Set a limit of 5 to the packets transmitted via Ethernet2/1/1.
[SW8800-Ethernet2/1/1] stp transmit-limit 5
30.1.44 stp update-arp
Syntax
stp update-arp { enable | disable }
30-40
3Com Switch 8800 Command Reference Guide
View
System view
Parameter
None
Chapter 30 MSTP Configuration Commands
Description
Use the stp update-arp enable command to enable ARP address update. After the
TC-protection feature is enabled, the switch deletes MAC address entries if receiving
TC/TCN packets, and deletes ARP address entries if the newly learned MAC address conflicts with the ARP address.
Use the stp update-arp disable command to restore the former principle for deleting
ARP address entries. That is, when receiving TC/TCN packets, the port broadcasts TC packets to delete the MAC address entries of the port in STP active state on the bridge.
By default, ARP address update is enabled.
Example
Disable ARP address update.
[SW8800] stp update-arp disable
30.1.45 vlan-mapping modulo
Syntax
vlan-mapping modulo modulo
View
MST region view
Parameter
modulo: Specifies the modulus, ranging from 1 to 16.
Description
Use the vlan-mapping modulo command to map fast and symmetrically all VLAN lists to the specified MSTIs according to the modulo operation results.
By default, all the VLANs are mapped to CIST, namely Instance 0.
MSTP describes the association between VLANs and MSTIs with the VLAN mapping table. You can use this command to configure this table. Every VLAN can be mapped to an MSTI as per your configuration.
You cannot map one VLAN to multiple different MSTIs. After you map a VLAN to a
MSTI, if you map it again to another MSTI, the new mapping will overwrite the old one.
30-41
3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands
The vlan-mapping modulo modulo command designates VLAN for every MSTI fast. It maps the VLAN to an MSTI whose ID is (VLAN ID-1)%modulo+1. (Note: (VLAN ID-1)
%modulo performs modulo operation on (VLAN ID-1). Taking the operation modulo 16 as an example, vlan 1 maps to MSTI 1, vlan 2 maps to MSTI2 ...vlan 16 maps to
MSTI16, vlan 17 maps to MSTI 1, and so on.)
Related command: region-name, revision-level, check region-configuration,
active region-configuration
Example
Map VLAN to MSTI based on modulo 16.
[SW8800-mst-region] vlan-mapping modulo 16
30-42
3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands
Chapter 31 802.1x Configuration Commands
31.1 802.1x Configuration Commands
31.1.1 display dot1x
Syntax
display dot1x [ enabled-interface | guest vlan | interface interface-list | sessions |
statistics ]
View
Any view
Parameter
enabled-interface: Configures to display the Ethernet port that starts the 802.1x.
guest vlan: Displays Guest VLAN IDs and specifies the port that enables Guest VLAN.
interface: Configures to display the 802.1x information on the specified interface.
interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
sessions: Configures to display the session connection information of 802.1x.
statistics: Configures to display the relevant statistics information of 802.1x.
Description
Use display dot1x command to view the relevant information of 802.1x, including configuration information, running state (session connection information) and relevant statistics information.
By default, all the relevant 802.1x information about each interface will be displayed.
This command can be used to display the following information on the specified interface: 802.1x configuration, state or statistics. If no port is specified when executing this command, the system will display all 802.1x related information. For example,
802.1x configuration of all ports, 802.1x session connection information, and 802.1x data statistical information. The output information of this command can help the user to verify the current 802.1x configurations so as to troubleshoot 802.1x.
31-1
3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands
Related command: reset dot1x statistics, dot1x, dot1x retry, dot1x max-user,
dot1x port-control, dot1x port-method, dot1x timer.
Example
Display the configuration information of 802.1x.
<SW8800> display dot1x
Equipment 802.1X protocol is enabled
CHAP authentication is enabled
DHCP-launch is disabled
Proxy trap checker is disabled
Proxy logoff checker is disabled
Configuration: Transmit Period 30 s, Handshake Period 30 s
Quiet Period 60 s, Quiet Period Timer is disabled
Supp Timeout 30 s, Server Timeout 100 s
The maximal retransmitting times 2
Total maximum 802.1x user resource number is 2048
Total current used 802.1x resource number is 0
Ethernet3/1/1 is link-down
802.1X protocol is disabled
Proxy trap checker is disabled
Proxy logoff checker is disabled
The port is a(n) authenticator
Authenticate Mode is auto
Port Control Type is Mac-based
Max on-line user number is 1024
… (Omitted)
31.1.2 dot1x
Syntax
dot1x [ interface interface-list ]
undo dot1x [ interface interface-list ]
View
System view, Ethernet port view
Parameter
interface interface-list: Ethernet port list including several Ethernet ports. interface-list
= { interface-num [ to interface-num ] } & < 1-10 >. interface-num specifies a single
31-2
3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands
Ethernet port in the format interface-num = { interface-type interface-num |
interface-name }, where interface-type specifies the port type, interface-num specifies the port number and interface-name specifies the port name. For the respective meanings and value ranges, read the Parameter of the Port Configuration section.
Description
Use the dot1x command to enable 802.1x on the specified port or globally (i.e., on the current device).
Use the undo dot1x command to disable the 802.1x on the specified port or globally.
By default, 802.1x is disabled on all the ports and globally on the device.
When the dot1x command is used in system view, if the parameter interface-list is not specified, 802.1x will be globally enabled. If the parameter interface-list is specified,
802.1x will be enabled on the specified port. When this command is used in Ethernet port view, the parameter interface-list cannot be input and 802.1x can only be enabled on the current port.
The configuration command can be used to configure the global or port 802.1x performance parameters before or after 802.1x is enabled. Before 802.1x is enabled globally, if the parameters are not configured globally or for a specified port, they will maintain the default values.
After the global 802.1x performance is enabled, only when port 802.1x performance is enabled will the configuration of 802.1x become effective on the port.
If 802.1x is enabled on a port, you cannot configure the maximum number of learned
MAC addresses (by using the mac-address max-mac-count command). and vice versa.
Related command: display dot1x.
Example
Enable 802.1x on Ethernet 3/1/1.
[SW8800] dot1x interface Ethernet 3/1/1
Enable the 802.1x globally.
[SW8800] dot1x
31.1.3 dot1x authentication-method
Syntax
dot1x authentication-method { chap | pap | eap md5-challenge }
undo dot1x authentication-method
View
System view
31-3
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 31 802.1x Configuration Commands
chap: Uses CHAP authentication method.
pap: Uses PAP authentication method.
eap: Uses EAP authentication method. By now, only md5 encryption method is available.
Description
Use the dot1x authentication-method command to configure the authentication method for 802.1x user.
Use the undo dot1x authentication-method command to restore the default authentication method of 802.1x user.
By default, CHAP authentication is used for 802.1x user authentication.
Password Authentication Protocol (PAP) is a kind of authentication protocol with two handshakes. It sends password in the form of simple text.
Challenge Handshake Authentication Protocol (CHAP) is a kind of authentication protocol with three handshakes. It only transmits username but not password. CHAP is more secure and reliable.
In the process of EAP authentication, switch directly sends authentication information of 802.1x user to RADIUS server in the form of EAP packet. It is not necessary to transfer the EAP packet to standard RADIUS packet first and then send it to RADIUS server.
Please note: To realize PAP, CHAP or EAP authentication, RADIUS server should support PAP, CHAP or EAP authentication respectively.
Related command: display dot1x.
Example
Configure 802.1x user to use PAP authentication
[SW8800] dot1x authentication-method pap
31.1.4 dot1x dhcp-launch
Syntax dot1x dhcp-launch
undo dot1x dhcp-launch
View
System view
31-4
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 31 802.1x Configuration Commands
Description
Use the dot1x dhcp-launch command to set 802.1x to disable the switch to trigger the user ID authentication over the users who configure static IP addresses in DHCP environment.
Use the undo dot1x dhcp-launch command to set 802.1x to enable the switch to trigger the authentication over them.
By default, the switch can trigger the user ID authentication over the users who configure static IP addresses in DHCP environment.
Related command: dot1x.
Example
Disable the switch to trigger the authentication over the users who configure static IP addresses in DHCP environment.
[SW8800] dot1x dhcp-launch
31.1.5 dot1x guest-vlan
Syntax
dot1x guest-vlan vlan-id [ interface interface-list ]
undo dot1x guest-vlan vlan-id [ interface interface-list ]
View
System view, Ethernet interface view
Parameter
vlan-id: ID of the VLAN specified as the Guest VLAN. It ranges from 1 to 4094.
interface-list: List of Guest VLAN-enabled ports. Provide this argument in the form of
interface_list = { interface_type interface_num | interface_name } [ to { interface_type
interface_num | interface_name } ] &<1-10>, where the interface_type argument is interface type, the interface_num argument is interface number. (Refer to the Port part in this manual for more information.) Note that the value of the interface_num argument after the to key word cannot be less than that of the one before the to key word.
&<1-10> means you can provide up to 10 interface lists for the command.
Description
Use the dot1x guest-vlan command to enable Guest VLAN on a specific port.
Use the undo dot1x guest-vlan command to disable Guest VLAN.
31-5
3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands
If you execute the dot1x guest-vlan command in system view and do not provide the
interface-list argument, Guest VLAN is enabled on all ports. However, if you provide the
interface-list argument, Guest VLAN is enabled on the ports specified by this argument.
If you execute the dot1x guest-vlan command in Ethernet interface view, this command does not accept the interface-list argument and Guest VLAN is enabled only on the current port.
Example
Specify to perform port-based authentications.
[SW8800] dot1x port-method portbased
Enable Guest VLAN on all ports.
[SW8800] dot1x guest-vlan 1
31.1.6 dot1x max-user
Syntax
dot1x max-user user-number [ interface interface-list ]
undo dot1x max-user [ interface interface-list ]
View
System view, Ethernet port view
Parameter
user-number: Specifies the limit to the amount of supplicants on the port, ranging from 1 to 1024.
By default, the maximum user number is 1024. And a switch can accommodate a total of 2048 users.
interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
Description
Use the dot1x max-user command to configure a limit to the amount of supplicants on the specified interface of 802.1x.
Use the undo dot1x max-user command to restore the default value.
31-6
3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands
This command is used for setting a limit to the amount of supplicants that 802.1x can hold on the specified interface. This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet interface view and it has effect only on the current interface.
Related command: display dot1x.
Example
Configure the interface Ethernet 3/1/1 to hold no more than 32 users.
[SW8800] dot1x max-user 32 interface Ethernet 3/1/1
31.1.7 dot1x port-control
Syntax
dot1x port-control { auto | authorized-force | unauthorized-force } [ interface
interface-list ]
undo dot1x port-control [ interface interface-list ]
View
System view, Ethernet interface view
Parameter
auto: Automatic identification mode, showing that the initial state of the interface is unauthorized. The user is only allowed to receive or transmit EAPoL packets but not to access the network resources. If the user passes the authentication flow, the interface will switch over to the authorized state and then the user is allowed to access the network resources. This is the most common case.
authorized-force: Forced authorized mode, showing that the interface to always stay in authorized state and the user is allowed to access the network resources without authentication/authorization.
unauthorized-force: Forced unauthorized mode, showing that the interface to always stay in non-authorized mode, the switch does not respond to authentication requests and the user is not allowed to access the network resources.
interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
31-7
3Com Switch 8800 Command Reference Guide
Description
Chapter 31 802.1x Configuration Commands
Use the dot1x port-control command to configure the mode for 802.1x to perform access control on the specified interface.
Use the undo dot1x port-control command to restore the default access control mode.
By default, the access control mode is auto.
This command is used to set the mode, or the interface state, for 802.1x to perform access control on the specified interface. This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet port view and it has effect only on the current interface.
Related command: display dot1x.
Example
Configure the interface Ethernet 3/1/1 to be in unauthorized-force state.
[SW8800] dot1x port-control unauthorized-force interface ethernet 3/1/1
31.1.8 dot1x port-method
Syntax
dot1x port-method { macbased | portbased } [ interface interface-list ]
undo dot1x port-method [ interface interface-list ]
View
System view, Ethernet interface view
Parameter
macbased: Configures the 802.1x authentication system to perform authentication on the supplicant based on MAC address.
portbased: Configures the 802.1x authentication system to perform authentication on the supplicant based on interface number.
interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
31-8
3Com Switch 8800 Command Reference Guide
Description
Chapter 31 802.1x Configuration Commands
Use the dot1x port-method command to configure the base for 802.1x to perform access control on the specified interface.
Use the undo dot1x port-method command to restore the default access control base.
By default, the value is macbased.
This command is used to set the base for 802.1x to perform access control, namely authenticate the users, on the specified interface. When macbased is adopted, the user access this interface must be authenticated independently, and if one successful authentication user is to finish network service, the other accessed users can still use network service. When portbased is adopted, if only the first access user by this interface can be authenticated successfully, the other access users followed can be considered authenticated successfully automatically, but if the first one finish the network service, the other accessed users’ network service will be rejected . .
This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet interface view and it has effect only on the current interface.
Related command: display dot1x.
Example
Authenticate the supplicant based on the interface number on Ethernet 3/1/1.
[SW8800] dot1x port-method portbased interface ethernet 3/1/1
31.1.9 dot1x quiet-period
Command
dot1x quiet-period
undo dot1x quiet-period
View
System view
Parameter
None
Description
Use the dot1x quiet-period command to enable the quiet-period timer.
Use the undo dot1x quiet-period command to disable this timer.
By default, quiet-period timer is disabled.
31-9
3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands
If an 802.1x user has not passed the authentication, the Authenticator will keep quiet for a while (which is specified by quiet-period timer) before launching the authentication again. During the quiet period, the Authenticator does not do anything related to 802.1x authentication.
Related command: display dot1x , dot1x timer.
Example
Enable quiet-period timer.
[SW8800] dot1x quiet-period
31.1.10 dot1x retry
Syntax
dot1x retry max-retry-value
undo dot1x retry
View
System view
Parameter
max-retry-value: Specifies the maximum times an Ethernet switch can retransmit the authentication request frame to the supplicant, ranging from 1 to 10.
By default, the value is 2, that is, the switch can retransmit the authentication request frame to the supplicant for 2 times.
Description
Use the dot1x retry command to configure the maximum times an Ethernet switch can retransmit the authentication request frame to the supplicant.
Use the undo dot1x retry command to restore the default maximum retransmission time.
After the switch has transmitted authentication request frame to the user for the first time, if no user response is received during the specified time-range, the switch will re-transmit authentication request to the user. This command is used for specifying how many times the switch can re-transmit the authentication request frame to the supplicant. When the time is 1, the switch is configured to transmit authentication request frame only once. 2 indicates that the switch is configured to transmit authentication request frame once again when no response is received for the first time and so on. This command has effect on all the port after configuration.
Related command: display dot1x.
31-10
3Com Switch 8800 Command Reference Guide
Example
Chapter 31 802.1x Configuration Commands
Configure the current device to transmit authentication request frame to the user for no more than 9 times.
[SW8800] dot1x retry 9
31.1.11 dot1x supp-proxy-check
Syntax
dot1x supp-proxy-check { logoff | trap } [ interface interface-list ]
undo dot1x supp-proxy-check { logoff | trap } [ interface interface-list ]
View
System view, Ethernet interface view
Parameter
logoff: Cuts network connection to a user upon detecting the use of proxy.
trap: Sends trap message upon detecting a user using proxy to access the switch.
interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.
interface-num specifies a single Ethernet interface in the format interface-num =
{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the
Parameter of the Port Command Manual section.
Description
Use the dot1x supp-proxy-check command to configure the control method for
802.1x access users via proxy logon the specified interface.
Use the undo dot1x supp-proxy-check command to cancel the control method set for the 802.1x access users via proxy.
Note that when performing this function, the user logging on via proxy need to run
3Com 802.1x client program,( 3Com 802.1x client program version V1.29 or above is needed).
This command is used to set on the specified interface when executed in system view.
The parameter interface-list cannot be input when the command is executed in
Ethernet Port view and it has effect only on the current interface. After globally enabling proxy user detection and control in system view, only if you enable this feature on a specific port can this configuration take effects on the port.
Related command: display dot1x.
31-11
3Com Switch 8800 Command Reference Guide
Example
Chapter 31 802.1x Configuration Commands
Configure the switch cut network connection to a user upon detecting the use of proxy on Ethernet 2/1/1 ~ Ethernet 2/1/8.
[SW8800] dot1x supp-proxy-check logoff
[SW8800] dot1x supp-proxy-check logoff interface Ethernet 2/1/1 to Ethernet
2/1/8
Configure the switch to send trap message upon detecting the use of proxy on Ethernet
2/1/9.
[SW8800] dot1x supp-proxy-check trap
[SW8800] dot1x supp-proxy-check trap interface Ethernet 2/1/9 or
[SW8800] dot1x supp-proxy-check trap
[SW8800] interface Ethernet 2/1/9
[SW8800-GigabitEthernet2/1/9] dot1x supp-proxy-check trap
31.1.12 dot1x timer
Syntax
dot1x timer { handshake-period handshake-period-value | quiet-period
quiet-period-value | tx-period tx-period-value | supp-timeout supp-timeout-value |
server-timeout server-timeout-value }
undo dot1x timer { handshake-period | quiet-period | tx-period | supp-timeout |
server-timeout }
View
Parameter
System view
handshake-period: This timer begins after the user has passed the authentication.
After setting handshake-period, system will send the handshake packet by the period.
Suppose the dot1x retry time is configured as N, the system will consider the user having logged off and set the user as logoff state if system doesn’t receive the response from user for consecutive N times.
handshake-period-value: Handshake period. The value ranges from 1 to 1024 in units of second and defaults to 30.
quiet-period: Specifies the quiet timer. If an 802.1x user has not passed the authentication, the Authenticator will keep quiet for a while (which is specified by quiet-period timer) before launching the authentication again. During the quiet period, the Authenticator does not do anything related to 802.1x authentication.
31-12
3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands
quiet-period-value: Specifies how long the quiet period is. The value ranges from 10 to
120 in units of second and defaults to 60.
server-timeout: Specifies the timeout timer of an Authentication Server. If an
Authentication Server has not responded before the specified period expires, the
Authenticator will resend the authentication request.
server-timeout-value: Specifies how long the duration of a timeout timer of an
Authentication Server is. The value ranges from 100 to 300 in units of second and defaults to 100 seconds.
supp-timeout: Specifies the authentication timeout timer of a Supplicant. After the
Authenticator sends Request/Challenge request packet which requests the MD5 encrypted text, the supp-timeout timer of the Authenticator begins to run. If the
Supplicant does not respond back successfully within the time range set by this timer, the Authenticator will resend the above packet.
supp-timeout-value: Specifies how long the duration of an authentication timeout timer of a Supplicant is. The value ranges from 10 to 120 in units of second and defaults to
30.
tx-period: Specifies the transmission timeout timer. After the Authenticator sends the
Request/Identity request packet which requests the user name or user name and password together, the tx-period timer of the Authenticator begins to run. If the
Supplicant does not respond back with authentication reply packet successfully, then the Authenticator will resend the authentication request packet.
tx-period-value: Specifies how long the duration of the transmission timeout timer is.
The value ranges from 10 to 120 in units of second and defaults to 30.
Description
Use the dot1x timer command to configure the 802.1x timers.
Use the undo dot1x timer command to restore the default values.
When it is run, 802.1x enables many timers to control the rational and orderly interacting of the Supplicant, the Authenticator and the Authenticator Server. This command can set some of the timers (while other timers cannot be set) to adapt the interaction process. It could be necessary for some special and hard network environment. Generally, the user should keep the default values of the timers.
Related command: display dot1x.
Example
Set the Authentication Server timeout timer is 150s.
[SW8800] dot1x timer server-timeout 150
31-13
3Com Switch 8800 Command Reference Guide
31.1.13 reset dot1x statistics
Chapter 31 802.1x Configuration Commands
Syntax
reset dot1x statistics [ interface interface-list ]
View
User view
Parameter
interface interface-list: Ethernet port list including several Ethernet ports. interface-list
= { interface-num [ to interface-num ] } & < 1-10 >. interface-num specifies a single
Ethernet port in the format port-num = { interface-type interface-num | interface-name }, where interface-type specifies the port type, interface-num specifies the port number and interface-name specifies the port name. For the respective meanings and value ranges, read the Parameter of the Port Configuration section.
Description
Use the reset dot1x statistics command to reset the statistics of 802.1x.
This command can be used to re-perform information statistics if the user wants to delete the former statistics of 802.1x.
When the original statistics is cleared, if no port type or port number is specified, the global 802.1x statistics of the switch and 802.1x statistics on all the ports will be cleared.
If the port type and port number are specified, the 802.1x statistics on the specified port will be cleared.
Related command: display dot1x.
Example
Clear the 802.1x statistics on Ethernet 3/1/2.
<SW8800> reset dot1x statistics interface Ethernet 3/1/2
31-14
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Chapter 32 AAA and RADIUS/TACACS+ Protocol
Configuration Commands
32.1 AAA Configuration Commands
32.1.1 access-limit
Syntax
access-limit { disable | enable max-user-number }
undo access-limit
View
ISP domain view
Parameter
Description
Use the access-limit command to configure a limit to the amount of supplicants in the current ISP domain.
Use the undo access-limit command to restore the limit to the default setting.
By default, there is no limit to the amount of supplicants in the current ISP domain.
This command limits the amount of supplicants contained in the current ISP domain.
The supplicants may contend with each other for the network resources. So setting a suitable limit to the amount will guarantee the reliable performance for the existing supplicants.
Example
disable: No limit to the supplicant number in the current ISP domain.
enable max-user-number: Specifies the maximum supplicant number in the current
ISP domain, ranging from 1 to 2312.
Set a limit of 500 supplicants for the ISP domain, 3Com163.net.
[SW8800-isp-3Com163.net] access-limit enable 500
32.1.2 accounting optional
Syntax accounting optional
32-1
3Com Switch 8800 Command Reference Guide
undo accounting optional
View
ISP domain view
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Parameter
None
Description
Use the accounting optional command to enable accounting to be optional.
Use the undo accounting optional command to disable accounting to be optional.
By default, accounting is not optional. By executing the accounting optional command, you can enable users to utilize the network resources even when no accounting server is available or the switch fails to communicate with the accounting server. Users are denied if you do not execute this command under the same circumstance. This command is used when you want the server to authenticate without charging.
Example
Enable accounting option for domain user named 3Com163.net.
[SW8800] domain 3Com163.net
[SW8800-isp-3Com163.net] accounting optional
32.1.3 attribute
Syntax
attribute { ip ip-address | mac mac-address | idle-cut second | access-limit
max-user-number | vlan vlanid | location { nas-ip ip-address port portnum | port
portnum }*
undo attribute { ip | mac | idle-cut | access-limit | vlan | location }*
View
Local user view
Parameter
ip: Specifies the IP address of a user.
mac mac-address: Specifies the MAC address of a user. Where, mac-address takes on the hexadecimal format of X-X-X.
idle-cut second: Allows/Disallows the local users to enable the idle-cut function. (The specific data for this function depends on the configuration of the ISP domain where the
32-2
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands users locate.) The argument minute defines the idle-cut time, which is in the range of 60 to 7200 seconds.
access-limit max-user-number: Specifies the maximum number who access the device by using the current user name. The argument max-user-number is in the range of 1 to 2048.
vlan vlanid: Sets the VLAN attribute of user, in other words, the VLAN to which a user belong. The argument vlanid is an integer in the range of 1 to 4094.
location: Sets the port binding attribute of user.
nas-ip ip-address: IP address of the access server in the event of binding a remote port with a user. The argument ip-address is an IP address in dotted decimal format and defaults to 127.0.0.1 (which represents the local machine).
port portnum: Sets the port with which a user is bound. The argument portnum is represented by “SlotNumber SubSlotNumber PortNumber”. If the bound port has no
SubSlotNumber, the value 0 can be used as the SubSlotNumber.
Description
Use the attribute command to configure some attributes for specified local user.
Use the undo attribute command to cancel the attributes that have been defined for this local user.
As for attributes of the users that are of local LAN service type, user IP address and
MAC address attribute are valid only when the ISP domain authentication scheme is a local authentication scheme, or the ISP domain authentication scheme is a RADIUS authentication scheme and the type of the RADIUS scheme is 3COM.
It should be noted that the argument nas-ip must be defined for a user bound with a remote port, which is unnecessary, however, in the event of a user bound with a local port.
Related command: display local-user.
Example
Configure the IP address 10.110.50.1 to the user 3Com1.
[SW8800-luser-3Com1] attribute ip 10.110.50.1
32.1.4 cut connection
Syntax
cut connection { all | access-type { dot1x | gcm | mac-authentication } | domain
domain-name | interface interface-type interface-num | ip ip-address | mac
mac-address | radius-scheme radius-scheme-name | vlan vlanid | ucibindex
ucib-index | user-name user-name }
32-3
3Com Switch 8800 Command Reference Guide
View
System view
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Description
Use the cut connection command to disconnect a user or a category of users by force.
Related command: display connection.
Example
all : Configures to disconnect all connection.
access-type: Configures to cut a category of connections according to logon type.
dot1x: Specifies 802.1x users.
gcm: Specifies GCM users.
mac-authentication: Specifies users authenticated by MAC addresses.
domain domain-name: Configures to cut the connection according to ISP domain.
domain-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.
mac mac-address: Configures to cut the connection of the supplicant whose MAC address is mac-address. The argument mac-address is in the hexadecimal format
(x-x-x).
radius-scheme radius-server-name: Configures to cut the connection according to
RADIUS scheme name. radius-server-name specifies the RADIUS server name with a character string not exceeding 32 characters.
interface interface-type interface-num: Configures to cut the connection according to the port.
ip ip-address: Configures to cut the connection according to IP address.
vlan vlanid: Configures to cut the connection according to VLAN ID. Here, vlanid ranges from 1 to 4094.
ucibindex ucib-index: Configures to cut the connection according to ucib-index. Here,
ucib-index ranges from 0 to 2311.
user-name user-name: Configures to cut the connection according to user name .
user-name is the argument specifying the username. It is a character string not exceeding 80 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 55 characters.
Cut all the connections in the ISP domain, 3Com163.net.
[SW8800] cut connection domain 3Com163.net
32-4
3Com Switch 8800 Command Reference Guide
32.1.5 display connection
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
display connection [ access-type { dot1x | gcm } | domain domain-name | interface
interface-type interface-number | ip ip-address | mac mac-address | radius-scheme
radius-scheme-name | vlan vlanid | ucibindex ucib-index | user-name user-name ]
View
Any view
Parameter
access-type: Configures to display the supplicants according to their logon type.
dot1x: Specifies 802.1x users.
gcm: Specifies GCM users.
domain domain-name: Configures to display all the users in an ISP domain.
domain-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.
mac mac-address: Configures to display the supplicant whose MAC address is
mac-address. The argument mac-address is in the hexadecimal format (x-x-x).
radius-scheme radius-server-name: Configures to display the supplicant according to
RADIUS server name. radius-server-name specifies the RADIUS server name with a character string not exceeding 32 characters.
interface interface-type interface-number: Configures to display the supplicant according the port.
ip ip-address: Configures to display the user specified with IP address.
vlan vlanid: Configures to display the user specified with VLAN ID. Here, vlanid ranges from 1 to 4094.
ucibindex ucib-index: Configures to display the user specified with ucib-index. Here,
ucib-index ranges from 0 to 2311.
user-name user-name: Configures to display a user specifies with user-name.
user-name is the argument specifying the username. It is a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.
Description
Use the display connection command to view the relevant information of all the supplicants or the specified one(s). The output can help you with the user connection diagnosis and troubleshooting.
32-5
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
If no parameter is specified, this command displays the related information about all connected users.
Related command: cut connection.
Example
Display the relevant information of all the users.
<SW8800> display connection
Total 0 connections matched ,0 listed.
32.1.6 display domain
Syntax
display domain [ isp-name ]
View
Any view
Parameter
isp-name: Specifies the ISP domain name, with a character string not exceeding 24 characters. The specified ISP domain shall have been created.
Description
Use the display domain command to view the configuration of a specified ISP domain or display the summary information of all ISP domains.
By default, this command displays the summary information about all the ISP domains in the system.
This command is used to output the configuration of a specified ISP domain or display the summary information of all ISP domains. If an ISP domain is specified, the configuration information will be displayed exactly the same, concerning the content and format, as the displayed information of the display domain command. The output information can help with ISP domain diagnosis and troubleshooting.
Related command: access-limit, domain, radius scheme, user-template, state,
display domain.
Example
Display the summary information of all ISP domains of the system.
<SW8800> display domain
0 Domain = system
State = Active
RADIUS Scheme = system
Access-limit = Disable
32-6
3Com Switch 8800 Command Reference Guide
Domain User Template:
Idle-cut = Disable
Self-service = Disable
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
32.1.7 display local-user
Syntax
display local-user [ domain isp-name | idle-cut { enable | disable } | service-type
{ ftp | lan-access | ppp | ssh | telnet | terminal } | state { active | block } | user-name
user-name | vlan vlanid ]
View
Any view
Parameter
domain isp-name: Configures to display all the local users in the specified ISP domain.
isp-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.
idle-cut: Configures to display the local users according to the state of idle-cut function.
disable means that the user disables the idle-cut function and enable means the user enables the function. This parameter only takes effect on the users configured as lan-access type. For other types of users, the display local-user idle-cut enable and
display local-user idle-cut disable commands will not display any information.
service-type: Configures to display local user of a specified type. telnet means that the specified user type is telnet.
ftp means that the specified user type is ftp.
lan-access means that the specified user type is lan-access which mainly refers to
Ethernet accessing users, 802.1x supplicants for example.
ppp: Specifies PPP users.
ssh: Specifies SSH users.
terminal: Specifies terminal users.
state { active | block }: Configures to display the local users in the specified state.
active means that the system allows the user requesting network service and block means the system does not allow the user requesting network service.
user-name user-name: Configures to display a local user specified with user-name .
user-name is the argument specifying the username. It is a character string not exceeding 80 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 55 characters.
32-7
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
vlan vlanid: Configures to display the local users belonged to specified VLAN. vlanid is the integer, ranging from 1 to 4094.
Description
Use the display local-user command to view the relevant information about all the local users or the specified one(s).
The output can help you with the fault diagnosis and troubleshooting related to local user.
By default, this command displays the relevant information about all the local users.
Related command: local-user.
Example
Display the relevant information of all the local users.
<SW8800> display local-user
The contents of local user user1:
State: Active ServiceType Mask: None
Idle Cut: Disable
AccessLimit: Disable Current AccessNum: 0
Bind location: Disable
Vlan ID: Disable
IP address: Disable
MAC address: Disable
Total 1 local user(s) Matched,1 listed.
32.1.8 domain
Syntax
domain { isp-name | default { disable | enable isp-name } }
undo domain isp-name
View
System view
Parameter
isp-name: Specifies an ISP domain name. The name is expressed with a character string not exceeding 24 characters, excluding “/”, “: ”, “*”, “? ”, “<”, and “>”.
default enable isp-name: Enables the default ISP domain specified by isp-name.
default disable: Disables the configuration of the default ISP. Restores the default ISP domain to “system”.
32-8
3Com Switch 8800 Command Reference Guide
Description
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Use the domain command to configure an ISP domain or enter the view of an existing
ISP domain.
Use the undo domain command to cancel a specified ISP domain.
By default, a domain named as system has been created in the system. The attributes of system are all default values.
ISP domain is a group of users belonging to the same ISP. Generally, for a username in the userid@isp-name format, taking [email protected] as an example, the isp-name (i.e.3Com163.net) following the @ is the ISP domain name. When the Switch
8800 controls user access, as for an ISP user whose username is in userid@isp-name format, the system will take userid part as username for identification and take isp-name part as domain name.
The purpose of introducing ISP domain settings is to support the application environment with several ISP domains. In this case, an access device may have supplicants from different ISP domains. Because the attributes of ISP users, such as username and password structures, service types, may be different, it is necessary to separate them by setting ISP domains. In ISP domain view, you can configure a complete set of exclusive ISP domain attributes for each ISP domain, which includes
AAA schemes ( RADIUS scheme group applied and so forth.)
For a switch, each supplicant belongs to an ISP domain. The system supports to configure up to 16 ISP domains.
When this command is used, if the specified ISP domain does not exist, the system will create a new ISP domain. All the ISP domains are in the active state when they are created.
Related command: access-limit, radius scheme, state, display domain.
Example
Create a new ISP domain, 3Com163.net, and enters its view.
[SW8800] domain 3Com163.net
New Domain added.
[SW8800-isp-3Com163.net]
32.1.9 idle-cut
Syntax
idle-cut { disable | enable minute flow }
View
ISP domain view
32-9
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
disable: means disabling the user to use idle-cut function.
enable: means enabling the user to use idle-cut function.
minute: Specifies the maximum idle time, ranging from 1 to 120 and measured in minutes.
flow: Minimum data traffic, ranging from 1 to 10,240,000 and measured in bytes.
Description
Use the idle-cut command to configure the user template in the current ISP domain.
By default, after an ISP domain is created, this attribute in user template is disable, that is, the user idle-cut is disabled.
The user template is a set of default user attributes. If a user requesting for the network service does not have some required attributes, the corresponding attributes in the template will be endeavored to him as default ones. The user template of the switch you are using may only provide user idle-cut settings. After a user is authenticated, if the idle-cut is configured to enable or disable by neither the user nor the RADIUS server, the user will adopt the idle-cut state in the template.
Because a user template only works in one ISP domain, it is necessary to configure user template attributes for users from different ISP domain respectively.
Related command: domain.
Example
Enable the user in the current ISP domain, 3Com163.net, to use the idle-cut attribute specified in the user template (that is, enabling the user to use the idle-cut function).
The maximum idle time is 50 minutes and the minimum data traffic is 500 bytes.
[SW8800-isp-3Com163.net] idle-cut enable 50 500
32.1.10 ip pool
Syntax
ip pool pool-number low-ip-address [ high-ip-address ]
undo ip pool pool-number
View
Parameter
System view, ISP domain view
pool-number: Address pool number ranging from 0 to 99.
32-10
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
low-ip-address and high-ip-address: Two ends of the IP address pool. The number of IP addresses in an address pool cannot exceed 1024. If you do not provide the
high-ip-address argument, then the address pool only contains the one specified by the
low-ip-address argument.
Description
Use the ip pool command to create a local IP address pool for PPP users.
Use the undo ip pool command to remove a specified local address pool.
By default, no local IP address pool is created.
After creating an IP address pool in system view, you can use the remote address command to assign IP addresses in it to PPP users.
The IP addresses in an IP address pool created in ISP domain view are mainly for PPP users of the ISP domain. This kind of IP address pools is suitable for ports with many
PPP users connected to them and the available IP address these ports provide are not sufficient. For example, a PPPoE-enabled Ethernet port can accommodate up to 4095 users, but its Virtual Template can have only one IP address pool configured, which contains up to only 1024 IP address. By configuring an ISP domain address pool for the
Ethernet port, PPP users of the ISP can obtain their IP addresses from the IP address pool, through which the tension of the port address pool can be eased.
Related command: remote address.
Example
Create a local IP address pool ranging from 129.102.0.1 to 129.102.0.10.
[SW8800] domain 3Com163.net
[SW8800-isp-3Com163.net] ip pool 0 129.102.0.1 129.102.0.10
32.1.11 level
Syntax
level level
undo level
View
Local user view
Parameter
level: User priority, an integer ranging from 0 to 3.
Description
Use the level command to set user priority.
32-11
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Use the undo level command to restore the default user priority.
By default, the user priority is 0.
Related command: local user.
Note:
If you specify not to authenticate or to authenticate by passwords, the levels of the commands available to an authenticated user are determined by the priority of the user interface. If a user needs to provide user name and password to pass the authentication, the levels of the commands available to an authenticated user are determined by the priority of the user.
Example
Set the user priority to 3.
[SW8800-luser-3Com1] level 3
32.1.12 local-user
Syntax
local-user user-name
undo local-user { user-name | all [ service-type { ftp | lan-access | ppp | ssh | telnet
| terminal } ] }
View
Parameter
System view
user-name : Specifies a local username with a character string not exceeding 80 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 55 characters. The user-name is case-insensitive, so that UserA is the same as usera.
service-type: Specifies the service type.
telnet means that: the specified user type is telnet.
ftp means that: the specified user type is ftp.
lan-access means that the specified user type is lan-access which mainly refers to
Ethernet accessing users, 802.1x supplicants for example.
ppp: Specifies PPP users.
32-12
3Com Switch 8800 Command Reference Guide
ssh: Specifies SSH users.
terminal: Specifies terminal users.
all: All the users.
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Description
Use the local-user command to configure a local user and enter the local user view.
Use the undo local-user command to cancel a specified local user.
By default, no local user.
Related command: display local-user , service-type.
Example
Add a local user named 3Com1.
[SW8800] local-user 3Com1
[SW8800-luser-3Com1]
32.1.13 local-user password-display-mode
Syntax
local-user password-display-mode { cipher-force | auto }
undo local-user password-display-mode
View
System view
Parameter
cipher-force: Forced cipher mode specifies that the passwords of all the accessed users must be displayed in cipher text.
auto: The auto mode specifies that a user is allowed to use the password command to set a password display mode.
Description
Use the local-user password-display-mode command to configure the password display mode of all the accessing users.
Use the undo local-user password-display-mode command to cancel the password display mode that has been set for all the accessing users.
If cipher-force has been adopted, the user efforts of specifying to display passwords in simple text will render useless.
The password display mode of all the accessing users defaults to auto.
Related command: display local-user , password.
32-13
3Com Switch 8800 Command Reference Guide
Example
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Force all the accessing users to display passwords in cipher text.
[SW8800] local-user password-display-mode cipher-force
32.1.14 password
Syntax
password { simple | cipher } password
undo password
View
Local user view
Parameter
simple: Specifies to display passwords in simple text.
cipher: Specifies to display passwords in cipher text.
password: Defines a password, which is a character string of up to 16 characters if it is in simple text and of up to 24 characters if it is in cipher text.
Description
Use the password command to configure a password display mode for local users.
Use the undo password command to cancel the specified password display mode.
If local-user password-display-mode cipher-force has been adopted, the user efforts of using the password command to set the password display mode to simple text (simple) will render useless.
Related command: display local-user.
Example
Set the user 3Com1 to display the password in simple text, given the password is
20030422.
[SW8800-luser-3Com1] password simple 20030422
32.1.15 scheme
Syntax
scheme { radius-scheme radius-scheme-name [ local ] | tacacs+-scheme
tacacs+-scheme-name [ local ] | local | none }
undo scheme { radius-scheme | tacacs+-scheme | none }
32-14
3Com Switch 8800 Command Reference Guide
View
ISP domain view
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
radius-scheme-name: RADIUS scheme name, a string no longer than 32 characters in length.
tacacs+-scheme-name: TACACS+ scheme name, a string no longer than 32 characters in length.
local: Specifies to perform local authentications.
none: Specifies not to perform authentications.
Description
Use the scheme command to configure the AAA scheme used in the current ISP domain.
Use the undo scheme command to restore the default domain AAA scheme.
By default, an AAA scheme specifies to perform local authentications.
The scheme command specifies a RADIUS/TACACS+ scheme for the current ISP domain. The specified scheme must be an existing scheme.
You can use the radius-scheme radius-scheme-name local or tacacs+-scheme
tacacs+-scheme-name local command to specify to perform local authentications in case the RADIUS server or the TACACS server fails to respond properly. That is, local authentications are performed only when the RADIUS server or the TACACS server fails.
If you specify local authentications to be the primary scheme, then only local authentications are performed and you cannot adopt RADIUS and TACACS+ scheme simultaneously. In this case, the none and local keywords act the same.
Related command: radius scheme, tacacs+ scheme.
Example
With 3Com163.net as the current ISP domain, specify to adopt the RADIUS scheme named 3Com.
[SW8800-isp-3Com163.net] scheme radius-scheme 3Com
Specify the ISP domain named 3Com to adopt the scheme named rd, with local authentication as the secondary authentication scheme.
[SW8800-isp-3Com] scheme radius-scheme rd local
Specify the ISP domain named 3Com to adopt tacacs+-scheme hwtac scheme, with local authentication as the secondary authentication scheme.
[SW8800-isp-3Com] scheme tacacs+-scheme hwtac local
32-15
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
32.1.16 private-group-id mode standard
Syntax private-group-id mode standard undo private-group-id mode standard
View
System view
Parameter
private-group-id: Specifies the way to represent the RADIUS attribute
private-group-id.
mode: Specifies the way to represent the RADIUS attribute private-group-id.
standard: Specify to code the RADIUS attribute private-group-id according to RFC
2868.
Description
Use the private-group-id mode standard command to configure VLAN delivering mode. A VLAN ID can be a string.
By default, a switch does not support a VLAN ID delivered by a RADIUS server to be of string type.
Dynamic VLAN delivering enables an Ethernet switch to monitor network resources available to users by adding the ports to which the authenticated users connect to different VLANS according to the attributes delivered by RADIUS servers. To work with
Guest VLAN, ports are usually configured to perform port-based authentications. (If you configure a port to perform MAC address-based authentications, it can have only one user connected.)
Example
Configure the VLAN delivering mode to be of string type.
[SW8800] private_group_id mode standard
32.1.17 self-service-url
Syntax
self-service-url enable url-string
self-service-url disable
View
ISP domain view
32-16
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
url-string: The URL (uniform resource locator) of the Web page on a self-service server.
The Web page is used to modify passwords. This argument is a string that is of 1 to 64 characters in length. Do not provide character of “?” in this argument. If an URL contains "?", replace it with "|" when inputting the URL in the command line.
Description
Use the self-service-url enable command to configure self-service server uniform resource locator (URL).
Use the self-service-url disable command to remove the configuration of self-service server URL.
By default, self-service server URL is not configured on a switch. z z
This command must be incorporated with a RADIUS server (such as a CAMS server) that supports self-service. Self-service means that users can manage their accounts and card numbers by themselves. And a server with the self-service software installed is called a self-service server.
Once this function is enabled on a switch, users can locate the self-service server through the following operations: z
Select "Change user password" on the 802.1x client.
After the client opens the default explorer (IE or NetScape), it locates the specified
URL page used to change the user password on the self-service server.
Change user password on this page.
The "Change user password" option is available only when the user passes the authentication; otherwise, this option is in grey and unavailable.
Example
Specify the URL of the Web page used to change password on the self-service server to be http://10.153.89.94/selfservice/modPasswd1x.jsp|userName.
[SW8800] domain system
[SW8800-isp-system] self-service-url enable http://10.153.89.94/selfservice/modP asswd1x.jsp|userName
32.1.18 service-type
Syntax
service-type { ftp [ ftp-directory directory ] | lan-access | ppp [call-number
call-number | callback-nocheck | callback-number callback-number ] | ssh [ level
level | telnet | terminal ] | telnet [ level level | ssh | terminal ] | terminal [ level level |
ssh | telnet ] }
32-17
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
undo service-type { ftp [ ftp-directory directory ] | lan-access | ppp [call-number
call-number | callback-nocheck | callback-number callback-number ] | ssh [ level
level | telnet | terminal ] | telnet [ level level | ssh | terminal ] | terminal [ level level |
ssh | telnet ] }
View
Local user view
Parameter
telnet: Specifies user type as Telnet.
level level: Specifies the level of Telnet users. The argument level is an integer in the range of 0 to 3 and defaults to 0.
ftp: Specifies user type as ftp.
ftp-directory directory: Specifies the directory of ftp users, directory is a character string of up to 64 characters.
lan-access: Specifies user type to lan-access, which mainly refers to Ethernet accessing users, 802.1x supplicants for example.
ppp: Specifies PPP users.
call-number: Sets the phone number of the caller.
callback-nocheck: Specifies no to check when the modem calls back.
callback-number: Sets the callback number for callback user.
ssh: Specifies SSH users.
Description
Use the service-type command to configure a service type for a particular user.
Use the undo service-type command to cancel the specified service type for the user.
Example
Set to provide the lan-access service for the user 3Com1.
[SW8800-luser-3Com1] service-type lan-access
32.1.19 state
Syntax
state { active | block }
View
ISP domain view, Local user view
32-18
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
active: Configures the current ISP domain (ISP domain view)/current user (local user view) as being in active state, that is, the system allows the users in the domain (ISP domain view) or the current user (local user view) to request network service.
block: Configures the current ISP domain (ISP domain view)/current user (local user view) as being in block state, that is, the system does not allow the users in the domain
(ISP domain view) or the current user (local user view) to request network service.
Description
Use the state command to configure the state of the current ISP domain/ current user.
By default, after an ISP domain is created, it is in the active state (in ISP domain view).
A local user will be active (in local user view) upon its creation.
In ISP domain view, every ISP can either be in active or block state. If an ISP domain is configured to be active, the users in it can request for network service, while in block state, its users cannot request for any network service, which will not affect the users currently online.
Related command: domain.
Example
Set the current ISP domain 3Com163.net to be in the block state. The supplicants in this domain cannot request for the network service.
[SW8800-isp-3Com163.net] state block
Set the user 3Com1 to be in the block state.
[SW8800-luser-3Com1] state block
32.2 RADIUS Protocol Configuration Commands
32.2.1 accounting optional
Syntax accounting optional
undo accounting optional
View
RADIUS scheme view
Parameter
None
32-19
3Com Switch 8800 Command Reference Guide
Description
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Use the accounting optional command to enable the selection of RADIUS accounting option.
Use the undo accounting optional command to disable the selection of RADIUS accounting option.
By default, selection of RADIUS accounting option is disabled.
If no RADIUS server is available or if RADIUS accounting server fails when the
accounting optional is configured, the user can still use the network resource, otherwise, the user will be disconnected.
The user configured with accounting optional command in RADIUS scheme will no longer send real-time accounting update packet or stop accounting packet.
The accounting optional command in RADIUS scheme view is only effective on the accounting that uses this RADIUS scheme.
Example
Enable the selection of RADIUS accounting of the RADIUS scheme named as CAMS.
[SW8800-radius-cams] accounting optional
32.2.2 data-flow-format
Syntax
data-flow-format data { byte | giga-byte | kilo-byte | mega-byte } packet { giga-byte
| kilo-byte | mega-byte | one-packet }
undo data-flow-format
View
RADIUS scheme view
Parameter
data: Sets data unit.
byte: Sets 'byte' as the unit of data flow.
giga-byte: Sets 'giga-byte' as the unit of data flow.
kilo-byte: Sets 'kilo-byte' as the unit of data flow.
mega-byte: Sets 'mega-byte' as the unit of data flow.
packet: Sets data packet unit.
giga-packet: Sets 'giga-packet' as the unit of packet flow.
kilo-packet: Sets 'kilo-packet' as the unit of packet flow.
mega-packet: Sets 'mega-packet' as the unit of packet flow.
32-20
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
one-packet: Sets 'one-packet' as the unit of packet flow.
Description
Use the data-flow-format command to configure the unit of data flow that send to
RADIUS Server.
Use the undo data-flow-format command to restore the unit to the default setting.
By default, the data unit is byte and the data packet unit is one-packet.
Related command, see display radius.
Example
Set the unit of data flow that send to RADIUS Server 3Com is kilo-byte and the data packet unit is kilo-packet.
[SW8800-radius-3Com] data-flow-format data kilo-byte packet kilo-packet
32.2.3 display local-server
Syntax
display local-server { statistics | nas-ip }
View
Any view
Parameter
None
Description
Use the display local-server statistics command to view the statistics of local
RADIUS scheme.
Use the display local-server nas-ip command to view the nas ip that is allowed to access the local-server.
Related command: local-server.
Example
Display the statistics of local RADIUS scheme.
<SW8800> display local-server statistics
The localserver packet statistics:
Receive: 0 Send: 0
Discard: 0 Receive Packet Error: 0
Auth Reveive: 0 Auth Send: 0
Acct Receive: 0 Acct Send: 0
32-21
3Com Switch 8800 Command Reference Guide
32.2.4 display radius
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
display radius [ radius-server-name ]
View
Any view
Parameter
radius-server-name: Specifies the RADIUS scheme name with a character string not exceeding 32 characters. Display all RADIUS scheme when the parameter is not set.
Description
Use the display radius command to view the configuration information of all RADIUS scheme or a specified one.
By default, This command outputs the configuration information about the specified or all the RADIUS scheme.
Related command: radius scheme.
Example
Display the configuration information of all the RADIUS scheme.
<SW8800> display radius
------------------------------------------------------------------
SchemeName =system Index=0 Type=3Com
Primary Auth IP =127.0.0.1 Port=1645 State=active
Primary Acct IP =127.0.0.1 Port=1646 State=active
Second Auth IP =0.0.0.0 Port=1812 State=block
Second Acct IP =0.0.0.0 Port=1813 State=block
Auth Server Encryption Key= 3Com
Acct Server Encryption Key= 3Com
TimeOutValue(in second)=3 RetryTimes=3 RealtimeACCT(in minute)=12
Permitted send realtime PKT failed counts =5
Retry sending times of noresponse acct-stop-PKT =500
Username format =without-domain
Data flow unit =Byte
Packet unit =1
------------------------------------------------------------------
Total 1 RADIUS scheme(s). 1 listed
32-22
3Com Switch 8800 Command Reference Guide
32.2.5 display radius statistics
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
display radius statistics
View
Any view
Parameter
None
Description
Use the display radius statistics command to view the statistics information of
RADIUS packet.
The displayed packet information can help with RADIUS diagnosis and troubleshooting.
Related command: radius scheme.
Example
Display the statistics information of RADIUS packets.
<SW8800> display radius statistics state statistic(total=4120):
DEAD=4120 AuthProc=0 AuthSucc=0
AcctStart=0 RLTSend=0 RLTWait=0
AcctStop=0 OnLine=0 Stop=0
StateErr=0
Receive and Send packets statistic:
Send PKT total :0 Receive PKT total:0
RADIUS received packets statistic:
Code= 2,Num=0 ,Err=0
Code= 3,Num=0 ,Err=0
Code= 5,Num=0 ,Err=0
Code=11,Num=0 ,Err=0
Code=22,Num=0 ,Err=0
Running statistic:
RADIUS received messages statistic:
Normal auth request ,Num=0 ,Err=0 ,Succ=0
EAP auth request ,Num=0 ,Err=0 ,Succ=0
Account request ,Num=0 ,Err=0 ,Succ=0
32-23
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Account off request ,Num=0 ,Err=0 ,Succ=0
Leaving request ,Num=0 ,Err=0 ,Succ=0
PKT auth timeout ,Num=0 ,Err=0 ,Succ=0
PKT acct_timeout ,Num=0 ,Err=0 ,Succ=0
Realtime Account ,Num=2317 ,Err=0 ,Succ=2317
PKT response ,Num=0 ,Err=0 ,Succ=0
EAP reauth_request ,Num=0 ,Err=0 ,Succ=0
PORTAL access ,Num=0 ,Err=0 ,Succ=0
Update ack ,Num=0 ,Err=0 ,Succ=0
PORTAL access ack ,Num=0 ,Err=0 ,Succ=0
Session ctrl pkt ,Num=0 ,Err=0 ,Succ=0
RADIUS send messages statistic:
Normal auth accept ,Num=0
Normal auth reject ,Num=0
EAP auth accept ,Num=0
EAP auth reject ,Num=0
EAP auth replying ,Num=0
EAP reauth accept ,Num=0
EAP_reauth_reject ,Num=0
Account success ,Num=0
Account failure ,Num=0
Account off ack ,Num=0
Update request ,Num=0
Leaving ack ,Num=0
Cut req ,Num=0
RecError_MSG_sum:0 SndMSG_Fail_sum :0
Timer_Err :0 Alloc_Mem_Err :0
State Mismatch :0 Other_Error :0
No-response-acct-stop packet=0
Discarded No-response-acct-stop packet=0
32.2.6 display stop-accounting-buffer
Syntax
display stop-accounting-buffer { radius-scheme radius-scheme-name | session-id
session-id | time-range start-time stop-time | user-name user-name }
View
Any view
32-24
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
radius-scheme radius-server-name: Configures to display the saved stopping accounting requests according to RADIUS scheme name. radius-server-name specifies the RADIUS scheme name with a character string not exceeding 32 characters.
session-id session-id: Configures to display the saved stopping accounting requests according to the session ID. session-id specifies the session ID with a character string not exceeding 50 characters.
time-range start-time stop-time: Configures to display the saved stopping accounting requests according to the saving time. start-time specifies the start time of the saving time range and stop-time specifies the stop time of the saving time range. The time is expressed in the format hh:mm:ss-yyyy/mm/dd. When this parameter is specified, all the stopping accounting requests saved in the time range since start-time to stop-time will be displayed.
user-name user-name: Configures to display the saved stopping accounting requests according to the username. User-name specifies the username, a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.
Description
Use the display stop-accounting-buffer command to view the stopping accounting requests, which have not been responded and saved in the buffer. You can select to display the packets sent to a certain RADIUS scheme, or display the packets according to user session ID or username. You may also display the request packets saved during a specified time range. The displayed packet information can help with diagnosis and troubleshooting.
After transmitting the stopping accounting requests, if there is no response from the
RADIUS scheme, the switch will save the packet in the buffer and retransmit it for several times, which is set through the retry stop-accounting command.
Related command: reset stop-accounting-buffer, stop-accounting-buffer enable,
retry stop-accounting.
Example
Display the stopping accounting requests saved in the system buffer since 0:0:0 to
23:59:59 on August 31, 2002.
<SW8800> display stop-accounting-buffer time-range 0:0:0-2002/08/31
23:59:59-2002/08/31
Total find 0 record
32-25
3Com Switch 8800 Command Reference Guide
32.2.7 key
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
key { accounting | authentication } string
undo key { accounting | authentication }
View
RADIUS scheme view
Parameter
accounting: Configures to set the encryption key for RADIUS accounting packet.
authentication: Configures to set the encryption key for RADIUS authentication/authorization packet.
string: Specifies the key with a character string not exceeding 16 characters. By default, the key is 3Com.
Description
Use the key command to configure encryption key for RADIUS authentication/authorization or accounting packet.
Use the undo key command, you can restore the default key.
RADIUS client (switch system) and RADIUS scheme use MD5 algorithm to encrypt the exchanged packets. The two ends verify the packet through setting the encryption key.
Only when the keys are identical can both ends accept the packets from each other and give responses. So it is necessary to ensure that the keys set on the switch and the
RADIUS scheme are identical. If the authentication/authorization and accounting are performed on two different servers with different encryption keys, you are supposed to set two encryption keys respectively.
Related command: primary accounting, primary authentication, radius scheme.
Example
Example 1:
Set the authentication/authorization key of the RADIUS scheme, 3Com, to hello.
[SW8800-radius-3Com] key authentication hello
Example 2:
Set the accounting packet key of the RADIUS scheme, 3Com, to ok.
[SW8800-radius-3Com] key accounting ok
32-26
3Com Switch 8800 Command Reference Guide
32.2.8 local-server
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
local-server nas-ip ip-address key password
undo local-server nas-ip ip-address
View
System view
Parameter
nas-ip ip-address: Sets NAS-IP address of access server. ip-address is expressed in the format of dotted decimal. By default, there is a local server with the NAS-IP address of 127.0.0.1.
key password: Sets password of logon user. password is a character string containing up to 16 characters.
Description
Use the local-server command to configure the parameters of local RADIUS server.
Using undo local-server command, you can cancel a local RADIUS server.
RADIUS service, which adopts authentication/authorization/accounting servers to manage users, is widely used in the Switch 8800. Besides, local authentication/authorization service is also used in these products and it is called local
RADIUS function, i.e. realize basic RADIUS function on the switch.
Caution:
z z z
When using local RADIUS server function of 3Com, remember the number of UDP port used for authentication is 1645 and that for accounting is 1646.
The password configured by this command must be the same as that of the
RADIUS authentication/authorization packet configured by the command key
authentication in RADIUS scheme view.
When operating as a local RADIUS server, a Switch 8800 supports CHAP and PAP authentications but not EAP MD5-challenge authentication.
The Switch 8800 supports up to 16 local RADIUS schemes.
Related command: radius scheme, state.
Example
Set the IP address of local RADIUS scheme to 10.110.1.2 and the password to 3Com.
32-27
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf
3Com Switch 8800 Command Reference Guide
[SW8800] local-server nas-ip 10.110.1.2 key 3Com iguration Commands
32.2.9 primary accounting
Syntax
primary accounting ip-address [ port-number ]
undo primary accounting
View
RADIUS scheme view
Parameter
ip-address: IP address, in dotted decimal format.
port-number: Specifies UDP port number. ranging from 1 to 65535.
Description
Use the primary accounting command to configure the IP address and port number for the primary accounting server.
Use the undo primary accounting command to restore the default IP address and port number of the primary RADIUS accounting server. By default, the primary accounting server of the RADIUS scheme created by the system, whose name is
“system”, uses IP address of 127.0.0.1 and UDP port of 1646. The primary accounting server of a newly created RADIUS scheme uses IP address of 0.0.0.0 and UDP port of
1813.
After creating a new RADIUS scheme, you need to set the IP address and the UDP port for the RADIUS servers the scheme contains, such as authentication/authorization server and accounting server. Besides, you can set primary and secondary server for each kind of server. Although, in actual use, these settings depend on specific demands, at least one authentication/authorization server and one accounting server is required. Make sure the port settings on the switch about RADIUS service are identical to those on the RADIUS servers.
Related command: key, radius scheme, state.
Example
Set the IP address of the primary accounting server of RADIUS scheme, “3Com”, to
10.110.1.2 and the UDP port 1813 to provide RADIUS accounting service.
[SW8800-radius-3Com] primary accounting 10.110.1.2 1813
32-28
3Com Switch 8800 Command Reference Guide
32.2.10 primary authentication
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
primary authentication ip-address [ port-number ]
undo primary authentication
View
RADIUS scheme view
Parameter
ip-address: IP address, in dotted decimal format.
port-number: Specifies UDP port number. ranging from 1 to 65535.
Description
Use the primary authentication command to configure the IP address and port number for the primary RADIUS authentication/authorization.
Use the undo primary authentication command to restore the default IP address and port number of the primary RADIUS authentication/authorization.
By default, the primary authentication server of the RADIUS scheme created by the system, whose name is “system”, uses IP address of 127.0.0.1 and UDP port of 1645.
The secondary authentication server uses IP address of 0.0.0.0 and UDP port of 1812.
The primary and secondary authentication server of a newly created RADIUS scheme uses IP address of 0.0.0.0 and UDP port of 1812.
After creating a RADIUS scheme, you are supposed to set IP addresses and UDP port numbers for the RADIUS servers, including primary/secondary authentication/authorization servers and accounting servers. In real networking environments, the above parameters shall be set according to the specific requirements. However, at least you have to set one authentication/authorization server and an accounting server. Besides, ensure that the RADIUS service port settings on the switch is consistent with the port settings on the RADIUS server.
Related command: key, radius scheme , state.
Example
Set the IP address of the primary authentication/authorization server of RADIUS scheme, “3Com”, to 10.110.1.1 and the UDP port 1812 to provide RADIUS authentication/authorization service.
[SW8800-radius-3Com] primary authentication auth 10.110.1.1 1812
32-29
3Com Switch 8800 Command Reference Guide
32.2.11 radius scheme
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
radius scheme radius-server-name
undo radius scheme radius-server-name
View
System view
Parameter
radius-server-name: Specifies the RADIUS scheme name with a character string not exceeding 32 characters.
Description
Use the radius scheme command to configure a RADIUS scheme and enter its view.
Use the undo radius scheme command to delete the specified RADIUS scheme.
By default, RADIUS scheme named as system has been created in the system. The attributes of system are all default values.
RADIUS protocol configuration is performed on a per-RADIUS-scheme basis. Every
RADIUS scheme shall at least have the specified IP address and UDP port number of the RADIUS authentication/authorization/accounting server and some necessary parameters exchanged with the RADIUS client end (switch system). So it is necessary to create the RADIUS scheme and enter its view before performing other RADIUS protocol configurations.
A RADIUS scheme can be used by several ISP domains at the same time. You can configure up to 16 RADIUS schemes, including the default scheme named as system.
Although undo radius scheme can remove a specified RADIUS scheme. However, the default one cannot be removed. Note that a scheme currently in use by the online user cannot be removed.
Related command: key, retry realtime-accounting, radius-scheme, timer
realtime-accounting, stop-accounting-buffer enable, retry stop-accounting,
server-type, state, user-name-format, retry, display radius, display radius
statistics.
Example
Create a RADIUS scheme named “3Com” and enters its view.
[SW8800] radius scheme 3Com
[SW8800-radius-3Com]
32-30
3Com Switch 8800 Command Reference Guide
32.2.12 reset radius statistics
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
reset radius statistics
View
User view
Parameter
None
Description
Use the reset radius statistics command to clear the statistic information related to the RADIUS protocol.
Related command: display radius.
Example
Clear the RADIUS protocol statistics.
<SW8800> reset radius statistics
32.2.13 reset stop-accounting-buffer
Syntax
reset stop-accounting-buffer { radius-scheme radius-scheme-name | session-id
session-id | time-range start-time stop-time | user-name user-name }
View
Parameter
User view
radius-scheme radius-server-name: Configures to delete the stopping accounting requests from the buffer according to the specified RADIUS scheme.
radius-server-name specifies the RADIUS scheme name with a character string not exceeding 32 characters.
session-id session-id: Configures to delete the stopping accounting requests from the buffer according to the specified session ID. session-id specifies the session ID with a character string not exceeding 50 characters.
time-range start-time stop-time: Configures to delete the stopping accounting requests from the buffer according to the saving time. Start-time specifies the start time of the saving time range and stop-time specifies the stop time of the saving time range. The
32-31
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands time is expressed in the format hh:mm:ss-yyyy/mm/dd. When this parameter is set, all the stopping accounting requests saved since start-time to stop-time will be deleted.
user-name user-name: Configures to delete the stopping accounting requests from the buffer according to the username. User-name specifies the username, a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before
@, namely the user ID) cannot exceed 24 characters.
Description
Use the reset stop-accounting-buffer command to reset the stopping accounting requests, which are saved in the buffer and have not been responded.
After transmitting the stopping accounting requests, if there is no response from the
RADIUS scheme, the switch will save the packet in the buffer and retransmit it for several times, which is set through the retry stop-accounting command.
This command is used to delete the stopping accounting requests from the switch buffer. You can select to delete the packets transmitted to a specified RADIUS scheme, or according to the session-id or username, or delete the packets transmitted during the specified time-range.
Related command: stop-accounting-buffer enable, retry stop-accounting, display
stop-accounting-buffer.
Example
Delete the stopping accounting requests saved in the system buffer by the user, [email protected].
<SW8800> reset stop-accounting-buffer user-name [email protected]
Delete the stopping accounting requests saved in the system buffer since 0:0:0 to
23:59:59 on August 31, 2002.
<SW8800> reset stop-accounting-buffer time-range 0:0:0-2002/08/31
23:59:59-2002/08/31
32.2.14 retry
Syntax
retry retry-times
undo retry
View
RADIUS scheme view
32-32
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
retry-times: Specifies the maximum times of retransmission, ranging from 1 to 20. By default, the value is 3.
Description
Use the retry command to configure retransmission times of RADIUS request packet.
Use the undo retry command to restore the retransmission times to default value.
Because RADIUS protocol uses UDP packets to carry the data, its communication process is not reliable. If the RADIUS server has not responded NAS until timeout, NAS has to retransmit RADIUS request packet. Suppose the maximum retransmission times is N. If the accumulative transmission times is more than N-[N/2] but the primary
RADIUS server still gives no answer, the NAS will consider that it has lost the communication with the current RADIUS server and then turn to transmit the request to another RADIUS server.
Setting a suitable retry-time according to the network situation can speed up the system response.
Related command: radius scheme.
Example
Set to retransmit the RADIUS request packet no more than 5 times in the RADIUS scheme “3Com”.
[SW8800-radius-3Com] retry 5
32.2.15 retry realtime-accounting
Syntax
retry realtime-accounting retry-times
undo retry realtime-accounting
View
RADIUS scheme view
Parameter
retry-times: Specifies the maximum times of real-time accounting request failing to be responded, ranging from 1 to 255. By default, the accounting request can fail to be responded up to 5 times.
Description
Use the retry realtime-accounting command to configure the maximum times of real-time accounting request failing to be responded.
32-33
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Use the undo retry realtime-accounting command to restore the maximum times of real-time accounting request failing to be responded to the default value.
RADIUS server usually checks if a user is online with timeout timer. If the RADIUS server has not received the real-time accounting packet from NAS, it will consider that there is line or device failure and stop accounting. Accordingly, it is necessary to disconnect the user at NAS end and on RADIUS server synchronously when some unexpected failure occurs. The Switch 8800 can set the maximum times of real-time accounting request failing to be responded. NAS will disconnect the user if it has not received real-time accounting response from RADIUS server for some specified times.
How to calculate the value of count? Suppose RADIUS server connection will timeout in T and the real-time accounting interval of NAS is t, then the integer part of the result from dividing T by t is the value of count. Therefore, when applied, T is suggested the numbers which can be divided exactly by t.
Related command:radius scheme, timer realtime-accounting.
Example
Allow the real-time accounting request failing to be responded for up to 10 times.
[SW8800-radius-3Com] retry realtime-accounting 10
32.2.16 retry stop-accounting
Syntax
retry stop-accounting retry-times
undo retry stop-accounting
View
RADIUS scheme view
Parameter
retry-times: Maximal retransmission times of a buffered stop-accounting request, ranging from 10 to 65535. By default, the value is 500.
Description
Use the retry stop-accounting command to configure the maximal retransmission times after a stop-accounting request is saved into the buffer due to getting no response.
Use the undo retry stop-accounting command to restore the retransmission times to the default value.
Because the stopping accounting request concerns account balance and will affect the amount of charge, which is very important for both the user and ISP, NAS shall make its best effort to send the message to RADIUS accounting server. Accordingly, if the
32-34
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands message from the switch to RADIUS accounting server has not been responded, the switch shall save it in the local buffer and retransmit it until the server responds or discard the messages after transmitting for specified times.
Related command: reset stop-accounting-buffer, radius scheme, display
stop-accounting-buffer.
Example
#Perform the following configuration such that the switch can retransmit a buffered stop-accounting request to the server configured for the RADIUS scheme “3Com” for up to 1000 times
[SW8800-radius-3Com] retry stop-accounting 1000
32.2.17 secondary accounting
Syntax
secondary accounting ip-address [ port-number ]
undo secondary accounting
View
RADIUS scheme view
Parameter
Description
Use the secondary accounting command to configure the IP address and port number for the secondary RADIUS accounting server.
Use the undo secondary accounting command to restore the IP address and port number to default values.
For detailed information, read the description of the primary accounting command.
Related command: key, radius scheme, state.
Example
ip-address: IP address, in dotted decimal format. By default, the IP addresses of secondary accounting server is at 0.0.0.0.
port-number: Specifies the UDP port number, ranging from 1 to 65535. By default, the accounting service is provided via UDP 1813.
Set the IP address of the secondary accounting server of RADIUS scheme, 3Com, to
10.110.1.1 and the UDP port 1813 to provide RADIUS accounting service.
[SW8800-radius-3Com] secondary accounting 10.110.1.1 1813
32-35
3Com Switch 8800 Command Reference Guide
32.2.18 secondary authentication
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
secondary authentication ip-address [ port-number ]
undo secondary authentication
View
RADIUS scheme view
Parameter
ip-address: IP address, in dotted decimal format. By default, the IP address of secondary authentication/authorization server is 0.0.0.0.
port-number: Specifies the UDP port number, ranging from 1 to 65535. By default, the authentication/authorization service is provided via UDP 1812.
Description
Use the secondary authentication command to configure the IP address and port number for the secondary RADIUS authentication/authorization server.
Use the undo secondary authentication command to restore the IP address and port number to default values.
For detailed information, read the description of the primary authentication command.
Related command: key, radius scheme, state.
Example
Set the IP address of the secondary authentication/authorization server of RADIUS scheme, “3Com”, to 10.110.1.2 and the UDP port 1812 to provide RADIUS authentication/authorization service.
[SW8800-radius-3Com] secondary authentication 10.110.1.2 1812
32.2.19 server-type
Syntax
server-type { 3Com | standard }
undo server-type
View
Parameter
RADIUS scheme view
32-36
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
3Com: Configures the switch system to support the RADIUS scheme of 3Com type, which requires the RADIUS client end (switch system) and RADIUS server to interact according to the private RADIUS protocol regulation and packet format of 3Com
Technologies Co., Ltd.
standard: Configures the switch system to support the RADIUS server of Standard type, which requires the RADIUS client end (switch system) and RADIUS server to interact according to the regulation and packet format of standard RADIUS protocol
(RFC 2138/2139 or newer).
Description
Use the server-type command to configure the RADIUS scheme type supported by the switch.
Use the undo server-type command to restore the RADIUS scheme type to the default value.
The default RADIUS server type of a newly created RADIUS scheme is standard. The
RADIUS server type of the default RADIUS scheme (with a name of “system”), which is created by the system, is 3Com.
The Switch 8800 supports standard RADIUS protocol and the extended RADIUS service platform IP Hotel, 201+ and Portal. This command is used to select the supported RADIUS scheme type.
Related command: radius scheme.
Example
Set RADIUS scheme type of RADIUS scheme , “3Com” , to standard.
[SW8800-radius-3Com] server-type standard
32.2.20 state
Syntax
state { primary | secondary } { accounting | authentication } { block | active }
View
RADIUS scheme view
Parameter
primary: Configures to set the state of the primary RADIUS server.
secondary: Configures to set the state of the secondary RADIUS server.
accounting: Configures to set the state of RADIUS accounting server.
authentication: Configures to set the state of RADIUS authentication/authorization.
block: Configures the RADIUS server to be in the state of block.
32-37
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
active: Configures the RADIUS server to be active, namely the normal operation state.
Description
Use the state command to configure the state of RADIUS server.
By default, all the RADIUS servers in every RADIUS scheme are in the state of active.
For the primary and secondary servers (no matter an authentication/authorization or an accounting server), if the primary server is disconnected to NAS for some fault, NAS will automatically turn to exchange packets with the secondary server. However, after the primary one recovers, NAS will not resume the communication with it at once, instead, it continues communicating with the secondary one. When the secondary one fails to communicate, NAS will turn to the primary one again. This command is used to set the primary server to be active manually, in order that NAS can communicate with it right after the troubleshooting.
When the primary and secondary servers are all active or block, NAS will send the packets to the primary server only.
Related command: radius scheme, primary authentication, secondary
authentication, primary accounting, secondary accounting.
Example
Set the secondary authentication server of RADIUS scheme, “3Com”, to be active.
[SW8800-radius-3Com] state secondary authentication active
32.2.21 stop-accounting-buffer enable
Syntax stop-accounting-buffer enable undo stop-accounting-buffer enable
View
RADIUS scheme view
Parameter
None
Description
Use the stop-accounting-buffer enable command to configure to save the stopping accounting requests without response in the switch system buffer.
Use the undo stop-accounting-buffer enable command to cancel the function of saving the stopping accounting requests without response in the switch system buffer.
By default, enable to save the stopping accounting requests in the buffer.
32-38
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Because the stopping accounting request concerns account balance and will affect the amount of charge, which is very important for both the user and ISP, NAS shall make its best effort to send the message to RADIUS accounting server. Accordingly, if the message from the switch to RADIUS accounting server has not been responded, the switch shall save it in the local buffer and retransmit it until the server responds or discard the messages after transmitting for specified times.
Related command: reset stop-accounting-buffer, radius scheme, display
stop-accounting-buffer.
Example
,Enable the switch to buffer the stop-accounting requests that get no answer from the server configured for the RADIUS scheme "3Com".
[SW8800-radius-3Com] stop-accounting-buffer enable
32.2.22 timer
Syntax
timer seconds
undo timer
View
RADIUS scheme view
Parameter
seconds: RADIUS server response timeout timer, ranging from 1 to 10 and measured in seconds. By default, the value is 3.
Description
Use the timer command to configure RADIUS server response timer.
Use the undo timer command to restore the default value of the timer.
After RADIUS (authentication/authorization or accounting) request packet has been transmitted for a period of time, if NAS has not received the response from RADIUS server, it has to retransmit the message to guarantee RADIUS service for the user.
The period taken is called RADIUS server response timeout time, which is controlled by the RADIUS server response timeout timer in the switch system. This command is used to set this timer.
Setting a suitable timer according to the network situation will enhance the system performance.
Related command: radius scheme, retry.
32-39
3Com Switch 8800 Command Reference Guide
Example
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Set the response timeout timer of RADIUS scheme, “3Com”, to 5 seconds.
[SW8800-radius-3Com] timer 5
32.2.23 timer realtime-accounting
Syntax
timer realtime-accounting minute
undo timer realtime-accounting
View
RADIUS scheme view
Parameter
minute: Real-time accounting interval, ranging from 3 to 60 and measured in minutes. It must be a multiple of 3.By default, the value is 12.
Description
Use the timer realtime-accounting command to configure the real-time accounting interval.
Use the undo timer realtime-accounting command to restore the default interval.
To implement real-time accounting, it is necessary to set a real-time accounting interval.
After the attribute is set, NAS will transmit the accounting information of online users to the RADIUS server regularly.
The value of minute is related to the performance of NAS and RADIUS server. The smaller the value is, the higher the requirement for NAS and RADIUS server is. When there are a large amount of users (more than 1000, inclusive), we suggest a larger value. The following table recommends the ratio of minute value to number of users.
Table 32-1 Recommended ratio of minute to number of users
Number of users
1 to 99
100 to 499
500 to 999
≥1000
3
6
Real-time accounting interval (in minutes)
12
≥15
Related command: retry realtime-accounting , radius scheme.
32-40
3Com Switch 8800 Command Reference Guide
Example
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Set the real-time accounting interval of RADIUS scheme, “3Com”, to 15 minutes.
[SW8800-radius-3Com] timer realtime-accounting 15
32.2.24 user-name-format
Syntax
user-name-format { with-domain | without-domain }
View
RADIUS scheme view
Parameter
with-domain: Specifies to send the username with domain name to RADIUS server.
without-domain: Specifies to send the username without domain name to RADIUS server.
Description
Use the user-name-format command to configure the username format sent to
RADIUS server.
By default, as for the newly created RADIUS scheme, the username sent to RADIUS servers includes an ISP domain name; as for the "system" RADIUS scheme created by the system, the username sent to RADIUS servers excludes the ISP domain name.
The supplicants are generally named in userid@isp-name format. The part following
“@” is the ISP domain name. The switch will put the users into certain ISP domains according to the domain names. However, some earlier RADIUS servers reject the username including ISP domain name. In this case, the username will be sent to the
RADIUS server after its domain name is removed. Accordingly, the switch provides this command to decide whether the username to be sent to RADIUS server carries ISP domain name or not.
Note:
If a RADIUS scheme is configured to reject usernames including ISP domain names, the RADIUS scheme shall not be simultaneously used in more than one ISP domains.
Otherwise, the RADIUS server will regard two users in different ISP domains as the same user by mistake, if they have the same username (excluding their respective domain names.)
32-41
3Com Switch 8800 Command Reference Guide
Related command: radius scheme.
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Example
Specify to send the username without domain name to RADIUS scheme.
[SW8800-radius-3Com] user-name-format without-domain
32.3 TACACS+ Configuration Commands
32.3.1 data-flow-format
Syntax
data-flow-format data { byte | giga-byte | kilo-byte | mega-byte }
data-flow-format packet { giga-packet | kilo-packet | mega-packet | one-packet }
undo data-flow-format { data | packet }
View
TACACS+ view
Parameter
data: Sets data unit.
byte: Sets 'byte' as the unit of data flow.
giga-byte: Sets 'giga-byte' as the unit of data flow.
kilo-byte: Sets 'kilo-byte' as the unit of data flow.
mega-byte: Sets 'mega-byte' as the unit of data flow.
packet: Sets data packet unit.
giga-packet: Sets 'giga-packet' as the unit of packet flow.
kilo-packet: Sets 'kilo-packet' as the unit of packet flow.
mega-packet: Sets 'mega-packet' as the unit of packet flow.
one-packet: Sets 'one-packet' as the unit of packet flow.
Description
Use the data-flow-format command to configure the unit of data flow sent to TACACS
Server.
Use the undo data-flow-format command to restore the unit to the default setting.
By default, the data unit is byte and the data packet unit is one-packet.
Related command: display tacacs+.
32-42
3Com Switch 8800 Command Reference Guide
Example
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Set the unit of data flow sent to TACACS Server 3Com to kilo-byte and the data packet unit to kilo-packet.
[SW8800-tacacs+-3Com] data-flow-format data kilo-byte packet kilo-packet
32.3.2 debugging tacacs+
Syntax
debugging tacacs+ { all | error | event | message | receive-packet | send-packet }
undo debugging tacacs+ { all | error | event | message | receive-packet |
send-packet }
View
User view
Parameter
all: Enables all TACACS+ debugging.
error: Enables error debugging.
event: Enables event debugging.
message: Enables message debugging.
receive-packet: Enables incoming packet debugging.
send-packet: Enables outgoing packet debugging.
Description
Use the debugging tacacs+ command to enable TACACS+ debugging.
Use the undo debugging tacacs+ command to disable TACACS+ debugging.
By default, TACACS+ debugging is disabled.
Example
Enable the event debugging of TACACS+.
<SW8800> debugging tacacs+ event
32.3.3 display tacacs+
Syntax
display tacacs+ [ tacacs+-scheme-name]
View
Any view
32-43
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
tacacs+-scheme-name: Scheme name of the TACACS+ server, a string of 1 to 32 case-insensitive characters, excluding "?". If this argument is null, configuration information of all TACACS+ schemes are displayed.
Description
Use the display tacacs+ command to view configuration information of one or all
TACACS+ schemes.
By default, configuration information of all TACACS+ schemes is displayed.
Related command: tacacs+ scheme.
Example
Display the configuration information of the TACACS+ scheme gy.
<SW8800> display tacacs+ gy
--------------------------------------------------------------------
TACACS+-server template name : gy
Primary-authentication-server : 172.31.1.11:49
Primary-authorization-server : 172.31.1.11:49
Primary-accounting-server : 172.31.1.11:49
Secondary-authentication-server : 0.0.0.0:0
Secondary-authorization-server : 0.0.0.0:0
Secondary-accounting-server : 0.0.0.0:0
Current-authentication-server : 172.31.1.11:49
Current-authorization-server : 172.31.1.11:49
Current-accounting-server : 172.31.1.11:49
Source-IP-address : 0.0.0.0
key authentication : 790131
key authorization : 790131
key accounting : 790131
Quiet-interval(min) : 5
Response-timeout-Interval(sec) : 5
Domain-included : No
Traffic-unit : B
Packet traffic-unit : one-packet
32.3.4 display stop-accounting-buffer tacacs+-scheme
Syntax
display stop-accounting-buffer tacacs+-scheme tacacs+-scheme-name
32-44
3Com Switch 8800 Command Reference Guide
View
Any view
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
tacacs+-scheme tacacs+-scheme-name: Displays information on buffered stop-accounting requests related to the TACACS+ scheme specified by
tacacs+-scheme-name, a character string not exceeding 32 characters, excluding “?”.
Description
Use the display stop-accounting-buffer command to view information on the stop-accounting requests buffered in the switch.
Related command: reset stop-accounting-buffer, stop-accounting-buffer enable,
retry stop-accounting.
Example
Display information on the buffered stop-accounting requests related to the TACACS+ scheme “3Com".
<SW8800> display stop-accounting-buffer tacacs+-scheme 3Com
32.3.5 tacacs+ nas-ip
Syntax
tacacs+ nas-ip ip-address
undo tacacs+ nas-ip
View
System view
Parameter
ip-address: IP address of a specified source, which is that of the local host and cannot be a broadcast address of class A, B or C, a class D address, an all-zero address, or an address begins with 127.
Description
Use the tacacs+ nas-ip command to specify the source address of the tacacs+ packet sent from NAS.
Use the undo tacacs+ nas-ip command to restore the default setting.
By specifying the source address of the tacacs+ packet, you can avoid unreachable packets as returned from the server upon interface failure. The source address is normally recommended to be a loopback interface address.
32-45
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
For the tacacs+ nas-ip command, the tacacs+ view takes precedence over the system view.
By default, the source address is not specified, that is, the address of the interface sending the packet serves as the source address.
This command specifies only one source address; therefore, the newly configured source address may overwrite the original one.
Example
Configure the switch to send tacacs+ packets from 129.10.10.1.
[SW8800] tacacs+ nas-ip 129.10.10.1
32.3.6 tacacs+ scheme
Syntax
tacacs+ scheme tacacs+-scheme-name
undo tacacs+ scheme tacacs+-scheme-name
View
System view
Parameter
tacacs+-scheme-name: Name of a TACACS+ scheme, a character string not exceeding 32 characters.
Description
Use the tacacs+ scheme command to enter the TACACS+ view. If you specified a nonexistent scheme, a new TACACS+ scheme will be created.
Use the undo tacacs+ scheme command to delete a TACACS+ scheme.
Example
Create a TACACS+ scheme named test1 and enter the TACACS+ view.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1]
32.3.7 key
Syntax
key { accounting | authentication | authorization } string
undo key { accounting | authentication | authorization } string
32-46
3Com Switch 8800 Command Reference Guide
View
TACACS+ view
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Description
Use the key command to configure a shared key for TACACS+ authentication, authorization or accounting.
Use the undo key command to delete the configuration.
By default, no key is set.
The TACACS+ client (the switch system) and TACACS+ server use MD5 algorithm to encrypt the exchanged packets. The two ends verify packets using a shared key. Only when the same key is used can both ends accept the packets from each other and give responses. So it is necessary to ensure that the same key is set on the switch and the
TACACS+ server. If the authentication/authorization and accounting are performed on two server devices with different shared keys, you must set one shared key for each.
Related command: display tacacs+.
Example
accounting: Shared key of the accounting server.
authentication: Shared key of the authentication server.
authorization: Shared key of the authorization server.
string: Shared key, a string up to 16 characters excluding the characters “?”.
Use “hello” as the shared key for TACACS+ accounting.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] key accounting hello
32.3.8 nas-ip
Syntax
nas-ip ip-address
undo nas-ip
View
TACACS+ view
Parameter
ip-address: Source IP address, in dotted decimal format.
32-47
3Com Switch 8800 Command Reference Guide
Description
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Use the nas-ip command to set the source IP address for TACACS+ packets sent from the NAS (switch), such that all the packets sent to the TACACS server carry the same source IP address.
Use the undo nas-ip command to delete the configuration.
Specifying the source address for sending TACACS+ packet avoids the unreachability of packet returned from the server when the physical interface fails. Generally, the loopback interface address is recommended.
By default, the source IP address of the packets is the IP address of the virtual interface of the VLAN to which the port connecting the server belongs.
Related command: display tacacs+ and tacacs+ nas-ip.
Example
Configure the source IP address for TACACS+ packets sent from the NAS (switch) to
10.1.1.1.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] nas-ip 10.1.1.1
32.3.9 primary accounting
Syntax
primary accounting ip-address [ port ]
undo primary accounting
View
TACACS+ view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the primary accounting command to configure a primary TACACS accounting server.
Use the undo primary accounting command to delete the configured primary
TACACS accounting server.
By default, the IP address of the TACACS accounting server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary accounting servers.
32-48
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
If you repeatedly use this command, the latest configuration overwrites the previous one.
You can remove a TACACS scheme accounting server only when no active TCP connection used to send accounting packets is now using the server, and the removal impacts only packets forwarded afterwards.
Example
Configure a primary accounting server.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] primary accounting 10.163.155.12 49
32.3.10 primary authentication
Syntax
primary authentication ip-address [ port ]
undo primary authentication
View
TACACS+ view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the primary authentication command to configure a primary TACACS authentication server.
Use the undo primary authentication command to delete the configured authentication server.
By default, the IP address of the TACACS authentication server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary authentication servers.
If you repeatedly use this command, the latest configuration overwrites the previous one.
You can remove a TACACS scheme authentication server only when no active TCP connection used to send authentication packets uses the server., and the removal impacts only packets forwarded afterwards.
Related command: display tacacs+.
32-49
3Com Switch 8800 Command Reference Guide
Example
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Configure a primary authentication server.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] primary authentication 10.163.155.13 49
32.3.11 primary authorization
Syntax
primary authorization ip-address [ port ]
undo primary authorization
View
TACACS+ view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the primary authorization command to configure a primary TACACS authorization server.
Use the undo primary authorization command to delete the configured primary authorization server.
By default, the IP address of the TACACS authorization server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary authorization servers.
If you repeatedly use this command, the latest configuration overwrites the previous one.
You can remove a TACACS scheme authorization server only when no active TCP connection used to send authorization packets is now using the server, and the removal impacts only packets forwarded afterwards.
Related command: display tacacs+.
Example
Configure a primary authorization server.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] primary authorization 10.163.155.13 49
32-50
3Com Switch 8800 Command Reference Guide
32.3.12 reset tacacs+ statistics
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
reset tacacs+ statistics { accounting | authentication | authorization | all }
View
User view
Parameter
accounting: Clears all the TACACS+ accounting statistics.
authentication: Clears all the TACACS+ authentication statistics.
authorization: Clears all the TACACS+ authorization statistics.
all: Clears all statistics.
Description
Use the reset tacacs+ statistics command to clear TACACS+ protocol statistics.
Related command: display tacacs+.
Example
Clear all TACACS+ protocol statistics.
<SW8800>reset tacacs+ statistics
32.3.13 reset stop-accounting-buffer
Syntax
reset stop-accounting-buffer tacacs+-scheme tacacs+-scheme-name
View
User view
Parameter
tacacs+-scheme tacacs+-scheme-name: Configures to delete the stop-accounting requests from the buffer according to the specified TACACS+ scheme name. The
tacacs+-scheme-name specifies the TACACS+ scheme name with a character string not exceeding 32 characters, excluding“?”.
Description
Use the reset stop-accounting-buffer command to clear the stop-accounting requests that have no response and are buffered on the switch.
32-51
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Related command: stop-accounting-buffer enable, retry stop-accounting, display
stop-accounting-buffer.
Example
Delete the buffered stop-accounting requests that are related to the TACACS+ scheme
“3Com”.
<SW8800> reset stop-accounting-buffer tacacs+-scheme 3Com
32.3.14 retry stop-accounting
Syntax
retry stop-accounting retry-times
undo retry stop-accounting
View
TACACS+ view
Parameter
retry-times: The maximum number of stop-accounting request attempts. It is in the range 1 to 300 and defaults to 100.
Description
Use the retry stop-accounting command to enable stop-accounting packet retransmission and configure the maximum number of stop-accounting request attempts.
Use the undo retry stop-accounting command to restore the default setting.
By default, stop-accounting packet retransmission is enabled and up to 100 packets are allowed to be transmitted for each request.
Related command: reset stop-accounting-buffer, tacacs+ scheme, and display
stop-accounting-buffer.
Example
Enable stop-accounting packet retransmission and allow up to 50 packets to be transmitted for each request.
[SW8800] retry stop-accounting 50
32.3.15 secondary accounting
Syntax
secondary accounting ip-address [ port ]
32-52
3Com Switch 8800 Command Reference Guide
undo secondary accounting
View
TACACS+ view
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
Description
Use the secondary accounting command to configure a secondary TACACS accounting server.
Use the undo secondary accounting command to delete the configured secondary
TACACS accounting server.
By default, IP address of TACACS accounting server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary accounting servers.
If you repeatedly use this command, the latest configuration overwrites the previous one.
You can remove a TACACS scheme accounting server only when no active TCP connection used to send accounting packets is now using the server, and the removal impacts only packets forwarded afterwards.
Example
Configure a secondary accounting server.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] secondary accounting 10.163.155.12 49
32.3.16 secondary authentication
Syntax
secondary authentication ip-address [ port ]
undo secondary authentication
View
TACACS+ view
Parameter
ip-address: IP address of the server, a valid unicast address in dotted decimal format.
port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.
32-53
3Com Switch 8800 Command Reference Guide
Description
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Use the secondary authentication command to configure a secondary TACACS authentication server.
Use the undo secondary authentication command to delete the configured secondary authentication server.
By default, IP address of TACACS authentication server is all zeros.
You are not allowed to assign the same IP address to both primary and secondary authentication servers.
If you repeatedly use this command, the latest configuration overwrites the previous one.
You can remove a TACACS scheme authentication server only when no active TCP connection used to send authentication packets is now using the server, and the removal impacts only packets forwarded afterwards.
Related command: display tacacs+.
Example
Configure a secondary authentication server.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] secondary authentication 10.163.155.13 49
32.3.17 secondary authorization
Syntax
secondary authorization ip-address [ port ]
undo secondary authorization
View
TACACS+ view
Parameter
ip-address: IP address of the server, a legal unicast address in dotted decimal format.
port: Port number of the server, ranging from 1 to 65535. By default, it is 49.
Description
Use the secondary authorization command to configure a secondary TACACS authorization server.
Use the .undo secondary authorization command to delete the configured secondary authorization server.
By default, IP address of TACACS authorization server is all zeros.
32-54
3Com Switch 8800 Command Reference Guide
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
You are not allowed to assign the same IP address to both primary and secondary authorization servers.
If you repeatedly use this command, the latest configuration overwrites the previous one.
You can remove a TACACS scheme authorization server only when no active TCP connection used to send authorization packets is now using the server, and the removal impacts only packets forwarded afterwards.
Related command: display tacacs+.
Example
Configure the secondary authorization server.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] secondary authorization 10.163.155.13 49
32.3.18 timer quiet
Syntax
timer quiet minutes
undo timer quiet
View
TACACS+ view
Parameter
minutes: Ranges from 1 to 255 minutes. By default, the primary server must wait five minutes before it resumes the active state.
Description
Use the timer quiet command to set the waiting time before the primary server resumes the active state.
Use the undo timer quiet command to restore the default configuration.
This command is designed to inhibit the switch from processing user request packets for a time when the communication between the switch and the server is interrupted.
After the switch waits for a time that is equal or greater than the time set by this command, it re-attempts to send packets to the server.
Related command: display hwtacac.
Example
Set the quiet timer for the primary server to ten minutes.
[SW8800] tacacs+ scheme test1
32-55
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf
3Com Switch 8800 Command Reference Guide
[SW8800-tacacs+-test1] timer quiet 10 iguration Commands
32.3.19 timer realtime-accounting
Syntax
timer realtime-accounting minutes
undo timer realtime-accounting
View
TACACS+ view
Parameter
minutes: Real-time accounting interval, which is in the range of 3 to 60 minutes and must be a multiple of 3. By defaults, it is 12 minutes.
Description
Use the timer realtime-accounting command to set the real-time accounting interval.
Use the undo timer realtime-accounting command to restore the default interval.
The setting of real-time accounting interval is necessary for real-time accounting. After an interval is set, the NAS transmits the accounting information of online users to the
TACACS accounting server periodically.
The setting of real-time accounting interval somewhat depends on the performance of the NAS and the TACACS server: a shorter interval requires higher device performance.
You are therefore recommended to adopt a longer interval when there are a large number of users (more than 1000, inclusive). The following table lists the numbers of users and the recommended intervals.
Table 32-2 Number of users and recommended interval
Number of users
1 – 99
100 – 499
500 – 999
ƒ1000
3
6
Real-time accounting interval ( in minutes)
12
ƒ15
Example
Set the real-time accounting interval of the TACACS+ scheme 3Com to 51 minutes.
[SW8800-tacacs+-3Com] timer realtime-accounting 51
32-56
3Com Switch 8800 Command Reference Guide
32.3.20 timer response-timeout
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
Syntax
timer response-timeout seconds
undo timer response-timeout
View
TACACS+ view
Parameter
seconds: TACACS server response timeout time, which is in the range of 1 to 300 seconds and defaults to 5 seconds.
Description
Use the timer response-timeout command to set the TACACS server response timeout time.
Use the undo timer response-timeout command to restore the default setting.
Note:
Since TACACS+ is implemented based on TCP, so server response timeout or TCP timeout may terminate the connection to the TACACS server.
Related command: display tacacs+.
Example
Set the TACACS server response timeout time to 30 seconds.
[SW8800] tacacs+ scheme test1
[SW8800-tacacs+-test1] timer response-timeout 30
32.3.21 user-name-format
Syntax
user-name-format { with-domain | without-domain }
View
TACACS+ view
32-57
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands
with-domain: Specifies that the domain name is taken along with the username that will be sent to the TACACS server.
without-domain: Specifies that no domain name is taken along with the username that will be sent to the TACACS server.
Description
Use the user-name-format command to set the username format acceptable to the
TACACS server.
For a TACACS+ scheme, each username sent to a TACACS server contains a domain name by default.
Username is usually in the “userid@isp-name” format, with the ISP domain name following “@”. The switch uses domain names to group users to different ISP domains.
While some earlier TACACS servers do not accept the username with domain name. In this case, you must remove the domain name before sending a username to the server.
Note:
When you specify that no ISP domain name is contained in usernames for a TACACS+ scheme, this scheme cannot be used in two or more ISP domains at the same time; otherwise, errors may occur because the TACACS server considers users in different
ISP domains but with the same name as one user.
Related command: tacacs+ scheme.
Example
Specify that no domain name is taken along with the username that will be sent out with the TACACS+ scheme 3Com.
[SW8800-tacacs+-3Com] user-name-format without-domain
32-58
3Com Switch 8800 Command Reference Guide Chapter 33 VRRP Configuration Commands
Chapter 33 VRRP Configuration Commands
33.1 VRRP Configuration Commands
33.1.1 debugging vrrp
Syntax
debugging vrrp { state | packet | error }
undo debugging vrrp { state | packet | error }
View
User view
Parameter
state: Debugs VRRP state.
packet: Debugs VRRP packets.
error: Debugs VRRP errors.
Description
Use the debugging vrrp command to enable the VRRP debugging.
Use the undo debugging vrrp command to disable the VRRP debugging.
By default, the VRRP debugging is disabled.
Example
Enable VRRP state debugging.
<SW8800> debugging vrrp state
33.1.2 display vrrp
Syntax
display vrrp [ interface vlan-interface interface-num [ virtual-router-ID ] ]
View
Parameter
Any view
interface: Displays the VRRP state of a specified VLAN interface.
vlan-interface interface-num: VLAN interface name.
33-1
3Com Switch 8800 Command Reference Guide Chapter 33 VRRP Configuration Commands
virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.
Description
Use the display vrrp command to view the information about the VRRP state.
If the interface name and virtual router ID are not specified, the state information about all the virtual routers on the switch will be displayed. If only the interface name is specified, the state information about all the virtual routers on the interface will be displayed. If the interface name and virtual router ID are specified, the state information about the specified virtual router on the interface is displayed.
Example
Display the VRRP state information on VLAN-interface 1.
[SW8800-Vlan-interface1] display vrrp interface vlan-interface 1
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Disable
Interface : Vlan-interface1
VRID : 1 Adver. Timer : 1
Admin Status : UP State : Initialize
Config Pri : 100 Run Pri : 90
Preempt Mode : YES Delay Time : 0
Auth Type : NONE
Track IF : Vlan-interface2 Pri Reduced : 10
Virtual IP : 1.1.1.1
Master IP : 0.0.0.0
Table 33-1 Description on the fields of the display vrrp command
Field
Run Method
Virtual IP ping
Interface
VRID
Adver.Timer
Admin Status
State
Config Pri
Run Pri
Preempt Mode
Delay Time
Description
Run method: real or virtual MAC method
Whether to enable to ping through virtual
IP
Interface in which virtual router resides
ID of virtual router
Interval for sending vrrp packets
Control status of virtual router
Running state of virtual router
Configured priority
Run priority
Preempt mode
Delay time
33-2
3Com Switch 8800 Command Reference Guide
Field
Auth Type
Track IF
Pri Reduced
Virtual IP
Master IP
Chapter 33 VRRP Configuration Commands
Description
Authentication type
Track interface
Reduced priority value for virtual router when track interface is Down
Virtual IP address list of virtual router
IP address of the master device in virtual router
33.1.3 display vrrp statistics
Syntax
display vrrp statistics [ vlan-interface interface-num [ virtual-router-ID ] ]
View
Any view
Parameter
Description
Use the display vrrp statistics command to view the information about the VRRP statistics.
If the interface name and virtual router ID are not specified, the statistics information about all the virtual routers on the switch will be displayed. If only the interface name is specified, the statistics information about all the virtual routers on the interface will be displayed. If the interface name and virtual router ID are specified, the statistics information about the specified virtual router on the interface will be displayed.
Example
vlan-interface interface-num: Specifies the name of the VLAN interface to which the virtual router belongs.
virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.
Display the VRRP statistics information on VLAN-interface 2.
<SW8800>display vrrp statistics vlan-interface 2
Interface : Vlan-interface2
VRID : 1
CheckSum Errors : 0 Version Errors : 0
VRID Errors : 0 Advertisement Interval Errors : 0
IP TTL Errors : 0 Auth Failures : 0
33-3
3Com Switch 8800 Command Reference Guide Chapter 33 VRRP Configuration Commands
Invalid Auth Type : 0 Auth Type Mismatch : 0
Packet Length Errors : 0 Address List Errors : 0
Become Master : 0 Priority Zero Pkts Rcvd : 0
Advertise Rcvd : 0 Priority Zero Pkts Sent : 0
Advertise Sent : 0 Invalid Type Pkts Rcvd : 0
33.1.4 display vrrp summary
Syntax
display vrrp summary
View
Any view
Parameter
None
Description
Use the display vrrp summary command to view the VRRP summary information on the switch.
Example
Display the VRRP summary information on the switch.
<SW8800>display vrrp summary
Run Method : VIRTUAL-MAC
Virtual Ip Ping : Disable
The total number of the vitual routers: 64
VLANID VRID State Run Adver. Auth Virtual
Pri Time Type IP
--------------------------------------------------------------------------
2 2 Initialize 100 1 NONE 2.2.2.192
3 3 Initialize 100 1 NONE 3.3.3.192
4 4 Initialize 100 1 NONE 4.4.4.192
5 5 Initialize 100 1 NONE 5.5.5.192
6 6 Initialize 100 1 NONE 6.6.6.192
7 7 Initialize 100 1 NONE 7.7.7.192
8 8 Initialize 100 1 NONE 8.8.8.192
9 9 Initialize 100 1 NONE 9.9.9.192
10 10 Initialize 100 1 NONE 10.10.10.192
11 11 Initialize 100 1 NONE 11.11.11.192
12 12 Initialize 100 1 NONE 12.12.12.192
13 13 Initialize 100 1 NONE 13.13.13.192
33-4
3Com Switch 8800 Command Reference Guide Chapter 33 VRRP Configuration Commands
14 14 Initialize 100 1 NONE 14.14.14.192
15 15 Initialize 100 1 NONE 15.15.15.192
16 16 Initialize 100 1 NONE 16.16.16.192
17 17 Initialize 100 1 NONE 17.17.17.192
Table 33-2 Description on the fields of the display vrrp summary command
Field
Run Method
Virtual IP ping
VRID
Adver.Timer
State
Run Pri
Auth Type
Virtual IP
Description
Run method: real or virtual MAC method
Whether to enable to ping through virtual
IP
ID of virtual router
Interval for sending vrrp packets
Running state of virtual router
Run priority
Authentication type
Virtual IP address list of virtual router
33.1.5 reset vrrp statistics
Syntax
reset vrrp statistics [ vlan-interface interface-num [ virtual-router-ID ] ]
View
User view
Parameter
statistics: VRRP statistics.
vlan-interface interface-num: Interface name.
virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.
Description
Use the reset vrrp statistics command to clear the statistics information about VRRP.
If the interface name and virtual router ID are not specified, the statistics information about all the virtual routers on the switch will be cleared. If only the interface name is specified, the statistics information about all the virtual routers on the interface will be cleared. If the interface name and virtual router ID are specified, the statistics information about the specified virtual router on the interface will be cleared.
33-5
3Com Switch 8800 Command Reference Guide
Example
Clear the VRRP statistics on the switch.
<SW8800> reset vrrp statistics
Chapter 33 VRRP Configuration Commands
33.1.6 vrrp authentication-mode
Syntax
vrrp authentication-mode authentication-type authentication-key
undo vrrp authentication-mode
View
VLAN interface view
Parameter
z z
authentication-type: Authentication type. There are following types:
simple: Indicates to perform simple character authentication.
md5: Indicates to perform the AH authentication with MD5 algorithm.
key: Authentication key, the key cannot exceed 8 characters.
Description
Use the vrrp authentication-mode command to configure the authentication type and key of a specified VRRP virtual router.
Use the undo vrrp authentication-mode command to reset the authentication type and key of a specified VRRP virtual router.
If the simple or md5 authentication is configured, it is required to set the authentication key.
This command is used to configure the authentication type and key for all the VRRP virtual routers on an interface. As defined in the protocol, all the virtual routers on an interface shall use the same authentication type and key. And all the members joining the same virtual router shall also use the same authentication type and key.
The authentication key is case sensitive.
Example
Specify the authentication type and key for a VRRP virtual router.
[SW8800-vlan-interface2] vrrp authentication-mode simple 3Com
33.1.7 vrrp method
Syntax
vrrp method { real-mac | virtual-mac }
33-6
3Com Switch 8800 Command Reference Guide
undo vrrp method
View
System view
Chapter 33 VRRP Configuration Commands
Parameter
real-mac: Uses the real MAC address of the interface to match the virtual IP address of the virtual router in VRRP backup.
virtual-mac: Uses the virtual MAC address of the interface to match the virtual IP address of the virtual router in VRRP backup.
Description
Use vrrp method command to set correspondence between the MAC address and the virtual IP address of the virtual router: matching the real MAC address or the virtual address with the virtual IP address.
Use the undo vrrp method command to reset the correspondence to the default value.
By default, the switch matches the virtual MAC address with the IP address of the virtual router.
Due to the chips installed, some switches support matching one IP address to multiple
MAC addresses. Then you may configure correspondence between the virtual IP address of the virtual router and the real/virtual MAC address.
You should set correspondence between the IP address of the virtual router and the
MAC address before configuring the virtual router. Otherwise, you cannot configure the correspondence.
If you set correspondence between the IP address of the virtual router and the real
MAC address, then you can configure only one virtual router on VLAN interface.
Example
Set the real MAC address of the interface match the virtual IP address of the virtual router.
[SW8800] vrrp method real-mac
33.1.8 vrrp ping-enable
Syntax
vrrp ping-enable
undo vrrp ping-enable
View
System view
33-7
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 33 VRRP Configuration Commands
Description
Use vrrp ping-enable command to enable the function to ping the virtual IP address of the virtual router.
Use the undo vrrp ping-enable command to disable the function.
By default, the ping function is disabled.
You can only use the commands before configuring any virtual router. If a virtual router is already established on the switch, you cannot perform this configuration any more.
Example
Enable to ping the virtual IP address of the virtual router.
[SW8800] vrrp ping-enable
33.1.9 vrrp un-check ttl
Syntax
vrrp un-check ttl
undo vrrp un-check ttl
View
VLAN interface view
Parameter
None
Description
Use the vrrp un-check ttl command to disable the check of TTL value of VRRP packet.
Use the undo vrrp un-check ttl command to enable the check of TTL value of VRRP packet.
The TTL value must be 225. If the switch finds TTL is not 225 when receiving VRRP packet, the packet will be discarded.
By default, the switch checks TTL value of VRRP packets.
Example
Disable to check TTL value of VRRP packet.
[SW8800-vlan-interface2] vrrp un-check ttl
33-8
3Com Switch 8800 Command Reference Guide
33.1.10 vrrp vrid preempt-mode
Chapter 33 VRRP Configuration Commands
Syntax
vrrp vrid virtual-router-ID preempt-mode [ timer delay delay-value ]
undo vrrp vrid virtual-router-ID preempt-mode
View
VLAN interface view
Parameter
Description
Use the vrrp vrid preempt-mode command to configure the preemption and delay of the virtual router.
Use the undo vrrp vrid preempt-mode command to cancel the preemption.
By default, virtual router is in preempt mode and delay-value is 0 second.
If a higher-priority switch is required to preempt the master, you need to configure it as preemption. You can also set a delay for the preemption. If you configure it not to preempt, the delay will be set to 0 automatically.
Example
virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.
delay-value: Delay in seconds, ranging from 0 to 255.
Configure the switch to preempt.
[SW8800-vlan-interface2] vrrp vrid 1 preempt-mode
Set a delay.
[SW8800-vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5
Configure the switch not to preempt.
[SW8800-vlan-interface2] undo vrrp vrid 1 preempt-mode
33.1.11 vrrp vrid priority
Syntax
vrrp vrid virtual-router-ID priority priority
undo vrrp vrid virtual-router-ID priority
View
VLAN interface view
33-9
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 33 VRRP Configuration Commands
virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.
priority: Priority value, ranging from 1 to 254; By default, the priority value is 100.
Description
Use the vrrp vrid priority command to configure the virtual router priority.
Use the undo vrrp vrid priority command to remove the virtual router priority.
The priority decides the status of a switch in the virtual router. A higher-priority switch is more likely to be a master. Priority 0 is reserved for some special purpose. 255 is reserved for the IP address owner. The priority of the IP address owner is always 255 and cannot be modified.
Example
Set the virtual router priority on VLAN-interface2.
[SW8800-vlan-interface2] vrrp vrid 1 priority 120
33.1.12 vrrp vrid timer
Syntax
vrrp vrid virtual-router-ID timer advertise adver-interval
undo vrrp vrid virtual-router-ID timer advertise
View
VLAN interface view
Parameter
virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.
adver-interval: VRRP packet interval of the master in the virtual router in seconds, ranging from 1 to 255; By default, the value is 1s.
Description
Use the vrrp vrid timer command to set the time interval for the master in the virtual router to send VRRP packets.
Use the undo vrrp vrid timer advertise command to restore the default value.
You are supposed to set the identical timer value for the switches in the same virtual router to avoid wrong configuration.
Example
Configure the master to transmit VRRP packets every 15 seconds.
[SW8800-vlan-interface2] vrrp vrid 1 timer advertise 15
33-10
3Com Switch 8800 Command Reference Guide
33.1.13 vrrp vrid track
Chapter 33 VRRP Configuration Commands
Syntax
vrrp vrid virtual-router-ID track vlan-interface interface-num [ reduced
value-reduced ]
undo vrrp vrid virtual-router-ID track [ vlan-interface interface-name ]
View
VLAN interface view
Parameter
virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.
vlan-interface interface-num: Interface which is to be tracked.
value-reduced: Reduced value of priority, ranging from 1 to 255; By default, the reduced value of priority is 10.
Description
Use the vrrp vrid track command to configure the switch to track the interface.
Use the undo vrrp vrid track command to stop tracking the interface.
VRRP interface track expends the backup function, which thereby can be implemented not only when the switch fails, but also when a network interface is down. The user can use this command to track or stop tracking an interface or all the interfaces. After the command is configured, the priority of the switch will be reduced, if the tracked interface turns down. Accordingly, some other switch in the virtual router will have the comparatively highest priority and become the new master, thereby implementing the backup function. The IP address owner does not allow the configuration of interface tracking.
Each virtual router can track up to eight interfaces.
Example
Set to track vlan-interface1 on vlan-interface2, and lower the priority of virtual router 1 on vlan-interface2 by 50 when vlan-interface1 goes down.
[SW8800-vlan-interface2] vrrp vrid 1 track vlan-interface 1 reduced 50
33.1.14 vrrp vrid virtual-ip
Syntax
vrrp vrid virtual-router-ID virtual-ip ip-address
undo vrrp vrid virtual-router-ID [ virtual-ip virtual-address ]
33-11
3Com Switch 8800 Command Reference Guide
View
VLAN interface view
Parameter
Chapter 33 VRRP Configuration Commands
virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.
ip-address: Virtual IP address.
Description
Use the vrrp vrid virtual-ip command to create a virtual router or add a virtual IP address to an existing virtual router.
Use the undo vrrp vrid virtual-ip command to cancel an address from the virtual router.
You can add up to 16 virtual IP addresses to one virtual router.
If all of the addresses in a virtual router are deleted, the system will delete the virtual router automatically.
Example
Create a virtual router.
[SW8800-vlan-interface2] vrrp vrid 1 virtual-ip 10.10.10.10
Add a virtual IP address to an existing virtual router.
[SW8800-vlan-interface2] vrrp vrid 1 virtual-ip 10.10.10.11
Delete a virtual IP address.
[SW8800-vlan-interface2] undo vrrp vrid 1 virtual-ip 10.10.10.10
Delete a virtual router.
[SW8800-vlan-interface2] undo vrrp vrid 1
33-12
3Com Switch 8800 Command Reference Guide Chapter 34 HA Configuration Commands
Chapter 34 HA Configuration Commands
34.1 HA Configuration Commands
34.1.1 display switchover state
Syntax
display switchover state [ slot-id ]
View
Any view
Parameter
slot-id: Slot number of the main or secondary Fabric.
Description
Use the display switchover state command to view the backup status of the main or secondary Fabric.
This command is used to display the backup state of the main or secondary Fabric according to the specified slot number. If slot-id is not specified, the status of the Fabric will be displayed.
Example
Display the status of the Fabric.
<SW8800> display switchover state
HA FSM State(master): Slave is absent.
34.1.2 display xbar
Syntax display xbar
View
Parameter
System view
None
34-1
3Com Switch 8800 Command Reference Guide
Description
Chapter 34 HA Configuration Commands
Use the display xbar command to view the load mode of the main or secondary Fabric, which includes the configured system Xbar load mode and the active system Xbar load mode.
Note that the configured system Xbar load mode is not always the same as the active system Xbar load mode. Only when the secondary Fabric is in position or is started, can the system operate in the configured load mode.
Example
Display the load mode of the the main or secondary Fabric.
[SW8800] display xbar
The configured system HA Xbar Load Mode is BALANCE
The active system HA Xbar Load Mode is SINGLE
34.1.3 slave auto-update config
Syntax
slave auto-update config
undo slave auto-update config
View
System view
Parameter
None
Description
Use the slave auto-update config command to enable automatic synchronization between the main and secondary systems.
Use the undo slave auto-update config command to disable automatic synchronization between the main and secondary systems.
By default, automatic synchronization is enabled.
Related command: slave update config.
Example
Enable automatic synchronous switch between the main or secondary systems.
[SW8800] slave auto-update config
34-2
3Com Switch 8800 Command Reference Guide
34.1.4 slave restart
Chapter 34 HA Configuration Commands
Syntax
slave restart
View
User view
Parameter
None
Description
Use the slave restart command to restart the secondary Fabric.
When the secondary system works abnormally, and needs to be reloaded, you can use this command to restart the secondary Fabric.
Example
Implement the restart of the secondary system.
<SW8800> slave restart
The slave will reset! Continue?[Y/N]:y
34.1.5 slave switchover
Syntax
slave switchover
View
User view
Parameter
None
Description
Use the slave switchover command to start the main-secondary switchover manually.
In the environment in which the secondary board is available and master in real-time backup state, the user can inform the secondary board of a main-secondary switchover by using a command if he expects the secondary Fabric to operate in place of the
Fabric. After the switchover, the secondary Fabric will control the system and the original Fabric will be forced to reset.
34-3
3Com Switch 8800 Command Reference Guide
Example
Chapter 34 HA Configuration Commands
Enable main-secondary switchover manually.
<SW8800> slave switchover
Caution!!! Confirm switch slave to master[Y/N]?y
Starting.....
RAM Line....OK
34.1.6 slave update configuration
Syntax
slave update configuration
View
User view
Parameter
None
Description
Use the slave update configuration command to manually synchronize the configuration file between the the main or secondary Fabric.
Related command: slave auto-update config.
Example
Synchronize the configuration file between the main or secondary Fabric.
<SW8800> slave update configuration
34.1.7 xbar
Syntax
xbar [ load-balance | load-single ]
View
System view
Parameter
load-balance: Sets Xbar load balance mode.
load-single: Sets Xbar load single mode.
Description
Use the xbar command to configure the load mode of the main or secondary Fabric.
34-4
3Com Switch 8800 Command Reference Guide Chapter 34 HA Configuration Commands
Note that the configured system Xbar load mode is not always the same as the active system Xbar load mode. Only when the secondary Fabric is in position or is started, can the system operate in the configured load mode..
Example
Configure the system Xbar load mode.
[SW8800] xbar load-balance
34-5
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
Chapter 35 File System Management Commands
35.1 File System
Note:
The limitation on the names of directories and files on switch are as follows: z z
The name of one direction or file can be up to 64 characters long.
The total number of characters including device, directory and file names can be up to 136 characters long.
35.1.1 cd
Syntax
cd directory
View
User view
Parameter
Description
Use the cd command to change the current user configuration path on the Ethernet
Switch.
Example
directory: Destination directory; By default, the directory is the working path configured by the user when the system starts.
Change the current working directory of the switch to flash.
<SW8800>cd flash:
<SW8800>pwd flash:
35.1.2 copy
Syntax
copy fileurl-source fileurl-dest
35-1
3Com Switch 8800 Command Reference Guide
View
User view
Chapter 35 File System Management Commands
Parameter
Description
Use the copy command to copy a file.
You can use this command to copy a file from current directory to another directory, or vise versa. Where, the source filename must be the name of a file that has already existed in the specified directory, and the destination filename can be changed as required. When the destination filename is the same as that of an existing file, the system will ask whether to overwrite it.
Example
fileurl-source: Source file name.
fileurl-dest: Destination file name.
Display current directory information.
<SW8800> dir
Directory of *
0 -rw- 595 Jul 12 2001 19:41:50 test.txt
16125952 bytes total (13975552 bytes free)
Copy the file test.txt and saves it as test.bak.
<SW8800> copy test.txt test.bak
Copy flash:/test/test.txt to flash:/test/test.bak ?[confirm]:y
% Copyed file flash:/test/test.txt flash:/test/test.bak
Display current directory information.
<SW8800> dir
Directory of *
0 -rw- 595 Jul 12 2001 19:41:50 test.txt
1 -rw- 595 Jul 12 2001 19:46:50 test.bak
16125952 bytes total (13974528 bytes free)
35.1.3 delete
Syntax
delete [ /unreserved ] file-url
View
User view
35-2
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 35 File System Management Commands
/unreserved: Delete the file completely.
file-url: path and name of the file you want to delete.
Description
Use the delete command to cancel a specified file from the storage device of the
Ethernet Switch.
This command supports wildcard characters.The deleted files are kept in the recycle bin and will not be displayed when you use the dir command. However they will be displayed, using the dir /all command. The files deleted by the delete command can be recovered with the undelete command or deleted permanently from the recycle bin, using the reset recycle-bin command.
Note that, if two files with the same name in a directory are deleted, only the latest deleted file will be kept in the recycle bin.
Example
Delete the file flash:/test/test.txt
<SW8800> delete flash:/test/test.txt
Delete flash:/test/test.txt?[Y/N]:
35.1.4 dir
Syntax
dir [ /all ] [ file-url ]
View
User view
Parameter
Description
Use the dir command to view the information about the specified file or directory in storage device of Ethernet Switch. This command supports wildcard characters.
Example
/all: Display all the files (including the deleted ones).
file-url: File or directory name to be displayed. The file-url parameter supports “*” matching. For example, using dir *.txt will display all the files with the extension txt in the current directory.
Display the information about the file flash:/test/test.txt
35-3
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
<SW8800> dir flash:/test/test.txt
Directory of flash:/test/
-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:28:52 test.txt
7932928 bytes total (4966400 bytes free)
Display the information about all the files (including the deleted ones) in the flash:/test/ directory.
<SW8800> dir /all flash:/test/
Directory of flash:/test/
-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:28:52 test.txt
1 -rw- 4 Apr 04 2005 20:13:47 [snmpboots]
31877 KB total (2182 KB free)
The files that have already been deleted and kept in the recycle bin are displayed with the [ ] prompt.
Display the information about all the files (including the deleted ones) in the flash:/test/ directory whose names start with the t character.
<SW8800> dir /all flash:/test/t*
Directory of flash:/test/
0 -rw- 1 noone nogroup 971 Sep 20 2003 14:28:52 test.txt
7932928 bytes total (4966400 bytes free)
35.1.5 execute
Syntax
execute filename
View
System view
Parameter
filename: Name of the batch file, ranging from 1 to 256, with a suffix of “.bat”.
Description
Use the execute command to execute the specified batch file.
The batch command executes the command lines in the batch file one by one. There should be no invisible character in the batch file. If invisible characters are found, the batch command will quit the current execution without back off operation. The batch command does not guarantee the execution of each command, nor does it perform hot backup itself. The forms and contents of the commands are not restricted in the batch file.
35-4
3Com Switch 8800 Command Reference Guide
Example
Chapter 35 File System Management Commands
Execute the batch file “test.bat” in the directory of “flash:/”.
[SW8800] execute test.bat
35.1.6 file prompt
Syntax
file prompt { alert | quiet }
View
System view
Parameter
Description
Use the command to Using file prompt command, you can modify prompt modes of the file operation on the Ethernet switch.
If the prompt mode is set as quiet, that is, no prompt for file operations, some non-recoverable operations may lead to system damage.
Example
alert: Performs interactive confirmation on dangerous file operations; The default value is alert, which configures to perform interactive confirmation on dangerous file operations.
quiet: Does not prompt for the file operations.
Configure the prompt mode of file operation as quiet.
[SW8800] file prompt quiet
35.1.7 fixdisk
Syntax
fixdisk device
View
User view
Parameter
device: Device name.
Description
Use the fixdisk command to restore the space of a storage device.
35-5
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
Some of the space of a storage device may be unavailable due to some reason (such as abnormal operations). In this case, you can use this command to restore the space.
Currently, the switch does not support this command on the compact flash (CF) card.
Example
Restore the space of the storage device flash.
<SW8800> fixdisk flash:
35.1.8 format
Syntax
format filesystem
View
User view
Parameter
filesystem: Device name.
Description
Use the format command to format the storage device.
Format operation will cause non-recoverable loss of all the files on the device. Specially, configuration files will be lost after formatting the flash memory.
Example
Format flash.
<SW8800> format flash:
All data on Flash will be lost , proceed with format ? [Y/N] y
% Now begin to format flash, please wait for a while...
Format winc: completed
35.1.9 mkdir
Syntax
mkdir directory
View
User view
Parameter
directory: Directory name, in the range 1 to 136 characters.
35-6
3Com Switch 8800 Command Reference Guide
Description
Chapter 35 File System Management Commands
Use the mkdir command to create directory in the specified directory on the storage device.
The directory to be created cannot have the same name as that of other directory or file in the specified directory.
Example
Create the directory dd.
<SW8800> mkdir dd
% Created dir flash:/dd
35.1.10 more
Syntax
more file-url
View
User view
Parameter
file-url: File name.
Description
Use the more command to view the contents of a specific file.
At present, the file system can display files in text format. This command can be used to display the contents of the files with .txt suffix or .cfg (configuration) suffix.
Example
Display the contents of file test.txt.
<SW8800> more test.txt
AppWizard has created this test application for you.
This file contains a summary of what you will find in each of the files that make up your test application.
Test.dsp
This file (the project file) contains information at the project level and is used to build a single project or subproject. Other users can share the project
(.dsp) file, but they should export the makefiles locally.
35-7
3Com Switch 8800 Command Reference Guide
35.1.11 move
Chapter 35 File System Management Commands
Syntax
move fileurl-source fileurl-dest
View
User view
Parameter
fileurl-source: Source file name.
fileurl-dest: Destination file name.
Description
Use the move command to move files.
When the destination filename is the same as that of an existing file, the system will ask whether to overwrite it.
Example
Display the current directory information.
<SW8800> dir
Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit
-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt
-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots
-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31
0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test
<SW8800> dir flash:/test/
Directory of flash:/test/ drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:36:11 dd
-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:40:05 sample.txt
7932928 bytes total (4963328 bytes free)
Move flash:/test/sample.txt to flash:/sample.txt.
<SW8800> move flash:/test/sample.txt flash:/sample.txt
Move flash:/test/sample.txt to flash:/sample.txt ?[Y/N]:y
% Moved file flash:/test/sample.txt to flash:/sample.txt
Display the directory after moving a file.
<SW8800> dir
Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit
-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt
35-8
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots
-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31
0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test
-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:41:44 sample.txt
7932928 bytes total (4963328 bytes free)
<SW8800> dir flash:/test/
Directory of flash:/test/ drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:36:11 dd
7932928 bytes total (4963328 bytes free)
Note:
The switch has the following limitation on directory name and filename: z
The maximum length of a directory name or filename is 64 characters. z
The maximum length of a full-path filename (including the device name, directory z name, and filename) is 136 characters.
The move command can be successfully executed only when the source file and the destination file are on the same device.
35.1.12 pwd
Syntax pwd
View
User view
Parameter
None
Description
Use the pwd command to view the current path.
Error may occur without setting the current path.
Example
Display the current path.
<SW8800> pwd flash:
35-9
3Com Switch 8800 Command Reference Guide
35.1.13 rename
Chapter 35 File System Management Commands
Syntax
rename fileurl-source fileurl-dest
View
User view
Parameter
Description
Use the rename command to rename a file.
If the destination file name is identical with that of an already existent directory or file, the rename operation fails and the system prompts that name has already been used or the file is being used.
Example
fileurl-source: Source file name.
fileurl-dest: Destination file name.
Display the current directory information.
<SW8800> dir
Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit
-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt
-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots
-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31
0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test
-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:41:44 sample.txt
7932928 bytes total (4963328 bytes free)
Rename the file sample.txt with sample.bak.
<SW8800> rename sample.txt sample.bak
Rename flash:/sample.txt to flash:/sample.bak ?[Y/N]:y
% Renamed file flash:/sample.txt to flash:/sample.bak
Display the directory after renaming sample.txt with sample.bak.
<SW8800>dir
Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit
-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt
-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots
-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31
35-10
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test
-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:44:54 sample.bak
7932928 bytes total (4962304 bytes free)
35.1.14 reset recycle-bin
Syntax
reset recycle-bin [ file-url ]
View
User view
Parameter
file-url: Name of the file to be deleted.
Description
Use the reset recycle-bin command to permanently delete files from the recycle bin.
The file-url supports the wildcard character "*”.The delete command only puts the file into the recycle bin, but reset recycle-bin command will delete this file permanently.
Example
Delete the file from the recycle bin.
<SW8800> reset recycle-bin flash:/ vrpcfg.vrrp
Squeeze flash:/ vrpcgf.vrrp ? [Y/N]:
35.1.15 rmdir
Syntax
rmdir directory
View
User view
Parameter
directory: Directory name.
Description
Use the rmdir command to cancel a directory.
The directory to be deleted must be empty, that is, all the files under the directory should be removed first.
35-11
3Com Switch 8800 Command Reference Guide
Example
Delete the directory 3Com.
<SW8800> rmdir 3Com
Rmdir 3Com?[Y/N]:y
% Removed directory 3Com
Chapter 35 File System Management Commands
35.1.16 umount
Syntax
umount device
View
User view
Parameter
device: Device name. Now, it can only be CF.
Description
Use the umount command to unload the CF card from the file system.
Note: The error message “% Device can’t be found or file can’t be found in the directory” can indicate that the CF card is not formatted.
Example
Unload the CF card from the file system.
<SW8800> umount cf:
35.1.17 undelete
Syntax
undelete file-url
View
User view
Parameter
file-url: Name of the file to be recovered.
Description
Use the undelete command to recover the file that has not been deleted completely.
The file name to be recovered cannot be the same as an existing directory name. If the destination file name is the same as an existing file name, prompt whether to overwrite.
35-12
3Com Switch 8800 Command Reference Guide
Example
Chapter 35 File System Management Commands
Display the information of all the files (including the deleted ones) in the current directory.
<SW8800> dir /all
Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit
-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt
-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots
-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31
0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test
-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:53:32 [sample.bak]
7932928 bytes total (4962304 bytes free)
Recover the deleted file sample.bak.
<SW8800> undelete sample.bak
Undelete flash:/sample.bak ?[Y/N]:y
% Undeleted file flash:/sample.bak
Display the information of all the files (including the deleted ones) in the current directory.
<SW8800> dir /all
Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit
-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt
-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots
-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31
0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test
-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:54:16 sample.bak
7932928 bytes total (4962304 bytes free)
35.2 Configuration File Management Commands
35.2.1 display current-configuration
Syntax
display current-configuration [ controller | interface
interface-type
[ interface-number ] | configuration [ configuration ] ] [ | { begin | exclude | include }
regular-expression ]
View
Any view
35-13
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 35 File System Management Commands
controller: Views the configuration information of controllers.
interface: Views the configuration information of interfaces.
interface-type: Type of the interface, including Aux, Ethernet, GigabitEthernet, NULL,
Vlan-interface, M-Ethernet, LoopBack.
interface-number: Number of the interface.
configuration configuration: Views the pre-positive and post-positive configuration information. The value of configuration is the key word of the configuration, such as: z z
system: Views the host name.
timerange: Views the configuration information of time range.
|: Filters the configuration information to be output by regular expression.
begin: Begins with the line that matches the regular expression.
exclude: Excludes lines that match the regular expression.
include: Includes lines that match the regular expression.
regular-expression: Defines the regular expression.
Table 35-1 Special characters in the regular expression
Special characters
Description
_
(
Restriction
Underscore, similar to a wildcard and can stand for these characters:
If the first character in the regular expression is not a underscore, then there is no restriction on the number of the underscore (but it is restricted by the command length)
(^|$|[,(){} ])
A space, the beginning of the input string, the end of the input string
If the first character in the regular expression is an underscore, then there should be less than five consecutive underscores.
If the underscores in a command are discrete, on the first group of underscores are filtered for the output information, but not the subsequent underscores.
Left parenthesis, push It is recommended not to use this flag in program character in the regular expression.
Description
Use the display current-configuration command to display the currently effective configuration parameters of the switch.
If some running configuration parameters are the same with the default operational parameters, they will not be displayed.
35-14
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
If a user needs to authenticate whether the configurations are correct after finishing a set of configuration, the display current-configuration command can be used to display the running parameters. Although the user has configured some parameters, but the related functions are not effective, they are not displayed.
When there is much configuration information, you can use the regular expression to filter the output information. For specific rules about the regular expression, refer to the corresponding operation manual.
Related command: save, reset saved-configuration and display
saved-configuration.
Example
View the running configuration parameters of the switch.
<SW8800> display current-configuration
#
sysname SW8800
# radius scheme system
server-type nec
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain domain system
radius-scheme system
access-limit disable
state active
idle-cut disable
domain default enable system
#
local-server nas-ip 127.0.0.1 key 3Com
#
router id 2.2.2.2
#
stp timer hello 500
# vlan 1
# vlan 2
# interface Vlan-interface1
#
35-15
3Com Switch 8800 Command Reference Guide interface Vlan-interface2
ip address 10.1.1.2 255.255.255.0
# interface Aux0/0 interface Aux0/0/1
# interface M-Ethernet0/0/0
# interface Ethernet4/1/1
# interface Ethernet4/1/2
# interface Ethernet4/1/3
# interface Ethernet4/1/4
# interface Ethernet4/1/5
# interface Ethernet4/1/6
# interface Ethernet4/1/7
…
# interface NULL0
# ospf
#
area 0.0.0.0
network 10.1.1.0 0.0.0.255
# user-interface aux 0 user-interface vty 0 4
# return
Chapter 35 File System Management Commands
View the lines containing the character string “10*.110” in the configuration information.
The “*” indicates that the “0” before it can appear 0 times or multiple consecutive times.
<SW8800> display current-configuration | include 10*.110 primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
local-server nas-ip 127.0.0.1 key 3Com vlan 1 interface Vlan-interface1
35-16
3Com Switch 8800 Command Reference Guide
ip address 10.1.1.2 255.255.255.0 interface Ethernet4/1/1
speed 1000 interface Ethernet4/1/2 interface Ethernet4/1/3 interface Ethernet4/1/4 interface Ethernet4/1/5
network 10.1.1.0 0.0.0.255
Chapter 35 File System Management Commands
View configuration information begin with “user”.
<SW8800> display current-configuration | include ^user user-interface aux 0 user-interface vty 0 4
View the pre-positive and post-positive configuration information.
<SW8800> display current-configuration configuration
#
sysname SW8800
# radius scheme system
server-type nec
primary authentication 127.0.0.1 1645
primary accounting 127.0.0.1 1646
user-name-format without-domain domain system
radius-scheme system
access-limit disable
state active
idle-cut disable
domain default enable system
#
local-server nas-ip 127.0.0.1 key 3Com
#
router id 2.2.2.2
#
stp timer hello 500
# ospf
#
area 0.0.0.0
network 10.1.1.0 0.0.0.255
#
35-17
3Com Switch 8800 Command Reference Guide user-interface aux 0 user-interface vty 0 4
# return
Chapter 35 File System Management Commands
35.2.2 display saved-configuration
Syntax display saved-configuration
View
Any view
Parameter
None
Description
Use the display saved-configuration command to view the configuration files in the flash memory or CF card of Ethernet Switch.
If the Ethernet Switch works abnormally after electrified, execute the display
saved-configuration command to view the startup configuration of the Ethernet
Switch.
Related command: save, reset saved-configuration and display
current-configuration.
Example
Display configuration files in flash memory or CF card of Ethernet Switch.
<SW8800> display saved-configuration
#
sysname SW8800
# local-user abc password simple abc
#
tcp window 8
# interface Aux7/1/1
link-protocol ppp
# interface Ethernet2/1/1
# interface Ethernet2/1/2
#
35-18
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands interface Ethernet2/1/3
ip address 10.110.101.17 255.255.255.0
# interface NULL0
# ospf 1
#
ip route-static 10.12.0.0 255.255.0.0 Ethernet 12/1/0
# user-interface con 0 user-interface aux 0 user-interface vty 0 4
authentication-mode none
# return
The displayed information is global, port and user configurations.
35.2.3 display this
Syntax
display this
View
Any view
Parameter
None
Description
Use the display this command to display the running configuration of the current view.
If you need to authenticate whether the configurations is correct after you have finished a set of configurations under a view, you can use the display this command to view the running parameters.
Some effective parameters are not displayed if they are the same with the default ones, while some parameters, though have been configured by the user, if their related functions are not effective, are not displayed either. For example, if X.25 is encapsulated at the data link layer on an interface, you can configure PPP parameter on the interface, but cannot view the configuration information when executing the
display this command.
Associated configuration of the interface is displayed when executing the command in different interface views; related configuration of the protocol view is displayed when
35-19
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands executing this command in different protocol views; and all the configuration of the protocol view is displayed when executing this command in protocol sub-views.
Related command: save, reset saved-configuration, display current-configuration,
display saved-configuration.
Example
Display the running configuration parameters for the current view of the switch system.
[SW8800] display this
35.2.4 display startup
Syntax
display startup
View
Any view
Parameter
None
Description
Use the display startup command to display the related system software and configuration filenames used for the current and the next start-ups.
This command is used to display the following information: the filename of the system software for the current enabling configured by the user, the filename of the system software actually used for the current enabling, the filename of the system software configured for the next enabling, the configuration filename used for the current enabling, the configuration filename configured for the next enabling.
Related command: startup saved-configuration.
Example
Display the filenames related to the current and the next enabling.
<SW8800> display startup
MainBoard:
Startup saved-configuration file: flash:/8800.cfg
Next startup saved-configuration file: flash:/8800.cfg
35.2.5 reset saved-configuration
Syntax reset saved-configuration
35-20
3Com Switch 8800 Command Reference Guide
View
User view
Parameter
None
Chapter 35 File System Management Commands
Description
Use the reset saved-configuration command to erase configuration files from the flash memory of the Ethernet Switch.
Perform this command with cautious. It is suggested to consult technical support personnel first.
Generally, this command is used in the following situations: z z
After upgrade of software, configuration files in flash memory may not match the new version's software. Perform the reset saved-configuration command to erase the old configuration files.
If a used Ethernet Switch is applied to the new circumstance and the original configuration files cannot meet the new requirements, the Ethernet Switch should be configured again. Erase the original configuration files for reconfiguration.
If the configuration files do not exist in the flash memory when Ethernet Switch is electrified and initialized, it will enter setup switch view automatically.
Related command: save, display current-configuration, display
saved-configuration.
Example
Erase the configuration files from the flash memory of Ethernet Switch.
<SW8800> reset saved-configuration
The saved configuration will be erased.
Are you sure?[Y/N]
35.2.6 save
Syntax
save [ file-name ]
View
User view
Parameter
file-name: Name of the configuration file with the extension .cfg. It is a character string of 5 to 56 characters.
35-21
3Com Switch 8800 Command Reference Guide
Description
Chapter 35 File System Management Commands
Use the save command to save the current configuration files to Flash memory.
After finishing a group of configurations and achieving corresponding functions, user should remember to get the current configuration files stored in the flash memory.
Even if the problems like reboot and power-off occur during saving, the configuration can be still saved to Flash.
Related command: reset saved-configuration, display current-configuration,
display saved-configuration.
Example
Get the current configuration files stored in the flash memory.
<SW8800> save
The switch configurations will be written to the device.
Are you sure?[Y/N]y
Now saving current configuration to the device.
Saving configuration flash:/vrpcfg.cfg. Please wait..
Current configuration is saved to the device successfully.
35.2.7 startup saved-configuration
Syntax
startup saved-configuration cfgfile
View
User view
Parameter
cfgfile: Name of the configuration file. It is a string with a length of 5 to 56 characters.
Description
Use the startup saved-configuration command to configure the configuration file used for enabling the system for the next time.
The configuration file must have “.cfg” as its extension name and must be saved under the root directory of the Flash. By default, the configuration file will be saved under the root directory of Flash.
The extension of configuration file must be .cfg, and the startup configuration file must be saved under the directory where the memory resides. The memory is Flash.
Related command: display startup.
35-22
3Com Switch 8800 Command Reference Guide
Example
Chapter 35 File System Management Commands
Configure the configuration file for the next start-up
<SW8800> startup saved-configuration vrpcfg.cfg
35.3 FTP Server Configuration Commands
35.3.1 display ftp-server
Syntax display ftp-server
View
Any view
Parameter
None
Description
Use the display ftp-server command to view the parameters of the current FTP Server.
You can perform this command to verify the configuration after setting FTP parameters.
Example
Display the configuration of FTP Server parameters.
<SW8800> display ftp-server
FTP server is running
Max user number 5
User count 0
Timeout value(in minute) 30
The above infomration displays the running state of FTP server, maximum number of user connections, number of current login users, and timeout.
35.3.2 display ftp-user
Syntax display ftp-user
View
Any view
Parameter
None
35-23
3Com Switch 8800 Command Reference Guide
Description
Chapter 35 File System Management Commands
Use the display ftp-user command to view the parameters of current FTP user.
Example
Show the configuration of FTP user parameters.
<SW8800> display ftp-user
% No ftp user
35.3.3 ftp disconnect
Syntax
ftp disconnect user-name
View
System view
Parameter
user-name: FTP user name.
Description
Use the ftp disconnect command to disconnect an FTP user.
Example
Disconnect the FTP user ftptest.
[SW8800] ftp disconnect ftptest
35.3.4 ftp server enable
Syntax ftp sever enable undo ftp sever
View
System view
Parameter
None
Description
Use the ftp server enable command to start FTP Server and enable FTP user logon.
Use the undo ftp server command to close FTP Server and disable FTP user logon.
35-24
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
By default, FTP Server is shut down.
Perform this command to easily start or shut down FTP Server, preventing Ethernet
Switch from being attacked by some unknown user.
Example
Shut down FTP Server.
[SW8800] undo ftp server
% Close FTP server
35.3.5 ftp timeout
Syntax
ftp timeout minute
undo ftp timeout
View
System view
Parameter
minute: Connection timeouts (measured in minutes), ranging from 1 to 35791; By default, the connection timeout time is 30 minutes.
Description
Use the ftp timeout command to configure connection timeout interval.
Use the undo ftp timeout command to restore the default connection timeout interval.
After a user logs on to an FTP Server and has established connection, if the connection is interrupted or cut abnormally by the user, FTP Server will still hold the connection.
The connection timeout can avoid this problem. If the FTP server has no command interaction with a client for a specific period of time, it considers the connection to be failed and disconnect to the client.
Example
Set the connection timeout to 36 minutes.
[SW8800] ftp timeout 36
35.3.6 local-user
Syntax
local-user { username | multicast [ domain domain-name ] ipaddress |
password-display-mode { auto | cipher-force } }
35-25
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
undo local-user { username | all [ service-type { ftp | lan-access | telnet | ppp | ssh
| terminal } ] | multicast [ domain domain-name ] ipaddress |
password-display-mode }
View
System view
Parameter
username: User name.
all [ service-type { ftp | lan-access | telnet | ppp | ssh | terminal }: Deletes all local users. The parameters ftp, lan-access, telnet, ppp are used respectively to delete all the FTP, LAN access, telnet, and point-to-point access local users. The SSH parameter is used to delete all the SSH local view. And the terminal parameter is used to delete all the user terminals.
multicast [ domain domain-name]: Adds or deletes multicast address.
Ipaddress: Multicast IP address.
password-display-mode { auto | cipher-force }: Specifies the display mode of password. auto indicates the password will be displayed in the same mode as that used when the user configure the password. And cipher-force indicates the password will be displayed in forcible cipher mode.
Description
Use the local-user command to configure a local user and enter the local user view.
Use the undo local-user command to cancel one or all the local users.
By default, no local user exists.
This configuration is required if you want to access FTP server through FTP from a client.
Example
Create a local user, and enter the local user view.
[SW8800] local-user SW8800
[SW8800-luser-SW8800]
35.3.7 local-user password-display-mode
Syntax
local-user password-display-mode { auto | cipher-force }
undo local-user password-display-mode
35-26
3Com Switch 8800 Command Reference Guide
View
System view
Chapter 35 File System Management Commands
Parameter
Description
Use the local-user password-display-mode command to set the display mode of the user password when the switch displays the local user.
Use the undo local-user password-display-mode command to restore the default mode.
By default, this mode is auto.
Example
password-display-mode: Sets the display mode of user password when the switch displays the local user.
auto: Sets the display mode to what was used in configuring the password. That is, if the password was configured in cipher mode, it is also displayed in cipher mode, or else, it is displayed in plain mode.
cipher-force: Forcibly sets the display mode to cipher.
Set the display mode of user password when the switch displays the local user to cipher-force.
[SW8800] local-user password-display-mode cipher-force
35.3.8 password
Syntax
password { simple | cipher } password
undo password
View
Local user view
Parameter
simple: Specifies to display passwords in simple text.
cipher: Specifies to display passwords in cipher text.
password: Defines a password, which is a character string of up to 16 characters if it is in simple text and of up to 24 characters if it is in cipher text.
Description
Use the password command to configure a password display mode for local users.
35-27
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
Use the undo password command to cancel the specified password display mode.
By default, a local user does not have a password.
If a client uer wants to access FTP server through FTP, a password must be configured.
Example
Configure the password for the local user SW8800 as 3Com (encrypted).
[SW8800-luser-SW8800] password cipher 3Com
35.3.9 service-type
Syntax
service-type { ftp [ ftp-directory directory ] | lan-access | telnet [ level level ] }
undo service-type { ftp [ ftp-directory ] | lan-access | telnet [ level ] }
View
Local user view
Parameter
Description
Use the service-type command to configure a service type for a particular user.
Use the undo service-type command to cancel the specified service type for the user.
This configuraiton is required if you want to access FTP server through FTP from a client.
Example
ftp: Specifies user type as ftp.
ftp-directory directory: Specifies the directory of ftp users, directory is a character string of up to 64 characters.
lan-access: Specifies user type to lan-access, which mainly refers to Ethernet acc essing users, 802.1x supplicants for example.
telnet: Specifies user type as Telnet.
level level: Specifies the level of Telnet or SSH users. The argument level is an integer in the range of 0 to 3 and defaults to 1.
Sets a local user as FTP user who can access the directory flash:/3Com/lst/.
[SW8800-luser-SW8800] service-type ftp ftp-directory flash:/3Com/lst/
35-28
3Com Switch 8800 Command Reference Guide
35.4 FTP Client Commands
35.4.1 ascii
Chapter 35 File System Management Commands
Syntax ascii
View
FTP Client view
Parameter
None
Description
Use the ascii command to configure data transmission mode as ASCII mode.
By default, the file transmission mode is ASCII mode.
Perform this command if the user needs to change the file transmission mode to default mode.
Example
Configure to transmit data in the ASCII mode.
[ftp] ascii
200 Type set to A.
35.4.2 binary
Syntax binary
View
FTP Client view
Parameter
None
Description
Use the binary command to configure file transmission type as binary mode.
Example
Configure to transmit data in the binary mode.
[ftp] binary
35-29
3Com Switch 8800 Command Reference Guide
200 Type set to I.
Chapter 35 File System Management Commands
35.4.3 bye
Syntax bye
View
FTP Client view
Parameter
None
Description
Use the bye command to disconnect with the remote FTP Server and return to user view.
After performing this command, you can terminate the control connection and data connection with the remote FTP Server.
Example
Terminate connection with the remote FTP Server and return to user view.
[ftp] bye
35.4.4 cd
Syntax
cd pathname
View
FTP Client view
Parameter
pathname: Path name.
Description
Use the cd command to change the working path on the remote FTP Server.
This command is used to access another directory on FTP Server. Note that the user can only access the directories authorized by the FTP server.
Example
Change the working path to flash:/temp
35-30
3Com Switch 8800 Command Reference Guide
[ftp] cd flash:/temp
Chapter 35 File System Management Commands
35.4.5 cdup
Syntax cdup
View
FTP Client view
Parameter
None
Description
Use the cdup command to change working path to the upper level directory.
This command is used to exit the current directory and return to the upper level directory.
Example
Change working path to the upper level directory.
[ftp] cdup
35.4.6 close
Syntax close
View
FTP Client view
Parameter
None
Description
Use the close command to disconnect FTP client side from FTP server side without exiting FTP client side view. That is to say, you can terminate the control connection and data connection with the remote FTP Server at the same time.
Example
Terminate connection with the remote FTP Server and stays in FTP Client view.
[ftp] close
35-31
3Com Switch 8800 Command Reference Guide
35.4.7 debugging
Chapter 35 File System Management Commands
Syntax
debugging
undo debugging
View
FTP client view
Parameter
None
Description
Use the debugging command to enable the debugging for FTP client commands.
Use the undo debugging command to disable the debugging for FTP client commands.
By default, the debugging for FTP client commands is disabled.
Example
Enable the debugging for FTP client commands.
[ftp] debugging
35.4.8 delete
Syntax
delete remotefile
View
FTP Client view
Parameter
remotefile: File name.
Description
Use the delete command to cancel the specified file.
Example
Delete the file temp.c
[ftp] delete temp.c
35-32
3Com Switch 8800 Command Reference Guide
35.4.9 dir
Chapter 35 File System Management Commands
Syntax
dir [ filename ] [ localfile ]
View
FTP Client view
Parameter
filename: File name to be queried.
localfile: Saved local file name.
Description
Use the dir command to query a specified file.
If no parameter of this command is specified, then all the files in the directory will be displayed.
Example
Query the file temp.c and saves the results in the file temp1.
[ftp] dir temp.c temp1
35.4.10 disconnect
Syntax disconnect
View
FTP Client view
Parameter
None
Description
Use the disconnect command to disconnect FTP client side from FTP server side without exiting FTP client side view.
This command terminates the control connection and data connection with the remote
FTP Server at the same time.
Example
Terminate connection with the remote FTP Server and stays in FTP Client view.
[ftp] disconnect
35-33
3Com Switch 8800 Command Reference Guide
35.4.11 ftp
Chapter 35 File System Management Commands
Syntax
ftp [ ipaddress [ port ] ]
View
User view
Parameter
Description
Use the ftp command to establish control connection with the remote FTP Server and enter FTP Client view.
Example
ipaddress: IP address of the remote FTP Server.
port: Port number of remote FTP Server.
Connect to FTP Server at the IP address 1.1.1.1
<SW8800> ftp 1.1.1.1
35.4.12 get
Syntax
get remotefile [ localfile ]
View
FTP Client view
Parameter
localfile: Local file name.
remotefile: Name of a file on the remote FTP Server.
Description
Use the get command to download a remote file and save it locally.
If no local file name is specified, it will be considered the same as that on the remote
FTP Server.
Example
Download the file temp1.c and saves it as temp.c
[ftp] get temp1.c temp.c
35-34
3Com Switch 8800 Command Reference Guide
35.4.13 lcd
Chapter 35 File System Management Commands
Syntax lcd
View
FTP Client view
Parameter
None
Description
Use the lcd command to view local working path of FTP Client.
Example
Show local working path.
[ftp] lcd
% Local directory now flash:/temp
35.4.14 ls
Syntax
ls [ remotefile ] [ localfile ]
View
FTP Client view
Parameter
remotefile: Remote file to be queried.
localfile: Saved local file name.
Description
Use the ls command to query a specified file.
If no parameter is specified, all the files will be shown.
Note that, the ls command only displays the file names, while the dir command also displays other file-related information such as the file size and creation date.
Example
Query file temp.c
[ftp] ls temp.c
35-35
3Com Switch 8800 Command Reference Guide
35.4.15 mkdir
Chapter 35 File System Management Commands
Syntax
mkdir pathname
View
FTP Client view
Parameter
pathname: Directory name.
Description
Use the mkdir command to create a directory on the remote FTP Server.
User can perform this operation as long as the remote FTP server has authorized.
Example
Create the directory flash:/lanswitch on the remote FTP Server.
[ftp] mkdir flash:/lanswitch
35.4.16 open
Syntax
open ipaddr [ port ]
View
FTP client view
Parameter
Description
Use the open command to set up an FTP connection with a remote FTP server.
Example
ipaddr: IP address of the remote FTP server.
port: Port number of the remote server.
Set up a FTP connection with the FTP server with the IP address of 10.110.3.1.
[ftp] open 10.110.3.1
35-36
3Com Switch 8800 Command Reference Guide
35.4.17 passive
Chapter 35 File System Management Commands
Syntax
passive
undo passive
View
FTP Client view
Parameter
None
Description
Use the passive command to configure the data transmission mode as passive mode.
Use the undo passive command to configure the data transmission mode as active mode.
By default, the data transmission mode is passive mode
Example
Set the data transmission to passive mode.
[ftp] passive
35.4.18 put
Syntax
put localfile [ remotefile ]
View
FTP Client view
Parameter
localfile: Local file name.
remotefile: File name on the remote FTP Server.
Description
Use the put command to upload a local file to the remote FTP Server.
If the user does not specify the filename on the remote server, the system will consider it the same as the local file name by default.
Example
Upload the local file temp.c to the remote FTP Server and saves it as temp1.c.
35-37
3Com Switch 8800 Command Reference Guide
[ftp] put temp.c temp1.c
Chapter 35 File System Management Commands
35.4.19 pwd
Syntax pwd
View
FTP Client view
Parameter
None
Description
Use the pwd command to view the current directory on the remote FTP Server.
Example
Show the current directory on the remote FTP Server.
[ftp] pwd
"flash:/temp" is current directory.
35.4.20 quit
Syntax quit
View
FTP Client view / Port-group view
Parameter
None
Description
Use the quit command to terminate the connection with the remote FTP Server and return to user view.
Example
Terminate connection with the remote FTP Server and returns to user view.
[ftp] quit
<SW8800>
35-38
3Com Switch 8800 Command Reference Guide
35.4.21 remotehelp
Chapter 35 File System Management Commands
Syntax
remotehelp [ protocol-command ]
View
FTP Client view
Parameter
protocol-command: FTP protocol command.
Description
Use the remotehelp command to view help information about the FTP protocol command. This command takes effects only when the FTP server provides the protocol command help. (Switch 8800s serving as servers provide this help service, but common FTP software do not provide this service).
Example
Show the syntax of the protocol command user.
[ftp] remotehelp user
214 Syntax: USER <sp> <username>
35.4.22 rmdir
Syntax
rmdir pathname
View
FTP Client view
Parameter
pathname: Directory name of remote FTP Server.
Description
Use the rmdir command to remove the specified directory from FTP Server. Note that, this command can be successfully executed only when the specified directory contains no files.
Example
Delete the directory flash:/temp1 from FTP Server.
[ftp] rmdir flash:/temp1
35-39
3Com Switch 8800 Command Reference Guide
35.4.23 user
Chapter 35 File System Management Commands
Syntax
user username [ password ]
View
FTP Client view
Parameter
Description
Use the user command to register an FTP user.
This command is available when you log in FTP server with a specified user account.
Example
username: Logon username.
password: Logon password.
Log in the FTP Server with username tom and password bjhw.
[ftp] user tom bjhw
35.4.24 verbose
Syntax verbose undo verbose
View
FTP Client view
Parameter
None
Description
Use the verbose command to enable the client to display the commands received from/sent to the server.
Use the undo verbose command to disable the client from display the commands received from/sent to the server
By default, the client displays the commands received from/sent to the server.
Example
Enable verbose.
35-40
3Com Switch 8800 Command Reference Guide
[ftp]verbose
Chapter 35 File System Management Commands
35.5 TFTP Configuration Commands
35.5.1 tftp get
Syntax
tftp tftp-server get source-file [ dest-file ]
View
User view
Parameter
tftp-server: IP address or hostname of the TFTP server. The name of the TFTP server should be a string ranging from 1 to 20 characters.
source-file: Specifies the filename of the source file on the TFTP server.
dest-file: Specifies the filename of the destination file which will be saved on the switch.
Description
Use the tftp get command to download a file from the specified directory of the TFTP server and saving it on the switch.
Related command: tftp put.
Example
Download the file LANSwitch.app from the TFTP server at 1.1.3.214 and save it as vxWorks.app on the local switch.
<SW8800> tftp 1.1.3.214 get LANSwitch.app vxWorks.app
35.5.2 tftp put
Syntax
tftp tftp-server put source-file [ dest-file ]
View
Parameter
User view
tftp-server: IP address or hostname of the TFTP server. The name of the TFTP server should be a string ranging from 1 to 20 characters.
source-file: Specifies the filename of the source file which is saved on the switch.
35-41
3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands
dest-file: Name of the file that will be uploaded to the specified directory on the TFTP server.
Description
Use the tftp put command to upload a file from the switch to the specified directory on the TFTP server.
Related command: tftp get.
Example
Upload the vrpcfg.txt to the TFTP server at 1.1.3.214 and save it as Temp.txt.
<SW8800> tftp 1.1.3.214 put vrpcfg.txt temp.txt
35-42
3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands
Chapter 36 MAC Address Table Management
Commands
36.1 MAC Address Table Management Commands
36.1.1 display mac-address aging-time
Syntax display mac-address aging-time
View
Any view
Parameter
None
Description
Use the display mac-address aging-time command to view the aging time of the dynamic entry in the MAC address table.
Related command: mac-address, mac-address timer, display mac-address.
Example
Display the aging time of the dynamic entry in the MAC address table.
[SW8800] display mac-address aging-time mac-address aging-time: 300s
The above information indicates that the aging time of the dynamic entry in the MAC address is 300s.
36.1.2 display mac-address
Syntax
display mac-address [ mac-addr [ vlan vlan-id ] | [ static | dynamic ] [ interface
{ interface-name | interface-type interface-num } ] [ vlan vlan-id ] [ count ] ]
View
Parameter
Any view
36-1
3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands
mac-addr: Specifies the MAC address.
vlan-id: Specifies the VLAN ID.
static: Static table entry, that is no aging, If the configuration is saved, it can be restored after the switch is reset.
dynamic: Dynamic table entry, which will be aged.
interface-type: Specifies the interface type.
interface-num: Specifies the interface number.
interface-name: Specifies the interface name.
For details about the interface-type, interface-num and interface-name parameters, refer to the Port Configuration in this manual.
count: the display information will only contain the sum number of MAC addresses in the MAC address table if user choice this parameter when using this command.
Description
Use the display mac-address command to view MAC address table information.
When managing the Layer-2 addresses of the switch, the administrator can perform this command to view such information as the Layer-2 address table, address status
(static or dynamic), Ethernet port of the MAC address, VLAN of the address, and system address aging time.
Related command: mac-address, mac-address timer.
Example
Show the information of the entry with MAC address at 00e0-fc01-0101
[SW8800] display mac-address 00e0-fc01-0101
MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)
Table 36-1 Description on the fields of the display mac-address command
Field
MAC ADDR
VLAN ID
STATE
PORT INDEX
AGING TIME(s) The aging time
Description
The destination MAC address
The VLAN of the MAC address
The state of the item, which can be Learned, Config static
The forwarding port
36-2
3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands
36.1.3 mac-address
Syntax
mac-address { static | dynamic } mac-addr interface { interface-name | interface-type
interface-num } vlan vlan-id
undo mac-address [ static | dynamic ] [ mac-addr [ interface { interface-name |
interface-type interface-num } ] vlan vlan-id | interface { interface-name | interface-type
interface-num } | vlan vlan-id ]
View
System view
Parameter
static: Static table entry, lost after resetting switch.
dynamic: Dynamic table entry, which will be aged.
mac-addr: Specifies the MAC address.
For detailed description on interface-type, interface-num, and interface-name see Port
Configuration section of this manual.
vlan-id: Specifies the VLAN ID.
Description
Use the mac-address command to add/modify the MAC address table entry.
Use the undo mac-address command to cancel the MAC address table entry
If the input address has been existed in the address table, the original entry will be modified. That is, replace the interface pointed by this address with the new interface and the entry attribute with the new attribute (dynamic entry, static entry and permanent entry).
All the (MAC unicast) addresses on a certain interface can be deleted. User can choose to delete any of the following addresses: address learned by system automatically, dynamic address configured by user, static and permanent addresses configured by user.
Related command: display mac-address.
Example
Configure the port number corresponding to the MAC address 00e0-fc01-0101 as
Ethernet2/1/1 in the address table, and sets this entry as static entry.
[SW8800] mac-address static 00e0-fc01-0101 interface ethernet 2/1/1 vlan 2
36-3
3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands
36.1.4 mac-address max-mac-count
Syntax
mac-address max-mac-count count
undo mac-address max-mac-count
View
Ethernet port view
Parameter
count: Maximum number of MAC addresses learned by a port, ranging from 0 to 14,336, the value of 0 means that address learning is disabled.
Description
Use the mac-address max-mac-count command to set the maximum number of MAC addresses learned by an Ethernet port.
Use the undo mac-address max-mac-count command to remove the limit on the maximum number of MAC addresses learned by an Ethernet port.
By default, a port can learn as many MAC addresses as a board can have. You can change the default value by using this command: if you set the value to count, and when the number of MAC addresses learned by the port reaches this value, this port will no longer learn any more MAC addresses; and you can use the undo
mac-address max-mac-count command to remove the limit on the number.
Note: z z z
The maximum number of MAC addresses of a board ranges from 12 K to 16 K depending on various software versions and board types.
The aforementioned number of MAC addresses includes only the MAC addresses learned by the switch dynamically, and excludes those configured by the user.
When executing the mac-address max-mac-count command, if the current number of MAC addresses exceeds the threshold value, the switch neither delete the present MAC address entries nor learn new MAC address until the number of entries less than the threshold value after some entries are aged out.
Related command: mac-address and mac-address timer.
Example
Set the maximum number of MAC addresses learned by Ethernet port Ethernet3/1/3 to
600.
36-4
3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands
[SW8800-Ethernet3/1/3] mac-address max-mac-count 600
36.1.5 mac-address max-mac-count enable forward
Syntax
mac-address max-mac-count enable forward
undo mac-address max-mac-count enable forward
View
Ethernet port view
Parameter
None
Description
Use the mac-address max-mac-count enable forward command to set the switch to forward packets whose source MAC addresses are not learned by the port when the number of MAC addresses learned exceeds the threshold value.
Use the undo mac-address max-mac-count enable forward command to set the switch to drop the packets whose source MAC addresses are not learned by the port when the number of MAC addresses learned exceeds the threshold value.
By default, the switch forwards packets whose source MAC addresses are not leaned by the port when the number of MAC addresses learned exceeds the threshold value.
Related command: mac-address and mac-address timer.
Example
Set the maximum number of MAC addresses learned by Ethernet port Ethernet3/1/3 to
600, and the switch will drop the packets whose source MAC addresses are not learned by the port when the number of MAC addresses learned exceeds 600.
[SW8800-Ethernet3/1/3]mac-address max-mac-count 600
[SW8800-Ethernet3/1/3]undo mac-address max-mac-count enable forward
36.1.6 mac-address max-mac-count alarm
Syntax
mac-address max-mac-count alarm
undo mac-address max-mac-count alarm
View
Ethernet port view
36-5
3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands
Parameter
alarm: when the current number of MAC addresses exceeds the threshold value, whether the switch gives the network administrator an alarm or not. By default, the switch doesn’t give an alarm.
Description
Use the mac-address max-mac-count alarm command to enable the switch to send alarms to network administrator.
After the mac-address max-mac-count alarm command is executed, if the MAC addresses learned by a port reach the maximum number of MAC addresses that the port can learned, the port will send an alarm to network administrator to prompt that the port will no longer learn any MAC addresses.
Use the undo mac-address max-mac-count alarm command to disable the switch from sending alarms to network administrator.
Related command: mac-address and mac-address timer.
Note: z z z
The maximum number of MAC addresses of a board ranges from 12 K to 16 K depending on various software versions and board types.
The aforementioned number of MAC addresses includes only the MAC addresses learned by the switch dynamically, and excludes those configured by the user.
When executing the mac-address max-mac-count command, if the current number of MAC addresses exceeds the threshold value, the switch neither delete the present MAC address entries nor learn new MAC address until the number of entries less than the threshold value after some entries are aged out.
Example
Set the maximum number of MAC addresses learned by Ethernet port Ethernet3/1/3 to
600, and the switch will give an alarm to the network administrator and forward the packets when the number of MAC addresses learned exceeds 600.
[SW8800-Ethernet3/1/3] mac-address max-mac-count 600
[SW8800-Ethernet3/1/3]mac-address max-mac-count enable forward alarm cancel the alarm function
[SW8800-Ethernet3/1/3]undo mac-address max-mac-count enable alarm
36-6
3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands
36.1.7 mac-address timer
Syntax
mac-address timer { aging age | no-aging }
undo mac-address timer aging
View
System view
Parameter
aging age: Specifies the aging time (measured in seconds) of the Layer-2 dynamic address table entry, ranging from 10 to 630. By default, the aging time is 300 seconds.
no-aging : No aging time.
Description
Use the mac-address timer command to configure the aging time of the Layer-2 dynamic address table entry.
Use the undo mac-address timer command to restore the default value.
If aging time is too short, the MAC address might be deleted before the Ethernet switch gets the address information. That way the switch broadcasts the received packets to all the ports within the VLAN. This will affect the switch operation performance.
If aging time is too long, the Ethernet switch will store a great number of out-of-date
MAC address tables. This will consume MAC address table resources and the switch will not be able to update MAC address table according to the network change.
Caution:
The aging of dynamic MAC address is completed during the second aging cycle that has been configured.
Example
Configure the entry aging time of Layer-2 dynamic address table to be 500 seconds.
[SW8800] mac-address timer aging 500
36-7
3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands
36.1.8 reset mac-address
Syntax
reset mac-address { all | dynamic | static | interface { interface_type interface_num |
interface_name } | Vlan vlan_number}
View
User view
Parameter
Description
Use the reset mac-address command to clear corresponding MAC address entries.
Example
all: All of the MAC address entries.
dynamic: Dynamic MAC address entry.
static: Static MAC address entry.
interface_name:MAC address entries associated with the specified port. Where
interface_type is the port type, interface_num is the port number, and interface_name =
interface_type interface_num.
Vlan vlan_number: All of the MAC address entries in the specified VLAN.
Clear all MAC address entries.
<SW8800>reset mac-address all
36-8
3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands
Chapter 37 Device Management Commands
37.1 Device Management Commands
37.1.1 boot boot-loader
Syntax
boot boot-loader file-url [ slot slot-no ]
View
User view
Parameter
file-url: Path and name of APP file.
slot slot-no: Specifies the APP file of slave board.
Description
Use the boot boot-loader command to configure the app file used for boot of the next time.
Note:
The Switch 8800 supports master board and slave board. The two boards both have file system. User can operate the file on the two boards. In the case user designate the
APP adopted on slave board next time, the file directory or URL should be started with
“slot[No.]#flash:”, the [No.] is the slave board number. For example, suppose slot 1 is slave board, “text.txt” file URL on slave board should be “slot1#flash:/text.txt”.
Example
Specify the APP application used for boot of next time.
<SW8800> boot boot-loader PLATV100R002B09D002.APP
The specifed file will be booted next time!
37.1.2 boot bootrom
Syntax
boot bootrom file-url slot slot-num-list
37-1
3Com Switch 8800 Command Reference Guide
View
User view
Chapter 37 Device Management Commands
Parameter
file-url: Path and name of Bootrom file.
slot slot-num-list: Specifies the slot number list of switch. The formula is
slot-num-list={ slot-num [ to slot-num ] }&<1-n>. &<1-n> indicates that the prior parameter can be input for n times. For the 7-slot chassis, n is 7; for the 14-slot chassis, n is 14.
Description
Use the boot bootrom command to upgrade bootrom.
Note:
The Switch 8800 supports master board and slave board. The two boards both have file system. User can operate the file on the two boards. In the case user upgrade the
BootROM adopted on slave board, the file directory or URL should be started with
“slot[No.]#flash:”, the [No.] is the slave board number. For example, suppose slot 1 is slave board, “text.txt” file URL on slave board should be “slot1#flash:/text.txt”.
When you are upgrading the BootROM on a slave board, the boot code file must be present in the local flash.
Example
Upgrade bootrom of No.1slot.
<SW8800> boot bootrom PLATV100R002B09D002.btm slot 1
37.1.3 display boot-loader
Syntax display boot-loader
View
Any view
Parameter
None
37-2
3Com Switch 8800 Command Reference Guide
Description
Chapter 37 Device Management Commands
Use the display boot-loader command to view APP file used this time and next time.
Example
<SW8800> display boot-loader
The app to boot at the next time is: PLATV100R002B09D002.APP
The app to boot of board 0 at this time is: flash:/PLAT.APP
Table 37-1 Description on the display boot-loader command
Field Description
The app to boot of board 0 at the next time is: flash:/Switch.app
Startup file used on startup next time
The app to boot of board 0 at this time is: flash:/PLAT.APP
Startup file used on startup this time
37.1.4 display cpu
Syntax
display cpu [slot slot-no ]
View
Any view
Parameter
slot slot-no: Specifies the board number.
Description
Use the display cpu command to display CPU occupancy.
Example
Display CPU occupancy on slot 0.
<SW8800> display cpu slot 0
Board 0 CPU busy status:
6% in last 5 seconds
7% in last 1 minute
12% in last 5 minutes
37-3
3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands
Table 37-2 Description on display information
Field Description
Board 0 CPU busy status: CPU usage of switch
6% in last 5 seconds
7% in last 1 minute
12% in last 5 minutes
CPU usage in last 5 seconds is 6%.
CPU usage in last 1 minute is 7%.
CPU usage in last 5 minutes is 12%.
37.1.5 display device
Syntax
display device [ detail | [ shelf shelf-no ] [ frame frame-no ] [ slot slot-no ] ]
View
Any view
Parameter
detail: displays all slot detail information.
shelf-no: Shelf number.
frame-no: Frame number.
slot-no: Slot number.
Description
Use the display device command to display the module type and working status information of a card, including physical card number, physical daughter card number, number of ports, hardware version number, FPGA version number, version number of
BOOTROM software, application version number, address learning mode, interface card type and interface card type description, and so on.
Example
Show device information.
<SW8800> display device
Slot No. Brd Type Brd Status Subslot Num Sft Ver
0 LSB1SRPB Master 0 8800-0004
1 NONE Absent Absent None
2 NONE Absent Absent None
3 NONE Absent Absent None
4 NONE Absent Absent None
5 NONE Absent Absent None
6 NONE Absent Absent None
37-4
3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands
7 NONE Absent Absent None
The following table describes the displaying information.
Table 37-3 Description on the fields of the display device command
Field
Slot No
Brd Type
Brd Status
Subslot Num
Sft Ver
Description
Physical card number
Type of board
Status of board
Subslot number
Software version number
37.1.6 display environment
Syntax display environment
View
Any view
Parameter
None
Description
Use the display environment command to view environment information.
Example
Display the environment information.
<SW8800> display environment
System temperature information (degree centigrade):
----------------------------------------------------
Board Temperature Lower limit Upper limit
0 33 10 45
2 35 10 65
4 34 10 65
37-5
3Com Switch 8800 Command Reference Guide
37.1.7 display fan
Chapter 37 Device Management Commands
Syntax
display fan [ fan-id ]
View
Any view
Parameter
fan-id: the fan ID.
Description
Use the display fan command to view the working state of the built-in fans. User can perform this command to see if they work normally.
Example
Display the working state of the fans.
<SW8800> display fan
Fan 1 State: Normal
The above information indicates that all of the four fans work normally.
37.1.8 display memory
Syntax
display memory [ slot slot-no ]
View
Any view
Parameter
slot-no: Specifies slot number
Description
Use the display memory command to display memory situation.
Example
Display memory situation.
<SW8800> display memory slot 0
System Total Memory(bytes): 197932416
Total Used Memory(bytes): 65234704
Used Rate: 32%
37-6
3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands
Table 37-4 Description on the fields of the display memory command
Field
System Total Memory(bytes)
Total Used Memory(bytes)
Used Rate
Description
The Total Memory of switch, unit in byte
The Total used Memory of switch, unit in byte
The memory used rate
37.1.9 display power
Syntax
display power [ power-ID ]
View
Any view
Parameter
power-ID: Power ID.
Description
Use the display power command to view the working state of the built-in power supply.
Example
Show power state.
<SW8800> display power
Power 1 State: Absent
Power 2 State: Normal
Power 3 State: Absent
37.1.10 display schedule reboot
Syntax
display schedule reboot
View
Any view
Parameter
None
37-7
3Com Switch 8800 Command Reference Guide
Description
Chapter 37 Device Management Commands
Use the display schedule reboot command to check the configuration of related parameters of the switch schedule reboot terminal service.
Related command: reboot, schedule reboot at.
Example
Display the configuration of the schedule reboot terminal service parameters of the current switch.
<SW8800> display schedule reboot
System will reboot at 16:00:00 2004/11/1 (in 2 hours and 5 minutes).
37.1.11 reboot slot
Syntax
reboot [ slot slot-no ]
View
User view
Parameter
slot-num: Specifies the physical card number.
Description
Use the reboot command to reboot to restart the Ethernet switch or the specified card.
Example
Reset the card in Slot 1.
<SW8800> reboot
37.1.12 schedule reboot at
Syntax
schedule reboot at hh:mm [ yyyy/mm/dd ]
undo schedule reboot
View
User view
Parameter
hh:mm: Reboot time of the switch, in the format of "hour: minute" The hh ranges from 0 to 23, and the mm ranges from 0 to 59.
37-8
3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands
yyyy/mm/dd: Reboot date of the switch, in the format of "year/month/day. The yyyy ranges from 2000 to 2099, the mm ranges from 1 to 12, and the value of dd is related to the specific month.
Description
Use the schedule reboot at command to enable the timing reboot function of the switch and set the specific reboot time and date.
Use the undo schedule reboot command to disable the timing reboot function.
By default, the timing reboot switch function is disabled.
Note:
The precision of switch timer is 1 minute. The switch will reboot in one minute when time comes to the specified rebooting point.
If the schedule reboot at command sets specified date parameters, which represents a data in the future, the switch will be restarted in specified time, with error not more than 1 minute.
If no specified date parameters are configured, two cases are involved: If the configured time is after the current time, the switch will be restarted at the time point of that day; if the configured time is before the current time, the switch will be restarted at the time point of the next day.
It should be noted that the configured date should not exceed the current date more than 30 days. In addition, after the command is configured, the system will prompt you to input confirmation information. Only after the "Y" or the "y" is entered can the configuration be valid. If there is related configuration before, it will be covered directly.
Moreover, after the schedule reboot at command is configured and the system time is adjusted by the clock command, the former configured schedule reboot at parameter will go invalid.
Related command: reboot, display schedule reboot.
Example
Set the switch to be restarted at 22:00 that night (the current time is 15:50).
<SW8800> schedule reboot at 22:00
Reboot system at 22:00:00 UTC 2003/11/18 (in 6 hours and 10 minutes) confirm?[Y/N]:y aux0: schedule reboot parameters at 15:50:00 UTC 2003/11/18. And system will reboot at 22:00:00 UTC 2003/11/18
Proceed with reboot? [Y/N]:y
37-9
3Com Switch 8800 Command Reference Guide
37.1.13 schedule reboot delay
Chapter 37 Device Management Commands
Syntax
schedule reboot delay { hhh:mm | mmm }
undo schedule reboot
View
User view
Parameter
hhh:mm: Waiting time for rebooting a switch, in the format of "hour: minute" The hhh ranges from 0 to 720, and the mm ranges from 0 to 59.
mmm: Waiting delay for rebooting a switch, in the format of "absolute minutes" .
Ranging from 0 to 43200,
Description
Use the schedule reboot delay command to enable the timing reboot switch function and set the waiting time.
Use the undo schedule reboot command to disable the timing reboot function.
By default, the timing reboot switch function is disabled.
Note:
The precision of switch timer is 1 minute. The switch will reboot in one minute when time comes to the specified rebooting point.
Two formats can be used to set the waiting delay of timing reboot switch, namely the format of "hour: minute" and the format of "absolute minutes". But the total minutes should be no more than 30×24×60 minutes, or 30 days.
After this command is configured, the system will prompt you to input confirmation information. Only after the "Y" or the "y" is entered can the configuration be valid. If there is related configuration before, it will be covered directly.
Moreover, after the schedule reboot at command is configured, and the system time is adjusted by the clock command, the original schedule reboot at parameter will become invalid.
Related command: reboot, schedule reboot at, undo schedule reboot, display
schedule reboot.
37-10
3Com Switch 8800 Command Reference Guide
Example
Chapter 37 Device Management Commands
Configure the switch to be restarted after 88 minutes (the current time is 21:32).
<SW8800> schedule reboot delay 88
Reboot system for 23:00:00 UTC 2002/11/1 (in 1 hours and 28 minutes)
Confirm? [Y/N]:y
37.1.14 temperature-limit
Syntax
temperature-limit slot down-value up-value
undo temperature-limit slot
View
User view
Parameter
Description
Use the temperature-limit command to configure temperature limit.
Use the undo temperature-limit command to restore temperature limit to default value.
Example
slot: Physical card number.
down-value: Lower temperature limit, in the range 0 to 70 °C.
up-value: Upper temperature limit, in the range 20 to 90 °C.
Set the lower and upper temperature limit of card 0.
<SW8800> temperature-limit 0 10 75
37.1.15 update l3plus
Syntax
update l3plus slot slot-no filename file-name ftpserver server-name username
user-name password password [ port port-num ]
View
System view
Parameter
slot-no: Slot for the service processing board to be updated.
37-11
3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands
file-name: Name of upgrading file to be downloaded. The file suffix is .app.
server-name: IP address or host name of FTP Server where the file to be updated locates.
user-name: User name for file transfer protocol (FTP) login.
password: User password for FTP login.
port-num: FTP port number, in the range 0 to 65,535. By default, it is 21.
Description
Use the update l3plus command to update service processing boards. After the command is executed, the system logs into an FTP Server with the host name, user name and user password provided. The system downloads the host software containing load program of service processing board to the system’s synchronous dynamic random access memory (SDRAM), and uses the file to enable service processing boards.
Example
Update the service processing board in slot 2. The file to be downloaded is place in the host with the IP address 192.168.1.100, and its name is L3PLUS.app. The user name and password for FTP login are 3Com and 123456 respectively.
[SW8800] update l3plus slot 2 filename L3PLUS.app ftpserver 192.168.1.100 username 3Com password 123456
37-12
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
Chapter 38 System Maintenance Commands
38.1 Basic System Configuration and Management
Commands
38.1.1 clock datetime
Syntax
clock datetime HH:MM:SS YYYY/MM/DD
View
User view
Parameter
HH:MM:SS: Current clock. HH ranges from 0 to 23. MM and SS range from 0 to 59.
YYYY/MM/DD: Specifies the current year, month and date. YYYY ranges from 2000 to
2100. MM ranges from 1 to 12 and DD ranges from 1 to 31.
Description
Use the clock datetime command to configure the current date and clock of Ethernet
Switch.
By default, the date and clock of Ethernet Switch is set as 0:0:0, 2000/1/1.
The current date and clock of Ethernet Switch must be set in the circumstance that absolute time is strictly required.
Related command: display clock.
Example
Set the current date of Ethernet Switch to 0:0:0, 2001/01/1.
<SW8800> clock datetime 0:0:0 2001/01/01
38.1.2 clock summer-time
Syntax
clock summer-time zone_name { one-off | repeating } start-time start-date end-time
end-date offset-time
undo clock summer-time
38-1
3Com Switch 8800 Command Reference Guide
View
User view
Chapter 38 System Maintenance Commands
Parameter
Description
Use the clock summer-time command to set the name, starting and ending time of the summer time.
Use the undo clock summer-time command to remove the configuration of the summer time.
After the configuration takes effect, the display clock command can be used to check it. Besides, the time of the log or debug information uses the local time after the adjustment of the time zone and summer time.
Related command: clock timezone.
Example
zone_name: Name of the summer time, which is a character with the length ranging 1 to 32.
one-off: Only set the summer time of a certain year.
repeating: Set the summer time of every year starting from a certain year.
start-time: Set start time of the summer time, input like HH:MM:SS
(hour/minute/second).
start-date: Set start date of the summer time, input like YYYY/MM/DD
(year/month/day).
end-time: Set end time of the summer time, input like HH:MM:SS
(hour/minute/second).
end-date: Set end date of the summer time, input like YYYY/MM/DD (year/month/day).
offset-time: Set offset time of the summer time, input like HH:MM:SS
(hour/minute/second).
Set the summer time for z2 that starts at 06:00:00 on 08/06/2002 and ends at 06:00:00 on 01/09/2002 with the time adding 1 hour.
<SW8800> clock summer-time z2 one-off 06:00:00 2002/06/08 06:00:00 2002/09/01
01:00:00
Set the summer time for z2 that starts at 06:00:00 on 08/06 and ends at 06:00:00 on
01/09 in each year from 2002 on with the time adding 1 hour.
<SW8800> clock summer-time z2 repeating 06:00:00 2002/06/08 06:00:00
2002/09/01 01:00:00
38-2
3Com Switch 8800 Command Reference Guide
38.1.3 clock timezone
Chapter 38 System Maintenance Commands
Syntax
clock timezone zone-name { add | minus } HH:MM:SS
undo clock timezone
View
User view
Parameter
zone-name: Name of the time zone, which is a character with the length ranging 1 to
32.
add:Tme is adding compared with the UTC.
minus: Time is minus compared with the UTC.
HH:MM:SS: Time (hour/minute/second).
Description
Use the clock timezone command to set the information of the local time zone.
Use the undo clock timezone command to restore to the default Universal Time
Coordinated (UTC) time zone.
After the configuration takes effect, the display clock command can be used to check it. Besides, the time of the log or debug information uses the local time after the adjustment of the time zone and summer time.
Related command: clock summer-time.
Example
Set the name of the local time zone as Z5 with the time adding 5 hours compared with the UTC.
<SW8800> clock timezone z5 add 05:00:00
38.1.4 ping-distribute enable
Syntax ping-distribute enable undo ping-distribute
View
System view
38-3
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 38 System Maintenance Commands
Description
Use the ping-distribute enable command to enable the ping distribution function.
Use the undo ping-distribute enable command to disable the ping distribution function.
By default, the ping distribution function is enabled.
Example
Enable the ping distribution function.
[SW8800] ping-distribute enable
38.1.5 sysname
Syntax
sysname sysname
undo sysname
View
System view
Parameter
Description
Use the sysname command to configure the hostname of Ethernet Switch.
By default, the hostname of Ethernet Switch is SW8800.
Changing the hostname name of Ethernet Switch will affect the prompt of command line interface. E.g. the host name of Ethernet Switch is SW8800, and the prompt in user view is <SW8800>.
Example
sysname: Specifies the hostname with a character string with the length ranging from1 to 30 characters. The name of the Ethernet switch defaults to SW8800.
Set the hostname of the Ethernet Switch as SW8800LANSwitch.
[SW8800] sysname SW8800LANSwitch
[SW8800LANSwitch]
38-4
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
38.2 System Status and System Information Display
Commands
38.2.1 display clock
Syntax display clock
View
Any view
Parameter
None
Description
Use the display clock command to obtain information about system data and time from the terminal display. You can adjust the system time if it is wrong.
The maximum date and time the system can display is 23:59:59 9999/12/31.
Related command: clock datetime
Example
View the current system date and clock.
<SW8800> display clock
18:36:31 Marlboro Sat 2002/02/02
Time Zone : Marlboro add 01:00:00
Summer-Time : bj one-off 01:00:00 2003/01/01 01:00:00 2003/08/08 01:00:00
Table 38-1 Description on the fields of the display clock command
Field
18:36:31 Marlboro Sat 2002/02/02
Description
Current time of the system
Time Zone : Marlboro add 01:00:00
Information about the time zone configured by the user
Summer-Time : bj one-off 01:00:00
2003/01/01 01:00:00 2003/08/08
01:00:00 time configured by the user
38-5
3Com Switch 8800 Command Reference Guide
38.2.2 display debugging
Chapter 38 System Maintenance Commands
Syntax
display debugging [ interface { interface-name | interface-type interface-num } ]
[ module-name ]
View
Any view
Parameter
Description
Use the display debugging command to view the enabled debugging process.
Use the display debugging command to view the debuggings that are currently enabled. Show all the enabled debugging when there is no parameter.
Related command: debugging.
Example
interface-name: Specifies the Ethernet port name.
interface-type: Specifies the Ethernet port type.
interface-num: Specifies the Ethernet port number.
module-name: Specifies the module name.
Show all the enabled debugging.
<SW8800> display debugging
IP packet debugging switch is on.
The above output shows that the IP packet debugging is enabled.
38.2.3 display fiber-module
Syntax
display fiber-module [ interface-type interface-number | interface-name ]
View
Parameter
Any view
interface-name: Interface name, in the format of interface-type + interface-num.
interface-type: Interface type, which can be Ethernet and GigabitEthernet.
interface-num: Interface number.
38-6
3Com Switch 8800 Command Reference Guide
Description
Chapter 38 System Maintenance Commands
Use the display fiber-module command to view the information about all optical modules seated in the current frame, including module information, module type, connector type, vendor name, model number, single mode or multimode, wavelength and transmission distance.
Use the display fiber-module [ interface-type interface-number | interface-name ] command to view information about the specific optical module.
Example
Display information about all optical modules seated in the current frame.
<SW8800>display fiber-module
Pos3/1/1:
Card info: 10G-XFP
Fiber connect: LC
VendorName: Intel Corp
PartNumber: TXN181072013X07
Mode: SingleMode
WaveLength: 1310nm
Length for 9um: 10km
Pos4/1/1:
Card info: 100BASE-SFP
Fiber connect: LC
VendorName: AGILENT
PartNumber: HFBR-5760LP
Mode: MultiMode
WaveLength: Unknown
Length for 50/125um: 0m
Length for 62.5/125um: 2000m
Warning: This Port Use Wrong Optical Module !
Pos4/1/2:
Card info: 1000BASE-SFP
Fiber connect: LC
VendorName: Hitachi Cable
PartNumber: HTR6511R
Mode: SingleMode
WaveLength: 1310nm
Length for 9um: 10km
Warning: This Port Use Wrong Optical Module !
38-7
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
Pos4/1/3:
Card info: 2.5G-SFP
Fiber connect: LC
VendorName: FIBERXON INC
PartNumber: FTM-3125C-L2
Mode: SingleMode
WaveLength: 1310nm
Length for 9um: 2km
Pos4/1/4:
Card info: 1000BASE-SFP
Fiber connect: LC
VendorName: AGILENT
PartNumber: HFBR-5710L
Mode: MultiMode
WaveLength: 850nm
Length for 50/125um: 550m
Length for 62.5/125um: 270m
Warning: This Port Use Wrong Optical Module !
GigabitEthernet6/1/1:
Card info: 10G-XFP
Fiber connect: LC
VendorName: JDS Uniphase
PartNumber: 64P0215
Mode: SingleMode
WaveLength: 1310nm
Length for 9um: 10km
GigabitEthernet6/1/3:
Card info: 10G-XFP
Fiber connect: LC
VendorName: JDS Uniphase
PartNumber: 64P0215
Mode: SingleMode
WaveLength: 1310nm
Length for 9um: 10km
38-8
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
Table 38-2 Description on the fields of the display fiber-module command
Field
Card info
Fiber connect
Module information
Description
Connector type
Mode Single mode or multimode
WaveLength Wavelength
Length for X um: Y km/m
The transmission distance at the diameter of X um is
Y km/m.
Length for A / B um: Y km/m
The transmission distance at the inner diameter of A um and outer diameter of B um is Y km/m.
38.2.4 display users
Syntax
display users [ all ]
View
Any view
Parameter
all: display all users connected to the switch.
Description
Use the display users command to view information about users connected to the switch.
Example
Display the information about all the active users on the console.
<SW8800>display users
UI Delay Type Ipaddress Username
+ 0 CON 0 00:00:00
130 VTY 0 00:00:05 TEL 192.168.1.253 tb
Display the information about all the users on the console.
<SW8800>display users all
UI Delay Type Ipaddress Username
+ 0 CON 0 00:00:00
38-9
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
129 AUX 0
+ 130 VTY 0 00:00:16 TEL 192.168.1.253 tb
131 VTY 1
132 VTY 2
133 VTY 3
134 VTY 4
Table 38-3 Description on the fields of the display users command
+
UI
Field Description
Information about an active user
The first number is the absolute number of the UI (user interface), and the second number is the relative number of the UI.
Delay
Type
The time elapsed after the last user input, in the format of hh:mm:ss
User type, such as Telnet, SSH, PAD
Ipaddress Initial connection location, that is, the IP address of the incoming host
Username
Name of the user who uses this UI, that is, the login username of this user. If the current terminal line is in anonymous login mode (AAA authentication is enabled on it), this field is null.
38.2.5 display version
Syntax display version
View
Any view
Parameter
None
Description
Use the display version command to view such information as software version, issue date and the basic hardware configurations.
Example
Display the information about the system version.
<SW8800> display version
Copyright Notice:
All rights reserved (Apr 9 2005).
Without the owner's prior written consent, no decompiling
38-10
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands nor reverse-engineering shall be allowed.
Copyright (c) 2003-2005 3Com Corporation All rights reserved.
Switch uptime is 0 week, 5 days, 6 hours, 20 minutes
FABRICA 0: uptime is 0 weeks,5 days,6 hours,20 minutes
Switch 8800 with 1 MPC755 Processor
512M bytes SDRAM
16384K bytes Flash Memory
512K bytes NVRAM Memory
PCB Version : Ver.B
BootROM Version : 112
CPLD Version : 003
Software Version : S8800-VRP310-r1211
LSB1F32GC 3: uptime is 0 weeks,4 days,20 hours,9 minutes
SW8800 I/O module with 1 MPC8245 Processor
128M bytes SDRAM
0K bytes NVRAM Memory
PCB Version : REV.0
BootROM Version : 103
CPLD Version : 002
Software Version : S8800-VRP310-r1211
SubCard 1
PCB Ver : Ver.B
CPLD Ver : NONE
SubCard 2
PCB Ver : REV.0
CPLD Ver : NONE
38.3 System Debug Commands
38.3.1 debugging
Syntax
debugging { all [ timeout interval ] | module-name [ debugging-option ] }
undo debugging { all | module-name [ debugging-option ] }
View
Parameter
User view
all: Enables or disables all the debugging.
38-11
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
timeout interval: Specifies the interval during which the debugging all switch is on.
The value ranges from 1 to 1440, in minutes. With this configuration, all debugging take the time at which they are enabled as the start time, and take effect during the predefined time. And after that, all debuggings are disabled.
module-name: Specifies the module name.
debugging-option: Debugging option.
Description
Use the debugging command to enable the system debugging.
Use the undo debugging command to disable the system debugging.
By default, all the debugging processes are disabled.
Ethernet Switch provides various kinds of debugging functions for technical support personnel and experienced maintenance staff to troubleshoot the network.
Enabling the debugging will generate a large amount of debugging information and decrease the system efficiency. Specially, network system may collapse after all the debugging is enabled by debugging all command. So it is not suggested to use the
debugging all command. It is convenient for the user to disable all the debugging with
undo debugging all command.
Related command: display debugging.
Example
Enable IP Packet debugging.
<SW8800> debugging ip packet
IP packet debugging switch is on.
The above output shows that the IP packet debugging is enabled.
38.3.2 display diagnostic-information
Syntax display diagnostic-information
View
Any view
Parameter
None
38-12
3Com Switch 8800 Command Reference Guide
Description
Chapter 38 System Maintenance Commands
Use the display diagnostic-information command to view the current configuration information about all running modules. You can use all these information to help diagnose and troubleshoot the Ethernet switch.
When the Ethernet switch does not run well, you can collect all sorts of information about the switch to locate the source of fault. However, each module has its corresponding display command, which make it difficult for you to collect all the information needed. In this case, you can use display diagnostic-information command.
Example
Display all system configuration information
<SW8800> display diagnostic-information
This operation may take a few minutes, continue?[Y/N]y
---------------display clock---------------
20:12:39 UTC Mon 2000/5/8
---------------display version---------------
VRP(R) Software, Version COMWAREHZV300R001B07D011, Release 0001
VRP(tm) Lanswitch Platform Software Version COMWAREHZV300R001B07D011
S8800 Software Version V100R002B01D010SP03
………
38.4 Network Connection Test Commands
38.4.1 ping
Syntax
ping [ ip ] [ -a ip-address | -c count | -d | -h ttl | -i { interface-type interface-num |
interface-name } | -n | - p pattern | -q | -r | -s packetsize | -t timeout | -tos tos | -v |
-vpn-instance vpn-instance-name ]* host
View
Any view
Parameter
-a ip-address: Specifies the source IP address to transmit ICMP ECHO-REQUEST.
-c: count Specifies how many times the ICMP ECHO-REQUEST packet will be transmitted, ranging from 1 to 4,294,967,295. The default value is five.
-d: Configures the socket to be in DEBUGGING mode.
-h ttl: Configures TTL value for echo requests to be sent, range from 1 to 255. The default value is 255.
38-13
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
-i: Configures to choose packet sent on the interface.
interface-type: Specifies the interface type.
interface-num: Specifies the interface number.
interface-name: Specifies the interface name.
-n: Configures to take the host parameter as IP address without domain name resolution.
-p: pattern is the hexadecimal padding of ICMP echo-request, for example -p ff pads the packet completely with ff.By default, the starting padding is 0x01, crescent, and the ending padding is 0x09, and then repeat.
-q: Configures not to display any other detailed information except statistics.
-r: Record route. By default, the system does not record route.
-s packetsize: Specifies the length of ECHO-REQUEST (excluding IP and ICMP packet header) in bytes. The length of the echo-request packet defaults to 56 bytes.
-t timeout: Maximum waiting time after sending the echo-request (measured in ms).
The time defaults to 2000 ms.
-tos tos: Specifies TOS value for echo requests to be sent, range from 0 to 255. The default value is 0.
-v: Displays other received ICMP packets (non echo-response). By default, no other non echo-response ICMP packets is displayed.
-vpn-instance vpn-instance-nam:VPN instance name.
host: Destination host domain name or IP address of the destination host.
ip: Chooses IP ICMP packet.
Description
Use the ping command to check the IP network connection and the reachability of the host.
The ping command sends ICMP ECHO-REQUEST message to the destination. If the network to the destination works well, then the destination host will send ICMP
ECHO-REPLY to the source host after receiving ICMP ECHO-REQUEST.
Perform ping command to troubleshoot the network connection and line quality. The output information includes: z z
Responses to each of the ECHO-REQUEST messages. If the response message is not received until timeout, output "Request time out". Or display response message bytes, packet sequence number, TTL and response time.
The final statistics, including number of sent packets, number of response packets received, percentage of non-response packets and minimal/maximum/average value of response time.
38-14
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
If the network transmission rate is too low, you can increase the response message timeout.
Related command: tracert.
Example
Check whether the host 202.38.160.244 is reachable.
<SW8800> ping 202.38.160.244 ping 202.38.160.244 : 56 data bytes
Reply from 202.38.160.244 : bytes=56 sequence=1 ttl=255 time = 1ms
Reply from 202.38.160.244 : bytes=56 sequence=2 ttl=255 time = 2ms
Reply from 202.38.160.244 : bytes=56 sequence=3 ttl=255 time = 1ms
Reply from 202.38.160.244 : bytes=56 sequence=4 ttl=255 time = 3ms
Reply from 202.38.160.244 : bytes=56 sequence=5 ttl=255 time = 2ms
--202.38.160.244 ping statistics--
5 packets transmitted
5 packets received
0% packet loss round-trip min/avg/max = 1/2/3 ms
38.4.2 tracert
Syntax
tracert [ -a source-IP | -f first-TTL | -m max-TTL | -p port | -q num-packet |
-vpn-instance vpn-instance-name | -w timeout ] string
View
Parameter
Any view
-a source-IP: Configures the source IP address used by tracert command.
-f: Configures to verify the -f switch, first-TTL specifies an initial TTL, ranging from 0 to the maximum TTL.first-TTL defaults to 1.
-m: Configures to verify the -m switch, max-TTL specifies a maximum TTL larger than the initial TTL. max-TTL defaults to 30.
-p: Configures to verify the -p switch, port is an integer host port number. Generally, user need not modify this option. port defaults to 33434.
-q: Configures to verify the -q switch, nqueries is an integer specifying the number of query packets sent, larger than 0. num-packet defaults to 3.
-vpn-instance vpn-instance-name: VPN instance name.
-w: Configures to verify the -wf switch, timeout is an integer specifying IP packet timeout in seconds, larger than 0.timeout defaults to 5s.
38-15
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
string: IP address of the destination host or the hostname of the remote system.
Description
Use the command to Using tracert command, you can check the reachability of network connection and troubleshoot the network. User can test gateways passed by the packets transmitted from the host to the destination.
By default, when the parameters are not specified,
The tracert command sends a packet with TTL 1, and the first hop will send an ICMP error message back to indicate this packet cannot be transmitted (because of TTL timeout). Then this packet will be sent again with TTL 2, and the second hop will indicate a TTL timeout error. Perform this operation repeatedly till reaching the destination. These processes are operated to record the source address of each ICMP
TTL timeout so as to provide a path to the destination for an IP packet.
After ping command finds some error on the network, perform tracert to locate the error.
The output of tracert command includes IP address of all the gateways to the destination. If a certain gateway times out, output "***".
Example
Test the gateways passed by the packets to the destination host at 18.26.0.115.
<SW8800> tracert 18.26.0.115 tracert to allspice.lcs.mit.edu (18.26.0.115), 30 hops max
1 helios.ee.lbl.gov (128.3.112.1) 0 ms 0 ms 0 ms
2 lilac-dmc.Berkeley.EDU (128.32.216.1) 19 ms 19 ms 19 ms
3 lilac-dmc.Berkeley.EDU (128.32.216.1) 39 ms 19 ms 19 ms
4 ccngw-ner-cc.Berkeley.EDU (128.32.136.23) 19 ms 39 ms 39 ms
5 ccn-nerif22.Berkeley.EDU (128.32.168.22) 20 ms 39 ms 39 ms
6 128.32.197.4 (128.32.197.4) 59 ms 119 ms 39 ms
7 131.119.2.5 (131.119.2.5) 59 ms 59 ms 39 ms
8 129.140.70.13 (129.140.70.13) 80 ms 79 ms 99 ms
9 129.140.71.6 (129.140.71.6) 139 ms 139 ms 159 ms
10 129.140.81.7 (129.140.81.7) 199 ms 180 ms 300 ms
11 129.140.72.17 (129.140.72.17) 300 ms 239 ms 239 ms
12 * * *
13 128.121.54.72 (128.121.54.72) 259 ms 499 ms 279 ms
14 * * *
15 * * *
16 * * *
17 * * *
18 ALLSPICE.LCS.MIT.EDU (18.26.0.115) 339 ms 279 ms 279 ms
38-16
3Com Switch 8800 Command Reference Guide
38.5 Log Commands
38.5.1 display channel
Chapter 38 System Maintenance Commands
Syntax
display channel [ channel-number | channel-name ]
View
Any view
Parameter
channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.
channel-name: Specifies the channel name. the name can be channel7, channel8,
channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.
Description
Use the display channel command to view the details about the information channel.
Without parameter, display channel command shows the configurations of all the channels.
Example
Show details about the information channel 0.
<SW8800> display channel 0 channel number:0, channel name:console
MODU_ID NAME ENABLE LOG LEVEL ENABLE TRAP LEVEL ENABLE DEBUGGING LEVEL
38.5.2 display info-center
Syntax
display info-center
View
Any view
Parameter
None
Description
Use the display info-center command to view the configuration of system log and the information recorded in the memory buffer.
38-17
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
If the information in the current log/trap buffer is less than the size of buffer, display the actual log/trap information.
Related command: info-center enable,info-center loghost,info-center
logbuffer,info-center console channel,info-center monitor channel.
Example
Show the system log information.
<SW8800> display info-center
Information Center:enabled
Log host:
Console:
channel number:0, channel name:console
Monitor:
channel number:1, channel name:monitor
SNMP Agent:
channel number:5, channel name:snmpagent
Log buffer:
enabled, max buffer size:1024, current buffer size:256
current messages:6, channel number:4, channel name:logbuffer
dropped messages:0, overwrote messages:0
Trap buffer:
enabled, max buffer size:1024, current buffer size:256
current messages:0, channel number:3, channel name:trapbuffer
dropped messages:0, overwrote messages:0
Log file :
enabled,max file buffer size 32KB, current file buffer size 7KB,
channel number : 6, channel name : logfile
max log file number : 5, max length of each log file : 2MB
log file directory : cf:/logfile
Information timestamp setting:
log - date, trap - date, debug - boot
Table 38-4 Description on the fields of the display info-center command
Field
Information Center:
Log host:
Console:
Monitor:
Description
The status of the information center
The status of the log host, including its IP address, occupied channel number, channel name, language and the priority level of the log host.
The status of the console port, including the occupied channel name and channel number.
The status of the monitoring port, including the occupied channel number and channel name.
38-18
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
SNMP Agent:
Log buffer:
Trap buffer:
Log file
The status of the SNMP agent, including the occupied channel number and channel name.
The status of the log buffer, including enable status, maximum size, current size, number of current messages, channel name, channel number, number of dropped messages, number of the overwritten messages.
The status of the trap buffer, including enable status, maximum size, current size, number of current messages, channel name, channel number, number of dropped messages, number of the overwritten messages.
The status of the log file, including enable status, maximum file buffer size, channel number, channel name, maximum number of log files, maximum size of the log file, storage path of log files.
Information timestamp setting:
Information timestamp settings, including the timestamp type of log messages, trap messages and debugging messages.
38.5.3 display logbuffer
Syntax
display logbuffer [ summary ] [ level [ levelnum | emergencies | alerts | critical |
debugging | errors | informational | notifications | warnings ] ] [ | [ begin | exclude
| include text ] [ size sizenum ]
View
Any view
Parameter
level: level.
levelnum: Information level value, ranging from 1 to 8.
emergencies, alerts, critical, debugging, errors, informational, notifications,
warnings are the names of the eight log severity levels. You can type the values or
names of the desired severity levels, which are equivalent, in commands. Table 38-5
gives the details.
Table 38-5 Severity levels defined in the information center
Severity Value Description
alerts 2 Errors you must correct immediately critical 3 errors
38-19
3Com Switch 8800 Command Reference Guide errors warnings notifications informational
4
5
6
7
Chapter 38 System Maintenance Commands
Errors requiring your attention but not critical
Warning, an error may occur
Information requiring your attention
General prompt information
size: Configures the size of buffer.
sizenum: Size of buffer (number of messages which can be kept); ranging from 1 to
1024. By default, the size of the buffer is 512.
|: Filters the configuration information to be output by regular expression.
begin: Begins with the line that matches the regular expression.
exclude: Excludes lines that match the regular expression.
include: Includes lines that match the regular expression.
Text: Defines the regular expression.
Table 38-6 Special characters in the regular expression
Special characters
Description
_
(
Restriction
If the first character in the regular
Underscore, similar to a wildcard and can stand for these characters: expression is not a underscore, then there is no restriction on the number of the underscore (but it is restricted by the command length)
(^|$|[,(){} ])
A space, the beginning of the input string, the end of the input string
If the first character in the regular expression is an underscore, then there should be less than five consecutive underscores.
If the underscores in a command are discrete, on the first group of underscores are filtered for the output information, but not the subsequent underscores.
Left parenthesis, push flag in program
It is recommended not to use this character in the regular expression.
Description
Use the display logbuffer command to view the attribute of logbuffer and the information recorded in logbuffer.
Example
Show the system logbuffer attribute and the log information in logbuffer.
38-20
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
<SW8800> display logbuffer
Logging buffer configuration and contents:enabled
Allowed max buffer size : 1024
Actual buffer size : 512
Channel number : 4 , Channel name : logbuffer
Dropped messages : 0
Overwritten messages : 0
Current messages : 91
38.5.4 display logbuffer summary
Syntax
display logbuffer summary [ level severity ]
View
Parameter
Any view
level: Information level.
severity: Information level, do not output information below this level. Information at different levels is as the following table:
Table 38-7 Severity levels defined in the information center
Severity Value Description
emergencies 1 Emergent alerts 2 Errors you must correct immediately errors warnings notifications informational
6
7
4
5
Errors requiring your attention but not critical
Warning, an error may occur
Information requiring your attention
General prompt information
Description
Use the display logbuffer summary command to view the summary information recorded in logbuffer.
Related command: info-center enable,info-center loghost,info-center
logbuffer,info-center console channel,info-center monitor channel.
38-21
3Com Switch 8800 Command Reference Guide
Example
Chapter 38 System Maintenance Commands
Show the summary information recorded in logbuffer.
<SW8800> display logbuffer summary
EMERG ALERT CRIT ERROR WARN NOTIF INFO DEBUG
0 0 0 0 94 0 1 0
38.5.5 display trapbuffer
Syntax
display trapbuffer [ summary ] [ level [ levelnum | emergencies | alerts | critical |
debugging | errors | informational | notifications | warnings ] ] [size sizenum]
View
Parameter
Any view
size: Configures the size of buffer.
summary: Number of statistical logs.
sizenum: Size of buffer (number of messages which can be kept), ranging from 1 to
1024. By default, the size of the buffer is 512.
level: level.
levelnum: Information level value, ranging from 1 to 8.
emergencies, alerts, critical, debugging, errors, informational, notifications,
warnings are the names of the eight log severity levels. You can type the values or
names of the desired severity levels, which are equivalent, in commands. Table 38-5
gives the details.
Table 38-8 Severity levels defined in the information center
Severity Value Description
alerts errors warnings notifications informational
2
6
7
4
5
Errors you must correct immediately
Errors requiring your attention but not critical
Warning, an error may occur
Information requiring your attention
General prompt information
38-22
3Com Switch 8800 Command Reference Guide
Description
Chapter 38 System Maintenance Commands
Use the display trapbuffer command to view the attribute of trapbuffer and the information recorded in trapbuffer.
Example
Show the system trapbuffer attribute and the log information in trapbuffer.
<SW8800> display trapbuffer
Trapping Buffer Configuration and contents: enabled allowed max buffer size : 1024 actual buffer size : 256 channel number : 3 , channel name : trapbuffer dropped messages : 0 overwrote messages : 0 current messages : 6
#Dec 31 14:01:25 2004 SW8800 DEV/2/LOAD FINISHED:
Trap 1.3.6.1.4.1.2011.2.23.1.12.1.20: frameIndex is 0, slotIndex 0.4
#Dec 31 14:01:33 2004 SW8800 DEV/2/BOARD STATE CHANGE TO NORMAL:
Trap 1.3.6.1.4.1.2011.2.23.1.12.1.11: frameIndex is 0, slotIndex 0.2
#Dec 31 14:01:40 2004 SW8800 DEV/2/BOARD STATE CHANGE TO NORMAL:
Trap 1.3.6.1.4.1.2011.2.23.1.12.1.11: frameIndex is 0, slotIndex 0.
38.5.6 info-center channel name
Syntax
info-center channel channel-number name channel-name
undo info-center channel channel-number
View
Parameter
System view
channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels. channel-name: Specifies the channel name with a character string not exceeding 30 characters, excluding digit, "-", "/" or "\". .
38-23
3Com Switch 8800 Command Reference Guide
Description
Chapter 38 System Maintenance Commands
Use the info-center channel name command to rename a channel specified by the
channel-number as channel-name.
Use the undo info-center channel command to restore the channel name.
The system assigns a channel in each output direction by default. See the table below.
Table 38-9 Numbers and names of the channels for log output
Output direction
Console
Monitor
Info-center loghost
Trap buffer
Logging buffer
Channel number Default channel name
0 console
1 monitor
2 loghost
3 trapbuf
4 logbuf
Log file 6
Note that the channel name cannot be duplicated.
Logfile
Example
Rename the channel 0 as execconsole.
[SW8800] info-center channel 0 name execconsole
38.5.7 info-center console channel
Syntax
info-center console channel { channel-number | channel-name }
undo info-center console channel
View
Parameter
System view
channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.
channel-name: Specifies the channel name. The name can be channel7, channel8,
channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.
38-24
3Com Switch 8800 Command Reference Guide
Description
Chapter 38 System Maintenance Commands
Use the info-center console channel command to configure the channel through which the log information is output to the console.
By default, Ethernet switches do not output log information to the console.
This command takes effect only after system logging is started.
Related command: info-center enable, display info-center.
Example
Configure to output log information to the console through channel 0.
[SW8800] info-center console channel 0
38.5.8 info-center enable
Syntax
info-center enable
undo info-center enable
View
System view
Parameter
None
Description
Use the info-center enable command to enable the system log function.
Use the undo info-center enable command to disable system log function.
By default, system log function is enabled.
Only after the system log function is enabled can the system output the log information to the info-center loghost and console, and so on.
Related command: info-center loghost, info-center logbuffer, info-center console
channel, info-center monitor channel, display info-center.
Example
Enable the system log function.
[SW8800] info-center enable
38-25
3Com Switch 8800 Command Reference Guide
38.5.9 info-center logbuffer
Chapter 38 System Maintenance Commands
Syntax
info-center logbuffer [ channel { channel-number | channel-name } | size buffersize ]*
undo info-center logbuffer [ channel | size ]
View
System view
Parameter
Description
Use the info-center logbuffer command to configure to output information to the memory buffer.
Use the undo info-center logbuffer command to cancel the information output to buffer.
By default, the switch outputs information to the memory buffer whose size is 512.
This command takes effect only after the system logging is enabled.
Related command: info-center enable, display info-center.
Example
channel: Configures the channel to output information to buffer.
channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.
channel-name: Specifies the channel name. The name can be channel7, channel8,
channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.
size: Configures the size of buffer.
buffersize: Size of buffer (number of messages which can be kept).
Send log information to buffer and sets the size of buffer as 50.
[SW8800] info-center logbuffer size 50
38.5.10 info-center logfile
Syntax
info-center logfile
undo info-center logfile
View
System view
38-26
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 38 System Maintenance Commands
Description
Use the info-center logfile command to configure to output information to the logfile.
Use the undo info-center logfile command to cancel the information output to logfile.
This command takes effect only after the system logging is enabled.
Related command: info-center enable, display info-center.
Example
Send log information to logfile.
[SW8800] info-center logfile
38.5.11 info-center loghost
Syntax
info-center loghost host-ip-addr [ channel { channel-number | channel-name } |
facility local-number | language { chinese | english } ]*
undo info-center loghost host-ip-addr
View
System view
Parameter
host-ip-addr: IP address of info-center loghost.
channel: Configures information channel of the info-center loghost.
channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.
channel-name: Specifies the channel name. The name can be channel7, channel8,
channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.
facility: Configures the recording tool of info-center loghost.
local-number: Record tool of info-center loghost, ranging from local0 to local7.
language: Sets the logging language.
chinese,english: Language used in log file.
Description
Use the info-center loghost command to configurethe system to output information to the log host.
Use the undo info-center loghost command to cancel output to info-center loghost.
38-27
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
By default, Ethernet switches do not output information to info-center loghost.
This command takes effect only after the system logging is enabled.
Note:
You must input the correct IP address when configuring the IP address for the log host by using the info-center loghost command. If you input a loopback address, you are prompted for invalid address.
Related command: info-center enable, display info-center.
Example
Configure to send log information to the UNIX workstation at 202.38.160.1.
[SW8800] info-center loghost 202.38.160.1
38.5.12 info-center loghost source
Syntax
info-center loghost source{ interface-name | interface-type interface-number }
undo info-center loghost source
View
System view
Parameter
{ interface-name | interface-type interface-number }:Layer 3 interface on the switch.
Description
Use the command to Using info-center loghost source command, you can set source address of the packets sent to loghost as the address of the interface specified by the
interface-name.
Use the command to Using undo info-center loghost source command, you can cancel the setting source address of the packets sent to loghost.
Related command: info-center enable, display info-center.
Example
Set source address of the packets sent to loghost as the address of the VLAN interface
1.
[SW8800] info-center loghost source vlan-interface 1
38-28
3Com Switch 8800 Command Reference Guide
38.5.13 info-center monitor channel
Chapter 38 System Maintenance Commands
Syntax
info-center monitor channel { channel-number | channel-name }
undo info-center monitor channel
View
System view
Parameter
channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.
channel-name: Specifies the channel name. The name can be channel7, channel8,
channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.
Description
Use the info-center monitor channel command to configure the channel to output the log information to the user terminal.
Use the undo info-center monitor channel command to restore the channel to output the log information to the user terminal to default value.
By default, Ethernet switches do not output log information to user terminal.
This command takes effect only after system logging is started.
Related command: info-center enable, display info-center.
Example
Configure channel 0 to output log information to user terminal.
[SW8800] info-center monitor channel 0
38.5.14 info-center snmp channel
Syntax
info-center snmp channel { channel-number | channel-name }
undo info-center snmp channel
View
System view
Parameter
channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels. By default, channel 5 is used.
38-29
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
channel-name: Specifies the channel name. The name can be channel7, channel8,
channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.
Description
Use the info-center snmp channel command to configure new channel for transmitting the SNMP information.
Use the undo info-center snmp channel command to restore the default channel for transmitting the SNMP information.
The default channel for transmitting the SNMP information is channel 5.
Related command: display snmp.
Example
Configure channel 6 as the SNMP information channel.
[SW8800] info-center snmp channel 6
38.5.15 info-center source
Syntax
info-center source { modu-name | default } channel { channel-number |
channel-name } [ debug { level severity | state state }* | log { level severity | state
state }* | trap { level severity | state state }* ]*
undo info-center source { modu-name | default | all } channel { channel-number |
channel-name }
View
Parameter
System view
modu-name: Module name.
Table 38-10 gives the details.
Table 38-10 The module name field
Module name Description
ACL
ADBM
ARP
BGP
CFM
ACL (access control list) module
MAC address management module
ARP (address resolution protocol) module
BGP (border gateway protocol) module
Configuration file management module
38-30
3Com Switch 8800 Command Reference Guide
Module name
default
DEV
DHCP
Chapter 38 System Maintenance Commands
Description
Default setting of all modules
Device management module
Dynamic host configuration protocol module
DNS
DRVMPLS
DRV_L2
DRV_L3
DRV_L3MC
MPLS
DRVQACL
DRVVPLS
FTPS
HA
IFNET
IGSP
IP
ISIS
L2INF
L2V
LACL
LDP
LQOS
LSPAGENT
LSPM
MIX
MMC
Domain name server module
MPLS (multiprotocol label switching) drive module
Layer 2 drive module
Layer 3 drive module
Layer 3 multicast module
MPLS (multiprotocol label switching) drive module
QACL drive module
VPLS (virtual private LAN service) drive module
FTP server module
High availability module
Interface management module
IGMP snooping module
IP (internet protocol) module
IS-IS (intermediate system-to-intermediate system intradomain routing protocol) module
L2 interface management module
L2 VPN module
LAN switch ACL module
LDP (label distribution protocol) module
LAN switch QoS module
LSP (label switched path) agent module
LSPM (label switch path management) module
Dual system management module
MMC module
38-31
3Com Switch 8800 Command Reference Guide
Module name
MPLSFW
MPM
MSDP
MSTP
NAT
NTP
OSPF
PHY
PPP
Chapter 38 System Maintenance Commands
Description
MPLS forward module
Multicast port management module
MSDP (multicast source discovery protocol) module
MSTP (multiple spanning tree protocol) module
NAT (network address translation) module
NTP (network time protocol) module
OSPF (open shortest path first) module
Physical sublayer & physical layer module
PPP (point to point protocol) module
RM
RMON
RSA
RTPRO
SHELL
SNMP
Routing management module
Remote monitor module
RSA (Revest, Shamir and Adleman) encryption module
Routing protocol module
User interface module
SNMP (simple network management protocol) module
SYSM System manage veneer module
VFS
VLAN
VRRP
VTY
default: All the modules.
log: Log information.
trap: Trap information.
VFS (virtual file system) module
VLAN (virtual local area network) module
VRRP (virtual router redundancy protocol) module
VTY (virtual type terminal) module
38-32
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
all: Clears all the information filtering configuration on the channelnum channel except the default one.
debugging: Debugging information.
level: Level.
severity: Information level, do not output information below this level.
Table 38-11 gives detailed severity information:
Table 38-11 Severity levels defined in the information center
Severity Value Description
alerts errors warnings notifications informational
2
6
7
4
5
Errors you must correct immediately
Errors requiring your attention but not critical
Warning, an error may occur
Information requiring your attention
General prompt information
By default, the information level of each channel is as follows:
Table 38-12 Default information level of each channel
channel
Log information level
Trap information level
Debugging information level
Console warning debugging debugging
Terminal warning debugging debugging
Log host informational debugging
Trapbuffer informational warning debugging debugging
Logbuffer warning debugging debugging
SNMPagent debugging warning debugging
Channel7 debugging debugging debugging
Channel8 debugging debugging debugging
Channel9 debugging debugging debugging
By default, the information switch state of each channel is shown in Table 38-13:
38-33
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
Table 38-13 Default information switch state of each channel
Channel
Log information switch
Trap information switch
Debug information switch
Console Enable Disable Enable
Terminal Enable Disable Enable
Trapbuffer Disable
Logbuffer Enable
Enable Disable
Disable Disable
SNMPagent Disable Enable Disable
Logfile Enable Disable Disable
Note:
If you only specify the level for one/two of the three types of information, the level(s) of the unspecified two/one return(s) to the default. For example, if you only define the level of the log information, then the levels of the trap and debugging information return to the defaults.
channel-number: Channel number to be set.
channel-name: Channel name to be set. The name can be channel7, channel8,
channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.
state: Sets the state of the information.
state: Specifies the state as on or off.
Description
Use the info-center source command to add/delete a record to the information channel.
Use the undo info-center source command to cancel the contents of the information channel.
Use this command to configure the information of log/trap/debugging type. For example, for the filter of IP module log output, you can configure to output the logs at a level higher than warnings to the log host and output those higher than informational to the log buffer. You can also configure to output the trap information on the IP module to a specified trap host, and so on.
38-34
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
The channels for filtering in all the directions are specified by this configuration command. All the information will be sent to the corresponding directions through the specified channels. You can configure the channels in the output direction, channel filter information, filtering and redirecting of all kinds of information.
At present, the system distributes an information channel in each output direction by default, shown as follows:
Table 38-14 Default information channel in each output direction
Console
Monitor
Output direction
Info-center loghost
Log buffer
Trap buffer
Information channel name console monitor loghost logbuffer trapbuffer snmp snmpagent
Log file logfile
In addition, each information channel has a default record with the module name
“default” and module number as 0xffff0000. However, for different information channel, the default log, trap and debugging settings in the records may be different with one another. Use default configuration record if a module does not have any specific configuration record in the channel.
Example
Configure to enable the log information of VLAN module in SNMP channel and allows the output of the information with a level higher than emergencies.
[SW8800] info-center source vlan channel snmp log level emergencies
38.5.16 info-center timestamp
Syntax
info-center timestamp { log | trap | debugging } { boot | date | none }
undo info-center timestamp { log | trap | debugging }
View
System view
Parameter
log: Log information.
38-35
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
trap: Trap information.
debugging: Debugging information.
boot: Time elapsing after system starts. Format: xxxxxx.yyyyyy, xxxxxx is the high 32 bits of the elapsed time (in milliseconds) after system starts, and yyyyyy is the low 32 bits.
date: Current system date and time. It shows as yyyy/mm/dd-hh:mm:ss in Chinese environment and mm dd hh:mm:ss yyyy in Western language environment.
none: No timestamp format.
Description
Use the info-center timestamp command to configure the timestamp output format in debugging/trap information.
Use the undo info-center timestamp command to disable the output of timestamp field.
By default, date stamp is used.
Example
Configure the debugging information timestamp format as boot.
[SW8800] info-center timestamp debugging boot
38.5.17 info-center trapbuffer
Syntax
info-center trapbuffer [ size buffersize | channel { channel-number |
channel-name } ]*
undo info-center trapbuffer [ channel | size ]
View
System view
Parameter
size: Configures the size of the trap buffer.
buffersize: Size of trap buffer (numbers of messages).
channel: Configures the channel to output information to trap buffer.
channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.
channel-name: Specifies the channel name.
38-36
3Com Switch 8800 Command Reference Guide
Description
Chapter 38 System Maintenance Commands
Use the info-center trapbuffer command to output information to the trap buffer.
Use the undo info-center trapbuffer command to cancel output information to trap buffer.
By default, output information is transmitted to trap buffer and size of trap buffer is 256.
This command takes effect only after the system logging is enabled.
The information can be output to the trap buffer by configuring the size of the buffer.
Related command: info-center enable, display info-center.
Example
Send information to the trap buffer and sets the size of buffer as 30.
[SW8800] info-center trapbuffer size 30
38.5.18 reset logbuffer
Syntax reset logbuffer
View
User view
Parameter
None
Description
Use the reset logbuffer command to reset information in log buffer.
Example
Clear information in log buffer.
<SW8800> reset logbuffer
38.5.19 reset trapbuffer
Syntax reset trapbuffer
View
User view
38-37
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 38 System Maintenance Commands
Description
Use the reset trapbuffer command to reset information in trap buffer.
Example
Clear information in trap buffer.
<SW8800> reset trapbuffer
38.5.20 terminal debugging
Syntax
terminal debugging
undo terminal debugging
View
User view
Parameter
None
Description
Use the terminal debugging command to configure to display the debugging information on the terminal.
Use the undo terminal debugging command to configure not to display the debugging information on the terminal.
By default, the displaying function is disabled.
Related command: debugging.
Example
Enable the terminal display debugging.
<SW8800> terminal debugging
38.5.21 terminal logging
Syntax
terminal logging
undo terminal logging
38-38
3Com Switch 8800 Command Reference Guide
View
User view
Chapter 38 System Maintenance Commands
Parameter
None
Description
Use the terminal logging command to enable terminal log information display.
Use the undo terminal logging command to disable terminal log information display.
By default, the log information display is enabled on the console and disabled on the terminal.
Example
Disable the terminal log display.
<SW8800> undo terminal logging
38.5.22 terminal monitor
Syntax
terminal monitor
undo terminal monitor
View
User view
Parameter
None
Description
Use the terminal monitor command to enable the log debugging/log/trap on the terminal monitor.
Use the undo terminal monitor command to disable these functions.
By default, enable these functions for the console user and disable them for the terminal user.
This command only takes effect on the current terminal where the commands are input.
The debugging/log/trap information can be output to the current terminal, beginning in user view. When the terminal monitor is shut down, no debugging/log/trap information will be displayed in local terminal, which is equals to having performed undo terminal
debugging, undo terminal logging, undo terminal trapping commands. When the terminal monitor is enabled, you can use terminal debugging / undo terminal
38-39
3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands
debugging, terminal logging / terminal logging and terminal trapping / undo
terminal trapping respectively to enable or disable the corresponding functions.
Example
Disable the terminal monitor.
<SW8800> undo terminal monitor
38.5.23 terminal trapping
Syntax
terminal trapping
undo terminal trapping
View
User view
Parameter
None
Description
Use the terminal trapping command to enable terminal trap information display.
Use the undo terminal trapping command to disable this function.
By default, this function is enabled.
Example
Enable trap information display.
<SW8800> terminal trapping
38-40
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
Chapter 39 SNMP Configuration Commands
39.1 SNMP Configuration Commands
39.1.1 display snmp-agent
Syntax
display snmp-agent { local-engineid | remote-engineid }
View
Any view
Parameter
local-engineid: Local engine ID.
remote-engineid: Remote engine ID.
Description
Use the display snmp-agent { local-engineid | remote-engineid } command to view engine ID of current device.
SNMP engine is the core of SNMP entity. It performs the function of sending, receiving and authenticating SNMP message, extracting PDU, packet encapsulation and the communication with SNMP application, and so on.
Example
Display the engine ID of current device.
<SW8800> display snmp-agent local-engineid
SNMP local engineID: 00000009020000000C025808
The above displayed information ”SNMP local engine ID” represents local SNMP engine ID.
39.1.2 display snmp-agent community
Syntax
display snmp-agent community [ read | write ]
View
Any view
Parameter
39-1
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
read: Displays read-only community information.
write: Displays read-write community information.
Description
Use the display snmp-agent community command to view the currently configured community names.
Example
Display the currently configured community names.
<SW8800> display snmp-agent community
Community name:public
Group name:public
Storage-type: nonVolatile
Community name:private
Group name:private
Storage-type: nonVolatile
Table 39-1 Description on the fields of the display snmp-agent community command community name
Field
Group name
Description
Community name
Group name
39.1.3 display snmp-agent group
Syntax
display snmp-agent group [ group-name ]
View
Any view
Parameter
groupname: Group name.
Description
Use the display snmp-agent group command to view group name, security mode, state of various views and storage modes.
39-2
3Com Switch 8800 Command Reference Guide
Example
Chapter 39 SNMP Configuration Commands
Display SNMP group name and safe mode.
<SW8800> display snmp-agent group
Group name: 3Com
Security model: v2c noAuthnoPriv
Readview: ViewDefault
Writeview: <no specified>
Notifyview :<no specified>
Storage-type: nonVolatile
The following table describes the output fields.
Table 39-2 Description on the fields of the display snmp-agent group command
Field Description
groupname SNMP Group name
Security model The security mode adopted by SNMP readview Read-only MIB view name corresponding to that group writeview notifyview
Writable MIB view corresponding to that group
The name of the notify MIB view corresponding to that group
39.1.4 display snmp-agent mib-view
Syntax
display snmp-agent mib-view [ exclude | include | { viewname mib-view } ]
View
Any view
Parameter
exclude: Displays the SNMP MIB view excluded.
Include: Displays the SNMP MIB view included.
viewname: Displays the SNMP MIB view according to the mib view name.
mib-view: Specifies the MIB view name.
Description
Use the display snmp-agent mib-view command to view the MIB view configuration information of the Ethernet switch.
39-3
3Com Switch 8800 Command Reference Guide
Example
Chapter 39 SNMP Configuration Commands
Display the information about the currently configured MIB view.
<SW8800> display snmp-agent mib-view
View name:ViewDefault
MIB Subtree:internet
Subtree mask:
Storage-type: nonVolatile
View Type:included
View status:active
View name:ViewDefault
MIB Subtree:snmpUsmMIB
Subtree mask:
Storage-type: nonVolatile
View Type:excluded
View status:active
View name:ViewDefault
MIB Subtree:snmpVacmMIB
Subtree mask:
Storage-type: nonVolatile
View Type:excluded
View status:active
The following table describes the output fields.
Table 39-3 Description on the fields of the display snmp-agent mib-view command
Field Description
View name View name
MIB Subtree
Subtree mask
MIB subtree
Subtree mask
View Type
View status
Permit or forbid access to an MIB object
Indicate the line state in the table
Caution:
If the SNMP Agent is disabled, "Snmp Agent disabled" will be displayed after you execute the above display commands.
39-4
3Com Switch 8800 Command Reference Guide
39.1.5 display snmp-agent statistics
Chapter 39 SNMP Configuration Commands
Syntax display snmp-agent statistics
View
Any view
Parameter
None
Description
Use the display snmp-agent statistics command to view current state of SNMP communication.
This command provides a counter for SNMP operations.
Example
Display the current state of SNMP communication.
<SW8800> display snmp-agent statistics
9 Messages delivered to the SNMP entity
0 Messages which were for an unsupported version
0 Messages which used a SNMP community name not known
0 Messages which represented an illegal operation for the community supplied
0 ASN.1 or BER errors in the process of decoding
9 Messages passed from the SNMP entity
0 SNMP PDUs which had badValue error-status
0 SNMP PDUs which had genErr error-status
0 SNMP PDUs which had noSuchName error-status
0 SNMP PDUs which had tooBig error-status (Maximum packet size 2000)
9 MIB objects retrieved successfully
0 MIB objects altered successfully
0 GetRequest-PDU accepted and processed
9 GetNextRequest-PDU accepted and processed
9 GetResponse-PDU accepted and processed
0 SetRequest-PDU accepted and processed
0 Trap PDUs accepted and processed
The following table describes the output fields.
39-5
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
Table 39-4 Description on the fields of the display snmp-agent statistics command
Field Description
0 Messages delivered to the SNMP entity
Total number of the input SNMP packets
0 Messages which were for an Number of packets with version unsupported version information error
0 Messages which used an unknown community name
Number of packets with community name error
0 Messages which represented an
Number of packets with authority error illegal operation for the community supplied corresponding to the community name
0 ASN.1 or BER errors in the process of decoding
Number of SNMP packets with encoding error
0 MIB objects retrieved successfully
0 MIB objects altered successfully
Number of variables requested by NMS
The number of variables set by NMS
0 Get-request PDUs accepted and Number of the received packets processed requested by get
0 Get-next PDUs accepted and Number of the received packets processed requested by get-next
0 Set-request PDUs accepted and Number of the received packets processed requested by set
3 Messages passed from the SNMP entity
Total number of the output SNMP packets
0 SNMP PDUs which had a tooBig error
(Maximum packet size 1500)
Number SNMP packet with too_big error
0 SNMP PDUs which had a Number of the packets requesting noSuchName error nonexistent MIB objects
0 SNMP PDUs which had a badValue error
Number of SNMP packets with
Bad_values error
0 SNMP PDUs which had a general error
Number of SNMP packets with
General_errors
0 Response PDUs accepted and
Number of the response packets sent processed
3 Trap PDUs accepted and processed Number of the sent Trap packets
39.1.6 display snmp-agent sys-info
Syntax
display snmp-agent sys-info [ contact | location | version ]*
39-6
3Com Switch 8800 Command Reference Guide
View
Any view
Parameter
None
Chapter 39 SNMP Configuration Commands
Description
Use the display snmp-agent sys-info command to view the character string sysContact (system contact), character string describing the system location and the version information about the running SMNMP in the system.
Example
Display the character string sysContact (system contact).
<SW8800> display snmp-agent sys-info contact
The contact person for this managed node:
R&D 3Com Corporation, Marlboro, Massachusetts
The above information represents that the contact person for this machine is R&D at
3Com Corporation in Marlboro, Massachusetts.
Display the character string describing the system location.
<SW8800> display snmp-agent sys-info location
The physical location of this node:
Marlboro, Massachusetts
The above information represents that the physical location of this machine is: Marlboro,
Massachusetts.
Display the version information of running SNMP
<SW8800> display snmp-agent sys-info version
SNMP version running in the system:
SNMPv3
The above information represents that the SNMP version running in the system is:
SNMPv3.
39.1.7 display snmp-agent usm-user
Syntax
display snmp-agent usm-user [ engineid engineid | group groupname | username
username ]*
View
Any view
39-7
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 39 SNMP Configuration Commands
engineid: Displays user information with specified engine ID.
username: Displays user information with specified user name.
groupname: Displays user information of specified group.
Description
Use the display snmp-agent usm-user command to view information of all the SNMP usernames in the group username list.
SNMP user is the remote user executing SNMP administrative operation. You can use the snmp-agent usm-user command to specify the SNMP user.
Example
Display the information of all the current users.
<SW8800> display snmp-agent usm-user
User name: NotifyV3
Group name: NotifyGroup
Authencation Mode: sha
Privacy Mode: des
Engine ID: 800007DB00E0FC2085026877 active
User name: publicV3
Group name: groupV3
Authencation Mode: no
Privacy Mode: no
Engine ID: 800007DB00E0FC2085026877 active
Acl:2000
The following table describes the output fields.
Table 39-5 Description on the fields of the display snmp-agent usm-user command
Field
User name
Description
Character string identifying the SNMP user
Group name Character string identifying the group the user belongs to
Authencation Mode Authentication code
Privacy Mode
Engine ID
Acl
Personal code
Character string identifying the SNMP device
Character string identifying the access control list
39-8
3Com Switch 8800 Command Reference Guide
39.1.8 enable snmp trap
Chapter 39 SNMP Configuration Commands
Syntax
enable snmp trap updown
undo enable snmp trap updown
View
Ethernet port view / VLAN interface view
Parameter
None
Description
Use the enable snmp trap updown command to enable current port or VLAN interface to transmit the LINK UP and LINK DOWN trap messages.
Use the undo enable snmp trap updown command to disable current port or VLAN interface to transmit the LINK UP and LINK DOWN trap messages.
The enable snmp trap command should be used in cooperation with the snmp-agent
trap enable and the snmp-agent target-host commands. The snmp-agent
target-host command is used to specify which hosts can receive the trap messages.
To enable the transmitting of trap messages, you must execute the snmp-agent
target-host command at least once.
Example
Enable current port Ethernet6/1/1 to transmit the LINK UP and LINK DOWN trap information with the community name public
[SW8800-Ethernet6/1/1] snmp trap updown enable
[SW8800] snmp-agent target-host trap address udp-domain 10.1.1.1 params securityname public
[SW8800] interface ethernet6/1/1
[SW8800-Ethernet6/1/1] enable snmp trap updown
39.1.9 snmp-agent community
Syntax
snmp-agent community { read | write } community-name [ [ mib-view view-name ]
[ acl acl-list ] ]
undo snmp-agent community community-name
View
System view
39-9
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 39 SNMP Configuration Commands
read: Indicates that MIB object can only be read.
write: Indicates that MIB object can be read and written.
community-name: Community name character string.
view-name: MIB view name.
acl acl-list: sets access control list for specified community.
Description
Use the snmp-agent community command to configure community access name and enable the access to SNMP.
Use the undo snmp-agent community command to cancel the settings of community access name.
Example
Configure community name as comaccess and permits read-only access by this community name.
[SW8800] snmp-agent community read comaccess
Configure community name as mgr and permits read-write access.
[SW8800] snmp-agent community write mgr
Delete the community name comaccess.
[SW8800] undo snmp-agent community comaccess
39.1.10 snmp-agent group
Syntax
snmp-agent group { v1 | v2c } group-name [ read-view read-view ] [ write-view
write-view ] [ notify-view notify-view ] [ acl acl-list ]
undo snmp-agent group { v1 | v2c } group-name
snmp-agent group v3 group-name [ authentication | privacy ] [ read-view
read-view ] [ write-view write-view ] [notify-view notify-view ] [ acl acl-list ]
undo snmp-agent group v3 group-name [ authentication | privacy ]
View
Parameter
System view
v1: V1 security mode.
v2c: V2C security mode.
39-10
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
v3: V3 security mode.
group-name: Group name, ranging from 1 to 32 bytes.
authentication: Configures to authenticate the packet without encryption.
privacy: Configures to authenticate and encrypt the packet.
read-view: Configures to allow read-only view settings.
read-view: Read-only view name, ranging from 1 to 32 bytes.
write-view: Configures to allow read-write view settings.
write-view: Name of read-write view, ranging from 1 to 32 bytes.
notify-view: Configures to allow notify view settings.
notify-view: Specifies the notify view name, ranging from 1 to 32 bytes.
acl Sets access control list for this group name.
acl-list: access control list
Description
Use the snmp-agent group command to configure a new SNMP group, that is, to map
SNMP user to SNMP view.
Use the undo snmp-agent group command to cancel a specified SNMP group.
By default, the SNMP group configured using the snmp-agent group v3 command is in none authentication mode.
Related command: snmp-agent mib-view and snmp-agent usm-user.
Example
Create an SNMP group named 3Com.
[SW8800] snmp-agent group v3 3Com.
39.1.11 snmp-agent local-engineid
Syntax
snmp-agent local-engineid engineid
undo snmp-agent local-engineid
View
System view
Parameter
engineid: Specifies the engine ID with a character string, only composed of hexadecimal numbers between 5 and 32 including.
39-11
3Com Switch 8800 Command Reference Guide
Description
Chapter 39 SNMP Configuration Commands
Use the snmp-agent local-engineid command to configure a name for a local or remote SNMP engine on the Ethernet Switch.
Use the command to Using undo snmp-agent local-engineid command, you can restore the default setting of engine ID.
By default, the engine ID is corporation number + device information. Device information is determined according to different products. It can be IP address, MAC address or user defined text. However, you must use numbers in hexadecimal form.
Example
Configure the ID of a local or remote device as 1234512345.
[SW8800] snmp-agent local-engineid 1234512345
39.1.12 snmp-agent mib-view
Syntax
snmp-agent mib-view { included | excluded } view-name oid-tree
undo snmp-agent mib-view view-name
View
System view
Parameter
Description
Use the snmp-agent mib-view command to create or update the view information.
Use the undo snmp-agent mib-view command to cancel the view information
By default, the view name is ViewDefault. OID is 1.3.6.1.
This command supports the parameter input of both OID and node name.
Related command: snmp-agent group.
Example
included: Includes this MIB subtree.
excluded: Excludes this MIB subtree.
view-name: Specifies the view name, with a character string, ranging from 1 to 32 characters.
oid-tree: MIB object subtree. It can be a character string of the variable OID, or a variable name, ranging from 1 to 255 characters.By default, OID is 1.3.6.1.
Create a view that consists of all the objects of MIB-II.
39-12
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
[SW8800] snmp-agent mib-view included mib2 1.3.6.1.2.1
39.1.13 snmp-agent packet max-size
Syntax
snmp-agent packet max-size byte-count
undo snmp-agent packet max-size
View
System view
Parameter
Description
Use the snmp-agent packet max-size command to configure the size of SNMP packet that the Agent can send/receive.
Use the undo snmp-agent packet max-size command to restore the default size of
SNMP packet.
The sizes of the SNMP packets received/sent by the Agent are different in different network environment.
Example
byte-count: Specifies the size of SNMP packet (measured in bytes), ranging from 484 to 17940. By default, the size is 2000 bytes.
Set the size of SNMP packet to 1042 bytes.
[SW8800] snmp-agent packet max-size 1042
39.1.14 snmp-agent sys-info
Syntax
snmp-agent sys-info { contact sysContact | location syslocation | version { { v1 |
v2c | v3 } * | all } }
undo snmp-agent sys-info { { contact | location }* | version { { v1 | v2c | v3 } * | all } }
View
System view
Parameter
contact:The contact information for system maintenance.
sysContact: Characters describe the contact information for system maintenance.
location: Sets the geographical location of the device.
39-13
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
sysLocation: Geographical location of the device.
version: version of running SNMP.
v1: SNMP V1.
v2c: SNMP V2C.
v3: SNMP V3.
*: Indicates that you can select more than one item from the three options v1, v2c, and
v3. Here, you must select at least one option, and you can select all the three options.
all: all SNMP version (includes SNMP V1, SNMP V2C, SNMP V3).
Description
Use the snmp-agent sys-info command to configure system information such as geographical location of the device, contact information for system maintenance and version information of running SNMP.
Use the undo snmp-agent sys-info location command to restore the default value.
Related command: display snmp-agent sys-info.
Example
Set the system maintenance information to "Dial System Operator at beeper 27345".
[SW8800] snmp-agent sys-info contact Dial System Operator at beeper 27345
39.1.15 snmp-agent target-host
Syntax
snmp-agent target-host trap address udp-domain host-addr [ udp-port
udp-port-number ] params securityname community-string [ v1 | v2c | v3
[ authentication | privacy ] ]
undo snmp-agent target-host host-addr securityname community-string
View
System view
Parameter
address: Specifies the address of the host which receives SNMP messages.
host-addr: IP address of the host.
udp-port udp-port-number: Specifies the UDP port number of the host to receive the
SNMP notification.
v1: Represent the version of SNMPV1.
v2c: Represent the version of SNMPV2C.
v3: Represent the version of SNMPV3.
39-14
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
community-string: Specifies the community name. The character string ranges from 1 to 32 bytes.
authentication: Configures to authenticate the packet without encryption.
privacy: Configures to authenticate and encrypt the packet.
Description
Use the snmp-agent target-host command to configure destination of SNMP notification.
Use the undo snmp-agent target-host command to cancel the host that receives
SNMP notification.
The snmp-agent target-host command and the snmp-agent trap enable command should be used at the same time. Use the snmp-agent trap enable command to enable the device to transmit Trap packets. The snmp-agent trap enable command and snmp-agent target-host command should be used at the same time on the host to enable notify message sending.
Related command: snmp-agent trap enable, snmp-agent trap source and
snmp-agent trap life.
Example
Enable sending Trap message to 10.1.1.1 with community name public.
[SW8800] snmp-agent trap enable
[SW8800] snmp-agent target-host trap address udp-domain 10.1.1.1 params securityname public
39.1.16 snmp-agent trap enable
Syntax
snmp-agent trap enable [ bgp [ backwardtransition | established ]* | configuration
| flash | ospf [ process-id ] [ ospf-trap-list ] | ldp | lsp | standard [ authentication |
coldstart | linkdown | linkup | warmstart ]* | system | vrrp [ authfailure |
newmaster ] ]
undo snmp-agent trap enable [ bgp [ backwardtransition | established ]* |
configuration | flash | ospf [ process-id ] [ ospf-trap-list ] | ldp | lsp | standard
[ authentication | coldstart | linkdown | linkup | warmstart ]* | system | vrrp
[ authfailure | newmaster ] ]
View
System view
39-15
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 39 SNMP Configuration Commands
standard [ authentication ] [ coldstart ] [ linkdown ] [ linkup ]: Enables the sending of standard Trap messages.
authentication: Enables the sending of SNMP authentication Trap messages.
coldstart: Enables the sending of SNMP cold start Trap messages.
linkdown: Enables the sending of SNMP link down Trap messages.
linkup: Enables the sending of SNMP link up Trap messages.
warmstart: Enables the sending of SNMP hot start Trap messages.
bgp [ backwardtransition ] [ established ] : Enables the sending of BGP Trap messages.
configuration: Enables the sending of configuration management Trap messages.
flash: Enables the sending of FLASH Trap messages.
System: Enables the sending of system management MIB Trap messages.
vrrp [ authfailure | newmaster ]: Enables the sending of VRRP Trap messages.
ldp: Enables the sending of LDP Trap messages.
lsp: Enables the sending of LSP trap messages.
Description
Use the snmp-agent trap enable command to enable the sending of Trap messages.
Use the undo snmp-agent trap enable command to disable the sending of Trap messages.
By default, Trap message sending is disabled.
The snmp-agent trap enable command and snmp-agent target-host command should be used at the same time. The snmp-agent target-host command specifies which hosts can receive Trap message. However, to send Trap message, at least one the snmp-agent target-host command should be configured.
Example
Enable to send the trap packet of SNMP authentication failure to 10.1.1.1. The community name is public.
[SW8800] snmp-agent trap enable standard authentication
[SW8800] snmp-agent target-host trap address udp-domain 10.1.1.1 params securityname public
39.1.17 snmp-agent trap life
Syntax
snmp-agent trap life seconds
39-16
3Com Switch 8800 Command Reference Guide
undo snmp-agent trap life
View
Chapter 39 SNMP Configuration Commands
System view
Parameter
seconds: Specifies the timeouts, ranging from 1 to 2,592,000 seconds; By default, the timeout interval is 120 seconds.
Description
Use the snmp-agent trap life command to configure the timeout of Trap packets.
Use the undo snmp-agent trap life command to restore the default value.
The set timeout of Trap packet is represented by seconds. If time exceeds seconds, this Trap packet will be discarded.
Related command: snmp-agent trap enable, snmp-agent target-host .
Example
Configure the timeout interval of Trap packet as 60 seconds.
[SW8800] snmp-agent trap life 60
39.1.18 snmp-agent trap queue-size
Syntax
snmp-agent trap queue-size length
undo snmp-agent trap queue-size
View
System view
Parameter
length: Length of queue, ranging from 1 to 1,000. By default, the length is 100.
Description
Use the snmp-agent trap queue-size command to configure the information queue length of Trap packet sent to destination host.
Use the undo snmp-agent trap queue-size command to restore the default value.
Related command: snmp-agent trap enable, snmp-agent target-host, snmp-agent
trap life.
Example
Configure the queue length to 200.
39-17
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
[SW8800] snmp-agent trap queue-size 200
39.1.19 snmp-agent trap source
Syntax
snmp-agent trap source vlan-interface vlan-id
undo snmp-agent trap source
View
System view
Parameter
vlan-id: Specifies the VLAN interface ID, ranging from 1 to 4094.
Description
Use the snmp-agent trap source command to configure the source address for sending Trap.
Use the undo snmp-agent trap source command to cancel the source address for sending Trap.
You can use this command to configure to track specific event by using the trap address.
Example
Configure the IP address of the VLAN interface 1 as the source address for transmitting the Trap packets.
[SW8800] snmp-agent trap source vlan-interface 1
39.1.20 snmp-agent usm-user
Syntax
snmp-agent usm-user { v1 | v2c } username groupname [ acl acl-list ]
undo snmp-agent usm-user { v1 | v2c } username groupname
snmp-agent usm-user v3 username groupname [ authentication-mode { md5 | sha }
authpassstring [ privacy-mode { des56 privpassstring } ] ] [ acl acl-list ]
undo snmp-agent usm-user v3 username groupname { local | engineid engine-id }
View
System view
Parameter
v1: Configures to use V1 safe mode.
39-18
3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands
v2c: Configures to use V2c safe mode.
v3: Configures to use V3 safe mode.
username: Specifies the user name, ranging from 1 to 32 bytes.
groupname: Specifies the group name corresponding to that user, a character string at the length ranging from 1 to 32 bytes.
authentication-mode: Specifies the safety level as authentication required.
md5: MD5 algorithm is adopted in authentication. MD5 authentication uses the
128-digit password. Computation speed of MD5 is faster than that of SHA
sha: SHA algorithm is adopted in authentication. SHA authentication uses the 160-digit password. Computation speed of SHA is slower than that of MD5, but with higher security.
authpasstring: Specifies the authentication password with a character string, ranging from 1 to 64 bytes.
privacy-mode: Specifies the safety level as encrypted.
des56: Specifies the authentication protocol as DES.
privpassword: Specifies the encryption password with a character string, ranging from 1 to 64 bytes.
acl acl-list: Sets access control list for this user based on USM name
engineid engine-id: SNMP engineID.
Description
Use the snmp-agent usm-user command to add a new user to an SNMP group.
Use the undo snmp-agent usm-user command to cancel a user from SNMP group.
SNMP engineID (for authentication) is required when configuring remote user for an agent. This command will not be effective without engineID configured.
For V1 and V2C, this command will add a new community name. For V3, it will add a new user for an SNMP group.
Example
Add a user smith for 3Com (an SNMP group), configures to authenticate with MD5 and sets authentication password as pass.
[SW8800] snmp-agent usm-user v3 smith 3Com authentication-mode md5 pass
39.1.21 undo snmp-agent
Syntax undo snmp-agent
39-19
3Com Switch 8800 Command Reference Guide
View
System view
Parameter
None
Chapter 39 SNMP Configuration Commands
Description
Use the undo snmp-agent command to disable all versions of SNMP running on the server.
Perform any command of snmp-agent will enable SNMP Agent.
Example
Disable the running SNMP agents of all SNMP versions.
[SW8800] undo snmp-agent
39-20
3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands
Chapter 40 RMON Configuration Commands
40.1 RMON Configuration Commands
40.1.1 display rmon alarm
Syntax
display rmon alarm [ alarm-table-entry ]
View
Any view
Parameter
alarm-table-entry: Alarm table entry index.
Description
Use the display rmon alarm command to view RMON alarm information.
Related command: rmon alarm.
Example
Display the RMON alarm information.
<SW8800> display rmon alarm
Alarm table 1 owned by monitor is VALID.
Samples type : delta
Variable formula : 1.3.6.1.2.1.16.1.1.1.3.1<etherStatsDropEvents.1>
Description : Ethernet5/1/1
Sampling interval : 10(sec)
Rising threshold : 10(linked with event 1)
Falling threshold : 2(linked with event 1)
When startup enables : risingOrFallingAlarm
Latest value : 0
Table 40-1 Description on the fields of the display rmon alarm command
Field
Alarm table 1
Description
Index 1 in alarm table monitor Owner
VALID The alarm entry corresponding to this index is valid.
Samples type Type of sampling
40-1
3Com Switch 8800 Command Reference Guide
Field
Variable formula
Chapter 40 RMON Configuration Commands
Variable parameters
Description
Sampling interval
Rising threshold is 1000
Falling threshold is 100
Time interval for sampling
The rising threshold is 1000.
The falling threshold is 100.
When startup enables : risingOrFallingAlarm
Type of the first alarm. The startup may trigger rising threshold alarm, falling threshold alarm, or both.
Latest value Last sample value
40.1.2 display rmon event
Syntax
display rmon event [ event-table-entry ]
View
Any view
Parameter
event-table-entry: Entry index of event table.
Description
Use the display rmon event command to view RMON events.
The display includes event index in event table, owner of the event, description to the event, action caused by event (log or alarm information), and occurrence time of the latest event (counted on system initiate/boot time in centiseconds).
Related command: rmon event.
Example
Show the RMON event.
<SW8800> display rmon event
Event table 1 owned by null is VALID.
Description: null.
Will cause log-trap when triggered, last triggered at 0days 00h:02m:27s.
40-2
3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands
Table 40-2 Description on the fields of the display rmon event command
Event table 1
VALID
Field Description
Index 1 in event table
The entry corresponding to the index is valid
Cause log-trap when triggered,
Last triggered at 0days 00h:02m:27s
When the event is triggered, it will cause the log-trap.
The last triggered time is 00h:02m:27s
40.1.3 display rmon eventlog
Syntax
display rmon eventlog [ event-number ]
View
Any view
Parameter
event-number: Entry index of event table.
Description
Use the display rmon eventlog command to view RMON event log.
The display includes event index in the event table, the status of the event, the time at which the event log is generated (this time starts from the system initialization or booting and counted in milliseconds), and event description.
Example
Show event log of RMON.
<SW8800> display rmon eventlog 1
Event table 1 owned by null is VALID.
Generates eventLog 1.1 at 0days 00h:01m:39s.
Description: The 1.3.6.1.2.1.16.1.1.1.4.1 defined in alarm table 1, less than(or =) 100 with alarm value 0. Alarm sample type is absolute.
Generates eventLog 1.2 at 0days 00h:02m:27s.
Description: The alarm formula defined in private alarm table 1, less than(or =) 100 with alarm value 0. Alarm sample type is absolute.
40-3
3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands
Table 40-3 Description on the fields of the display rmon eventlog command
Field Description
Event table 1 Index 1 in event table
VALID
The entry corresponding to the index is valid less than(or =) 100 with alarm value 0
The alarm sample value is less than or equal to 100
The type of alarm sampling is absolute Alarm sample type is absolute
Generates eventLog 1.2 at 0days The eventlog corresponding to the index
00h:02m:27s 1.2 is generated at 0days 00h:02m:27s.
40.1.4 display rmon history
Syntax
display rmon history [ port-num ]
View
Any view
Parameter
port-num: Ethernet port name.
Description
Use the display rmon history command to view latest RMON history sampling information (including utility, error number and total packet number).
Related command: rmon history.
Example
Show the RMON history information.
<SW8800> display rmon history ethernet 2/1/1
History control entry 1 owned by null is VALID
Samples interface : Ethernet2/1/1<ifEntry.642>
Sampling interval : 10(sec) with 10 buckets max
Latest sampled values :
Dropevents :0 , octets :0
packets :0 , broadcast packets :0
multicast packets :0 , CRC alignment errors :0
undersize packets :0 , oversize packets :0
40-4
3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands
fragments :0 , jabbers :0
collisions :0 , utilization :0
Table 40-4 Description on the fields of the display rmon history command
Field Description
Samples interface The sampled interface
History control entry
VALID
Index number in history control table
The entry corresponding to the index is valid
Sampling interval buckets
Latest sampled values dropevents
Sampling interval
Records in history control table
The latest sample information
Dropping packet events octets packets broadcast packets multicast packets
CRC alignment errors undersized packets oversized packets fragments
Sent/Received octets in sampling time
Packets sent/received in sampling time
Number of broadcast packets
Number of multicast packets
Number of CRC error packets
Number of undersized packets
Number of oversized packets
Number of undersized and CRC error packets jabbers collisions
Number of oversized and CRC error packets
Number of collision packets utilization Utilization
40.1.5 display rmon prialarm
Syntax
display rmon prialarm [ prialarm-table-entry ]
View
Any view
Parameter
prialarm-table-entry: Entry index of extended RMON alarm table.
Description
40-5
3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands
Use the display rmon prialarm command to view information about extended RMON alarm table.
Related command: rmon prialarm.
Example
Display the information about extended RMON alarm table.
<SW8800> display rmon prialarm
Prialarm table 1 owned by monitor is UNDERCREATION.
Samples type : changeratio
Variable formula :
(.1.3.6.1.2.1.2.2.1.10.201326601+.1.3.6.1.2.1.2.2.1.16
.201326601)*8*100/.1.3.6.1.2.1.2.2.1.5.201326601
Description : ifUtilization.Ethernet5/1/1
Sampling interval : 10(sec)
Rising threshold : 50(linked with event 1)
Falling threshold : 5(linked with event 1)
When startup enables : risingOrFallingAlarm
This entry will exist : forever.
Latest value : 0
Table 40-5 Description on the fields of the display rmon prialarm command
Field
Prialarm table 1
Description
Index of extended alarm entry. owned by monitor Creator of the extended alarm entry.
UNDERCREATION Valid
Samples type Type of sampling
Variable formula Variable parameter
Sampling interval :
10(sec)
Sampling interval
Rising threshold
Falling threshold
Rising threshold. When sampling value rises from normal value to this threshold, rising threshold alarm will be triggered.
Falling threshold. When sampling value decreases from normal value to this threshold, falling threshold alarm will be triggered. linked with event 1
Corresponding event index of ring and falling threshold alarm. risingOrFallingAlarm alarm or falling threshold alarm or both.
40-6
3Com Switch 8800 Command Reference Guide
Field
This entry will exist forever
Latest value : 0
Chapter 40 RMON Configuration Commands
Description
The lifespan of this alarm entry which can be forever or a specified period of time.
The value of the latest sampling.
40.1.6 display rmon statistics
Syntax
display rmon statistics [ port-num ]
View
Any view
Parameter
port-num: Ethernet port number.
Description
Use the display rmon statistics command to view RMON statistics.
The displayed information includes collision, CRC (Cyclic Redundancy Check) and queue, undersized or oversized packet, timeout, fragment, broadcast, multicast, unicast, and bandwidth utility.
Related command: rmon statistics.
Example
Show RMON statistics.
<SW8800> display rmon statistics Ethernet 2/1/1
Statistics entry 1 owned by aaa is VALID.
Interface : Ethernet2/1/1<ifIndex.872418178>
etherStatsOctets : 756 , etherStatsPkts : 9
etherStatsBroadcastPkts : 9 , etherStatsMulticastPkts : 0
etherStatsUndersizePkts : 0 , etherStatsOversizePkts : 0
etherStatsFragments : 0 , etherStatsJabbers : 0
etherStatsCRCAlignErrors : 0 , etherStatsCollisions : 0
etherStatsDropEvents (insufficient resources): 0
Packets received according to length (etherStatsPktsXXXtoYYYOctets):
64 : 0 , 65-127 : 444 , 128-255 : 0
256-511: 0 , 512-1023: 0 , 1024-max : 0
40.1.7 rmon alarm
40-7
3Com Switch 8800 Command Reference Guide
Syntax
Chapter 40 RMON Configuration Commands
rmon alarm entry-number alarm-variable sampling-time { delta | absolute }
rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2
event-entry2 [ owner text ]
undo rmon alarm entry-number
View
System view
Parameter
entry-number: Number of the entry to be added/deleted, ranging from 1 to 65535.
alarm-variable: Specifies the alarm variable with a character string, ranging from 1 to
256, in the OID dotted format, like 1.3.6.1.2.1.2.1.10.1 (or ifInOctets.1).
sampling-time: Specifies the sampling interval, ranging from 5 to 65535 (measured in seconds).
delta: Sampling type is delta.
absolute: Sampling type is absolute.
rising-threshold threshold-value1: Rising threshold, ranging from 0 to 2147483647.
event-entry1: Event number corresponding to the upper limit of threshold, ranging from
0 to 65535.
falling-threshold threshold-value2: Falling threshold, ranging from 0 to 2147483647.
event-entry2: Event number corresponding to the falling threshold, ranging from 0 to
65535.
owner text: Specifies the creator of the alarm. Length of the character string ranges from 1 to 127.
Description
Use the rmon alarm command to add an entry to the alarm table.
Use the undo rmon alarm command to cancel an entry from this table.
In this way, the alarm event can be triggered in the abnormal situations and then decides to log and send trap to the NM station.
Note:
Before adding an alarm entry, you need first to define the event to be referenced in the alarm entry using the rmon event command.
The system takes these actions on the defined alarm entries:
40-8
3Com Switch 8800 Command Reference Guide z z
Chapter 40 RMON Configuration Commands
Sampling the defined alarm variables at a specified time interval.
Comparing the sample values against the predefined threshold and take further
Table 40-6 Handling alarm entries
Item Handling
The sample value is greater than the upper limit threshold-value1.
Triggers the defined event event-entry1
The sample value is less than the lower limit threshold-value2.
Triggers the defined event event-entry2
Example
Delete the information of entry 15 from the alarm table.
[SW8800] undo rmon alarm 15
40.1.8 rmon event
Syntax
rmon event event-entry [ description string ] { log | trap trap-community | log-trap
log-trapcommunity | none } [ owner text ]
undo rmon event event-entry
View
System view
Parameter
event-entry: Number of the entry to be added/deleted, ranging from 1 to 65535.
description string: Event description. Length of the character string ranges from 1 to
127.
log-trap log-trapcommunity: Defines the event as log and trap event, and specifies the community name of the NMS which receives the messages triggered by the event.
log: Log event.
trap trap-community: Defines the event as trap event, and specifies the community name of the NMS which receives the messages triggered by the event.
none: Neither log nor trap event.
owner text: Creator for this entry. The length of the character string ranges from 1 to
127.
40-9
3Com Switch 8800 Command Reference Guide
Description
Chapter 40 RMON Configuration Commands z z z
Use the rmon event command to add an entry to the event table.
Use the undo rmon event command to cancel an entry from this table.
RMON event management defines the event ID and the handling of the event.
You can handle the event in the following ways:
Keeping logs
Sending the trap messages to NMS
Keeping logs and sending the trap messages to NMS
Example
Add the entry 10 to the event table and marks it as log event.
[SW8800] rmon event 10 log
40.1.9 rmon history
Syntax
rmon history entry-number buckets number interval sampling-interval [ owner
text-string ]
undo rmon history entry-number
View
Ethernet port view
Parameter
entry-number: Number of the entry to be added/deleted, ranging from 1 to 65,535.
buckets number: Capacity of the history table corresponding to the control line.
interval sampling-interval: Sampling interval, ranging from 5 to 3600 (measured in seconds).
owner text-string: Creator of this entry. Length of the character string ranges from 1 to127.
Description
Use the rmon history command to add an entry to the history control table.
Use the undo rmon history command to cancel an entry from history control table.
Perform this command to sample, set sample parameter (sample time interval) and storage amounts for a port. RMON will periodically perform data collection and save for query on this port. Sample information includes utility, error number and total packet number.
40-10
3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands
You can use the display rmon history command to view the statistics of the history control entry.
Example
Delete the entry 15 from the history control table.
[SW8800-Ethernet2/1/1] undo rmon history 15
40.1.10 rmon prialarm
Syntax
rmon prialarm entry-number prialarm-formula prialarm-des sampling-timer { delta |
absolute | changeratio } rising-threshold threshold-value1 event-entry1
falling-threshold threshold-value2 event-entry2 entrytype { forever | cycle
cycle-period } [ owner text ]
undo rmon prialarm entry-number
View
System view
Parameter
entry-number: Specifies the entry number, ranging from 1 to 65535.
prialarm-formula: Variables in the formula must be represented by OID, for example,
(1.3.6.1.2.1.2.1.10.1)*8. The operation results are in long integers. Every operation result must be within the range of the long integer; otherwise, errors may be prompted.
prialarm-des : Specifies the alarm description with a length ranging from 1 to 256;
sampling-timer: Sets the sampling interval, ranging from 10 to 65535 and measured in seconds.
delta | absolute | changeratio: Specifies the sampling type as delta ratio, absolute ratio or change ratio.
threshold-value1: Rising threshold value, specified with a number greater than 0.
event-entry1: Corresponding event number to the upper limit threshold value, ranging from 0 to 65535.
threshold-value2: Falling threshold value, specified with a number greater than 0.
event-entry2: Event number corresponding to the falling threshold, ranging from 0 to
65535.
forever | cycle cycle-period: Specifies the type of the alarm instance line.
cycle-period specifies the functional cycle of the instance.
owner text: Creator of this entry. Length of the character string ranges from 1 to 127.
40-11
3Com Switch 8800 Command Reference Guide
Description
Chapter 40 RMON Configuration Commands
Use the rmon prialarm command to add an entry to the extended RMON alarm table.
Use the undo rmon prialarm command to cancel an entry from the extended RMON alarm table.
The number of instances can be created in the table depends on the hardware resource of the product.
Note:
Before adding an extended alarm entry, you need first to define the event to be referenced in the extended alarm entry using the rmon event command.
You can define up to 50 prialarm entries. z z
The system takes these actions on the extended alarm entries you defined: z
Sampling the alarm variables in the defined extended alarm formula at a specified time interval.
Calculating the sample value using the defined extended alarm formula.
Comparing the sample values against the predefined threshold and take further
Table 40-7 Handling extended alarm entries
Item Handling
The calculated sample value is greater than the upper limit threshold-value1.
Triggers the defined event event-entry1
The calculated sample value is less than the lower limit threshold-value2.
Triggers the defined event event-entry2
Example
Delete line 10 from the extended RMON alarm table.
[SW8800] undo rmon prialarm 10
40.1.11 rmon statistics
Syntax
rmon statistics entry-number [ owner text-string ]
undo rmon statistics entry-number
40-12
3Com Switch 8800 Command Reference Guide
View
Ethernet port view
Chapter 40 RMON Configuration Commands
Parameter
entry-number: Number of the entry to be added/deleted, ranging from 1 to 65535.
owner text-string: Creator of this entry. Length of the character string ranges from 1 to127.
Description
Use the rmon statistics command to add an entry to the statistic table.
Use the undo rmon statistics command to cancel an entry from statistic table.
RMON statistic management concerns the statistics and monitoring of the usage and error on a port. Statistics includes collision, undersized or oversized packet, timeout, fragment, broadcast, multicast, unicast, and bandwidth utility.
You can use the display rmon statistics command to view information about statistics table entry.
Example
Add statistics of Ethernet2/1/1 to the entry 20.
[SW8800-Ethernet2/1/1] rmon statistic 20
40-13
3Com Switch 8800 Command Reference Guide Chapter 41 NTP Configuration Commands
Chapter 41 NTP Configuration Commands
41.1 NTP Configuration Commands
41.1.1 debugging ntp-service
Syntax
debugging ntp-service { access | adjustment | authentication | event | filter |
packet | parameter | refclock | selection | synchronization | validity | all }
undo debugging ntp-service { access | adjustment | authentication | event | filter |
packet | parameter | refclock | selection | synchronization | validity | all }
View
User view
Parameter
access: NTP access control debugging.
adjustment: NTP clock adjustment debugging.
all: All NTP debugging functions.
authentication: NTP authentication debugging.
event: NTP event debugging.
filter: NTP filter information debugging.
packet: NTP packet debugging.
parameter: NTP clock parameter debugging.
refclock: NTP reference clock debugging.
selection: NTP clock selection information debugging.
synchronization: NTP clock synchronization information debugging.
validity: NTP remote host validity debugging.
Description
Use the debugging ntp-service command to debug different NTP services.
Use the undo debugging ntp-service command to disable corresponding debugging function.
By default, no debugging function is enabled.
41-1
3Com Switch 8800 Command Reference Guide
Example
Enable NTP access control debugging.
<SW8800> debugging ntp-service access
Chapter 41 NTP Configuration Commands
41.1.2 display ntp-service sessions
Syntax
display ntp-service sessions [ verbose ]
View
Any view
Parameter
verbose: Indicates to display the detail information about the sessions.
Description
Use the display ntp-service sessions command to display the status of all the sessions maintained by NTP service provided by the local equipment.
By default, the status of all the sessions maintained by NTP service provided by the local equipment will be displayed.
When you configure this command without the verbose parameter, the Ethernet switch will display the brief information about all the sessions it maintains.
With the verbose parameter configured, Ethernet switch will display the detail information about all the sessions it maintains.
Example
Display status of all sessions maintained by the local device NTP service.
<SW8800> display ntp-service sessions source reference stra reach poll now offset delay disper
******************************************************************** note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured
41.1.3 display ntp-service status
Syntax display ntp-service status
View
Any view
41-2
3Com Switch 8800 Command Reference Guide
Parameter
None
Chapter 41 NTP Configuration Commands
Description
Use the display ntp-service status command to display the NTP service status.
Example
Display the NTP service status.
<SW8800> display ntp-service status clock status: unsynchronized
clock stratum: 16
reference clock ID: none
nominal frequency: 100.0000 Hz
actual frequency: 100.0000 Hz
clock precision: 2^17
clock offset: 0.0000 ms
root delay: 0.00 ms
root dispersion: 0.00 ms
peer dispersion: 0.00 ms
reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000)
The following table describes the outputs:
Table 41-1 Description on the fields of the display ntp-service status command
Field Description
unsynchronized server. clock stratum: 16 Indicates the NTP stratum of local clock. reference clock ID
Indicates the address of a remote server of the reference ID, in the case that the local system has been synchronized by a remote NTP server or the ID of some clock source. nominal frequency Nominal frequency of the local system hardware clock actual frequency Actual frequency of the local system hardware clock clock precision clock offset
Precision of local system clock
Offset of the local clock to the NTP server clock root delay root dispersion peer dispersion reference time
Root delay from local equipment to the master reference clock.
Dispersion of the local clock relative to the NTP server clock
Dispersion of the remote NTP server
Reference timestamp
41-3
3Com Switch 8800 Command Reference Guide
41.1.4 display ntp-service trace
Chapter 41 NTP Configuration Commands
Syntax
display ntp-service trace
View
Any view
Parameter
None
Description
Use the display ntp-service trace command to display the brief information about every NTP server on the way from the local device to the reference clock source.
With this command, the system synchronizes the NTP server link from the local device along time till the reference clock source, and displays brief information about every
NTP server.
Example
Display brief information about every NTP server on the way from the local device to the reference clock source.
<SW8800> display ntp-service trace server 127.0.0.1,stratum 8, offset 0.000000, synch distance 0.00000
refid 127.127.1.0
41.1.5 ntp-service access
Syntax
ntp-service access { query | synchronization | server | peer } acl-number
undo ntp-service access { query | synchronization | server | peer }
View
System view
Parameter
query: Allows to control query authority.
synchronization: Only allows the server to access.
server: Allows query to server and access.
peer: Full access authority.
acl-number: IP address list number.
41-4
3Com Switch 8800 Command Reference Guide
Description
Chapter 41 NTP Configuration Commands
Use the ntp-service access command to set the authority to access the local equipment.
Use the undo ntp-service access command to cancel the access authority settings.
By default, there is no limit to the access.
Set authority to access the NTP services on a local Ethernet Switch. This is a basic and brief security measure, compared to authentication. An access request will be matched with peer, server, synchronization, and query in an ascending order of the limitation.
The first matched authority will be given.
Example
Give the authority of time request, query control and synchronization with the local equipment to the peer in ACL 2000.
[SW8800] ntp-service access peer 2000
Give the authority of time request and query control of the local equipment to the peer in ACL 2000.
[SW8800] ntp-service access synchronization 2000
41.1.6 ntp-service authentication enable
Syntax ntp-service authentication enable undo ntp-service authentication enable
View
System view
Parameter
None
Description
Use the ntp-service authentication enable command to enable the NTP-service authentication function.
Use the undo ntp-service authentication enable command to disable this function.
By default, the authentication is disabled.
Example
Enable NTP authentication function.
[SW8800] ntp-service authentication enable
41-5
3Com Switch 8800 Command Reference Guide
41.1.7 ntp-service authentication-keyid
Chapter 41 NTP Configuration Commands
Syntax
ntp-service authentication-keyid number authentication-mode md5 value
undo ntp-service authentication-keyid number
View
System view
Parameter
Description
Use the ntp-service authentication-keyid command to set NTP authentication key.
Use the undo ntp-service authentication-keyid command to cancel the NTP authentication key.
By default, there is no authentication key.
Only MD5 authentication is supported for the NTP authentication key settings.
Example
number: Key number, ranging from 1 to 4,294,967,295.
value: Value of the key with 1 to 32 ASCII characters.
Set MD5 authentication key 10 as 3Com.
[SW8800] ntp-service authentication-keyid 10 authentication-mode md5 3Com
41.1.8 ntp-service broadcast-client
Syntax
ntp-service broadcast-client
undo ntp-service broadcast-client
View
VLAN interface view
Parameter
None
Description
Use the ntp-service broadcast-client command to configure NTP broadcast client mode.
41-6
3Com Switch 8800 Command Reference Guide Chapter 41 NTP Configuration Commands
Use the undo ntp-service broadcast-client command to disable the NTP broadcast client mode.
By default, the NTP broadcast client mode is disabled.
Designate an interface on the local Ethernet Switch to receive NTP broadcast messages and operate in broadcast client mode. The local Ethernet Switch listens to the broadcast from the server. When it receives the first broadcast packet, it starts a brief client/server mode to switch messages with a remote server for estimating the network delay. Thereafter, the local Ethernet Switch enters broadcast client mode and continues listening to the broadcast and synchronizes the local clock according to the arrived broadcast message.
Example
Configure to receive NTP broadcast packets through Vlan-Interface1.
[SW8800] interface vlan-interface1
[SW8800-Vlan-Interface1] ntp-service broadcast-client
41.1.9 ntp-service broadcast-server
Syntax
ntp-service broadcast-server [ authentication-keyid keyid version number ]
undo ntp-service broadcast-server
View
VLAN interface view
Parameter
authentication-keyid: Specifies the authentication key.
keyid: Key ID used in broadcast, ranging from 0 to 4294967295.
version: Defines NTP version number.
number: NTP version number, ranging from 1 to 3.
Description
Use the ntp-service broadcast-server command to configure NTP broadcast server mode.
Use the undo ntp-service broadcast-server command to disable the NTP broadcast server mode.
By default, the broadcast service is disabled and number defaults to 3.
Designate an interface on the local equipment to broadcast NTP packets. The local equipment runs in broadcast-server mode and regularly broadcasts packets to its clients.
41-7
3Com Switch 8800 Command Reference Guide
Example
Chapter 41 NTP Configuration Commands
Configure to broadcast NTP packets through Vlan-Interface1, encrypt them with Key 4, and set the NTP version number as 3.
[SW8800] interface vlan-interface1
[SW8800-Vlan-Interface1] ntp-service broadcast-server authentication-key 4 version 3
41.1.10 ntp-service max-dynamic-sessions
Syntax
ntp-service max-dynamic-sessions number
undo ntp-service max-dynamic-sessions
View
System view
Parameter
number: The maximum sessions can be created locally, ranging from 0 to 100.
Description
Use the ntp-service max-dynamic-sessions command to set how many sessions can be created locally.
Use the undo ntp-service max-dynamic-sessions command to resume the default maximum session number
By default, a local device allows up to 100 sessions.
Example
Set the local equipment to allow up to 50 sessions.
[SW8800] ntp-service max-dynamic-sessions 50
41.1.11 ntp-service multicast-client
Syntax
ntp-service multicast-client [ ip-address ]
undo ntp-service multicast-client [ ip-address ]
View
VLAN interface view
41-8
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 41 NTP Configuration Commands
ip-address: Specifies an multicast IP address of Class D. By default, the ip-address is set to 224.0.1.1. Actually, for the Switch 8800, you can set 224.0.1.1 as the multicast IP address only.
Description
Use the ntp-service multicast-client command to configure the NTP multicast client mode.
Use the undo ntp-service multicast-client command to disable the NTP multicast client mode.
By default, the multicast client service is disabled. ip-address defaults to 224.0.1.1.
Designate an interface on the local Ethernet Switch to receive NTP multicast messages and operate in multicast client mode. The local Ethernet Switch listens to the multicast from the server. When it receives the first multicast packet, it starts a brief client/server mode to switch messages with a remote server for estimating the network delay.
Thereafter, the local Ethernet Switch enters multicast client mode and continues listening to the multicast and synchronizes the local clock according to the arrived multicast message.
Example
Configure to receive NTP multicast packet through Vlan-Interface1 and the multicast group corresponding to these packets located at 224.0.1.1.
[SW8800] interface vlan-interface 1
[SW8800-Vlan-Interface1] ntp-service multicast-client 224.0.1.1
41.1.12 ntp-service multicast-server
Syntax
ntp-service multicast-server [ ip-address ] [ authentication-keyid keyid ] [ ttl
ttl-number ] [ version number ]*
undo ntp-service multicast-server [ ip-address ]
View
VLAN interface view
Parameter
ip-address: Specifies a multicast IP address of Class D and default to 224.0.1.1.
Actually, for the Switch 8800, you can set 224.0.1.1 as the multicast IP address only.
authentication-keyid: Specifies authentication key.
keyid: Key ID used in multicast, ranging from 1 to 4294967295.
41-9
3Com Switch 8800 Command Reference Guide Chapter 41 NTP Configuration Commands
ttl: Time to live of a multicast packet.
ttl-number: ttl of a multicast packet,ranging from 1 to 255.
version: NTP version number.
number: NTP version number and range from 1 to 3.
Description
Use the ntp-service multicast-server command to configure NTP multicast server mode, if no IP address is specified, switch automatically choice the 224.0.1.1 as the multicast IP address.
Use the undo ntp-service multicast-server command to disable NTP multicast server mode, if no IP address is specified, the switch will disable the configuration of the multicast IP address 224.0.1.1.
By default, the multicast service is disabled. IP address defaults to 224.0.1.1 and the version number defaults to 3.
Designate an interface on the local equipment to transmit NTP multicast packet. The local equipment operates in multicast-server mode and multicasts packets regularly to its clients.
Example
Configure to transmit NTP multicast packets encrypted with Key 4 through
Vlan-Interface1 at 224.0.1.1 and use NTP version 3.
[SW8800] interface vlan-interface 1
[SW8800-Vlan-Interface1] ntp-service multicast-server 224.0.1.1 authentication-keyid 4 version 3
41.1.13 ntp-service refclock-master
Syntax
ntp-service refclock-master [ ip-address ] [ stratum ]
undo ntp-service refclock-master [ ip-address ]
View
System view
Parameter
ip-address: Specifies the reference clock IP address as 127.127.u, where u ranges from 0 to 3.
stratum: Specifies which stratum the local clock is located at and range from 1 to 15.
41-10
3Com Switch 8800 Command Reference Guide
Description
Chapter 41 NTP Configuration Commands
Use the ntp-service refclock-master command to configure an external reference clock or the local clock as an NTP master clock.
Use the undo ntp-service refclock-master command to cancel the NTP master clock settings.
By default, ip-address is 127.127.1.0 and stratum defaults to 8.
You can use this command to designate an NTP external reference clock or the local clock as an NTP master clock to provide synchronized time for other equipment.
ip-address specifies the IP address of an external clock as 127.127.u. If no IP address is specified, the local clock is set as the NTP master clock by default. You can also specify the stratum of the NTP master clock.
Example
Set the local clock as the NTP master clock to provide synchronized time for its peers and locate it at stratum 3.
[SW8800] ntp-service refclock-master 3
41.1.14 ntp-service reliable authentication-keyid
Syntax
ntp-service reliable authentication-keyid number
undo ntp-service reliable authentication-keyid number
View
System view
Parameter
number: Specifies the key number, ranging from 1 to 4294967295.
Description
Use the ntp-service reliable authentication-keyid command to configure the key as reliable.
Use the undo ntp-service reliable authentication-keyid command to cancel the current setting.
By default, no key is configured as reliable.
When you enable the authentication, you can use this command to configure one or more than one keys as reliable. In this case, a client will only get synchronized by a server whichever can provide a reliable key.
41-11
3Com Switch 8800 Command Reference Guide
Example
Chapter 41 NTP Configuration Commands
Enable NTP authentication, adopt MD5 encryption, and designate Key 37 BetterKey and configure it as reliable.
[SW8800] ntp-service authentication enable
[SW8800] ntp-service authentication-keyid 37 authentication-mode md5
BetterKey
[SW8800] ntp-service reliable authentication-keyid 37
41.1.15 ntp-service source-interface
Syntax
ntp-service source-interface { interface-name | interface-type interface-number }
undo ntp-service source-interface
View
System view
Parameter
interface-name: Specifies an interface. The source IP address of the packets will be taken from the address of the interface.
interface-type: Specifies the interface type and determine an interface with the
interface-number parameter. The interface can be VLAN interface and Loopback interface currently.
interface-number: Specifies the interface number and determine an interface with the
interface-type parameter.
Description
Use the ntp-service source-interface command to designate an interface to transmit
NTP message.
Use the undo ntp-service source-interface command to cancel the current setting.
By default, the source address specifies where the packets are transmitted from.
You can use this command to designate an interface to transmit all the NTP packets and take the source address of these packets from its IP address. If you do not want any other interface to receive the acknowledgement packets, use this command to specify one interface to send all the NTP packets.
Example
Configure all the outgoing NTP packets to use the IP address of Vlan-Interface1 as their source IP address.
[SW8800] ntp-service source-interface Vlan-Interface 1
41-12
3Com Switch 8800 Command Reference Guide
41.1.16 ntp-service unicast-peer
Chapter 41 NTP Configuration Commands
Syntax
ntp-service unicast-peer ip-address [ version number ] [ authentication-key keyid ]
[ source-interface { interface-name | interface-type interface-number } ] [ priority ]*
undo ntp-service unicast-peer ip-address
View
System view
Parameter
ip-address: Specifies the IP address of a remote server.
version: Defines NTP version number.
number: NTP version number, ranging from 1 to 3.
authentication-keyid: Defines authentication key.
keyid: Key ID used for transmitting messages to a remote server, ranging from 1 to
4294967295.
source-interface: Specifies the name of an interface, the interface can be VLAN interface and Loopback interface currently.
interface-name: Specifies the interface name. When a local device sends an NTP message to a peer, the source IP address of the message is taken from the address of the interface.
interface-type: Specifies the interface type and determine an interface together with the
interface-number parameter.
interface-number: Specifies the interface number and determine an interface together with the interface-type parameter.
priority: Designates a server as the first choice.
Description
Use the ntp-service unicast-peer command to configure NTP peer mode.
Use the undo ntp-service unicast-peer command to cancel NTP peer mode.
By default, version number number defaults to 3, the authentication is disabled, and the local server is not the first choice.
This command sets the remote server at ip-address as a peer of the local equipment, which operates in symmetric active mode. ip-address specifies a host address other than an IP address of broadcast, multicast, or reference clock. By operating in this mode, a local device can synchronize and be synchronized by a remote server.
41-13
3Com Switch 8800 Command Reference Guide
Example
Chapter 41 NTP Configuration Commands
Configure the local equipment to synchronize or synchronized by a peer at
128.108.22.44. Set the NTP version to 3. The IP address of the NTP packets are taken from that of Vlan-Interface1.
[SW8800] ntp-service unicast-peer 131.108.22.33 version 3 source-interface
Vlan-Interface 1
41.1.17 ntp-service unicast-server
Syntax
ntp-service unicast-server ip-address [ version number ] [ authentication-keyid
keyid ] [ source-interface { interface-name | interface-type interface-number } ]
[ priority ]*
undo ntp-service unicast-server ip-address
View
System view
Parameter
ip-address: Specifies the IP address of a remote server.
version: Defines NTP version number.
number: NTP version number, ranging from 1 to 3.
authentication-keyid: Defines authentication key.
keyid: Key ID used for transmitting messages to a remote server, ranging from 1 to
4294967295.
source-interface: Specifies the name of an interface, the interface can be VLAN interface and Loopback interface.
interface-name: Specifies the interface name. When a local device sends an NTP message to a peer, the source IP address of the message is taken from the address of the interface.
interface-type: Specifies the interface type and determine an interface together with the
interface-number parameter.
interface-number: Specifies the interface number and determine an interface together with the interface-type parameter.
priority: Designates a server as the first choice.
Description
Use the ntp-service unicast-server command to configure NTP server mode.
Use the undo ntp-service unicast-server command to disable NTP server mode.
41-14
3Com Switch 8800 Command Reference Guide Chapter 41 NTP Configuration Commands
By default, version number number defaults to 3, the authentication is disabled, and the local server is not the first choice.
The command announces to use the remote server at ip-address as the local time server. ip-address specifies a host address other than an IP address of broadcast, multicast, or reference clock. By operating in client mode, a local device can be synchronized by a remote server, but not synchronize any remote server.
Example
Designate the server at 128.108.22.44 to synchronize the local device and use NTP version 3.
[SW8800] ntp-service unicast-server 128.108.22.44 version 3
41-15
3Com Switch 8800 Command Reference Guide
Chapter 42 SSH Terminal Service Configuration Comm ands
Chapter 42 SSH Terminal Service Configuration
Commands
42.1 SSH Server Configuration Commands
42.1.1 debugging ssh server
Syntax
View
User view
Parameter
index: SSH channel to be debugged, whose value is dictated by VTY numbers. The default VTY numbers are 0 to 4.
all: All the SSH channels.
Description
Use the debugging ssh server command to send information regulated by the
SSH2.0 protocol, such as the negotiation procedure, to the information center in the format of debugging information. You can also use it to debug a user interface individually.
Use the undo debugging ssh server command to disable the debugging.
By default, the debugging is disabled.
Related command: ssh server authentication-retries, ssh server rekey-interval,
ssh server timeout.
Example
debugging ssh server { VTY index | all }
undo debugging ssh server { VTY index | all }
Print the debugging information when the SSH is running.
<SW8800> debugging ssh server vty 0
00:23:20: SSH0: starting SSH control process
00:23:20: SSH0: sent protocol version id SSH-1.5-SW8800-1.25
00:23:20: SSH0: protocol version id is - SSH-1.5-1.2.26
00:23:20: SSH0: SSH_SMSG_PUBLIC_KEY msg
00:23:21: SSH0: SSH_CMSG_SESSION_KEY msg - length 112, type 0x03
42-1
Chapter 42 SSH Terminal Service Configuration Comm
3Com Switch 8800 Command Reference Guide
00:23:21: SSH: RSA decrypt started ands
00:23:21: SSH: RSA decrypt finished
00:23:21: SSH: RSA decrypt started
00:23:21: SSH: RSA decrypt finished
42.1.2 display rsa local-key-pair public
Syntax display rsa local-key-pair public
View
Any view
Parameter
None
Description
Use the display rsa local-key-pair public command to display the public key of the server’s host key pair and server key pair. If no key has been created, you will see a prompt like this: RSA keys not found.
Related command: rsa local-key-pair create.
Example
Display the public key of the server’s host key pair and server key pair.
<SW8800> display rsa local-key-pair public
% Key pair was generated at: 12:26:33 UTC 2002/4/4
Key name: rtvrp_Host
Usage: Encryption Key
Key Data:
30470240 AF7DB1D0 DA78944F 53B7B59B 40D425D0 DC9C57D2 A60916C2 1F165807
08B84DDB 5F4DB8E7 A115B74E 2D41D96C AC61D276 AA027E41 DD48DE64 696E0934
EB872805 02030100 01
% Key pair was generated at: 12:26:45 UTC 2002/4/4
Key name: rtvrp_Server
Usage: Encryption Key
Key Data:
30670260 C05280D9 BA0D56C8 7BE43379 8634CDE7 83ABA9A2 3F36280E 25995487
4FF6AD7A 0E57871C 761E6D92 9914D8C5 CC577388 5B580B94 C2172C8F 36039EED
160A0478 651DED3A 9CCF1AAD D800AAF2 DF7FBEC4 A13ADA59 9E738319 AF366B8B
519D39F5 02030100 01
42-2
3Com Switch 8800 Command Reference Guide
42.1.3 display rsa peer-public-key
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
display rsa peer-public-key [ brief | name keyname ]
View
Any view
Parameter
brief: Displays the brief information about all client public keys.
keyname: Specifies the public key name of the client to be displayed. The key name is a consecutive string whose length ranges from 1 to 64 characters.
Description
Use the display rsa peer-public-key command to display the public key of RSA key pair specified by the client. If you do not specify the keyname argument, all public keys will be displayed.
Related command: rsa local-key-pair create.
Example
Display information about public keys of all clients.
<SW8800> display rsa peer-public-key
Address Bits Name
1023 abcd
1024 hq
1024 wn1
1024 hq_all
Display information about the public key of the client named abcd.
<SW8800> display rsa peer-public-key name abcd
Key name:abcd
Key address:
Data:
30818602 8180739A 291ABDA7 04F5D93D C8FDF84C 42746319 91C164B0 DF178C55
FA833591 C7D47D53 81D09CE8 2913D7ED F9C08511 D83CA4ED 2B30B809 808EB0D1
F52D045D E40861B7 4A0E1355 23CCD74C AC61F8E5 8C452B2F 3F2DA0DC C48E3306
367FE187 BDD94401 8B3B69F3 CBB0A573 202C16BB 2FC1ACF3 EC8F828D 55A36F1C
DDC4BB45 504F0201 25
42-3
3Com Switch 8800 Command Reference Guide
42.1.4 display ssh server
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
display ssh server { status | session }
View
Any view
Parameter
Description
Use the display ssh server command to display the status information or session information of an SSH server.
Related command: ssh server authentication-retries, ssh server rekey-interval,
ssh server timeout.
Example
status: Displays the SSH status information.
session: Displays the SSH session information.
Display the status information of the SSH server.
[SW8800] display ssh server status
SSH - version 2.0
SSH connection timeout: 60 seconds
SSH Authentication retries: 3 times
SFTP Server state: Disable
Display the session information of the SSH server.
[SW8800] display ssh server session
Connection Version Encryption State Username
VTY0 2.0 3DES Session started SW8800
VTY3 1.5 DES Session started switch
42.1.5 display ssh user-information
Syntax
display ssh user-information [ username ]
View
Any view
Parameter
username: Valid SSH username.
42-4
3Com Switch 8800 Command Reference Guide
Description
Chapter 42 SSH Terminal Service Configuration Comm ands
Use the display ssh user-information command to display information about the current SSH user, including username, peer key name, authentication mode and the types of authorized services. If you specify the argument username in the command, the user information about the specified username will be displayed.
Related command: ssh user username assign rsa-key, ssh user username
authentication-type, ssh user username service-type.
Example
Display the current user information.
[SW8800] display ssh user-information
Username user-public-key-name authentication-type service-type
42.1.6 peer-public-key end
Syntax peer-public-key end
View
Public key view
Parameter
None
Description
Use the peer-public-key end command to exit from the public key view and return to the system view.
Related command: rsa peer-public-key, public-key-code begin.
Example
Exit the public key view and save the configuration.
[SW8800] rsa peer-public-key SW8800003
[SW8800-rsa-public-key] peer-public-key end
[SW8800]
42-5
3Com Switch 8800 Command Reference Guide
42.1.7 protocol inbound
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
protocol inbound { all | pad | ssh | telnet }
View
VTY user interface view
Parameter
all: Supports all protocols, including Telnet and SSH.
ssh: Supports the SSH protocol only, and does not support the Telnet protocol.
telnet: Supports the Telnet protocol only, and does not support the SSH protocol.
Description
Use the protocol inbound command to specify the protocol supported by the current user interface.
By default, all protocols are supported.
This configuration takes effect at the next login. Note that after enabling SSH by this command, you still cannot log in through SSH if the client RSA key is not configured.
Caution:
z z
If the supported protocol configured in the user interface is SSH, make sure to configure the corresponding authentication mode to authentication-mode scheme
(using AAA authentication mode).
If the authentication mode is configured as authentication-mode password or
authentication-mode none, the configuration of protocol inbound ssh will fail; contrarily, if a user interface is configured to support the SSH protocol, you will fail to configure authentication-mode password and authentication-mode none.
Related command: user-interface vty.
Example
Set VTY 0 to 4 to support the SSH protocol only.
[SW8800] user-interface vty 0 4
[SW8800-ui-vty0-4] protocol inbound ssh
Disable the Telnet function of VTY 0 and make it support SSH only.
[SW8800] user-interface vty 0
42-6
Chapter 42 SSH Terminal Service Configuration Comm
3Com Switch 8800 Command Reference Guide
[SW8800-ui-vty0] protocol inbound ssh ands
42.1.8 public-key-code begin
Syntax public-key-code begin
View
Public key view
Parameter
None
Description
Use the public-key-code begin command to enter the public key edit view and input the public key of the client. Note that you must use the rsa peer-public-key command to specify a client key name before performing this command.
When inputting the public key, you may type spaces between the characters (the system will delete the spaces automatically), or press <Enter> and then continue to input the key. Note that the public key must be a hexadecimal string coded in the public key format and is randomly generated by the SSH 2.0-enabled client software or the client switch.
Related command: rsa peer-public-key, public-key-code end.
Example
Enter the public key edit view and input the key.
[SW8800] rsa peer-public-key SW8800003
[SW8800-rsa-public-key] public-key-code begin
[SW8800-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463
[SW8800-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913
[SW8800-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4
[SW8800-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC
[SW8800-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16
[SW8800-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125
[SW8800-key-code] public-key-code end
[SW8800-rsa-public-key]
42.1.9 public-key-code end
Syntax public-key-code end
42-7
3Com Switch 8800 Command Reference Guide
View
Public key edit view
Parameter
Chapter 42 SSH Terminal Service Configuration Comm ands
None
Description
Use the public-key-code end command to return from the public key edit view to the public key view and save the public key entered.
After this command is performed to end the public key edit procedure, the system will check the validity of the key before saving the input public key. If the public key string contains any illegal character, the system will prompt the failure of the configuration and the configured key will be discarded; otherwise, the key is valid and will be saved to the user public key list.
Related command: rsa peer-public-key, public-key-code begin.
Example
Exit the public key edit view and save the configured public key.
[SW8800-rsa-key-code] public-key-code end
[SW8800-rsa-public-key]
42.1.10 rsa local-key-pair create
Syntax rsa local-key-pair create
View
System view
Parameter
None
Description
Use the rsa local-key-pair create command to generate the RSA key pair (including the host key and server key) of the server. The naming conventions for the keys are
switch name + host and switch name + server respectively, for example, SW8800_host,
SW8800_server.
When configuring by this command, if the RSA key pair already exists, you will get a warning asking if you want to replace the existing one. Note that the host key and the server key must have a difference of 128 bits at least, and that the minimum and maximum lengths for the host key and the server key are 512 bits and 2048 bits .
42-8
3Com Switch 8800 Command Reference Guide
Chapter 42 SSH Terminal Service Configuration Comm ands
Generating the RSA key pair of the server is the first step to perform after SSH login. It needs to be performed only once; you need not re-perform it after rebooting the switch.
Related command: rsa local-key-pair destroy.
Example
Generate the local RSA key pair.
[SW8800] rsa local-key-pair create
The name for the keys will be: rtvrp_Host
% You already have RSA keys defined for rtvrp_Host
% Do you really want to replace them? [yes/no]:y
Choose the size of the key modulus in the range of 512 to 2048 for your Keys.
Choosing a key modulus greater than 512 may take a few minutes.
How many bits in the modulus [512]:512
Generating keys...
.....++++++++++++
........................++++++++++++
..........++++++++
............................++++++++
42.1.11 rsa local-key-pair destroy
Syntax rsa local-key-pair destroy
View
System view
Parameter
None
Description
Use the rsa local-key-pair destroy command to destroy all the RSA key pairs of the server, including the host keys and server keys.
Related command: rsa local-key-pair create.
Example
Destroy all the RSA keys of the server.
[SW8800] rsa local-key-pair destroy
% Keys to be removed are named rtvrp_Host .
% Do you really want to remove these keys? [yes/no]:y
42-9
3Com Switch 8800 Command Reference Guide
42.1.12 rsa peer-public-key
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
rsa peer-public-key key-name
View
System view
Parameter
key-name: Name of the public key of the client. It is a consecutive string whose length ranges from 1 to 64 characters.
Description
Use the rsa peer-public-key command to enter the public key view.
Performing this command, you can enter the public key view. Then you can use the
public-key-code begin command to configure the client public key on the server. The client public key is generated randomly by the SSH 2.0-enabled client software.
Related command: public-key-code begin, public-key-code end.
Example
Enter the public key view named SW8800002.
[SW8800] rsa peer-public-key SW8800002
[SW8800-rsa-public-key]
42.1.13 ssh server authentication-retries
Syntax
ssh server authentication-retries times
undo ssh server authentication-retries
View
System view
Parameter
times: Number of authentication retries, in the range from 1 to 5. By default, the value is
3.
Description
Use the ssh server authentication-retries command to set the number of SSH connection authentication retries.
42-10
3Com Switch 8800 Command Reference Guide
Chapter 42 SSH Terminal Service Configuration Comm ands
Use the ssh server authentication-retries command to restore the default number of
SSH connection authentication retries.
Related command: display ssh server.
Example
Specify the number of login authentication retries to 4.
[SW8800] ssh server authentication-retries 4
42.1.14 ssh server compatible_ssh1x enable
Syntax ssh server compatible_ssh1x enable undo ssh server compatible_ssh1x
View
System view
Parameter
None
Description
Use the ssh server compatible_ssh1x enable command to make the server compatible with the SSH 1.x client.
Use the undo ssh server compatible_ssh1x command to make the server not compatible with an SSH 1.x client.
By default, the server is compatible with the SSH 1.x client.
Example
Set the server to be compatible with the SSH 1.x client.
[SW8800] ssh server compatible_ssh1x enable
42.1.15 ssh server rekey-interval
Syntax
ssh server rekey-interval hours
undo ssh server rekey-interval
View
System view
42-11
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 42 SSH Terminal Service Configuration Comm ands
hours: Update interval of the server key, in range of 1 to 24 (hours). It cannot be 0.
Description
Use the ssh server rekey-interval command to set update interval of the server key.
Use the undo ssh server rekey-interval command to remove the configuration.
By default, the system does not update the server key.
Related command: display ssh server
Example
Set to update the server key every three hours.
[SW8800] ssh server rekey-interval 3
42.1.16 ssh server timeout
Syntax
ssh server timeout seconds
undo ssh server timeout
View
System view
Parameter
seconds: Specifies the login timeout (in seconds), in the range from 1 to 120. By default, the value is 60.
Description
Use the ssh server timeout command to set the authentication timeout of SSH connections.
Use the undo ssh server timeout command to restore the default SSH authentication timeout.
The configuration takes effect at the next login.
Related command: display ssh server.
Example
Set the login timeout to 80 seconds.
[SW8800] ssh server timeout 80
42-12
3Com Switch 8800 Command Reference Guide
42.1.17 ssh user assign rsa-key
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
ssh user username assign rsa-key keyname
undo ssh user username assign rsa-key
View
System view
Parameter
Description
Use the ssh user assign rsa-key command to assign an existing public key for the specified SSH user.
Use the undo ssh user assign rsa-key command to cancel the corresponding relationship between the user and the public key.
The new public key takes effect at the next login.
If a public key already exists before this command is performed, the newly configured key takes effect.
Related command: display ssh user-information.
Example
keyname: Name of the client public key. It is a consecutive string whose length ranges from 1 to 64 characters.
username: Valid SSH username. It is a consecutive string whose length ranges from 1 to 80 characters.
Assign public key1 for user zhangsan.
[SW8800] ssh user zhangsan assign rsa-key key1
42.1.18 ssh user authentication-type
Syntax
ssh user username authentication-type { password | rsa | password-publickey |
all }
undo ssh user username authentication-type
View
System view
42-13
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 42 SSH Terminal Service Configuration Comm ands
password: Forces the user’s authentication mode to password authentication.
rsa: Forces the user’s authentication mode to RSA public key authentication.
password-publickey: Forces the user’s authentication mode to password authentication plus RSA public key authentication.
all: Specifies that the user’s authentication mode can be either password authentication or public authentication.
Description
Use the ssh user authentication-type command to specify an authentication mode for a user.
Use the undo ssh user authentication-type command to restore the default unable-to-login mode.
The new authentication mode takes effect at the next login.
By default, no login authentication mode is specified, that is, SSH users are unable to login.
For a new user, you must specify an authentication mode; otherwise, the new user will not be able to log in.
Related command: display ssh user-information.
Example
Specify the authentication mode of user zhangsan to password authentication.
[SW8800] ssh user zhangsan authentication-type password
42.2 SSH Client Configuration Commands
42.2.1 display ssh server-info
Syntax display ssh server-info
View
Any view
Parameter
None
42-14
3Com Switch 8800 Command Reference Guide
Description
Chapter 42 SSH Terminal Service Configuration Comm ands
Use the display ssh server-info command to view the corresponding relationship between the client’s servers and public keys.
Example
Display the corresponding relationship between the client’s servers and public keys.
[SW8800] display ssh server-info
ServerIP public-key-name
192.168.0.1 3Com_key01
192.168.0.2 3Com_key02
42.2.2 quit
Syntax quit
View
User view
Parameter
None
Description
Use the quit command to terminate the connection with the remote SSH server.
Example
Terminate the connection with the remote SSH server.
<SW8800> quit
42.2.3 ssh client assign rsa-key
Syntax
ssh client server-ip assign rsa-key keyname
undo ssh client server-ip assign rsa-key
View
Parameter
System view
server-ip: IP address of the server.
keyname: Public key name of the client.
42-15
3Com Switch 8800 Command Reference Guide
Description
Chapter 42 SSH Terminal Service Configuration Comm ands
Use the ssh client assign rsa-key command to specify the IP address and the corresponding public key name of the server on the client.
Use the undo ssh client assign rsa-key command to cancel the configuration.
Example
Specify the public key of a server with IP address 192.168.0.1 on the client to serverkey01.
[SW8800] ssh client 192.168.0.1 assign rsa-key serverkey01
42.2.4 ssh client first-time enable
Syntax ssh client first-time enable
undo client ssh first-time
View
System view
Parameter
None
Description
Use the ssh client first-time enable command to set the SSH client to perform the first-time authentication of the SSH server to be accessed.
Use the undo ssh client first-time command to cancel the first-time authentication.
The first-time authentication means that when the SSH client accesses the server for the first time in the case that there is no local copy of the server’s public key, the user can proceed to access the server and save a local copy of the server’s public key; when the client accesses the server next time, it uses the saved public key to authenticate the server.
If the first-time authentication is not supported, when there is no local copy of the public key of the connected server, the client assumes that the server is illegal and will refuse to access the server. The user can save a copy of the server’s public key locally by other means beforehand.
By default, the client does not perform the first-time authentication.
Example
Set the SSH client to perform the first-time authentication of the SSH server to be accessed.
42-16
Chapter 42 SSH Terminal Service Configuration Comm
3Com Switch 8800 Command Reference Guide
[SW8800] ssh client first-time enable ands
42.2.5 ssh2
Syntax
ssh2 { host-ip | host-name } [ port-num ] [ prefer_kex { dh_group1 |
dh_exchange_group } ] [ prefer_ctos_cipher { des | 3des | aes128 } ]
[ prefer_stoc_cipher { des | 3des | aes128 } ] [ prefer_ctos_hmac { sha1 | sha1_96 |
md5 | md5_96 } ] [ prefer_stoc_hmac { sha1 | sha1_96 | md5 | md5_96 } ]
View
System view
Parameter
host-ip: IP address of the server.
host-name: Server name, a string with 1 to 20 characters.
port-num: Server port number, ranges from 0 to 65535, and defaults to 22.
prefer_kex: Preferred key exchange algorithm, which can be one of the two algorithms.
dh_group1: Key exchange algorithm diffie-hellman-group1-sha1, which is the default algorithm.
dh_exchange_group: Key exchange algorithm diffie-hellman-group-exchange-sha1.
prefer_ctos_cipher: Preferred encryption algorithm from the client to the server. The default algorithm is aes128.
prefer_stoc_cipher: Preferred encryption algorithm from the server to the client. The default algorithm is aes128.
des: Encryption algorithm des_cbc.
3des: Encryption algorithm 3des_cbc.
aes128: Encryption algorithm aes_128.
prefer_ctos_hmac: Preferred HMAC algorithm from the client to the server. The default algorithm is sha1_96.
prefer_stoc_hmac: Preferred HMAC algorithm from the server to the client. The default algorithm is sha1_96.
sha1: HMAC algorithm hmac-sha1.
sha1_96: HMAC algorithm hmac-sha1-96.
md5: HMAC algorithm hmac-md5.
md5_96: HMAC algorithm hmac-md5-96.
42-17
3Com Switch 8800 Command Reference Guide
Description
Chapter 42 SSH Terminal Service Configuration Comm ands
Use the ssh2 command to enable the connection between the SSH client and the server, and specify the preferred key exchange algorithm, encryption algorithm and
HMAC algorithm of the client and the server.
Example
Log in to remote SSH2 server with IP address 10.214.50.51, and configure encryption algorithms as follows: z z z z
Preferred key exchange algorithm: dh_exchange_group
Preferred encryption algorithm from the client to the server: 3DES-CBC
Preferred HMAC algorithm from the client to the server: HMAC-MD5
Preferred encryption algorithm from the server to the client: AES-128 z
Preferred HMAC algorithm from the server to the client: HMAC-SHA1-96
[SW8800] ssh2 10.214.50.51 prefer_kex dh_exchange_group prefer_ctos_cipher
3des prefer_ctos_hmac md5
42.3 SFTP Server Configuration Commands
42.3.1 sftp server enable
Syntax
View
System view
Parameter
None
Description
Use the sftp server enable command to start the SFTP server.
Use the undo sftp server enable command to shutdown the SFTP server.
By default, the SFTP server is shutdown.
Example
sftp server enable
undo sftp server
Start the SFTP server.
[SW8800] sftp-server enable
Shutdown the SFTP server.
[SW8800] undo sftp-server enable
42-18
3Com Switch 8800 Command Reference Guide
42.3.2 ssh user service-type
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
ssh user username service-type { telnet | sftp | all }
undo ssh user username service-type
View
System view
Parameter
Description
Use the ssh user service-type command to specify the service type for a particular user.
Use the undo ssh user service-type command to restore the default service type.
By default, the service type is telnet.
Related command: display ssh user-information.
Example
username: Local username or username defined by the remote RADIUS server.
telnet: Specifies the service type as Telnet.
sftp: Specifies the service type as SFTP.
all: Includes both Telnet and SFTP service types.
Specify the service type to be SFTP for user zhangsan.
[SW8800] ssh user zhangsan service-type sftp
42.4 SFTP Client Configuration Commands
42.4.1 bye
Syntax bye
View
Parameter
SFTP client view
None
42-19
3Com Switch 8800 Command Reference Guide
Description
Chapter 42 SSH Terminal Service Configuration Comm ands
Use the bye command to terminate the connection with the remote SFTP server and return to the user view.
This command has the same functionality as the exit and quit commands.
Example
Terminate the connection with the remote SFTP server. sftp-client> bye
<SW8800>
42.4.2 cd
Syntax
cd [remote-path ]
View
SFTP client view
Parameter
remote-path: Name of a path on the server.
Description
Use the cd command to change the current path on the SFTP server. If you do not specify the remote-path argument, the current path will be displayed.
Example
Change the current path to d:/temp. sftp-client> cd d:/temp
42.4.3 cdup
Syntax cdup
View
SFTP client view
Parameter
None
42-20
3Com Switch 8800 Command Reference Guide
Description
Chapter 42 SSH Terminal Service Configuration Comm ands
Use the cdup command to change the current path to its upper directory.
Example
Change the current path to its upper directory. sftp-client> cdup
42.4.4 delete
Syntax
delete remote-file
View
SFTP client view
Parameter
remote-file: Name of a file on the server.
Description
Use the delete command to delete the specified file from the server.
This command has the same functionality as the remove command.
Example
Delete file temp.c from the server. sftp-client> delete temp.c
42.4.5 dir
Syntax
dir [remote-path ]
View
SFTP client view
Parameter
remote-path: Name of the directory to view.
Description
Use the dir command to view the files in the specified directory.
If the remote-path argument is not specified, the files in the current directory will be displayed.
42-21
3Com Switch 8800 Command Reference Guide
Chapter 42 SSH Terminal Service Configuration Comm ands
This command has the same functionality as the ls command.
Example
View directory flash:/ sftp-client> dir flash:/
-rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 vrpcfg.cfg
-rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2
-rwxrwxrwx 1 noone nogroup 283 Aug 24 07:39 pubkey1
-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:28 pub1 drwxrwxrwx 1 noone nogroup 0 Sep 28 08:24 new1 drwxrwxrwx 1 noone nogroup 0 Sep 28 08:18 new2
-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:30 pub2
42.4.6 exit
Syntax exit
View
SFTP client view
Parameter
None
Description
Use the exit command to terminate the connection with the remote SFTP server and return to the user view.
This command has the same functionality as the bye and quit commands.
Example
Terminate the connection with the remote SFTP server. sftp-client> exit
<SW8800>
42.4.7 get
Syntax
get remote-file [ local-file ]
View
SFTP client view
42-22
3Com Switch 8800 Command Reference Guide
Parameter
Chapter 42 SSH Terminal Service Configuration Comm ands
remote-file: Name of a file on the remote SFTP server.
local-file: Name of a local file.
Description
Use the get command to download a file from the remote server and save it locally.
By default, if no local file name is specified, it is assumed that the local file has the same name as the file on the SFTP server.
Example
Download file temp1.c and save it with name temp.c. sftp-client> get temp1.c temp.c
42.4.8 help
Syntax
help [ command ]
View
SFTP client view
Parameter
command: Name of a command.
Description
Use the help command to view the help information for SFTP client commands.
If the command argument is not specified, all command names will be displayed.
Example
View the help information for the get command. sftp-client> help get get remote-path [local-path] Download file
Default local-path is the same with remote-path
42.4.9 ls
Syntax
ls [ remote-path ]
42-23
3Com Switch 8800 Command Reference Guide
View
SFTP client view
Parameter
Chapter 42 SSH Terminal Service Configuration Comm ands
remote-path: Name of the directory to view.
Description
Use the ls command to view the files in the specified directory.
If the remote-path argument is not specified, the files in the current directory will be displayed.
This command has the same functionality as the dir command.
Example
View directory flash:/ sftp-client> ls flash:/
-rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 vrpcfg.cfg
-rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2
-rwxrwxrwx 1 noone nogroup 283 Aug 24 07:39 pubkey1
-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:28 pub1 drwxrwxrwx 1 noone nogroup 0 Sep 28 08:24 new1 drwxrwxrwx 1 noone nogroup 0 Sep 28 08:18 new2
-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:30 pub2
42.4.10 mkdir
Syntax
mkdir remote-path
View
SFTP client view
Parameter
remote-path: Name of a directory on the remote SFTP server.
Description
Use the mkdir command to create a directory on the remote SFTP server.
Example
Create directory test on the remote SFTP server. sftp-client> mkdir test
42-24
3Com Switch 8800 Command Reference Guide
42.4.11 put
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
put local-file [ remote-file ]
View
SFTP client view
Parameter
local-file: Name of a local file.
remote-file: Name of a file on the remote SFTP server.
Description
Use the put command to upload a local file to the remote SFTP server.
By default, if no name of the file on the remote server is specified, it is assumed that the file on the remote server has the same name as the local file.
Example
Upload local file temp.c to the remote SFTP server and save it with the name temp1.c. sftp-client> put temp.c temp1.c
42.4.12 pwd
Syntax pwd
View
SFTP client view
Parameter
None
Description
Use the pwd command to display the current directory on the SFTP server.
Example
Display the current directory on the SFTP server. sftp-client> pwd flash:
42-25
3Com Switch 8800 Command Reference Guide
42.4.13 quit
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax quit
View
SFTP client view
Parameter
None
Description
Use the quit command to terminate the connection with the remote SFTP server and return to the user view.
This command has the same functionality as the bye and exit commands.
Example
Terminate the connection with the remote SFTP server. sftp-client> quit
<SW8800>
42.4.14 remove
Syntax
remove remote-file
View
SFTP client view
Parameter
remote-file: Name of a file on the server.
Description
Use the remove command to delete the specified file from the server.
This command has the same functionality as the delete command.
Example
Delete the file temp.c from the server. sftp-client> delete temp.c
42-26
3Com Switch 8800 Command Reference Guide
42.4.15 rename
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
rename oldname newname
View
SFTP client view
Parameter
oldname: Original file name.
newname: New file name.
Description
Use the rename command to change the name of the specified file on the SFTP server.
Example
Change the name of the file temp1 on the SFTP server to temp2. sftp-client> rename temp1 temp2
42.4.16 rmdir
Syntax
rmdir remote-path
View
SFTP client view
Parameter
remote-path: Name of a directory on the remote SFTP server.
Description
Use the rmdir command to delete the specified directory from the SFTP server.
Example
Delete the directory D:/temp1 from the SFTP server. sftp-client> rmdir D:/temp1
42-27
3Com Switch 8800 Command Reference Guide
42.4.17 sftp
Chapter 42 SSH Terminal Service Configuration Comm ands
Syntax
sftp ipaddr [ prefer_kex { dh_group1 | dh_exchange_group } ] [ prefer_ctos_cipher
{ des | 3des | aes128 } ] [ prefer_stoc_cipher { des | 3des | aes128 } ]
[ prefer_ctos_hmac { sha1 | sha1_96 | md5 | md5_96 } ] [ prefer_stoc_hmac { sha1
| sha1_96 | md5 | md5_96 } ]
View
System view
Parameter
ipaddr: IP address of the server.
prefer_kex: Preferred key exchange algorithm, which can be either diffie-hellman-group1-sha1 or diffie-hellman-group-exchange-sha1.
dh_group1: Key exchange algorithm diffie-hellman-group1-sha1, which is default algorithm.
dh_exchange_group: Key exchange algorithm diffie-hellman-group-exchange-sha1.
prefer_ctos_cipher: Preferred encryption algorithm from the client to the server. The default algorithm is aes128.
prefer_stoc_cipher: Preferred encryption algorithm from the server to the client. The default algorithm is aes128.
des: Encryption algorithm des_cbc.
3des: Encryption algorithm 3des_cbc.
aes128: Encryption algorithm aes_128.
prefer_ctos_hmac: Preferred HMAC algorithm from the client to the server. The default algorithm is sha1_96.
prefer_stoc_hmac: Preferred HMAC algorithm from the server to the client. The default algorithm is sha1_96.
sha1: HMAC algorithm hmac-sha1.
sha1_96: HMAC algorithm hmac-sha1-96.
md5: HMAC algorithm hmac-md5.
md5_96: HMAC algorithm hmac-md5-96.
Description
Use the sftp command to establish the connection with the remote SFTP server and enter the SFTP client view.
42-28
3Com Switch 8800 Command Reference Guide
Example
Chapter 42 SSH Terminal Service Configuration Comm ands
Connect to the SFTP server with IP address 10.214.49.126 using the default encryption algorithm.
[SW8800] sftp 10.214.49.126
42-29
3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands
Chapter 43 PoE Configuration Commands
43.1 PoE Configuration Commands
43.1.1 display poe interface
Syntax
display poe interface { interface-name | interface-type interface-num }
View
Any view
Parameter
Description
Use the display poe interface{ interface-name | interface-type interface-num } command to display the PoE status of a specific port on the switch.
Use the display poe interface command without any option to display the PoE status of all the PoE-capable ports on the switch.
Example
interface-name | interface-type interface-num: Port on the switch; refer to Command
Manual – Port for details.
Display the PoE status of the port GigabitEthernet3/1/1.
<SW8800> display poe interface GigabitEthernet3/1/1
Port power status :delivering
Port power mode :signal
Port PD class :2 port power priority :high
Port max power :16800 mW
Port current power :552 mW
Port remaining power :16248 mW
Port average power :717 mW
Port peak power :1196 mW
Port current :13 mA
Port voltage :53.7 V
43-1
3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands
Table 43-1 Description on the fields of the display poe interface command
Field
Port power status
Port power mode
Description
PoE status of the port:
1) disabled: PoE is disabled on the port.
2) searching: the port is searching for a PD.
3) delivering: the port is supplying power to the PD.
4) PD disconnected: the port is not connected with a
PD.
5) testing: the port is in testing.
6) fault: the port detected an nonstandard or fault PD.
PoE mode of the port:
1) auto: the system automatically selects the PoE mode.
2) signal
3) spare
The class of the power the port supplies to the PD Port PD class
Port power priority
Port priority:
1) critical (the highest)
2) high
3) low
Maximum power on the port Port max power
Port current power
Port average power
Port peak power
Port current
Port voltage
Present power on the port
Average power on the port
Peak power on the port
Present current on the port
Present voltage on the port
Port remaining power Remaining power on the port
43.1.2 display poe interface power
Syntax
display poe interface power { interface-name | interface-type interface-num }
View
Any view
Parameter
interface-name | interface-type interface-num: Port on the switch; refer to Command
Manual – Port for details.
43-2
3Com Switch 8800 Command Reference Guide
Description
Chapter 43 PoE Configuration Commands
Use the display poe interface power command to display the PoE power information of a specific port or all ports on the switch.
Example
Display the power information of the port GigabitEthernet3/1/1.
<SW8800> display poe interface power GigabitEthernet3/1/1
Port power :700 mW
43.1.3 display poe pse
Syntax
display poe pse
View
Any view
Parameter
None
Description
Use the display poe pse command to display the parameters of all the PoE cards in the switch that serve as a power sourcing equipment (PSE).
Example
Display the parameters of all the PoE cards in the switch.
<SW8800> display poe pse
PSE Information of board 6:
Power Current Value :67 W
Power Remaining Value :738 W
Power Max Value :806 W
Power Peak Value :1 W
Power Average Value :0 W
Software Version :290
Hardware Version :000
CPLD Version :021
Table 43-2 Description on the fields of the display poe pse command
Field
Power Current Value
Power Remaining Value
Description
Current power of the card
Remaining power of the card
43-3
3Com Switch 8800 Command Reference Guide
Power Max Value
Power Peak Value
Power Average Value
Software Version
Hardware Version
43.1.4 display poe slot
Chapter 43 PoE Configuration Commands
Maximum power of the card
Peak power of the card
Average power of the card
PSE software version
PSE hardware version
Syntax
display poe slot slotnum
View
Any view
Parameter
slotnum: Slot number of a PoE card
Description
Use the display poe slot slotnum command to display the information of a PoE card in the switch.
Example
Display the information of the PoE card in slot 8 of the switch.
[8508] displaypoe slot 8
PSE Information of board 8:
Power Current Value :33 W
Power Remaining Value :772 W
Power Max Value :806 W
Power Peak Value :34 W
Power Average Value :33 W
Software Version :290
Hardware Version :000
43.1.5 poe enable
Syntax poe enable
undo poe enable
43-4
3Com Switch 8800 Command Reference Guide
View
Ethernet port view
Parameter
None
Chapter 43 PoE Configuration Commands
Description
Use the poe enable command to enable the PoE feature on a port.
Use the undo poe enable command to disable the PoE feature on a port.
By default, PoE is disabled on port.
Example
Enable PoE on current port.
[SW8800-GigabitEthernet3/1/1] poe enable
Disable PoE on current port.
[SW8800-GigabitEthernet3/1/1] undo poe enable
43.1.6 poe max-power
Syntax
poe max-power max-power
undo poe max-power
View
Ethernet port view
Parameter
Description
Use the poe max-power command to set the maximum PoE power on the current port.
Use the undo poe max-power command to restore the default PoE power on current port.
By default, the maximum PoE power on a port is 16800 mW.
Example
max-power: Maximum power distributed to the port, ranging from 3000 mW to 16800 mW.
Set the maximum PoE power on current port to 12000 mW.
[SW8800-GigabitEthernet3/1/1] poe max-power 12000
43-5
3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands
Restore the default PoE power on current port.
[SW8800-GigabitEthernet3/1/1] undo poe max-power
43.1.7 poe max-power slot
Syntax
poe max-power max-power slot slot-num
undo poe max-power slot slot-num
View
System view
Parameter
max-power: Maximum power distributed to the card, ranging from 37 W to 806 W.
slot-num: Slot number of a card.
Description
Use the poe max-power command to set the maximum power on a card.
Use the undo poe max-power command to restore the default maximum power on the card.
By default, the maximum power on a card is 806 W.
Example
Set the maximum power on the card in slot 3 to 400 W.
[SW8800] poe max-power 400 slot 3
Restore the default maximum power on the card.
[SW8800] undo poe max-power slot 3
43.1.8 poe mode
Syntax
poe mode { signal | spare | auto }
undo poe mode
View
Ethernet port view
Parameter
signal: The port supplies power through signal lines.
spare: The port supplies power through spare lines.
43-6
3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands
auto: The port supplies power in automatically selected mode.
Description
Use the poe mode command to configure the PoE mode on the current port.
Use the undo poe mode command to restore the default PoE mode on current port.
By default, the port adopts signal lines to supply power.
Caution:
The Switch 8800 does not support the spare mode. If a PD only supports the spare mode, a conversion will be needed.
Example
Configure the PoE mode on current port to signal.
[SW8800-GigabitEthernet3/1/1] poe mode signal
43.1.9 poe priority
Syntax
poe priority { critical | high | low }
undo poe priority
View
Ethernet port view
Parameter
critical: Sets the port priority to critical (the highest).
high: Sets the port priority to high.
low: Sets the port priority to low.
Description
Use the poe priority command to set the PoE priority on a port.
Use the undo poe priority command to restore the default priority.
By default, the PoE priority on each port is low.
43-7
3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands
Caution:
When the PoE power of the switch is not enough to support all the port, the switch supplies power to ports with higher priority, and powers down some ports with lower priority.
Example
Set the PoE priority of current port to critical.
[SW8800-GigabitEthernet3/1/1] poe priority critical
Restore the default priority.
[SW8800-GigabitEthernet3/1/1] undo poe priority
43-8
3Com Switch 8800 Command Reference Guide Chapter 44 PoE PSU Supervision Commands
Chapter 44 PoE PSU Supervision Commands
44.1 PoE PSU Supervision Display Commands
44.1.1 display poe-power ac-input state
Syntax display poe-power ac-input state
View
Any view
Parameter
None
Description
Use the display poe-power ac-input state command to display the AC input state of each power supply unit (PSU).
Example
Display the AC input state of each PSU.
<SW8800> display poe-power ac-input state
PSU 1 AC Input State : Lack Phase
PSU 2 AC Input State : Normal
PSU 3 AC Input State : Lack Phase
Table 44-1 Description on the fields of the display poe-power ac-input state command
NORMAL
Under Limit
Upper Limit
Lack Phase
Fuse Broken
Switch Off
Field Description
The AC input is normal.
The AC input is below the lower threshold.
The AC input is above the upper threshold.
The AC input is lack of phase.
The fuse is blown.
The switch is off.
44-1
3Com Switch 8800 Command Reference Guide
44.1.2 display poe-power alarm
Chapter 44 PoE PSU Supervision Commands
Syntax display poe-power alarm
View
Any view
Parameter
None
Description
Use the display poe-power alarm command to display detailed alarm information about the PoE PSUs.
Example
Display detailed alarm information about the PoE PSUs.
<SW8800> display poe-power alarm
PSU alarm detail, PSU number : 2
PSU 1 alarm : NORMAL
PSU 2 alarm : NOTLINK Controller/Rectifer communication Fail/Rectifier not in present
Table 44-2 Description on the fields of the display poe-power alarm command
Field
NORMAL Normal
NOTLINK
INERROR
Description
The PSU is disconnected. That is, the controller was able to communicate with the PSU; but it cannot now. Power-cycling the unit or re-inserting a new PSU can resolve this problem.
The PSU input is in trouble. Restoring the AC input can resolve this problem.
OUTERROR
HIGHVOL
HIGHTEP
FANERROR
CLOSE
CURLIMIT
The PSU output is in trouble, the PSU cannot output normal DC voltage.
The PSU is over-voltage. The PSU is shut down because the output voltage is too high.
It is overheated in the PSU.
The PSU fan is in trouble.
The PSU is shut down remotely.
The PSU is current limited.
44-2
3Com Switch 8800 Command Reference Guide
44.1.3 display poe-power dc-output state
Chapter 44 PoE PSU Supervision Commands
Syntax
display poe-power dc-output state
View
Any view
Parameter
None
Description
Use the display poe-power dc-output state command to display the current DC output state of the PoE PSUs.
Example
Display the current DC output state.
<SW8800> display poe-power dc-output state
DC Output State : Normal
44.1.4 display poe-power dc-output value
Syntax
display poe-power dc-output value
View
Any view
Parameter
None
Description
Use the display poe-power dc-output value command to display the DC output voltage/current value of the PoE PSUs.
Example
Display the DC output voltage/current value of the PoE PSUs.
<SW8800> display poe-power dc-output value
DC Output Voltage : 53.997 V
DC Output Current : 0.000 A
44-3
3Com Switch 8800 Command Reference Guide
44.1.5 display poe-power switch state
Chapter 44 PoE PSU Supervision Commands
Syntax
display poe-power switch state
View
Any view
Parameter
None
Description
Use the display poe-power switch state command to display the number and current state of the AC power distribution switches of the PSUs.
Example
Display the number and current state of the AC power distribution switches.
<SW8800>display poe-power switch state
Switch Number : 0
Table 44-3 Description on the fields of the display poe-power switch state command
On
Off
High Volt Input
Low Volt Input
Field Description
The switch is on.
The switch is off.
The input is high voltage.
The input is low voltage.
44.1.6 display supervision-module information
Syntax
display supervision-module information
View
Any view
Parameter
None
Description
44-4
3Com Switch 8800 Command Reference Guide Chapter 44 PoE PSU Supervision Commands
Use the display supervision-module information command to display the name of the supervision module, power supply model, specifications and output power, and other information.
Example
Display current information about the power system
<SW8800> display supervision-module information
Supervision Module Version : 2.0
Supervision Module Name :Spring Pms
Power Type :PSE4500-A
Power Rating Value : 2250 W (220V)/1125 W(110V)
Power Current Value : 53 W
Power Remaining Value : 2197 W
Power Peak Value : 0 W
Power Average Value : 0 W
PSU Number : 2
PSU 1
Rating Output Power : 2500 W
Hard Version Info :NP 2500
PSU 2
Rating Output Power : 2500 W
Hard Version Info :NP 2500
Table 44-4 Description on the fields of the display supervision-module information command
Field Description
Supervision Module Version Software version of the supervision module
Supervision Module Name Name of the supervision module
Power Type Power type
Power Rating Value
Power Current Value
Power Remaining Value
Power Peak Value
Power Average Value
Rating Output Power
Rated power of the power system
Current consumption power of the power system
Current remaining power of the power system
Peak power of the power system
Average power of the power system
Rated output power. When one or two PSUs are available, it is 2250 W for 220 VAC input and 1125
W for 110 VAC input. When three PSUs are available, it is 4500 W for 220 VAC input and 2250
W for 110 VAC input.
44-5
3Com Switch 8800 Command Reference Guide Chapter 44 PoE PSU Supervision Commands
44.2 PoE PSU Supervision Configuration Commands
44.2.1 poe-power input-thresh lower
Syntax
poe-power input-thresh lower string
View
System view
Parameter
Description
z z
Use the poe-power input-thresh lower command to set the undervoltage alarm threshold of AC input for the PoE PSUs (lower threshold):
For 220 VAC input, it is recommended to set the threshold to 181.0 V.
For 110 VAC input, it is recommended to set the threshold to 90.0 V.
Example
string: Undervoltage alarm threshold. It ranges from 90.00 V to 264.00 V in the format of X.X and within the accuracy of the second decimal.
Set the undervoltage alarm threshold of AC input to 181.0 V.
[SW8800] poe-power input-thresh lower 181.0
Set lower input-threshold power successfully!
44.2.2 poe-power input-thresh upper
Syntax
poe-power input-thresh upper string
View
System view
Parameter
string: Overvoltage alarm threshold. It ranges from 90 V to 264 V in the format of X.X.
Description
z z
Use the poe-power input-thresh upper command to set overvoltage alarm threshold of AC input (upper threshold):
For 220 VAC input, it is recommended to set the threshold to 264.0 V.
For 110 VAC input, it is recommended to set the threshold to 132.0 V.
44-6
3Com Switch 8800 Command Reference Guide
Example
Chapter 44 PoE PSU Supervision Commands
Set the overvoltage alarm threshold of AC input to 264.0 V.
[SW8800] poe-power input upper 264.0
Set upper input-threshold power successfully!
44.2.3 poe-power output-thresh lower
Syntax
poe-power output-thresh lower string
View
System view
Parameter
Description
Use the poe-power output-thresh lower command to set the undervoltage alarm threshold of DC output (lower threshold):
For both 220 VAC and 110 VAC input, it is recommended to set the threshold to 45.00
V.
Example
string: Undervoltage alarm threshold. It ranges from 45.00 V to 47.00 V in the format of x.x.
Set the undervoltage alarm threshold of DC output to 45.00 V.
[SW8800] poe-power output-thresh upper 57.0
Set lower output-threshold power successfully!
44.2.4 poe-power output-thresh upper
Syntax
poe-power output-thresh upper string
View
Parameter
System view
string: Overvoltage alarm threshold. It ranges from 55.00 V to 57.00 V in the format of
X.X.
44-7
3Com Switch 8800 Command Reference Guide
Description
Chapter 44 PoE PSU Supervision Commands
Use the poe-power output-thresh upper command to set the overvoltage alarm threshold of DC output (upper threshold):
For both 220 VAC and 110 VAC input, it is recommended to set the threshold to 57.00
V.
Example
Set the overvoltage alarm threshold of DC output to 57.00V.
[SW8800] poe-power output upper 57.00
Set upper output-threshold power successfully!
44-8
Download
Public link updated
The public link to your chat has been updated. You may view and manage your chat links after registration here.
Document public link
Advertisement
Key features
High-performance Gigabit Ethernet switching
Advanced features such as VLANs, QoS, and security
High density
Scalable design
Easy to manage
Reliable operation
Frequently asked questions
The 3Com Switch 8800 is a high-performance, high-density Gigabit Ethernet switch that offers advanced features such as VLANs, QoS, and security. It can be used in a variety of network applications, such as campus networks, data centers, and service provider networks.
The 3Com Switch 8800 offers a variety of features, including high-performance Gigabit Ethernet switching, advanced features such as VLANs, QoS, and security, high density, scalable design, easy management, and reliable operation.
You can access the command-line interface of the 3Com Switch 8800 by using a telnet or SSH client.
The 3Com Switch 8800 can be configured using a command-line interface or a web-based interface.