3Com 8800 Switch 8800 network switch Command Reference Guide

www.3com.com

Part No. DUA1750-2CAA01

Published: December 2005

3Com Switch 8800

Command Reference Guide

Copyright © 2005, 3Com Corporation. All rights reserved. No part of this documentation may be reproduced in any form or by any means or used to make any derivative work (such as translation, transformation, or adaptation) without written permission from 3Com Corporation.

3Com Corporation reserves the right to revise this documentation and to make changes in content from time to time without obligation on the part of 3Com Corporation to provide notification of such revision or change.

3Com Corporation provides this documentation without warranty, term, or condition of any kind, either implied or expressed, including, but not limited to, the implied warranties, terms or conditions of merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or changes in the product(s) and/or the program(s) described in this documentation at any time.

If there is any software on removable media described in this documentation, it is furnished under a license agreement included with the product as a separate document, in the hard copy documentation, or on the removable media in a directory file named

LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy, please contact 3Com and a copy will be provided to you.

UNITED STATES GOVERNMENT LEGEND

If you are a United States government agency, then this documentation and the software described herein are provided to you

subject to the following:

All technical data and computer software are commercial in nature and developed solely at private expense. Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights only as provided in DFAR 252.227-7015 (Nov 1995) or FAR

52.227-14 (June 1987), whichever is applicable. You agree not to remove or deface any portion of any legend provided on any licensed program or documentation contained in, or delivered to you in conjunction with, this User Guide.

Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not be registered in other countries.

3Com, the 3Com logo, are registered trademarks of 3Com Corporation.

Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows NT are registered trademarks of Microsoft Corporation.

UNIX is a registered trademark in the United States and other countries, licensed exclusively through

X/Open Company, Ltd.

All other company and product names may be trademarks of the respective companies with which they are associated.

3Com Corporation

350 Campus Drive

Marlborough, MA

01752-3064

About This Manual

This manual applies to the 3Com Switch 8800.

Related Manuals

The related manuals are listed in the following table.

Manual

3Com Switch 8800 Switch

Installation Manual

3Com Switch 8800 Switch

Configuration Manual

It provides information for the system installation, booting, hardware/software maintenance & monitoring.

Content

It includes getting started, port, VLAN, network protocols, routing protocols, multicast protocols,

QoS/ACL, MPLS, STP, security, reliability, and system management.

Intended Audience

z z z

The manual is intended for the following readers:

Network engineers

Network administrators

Customers who are familiar with network fundamentals

3

Switch 8800 Command Reference Guide About This Manual

Conventions

The manual uses the following conventions:

I. General conventions

Arial

Convention

Boldface

Courier New

Description

Normal paragraphs are in Arial.

Headings are in Boldface.

Terminal Display is in Courier New.

II. Command conventions

Convention

Boldface

italic

[ ]

{ x | y | ... }

[ x | y | ... ]

{ x | y | ... } *

[ x | y | ... ] *

#

Description

The keywords of a command line are in Boldface.

Command arguments are in italic.

Keywords or arguments in square brackets [ ] are optional.

Alternative items are grouped in braces and separated by vertical bars. One is selected.

Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected.

Alternative items are grouped in braces and separated by vertical bars. A minimum of one or a maximum of all can be selected.

Optional items are grouped in square brackets and separated by vertical bars. Many or none can be selected.

A line starting with the # sign is comments.

III. GUI conventions

Convention

< >

[ ]

/

Description

Button names are inside angle brackets. For example, click the <OK> button.

Window names, menu items, data table and field names are inside square brackets. For example, pop up the [New

User] window.

Multi-level menus are separated by forward slashes. For example, [File/Create/Folder].

4

Switch 8800 Command Reference Guide About This Manual

IV. Keyboard operation

Format

<Key>

<Key1+Key2>

<Key1, Key2>

Description

Press the key with the key name inside angle brackets. For example, <Enter>, <Tab>, <Backspace>, or <A>.

Press the keys concurrently. For example, <Ctrl+Alt+A> means the three keys should be pressed concurrently.

Press the keys in turn. For example, <Alt, A> means the two keys should be pressed in turn.

V. Mouse operation

Action

Select

Click

Double-Click

Drag

Description

Press and hold the primary mouse button (left mouse button by default).

Select and release the primary mouse button without moving the pointer.

Press the primary mouse button twice continuously and quickly without moving the pointer.

Press and hold the primary mouse button and move the pointer to a certain position.

VI. Symbols

Eye-catching symbols are also used in the manual to highlight the points worthy of special attention during the operation. They are defined as follows:

Caution: Means reader be extremely careful during the operation.

Note: Means a complementary description.

5

3Com Switch 8800 Command Reference Guide TOC

Table of Contents

Chapter 1 Logging into Switch Commands................................................................................ 1-1

1.1 Logging into Switch Commands ........................................................................................ 1-1

1.1.1 authentication-mode................................................................................................ 1-1

1.1.2 auto-execute command........................................................................................... 1-1

1.1.3 command-privilege level ......................................................................................... 1-2

1.1.4 databits.................................................................................................................... 1-3

1.1.5 display history-command ........................................................................................ 1-4

1.1.6 display user-interface .............................................................................................. 1-4

1.1.7 display users ........................................................................................................... 1-6

1.1.8 flow-control .............................................................................................................. 1-7

1.1.9 free user-interface ................................................................................................... 1-8

1.1.10 header ................................................................................................................... 1-8

1.1.11 history-command max-size ................................................................................. 1-10

1.1.12 idle-timeout.......................................................................................................... 1-11

1.1.13 language-mode ................................................................................................... 1-11

1.1.14 lock ...................................................................................................................... 1-12

1.1.15 modem ................................................................................................................ 1-12

1.1.16 modem auto-answer ........................................................................................... 1-13

1.1.17 modem timer answer........................................................................................... 1-14

1.1.18 parity.................................................................................................................... 1-14

1.1.19 protocol inbound.................................................................................................. 1-15

1.1.20 quit....................................................................................................................... 1-15

1.1.21 return ................................................................................................................... 1-16

1.1.22 screen-length....................................................................................................... 1-17

1.1.23 send..................................................................................................................... 1-17

1.1.24 service-type telnet ............................................................................................... 1-18

1.1.25 set authentication password................................................................................ 1-19

1.1.26 shell ..................................................................................................................... 1-20

1.1.27 speed................................................................................................................... 1-21

1.1.28 stopbits ................................................................................................................ 1-21

1.1.29 super ................................................................................................................... 1-22

1.1.30 super password ................................................................................................... 1-23

1.1.31 sysname .............................................................................................................. 1-24

1.1.32 system-view......................................................................................................... 1-24

1.1.33 telnet.................................................................................................................... 1-25

1.1.34 user-interface ...................................................................................................... 1-25

1.1.35 user privilege level .............................................................................................. 1-26

Chapter 2 Ethernet Port Configuration Commands................................................................... 2-1

2.1 Ethernet Port Configuration Commands............................................................................ 2-1

2.1.1 broadcast-suppression............................................................................................ 2-1

TOC-1

3Com Switch 8800 Command Reference Guide TOC

2.1.2 copy configuration ................................................................................................... 2-1

2.1.3 description ............................................................................................................... 2-2

2.1.4 display counters ...................................................................................................... 2-3

2.1.5 display interface ...................................................................................................... 2-4

2.1.6 display port .............................................................................................................. 2-7

2.1.7 display port vlan-vpn ............................................................................................... 2-8

2.1.8 duplex...................................................................................................................... 2-8

2.1.9 flow-control .............................................................................................................. 2-9

2.1.10 link-status hold .................................................................................................... 2-10

2.1.11 interface............................................................................................................... 2-10

2.1.12 jumboframe enable ............................................................................................. 2-11

2.1.13 loopback .............................................................................................................. 2-12

2.1.14 mdi....................................................................................................................... 2-12

2.1.15 port access vlan .................................................................................................. 2-13

2.1.16 port hybrid pvid vlan ............................................................................................ 2-13

2.1.17 port hybrid vlan.................................................................................................... 2-14

2.1.18 port link-type........................................................................................................ 2-15

2.1.19 port-mode ............................................................................................................ 2-16

2.1.20 port trunk permit vlan .......................................................................................... 2-16

2.1.21 port trunk pvid vlan.............................................................................................. 2-17

2.1.22 reset counters interface....................................................................................... 2-18

2.1.23 shutdown ............................................................................................................. 2-18

2.1.24 speed................................................................................................................... 2-19

2.1.25 vlan-vpn enable ................................................................................................... 2-20

Chapter 3 Ethernet Link Aggregation Configuration Commands ............................................ 3-1

3.1 Ethernet Link Aggregation Configuration Commands ....................................................... 3-1

3.1.1 debugging lacp packet ............................................................................................ 3-1

3.1.2 debugging lacp state ............................................................................................... 3-2

3.1.3 debugging link-aggregation error ............................................................................ 3-2

3.1.4 debugging link-aggregation event ........................................................................... 3-3

3.1.5 display lacp system-id ............................................................................................. 3-4

3.1.6 display link-aggregation summary........................................................................... 3-4

3.1.7 display link-aggregation verbose............................................................................. 3-5

3.1.8 display link-aggregation interface............................................................................ 3-7

3.1.9 lacp enable .............................................................................................................. 3-8

3.1.10 lacp port-priority..................................................................................................... 3-9

3.1.11 lacp system-priority ............................................................................................... 3-9

3.1.12 link-aggregation................................................................................................... 3-10

3.1.13 link-aggregation group agg-id description........................................................... 3-10

3.1.14 link-aggregation group agg-id mode ................................................................... 3-11

3.1.15 port link-aggregation group ................................................................................. 3-12

3.1.16 reset lacp statistics .............................................................................................. 3-12

TOC-2

3Com Switch 8800 Command Reference Guide TOC

Chapter 4 VLAN Configuration Commands................................................................................ 4-1

4.1 VLAN Configuration Commands........................................................................................ 4-1

4.1.1 description ............................................................................................................... 4-1

4.1.2 display interface vlan-interface................................................................................ 4-1

4.1.3 display vlan.............................................................................................................. 4-3

4.1.4 interface vlan-interface............................................................................................ 4-4

4.1.5 shutdown ................................................................................................................. 4-4

4.1.6 vlan.......................................................................................................................... 4-5

4.2 Port-Based VLAN Configuration Commands .................................................................... 4-6

4.2.1 port .......................................................................................................................... 4-6

4.3 Protocol-Based VLAN Configuration Commands.............................................................. 4-7

4.3.1 display vlan-protocol interface................................................................................. 4-7

4.3.2 display vlan-protocol vlan........................................................................................ 4-7

4.3.3 port hybrid protocol-vlan vlan .................................................................................. 4-8

4.3.4 vlan-type protocol .................................................................................................... 4-9

Chapter 5 GARP/GVRP Configuration Commands.................................................................... 5-1

5.1 GARP Configuration Commands....................................................................................... 5-1

5.1.1 display garp statistics .............................................................................................. 5-1

5.1.2 display garp timer .................................................................................................... 5-2

5.1.3 garp timer ................................................................................................................ 5-2

5.1.4 garp timer leaveall ................................................................................................... 5-4

5.1.5 reset garp statistics ................................................................................................. 5-4

5.2 GVRP Configuration Commands....................................................................................... 5-5

5.2.1 display gvrp statistics .............................................................................................. 5-5

5.2.2 display gvrp status .................................................................................................. 5-6

5.2.3 gvrp ......................................................................................................................... 5-6

5.2.4 gvrp registration....................................................................................................... 5-7

Chapter 6 Super VLAN Configuration Commands .................................................................... 6-1

6.1 Super VLAN Configuration Commands ............................................................................. 6-1

6.1.1 display supervlan..................................................................................................... 6-1

6.1.2 subvlan .................................................................................................................... 6-2

6.1.3 supervlan................................................................................................................. 6-3

Chapter 7 IP Address Configuration Commands....................................................................... 7-1

7.1 IP Address Configuration Commands ............................................................................... 7-1

7.1.1 display ip host.......................................................................................................... 7-1

7.1.2 display ip interface .................................................................................................. 7-1

7.1.3 ip address................................................................................................................ 7-3

7.1.4 ip host...................................................................................................................... 7-5

Chapter 8 ARP Configuration Commands .................................................................................. 8-1

8.1 ARP Configuration Commands.......................................................................................... 8-1

8.1.1 anti-attack arp.......................................................................................................... 8-1

TOC-3

3Com Switch 8800 Command Reference Guide TOC

8.1.2 arp check enable ..................................................................................................... 8-1

8.1.3 arp static.................................................................................................................. 8-2

8.1.4 arp timer aging ........................................................................................................ 8-3

8.1.5 debugging arp ......................................................................................................... 8-4

8.1.6 display arp ............................................................................................................... 8-5

8.1.7 display arp timer aging ............................................................................................ 8-6

8.1.8 reset arp .................................................................................................................. 8-7

Chapter 9 DHCP Configuration Commands ............................................................................... 9-1

9.1 General DHCP Configuration Commands ......................................................................... 9-1

9.1.1 dhcp enable............................................................................................................. 9-1

9.1.2 dhcp select .............................................................................................................. 9-1

9.1.3 dhcp server detect................................................................................................... 9-2

9.2 DHCP Server Configuration Commands ........................................................................... 9-3

9.2.1 debugging dhcp server............................................................................................ 9-3

9.2.2 dhcp server dns-list ................................................................................................. 9-4

9.2.3 dhcp server domain-name ...................................................................................... 9-5

9.2.4 dhcp server expired................................................................................................. 9-6

9.2.5 dhcp server forbidden-ip ......................................................................................... 9-7

9.2.6 dhcp server ip-pool.................................................................................................. 9-7

9.2.7 dhcp server nbns-list ............................................................................................... 9-8

9.2.8 dhcp server netbios-type......................................................................................... 9-9

9.2.9 dhcp server option................................................................................................. 9-10

9.2.10 dhcp server ping.................................................................................................. 9-11

9.2.11 dhcp server static-bind ........................................................................................ 9-12

9.2.12 display dhcp server conflict ................................................................................. 9-13

9.2.13 display dhcp server expired ................................................................................ 9-14

9.2.14 display dhcp server free-ip .................................................................................. 9-15

9.2.15 display dhcp server ip-in-use .............................................................................. 9-15

9.2.16 display dhcp server statistics .............................................................................. 9-16

9.2.17 display dhcp server tree ...................................................................................... 9-18

9.2.18 dns-list ................................................................................................................. 9-20

9.2.19 domain-name ...................................................................................................... 9-21

9.2.20 expired................................................................................................................. 9-22

9.2.21 gateway-list ......................................................................................................... 9-22

9.2.22 nbns-list ............................................................................................................... 9-23

9.2.23 netbios-type......................................................................................................... 9-24

9.2.24 network................................................................................................................ 9-25

9.2.25 option................................................................................................................... 9-26

9.2.26 reset dhcp server conflict .................................................................................... 9-27

9.2.27 reset dhcp server ip-in-use.................................................................................. 9-27

9.2.28 reset dhcp server statistics.................................................................................. 9-28

9.2.29 static-bind ip-address .......................................................................................... 9-28

TOC-4

3Com Switch 8800 Command Reference Guide TOC

9.2.30 static-bind mac-address ...................................................................................... 9-29

9.3 DHCP Relay Configuration Commands .......................................................................... 9-30

9.3.1 debugging dhcp relay............................................................................................ 9-30

9.3.2 dhcp relay security ................................................................................................ 9-31

9.3.3 dhcp relay security address-check........................................................................ 9-32

9.3.4 dhcp-server detect ................................................................................................ 9-32

9.3.5 display dhcp relay address.................................................................................... 9-33

9.3.6 display dhcprelay-security..................................................................................... 9-34

9.3.7 ip relay address ..................................................................................................... 9-35

Chapter 10 DNS Configuration Commands .............................................................................. 10-1

10.1 Static DNS Configuration Commands ........................................................................... 10-1

10.1.1 ip host.................................................................................................................. 10-1

10.1.2 display ip host...................................................................................................... 10-1

10.2 Dynamic DNS Configuration Commands ...................................................................... 10-2

10.2.1 debugging dns..................................................................................................... 10-2

10.2.2 display dns domain ............................................................................................. 10-3

10.2.3 display dns dynamic-host.................................................................................... 10-4

10.2.4 display dns server ............................................................................................... 10-5

10.2.5 dns domain.......................................................................................................... 10-5

10.2.6 dns resolve .......................................................................................................... 10-6

10.2.7 dns server............................................................................................................ 10-6

10.2.8 reset dns dynamic-host ....................................................................................... 10-7

Chapter 11 IP Performance Configuration Commands ........................................................... 11-1

11.1 IP Performance Configuration Commands.................................................................... 11-1

11.1.1 display fib ............................................................................................................ 11-1

11.1.2 display fib ip_address.......................................................................................... 11-2

11.1.3 display fib acl....................................................................................................... 11-3

11.1.4 display fib | .......................................................................................................... 11-4

11.1.5 display fib ip-prefix .............................................................................................. 11-4

11.1.6 display fib statistics ............................................................................................. 11-5

11.1.7 display icmp statistics.......................................................................................... 11-5

11.1.8 display ip socket .................................................................................................. 11-7

11.1.9 display ip statistics .............................................................................................. 11-8

11.1.10 display tcp statistics ........................................................................................ 11-10

11.1.11 display tcp status............................................................................................. 11-12

11.1.12 display udp statistics ....................................................................................... 11-13

11.1.13 reset ip statistics.............................................................................................. 11-14

11.1.14 reset tcp statistics............................................................................................ 11-15

11.1.15 reset udp statistics .......................................................................................... 11-15

11.1.16 tcp timer fin-timeout......................................................................................... 11-16

11.1.17 tcp timer syn-timeout....................................................................................... 11-16

11.1.18 tcp window....................................................................................................... 11-17

TOC-5

3Com Switch 8800 Command Reference Guide TOC

Chapter 12 Static Route Configuration Commands ................................................................ 12-1

12.1 Display Commands of the Routing Table ...................................................................... 12-1

12.1.1 display ip routing-table ........................................................................................ 12-1

12.1.2 display ip routing-table acl................................................................................... 12-2

12.1.3 display ip routing-table ip_address...................................................................... 12-6

12.1.4 display ip routing-table ip_address1 ip_address2............................................... 12-8

12.1.5 display ip routing-table ip-prefix .......................................................................... 12-9

12.1.6 display ip routing-table protocol ........................................................................ 12-10

12.1.7 display ip routing-table radix ............................................................................. 12-12

12.1.8 display ip routing-table statistics ....................................................................... 12-13

12.1.9 display ip routing-table vpn-instance................................................................. 12-14

12.1.10 display ip routing-table verbose ...................................................................... 12-15

12.2 Static Route Configuration Commands ....................................................................... 12-16

12.2.1 delete static-routes all ....................................................................................... 12-16

12.2.2 delete vpn-instance ........................................................................................... 12-17

12.2.3 ip route-static..................................................................................................... 12-17

Chapter 13 RIP Configuration Commands ............................................................................... 13-1

13.1 RIP Configuration Commands ....................................................................................... 13-1

13.1.1 checkzero ............................................................................................................ 13-1

13.1.2 default cost .......................................................................................................... 13-2

13.1.3 display rip ............................................................................................................ 13-2

13.1.4 filter-policy export ................................................................................................ 13-4

13.1.5 filter-policy import ................................................................................................ 13-4

13.1.6 host-route ............................................................................................................ 13-5

13.1.7 import-route ......................................................................................................... 13-6

13.1.8 network................................................................................................................ 13-7

13.1.9 peer ..................................................................................................................... 13-8

13.1.10 preference ......................................................................................................... 13-8

13.1.11 reset .................................................................................................................. 13-9

13.1.12 rip .................................................................................................................... 13-10

13.1.13 rip authentication-mode................................................................................... 13-10

13.1.14 rip input............................................................................................................ 13-12

13.1.15 rip metricin....................................................................................................... 13-12

13.1.16 rip metricout..................................................................................................... 13-13

13.1.17 rip output ......................................................................................................... 13-14

13.1.18 rip split-horizon ................................................................................................ 13-14

13.1.19 rip version........................................................................................................ 13-15

13.1.20 rip work............................................................................................................ 13-16

13.1.21 summary.......................................................................................................... 13-17

13.1.22 timers............................................................................................................... 13-17

Chapter 14 OSPF Configuration Commands............................................................................ 14-1

14.1 OSPF Configuration Commands ................................................................................... 14-1

TOC-6

3Com Switch 8800 Command Reference Guide TOC

14.1.1 abr-summary ....................................................................................................... 14-1

14.1.2 area ..................................................................................................................... 14-2

14.1.3 asbr-summary ..................................................................................................... 14-2

14.1.4 authentication-mode............................................................................................ 14-3

14.1.5 debugging ospf.................................................................................................... 14-4

14.1.6 default cost .......................................................................................................... 14-5

14.1.7 default interval ..................................................................................................... 14-6

14.1.8 default limit .......................................................................................................... 14-6

14.1.9 default tag............................................................................................................ 14-7

14.1.10 default type........................................................................................................ 14-8

14.1.11 default-cost........................................................................................................ 14-9

14.1.12 default-route-advertise ...................................................................................... 14-9

14.1.13 display debugging ospf ................................................................................... 14-10

14.1.14 display ospf abr-asbr....................................................................................... 14-11

14.1.15 display ospf asbr-summary ............................................................................. 14-12

14.1.16 display ospf brief ............................................................................................. 14-13

14.1.17 display ospf cumulative ................................................................................... 14-15

14.1.18 display ospf error............................................................................................. 14-17

14.1.19 display ospf interface ...................................................................................... 14-19

14.1.20 display ospf lsdb.............................................................................................. 14-20

14.1.21 display ospf nexthop ....................................................................................... 14-23

14.1.22 display ospf peer ............................................................................................. 14-24

14.1.23 display ospf request-queue ............................................................................. 14-26

14.1.24 display ospf retrans-queue.............................................................................. 14-27

14.1.25 display ospf routing ......................................................................................... 14-28

14.1.26 display ospf vlink ............................................................................................. 14-29

14.1.27 filter-policy export ............................................................................................ 14-30

14.1.28 filter-policy import ............................................................................................ 14-31

14.1.29 import-route ..................................................................................................... 14-32

14.1.30 network............................................................................................................ 14-33

14.1.31 nssa................................................................................................................. 14-34

14.1.32 ospf.................................................................................................................. 14-34

14.1.33 ospf authentication-mode................................................................................ 14-35

14.1.34 ospf cost .......................................................................................................... 14-36

14.1.35 ospf dr-priority ................................................................................................. 14-37

14.1.36 ospf mib-binding .............................................................................................. 14-38

14.1.37 ospf mtu-enable .............................................................................................. 14-39

14.1.38 ospf network-type............................................................................................ 14-39

14.1.39 ospf timer dead ............................................................................................... 14-40

14.1.40 ospf timer hello ................................................................................................ 14-41

14.1.41 ospf timer poll .................................................................................................. 14-42

14.1.42 ospf timer retransmit ....................................................................................... 14-43

14.1.43 ospf trans-delay............................................................................................... 14-44

TOC-7

3Com Switch 8800 Command Reference Guide TOC

14.1.44 preference ....................................................................................................... 14-44

14.1.45 reset ospf......................................................................................................... 14-45

14.1.46 router id ........................................................................................................... 14-46

14.1.47 silent-interface ................................................................................................. 14-47

14.1.48 sham-link ......................................................................................................... 14-47

14.1.49 snmp-agent trap enable ospf .......................................................................... 14-48

14.1.50 spf-schedule-interval ....................................................................................... 14-49

14.1.51 stub.................................................................................................................. 14-50

14.1.52 vlink-peer......................................................................................................... 14-50

Chapter 15 Integrated IS-IS Configuration Commands ........................................................... 15-1

15.1 Integrated IS-IS Configuration Commands.................................................................... 15-1

15.1.1 area-authentication-mode ................................................................................... 15-1

15.1.2 cost-style ............................................................................................................. 15-2

15.1.3 debugging isis ..................................................................................................... 15-3

15.1.4 default-route-advertise ........................................................................................ 15-4

15.1.5 display isis interface ............................................................................................ 15-5

15.1.6 display isis lsdb ................................................................................................... 15-6

15.1.7 display isis mesh-group....................................................................................... 15-7

15.1.8 display isis peer................................................................................................... 15-7

15.1.9 display isis route.................................................................................................. 15-8

15.1.10 display isis spf-log ............................................................................................. 15-9

15.1.11 domain-authentication-mode........................................................................... 15-10

15.1.12 filter-policy export ............................................................................................ 15-12

15.1.13 filter-policy import ............................................................................................ 15-12

15.1.14 ignore-lsp-checksum-error .............................................................................. 15-13

15.1.15 import-route ..................................................................................................... 15-14

15.1.16 import-route isis level-2 into level-1 ................................................................ 15-15

15.1.17 isis ................................................................................................................... 15-15

15.1.18 isis authentication-mode ................................................................................. 15-16

15.1.19 isis circuit-level ................................................................................................ 15-17

15.1.20 isis cost............................................................................................................ 15-18

15.1.21 isis dis-priority.................................................................................................. 15-19

15.1.22 isis enable ....................................................................................................... 15-20

15.1.23 isis mesh-group ............................................................................................... 15-21

15.1.24 isis timer csnp.................................................................................................. 15-21

15.1.25 isis timer hello.................................................................................................. 15-22

15.1.26 isis timer holding-multiplier.............................................................................. 15-23

15.1.27 isis timer lsp..................................................................................................... 15-24

15.1.28 isis timer retransmit ......................................................................................... 15-25

15.1.29 is-level ............................................................................................................. 15-26

15.1.30 log-peer-change .............................................................................................. 15-26

15.1.31 md5-compatible............................................................................................... 15-27

TOC-8

3Com Switch 8800 Command Reference Guide TOC

15.1.32 network-entity .................................................................................................. 15-28

15.1.33 preference ....................................................................................................... 15-29

15.1.34 reset isis all...................................................................................................... 15-29

15.1.35 reset isis peer .................................................................................................. 15-30

15.1.36 set-overload..................................................................................................... 15-30

15.1.37 silent-interface ................................................................................................. 15-31

15.1.38 spf-delay-interval ............................................................................................. 15-32

15.1.39 spf-slice-size.................................................................................................... 15-32

15.1.40 summary.......................................................................................................... 15-33

15.1.41 timer lsp-max-age ........................................................................................... 15-34

15.1.42 timer lsp-refresh .............................................................................................. 15-35

15.1.43 timer spf........................................................................................................... 15-35

Chapter 16 BGP Configuration Commands.............................................................................. 16-1

16.1 BGP Configuration Commands ..................................................................................... 16-1

16.1.1 aggregate ............................................................................................................ 16-1

16.1.2 bgp ...................................................................................................................... 16-3

16.1.3 compare-different-as-med................................................................................... 16-3

16.1.4 confederation id................................................................................................... 16-4

16.1.5 confederation nonstandard ................................................................................. 16-5

16.1.6 confederation peer-as ......................................................................................... 16-6

16.1.7 dampening........................................................................................................... 16-6

16.1.8 debugging bgp..................................................................................................... 16-7

16.1.9 default local-preference....................................................................................... 16-8

16.1.10 default med........................................................................................................ 16-9

16.1.11 display bgp group............................................................................................ 16-10

16.1.12 display bgp network ........................................................................................ 16-11

16.1.13 display bgp paths ............................................................................................ 16-12

16.1.14 display bgp peer .............................................................................................. 16-13

16.1.15 display bgp routing-table ................................................................................. 16-14

16.1.16 display bgp routing-table as-path-acl .............................................................. 16-16

16.1.17 display bgp routing-table cidr .......................................................................... 16-17

16.1.18 display bgp routing-table community .............................................................. 16-18

16.1.19 display bgp routing-table community-list......................................................... 16-19

16.1.20 display bgp routing-table dampened............................................................... 16-20

16.1.21 display bgp routing-table different-origin-as.................................................... 16-21

16.1.22 display bgp routing-table flap-info ................................................................... 16-22

16.1.23 display bgp routing-table peer......................................................................... 16-23

16.1.24 display bgp routing-table regular-expression .................................................. 16-24

16.1.25 filter-policy export ............................................................................................ 16-25

16.1.26 filter-policy import ............................................................................................ 16-26

16.1.27 group ............................................................................................................... 16-27

16.1.28 import-route ..................................................................................................... 16-27

TOC-9

3Com Switch 8800 Command Reference Guide TOC

16.1.29 network............................................................................................................ 16-28

16.1.30 peer advertise-community............................................................................... 16-29

16.1.31 peer allow-as-loop........................................................................................... 16-29

16.1.32 peer as-number ............................................................................................... 16-30

16.1.33 peer as-path-acl export ................................................................................... 16-30

16.1.34 peer as-path-acl import ................................................................................... 16-31

16.1.35 peer connect-interface .................................................................................... 16-32

16.1.36 peer default-route-advertise ............................................................................ 16-33

16.1.37 peer description............................................................................................... 16-33

16.1.38 peer ebgp-max-hop ......................................................................................... 16-34

16.1.39 peer enable ..................................................................................................... 16-35

16.1.40 peer filter-policy export.................................................................................... 16-35

16.1.41 peer filter-policy import.................................................................................... 16-36

16.1.42 peer group ....................................................................................................... 16-37

16.1.43 peer ip-prefix export ........................................................................................ 16-37

16.1.44 peer ip-prefix import ........................................................................................ 16-38

16.1.45 peer next-hop-local ......................................................................................... 16-39

16.1.46 peer password................................................................................................. 16-40

16.1.47 peer public-as-only.......................................................................................... 16-41

16.1.48 peer reflect-client............................................................................................. 16-41

16.1.49 peer route-policy export .................................................................................. 16-42

16.1.50 peer route-policy import .................................................................................. 16-43

16.1.51 peer route-update-interval............................................................................... 16-43

16.1.52 peer shutdown................................................................................................. 16-44

16.1.53 peer timer ........................................................................................................ 16-45

16.1.54 preference ....................................................................................................... 16-45

16.1.55 reflect between-clients .................................................................................... 16-46

16.1.56 reflector cluster-id............................................................................................ 16-47

16.1.57 refresh bgp ...................................................................................................... 16-48

16.1.58 reset bgp ......................................................................................................... 16-48

16.1.59 reset bgp flap-info ........................................................................................... 16-49

16.1.60 reset bgp group ............................................................................................... 16-50

16.1.61 reset dampening ............................................................................................. 16-50

16.1.62 summary.......................................................................................................... 16-51

16.1.63 timer ................................................................................................................ 16-51

16.1.64 undo synchronization ...................................................................................... 16-52

Chapter 17 IP Routing Policy Configuration Commands........................................................ 17-1

17.1 IP Routing Policy Configuration Commands ................................................................. 17-1

17.1.1 apply as-path....................................................................................................... 17-1

17.1.2 apply community ................................................................................................. 17-2

17.1.3 apply cost ............................................................................................................ 17-3

17.1.4 apply cost-type .................................................................................................... 17-3

TOC-10

3Com Switch 8800 Command Reference Guide TOC

17.1.5 apply ip next-hop ................................................................................................. 17-4

17.1.6 apply isis.............................................................................................................. 17-5

17.1.7 apply local-preference......................................................................................... 17-5

17.1.8 apply origin .......................................................................................................... 17-6

17.1.9 apply tag.............................................................................................................. 17-7

17.1.10 display ip ip-prefix ............................................................................................. 17-7

17.1.11 display route-policy ........................................................................................... 17-8

17.1.12 filter-policy export .............................................................................................. 17-9

17.1.13 filter-policy import ............................................................................................ 17-10

17.1.14 if-match { acl | ip-prefix }.................................................................................. 17-11

17.1.15 if-match as-path .............................................................................................. 17-12

17.1.16 if-match community ......................................................................................... 17-12

17.1.17 if-match cost .................................................................................................... 17-13

17.1.18 if-match interface............................................................................................. 17-14

17.1.19 if-match ip next-hop......................................................................................... 17-15

17.1.20 if-match tag...................................................................................................... 17-16

17.1.21 ip as-path-acl................................................................................................... 17-16

17.1.22 ip community-list ............................................................................................. 17-17

17.1.23 ip ip-prefix........................................................................................................ 17-18

17.1.24 route-policy...................................................................................................... 17-19

Chapter 18 IGMP Snooping Configuration Commands........................................................... 18-1

18.1 IGMP Snooping Configuration Commands ................................................................... 18-1

18.1.1 display igmp-snooping configuration................................................................... 18-1

18.1.2 display igmp-snooping group .............................................................................. 18-2

18.1.3 display igmp-snooping statistics.......................................................................... 18-3

18.1.4 igmp-snooping..................................................................................................... 18-4

18.1.5 igmp-snooping host-aging-time........................................................................... 18-4

18.1.6 igmp-snooping max-response-time..................................................................... 18-5

18.1.7 igmp-snooping nonflooding-enable ..................................................................... 18-6

18.1.8 igmp-snooping router-aging-time ........................................................................ 18-6

18.1.9 reset igmp-snooping statistics............................................................................. 18-7

Chapter 19 Multicast VLAN Configuration Commands ........................................................... 19-1

19.1 Multicast VLAN Configuration Commands .................................................................... 19-1

19.1.1 service-type multicast.......................................................................................... 19-1

Chapter 20 IP Multicast Common Configuration Commands................................................. 20-1

20.1 IP Multicast Common Configuration Commands........................................................... 20-1

20.1.1 debugging multicast forwarding .......................................................................... 20-1

20.1.2 debugging multicast kernel-routing ..................................................................... 20-1

20.1.3 debugging multicast status-forwarding ............................................................... 20-2

20.1.4 display multicast forwarding-table ....................................................................... 20-3

20.1.5 display multicast routing-table............................................................................. 20-4

20.1.6 multicast .............................................................................................................. 20-6

TOC-11

3Com Switch 8800 Command Reference Guide TOC

20.1.7 multicast route-limit ............................................................................................. 20-7

20.1.8 multicast routing-enable ...................................................................................... 20-8

20.1.9 reset multicast forwarding-table .......................................................................... 20-8

20.1.10 reset multicast routing-table .............................................................................. 20-9

Chapter 21 IGMP Configuration Commands ............................................................................ 21-1

21.1 IGMP Configuration Commands.................................................................................... 21-1

21.1.1 debugging igmp................................................................................................... 21-1

21.1.2 display igmp group .............................................................................................. 21-1

21.1.3 display igmp interface ......................................................................................... 21-2

21.1.4 igmp enable......................................................................................................... 21-4

21.1.5 igmp group-limit................................................................................................... 21-4

21.1.6 igmp group-policy ................................................................................................ 21-5

21.1.7 igmp group-policy vlan ........................................................................................ 21-6

21.1.8 igmp host-join port............................................................................................... 21-7

21.1.9 igmp host-join vlan .............................................................................................. 21-8

21.1.10 igmp lastmember-queryinterval......................................................................... 21-8

21.1.11 igmp max-response-time................................................................................... 21-9

21.1.12 igmp robust-count ........................................................................................... 21-10

21.1.13 igmp timer other-querier-present..................................................................... 21-11

21.1.14 igmp timer query ............................................................................................. 21-11

21.1.15 igmp version .................................................................................................... 21-12

21.1.16 reset igmp group ............................................................................................. 21-13

Chapter 22 PIM Configuration Commands ............................................................................... 22-1

22.1 PIM Configuration Commands....................................................................................... 22-1

22.1.1 bsr-policy ............................................................................................................. 22-1

22.1.2 c-bsr .................................................................................................................... 22-2

22.1.3 c-rp ...................................................................................................................... 22-3

22.1.4 crp-policy ............................................................................................................. 22-4

22.1.5 debugging pim common...................................................................................... 22-5

22.1.6 debugging pim dm............................................................................................... 22-5

22.1.7 debugging pim sm ............................................................................................... 22-6

22.1.8 display pim bsr-info ............................................................................................. 22-7

22.1.9 display pim interface ........................................................................................... 22-8

22.1.10 display pim neighbor ......................................................................................... 22-9

22.1.11 display pim routing-table ................................................................................. 22-10

22.1.12 display pim rp-info ........................................................................................... 22-11

22.1.13 pim................................................................................................................... 22-13

22.1.14 pim bsr-boundary ............................................................................................ 22-13

22.1.15 pim dm............................................................................................................. 22-14

22.1.16 pim neighbor-limit ............................................................................................ 22-15

22.1.17 pim neighbor-policy ......................................................................................... 22-15

22.1.18 pim sm............................................................................................................. 22-16

TOC-12

3Com Switch 8800 Command Reference Guide TOC

22.1.19 pim timer hello ................................................................................................. 22-17

22.1.20 register-policy .................................................................................................. 22-17

22.1.21 reset pim neighbor .......................................................................................... 22-18

22.1.22 reset pim routing-table .................................................................................... 22-19

22.1.23 source-policy ................................................................................................... 22-20

22.1.24 static-rp............................................................................................................ 22-21

Chapter 23 MSDP Configuration Commands ........................................................................... 23-1

23.1 MSDP Configuration Commands................................................................................... 23-1

23.1.1 cache-sa-enable.................................................................................................. 23-1

23.1.2 debugging msdp.................................................................................................. 23-2

23.1.3 display msdp brief ............................................................................................... 23-2

23.1.4 display msdp peer-status .................................................................................... 23-3

23.1.5 display msdp sa-cache........................................................................................ 23-4

23.1.6 display msdp sa-count ........................................................................................ 23-5

23.1.7 import-source ...................................................................................................... 23-5

23.1.8 msdp.................................................................................................................... 23-6

23.1.9 msdp-tracert ........................................................................................................ 23-7

23.1.10 originating-rp ..................................................................................................... 23-9

23.1.11 peer ................................................................................................................. 23-10

23.1.12 peer description............................................................................................... 23-11

23.1.13 peer mesh-group ............................................................................................. 23-11

23.1.14 peer minimum-ttl ............................................................................................. 23-12

23.1.15 peer request-sa-enable ................................................................................... 23-13

23.1.16 peer sa-cache-maximum................................................................................. 23-13

23.1.17 peer sa-policy .................................................................................................. 23-14

23.1.18 peer sa-request-policy..................................................................................... 23-15

23.1.19 reset msdp peer .............................................................................................. 23-16

23.1.20 reset msdp sa-cache....................................................................................... 23-16

23.1.21 reset msdp statistics........................................................................................ 23-17

23.1.22 shutdown ......................................................................................................... 23-17

23.1.23 static-rpf-peer .................................................................................................. 23-18

23.1.24 timer retry ........................................................................................................ 23-19

Chapter 24 MBGP Multicast Extension Configuration Commands........................................ 24-1

24.1 MBGP Multicast Extension Configuration Commands .................................................. 24-1

24.1.1 aggregate ............................................................................................................ 24-1

24.1.2 compare-different-as-med................................................................................... 24-2

24.1.3 debugging bgp mp-update .................................................................................. 24-2

24.1.4 default local-preference....................................................................................... 24-3

24.1.5 default med.......................................................................................................... 24-4

24.1.6 display bgp multicast group................................................................................. 24-4

24.1.7 display bgp multicast network ............................................................................. 24-5

24.1.8 display bgp multicast peer................................................................................... 24-5

TOC-13

3Com Switch 8800 Command Reference Guide TOC

24.1.9 display bgp multicast routing-table...................................................................... 24-6

24.1.10 display bgp multicast routing-table as-path-acl................................................. 24-6

24.1.11 display bgp multicast routing-table cidr............................................................. 24-7

24.1.12 display bgp multicast routing-table community ................................................. 24-7

24.1.13 display bgp multicast routing-table community-list............................................ 24-8

24.1.14 display bgp multicast routing-table different-origin-as ...................................... 24-8

24.1.15 display bgp multicast routing-table peer ........................................................... 24-9

24.1.16 display bgp multicast routing-table regular-expression..................................... 24-9

24.1.17 filter-policy export ............................................................................................ 24-10

24.1.18 filter-policy import ............................................................................................ 24-11

24.1.19 import-route ..................................................................................................... 24-11

24.1.20 ipv4-family multicast........................................................................................ 24-12

24.1.21 network............................................................................................................ 24-13

24.1.22 peer advertise-community............................................................................... 24-13

24.1.23 peer allow-as-loop........................................................................................... 24-14

24.1.24 peer as-path-acl export ................................................................................... 24-14

24.1.25 peer as-path-acl import ................................................................................... 24-15

24.1.26 peer enable ..................................................................................................... 24-16

24.1.27 peer filter-policy export.................................................................................... 24-17

24.1.28 peer filter-policy import.................................................................................... 24-17

24.1.29 peer group ....................................................................................................... 24-18

24.1.30 peer ip-prefix export ........................................................................................ 24-19

24.1.31 peer ip-prefix import ........................................................................................ 24-19

24.1.32 peer next-hop-local ......................................................................................... 24-20

24.1.33 peer public-as-only.......................................................................................... 24-21

24.1.34 peer reflect-client............................................................................................. 24-21

24.1.35 peer route-policy export .................................................................................. 24-22

24.1.36 peer route-policy import .................................................................................. 24-22

24.1.37 preference ....................................................................................................... 24-23

24.1.38 reflect between-clients .................................................................................... 24-24

24.1.39 refresh bgp multicast....................................................................................... 24-24

24.1.40 reflector cluster-id............................................................................................ 24-25

24.1.41 summary.......................................................................................................... 24-26

Chapter 25 ACL Commands....................................................................................................... 25-1

25.1 ACL Commands............................................................................................................. 25-1

25.1.1 acl........................................................................................................................ 25-1

25.1.2 display acl config ................................................................................................. 25-3

25.1.3 display acl running-packet-filter........................................................................... 25-3

25.1.4 display flow-template........................................................................................... 25-4

25.1.5 display time-range ............................................................................................... 25-5

25.1.6 flow-template user-defined.................................................................................. 25-6

25.1.7 flow-template user-defined template-info............................................................ 25-7

TOC-14

3Com Switch 8800 Command Reference Guide TOC

25.1.8 packet-filter.......................................................................................................... 25-8

25.1.9 reset acl counter................................................................................................ 25-10

25.1.10 rule .................................................................................................................. 25-10

25.1.11 time-range ....................................................................................................... 25-14

Chapter 26 QoS Commands....................................................................................................... 26-1

26.1 QoS Commands ............................................................................................................ 26-1

26.1.1 display port-group ............................................................................................... 26-1

26.1.2 display port-group index...................................................................................... 26-2

26.1.3 display mirroring-group ....................................................................................... 26-2

26.1.4 display qos conform-level.................................................................................... 26-3

26.1.5 display qos cos-drop-precedence-map............................................................... 26-4

26.1.6 display qos cos-local-precedence-map............................................................... 26-5

26.1.7 display qos-interface all....................................................................................... 26-6

26.1.8 display qos-interface drop-mode......................................................................... 26-6

26.1.9 display qos-interface mirrored-to......................................................................... 26-7

26.1.10 display qos-interface queue-scheduler ............................................................. 26-7

26.1.11 display qos-interface traffic-limit........................................................................ 26-8

26.1.12 display qos-interface traffic-priority ................................................................... 26-9

26.1.13 display qos-interface traffic-redirect .................................................................. 26-9

26.1.14 display qos-interface traffic-shape .................................................................. 26-10

26.1.15 display qos-interface traffic-statistic ................................................................ 26-10

26.1.16 display qos-vlan all .......................................................................................... 26-11

26.1.17 display qos-vlan traffic-limit ............................................................................. 26-12

26.1.18 display qos-vlan traffic-priority......................................................................... 26-13

26.1.19 display qos-vlan traffic-redirect ....................................................................... 26-13

26.1.20 display traffic-params ...................................................................................... 26-14

26.1.21 drop-mode ....................................................................................................... 26-15

26.1.22 dscp................................................................................................................. 26-15

26.1.23 exp................................................................................................................... 26-17

26.1.24 local-precedence ............................................................................................. 26-18

26.1.25 mirrored-to....................................................................................................... 26-19

26.1.26 mirroring-group................................................................................................ 26-21

26.1.27 port .................................................................................................................. 26-22

26.1.28 port-group........................................................................................................ 26-23

26.1.29 priority.............................................................................................................. 26-24

26.1.30 qos conform-level............................................................................................ 26-25

26.1.31 qos cos-drop-precedence-map ....................................................................... 26-25

26.1.32 qos cos-local-precedence-map ....................................................................... 26-27

26.1.33 queue .............................................................................................................. 26-29

26.1.34 queue-scheduler ............................................................................................. 26-30

26.1.35 reset traffic-statistic ......................................................................................... 26-31

26.1.36 traffic-limit ........................................................................................................ 26-32

TOC-15

3Com Switch 8800 Command Reference Guide TOC

26.1.37 traffic-params .................................................................................................. 26-35

26.1.38 traffic-priority.................................................................................................... 26-36

26.1.39 traffic-redirect .................................................................................................. 26-39

26.1.40 traffic-shape..................................................................................................... 26-42

26.1.41 traffic-statistic .................................................................................................. 26-42

26.1.42 wred................................................................................................................. 26-44

Chapter 27 ACL Control Commands to Control Login Users................................................. 27-1

27.1 The ACL Control Commands to Control Login Users.................................................... 27-1

27.1.1 acl........................................................................................................................ 27-1

27.1.2 snmp-agent community....................................................................................... 27-2

27.1.3 snmp-agent group ............................................................................................... 27-2

27.1.4 snmp-agent usm-user ......................................................................................... 27-4

Chapter 28 MPLS Basic Configuration Commands................................................................. 29-1

28.1 MPLS Basic Configuration Commands ......................................................................... 29-1

28.1.1 debugging mpls lspm .......................................................................................... 29-1

28.1.2 display mpls interface.......................................................................................... 29-2

28.1.3 display mpls lsp ................................................................................................... 29-2

28.1.4 display mpls static-lsp ......................................................................................... 29-3

28.1.5 display mpls statistics.......................................................................................... 29-4

28.1.6 lsp-trigger ............................................................................................................ 29-4

28.1.7 mpls..................................................................................................................... 29-5

28.1.8 mpls lsr-id ............................................................................................................ 29-6

28.1.9 snmp-agent trap enable ldp ................................................................................ 29-6

28.1.10 snmp-agent trap enable lsp............................................................................... 29-6

28.1.11 static-lsp egress ................................................................................................ 29-6

28.1.12 static-lsp ingress ............................................................................................... 29-6

28.1.13 static-lsp transit ................................................................................................. 29-6

28.2 LDP Configuration Commands ...................................................................................... 29-6

28.2.1 debugging mpls ldp ............................................................................................. 29-6

28.2.2 display mpls ldp................................................................................................... 29-6

28.2.3 display mpls ldp buffer-info ................................................................................. 29-6

28.2.4 display mpls ldp interface.................................................................................... 29-6

28.2.5 display mpls ldp lsp ............................................................................................. 29-6

28.2.6 display mpls ldp peer .......................................................................................... 29-6

28.2.7 display mpls ldp remote ...................................................................................... 29-6

28.2.8 display mpls ldp session ..................................................................................... 29-6

28.2.9 mpls ldp ............................................................................................................... 29-6

28.2.10 mpls ldp enable ................................................................................................. 29-6

28.2.11 mpls ldp hops-count .......................................................................................... 29-6

28.2.12 mpls ldp loop-detect .......................................................................................... 29-6

28.2.13 mpls ldp password ............................................................................................ 29-6

28.2.14 mpls ldp path-vectors ........................................................................................ 29-6

TOC-16

3Com Switch 8800 Command Reference Guide TOC

28.2.15 mpls ldp remote-peer ........................................................................................ 29-6

28.2.16 mpls ldp reset-session ...................................................................................... 29-6

28.2.17 mpls ldp timer .................................................................................................... 29-6

28.2.18 mpls ldp transport-ip.......................................................................................... 29-6

28.2.19 remote-ip ........................................................................................................... 29-6

Chapter 29 BGP/MPLS VPN Configuration Commands .......................................................... 29-6

29.1.1 aggregate ............................................................................................................ 29-6

29.1.2 apply mpls-label .................................................................................................. 29-6

29.1.3 debugging bgp..................................................................................................... 29-6

29.1.4 display bgp routing-table label ............................................................................ 29-6

29.1.5 default local-preference....................................................................................... 29-6

29.1.6 default med.......................................................................................................... 29-6

29.1.7 description ........................................................................................................... 29-6

29.1.8 display bgp vpnv4 ............................................................................................... 29-6

29.1.9 display ip routing-table vpn-instance................................................................... 29-6

29.1.10 display ip vpn-instance...................................................................................... 29-6

29.1.11 display mpls l3vpn-lsp ....................................................................................... 29-6

29.1.12 display rip vpn-instance..................................................................................... 29-6

29.1.13 domain-id........................................................................................................... 29-6

29.1.14 filter-policy export .............................................................................................. 29-6

29.1.15 filter-policy import .............................................................................................. 29-6

29.1.16 group ................................................................................................................. 29-6

29.1.17 if-match mpls-label ............................................................................................ 29-6

29.1.18 if-match vpn-target ............................................................................................ 29-6

29.1.19 import-route ....................................................................................................... 29-6

29.1.20 ip binding vpn-instance ..................................................................................... 29-6

29.1.21 ip route-static vpn-instance ............................................................................... 29-6

29.1.22 ip vpn-instance .................................................................................................. 29-6

29.1.23 ipv4-family ......................................................................................................... 29-6

29.1.24 nesting-vpn........................................................................................................ 29-6

29.1.25 network.............................................................................................................. 29-6

29.1.26 ospf.................................................................................................................... 29-6

29.1.27 peer advertise-community................................................................................. 29-6

29.1.28 peer allow-as-loop............................................................................................. 29-6

29.1.29 peer as-number ................................................................................................. 29-6

29.1.30 peer as-path-acl export ..................................................................................... 29-6

29.1.31 peer as-path-acl import ..................................................................................... 29-6

29.1.32 peer connect-interface ...................................................................................... 29-6

29.1.33 peer default-route-advertise .............................................................................. 29-6

29.1.34 peer default-route-advertise vpn-instance ........................................................ 29-6

29.1.35 peer description................................................................................................. 29-6

29.1.36 peer ebgp-max-hop........................................................................................... 29-6

TOC-17

3Com Switch 8800 Command Reference Guide TOC

29.1.37 peer enable ....................................................................................................... 29-6

29.1.38 peer filter-policy export...................................................................................... 29-6

29.1.39 peer filter-policy import...................................................................................... 29-6

29.1.40 peer group ......................................................................................................... 29-6

29.1.41 peer ip-prefix export .......................................................................................... 29-6

29.1.42 peer ip-prefix import .......................................................................................... 29-6

29.1.43 peer label-route-capability................................................................................. 29-6

29.1.44 peer next-hop-local ........................................................................................... 29-6

29.1.45 peer password................................................................................................... 29-6

29.1.46 peer public-as-only ............................................................................................ 29-6

29.1.47 peer reflect-client............................................................................................... 29-6

29.1.48 peer route-policy export .................................................................................... 29-6

29.1.49 peer route-policy import .................................................................................... 29-6

29.1.50 peer route-update-interval................................................................................. 29-6

29.1.51 peer timer .......................................................................................................... 29-6

29.1.52 peer upe ............................................................................................................ 29-6

29.1.53 peer vpn-instance enable.................................................................................. 29-6

29.1.54 peer vpn-instance group ................................................................................... 29-6

29.1.55 peer vpn-instance route-policy import............................................................... 29-6

29.1.56 peer vpn-instance substitute-as ........................................................................ 29-6

29.1.57 policy vpn-target ................................................................................................ 29-6

29.1.58 preference ......................................................................................................... 29-6

29.1.59 reflect between-clients ...................................................................................... 29-6

29.1.60 reflector cluster-id.............................................................................................. 29-6

29.1.61 route-distinguisher............................................................................................. 29-6

29.1.62 route-tag ............................................................................................................ 29-6

29.1.63 timer .................................................................................................................. 29-6

29.1.64 traffic-redirect .................................................................................................... 29-6

29.1.65 routing-table limit ............................................................................................... 29-6

29.1.66 sham-link ........................................................................................................... 29-6

29.1.67 summary............................................................................................................ 29-6

29.1.68 vpn-instance-capability simple .......................................................................... 29-6

29.1.69 vpn-target .......................................................................................................... 29-6

Chapter 30 MSTP Configuration Commands ........................................................................... 30-1

30.1 MSTP Configuration Commands ................................................................................... 30-1

30.1.1 active region-configuration .................................................................................. 30-1

30.1.2 check region-configuration .................................................................................. 30-1

30.1.3 debugging stp...................................................................................................... 30-3

30.1.4 display stp ........................................................................................................... 30-3

30.1.5 display stp region-configuration .......................................................................... 30-5

30.1.6 display stp tc........................................................................................................ 30-6

30.1.7 instance ............................................................................................................... 30-7

TOC-18

3Com Switch 8800 Command Reference Guide TOC

30.1.8 region-name ........................................................................................................ 30-8

30.1.9 reset stp............................................................................................................... 30-9

30.1.10 revision-level ................................................................................................... 30-10

30.1.11 stp.................................................................................................................... 30-10

30.1.12 stp bpdu-protection ......................................................................................... 30-11

30.1.13 stp bridge-diameter ......................................................................................... 30-12

30.1.14 stp cost ............................................................................................................ 30-13

30.1.15 stp edged-port ................................................................................................. 30-14

30.1.16 stp instance root primary................................................................................. 30-15

30.1.17 stp interface..................................................................................................... 30-16

30.1.18 stp interface instance cost............................................................................... 30-17

30.1.19 stp interface edged-port .................................................................................. 30-18

30.1.20 stp interface instance port priority ................................................................... 30-19

30.1.21 stp interface loop-protection............................................................................ 30-20

30.1.22 stp interface mcheck ....................................................................................... 30-21

30.1.23 stp interface point-to-point............................................................................... 30-22

30.1.24 stp interface reset-arp ..................................................................................... 30-23

30.1.25 stp interface root-protection ............................................................................ 30-24

30.1.26 stp interface transmit-limit ............................................................................... 30-25

30.1.27 stp loop-protection........................................................................................... 30-26

30.1.28 stp max-hops................................................................................................... 30-27

30.1.29 stp mcheck ...................................................................................................... 30-28

30.1.30 stp mode.......................................................................................................... 30-29

30.1.31 stp pathcost-standard...................................................................................... 30-29

30.1.32 stp point-to-point ............................................................................................. 30-30

30.1.33 stp port priority ................................................................................................ 30-31

30.1.34 stp region-configuration................................................................................... 30-32

30.1.35 stp reset-arp .................................................................................................... 30-33

30.1.36 stp instance root secondary ............................................................................ 30-33

30.1.37 stp root-protection ........................................................................................... 30-34

30.1.38 stp tc-protection............................................................................................... 30-35

30.1.39 stp timer forward-delay.................................................................................... 30-36

30.1.40 stp timer hello .................................................................................................. 30-37

30.1.41 stp timer max-age ........................................................................................... 30-38

30.1.42 stp timer-factor ................................................................................................ 30-39

30.1.43 stp transmit-limit .............................................................................................. 30-40

30.1.44 stp update-arp ................................................................................................. 30-40

30.1.45 vlan-mapping modulo...................................................................................... 30-41

Chapter 31 802.1x Configuration Commands .......................................................................... 31-1

31.1 802.1x Configuration Commands .................................................................................. 31-1

31.1.1 display dot1x ....................................................................................................... 31-1

31.1.2 dot1x.................................................................................................................... 31-2

TOC-19

3Com Switch 8800 Command Reference Guide TOC

31.1.3 dot1x authentication-method............................................................................... 31-3

31.1.4 dot1x dhcp-launch............................................................................................... 31-4

31.1.5 dot1x guest-vlan .................................................................................................. 31-4

31.1.6 dot1x max-user.................................................................................................... 31-4

31.1.7 dot1x port-control ................................................................................................ 31-4

31.1.8 dot1x port-method ............................................................................................... 31-4

31.1.9 dot1x quiet-period ............................................................................................... 31-4

31.1.10 dot1x retry ......................................................................................................... 31-4

31.1.11 dot1x supp-proxy-check .................................................................................... 31-4

31.1.12 dot1x timer......................................................................................................... 31-4

31.1.13 reset dot1x statistics.......................................................................................... 31-4

Chapter 32 AAA and RADIUS/TACACS+ Protocol Configuration Commands ..................... 32-4

32.1 AAA Configuration Commands...................................................................................... 32-4

32.1.1 access-limit.......................................................................................................... 32-4

32.1.2 accounting optional ............................................................................................. 32-4

32.1.3 attribute ............................................................................................................... 32-4

32.1.4 cut connection ..................................................................................................... 32-4

32.1.5 display connection............................................................................................... 32-4

32.1.6 display domain .................................................................................................... 32-4

32.1.7 display local-user ................................................................................................ 32-4

32.1.8 domain................................................................................................................. 32-4

32.1.9 idle-cut................................................................................................................. 32-4

32.1.10 ip pool................................................................................................................ 32-4

32.1.11 level ................................................................................................................... 32-4

32.1.12 local-user........................................................................................................... 32-4

32.1.13 local-user password-display-mode.................................................................... 32-4

32.1.14 password ........................................................................................................... 32-4

32.1.15 scheme.............................................................................................................. 32-4

32.1.16 private-group-id mode standard ........................................................................ 32-4

32.1.17 self-service-url ................................................................................................... 32-4

32.1.18 service-type ....................................................................................................... 32-4

32.1.19 state................................................................................................................... 32-4

32.2 RADIUS Protocol Configuration Commands ................................................................. 32-4

32.2.1 accounting optional ............................................................................................. 32-4

32.2.2 data-flow-format .................................................................................................. 32-4

32.2.3 display local-server ............................................................................................. 32-4

32.2.4 display radius ...................................................................................................... 32-4

32.2.5 display radius statistics ....................................................................................... 32-4

32.2.6 display stop-accounting-buffer ............................................................................ 32-4

32.2.7 key....................................................................................................................... 32-4

32.2.8 local-server.......................................................................................................... 32-4

32.2.9 primary accounting.............................................................................................. 32-4

TOC-20

3Com Switch 8800 Command Reference Guide TOC

32.2.10 primary authentication....................................................................................... 32-4

32.2.11 radius scheme ................................................................................................... 32-4

32.2.12 reset radius statistics......................................................................................... 32-4

32.2.13 reset stop-accounting-buffer ............................................................................. 32-4

32.2.14 retry ................................................................................................................... 32-4

32.2.15 retry realtime-accounting................................................................................... 32-4

32.2.16 retry stop-accounting......................................................................................... 32-4

32.2.17 secondary accounting ....................................................................................... 32-4

32.2.18 secondary authentication .................................................................................. 32-4

32.2.19 server-type ........................................................................................................ 32-4

32.2.20 state................................................................................................................... 32-4

32.2.21 stop-accounting-buffer enable........................................................................... 32-4

32.2.22 timer .................................................................................................................. 32-4

32.2.23 timer realtime-accounting.................................................................................. 32-4

32.2.24 user-name-format.............................................................................................. 32-4

32.3 TACACS+ Configuration Commands ............................................................................ 32-4

32.3.1 data-flow-format .................................................................................................. 32-4

32.3.2 debugging tacacs+ .............................................................................................. 32-4

32.3.3 display tacacs+.................................................................................................... 32-4

32.3.4 display stop-accounting-buffer tacacs+-scheme................................................. 32-4

32.3.5 tacacs+ nas-ip ..................................................................................................... 32-4

32.3.6 tacacs+ scheme .................................................................................................. 32-4

32.3.7 key....................................................................................................................... 32-4

32.3.8 nas-ip................................................................................................................... 32-4

32.3.9 primary accounting.............................................................................................. 32-4

32.3.10 primary authentication....................................................................................... 32-4

32.3.11 primary authorization......................................................................................... 32-4

32.3.12 reset tacacs+ statistics ...................................................................................... 32-4

32.3.13 reset stop-accounting-buffer ............................................................................. 32-4

32.3.14 retry stop-accounting......................................................................................... 32-4

32.3.15 secondary accounting ....................................................................................... 32-4

32.3.16 secondary authentication .................................................................................. 32-4

32.3.17 secondary authorization .................................................................................... 32-4

32.3.18 timer quiet.......................................................................................................... 32-4

32.3.19 timer realtime-accounting.................................................................................. 32-4

32.3.20 timer response-timeout ..................................................................................... 32-4

32.3.21 user-name-format.............................................................................................. 32-4

Chapter 33 VRRP Configuration Commands ........................................................................... 33-1

33.1 VRRP Configuration Commands ................................................................................... 33-1

33.1.1 debugging vrrp .................................................................................................... 33-1

33.1.2 display vrrp .......................................................................................................... 33-1

33.1.3 display vrrp statistics ........................................................................................... 33-3

TOC-21

3Com Switch 8800 Command Reference Guide TOC

33.1.4 display vrrp summary .......................................................................................... 33-4

33.1.5 reset vrrp statistics .............................................................................................. 33-5

33.1.6 vrrp authentication-mode .................................................................................... 33-5

33.1.7 vrrp method ......................................................................................................... 33-5

33.1.8 vrrp ping-enable .................................................................................................. 33-5

33.1.9 vrrp un-check ttl................................................................................................... 33-5

33.1.10 vrrp vrid preempt-mode..................................................................................... 33-5

33.1.11 vrrp vrid priority.................................................................................................. 33-5

33.1.12 vrrp vrid timer .................................................................................................... 33-5

33.1.13 vrrp vrid track..................................................................................................... 33-5

33.1.14 vrrp vrid virtual-ip............................................................................................... 33-5

Chapter 34 HA Configuration Commands ................................................................................ 34-5

34.1 HA Configuration Commands ........................................................................................ 34-5

34.1.1 display switchover state ...................................................................................... 34-5

34.1.2 display xbar ......................................................................................................... 34-5

34.1.3 slave auto-update config ..................................................................................... 34-5

34.1.4 slave restart......................................................................................................... 34-5

34.1.5 slave switchover .................................................................................................. 34-5

34.1.6 slave update configuration .................................................................................. 34-5

34.1.7 xbar ..................................................................................................................... 34-5

Chapter 35 File System Management Commands ................................................................... 35-1

35.1 File System .................................................................................................................... 35-1

35.1.1 cd......................................................................................................................... 35-1

35.1.2 copy..................................................................................................................... 35-1

35.1.3 delete................................................................................................................... 35-2

35.1.4 dir ........................................................................................................................ 35-3

35.1.5 execute................................................................................................................ 35-4

35.1.6 file prompt............................................................................................................ 35-5

35.1.7 fixdisk .................................................................................................................. 35-5

35.1.8 format .................................................................................................................. 35-6

35.1.9 mkdir.................................................................................................................... 35-6

35.1.10 more .................................................................................................................. 35-7

35.1.11 move.................................................................................................................. 35-8

35.1.12 pwd.................................................................................................................... 35-9

35.1.13 rename ............................................................................................................ 35-10

35.1.14 reset recycle-bin .............................................................................................. 35-11

35.1.15 rmdir ................................................................................................................ 35-11

35.1.16 umount ............................................................................................................ 35-12

35.1.17 undelete........................................................................................................... 35-12

35.2 Configuration File Management Commands ............................................................... 35-13

35.2.1 display current-configuration ............................................................................. 35-13

35.2.2 display saved-configuration............................................................................... 35-18

TOC-22

3Com Switch 8800 Command Reference Guide TOC

35.2.3 display this......................................................................................................... 35-19

35.2.4 display startup ................................................................................................... 35-20

35.2.5 reset saved-configuration.................................................................................. 35-20

35.2.6 save................................................................................................................... 35-21

35.2.7 startup saved-configuration............................................................................... 35-22

35.3 FTP Server Configuration Commands ........................................................................ 35-23

35.3.1 display ftp-server ............................................................................................... 35-23

35.3.2 display ftp-user .................................................................................................. 35-23

35.3.3 ftp disconnect .................................................................................................... 35-24

35.3.4 ftp server enable ............................................................................................... 35-24

35.3.5 ftp timeout.......................................................................................................... 35-25

35.3.6 local-user........................................................................................................... 35-25

35.3.7 local-user password-display-mode.................................................................... 35-26

35.3.8 password ........................................................................................................... 35-27

35.3.9 service-type ....................................................................................................... 35-28

35.4 FTP Client Commands ................................................................................................ 35-29

35.4.1 ascii ................................................................................................................... 35-29

35.4.2 binary................................................................................................................. 35-29

35.4.3 bye..................................................................................................................... 35-30

35.4.4 cd....................................................................................................................... 35-30

35.4.5 cdup................................................................................................................... 35-31

35.4.6 close .................................................................................................................. 35-31

35.4.7 debugging.......................................................................................................... 35-32

35.4.8 delete................................................................................................................. 35-32

35.4.9 dir ...................................................................................................................... 35-33

35.4.10 disconnect ....................................................................................................... 35-33

35.4.11 ftp .................................................................................................................... 35-34

35.4.12 get ................................................................................................................... 35-34

35.4.13 lcd.................................................................................................................... 35-35

35.4.14 ls...................................................................................................................... 35-35

35.4.15 mkdir................................................................................................................ 35-36

35.4.16 open ................................................................................................................ 35-36

35.4.17 passive ............................................................................................................ 35-37

35.4.18 put ................................................................................................................... 35-37

35.4.19 pwd.................................................................................................................. 35-38

35.4.20 quit................................................................................................................... 35-38

35.4.21 remotehelp ...................................................................................................... 35-39

35.4.22 rmdir ................................................................................................................ 35-39

35.4.23 user ................................................................................................................. 35-40

35.4.24 verbose............................................................................................................ 35-40

35.5 TFTP Configuration Commands .................................................................................. 35-41

35.5.1 tftp get ............................................................................................................... 35-41

35.5.2 tftp put ............................................................................................................... 35-41

TOC-23

3Com Switch 8800 Command Reference Guide TOC

Chapter 36 MAC Address Table Management Commands ..................................................... 36-1

36.1 MAC Address Table Management Commands ............................................................. 36-1

36.1.1 display mac-address aging-time ......................................................................... 36-1

36.1.2 display mac-address ........................................................................................... 36-1

36.1.3 mac-address........................................................................................................ 36-3

36.1.4 mac-address max-mac-count.............................................................................. 36-4

36.1.5 mac-address max-mac-count enable forward..................................................... 36-5

36.1.6 mac-address max-mac-count alarm ................................................................... 36-5

36.1.7 mac-address timer .............................................................................................. 36-7

36.1.8 reset mac-address .............................................................................................. 36-8

Chapter 37 Device Management Commands ........................................................................... 37-1

37.1 Device Management Commands .................................................................................. 37-1

37.1.1 boot boot-loader .................................................................................................. 37-1

37.1.2 boot bootrom ....................................................................................................... 37-1

37.1.3 display boot-loader .............................................................................................. 37-2

37.1.4 display cpu .......................................................................................................... 37-3

37.1.5 display device...................................................................................................... 37-4

37.1.6 display environment ............................................................................................ 37-5

37.1.7 display fan ........................................................................................................... 37-5

37.1.8 display memory ................................................................................................... 37-6

37.1.9 display power ...................................................................................................... 37-7

37.1.10 display schedule reboot .................................................................................... 37-7

37.1.11 reboot slot.......................................................................................................... 37-8

37.1.12 schedule reboot at............................................................................................. 37-8

37.1.13 schedule reboot delay ....................................................................................... 37-9

37.1.14 temperature-limit ............................................................................................. 37-10

37.1.15 update l3plus ................................................................................................... 37-11

Chapter 38 System Maintenance Commands .......................................................................... 38-1

38.1 Basic System Configuration and Management Commands .......................................... 38-1

38.1.1 clock datetime ..................................................................................................... 38-1

38.1.2 clock summer-time .............................................................................................. 38-1

38.1.3 clock timezone..................................................................................................... 38-3

38.1.4 ping-distribute enable.......................................................................................... 38-3

38.1.5 sysname .............................................................................................................. 38-4

38.2 System Status and System Information Display Commands ........................................ 38-5

38.2.1 display clock ........................................................................................................ 38-5

38.2.2 display debugging ............................................................................................... 38-6

38.2.3 display fiber-module ............................................................................................ 38-6

38.2.4 display users ....................................................................................................... 38-9

38.2.5 display version................................................................................................... 38-10

38.3 System Debug Commands.......................................................................................... 38-11

38.3.1 debugging.......................................................................................................... 38-11

TOC-24

3Com Switch 8800 Command Reference Guide TOC

38.3.2 display diagnostic-information........................................................................... 38-12

38.4 Network Connection Test Commands ......................................................................... 38-13

38.4.1 ping.................................................................................................................... 38-13

38.4.2 tracert ................................................................................................................ 38-15

38.5 Log Commands............................................................................................................ 38-17

38.5.1 display channel.................................................................................................. 38-17

38.5.2 display info-center ............................................................................................. 38-17

38.5.3 display logbuffer ................................................................................................ 38-19

38.5.4 display logbuffer summary ................................................................................ 38-21

38.5.5 display trapbuffer............................................................................................... 38-22

38.5.6 info-center channel name.................................................................................. 38-23

38.5.7 info-center console channel .............................................................................. 38-24

38.5.8 info-center enable ............................................................................................. 38-25

38.5.9 info-center logbuffer .......................................................................................... 38-26

38.5.10 info-center logfile ............................................................................................. 38-26

38.5.11 info-center loghost........................................................................................... 38-27

38.5.12 info-center loghost source............................................................................... 38-28

38.5.13 info-center monitor channel............................................................................. 38-29

38.5.14 info-center snmp channel................................................................................ 38-29

38.5.15 info-center source ........................................................................................... 38-30

38.5.16 info-center timestamp...................................................................................... 38-35

38.5.17 info-center trapbuffer....................................................................................... 38-36

38.5.18 reset logbuffer ................................................................................................. 38-37

38.5.19 reset trapbuffer ................................................................................................ 38-37

38.5.20 terminal debugging.......................................................................................... 38-38

38.5.21 terminal logging ............................................................................................... 38-38

38.5.22 terminal monitor .............................................................................................. 38-39

38.5.23 terminal trapping ............................................................................................. 38-40

Chapter 39 SNMP Configuration Commands ........................................................................... 39-1

39.1 SNMP Configuration Commands................................................................................... 39-1

39.1.1 display snmp-agent ............................................................................................. 39-1

39.1.2 display snmp-agent community........................................................................... 39-1

39.1.3 display snmp-agent group................................................................................... 39-2

39.1.4 display snmp-agent mib-view.............................................................................. 39-3

39.1.5 display snmp-agent statistics .............................................................................. 39-5

39.1.6 display snmp-agent sys-info................................................................................ 39-6

39.1.7 display snmp-agent usm-user ............................................................................. 39-7

39.1.8 enable snmp trap ................................................................................................ 39-9

39.1.9 snmp-agent community....................................................................................... 39-9

39.1.10 snmp-agent group ........................................................................................... 39-10

39.1.11 snmp-agent local-engineid .............................................................................. 39-11

39.1.12 snmp-agent mib-view ...................................................................................... 39-12

TOC-25

3Com Switch 8800 Command Reference Guide TOC

39.1.13 snmp-agent packet max-size .......................................................................... 39-13

39.1.14 snmp-agent sys-info........................................................................................ 39-13

39.1.15 snmp-agent target-host ................................................................................... 39-14

39.1.16 snmp-agent trap enable .................................................................................. 39-15

39.1.17 snmp-agent trap life ........................................................................................ 39-16

39.1.18 snmp-agent trap queue-size ........................................................................... 39-17

39.1.19 snmp-agent trap source .................................................................................. 39-18

39.1.20 snmp-agent usm-user ..................................................................................... 39-18

39.1.21 undo snmp-agent ............................................................................................ 39-19

Chapter 40 RMON Configuration Commands .......................................................................... 40-1

40.1 RMON Configuration Commands .................................................................................. 40-1

40.1.1 display rmon alarm .............................................................................................. 40-1

40.1.2 display rmon event .............................................................................................. 40-2

40.1.3 display rmon eventlog ......................................................................................... 40-3

40.1.4 display rmon history ............................................................................................ 40-4

40.1.5 display rmon prialarm.......................................................................................... 40-5

40.1.6 display rmon statistics ......................................................................................... 40-7

40.1.7 rmon alarm .......................................................................................................... 40-7

40.1.8 rmon event .......................................................................................................... 40-9

40.1.9 rmon history....................................................................................................... 40-10

40.1.10 rmon prialarm .................................................................................................. 40-11

40.1.11 rmon statistics ................................................................................................. 40-12

Chapter 41 NTP Configuration Commands .............................................................................. 41-1

41.1 NTP Configuration Commands...................................................................................... 41-1

41.1.1 debugging ntp-service......................................................................................... 41-1

41.1.2 display ntp-service sessions ............................................................................... 41-2

41.1.3 display ntp-service status.................................................................................... 41-2

41.1.4 display ntp-service trace ..................................................................................... 41-4

41.1.5 ntp-service access .............................................................................................. 41-4

41.1.6 ntp-service authentication enable ....................................................................... 41-5

41.1.7 ntp-service authentication-keyid.......................................................................... 41-6

41.1.8 ntp-service broadcast-client ................................................................................ 41-6

41.1.9 ntp-service broadcast-server............................................................................... 41-7

41.1.10 ntp-service max-dynamic-sessions ................................................................... 41-8

41.1.11 ntp-service multicast-client................................................................................ 41-8

41.1.12 ntp-service multicast-server .............................................................................. 41-9

41.1.13 ntp-service refclock-master ............................................................................. 41-10

41.1.14 ntp-service reliable authentication-keyid......................................................... 41-11

41.1.15 ntp-service source-interface............................................................................ 41-12

41.1.16 ntp-service unicast-peer.................................................................................. 41-13

41.1.17 ntp-service unicast-server ............................................................................... 41-14

TOC-26

3Com Switch 8800 Command Reference Guide TOC

Chapter 42 SSH Terminal Service Configuration Commands ................................................ 42-1

42.1 SSH Server Configuration Commands .......................................................................... 42-1

42.1.1 debugging ssh server.......................................................................................... 42-1

42.1.2 display rsa local-key-pair public .......................................................................... 42-2

42.1.3 display rsa peer-public-key ................................................................................. 42-3

42.1.4 display ssh server ............................................................................................... 42-4

42.1.5 display ssh user-information ............................................................................... 42-4

42.1.6 peer-public-key end............................................................................................. 42-5

42.1.7 protocol inbound.................................................................................................. 42-6

42.1.8 public-key-code begin ......................................................................................... 42-7

42.1.9 public-key-code end ............................................................................................ 42-7

42.1.10 rsa local-key-pair create.................................................................................... 42-8

42.1.11 rsa local-key-pair destroy .................................................................................. 42-9

42.1.12 rsa peer-public-key.......................................................................................... 42-10

42.1.13 ssh server authentication-retries ..................................................................... 42-10

42.1.14 ssh server compatible_ssh1x enable .............................................................. 42-11

42.1.15 ssh server rekey-interval ................................................................................. 42-11

42.1.16 ssh server timeout ........................................................................................... 42-12

42.1.17 ssh user assign rsa-key .................................................................................. 42-13

42.1.18 ssh user authentication-type ........................................................................... 42-13

42.2 SSH Client Configuration Commands ......................................................................... 42-14

42.2.1 display ssh server-info ...................................................................................... 42-14

42.2.2 quit..................................................................................................................... 42-15

42.2.3 ssh client assign rsa-key ................................................................................... 42-15

42.2.4 ssh client first-time enable................................................................................. 42-16

42.2.5 ssh2................................................................................................................... 42-17

42.3 SFTP Server Configuration Commands ...................................................................... 42-18

42.3.1 sftp server enable.............................................................................................. 42-18

42.3.2 ssh user service-type ........................................................................................ 42-19

42.4 SFTP Client Configuration Commands ....................................................................... 42-19

42.4.1 bye..................................................................................................................... 42-19

42.4.2 cd....................................................................................................................... 42-20

42.4.3 cdup................................................................................................................... 42-20

42.4.4 delete................................................................................................................. 42-21

42.4.5 dir ...................................................................................................................... 42-21

42.4.6 exit..................................................................................................................... 42-22

42.4.7 get ..................................................................................................................... 42-22

42.4.8 help.................................................................................................................... 42-23

42.4.9 ls ........................................................................................................................ 42-23

42.4.10 mkdir................................................................................................................ 42-24

42.4.11 put ................................................................................................................... 42-25

42.4.12 pwd.................................................................................................................. 42-25

42.4.13 quit................................................................................................................... 42-26

TOC-27

3Com Switch 8800 Command Reference Guide TOC

42.4.14 remove ............................................................................................................ 42-26

42.4.15 rename ............................................................................................................ 42-27

42.4.16 rmdir ................................................................................................................ 42-27

42.4.17 sftp................................................................................................................... 42-28

Chapter 43 PoE Configuration Commands .............................................................................. 43-1

43.1 PoE Configuration Commands ...................................................................................... 43-1

43.1.1 display poe interface ........................................................................................... 43-1

43.1.2 display poe interface power ................................................................................ 43-2

43.1.3 display poe pse ................................................................................................... 43-3

43.1.4 display poe slot.................................................................................................... 43-4

43.1.5 poe enable........................................................................................................... 43-4

43.1.6 poe max-power.................................................................................................... 43-5

43.1.7 poe max-power slot............................................................................................. 43-6

43.1.8 poe mode ............................................................................................................ 43-6

43.1.9 poe priority........................................................................................................... 43-7

Chapter 44 PoE PSU Supervision Commands ......................................................................... 44-1

44.1 PoE PSU Supervision Display Commands ................................................................... 44-1

44.1.1 display poe-power ac-input state ........................................................................ 44-1

44.1.2 display poe-power alarm ..................................................................................... 44-2

44.1.3 display poe-power dc-output state ...................................................................... 44-3

44.1.4 display poe-power dc-output value ..................................................................... 44-3

44.1.5 display poe-power switch state ........................................................................... 44-4

44.1.6 display supervision-module information .............................................................. 44-4

44.2 PoE PSU Supervision Configuration Commands.......................................................... 44-6

44.2.1 poe-power input-thresh lower.............................................................................. 44-6

44.2.2 poe-power input-thresh upper ............................................................................. 44-6

44.2.3 poe-power output-thresh lower ........................................................................... 44-7

44.2.4 poe-power output-thresh upper........................................................................... 44-7

TOC-28

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

Chapter 1 Logging into Switch Commands

1.1 Logging into Switch Commands

1.1.1 authentication-mode

Syntax

authentication-mode { password | scheme | none }

View

User interface view

Parameter

password: Performs local password authentication.

scheme: Performs local or remote authentication of username and password.

none: Login without authentication.

Description

Use the authentication-mode command to configure the authentication method for login user.

Use the authentication-mode none command to configure no authentication.

This command with the password parameter indicates to perform local password authentication, that is, you need to configure a login password using the set

authentication password { cipher | simple } password command.

This command with the scheme parameter indicates to perform authentication of local or remote username and password. The type of the authentication depends on your configuration. For detailed information, see “Security” section.

By default, terminal authentication is not required for local users log in via the Console port. However, password authentication is required for local users and remote Modem users log in via the AUX port, and Telnet users log in through Ethernet port.

Example

Configure local password authentication.

[SW8800-ui-aux0] authentication-mode password

1-1

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

auto-execute command

Syntax

auto-execute command text

undo auto-execute command

View

User interface view

Parameter

text: Specifies the command to be run automatically.

Description

Use the auto-execute command command to configure to automatically run a specified command. When a user logs in, the command configured will be executed automatically. The user will be disconnected after that.

Use the undo auto-execute command command to configure not to run the command automatically.

This command is usually used to configure the telnet command on the terminal, which will connect the user to a designated device automatically.

By default, auto run is disabled.

Caution:

z z

If you execute this command, the user-interface can no longer be used to perform routine configurations on the local system. Therefore use caution when using this command.

Ensure that you will be able to log into the system in some other way to cancel the configuration, before you configure the auto-execute command command and save the configuration.

Example

Configure to automatically telnet 10.110.100.1 after the user logs in via VTY 0.

[SW8800-ui-vty0] auto-execute command telnet 10.110.100.1

1-2

3Com Switch 8800 Command Reference Guide

1.1.2 command-privilege level

Chapter 1 Logging into Switch Commands

Syntax

command-privilege level level view view command

undo command-privilege view view command

View

System view

Parameter

level: Specifies the command level, ranging from 0 to 3.

view: Specifies the command view, which can be any of the views supported by the switch.

command: Specifies the command to be configured.

Description

Use the command-privilege level command to configure the priority of the specifically command of the specifically view.

Use the undo command-privilege view command to restore the default command priority.

The command levels include visit, monitoring, configuration, and management, which are identified as 0 through 3 respectively. An administrator assigns authorities as per user requirements and allows them to operate in corresponding views. When a user logs in the switch, the command level that it can access depends on two points. One is the command level that the user itself can access, the other is the set command level of this user interface. If the two levels are different, the former will be taken. For example, the command level of VTY 0 user interface is 1, however, user Tom has the right to access commands of level 3; if Tom logs in from VTY 0 user interface, he can access commands of level 3 and lower.

By default, ping, tracert, and telnet are at visit level (0); display and debugging are at monitoring level (1); all the configuration commands are at configuration level (2); and

FTP, TFTP and commands for file system operations are at management level (3).

Example

Configure the precedence of the command "interface" as 0.

[SW8800] command-privilege level 0 view system interface

1-3

3Com Switch 8800 Command Reference Guide

1.1.3 databits

Chapter 1 Logging into Switch Commands

Syntax

databits { 7 | 8 }

undo databits

View

User interface view

Parameter

Description

Use the databits command to configure the data bits for the user interface.

Use the undo databits command to restore the default bits of the user interface.

This command can only be performed in Console and AUX user interface view.

By default, the value is 8.

Example

7: Sets 7 data bits.

8: Sets 8 data bits.

Configure the data bits of AUX port to 7 bits.

[SW8800-ui-aux0] databits 7

1.1.4 display history-command

Syntax display history-command

View

Any view

Parameter

None

Description

Use the display history-command command to view the saved history commands.

Related command: history-command max-size.

Example

Display history commands.

1-4

3Com Switch 8800 Command Reference Guide

<SW8800> display history-command

sys

quit

display his

Chapter 1 Logging into Switch Commands

1.1.5 display user-interface

Syntax

display user-interface [ type number | number ] [ summary ]

View

Any view

Parameter

type: Specifies the type of a user interface.

number: Specifies the number of a user interface.

Summary: Displays the summary of a user interface.

Description

Use the display user-interface command to view the relational information of the user interface. This command without the summary parameter displays user interface type, absolute/relative index, transmission speed, priority, authentication methods, and physical location. This command with the summary parameter displays one user interface in use totally and user interface name etc.

Example

Display the relational information of user interface 0.

<SW8800> display user-interface 0

Idx Type Tx/Rx Modem Privi Auth Int

+ 0 CON 0 9600 - 3 N -

+ : Current user-interface is active.

F : Current user-interface is active and work in async mode.

Idx : Absolute index of user-interface.

Type : Type and relative index of user-interface.

Privi: The privilege of user-interface.

Auth : The authentication mode of user-interface.

Int : The physical location of UIs.

A: Authenticate use AAA.

N: Current UI need not authentication.

P: Authenticate use current UI's password.

1-5

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

Table 1-1 Description on the fields of the display user-interface command

+

F

Field

Idx

Type

Tx/Rx

Modem

Privi

Description

Current user interface is in use

Current user interface is in use and work in asynchronous mode

Absolute index of user interface

Type and relative index of user interface

User interface speed

Modem operation mode

Which levels of commands can be used after logging in from the user interface

User interface authentication method

The physical location of user interfaces

Auth

Int

Display the summary information of user interface 0.

<SW8800> display user-interface 0 summary

0: U

1 character mode users. (U)

1 total UIs in use.

UI's name: con0

Table 1-2 Description on the fields of the display user-interface summary command

0: U

1 character mode users.

1 total UIs in use.

UI's name

Field Description

User interface type

One type user interface

One user interface in use totally

User interface name

1-6

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

1.1.6 display users

Syntax

display users [ all ]

View

Any view

Parameter

all: Displays the information of all user interfaces.

Description

Use the display users command to view the information of the user interface.

Example

Display the information of the current user interface.

[SW8800] display users

UI Delay Type Ipaddress Username

+ 0 CON 0 00:00:00

Table 1-3 Description on the fields of the display users command

Field

+

UI

Delay

Description

Current user interface is in use and work in asynchronous mode.

Number of the first list is the absolute number of user interface.

Number of the second list is the relative number of user interface.

Indicates the interval from the latest input till now in seconds.

IPaddress

Username

Displays initial connection location, namely the host IP address of the incoming connection.

Display the name of the user using this user interface, namely the login username of the user.

1-7

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

1.1.7 flow-control

Syntax

flow-control { hardware | none | software }

undo flow-control

View

User interface view

Parameter

Description

Use the flow-control command to configure the flow control mode on the user interface.

Use the undo flow-control command to restore the default flow control mode.

By default, the value is none. That is, no flow control will be performed.

This command can only be performed in Console and AUX user interface view.

Example

hardware: Configures to perform hardware flow control.

none: Configures no flow control.

software: Configures to perform software flow control.

Configure software flow control on AUX port.

[SW8800-ui-aux0] flow-control software

1.1.8 free user-interface

Syntax

free user-interface [ type ] number

View

User view

Parameter

type: Specifies the user interface type.

number: Specifies the absolute/relative number of the user interface. Configured together with the type, it will specify the user interface number of the corresponding type. If the type is not specified, number will specify an absolute user interface number.

1-8

3Com Switch 8800 Command Reference Guide

Description

Chapter 1 Logging into Switch Commands

Use the free user-interface command to reset a specified user interface. The user interface will be disconnected after the command is executed.

Note that the current user interface cannot be cleared.

Example

Reset user interface 1 after logged in to the switch via user interface 0.

<SW8800> free user-interface 1

After the command is executed, user interface 1 will be disconnected. It will not be connected to the switch until you log in via the user interface 1 for the next time.

1.1.9 header

Syntax

header [ shell | incoming | login ] text

undo header [ shell | incoming | login ]

View

System view

Parameter

login: Login information in case of authentication. It is displayed before the user is prompted to enter user name and password.

shell: User conversation established header, the information output after user conversation has been established. If authentication is required, it is prompted after the user passes authentication.

incoming: Login header, the information output after a Modem user logs in. If authentication is required, it is prompted after the user passes authentication. In this case, no shell information is output.

text: Specifies the title text. If you do not choose any keyword in the command, the system displays the login information by default. The system supports two types of input modes: one is to input all the text in one line, and altogether 256 characters, including command key word, can be input; the other is to input all the text in several lines using the <Enter> key, and altogether 1024 characters, excluding command key word, can be input. The text starts and ends with the first character. After inputting the end character, press the <Enter> key to exit the interact process.

Description

Use the header command to configure to display header when user login.

Use the undo header command to configure not to display the header.

1-9

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

When the users log in the switch, if a connection is activated, the login header will be displayed. After the user successfully logs in the switch, the shell header will be displayed.

Note that if you press <Enter> after typing any of the three keywords shell, login and

incoming in the command, then what you type after the word header is the contents of the login information, instead of identifying header type.

You can judge whether the initial character can be used as the header contents this way:

1) If there is only one character in the first line and it is used as the identifier, this initial character pairs with the ending character and is not the header contents.

2) If there are many characters in the first line but the initial and ending characters are different, this initial character pairs with the ending character and is the header contents.

3) There are many characters in the first line and the initial character is identical with the ending character, this initial character is not the header contents.

Example

Configure the header of setting up a session.

Mode 1: Input in one line

[SW8800] header shell %SHELL: Hello! Welcome%

(The starting and ending characters must be the same, and press the <Enter> key to finish a line)

When you log on the switch again, the terminal displays the configured session establishment title.

[SW8800] quit

<SW8800> quit

Please press ENTER

SHELL: Hello! Welcome

(The initial character “%” is not the header contents)

<SW8800>

Mode 2: Input in several lines

[SW8800] header shell % SHELL:

(After you pressing the <Enter> key, the system prompts the following message:)

Input banner text, and quit with the character '%'.

Go on inputting the rest text and end your input with the first letter:

Hello! Welcome %

(Press the <Enter> key)

[SW8800]

When you log on the switch again, the terminal displays the configured session establishment title.

[SW8800] quit

<SW8800> quit

1-10

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

Please press ENTER

%SHELL:

(The initial character “%” is the header contents)

Hello! Welcome

<SW8800>

1.1.10 history-command max-size

Syntax

history-command max-size value

undo history-command max-size

View

User interface view

Parameter

value: Defines the size of the history buffer, ranging from 0 to 256. By default, the size is

10, that is, 10 history commands can be saved.

Description

Use the history-command max-size command to configure the size of the history command buffer.

Use the undo history-command max-size command to restore default size of the history command buffer.

Example

Set the history buffer to 20, namely saving 20 history commands.

[SW8800-ui-aux0] history-command max-size 20

1.1.11 idle-timeout

Syntax

idle-timeout minutes [ seconds ]

undo idle-timeout

View

User interface view

Parameter

minutes: Specifies the minute, ranging from 0 to 35791.

seconds: Specifies the second, ranging from 0 to 59.

1-11

3Com Switch 8800 Command Reference Guide

Description

Chapter 1 Logging into Switch Commands

Use the idle-timeout command to configure the timeout function. If there is no user operation performed before idle-timeout expires, the user interface will be disconnected.

Use the undo idle-timeout command to restore the default idle-timeout.

idle-timeout 0 means disabling idle-timeout.

By default, idle-timeout is set to 10 minutes.

Example

Configure the timeout value to 1 minute on the AUX user interface.

[SW8800-ui-aux0] idle-timeout 1 0

1.1.12 language-mode

Syntax

language-mode { chinese | english }

View

User view

Parameter

chinese: Configures the language environment of command line interface as Chinese.

english: Configures the language environment of command line interface as English.

Description

Use the language-mode command to switch between different language environments of command line interface for convenience of different users.

By default, the value is English.

Example

Switch from English mode to Chinese mode.

<SW8800> language-mode chinese

1.1.13 lock

Syntax lock

View

User view

1-12

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 1 Logging into Switch Commands

Description

Use the lock command to lock the user interface to prevent unauthorized user from operating it.

Example

Lock the current user interface.

<SW8800> lock

Password: xxxx

Again: xxxx

1.1.14 modem

Syntax

modem [ call-in | both ]

undo modem [ call-in | both ]

View

User interface view

Parameter

call-in: Configures to allow call-in.

both: Configures to allow call-in and call-out.

Description

Use the modem command to configure the call-in and call-out attributes of the Modem.

Use the undo modem command to cancel the configuration of Modem call-in and call-out attributes.

The modem command without parameters is used to allow call-in and call-out.

The undo modem command without parameters is used to ban call-in and call-out.

This command can only be performed in AUX user interface view.

Example

Configure to allow call-in and call-out of Modem on the AUX port.

[SW8800-ui-aux0] modem both

1-13

3Com Switch 8800 Command Reference Guide

1.1.15 modem auto-answer

Chapter 1 Logging into Switch Commands

Syntax

View

User interface view

Parameter

None

Description

Use the modem auto-answer command to configure the answer mode as auto-answer.

Use the undo modem auto-answer command to configure the answer mode as manual answer.

By default, the mode is set to manual answer.

This command can only be performed in AUX user interface view.

Example

modem auto-answer

undo modem auto-answer

Configure the answer mode of the Modem on the AUX port as auto-answer.

[SW8800-ui-aux0] modem auto-answer

1.1.16 modem timer answer

Syntax

modem timer answer seconds

undo modem timer answer

View

User interface view

Parameter

seconds: Specifies the timer answer in seconds, ranging from 1 to 60.The default value is 30s.

Description

Use the modem timer answer command to configure the timer answer from off-hook to carrier detected when establishing the call in connection.

1-14

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

Use the undo modem timer answer command to restore the default timeout value.

This command can only be performed in AUX user interface view.

Example

Set the timer answer of AUX 0 to 45s.

[SW8800-ui-aux0] modem timer answer 45

1.1.17 parity

Syntax

parity { even | mark | none | odd | space }

undo parity

View

User interface view

Parameter

Description

Use the parity command to configure the parity mode on the user interface.

Use the undo parity command to restore the default parity mode.

This command can only be performed in Console and AUX user interface view.

By default, the mode is set to none.

Example

even: Configures to perform even parity.

mark: Configures to perform mark parity.

none: Configures not to perform parity.

odd: Configures to perform odd parity.

space: Configures to perform space parity.

Set mark parity on the AUX port.

[SW8800-ui-aux0] parity mark

1.1.18 protocol inbound

Syntax

protocol inbound { all | telnet | ssh }

View

User interface view

1-15

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 1 Logging into Switch Commands

all: Specifies to support all the protocols including Telnet and SSH.

ssh: Specifies to support SSH protocol only.

telnet: Specifies to support Telnet protocol only.

Description

Use the protocol inbound command to set the protocols to be used when logging in.

By default, all the protocols are set to be used for user login

Related command: user-interface vty.

Example

Set the Telnet protocol to be used for user login.

[SW8800-ui-aux0] protocol inbound telnet

1.1.19 quit

Syntax

quit

View

Any view

Parameter

None

Description

Use the quit command to return to the lower level view from the current view. If the current view is user view, you can quit the system.

There are three levels of views, which are listed from low to high as follows: z z z

User view

System view

VLAN view, Ethernet port view, and so on.

Related command: see return, system-view.

Example

Return to user view from system view.

[SW8800] quit

<SW8800>

1-16

3Com Switch 8800 Command Reference Guide

1.1.20 return

Chapter 1 Logging into Switch Commands

Syntax

return

View

System view or above

Parameter

None

Description

Use the return command to return to user view from a view other than user view.

Combination key <Ctrl+Z> performs the same function with the return command.

Related command: quit.

Example

Return to user view from system view.

[SW8800] return

<SW8800>

1.1.21 screen-length

Syntax

screen-length screen-length

undo screen-length

View

User interface view

Parameter

screen-length: Specifies how many lines can be displayed on a screen, ranging from 0 to 512. The default value is 24.

Description

Use the screen-length command to configure how many lines that can be displayed on a screen of the terminal.

Use the undo screen-length command to restore the default number of terminal information lines displayed on the terminal screen.

The screen-length 0 command is used to disable this function.

1-17

3Com Switch 8800 Command Reference Guide

Example

Chapter 1 Logging into Switch Commands

Configure the lines that can be displayed on a screen as 20 lines.

[SW8800-ui-aux0] screen-length 20

1.1.22 send

Syntax

send { all | number | type number }

View

User view

Parameter

Description

Use the send command to send messages between different user interfaces.

Example

all: Configures to send message to all user interfaces.

type: Specifies the user interface type, which can be console, aux or vty.

number: Specifies the absolute/relative number of the user interface. If the type is specified, it is a relative number. For aux or console user type, it can be 0 only. For vty user type, it ranges from 0 to 4. If the type is not specified, it is an absolute number, which ranges from 0 to 6.

Send message to all the user interfaces.

<SW8800> send all

1.1.23 service-type telnet

Syntax

service-type telnet [ level level ]

undo service-type telnet [ level ]

View

Parameter

Local-user view

level: Specifies which level of command a user can use after logon, ranging from 0 to 3 and defaults to level 1.

1-18

3Com Switch 8800 Command Reference Guide

Description

Chapter 1 Logging into Switch Commands

Use the service-type telnet command to configure which level of command a user can use after logon.

Use the undo service-type telnet command to restore the default level of command a user can use after logon.

Commands are classified into four levels, namely visit level, monitoring level, configuration level and management level. They are introduced as follows: z z z z

Visit level: Commands of this level involve command of network diagnosis tool

(such as ping and tracert), command of switch between different language environments of user interface ( language-mode), and telnet command etc. The operation of saving configuration file is not allowed on this level of commands.

Monitoring level: Commands of this level, including the display command and the

debugging command, are used for system maintenance, service fault diagnosis, etc. The operation of saving the configuration file is not allowed on this level of commands.

Configuration level: Service configuration commands, including routing command and commands on each network layer, are used to provide direct network service to the user.

Management level: These are commands that influence the basic operation of the system and system support module, which plays a supporting role on service.

Commands of this level involve file system commands, FTP commands, TFTP commands, XModem downloading commands, user management commands, and level setting commands.

Example

Configure the user zbr to use commands at level 0 after logon.

[SW8800] local-user zbr

[SW8800-luser-zbr] service-type telnet level 0

Quit the system and logs on with username “zbr” again. Now only the commands at level 0 are listed on the terminal.

[SW8800] quit

<SW8800> ?

User view commands:

debugging Enable system debugging functions

language-mode Specify the language environment

ping Ping function

quit

super

telnet

Exit from current command view

Privilege current user a specified priority level

Establish one TELNET connection

tracert Trace route function

undo Cancel current setting

1-19

3Com Switch 8800 Command Reference Guide

1.1.24 set authentication password

Chapter 1 Logging into Switch Commands

Syntax

set authentication password { cipher | simple } password

undo set authentication password

View

User interface view

Parameter

cipher: Displays the current password with cipher text.

simple: Displays the current password with plain text.

password: If the authentication is in the simple mode, the password must be in plain text. If the authentication is in the cipher mode, the password can be either in encrypted text or in plain text. The result is determined by the input. A plain text password is a sequential character string of no more than 16 digits, for example,

SW8800918. The length of an encrypted password must be 24 digits and in encrypted text, for example, _(TT8F]Y\5SQ=^Q`MAF4<1!!.

Description

Use the set authentication password command to configure the password for local authentication.

Use the undo set authentication password command to cancel local authentication password.

The password in plain text is required when performing authentication, regardless whether the configuration is plain text or encrypted text.

Note:

By default, password is required to be set for authenticating local users and remote

Modem users log in via the AUX port, and Telnet users log in through Ethernet port. If no password has been set, the following prompt will be displayed “Login password has not been set.”

Example

Configure the local authentication password on VTY 0 to aaa.

[SW8800-ui-vty0] set authentication password simple aaa

1-20

3Com Switch 8800 Command Reference Guide

1.1.25 shell

Chapter 1 Logging into Switch Commands

Syntax shell undo shell

View

User interface view

Parameter

None

Description

Use the shell command to enable terminal service of a user interface.

Use the undo shell command to disable the terminal service of a user interface.

By default, terminal service is enabled. z z

When using the undo shell command, note the following points. z

The undo shell command can only be used on the user interfaces other than the

Console user interface.

You cannot use this command on the user interface via which you log in.

You will be asked to confirm before executing this command on any legal user interface.

Example

Disable terminal service on the vty user interface 0 to 4 after logging in to the switch via user interface 0.

[SW8800] user-interface vty 0 4

[SW8800-ui-vty0-4] undo shell

1.1.26 speed

Syntax

speed speed-value

undo speed

View

User interface view

1-21

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 1 Logging into Switch Commands

speed-value: Specifies the transmission rate on the user interface in bit/s, which can be

300, 600, 1200, 2400, 4800, 9600, 19200, 38400, 57600, or 115200. The default rate is

9600bit/s.

Description

Use the speed command to configure the transmission rate on the user interface. Use the undo speed command to restore the default rate. This command can only be performed in Console and AUX user interface view.

Note that AUX user interface does not support the transmission rate: 57600bit/s and

115200bit/s.

Example

Configure the transmission speed on the AUX port as 9600bit/s.

[SW8800-ui-aux0] speed 9600

1.1.27 stopbits

Syntax

stopbits { 1 | 1.5 | 2 }

undo stopbits

View

User interface view

Parameter

1: Sets 1 stop bit.

1.5: Sets 1.5 stop bits.

2: Sets 2 stop bits.

Description

Use the stopbits command to configure the stop bits on the user interface.

Use the undo stopbits command to restore the default stop bits.

This command can only be performed in Console and AUX user interface view.

By default, the value is 1.

Note that setting 1.5 stop bits is not available on the Switch 8800.

1-22

3Com Switch 8800 Command Reference Guide

Example

Configure 2 stop bits on the AUX port.

[SW8800-ui-aux0] stopbits 2

Chapter 1 Logging into Switch Commands

1.1.28 super

Syntax

super [ level ]

View

User view

Parameter

level: User level, ranging 0 to 3. The default value is 3.

Description

Use the super command to enable the user to change to user level from the current user level. If the user has set the super password [ level level ] { simple | cipher }

password, then user password of the higher level is needed, or the former user level will not change.

Login users are classified into four levels that correspond to the four command levels respectively. After users of different levels log in, they can only use commands at the levels that are equal to or lower than its own level.

Related command: super password, quit.

Example

change to user level 3 from the current user level.

<SW8800> super 3

Password:

1.1.29 super password

Syntax

super password [ level level ] { simple | cipher } password

undo super password [ level level ]

View

System view

1-23

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 1 Logging into Switch Commands

level: Specifies the entering password of the specified priority, ranging from 1 to 3. The default value is 3, i.e. do not specify user level. It means the password to be set is used for entering level 3.

simple: Displays the current password with plain text.

cipher: Displays the current password with cipher text.

password: If the authentication is in the simple mode, the password must be in plain text. If the authentication is in the cipher mode, the password can either be in encrypted text or in plain text. The result is determined by the input. A plain text password is a sequential character string of no more than 16 digits, for example,

SW8800918. The length of an encrypted password must be 24 digits and in encrypted text, for example, _(TT8F]Y\5SQ=^Q`MAF4<1!!.

Description

Use the super password command to configure the password for changing the user from a lower level to a higher level. In order to prevent unauthorized users from illegal intrusion, user ID authentication is performed when users switch from a lower level to a higher level. For the sake of confidentiality, on the screen the user cannot see the password that he entered. Only when correct password is input for three times, can the user switch to the higher level. Otherwise, the original user level will remain unchanged.

Use the undo super password command to cancel the current settings.

The password in plain text is required when performing authentication, regardless whether the configuration is plain text or encrypted text.

Example

Configure the password to zbr for changing the user from the current level to level 3.

[SW8800] super password level 3 simple zbr

1.1.30 sysname

Syntax

sysname text

undo sysname

View

Parameter

System view

text: Specifies the hostname with a character string, ranging from 1 to 30 characters.

The default name is SW8800.

1-24

3Com Switch 8800 Command Reference Guide

Description

Chapter 1 Logging into Switch Commands

Use the sysname command to configure the hostname of the switch.

Use the undo sysname command to restore the default hostname.

Changing the hostname of the switch will affect the prompt of command line interface.

For example, if the hostname of the switch is SW8800, the prompt in user view will be

<SW8800>.

Example

Configure the hostname of switch to Switch.

[SW8800] sysname Switch

[Switch]

1.1.31 system-view

Syntax system-view

View

User view

Parameter

None

Description

Use the system-view command to enter system view from user view.

Related command: quit, return.

Example

Enter system view from user view.

<SW8800> system-view

System View: return to User View with Ctrl+Z..

[SW8800]

1.1.32 telnet

Syntax

telnet [ vpn-instance vpn-instance-name ] { hostname | ip-address } [ service-port ]

View

User view

1-25

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 1 Logging into Switch Commands

vpn-instance vpn-instance-name: Specifies vpn-instance of MPLS VPN.

hostname: Specifies the host name of the remote system. It is configured using the ip

host command.

ip-address: Specifies the IP address of the remote switch.

service-port: Designates the TCP port on the remote switch providing Telnet service, ranging from 0 to 65535.

Description

Use the telnet command to log in to another switch from the current one via telnet for remote management. To terminate the Telnet logon, press <Ctrl+K>.

By default, when the service-port is not specified, the default telnet port number is 23.

Related command: display tcp status.

Example

Log in to switch SW88002 at 129.102.0.1 from the current SW88001 switch.

<SW88001> telnet 129.102.0.1

Trying 129.102.0.1...

Press CTRL+K to abort

Connected to 129.102.0.1...

<SW88002>

1.1.33 user-interface

Syntax

user-interface [ type ] first-number [ last-number ]

View

System view

Parameter

type: Specifies the user interface type, which can be aux, console or vty.

first-number: Specifies the number of the first user interface to be configured. It must be an integer in the range of 0 to 6.

last-number: Specifies the number of the last user interface to be configured. It must be an integer in the range of 1 to 6 and it must be greater than the value of first-number.

Description

Use the user-interface command to enter single user interface view to configure the corresponding user interfaces.

1-26

3Com Switch 8800 Command Reference Guide

Example

Chapter 1 Logging into Switch Commands

Enter vty 0 user interface view for configuration.

[SW8800] user-interface vty 0

[SW8800-ui-vty0]

1.1.34 user privilege level

Syntax

user privilege level level

undo user privilege level

View

User interface view

Parameter

level: Specifies which level of command a user can use after logon from the specifically user interface, ranging from 0 to 3.

Description

Use the user privilege level command to configure which level of command a user can use after logon from the specifically user interface, so that a user can use all the available commands at this level.

Use the undo user privilege level command to restore the default level of command a user can use after logon from the specifically user interface.

By default, a user can access the commands at Level 3 after logging in through the

Console user interface, and the commands at Level 0 after logging in through the AUX or VTY user interface.

Example

Configure to use commands level 0 after logging in from VTY 0 user interface.

[SW8800-ui-vty0] user privilege level 0

After you telnet from VTY 0 user interface to the switch, you will view the terminal only displays commands at level 0.

<SW8800> ?

User view commands:

debugging Enable system debugging functions

language-mode Specify the language environment

ping Ping function

quit Exit from current command view

super Privilege current user a specified priority level

1-27

3Com Switch 8800 Command Reference Guide Chapter 1 Logging into Switch Commands

telnet

tracert

Establish one TELNET connection

Trace route function

undo Cancel current setting

1-28

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

Chapter 2 Ethernet Port Configuration Commands

2.1 Ethernet Port Configuration Commands

2.1.1 broadcast-suppression

Syntax

broadcast-suppression pct

undo broadcast-suppression

View

Ethernet port view

Parameter

pct: Specifies the maximum wire speed ratio of the broadcast traffic allowed on the port, the smaller the ratio is, the smaller the broadcast traffic is allowed. For the Ethernet port, the value ranges from 5 to 100, in steps of 5. By default, the value is 50. For the 1000

Mbps or 10 Gbps port, the value ranges from 1 to 100, in steps of 1. By default, the value is 50.

Description

Use the broadcast-suppression command to configure the broadcast traffic size enabled on port. Once the broadcast traffic exceeds the value set by the user, the system will discard some broadcast to ensure network service so that the traffic ratio of broadcast is maintained in a proper range.

Use the undo broadcast-suppression command to restore the default broadcast traffic enabled on port, that is, 50.

Example

Enable 20% broadcast traffic to pass, i.e. 80% broadcast storm suppression is made on broadcast traffic of port.

[SW8800-Ethernet2/1/1] broadcast-suppression 20

2.1.2 copy configuration

Syntax

copy configuration source { interface-type interface-number | interface-name |

aggregation-group agg-id } destination { interface_list [ aggregation-group agg-id ]

| aggregation-group agg-id }

2-1

3Com Switch 8800 Command Reference Guide

View

System view

Parameter

Chapter 2 Ethernet Port Configuration Commands

interface_type: Source port type.

interface_num: Source port number.

interface_name: Source port name, in the format of interface_name = interface_type

interface_num. For more information, see the parameter item for the interface command.

interface_list: Destination port list, interface_list = { interface_type interface_num |

interface_name } [ to { interface_type interface_num | interface_name } ] &<1-10>.

&<1-10> indicates that the former parameter can be input 10 times repeatedly at most.

agg-id: Source or destination aggregation group ID. If it is a source aggregation group, the port with minimum port number is the source port; if it is a destination aggregation group, the configurations of all its member ports change to be consistent with that of the source.

Description

Use the copy configuration command to copy the configuration of a specific port to other ports, to ensure consistent configuration.

Example

Copy the configuration of aggregation group 1 to aggregation group 2.

[SW8800] copy configuration source aggregation-group 1 destination aggregation-group 2

2.1.3 description

Syntax

description text

undo description

View

Ethernet port view

Parameter

text: Port description character string, with 80 characters at most.

2-2

3Com Switch 8800 Command Reference Guide

Description

Chapter 2 Ethernet Port Configuration Commands

Use the description command to configure the description character string for

Ethernet port.

Use the undo description command to cancel the port description character string.

By default, the port description character string is null.

Example

Configure the description character string of Ethernet port Ethernet2/1/1 as lanswitch-interface.

[SW8800-Ethernet2/1/1] description lanswitch-interface

2.1.4 display counters

Syntax

display counters [ rate ] { inbound | outbound } interface [ interface-type ]

View

Any view

Parameter

rate: Displays the rate information of the ports in UP status during the latest sampling period. If this keyword is not specified in the command, the system displays packet counts.

inbound: Displays the import statistic information.

outbound: Displays the export statistic information.

interface-type: Specifies the port type. The available types are: Ethernet,

GigabitEthernet.

Description

Use the display counters command to view the statistics on the ports of the specified types. If the port type is not specified, the system displays statistics orderly on all the ports.

Example

Display the inbound statistics on the GigabitEthernet ports.

<SW8800> display counters inbound interface GigabitEthernet

Interface Total(pkts) BroadCast(pkts) MultiCast(pkts) Err(pkts)

GE3/2/1 12,345,678,912,345 OverFlow 12,345,678,912,345 1,234,567

GE3/2/2 0 0 0 0

GE3/2/3 0 0 0 0

2-3

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

GE3/2/4 0 0 0 0

OverFlow :more than 14 decimal digits(7 digits for column "Err").

:not supported.

Note:

Statistic values are comma-separated decimal numbers. For the Total, BroadCast and

MultiCast items, decimal numbers of 14 digits can be displayed at most, and those of more than 14 digits are indicated with “OverFlow”; for the Err item, decimal numbers of

7 digits can be displayed at most, and those of more than 7 digits are indicated with

“OverFlow”.

2.1.5 display interface

Syntax

display interface [ interface_type | interface_type interface_num [packets] |

interface_name ]

View

Any view

Parameter

Description

Use the display interface command to view the configuration information on the port.

If the port type and number are not specified when displaying the port information, the information of all the ports will be displayed. If only the port type is specified, all the information of the ports of this type will be displayed. If both port type and port number are specified, the information of the designated port will be displayed.

Example

interface_type: Specifies the port type.

interface_num: Specifies the port number.

interface_name: Specifies the port name in the interface_name= interface_type

interface_num format.

For parameter description, refer to the interface command.

Display configuration information of Ethernet2/1/1.

<SW8800> display interface ethernet2/1/1

Ethernet2/1/1 current state : UP

2-4

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is

00e0-fc00-85ff

The Maximum Transmit Unit is 1500

Media type is twisted pair, loopback not set

Port hardware type is 100_BASE_TX

100Mbps-speed mode, full-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation

Flow-control is not enabled

The Maximum Frame Length is 1552

Broadcast MAX-ratio: 100%

Allow jumbo frame to pass

MixInsert-Port VPN status:not enable MixInsert access

PVID: 48

Mdi type: auto

Port link-type: access

Tagged VLAN ID : none

Untagged VLAN ID : 48

Last 300 seconds input: 0 packets/sec 61 bits/sec 1%

Last 300 seconds output: 0 packets/sec 0 bits/sec 1%

Input(total): 54 packets, 7465 bytes

42 broadcasts, 5 multicasts

Input(normal): 54 packets, 7465 bytes

- broadcasts, - multicasts

Input: 0 input errors, 0 runts, 0 giants, 0 throttles, 0 CRC

0 frame, 0 overruns, - aborts, 0 ignored, - parity errors

Output(total): 1 packets, 64 bytes

0 broadcasts, 0 multicasts, 0 pauses

Output(normal): 1 packets, 64 bytes

- broadcasts, - multicasts, 0 pauses

Output: 0 output errors, - underruns, - buffer failures

0 aborts, 0 deferred, - collisions, 0 late collisions

- lost carrier, - no carrier

Receive Packet Peak Value Info: 7215 bytes, happened at 03:30:35 3-7-2001

Transmit Packet Peak Value Info: 64 bytes, happened at 03:30:35 3-7-2001

Table 2-1 Description on the fields of the display interface command

Field

Ethernet2/1/1 current state

IP Sending Frames' Format

Hardware address

The Maximum Transmit Unit

Description

The current status of Ethernet port

(enabled or disabled)

Ethernet frame format

Port hardware address

Maximum transmit unit

2-5

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

Field

Media type loopback not set

Port hardware type

Description

Type of media

Port loopback test status

Port hardware type

100 Mbps-speed mode, full-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation

Both the duplex mode and the rate are set to auto-negotiation. The rate of

100 Mbps and the mode of full-duplex are adopted after negotiating with its peer

Flow-control is not enabled

The Maximum Frame Length

Port flow control status

Maximum length of the Ethernet frames that can pass the port

Broadcast MAX-ratio

Allow jumbo frame to pass

Port broadcast storm suppression ratio

Jumbo frame is allowed to pass the port

Port VPN status

PVID

Mdi type

Port link-type

Tagged VLAN ID

Port VPN status (enable or not VPN access)

Port default VLAN ID

Cable type

Port link type

The VLANs with packets tagged

Untagged VLAN ID The VLANs with packets untagged

Last 300 seconds input: 0 packets/sec 0 bits/sec

Last 300 seconds output: 0 packets/sec 0 bits/sec

The input/output rate and the passing packet number on this port in the last

300 seconds.

2-6

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

Field Description

Input(total): 0 packets, 0 bytes

0 broadcasts, 0 multicasts

Input(normal): 0 packets, 0 bytes

- broadcasts, - multicasts

Input: 0 input errors, 0 runts, 0 giants, 0 throttles, 0 CRC

0 frame, 0 overruns, - aborts, 0 ignored, - parity errors

Output(total): 0 packets, 0 bytes

0 broadcasts, 0 multicasts, 0 pauses

Output(normal): 0 packets, 0 bytes

- broadcasts, - multicasts, 0 pauses

Output: 0 output errors, - underruns, - buffer failures

0 aborts, 0 deferred, - collisions, 0 late collisions

- lost carrier, - no carrier

The statistics information of input/output packets and errors on this port. “-” indicates that the item doesn’t supported by the switch.

2.1.6 display port

Syntax

display port { hybrid | trunk }

View

Any view

Parameter

Description

Use the display port command to view the ports in the current system, whose link type is Hybrid or Trunk. If there is any such port, display the corresponding port name.

Example

hybrid: Displays Hybrid port.

trunk: Displays Trunk port.

Display the Hybrid ports in the current system.

<SW8800> display port hybrid

The following hybrid ports exist:

Ethernet2/1/1 Ethernet2/1/2

2-7

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

The above information displays that the current system has two Hybrid ports,

Ethernet2/1/1 and Ethernet2/1/2.

2.1.7 display port vlan-vpn

Syntax display port vlan-vpn

View

Any view

Parameter

None

Description

Use the display port vlan-vpn command to view the ports on which VLAN VPN has been enabled and the VLAN ID of the VLAN VPN.

Example

Display the related information of the port VLAN VPN feature.

<SW8800> display port vlan-vpn

Ethernet2/1/1

VLAN-VPN status: enabled

VLAN-VPN VLAN: 1

Ethernet2/1/2

VLAN-VPN status: enabled

VLAN-VPN VLAN: 2

Table 2-2 Description on the fields of the display port vlan-vpn command

Field

Ethernet2/1/1

VLAN-VPN status

VLAN-VPN VLAN

Description

The Ethernet port on which VLAN VPN has been enabled.

VLAN VPN status.

VLAN ID of the VLAN VPN.

2.1.8 duplex

Syntax

duplex { auto | full | half }

undo duplex

2-8

3Com Switch 8800 Command Reference Guide

View

Ethernet port view

Chapter 2 Ethernet Port Configuration Commands

Parameter

auto: Port auto-negotiation attribute.

full: Port full-duplex attribute.

half: Port half-duplex attribute.

Description

Use the duplex command to configure the duplex attribute of the Ethernet port.

Use the undo duplex command to restore the duplex attribute of the port to default auto-negotiation mode.

By default, the duplex attribute is auto.

Related command: speed.

Example

Configure the Ethernet port Ethernet2/1/1 as auto-negotiation attribute.

[SW8800-Ethernet2/1/1] duplex auto

2.1.9 flow-control

Syntax flow-control undo flow-control

View

Ethernet port view

Parameter

None

Description

Use the flow-control command to enable flow control feature on the Ethernet port to avoid discarding data packets due to congestion.

Use the undo flow-control command to disable flow control feature.

By default, flow control on the Ethernet port is disabled.

Example

Enable flow control on Ethernet2/1/1.

2-9

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

[SW8800-Ethernet2/1/1] flow-control

2.1.10 link-status hold

Syntax

link-status hold hold-time

undo link-status hold

View

System view

Parameter

hold-time: Sets time interval (in seconds) for port suppression. The value 0 indicates no suppression. By default, the time interval is 3 seconds.

Description

Use the link-status hold hold-time command to set port hold time. When you enable/disable ports frequently, the switch may fail. Therefore, the function is provided to prohibit frequent change of the port status.

Use the undo link-status hold command to restore the default port hold time, 3 seconds.

2.1.11 interface

Syntax

interface { interface_type interface_num | interface_name }

View

Parameter

System view

interface_type: Specifies the port type. It can be Aux, Ethernet, Loopback, M-Ethernet,

NULL, VLAN-interface, GigabitEthernet, and 10-GigabitEthernet.

interface_num: Specifies the port number. It adopts slot-number/subslot-number/

port-number format. slot-number specifies the I/O module slot number of the port. For the 7-slot chassis, it ranges from 2 to 6. For the 10-slot chassis, it ranges from 0 to 3 and 6 to 9 (slot number 4 and 5 are for the Fabric). For the 14-slot chassis, it ranges from 0 to 5 and 8 to 13 (slot number 6 and 7 are for the Fabric). subslot-number specifies the sub-slot number of the port and ranges from 1 to 3. port-number specifies the port number on the daughter card. It is 1 or ranges from 1 to 12, 20, or 48, depending on the service board type. M-Ethernet is used to update and maintain. It ranges from 0/0/0.

2-10

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

interface_name: Specifies the port name in the interface_type interface_num format.

Description

Use the interface command to enter the Ethernet port view.

If the user wants to configure the related parameters of the Ethernet port, he must first use this command to enter the Ethernet port view.

Example

Enter the Ethernet2/1/1 port view.

[SW8800] interface ethernet2/1/1

2.1.12 jumboframe enable

Syntax

jumboframe enable [ jumboframe-value ]

undo jumboframe enable

View

Ethernet port view

Parameter

Description

Use the jumboframe enable command to permit jumbo frame to pass the current

Ethernet port.

Use the undo jumboframe enable command to prohibit jumbo frame to pass the current Ethernet port.

By default, the jumbo frame is permitted to pass the Ethernet port.

Note that, the values can be consecutive, but the effective values are discrete. The effective frame length for the FE port is 1,552. The effective frame length for the GE port and 10 GE port is 1,552, 9,022, 9,192 and 10,240. You can execute the display

interface command to view the configured effective value for the port.

Example

jumboframe-value: Size of jumbo frame permitted to pass the port, in the range of 1,536 to 1,552 for an FE port, and 1,536 to 10,240 for a GE or 10 GE port.

Permit jumbo frame to pass Ethernet2/1/1.

[SW8800-Ethernet2/1/1] jumboframe enable

2-11

3Com Switch 8800 Command Reference Guide

2.1.13 loopback

Chapter 2 Ethernet Port Configuration Commands

Syntax

View

Ethernet port view

Parameter

external: Ethernet port in external loop mode. The Switch 8800 does not support external mode.

internal: Ethernet port in internal loop mode.

Description

Use the loopback command to set the Ethernet port in loop mode.

Use the undo loopback command to cancel the loop setting.

By default, the Ethernet port is not in loop mode.

Example

loopback { external | internal }

undo loopback

Configure Ethernet2/1/1 in internal loop mode.

[SW8800-Ethernet2/1/1] loopback internal

2.1.14 mdi

Syntax

mdi { across | auto | normal }

undo mdi

View

Parameter

Ethernet port view

across: Network cable type is cross-over cable.

auto: Network cable will be recognized whether it is straight-through cable or cross-over cable.

normal: Network cable of the port is straight-through cable.

2-12

3Com Switch 8800 Command Reference Guide

Description

Chapter 2 Ethernet Port Configuration Commands

Use the mdi command to configure the network cable type of the Ethernet ports. Use the undo mdi command to restore the default type.

By default, the network cable type will be recognized automatically.

Note that the settings only take effect on the 10/100 Mbps and 10/100/1000 Mbps electrical ports.

Example

Configure the network cable type of Ethernet port Ethernet2/1/1 as auto.

[SW8800-Ethernet2/1/1] mdi auto

2.1.15 port access vlan

Syntax

port access vlan vlan_id

undo port access vlan

View

Ethernet port view

Parameter

vlan_id: VLAN ID defined in IEEE802.1Q, ranging from 2 to 4,094.

Description

Use the port access vlan command to join the access port to a specified VLAN.

Use the undo port access vlan command to cancel the access port from the VLAN.

The use condition of this command is the VLAN indicated in vlan_id must exist.

Example

Join Ethernet2/1/1 port to VLAN3 (VLAN3 has existed).

[SW8800-Ethernet2/1/1] port access vlan 3

2.1.16 port hybrid pvid vlan

Syntax

port hybrid pvid vlan vlan_id

undo port hybrid pvid

View

Ethernet port view

2-13

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 2 Ethernet Port Configuration Commands

vlan_id: VLAN ID defined in IEEE802.1Q, ranging from 1 to 4,094 and the default

vlan_id is 1.

Description

Use the port hybrid pvid vlan command to configure the default VLAN ID of the local hybrid port.

Use the undo port hybrid pvid command to restore the default VLAN ID of the local hybrid port.

The default VLAN ID of local hybrid port shall be consistent with that of the peer one, otherwise, the packet cannot be properly transmitted.

Related command: port link-type.

Example

Configure the default VLAN of the hybrid port Ethernet2/1/1 to 100.

[SW8800-Ethernet2/1/1] port hybrid pvid vlan 100

2.1.17 port hybrid vlan

Syntax

port hybrid vlan vlan_id_list { tagged | untagged }

undo port hybrid vlan vlan_id_list

View

Ethernet port view

Parameter

vlan_id_list: vlan_id_list = [ vlan_id1 [ to vlan_id2 ] ]&<1-10>: Specifies which VLAN the hybrid port will be added to. It can be discrete. The vlan_id ranges from 1 to 4,094.

&<1-10> indicates that the former parameter can be input 10 times repeatedly at most.

tagged: Packet of specified VLAN will have tag.

untagged: Packet of specified VLAN will not have tag.

Description

Use the port hybrid vlan command to join the hybrid port to specified existing VLAN.

Use the undo port hybrid vlan command to cancel the hybrid port from the specified

VLAN.

Hybrid port can belong to multiple VLANs. If the port hybrid vlan vlan_id_list { tagged

| untagged } command is used for many times, the VLANs carried by the hybrid port is the set of vlan_id_list.

2-14

3Com Switch 8800 Command Reference Guide Chapter 2 Ethernet Port Configuration Commands

This command can be used on condition that the VLAN specified with vlan_id must

have been existed.

Related command: port link-type.

Example

Join hybrid port Ethernet2/1/1 to VLAN of 2, 4 and 50-100, and these VLAN will have tags.

[SW8800-Ethernet2/1/1] port hybrid vlan 2 4 50 to 100 tagged

2.1.18 port link-type

Syntax

port link-type { access | hybrid | trunk }

undo port link-type

View

Ethernet port view

Parameter

access: Configures the port as access port.

hybrid: Configures the port as hybrid port.

trunk: Configures the port as trunk port

Description

Use the port link-type command to configure the link type of Ethernet port.

Use the undo port link-type command to restore the port as default status, i.e. access port.

You can configure three types of ports concurrently on the same switch, but you cannot switch between trunk port and hybrid port. You must turn it first into access port and then set it as other type. For example, you cannot configure a trunk port directly as hybrid port, but first set it as access port and then as hybrid port.

By default, the port is access port.

Example

Configure Ethernet port Ethernet2/1/1 as trunk port.

[SW8800-Ethernet2/1/1] port link-type trunk

2-15

3Com Switch 8800 Command Reference Guide

2.1.19 port-mode

Chapter 2 Ethernet Port Configuration Commands

Syntax

port-mode { wan | lan }

undo port-mode

View

Ethernet port view

Parameter

wan: Configures the port works in WAN mode, and then only common data exchange can be implemented on the port.

lan: Configures the port works in LAN mode, and then data can be transferred on the port.

Description

Use the port-mode command to configure network mode available on the port. Most ports adopt the LAN mode for general data exchange. The port must work in WAN mode, however, if it needs to transfer data (such as in fiber transmission).

Use the undo port-mode command to restore the default mode of the port.

By default, the Ethernet port works in LAN mode.

Note that only GE or 10GE port supports this command.

Example

Set port GigabitEthernet2/2/1 to work in WAN mode.

[SW8800-GigabitEthernet2/2/1] port-mode wan

Restore the default (LAN) mode on port GigabitEthernet2/2/1.

[SW8800-GigabitEthernet2/2/1] undo port-mode

2.1.20 port trunk permit vlan

Syntax

port trunk permit vlan { vlan_id_list | all }

undo port trunk permit vlan { vlan_id_list | all }

View

Ethernet port view

2-16

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 2 Ethernet Port Configuration Commands

vlan_id_list: vlan_id_list = [ vlan_id1 [ to vlan_id2 ] ]&<1-10> is the VLAN range joined by the trunk port. It can be discrete. The vlan_id ranges from 2 to 4,094. &<1-10> indicates that the former parameter can be input 10 times repeatedly at most.

all: Joins the trunk port to all VLANs.

Description

Use the port trunk permit vlan command to join trunk port to specified VLAN.

Use the undo port trunk permit vlan command to cancel trunk port from specified

VLAN.

Trunk port can belong to multiple VLANs. If the port trunk permit vlan command is used many times, then the VLAN enabled to pass on trunk port is the set of these

vlan_id_list.

Related command: port link-type.

Example

Remove the trunk port from the default VLAN.

[SW8800-Ethernet2/1/1] undo port trunk permit vlan 1

Add the trunk port to all VLANs.

[SW8800-Ethernet2/1/1] port trunk permit vlan all

2.1.21 port trunk pvid vlan

Syntax

port trunk pvid vlan vlan_id

undo port trunk pvid

View

Ethernet port view

Parameter

vlan_id: VLAN ID defined in IEEE802.1Q, ranging from1 to 4,094 and the default

vlan_id is 1.

Description

Use the port trunk pvid vlan command to configure the default VLAN ID of trunk port.

Use the undo port trunk pvid command to restore the default VLAN ID of the port.

The default VLAN ID of local trunk port should be consistent with that of the peer one, otherwise, the packet cannot be properly transmitted.

2-17

3Com Switch 8800 Command Reference Guide

Related command: port link-type.

Example

Chapter 2 Ethernet Port Configuration Commands

Configure the default VLAN of the trunk port Ethernet2/1/1 to 100.

[SW8800-Ethernet2/1/1] port trunk pvid vlan 100

2.1.22 reset counters interface

Syntax

reset counters interface [ interface_type | interface_type interface_num |

interface_name ]

View

User view

Parameter

interface_type: Specifies the port type.

interface_num: Specifies the port number.

interface_name: Specifies the port name in the interface_name= interface_type

interface_num format.

For parameter description, refer to the interface command.

Description

Use the reset counters interface command to reset the statistical information on the port and count the related information again on the port for the user.

If the port type and number are not specified when clearing the port information, information of all ports on the switch will be cleared. If only the port type is specified, all the information on the ports of this type will be cleared. If both port type and port number are specified, the information on the designated port will be cleared.

You cannot clear statistics on the 802.1x-enabled port.

Example

Reset statistical information on Ethernet port Ethernet2/1/1.

<SW8800> reset counters interface ethernet2/1/1

2.1.23 shutdown

Syntax

shutdown

undo shutdown

2-18

3Com Switch 8800 Command Reference Guide

View

Ethernet port view

Parameter

None

Chapter 2 Ethernet Port Configuration Commands

Description

Use the shutdown command to disable the Ethernet port.

Use the undo shutdown command to enable the Ethernet port.

By default, the Ethernet port is enabled.

Example

Enable Ethernet port Ethernet2/1/1.

[SW8800-Ethernet2/1/1] undo shutdown

2.1.24 speed

Syntax

speed { 10 | 100 | 1000 | 10000 | auto }

undo speed

View

Ethernet port view

Parameter

10: Speed on the port is 10 Mbps.

100: Speed on the port is 100 Mbps.

1000: Speed on the port is 1000 Mbps.

10000: Speed on the port is 10 Gbps.

auto: Port speed is in peer auto-negotiation status.

Description

Use the speed command to configure the port speed.

Use the undo speed command to restore the default speed.

By default, the speed is auto.

Related command: duplex.

Example

Configure Ethernet port Ethernet2/1/1 port speed as 100 Mbps.

2-19

3Com Switch 8800 Command Reference Guide

[SW8800-Ethernet2/1/1] speed 100

Chapter 2 Ethernet Port Configuration Commands

2.1.25 vlan-vpn enable

Syntax

vlan-vpn enable

undo vlan-vpn

View

Ethernet port view

Parameter

None

Description

Use the vlan-vpn enable command to enable port VLAN VPN.

Use the undo vlan-vpn command to disable port VLAN VPN.

Note that if anyone of GVRP, STP, NTP or 802.1x has been enabled on a port, VLAN

VPN cannot be enabled on it.

By default, the port VLAN VPN is disabled.

Example

Enable VLAN VPN on Ethernet2/1/1.

[SW8800-Ethernet2/1/1] vlan-vpn enable

2-20

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

Chapter 3 Ethernet Link Aggregation

Configuration Commands

3.1 Ethernet Link Aggregation Configuration Commands

3.1.1 debugging lacp packet

Syntax

debugging lacp packet [ interface { interface-type interface-number | interface-name }

[ to { interface-type interface-num | interface-name } ] ]

undo debugging lacp packet [ interface { interface-type interface-number |

interface-name } [ to { interface-type interface-num | interface-name } ] ]

View

System view

Parameter

interface { interface_type interface_ num | interface_name } [ to { interface_type

interface_ num | interface_name } ]: Specifies a port. The command without the to parameter specifies a port, while the command with the to parameter specifies several consecutive ports. interface_name indicates port name and is in the format of

interface_name=interface_type interface_num. interface_type indicates port type.

interface_num indicates port number. For more information, see the parameter description of the interface command.

Description

Use the debugging lacp packet command to enable LACP packet debugging for the port. If you do not specify a port, the command enables packet debugging on all

LACP-enabled ports.

Use the undo debugging lacp packet command to disable LACP packet debugging for the port.

Example

Enable LACP packet debugging for Ethernet port Ethernet1/1/1.

<SW8800> debugging lacp packet interface ehternet1/1/1

3-1

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

3.1.2 debugging lacp state

Syntax

debugging lacp state [ interface { interface-type interface-number | interface-name }

[ to { interface-type interface-num | interface-name } ] ] { { actor-churn | mux |

partner-churn | ptx | rx }* | all }

undo debugging lacp state [ interface { interface-type interface-number |

interface-name } [ to { interface-type interface-num | interface-name } ] ] { { actor-churn

| mux | partner-churn | ptx | rx }* | all }

View

User view

Parameter

interface { interface_type interface_ num | interface_name } [ to { interface_type

interface_ num | interface_name } ]: Specifies a port. The command without the to parameter specifies a port, while the command with the to parameter specifies several consecutive ports. interface_name indicates port name and is in the format of

interface_name=interface_type interface_num. interface_type indicates port type.

interface_num indicates port number.

actor-churn: Actor-churn state debugging.

mux: MUX state debugging.

partner-churn: Partner-churn state debugging.

ptx: PTX state debugging.

rx: RX state debugging.

all: All state debugging.

Description

Use the debugging lacp state command to enable LACP state debugging for the port.

Use the undo debugging lacp state command to disable LACP state debugging for the port.

Example

Enable all LACP state debugging.

<SW8800> debugging lacp state all

3.1.3 debugging link-aggregation error

Syntax debugging link-aggregation error

3-2

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

undo debugging link-aggregation error

View

User view

Parameter

None

Description

Use the debugging link-aggregation error command to enable link aggregation error debugging.

Use the undo debugging link-aggregation error command to disable link aggregation error debugging.

Example

Enable link aggregation error debugging.

<SW8800> debugging link-aggregation error

3.1.4 debugging link-aggregation event

Syntax debugging link-aggregation event

undo debugging link-aggregation event

View

User view

Parameter

None

Description

Use the debugging link-aggregation event command to enable link aggregation event debugging.

Use the undo debugging link-aggregation event command to disable link aggregation event debugging.

Example

Enable link aggregation event debugging.

<SW8800> debugging link-aggregation event

3-3

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

3.1.5 display lacp system-id

Syntax display lacp system-id

View

Any view

Parameter

None

Description

Use the display lacp system-id command to display the device ID of local system, including system priority and system MAC address.

Related command: link-aggregation.

Example

Display the device ID of the local system.

<SW8800> display lacp system-id

Actor System ID: 0x8000, 00e0-fc00-0100

Table 3-1 Description on the fields of the display lacp system-id command

Field

Actor System ID

Description

The device ID of the local system, including system priority and system MAC address.

3.1.6 display link-aggregation summary

Syntax display link-aggregation summary

View

Any view

Parameter

None

Description

Use the display link-aggregation summary command to view summary information of all aggregation groups, including actor system ID, aggregation group ID, aggregate

3-4

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds group type, partner system ID, number of active ports, number of standby ports, load sharing type and master port number.

Example

Display summary information of all aggregation information.

<SW8800> display link-aggregation summary

Aggregation Group Type:D -- Dynamic, S -- Static , M -- Manual

Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing

Actor ID: 0x8000, 00e0-fc23-0d90

AL AL Partner ID Select Standby Share Master

ID Type Ports Ports Type Port

--------------------------------------------------------------------------

------

1 M none 2 0 Shar GigabitEthernet3/1/1

3 M none 4 0 Shar Ethernet4/1/45

Table 3-2 Description on the fields of the display link-aggregation summary command

Field

Actor ID

AL ID

AL Type

Partner ID

Select Ports

Standby Ports

Share Type

Master Port

Description

Local device ID

Aggregation group ID

Aggregation group type

Peer device ID

Number of selected ports

Number of standby ports

Load sharing type

Master port number

Note that some aggregation indexes are reserved, so the first aggregation index will be reported as 193.

3.1.7 display link-aggregation verbose

Syntax

display link-aggregation verbose agg-id

View

Any view

3-5

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

Parameter

agg-id: Aggregation group ID, which must be existing ones, in the range of 1 to 728.

Description

Use the display link-aggregation verbose command to view detailed information of a designated port, including aggregation group ID, aggregation group type, load sharing type, aggregation group description and detailed local information (system ID, member ports, port status, port priority, flag, operation key) and detailed remote information

(local port, indexes of remote ports, port priority, flag, operation key and system ID, here local and remote are in a relative sense).

Note that since the manual aggregation group cannot get the information of the peer end, every item of the peer end is displayed as 0, which does not indicate the actual status of the peer system.

Example

Display detailed information of aggregation group 1.

<SW8800> display link-aggregation verbose 1

Loadsharing Type: Shar – Loadsharing, NonS – Non-Loadsharing

Aggregation ID: 1, AggregationType: Manual, Loadsharing Type: Shar

Aggregation Descripiton:

System ID: 0x8000, 00e0-fc00-8512

Port Status: S -- Selected, T -- sTandby

Local:

Port Status Priority Flag Oper-Key

Ethernet2/1/1 S 32768 0x00 1

Ethernet2/1/2 S 32768 0x00 1

Remote:

Actor Partner Priority Flag Oper-Key SystemID

Ethernet2/1/1 0 0 0x00 0 0x0,0000-0000-0000

Ethernet2/1/2 0 0 0x00 0 0x0,0000-0000-0000

Table 3-3 Description on the fields of the display link-aggregation verbose command

Aggregation ID

Field

Aggregation Type

Loadsharing Type

Description

Aggregation group ID

Aggregation group type, which can be dynamic, static and manual

Load sharing type

3-6

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

Field Description

Aggregation Descripiton

System ID

Aggregation group description

Local device ID

Port State Port state

Local:

Port Status Priority Flag Oper-key

Other information of the local end, including member ports, port state, port priority, flag bit and operation key

Remote:

Detailed information about the peer device,

Actor Partner Priority Flag including local port, peer port index, port

Oper-key SystemID priority, flag, operation key and device ID

Note that some aggregation indexes are reserved, so the first aggregation index will be reported as 193.

3.1.8 display link-aggregation interface

Syntax

display link-aggregation interface { interface-type interface-number |

interface-name } [ to { interface-type interface-num | interface-name } ]

View

Any view

Parameter

interface { interface_type interface_ num | interface_name } [ to { interface_type

interface_ num | interface_name } ]: Specifies ports. You can specify multiple sequential ports with the to parameter, instead of specifying only one port. interface_name specifies port name, in the format of interface_name = interface_type interface_num.

interface_type specifies port type and interface_num port number. For more information, see the parameter item for the interface command.

Description

Use the display link-aggregation interface command to view detailed link aggregation information at a designated port, including aggregation group ID for the port, port priority, operation key, flag, partner information (system ID, port number, port priority, operation key, flag).

Note that since the manual aggregation group cannot get the information of the peer end, every item of the peer end is displayed as 0, which does not indicate the actual status of the peer system.

Example

Display detailed link aggregation information of link aggregation group.

3-7

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

<SW8800> display link-aggregation interface ethernet2/1/1

Ethernet2/1/1:

Attached AggID: 1

Local:

Port-Priority: 32768, Oper key: 1, Flag: 0x00

Remote:

System ID: 0x0, 0000-0000-0000

Port Number: 0, Port-Priority: 0, Oper-key: 0, Flag: 0x00

Table 3-4 Description on the fields of the display link-aggregation interface command

Attached AggID

Field Description

Aggregation group ID for the specified port

Local:

Port-Priority: 32768, Oper key: 1,

Flag: 0x00

Port priority, operation key, LACP state flag of the local end

Remote:

System ID: 0x0, 0000-0000-0000

Port Number: 0, Port-Priority: 0,

Oper-key: 0, Flag: 0x00

Device ID, port priority, operation key,

LACP state flag of the remote end

3.1.9 lacp enable

Syntax lacp enable undo lacp enable

View

Ethernet port view

Parameter

None

Description

Use the lacp enable command to enable LACP.

Use the undo lacp enable command to disable LACP.

Example

Enable LACP for Ethernet port Ethernet1/1/1.

3-8

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

[SW8800-Ethernet1/1/1] lacp enable

3.1.10 lacp port-priority

Syntax

lacp port-priority port-priority-value

undo lacp port-priority

View

Ethernet port view

Parameter

port-priority-value: Port priority, in the range of 0 to 65,535. By default, it is 32,768.

Description

Use the lacp port-priority command to configure port priority.

Use the undo lacp port-priority command to restore the default port priority.

Related command: display link-aggregation verbose and display link-aggregation

interface.

Example

Set port priority to 64.

[SW8800-Ethernet1/1/1] lacp port-priority 64

3.1.11 lacp system-priority

Syntax

lacp system-priority system-priority-value

undo lacp system-priority

View

System view

Parameter

system-priority-value: System priority, in the range of 0 to 65,535. By default, it is

32,768.

Description

Use the lacp system-priority command to configure system priority.

Use the undo lacp system-priority command to restore the default system priority.

3-9

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

Related command: display lacp system-id.

Example

Set system priority to 64.

[SW8800] lacp system-priority 64

3.1.12 link-aggregation

Syntax

link-aggregation interface_name1 to interface_name2 [ both ]

View

System view

Parameter

interface_name1: Starting range value of Ethernet port joined the Ethernet link aggregation.

interface_name2: Last range value of Ethernet port joined the Ethernet link aggregation.

both: Configures that the sub-ports in the link aggregation share outgoing load on the port depending on the source address and destination MAC address.

Description

Use the link-aggregation command to configure a series of ports to aggregation port.

Related command: link-aggregation group agg-id mode, port link-aggregation

group.

Example

Configure outgoing load balance on the port depending on the source and destination

MAC addresses.

[SW8800] link-aggregation ethernet2/1/1 to ethernet2/1/2 both

3.1.13 link-aggregation group agg-id description

Syntax

link-aggregation group agg-id description alname

undo link-aggregation group agg-id description

View

System view

3-10

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

Parameter

agg-id: Aggregation group ID, in the range of 1 to 31.

alname: Aggregation group name, character string with 1 to 32 characters.

Description

Use the link-aggregation group agg-id description command to configure description for an aggregation group.

Use the undo link-aggregation group agg-id description command to delete aggregation group description.

Related command: display link-aggregation verbose.

Example

Configure myal1 as the description of aggregation group 22.

[SW8800] link-aggregation group 22 description myal1

3.1.14 link-aggregation group agg-id mode

Syntax

link-aggregation group agg-id mode { manual | static }

undo link-aggregation group agg-id

View

System view

Parameter

agg-id: Aggregation group ID, in the range of 1 to 31.

Description

Use the link-aggregation group agg-id mode command to create an aggregation group.

Use the undo link-aggregation group command to delete an aggregation group.

Related command: display link-aggregation summary.

Example

Create manual aggregation group 22.

[SW8800] link-aggregation group 22 mode manual

3-11

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

3.1.15 port link-aggregation group

Syntax

port link-aggregation group agg-id

undo port link-aggregation group

View

Ethernet port view

Parameter

agg-id: Aggregation group ID, in the range of 1 to 31.

Description

Use the port link-aggregation group command to add an Ethernet port into a manual or static aggregation group. Use the undo port link-aggregation group command to delete an Ethernet port from an aggregation group.

Related command: display link-aggregation verbose.

Example

Add Ethernet2/1/1 into aggregation group 22.

[SW8800-Ethernet2/1/1] port link-aggregation group 22

3.1.16 reset lacp statistics

Syntax

reset lacp statistics [ interface { interface-type interface-number | interface-name }

[ to { interface-type interface-num | interface-name } ] ]

View

Parameter

System view

interface { interface_type interface_ num | interface_name } [ to { interface_type

interface_ num | interface_name } ]: Specifies a port. The command without the to parameter specifies a port, while the command with the to parameter specifies several consecutive ports. interface_name indicates port name and is in the format of

interface_name=interface_type interface_num. interface_type indicates port type.

interface_num indicates port number.

3-12

3Com Switch 8800 Command Reference Guide Chapter 3 Ethernet Link Aggregation Configuration Comma nds

Description

Use the reset lacp statistics command to clear LACP statistics for the port. If you do not specify a port, the command clears LACP statistics for all the ports.

Related command: display link-aggregation interface.

Example

Clear LACP statistics for all Ethernet ports.

<SW8800> reset lacp statistics

3-13

3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands

Chapter 4 VLAN Configuration Commands

4.1 VLAN Configuration Commands

4.1.1 description

Syntax

description string

undo description

View

VLAN view, VLAN interface view

Parameter

string: Description character string of current VLAN or VLAN interface. For VLAN, it ranges from 1 to 32 characters. For VLAN interface, it ranges from 1 to 64 characters.

The default description character string of current VLAN is VLAN ID of the VLAN, e.g.

VLAN 0001. The default description character string of VLAN interface is the interface name, e.g., Vlan-interface1 Interface.

Description

Use the description command to configure a description for the current VLAN or VLAN interface.

Use the undo description command to restore the default description of current VLAN or VLAN interface.

Related command: display vlan, display interface vlan-interface.

Example

# Specify a description character string “RESEARCH” for the current VLAN.

[S8800-vlan1] description RESEARCH

4.1.2 display interface vlan-interface

Syntax

display interface vlan-interface [ vlan_id ]

View

Any view

4-1

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 4 VLAN Configuration Commands

vlan_id: ID of VLAN interface, ranging from 1 to 4094.

Description

Use the display interface vlan-interface command to view the related information about specified or all VLAN interfaces such as physical protocol status and link protocol status of VLAN interface, Ethernet sending frame format, MAC address, IP address and sub-net mask, description character string and MTU, etc.

With vlan_id specified, only the information about the specified VLAN interface will be displayed. If no vlan_id is specified, the information about all the existing VLAN interfaces will be displayed.

Related command: interface vlan-interface.

Example

# Display related information about VLAN-interface 1.

<S8800> display interface vlan-interface 1

Vlan-interface1 current state : DOWN

Line protocol current state : DOWN

IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is

00e0-fc07-4101

Internet Address is 10.1.1.1/24 Primary

Description : Vlan-interface1 Interface

The Maximum Transmit Unit is 1500

Table 4-1 Description on the fields of the display interface vlan-interface 1 command

Field

Vlan-interface1 current state

Line protocol current state

IP Sending Frames' Format

Hardware address

Internet Address

Description

The Maximum Transmit Unit

Description

Current state of the VLAN interface

Current state of the Line protocol

Format of the IP sending frames

Corresponding MAC address of the

VLAN interface

IP address

Description of the VLAN interface

Maximum Transmit Unit (MTU)

4-2

3Com Switch 8800 Command Reference Guide

4.1.3 display vlan

Chapter 4 VLAN Configuration Commands

Syntax

display vlan [ vlan_id to vlan_id | all | static | dynamic ]

View

Any view

Parameter

Description

Use the display vlan command to view related information about the specified or all

VLANs.

If vlan_id or all is specified, information of specified VLAN or all VLANs is displayed. It includes: VLAN ID, VLAN type (dynamic or static), whether the routing function has been enabled on this VLAN (if enabled, the main IP address and mask will be displayed), VLAN description, and the ports VLAN contains.

If parameter is not specified, information of the VLANs that has been created is displayed. If the parameter dynamic or static is selected, information of VLANs created dynamically or statically by the system is displayed.

Related command: vlan.

Example

vlan_id: Displays information of the specified VLAN.

all: Displays information of all VLANs.

static: Displays information of VLANs created statically by the system.

dynamic: Displays information of VLANs created dynamically by the system.

# Display the information about VLAN2.

[S8800] display vlan 2

VLAN ID: 2

VLAN Type: static

Route interface: not configured

Description: VLAN 0002

Tagged Ports: none

Untagged Ports:

Ethernet2/1/1 Ethernet2/1/2 Ethernet2/1/3

4-3

3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands

Table 4-2 Description on the fields of the display vlan 2 command

Field

VLAN ID

VLAN Type

Route interface

Description

VLAN ID

Configuration type of VLAN: either dynamic or static

Whether the route interface exists

Tagged Ports

Untagged Ports

The ports on which VLAN packets need tag

The ports on which VLAN packets need not tag

4.1.4 interface vlan-interface

Syntax

interface vlan-interface vlan_id

undo interface vlan-interface vlan_id

View

System view

Parameter

vlan_id: ID of VLAN interface, ranging from 1 to 4094.

Description

Use the interface vlan-interface command to configure VLAN interface or enter VLAN interface view.

Use the undo interface vlan-interface command to cancel one VLAN interface.

Related command: display interface vlan-interface.

Example

# Enter the view of the VLAN-interface 1.

[S8800] interface vlan-interface 1

4.1.5 shutdown

Syntax

shutdown

undo shutdown

4-4

3Com Switch 8800 Command Reference Guide

View

VLAN interface view

Parameter

None

Chapter 4 VLAN Configuration Commands

Description

Use the shutdown command to disable the VLAN interface.

Use the undo shutdown command to enable the VLAN interface.

By default, when all the Ethernet ports in a VLAN are in the DOWN state, this VLAN interface is also DOWN. When there are one or more Ethernet ports in the UP state, this VLAN interface is also UP..

This command can be used to start interface after the related parameters and protocols of VLAN interface are set. Or when the VLAN interface fails, the interface can be shut down first and then restarted. In this way, the interface may be restored to normal status.

Shutting down or starting VLAN interface will not take any effect on any Ethernet port of this VLAN.

Example

# Restart interface after shutting down the interface.

[S8800-Vlan-interface1] shutdown

[S8800-Vlan-interface1] undo shutdown

4.1.6 vlan

Syntax

vlan vlan_id

undo vlan { vlan_id [ to vlan_id ] | all }

View

System view

Parameter

vlan_id: Specifies the ID of a VLAN to be created and/or entered, ranging from 1 to

4094.

all: Deletes all VLANs.

Description

Use the vlan command to enter VLAN view.

4-5

3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands

If the specified VLAN is not created, create it first.

Use the undo vlan command to cancel the specified VLAN.

VLAN 1 is the default VLAN and cannot be deleted.

Related command: display vlan.

Example

# Enter the view of VLAN 1.

[S8800] vlan 1

4.2 Port-Based VLAN Configuration Commands

4.2.1 port

Syntax

port interface_list

undo port interface_list

View

VLAN view

Parameter

interface_list: List of Ethernet ports to be added to or deleted from a certain VLAN, expressed as interface_list= {{ interface_type interface_num | interface_name } [ to

{ interface_type interface_num | interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. The interface number after the keyword to must be larger than or equal to the interface number before to. &<1-10> represents the repeatable times of parameters, ranging from 1 to 10.

Description

Use the port command to add one port or one group of ports to VLAN.

Use the undo port command to cancel one port or one group of ports from VLAN.

Note that you can add/delete trunk port and hybrid port to/from VLAN by the port and

undo port commands in Ethernet port view, but not in VLAN view.

Related command: display vlan.

Example

# Add Ethernet2/1/1 through Ethernet2/1/3 to VLAN 2.

[S8800-vlan2] port ethernet2/1/1 to ethernet2/1/3

4-6

3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands

4.3 Protocol-Based VLAN Configuration Commands

4.3.1 display vlan-protocol interface

Syntax

display vlan-protocol interface { interface_list | all }

View

Any view

Parameter

Description

Use the display vlan-protocol interface command to view the protocol information and protocol index configured on the specific port, to which you can refer when you use the protocol-based VLAN and add/delete a protocol.

Related command: display interface.

Example

interface_list: Displays the protocol information of a specified interface, in the form of

interface_list = { interface_num [ to interface_num2 ] }. interface_num indicates the interface number of the protocol to be displayed; interface_num2 indicates the interface number of a specified range.

all: Displays the protocol information of all ports.

# Display the protocol information and protocol index configured on Ethernet2/1/1.

[S8800] display vlan-protocol interface ethernet2/1/1

Interface:Ethernet2/1/1

Vlan-ID Protocol-Index Protocol-Type

100 1 ethernetii

4.3.2 display vlan-protocol vlan

Syntax

display vlan-protocol vlan { vlan_list | all }

View

Any view

Parameter

vlan_list: Specifies a VLAN list. It is expressed in the form of vlan_list = { vlan_id [ to

vlan_id2 }, among which the vlan id and vlan id2 argument are the border VLAN IDs that define the VLAN list.

4-7

3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands

all: Displays the protocol information of all VLANs.

Description

Use the display vlan-protocol vlan command to view the protocol information and protocol index configured for a VLAN, to which you can refer when you use the protocol-based VLAN and add/delete a protocol.

Related command: display vlan.

Example

# Display the protocol information and protocol index configured on the VLAN 522.

[S8800] display vlan-protocol vlan 522

VLAN ID: 522

VLAN Type: Protocol-based VLAN

Protocol-Index Protocol-Type

0 ethernetii etype 0x0600

1 llc dsap 0x12 ssap 0x34

2 snap etype 0x0600

4.3.3 port hybrid protocol-vlan vlan

Syntax

port hybrid protocol-vlan vlan vlan-id { vlan-protocol_list | all }

undo port hybrid protocol-vlan vlan vlan-id { vlan-protocol_list | all }

View

Ethernet port view

Parameter

vlan_id: ID of the VLAN which a protocol is added to or deleted from.

vlan-protocol_list: The VLAN protocol list to be added to or to be deleted from a certain port, in the form of vlan-protocol_list = { protocol_index [ to protocol_end ] }.

protocol_index indicates the initial value of protocol index; protocol_end indicates the ending value of protocol index.

all: All protocols.

Description

Use the port hybrid protocol-vlan vlan command to associate protocol VLAN to a specified port.

Use the undo port hybrid protocol-vlan vlan command to delete the protocol VLAN associate with the port.

4-8

3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands

Note that only the Hybrid port supports this feature at present. The port must belong to the VLAN before being associated with the VLAN. Otherwise, it cannot be associated.

Related command: display vlan-protocol interface.

Example

# Associate Ethernet1/1/1 port with VLAN 3, with the protocol index in the range from 4 through 7.

[S8800-Ethernet1/1/1] port hybrid protocol-vlan vlan 3 4 to 7

4.3.4 protocol-vlan

Syntax

protocol-vlan [ protocol-index ] { ip ip_address [ net_mask ] | mode { ethernetii etype

etype_id | llc dsap dsap_id ssap ssap_id | snap etype etype_id } }

undo protocol-vlan { protocol_index [ to protocol_end ] | all }

View

VLAN view

Parameter

ip [ ip_address [ net_mask ]: IP protocol based VLAN. net_mask is the IP address mask; if not specified, it defaults to 255.255.255.0.

mode: Specifies the VLAN based on other protocols.

ethernetii etype etype_id: EthernetII protocol based VLAN. etype_id is the Ethernet type of the incoming packet, ranging from 600 to FFFF.

llc dsap dsap_id ssap ssap_id: Logical link control protocol based VLAN. dsap_id is the destination service access point, ranging from 0 to FF. ssap_id is source service access point, ranging from 0 to FF.

snap etype etype_id: Sub-Network Access Protocol (SNAP) based protocol. etype_id is the Ethernet type of the incoming packet, ranging from 600 to FFFF.

protocol_index: Initial value of protocol index, ranging from 0 to 7. It must be less than

protocol_end.

protocol_end: End value of protocol index, ranging from 0 to 7

all: All protocols.

Description

Use the protocol-vlan command to specify the parameters of the VLAN based on IP or

IPX.

Use the undo protocol-vlan command to cancel this configuration.

4-9

3Com Switch 8800 Command Reference Guide Chapter 4 VLAN Configuration Commands

Related command: display vlan-protocol vlan.

Example

# Specify VLAN 3 to be based on the IP protocol.

[S8800-vlan3] protocol-vlan ip

# Specify VLAN 5 to be based on the 123.34.56.0 network segment.

[S8800-vlan5] protocol-vlan ip 123.34.56.0

4-10

3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands

Chapter 5 GARP/GVRP Configuration Commands

5.1 GARP Configuration Commands

5.1.1 display garp statistics

Syntax

display garp statistics [ interface interface_list ]

View

Any view

Parameter

Description

Use the display garp statistics command to view the GARP statistics information, including the number of received/sent packets and the number of packets discarded by

GVRP/GMRP.

Example

interface_list: List of Ethernet ports to be displayed, expressed as interface _list =

{ { interface_type interface_num | interface_name } [ to { interface_type interface_num

| interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.

# Display the GARP statistics information on Ethernet port Ethernet2/1/1.

<S8800> display garp statistics interface ethernet2/1/1

GARP statistics on port Ethernet2/1/1

Number Of GMRP Frames Received : 0

Number Of GVRP Frames Received : 0

Number Of GMRP Frames Transmitted : 0

Number Of GVRP Frames Transmitted : 0

Number Of Frames Discarded : 0

The above information indicates that the number of received/sent packets and the number of packets discarded by GVRP/GMRP on Ethernet2/1/1 are all 0.

5-1

3Com Switch 8800 Command Reference Guide

5.1.2 display garp timer

Chapter 5 GARP/GVRP Configuration Commands

Syntax

display garp timer [ interface interface_list ]

View

Any view

Parameter

interface_list: List of Ethernet ports to be displayed, expressed as interface _list =

{ { interface_type interface_num | interface_name } [ to { interface_type interface_num

| interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.

Description

Use the display garp timer command to view the value of GARP timer, including Hold timer, Join timer, Leave timer and LeaveAll timer.

Related command: garp timer, garp timer leaveall.

Example

# Display GARP timer on Ethernet2/1/1.

<S8800> display garp timer interface ethernet2/1/1

GARP timers on port Ethernet2/1/1

GARP JoinTime : 20 centiseconds

GARP Leave Time : 60 centiseconds

GARP LeaveAll Time : 1000 centiseconds

GARP Hold Time : 10 centiseconds

5.1.3 garp timer

Syntax

garp timer { hold | join | leave } timer_value

undo garp timer { hold | join | leave }

View

Ethernet port view

Parameter

hold: GARP Hold timer. After receiving certain registration information, the GARP application entity will not send Join Message at once. Instead, it starts the Hold timer.

5-2

3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands

All the registration information received within duration of the Hold timer will be transmitted in the same frame after the Hold timer times out, thereby saving the bandwidth resource.

join: GARP Join timer. GARP application entity will send out Join message after the

Join timer goes timeout to make other GARP application entity register its own information.

leave: GARP Leave timer . When a GARP application entity wants to deregister certain attribute information, it sends Leave message. The GARP application entity receiving the message starts Leave timer. If the entity receives no Join message before the timer goes timeout, it will deregister the attribute information. z z

timer_value: Value of GARP hold timer, join timer and leave timer in centiseconds. The step is five centiseconds. By default, Hold timer is 10 centiseconds, Join timer is 20 centiseconds, Leave timer is 60 centiseconds.

The range conforms to the following rule: z

The value of Join timer should be no less than the doubled value of Hold timer.

The value of Leave timer should be greater than the doubled value of Join timer and smaller than the Leaveall timer value.

The minimal value of Join timer is 10 centiseconds.

Description

Use the garp timer command to set the value of GARP timer (including Hold timer, Join timer and Leave timer) of the port.

Use the undo garp timer command to restore the default value of GARP timer.

The value range of a timer varies with the values of other timers. So if the value of a timer you want to set is not within the available value range, you can change the value range by changing the values of other related timers. z z z z

The lower limit of Hold timer is 10 centiseconds. You can change its upper limit by changing the value of Join timer.

You can change the lower limit and upper limit of Join timer by changing the value of Hold timer and Leave timer respectively.

You can change the lower limit and upper limit of Leave timer by changing the value of Join timer and LeaveAll timer respectively.

The upper limit of LeaveAll timer is 32765 centiseconds. You can change its lower limit by changing the value of Leave timer.

Related command: display garp timer.

Example

# Set Join timer of GARP as 300ms.

[S8800-Ethernet2/1/1] garp timer join 30

5-3

3Com Switch 8800 Command Reference Guide

5.1.4 garp timer leaveall

Chapter 5 GARP/GVRP Configuration Commands

Syntax

View

System view

Parameter

timer_value: Value of GARP LeaveAll timer in centiseconds, ranging from 65 to 32765.

The step is five centiseconds. The value of LeaveAll timer should be greater than the value of Leave timer.

By default, the value of LeaveAll timer is 1000 centiseconds, i.e., 10s.

Description

Use the garp timer leaveall command to configure GARP LeaveAll timer.

Use the undo garp timer leaveall command to restore the default value.

After every GARP application entity is started, the LeaveAll timer will be started simultaneously. The GARP application entity will send LeaveAll message after the timer times out to make other application entities re-register all attribute information on the entities themselves. Then, the LeaveAll timer is started and the new cycle begins.

Related command: display garp timer.

Example

garp timer leaveall timer_value

undo garp timer leaveall

# Set GARP LeaveAll timer as 1s.

[S8800] garp timer leaveall 100

5.1.5 reset garp statistics

Syntax

reset garp statistics [ interface interface_list ]

View

User view

Parameter

interface_list: Specifies a list of Ethernet ports, on which the GARP statistics information will be cleared, expressed as interface_list = { { interface_type

interface_num | interface_name } [ to { interface_type interface_num |

interface_name } ] }&<1-10>. interface_type is interface type, interface_num is

5-4

3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands interface number and interface_name is interface name. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.

Description

Use the reset garp statistics command to reset the GARP statistics information (such as the received/sent packets or packets discarded by GVRP/GMRP). If the command has no parameter, it will clear the GARP statistics information of all the ports.

Related command: display garp statistics.

Example

# Clear GARP statistics information.

<S8800> reset garp statistics

5.2 GVRP Configuration Commands

5.2.1 display gvrp statistics

Syntax

display gvrp statistics [ interface interface_list ]

View

Any view

Parameter

interface_list: List of Ethernet ports to be displayed, expressed as interface _list =

{ { interface_type interface_num | interface_name } [ to { interface_type interface_num

| interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.

Description

Use the display gvrp statistics command to view the GVRP statistics information of all the Trunk ports, including GVRP status information, failed GVRP registration entries and the last GVRP data unit origin.

Example

# Display the GVRP statistics information about Ethernet2/1/1.

<S8800> display gvrp statistics interface ethernet2/1/1

GVRP statistics on port Ethernet2/1/1

GVRP Status : Enabled

GVRP Failed Registrations : 0

GVRP Last Pdu Origin : 0000-0000-0000

5-5

3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands

GVRP Registration Type : Normal

Table 5-1 Description on the fields of the display gvrp statistics command

Field

GVRP Status

GVRP Failed Registrations

GVRP Last Pdu Origin

GVRP Registration Type

Description

GVRP status, that is, enabled or disabled

Failed GVRP registration entries

The source of the last GVRP data unit. If GVRP data unit is not received, the system displays

0000-0000-0000; if received from a device, the

GVRP data unit received last time is regarded as coming from this MAC address of this device.

GVRP registration type, that is, fixed, forbidden or normal

5.2.2 display gvrp status

Syntax display gvrp status

View

Any view

Parameter

None

Description

Use the display gvrp status command to view the global status information about

GVRP.

Example

# Display the global status information about GVRP.

<S8800> display gvrp status

GVRP is enabled

The above information means that the global GVRP is enabled.

5.2.3 gvrp

Syntax

gvrp

undo gvrp

5-6

3Com Switch 8800 Command Reference Guide

View

System view/Ethernet port view

Parameter

None

Chapter 5 GARP/GVRP Configuration Commands

Description

Use the gvrp command to enable GVRP.

Use the undo gvrp command to disable GVRP.

By default, GVRP is disabled.

This command can be used to enable/disable global GVRP in system view or enable/disable port GVRP in Ethernet port view.

Before enabling port GVRP, you must enable global GVRP first. In addition, port GVRP must be enabled/disabled on Trunk port.

Related command: display gvrp status.

Example

# Enable global GVRP.

[S8800] gvrp

5.2.4 gvrp registration

Syntax

gvrp registration { fixed | forbidden | normal }

undo gvrp registration

View

Ethernet port view

Parameter

fixed: Enables to create or register VLAN on the port manually and disables to register or deregister VLAN dynamically.

forbidden: Deregisters all VLANs except VLAN 1 and disables to create or register any other VLAN on the port.

normal: Enables to create, register and deregister VLAN on the port manually or dynamically.

Description

Use the gvrp registration command to configure GVRP registration type.

5-7

3Com Switch 8800 Command Reference Guide Chapter 5 GARP/GVRP Configuration Commands

Use the undo gvrp registration command to restore the default type.

By default, the registration type is normal.

This command can be only used on Trunk port.

Related command: display gvrp statistics.

Example

# Set the GVRP registration type of Ethernet2/1/1 as fixed.

[S8800-Ethernet2/1/1] gvrp registration fixed

5-8

3Com Switch 8800 Command Reference Guide Chapter 6 Super VLAN Configuration Commands

Chapter 6 Super VLAN Configuration Commands

6.1 Super VLAN Configuration Commands

6.1.1 display supervlan

Syntax

display supervlan [ supervlan_id ]

View

Any view

Parameter

Description

Use the display supervlan command to display mapping relationship between a specified super VLAN and sub VLANs, and the ports that identify the mapping relationship.

Related command: supervlan, subvlan.

Example

supervlan_id: VLAN ID of a configured super VLAN. This argument ranges from 1 to

4094.

# Display the mapping relationship between the super VLAN and the sub VLAN.

[S8800] display supervlan 2

Supervlan ID : 2

ARP proxy : enabled

Subvlan ID : 3-5

Subvlan in which arp proxy is disabled: None

# Display detailed information about the super VLAN and the sub VLANs displayed above.

[S8800]display vlan 2

VLAN ID: 2

VLAN Type: static

It is a Super VLAN.

ARP proxy enabled.

Route Interface: configured

IP Address: 10.153.1.41

Subnet Mask: 255.255.255.0

6-1

3Com Switch 8800 Command Reference Guide Chapter 6 Super VLAN Configuration Commands

Description: VLAN 0002

Tagged Ports: none

Untagged Ports: none

[S8800]display vlan 3

VLAN ID: 3

VLAN Type: static

It is a Sub VLAN. And the Super VLAN is VLAN 2

ARP proxy enabled.

Route Interface: not configured

Description: VLAN 0003

Tagged Ports: none

Untagged Ports:

Ethernet5/1/1

[S8800]display vlan 4

VLAN ID: 4

VLAN Type: static

It is a Sub VLAN. And the Super VLAN is VLAN 2

ARP proxy enabled.

Route Interface: not configured

Description: VLAN 0004

Tagged Ports: none

Untagged Ports:

Ethernet5/1/2

[S8800]display vlan 5

VLAN ID: 5

VLAN Type: static

It is a Sub VLAN. And the Super VLAN is VLAN 2

ARP proxy enabled.

Route Interface: not configured

Description: VLAN 0005

Tagged Ports: none

Untagged Ports:

Ethernet5/1/3

6.1.2 subvlan

Syntax

subvlan sub-vlan-list

undo subvlan [sub-vlan-list ]

View

VLAN view of super VLAN

6-2

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 6 Super VLAN Configuration Commands

sub-vlan-list: List of sub VLANs. It is expressed in the form of vlan_list = { vlan_id [ to

vlan_id2 }&<1-10>, where vlan_id is a VLAN ID ranging from 1 to 4094. &<1-10> represents the repeatable times of parameters, which ranges from 1 to 10.

Description

Use the subvlan command to associate a specified super VLAN to sub VLANs.

Use the undo subvlan command to cancel the mapping relationship between the super VLAN and sub VLANs.

Note that: z z z

The VLANs configured to be the sub VLANs of a super VLAN must be existing

VLANs.

You can still add/remove ports to/from a VLAN after the mapping relationship is established.

The undo subvlan command cancels all mapping relationships between the specified super VLAN and all sub VLANs. If you do not specify the sub-vlan-list argument. Otherwise, this command cancels the mapping relationship between the specified sub VLAN and the specified super VLAN.

Related command: display supervlan.

Example

# Establish mapping relationship between super VLAN 10 and sub VLANs with VLAN

IDs of 3, 4, 5 and 9.

[S8800-vlan10] subvlan 3 to 5 9

6.1.3 supervlan

Syntax supervlan

undo supervlan

View

VLAN view

Parameter

None

Description

Use the supervlan command to set a VLAN to be a super VLAN.

Use the undo supervlan command to cancel the super VLAN type of a VLAN.

6-3

3Com Switch 8800 Command Reference Guide Chapter 6 Super VLAN Configuration Commands

By default, no type is configured for a VLAN.

Note that: z z z

You cannot add ports to a super VLAN.

The ARP proxy of the interfaces of a VLAN are enabled automatically and cannot be disabled when the VLAN is set to be a super VLAN.

The default VLANs cannot be super VLANs.

Related command: display supervlan.

Example

# Set VLAN 2 to be a super VLAN.

[S8800-vlan2] supervlan

6-4

3Com Switch 8800 Command Reference Guide Chapter 7 IP Address Configuration Commands

Chapter 7 IP Address Configuration Commands

7.1 IP Address Configuration Commands

7.1.1 display ip host

Syntax display ip host

View

Any view

Parameter

None

Description

Use the display ip host command to display all the host names and the corresponding IP addresses.

Example

Display all host names and the corresponding IP addresses of the hosts.

<SW8800> display ip host

Table 7-1 Description on the fields of the display ip host command

Field Description

Flags Flags

Address Host IP address

7.1.2 display ip interface

Syntax

display ip interface interface-type interface-num

7-1

3Com Switch 8800 Command Reference Guide

View

Any view

Chapter 7 IP Address Configuration Commands

Parameter

Description

Use the display ip interface command to display information about an interface.

Example

interface-type interface-num: Interface type and interface number. Refer to the

interface command in Port Command Manual for more information.

Display the information about interface VLAN-interface 1.

<SW8800> display ip interface vlan-interface 1

Vlan-interface1 current state : DOWN

Line protocol current state : DOWN

Internet Address is 1.1.1.1/8 Primary

Broadcast address : 1.255.255.255

The Maximum Transmit Unit : 1500 bytes input packets : 0, bytes : 0, multicasts : 0 output packets : 0, bytes : 0, multicasts : 0

TTL invalid packet number: 0

ICMP packet input number: 0

Echo reply: 0

Unreachable: 0

Source quench: 0

Routing redirect: 0

Echo request: 0

Router advert: 0

Router solicit: 0

Time exceed: 0

IP header bad: 0

Timestamp request: 0

Timestamp reply: 0

Information request: 0

Information reply: 0

Netmask request: 0

Netmask reply: 0

Unknown type: 0

7-2

3Com Switch 8800 Command Reference Guide Chapter 7 IP Address Configuration Commands

Table 7-2 Description on the fields of the display ip interface command

Field

Vlan-interface1 current state

Line protocol current state

Internet Address

TTL invalid packet number

ICMP packet input number

Echo reply:

Unreachable:

Source quench:

Routing redirect:

Echo request:

Router advert:

Router solicit:

Time exceed:

IP header bad:

Timestamp request:

Timestamp reply:

Information request:

Information reply:

Netmask request:

Netmask reply:

Unknown type:

Description

Current state of the VLAN interface 1

Current state of the Line protocol

IP address

Broadcast address

The Maximum Transmit Unit

Broadcast address

Maximum transmission unit input packets : 0, bytes : 0, multicasts : 0 output packets : 0, bytes : 0, multicasts :

0

The number of the input/output unicast packets, bytes and broadcast packets are all 0

The number of the received packets with invalid TTLs

Total received ICMP packets, including:

Echo reply packets, unreachable packets, source quench packets, routing redirect packets, echo request packets, route advertisement packets, route solicitation packets, packets that exceed the time, packets with bad IP headers, timestamp request packets, timestamp reply packets, information request packets, information reply packets, netmask request packets, netmask reply packets and unknown packets.

7.1.3 ip address

Syntax

ip address ip-address { mask | mask-length } [ sub ]

undo ip address [ ip-address { mask | mask-length } [ sub ] ]

View

VLAN interface view, loopback interface view, or console view

7-3

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 7 IP Address Configuration Commands

ip-address: IP address of VLAN interface in dotted decimal format.

mask: Corresponding subnet mask in dotted decimal format.

mask-length: Mask length. That is, the number of bits with a value of 1.

sub: Specifies the IP address to be configured to be the secondary IP address of the

VLAN interface/loopback interface/console interface.

Description

Use the ip address command to assign an IP address and the corresponding subnet mask to the VLAN interface/loopback interface/console interface.

Use the undo ip address command to remove the IP address and the corresponding subnet mask assigned to the VLAN interface/loopback interface/console interface.

By default, a VLAN interface/loopback interface/console interface does not have an IP address configured.

Normally, a VLAN interface/loopback interface/console interface only needs to be configured with one IP address. But you can also assign up to ten IP addresses to a

VLAN interface/loopback interface/console interface to enable it to connect to multiple subnets. Of all the IP addresses assigned to a VLAN interface/loopback interface/console interface, one is the primary IP address, and the other are secondary IP addresses. The relationship between primary and secondary addresses is: z z

When you configure a primary IP address for an interface already has a primary

IP address configured, the newly configured one replaces the old one.

If you execute the undo ip address command without providing any parameter, the switch removes both primary and secondary IP addresses of the interface.

The undo ip address [ ip-address { mask | mask-length } command can be used to delete the primary IP address, while the undo ip address [ ip-address { mask

| mask-length } sub command can be used to delete the secondary IP address.

Related command: display ip interface.

Example

Assign 129.12.0.1 to VLAN interface 1, with a subnet mask of 255.255.255.0.

[SW8800-Vlan-interface1] ip address 129.12.0.1 255.255.255.0

Assign 129.12.0.10 to Ethernet4/0/0, with a 24-bit subnet mask.

[SW8800-M-Ethernet4/0/0] ip address 129.12.0.10 24

7-4

3Com Switch 8800 Command Reference Guide

7.1.4 ip host

Chapter 7 IP Address Configuration Commands

Syntax

ip host hostname ip-address

undo ip host hostname [ ip-address ]

View

System view

Parameter

hostname: Name of the host. It is a character string that consists of 1 to 20 characters, including letters, numbers, "_", or ",", and it must contain at least one letter.

ip-address: Host IP address (the corresponding IP address to the host name) in dotted decimal notation.

Description

Use the ip host command to configure the host name and the host IP address.

Use the undo ip host command to cancel the host name and the host IP address.

By default, host name and corresponding IP address are null.

Related command: display ip host.

Example

Set Lanswtich1’s IP address to be 10.110.0.1.

[SW8800] ip host Lanswitch1 10.110.0.1

7-5

3Com Switch 8800 Command Reference Guide Chapter 8 ARP Configuration Commands

Chapter 8 ARP Configuration Commands

8.1 ARP Configuration Commands

8.1.1 anti-attack arp

Syntax

anti-attack { arp | dot1x | ip }{ disable | enable }

View

System view

Parameter

None

Description

Use the anti-attack enable command to enable the scheme of preventing attack from packets.

Use the anti-attack disable command to disable the mechanism.

By default, the scheme of preventing attack from IP packets is enabled. The scheme of preventing attack from ARP packets and dot1x packets is disabled.

Example

Enable the scheme of preventing attack from ARP packets.

[SW8800] anti-attack arp enable

Disable the scheme of preventing attack from IP packets.

[SW8800] anti-attack ip disable

8.1.2 arp check enable

Syntax arp check enable undo arp check enable

View

System view

8-1

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 8 ARP Configuration Commands

Description

Use the arp check enable command to enable the checking of ARP entry, that is, the device does not learn the ARP entry where the MAC address is a multicast MAC address.

Use the undo arp check enable command to disable the checking of ARP entry, that is, the device learns the ARP entry where the MAC address is a multicast MAC address.

By default, the checking of ARP entry is enabled, that is, the device does not learn the

ARP entry where the MAC address is a multicast MAC address.

Example

Configure that the device learns the ARP entry where the MAC address is a multicast

MAC address.

[SW8800] undo arp check enable

8.1.3 arp static

Syntax

arp static ip-address mac-address [ vlan-id { interface_type interface_num |

interface_name } | vpn-instance-name ]

undo arp ip-address

View

System view

Parameter

ip-address: IP address of the ARP mapping entry.

mac-address: MAC address of the ARP mapping entry, whose format is H-H-H ( H indicates a hexadecimal number).

vlan-id: VLAN to which the static ARP entry belongs, which is in the range of 1 to

4094.

interface_name: Port to which the static ARP entry belong, represented with

interface_type interface_num. interface_type is port type and interface_num is port number. For details about interface_type, interface_num and interface_name, refer to the Port Command Manual.

vpn-instance-name: VPN instance name in MPLS VPN.

8-2

3Com Switch 8800 Command Reference Guide

Description

Chapter 8 ARP Configuration Commands

Use the arp static command to configure the static ARP mapping entries in an ARP mapping table.

Use the undo arp static command to cancel a static ARP mapping entry from the

ARP table.

By default, the mapping table of the system ARP is empty and the switch can obtain its address mapping by means of dynamic ARP.

Note that: z z z

As long as a switch operates, its static ARP mapping entries remain valid and work unless you perform operations that make ARP invalid, such as change or remove VLAN virtual interfaces, remove a VLAN, or remove an interface from a

VLAN. These operations cause the corresponding ARP mapping entries to be automatically removed.

The vlan-id argument must be the ID of a VLAN that has been created by the user, and the Ethernet port specified behind this parameter must belong to the

VLAN.

ARP map entries with port parameters cannot be configured for aggregated ports.

Related command: reset arp, display arp, debugging arp.

Example

Associate the IP address 202.38.10.2 with the MAC address 00e0-fc01-0000, and the

ARP mapping entry belongs to the Ethernet port Ethernet2/1/1 on VLAN1.

[SW8800] arp static 202.38.0.10 00e0-fc01-0000 1 ethernet2/1/1

8.1.4 arp timer aging

Syntax

arp timer aging aging-time

undo arp timer aging

View

System view

Parameter

aging-time: Aging time of dynamic ARP aging timer, which is in the range of 1 to 1440 minutes. By default, the aging time is 20 minutes.

Description

Use the arp timer aging command to configure the dynamic ARP aging timer.

8-3

3Com Switch 8800 Command Reference Guide Chapter 8 ARP Configuration Commands

Use the undo arp timer aging command to restore the default dynamic ARP aging timer.

Related command: display arp timer aging.

Example

Configure the dynamic ARP aging timer to 10 minutes.

[SW8800] arp timer aging 10

8.1.5 debugging arp

Syntax

debugging arp { error | info | packet }

undo debugging arp { error | info | packet }

View

User view

Parameter

error: ARP error debugging.

info: ARP mapping table and information management debugging.

packet: ARP packet debugging.

Description

Use the debugging arp command to enable ARP debugging.

Use the undo debugging arp command to disable the corresponding ARP debugging.

By default, no ARP debugging is enabled.

Related command: arp static, display arp.

Example

Enable ARP packet debugging.

<SW8800> debugging arp packet

*0.771346-ARP-8-S1-arp_send:Send an ARP Packet, operation : 1, sender_eth_addr :

00e0-fc00-3500,sender_ip_addr : 10.110.91.159, target_eth_addr :

0000-0000-0000

, target_ip_addr : 10.110.91.193

*0.771584-ARP-8-S1-arp_rcv:Receive an ARP Packet, operation : 2, sender_eth_addr

8-4

3Com Switch 8800 Command Reference Guide Chapter 8 ARP Configuration Commands

: 0050-ba22-6fd7, sender_ip_addr : 10.110.91.193, target_eth_addr :

00e0-fc00-3

500, target_ip_addr : 10.110.91.159

Table 8-1 Description on the fields of the debugging arp command

Field

operation

Description

Kind of ARP packets: 1 ARP request packet; 2 ARP reply packet sender_ip_addr target_eth_addr

IP address of the sender

Target Ethernet address. If the packet is a ARP request packet, the target IP address will be 0. It changes to the correct address when the target responds.

Target IP address target_ip_addr

8.1.6 display arp

Syntax

display arp [ ip-address | [ dynamic | static ] [ | { begin | include | exclude } text ] ]

View

Any view

Parameter

dynamic: Displays the dynamic ARP entries in ARP mapping table.

static: Displays the static ARP entries in ARP mapping table.

ip-address: Displays ARP mapping entries according to specified IP address.

begin: Starts displaying from the first ARP entry that contains the specified character string “text”.

include: Displays only the ARP entries that contain the specified character string

“text”.

exclude: Displays only the ARP entries that do not contain the specified character string “text”.

text: Character string. The ARP entries that contain this character string are displayed.

Description

Use the display arp command to view the ARP mapping table.

Related command: arp static, reset arp, debugging arp.

8-5

3Com Switch 8800 Command Reference Guide

Example

Chapter 8 ARP Configuration Commands

Display all the ARP entries.

<SW8800> display arp | inc 2.2.1

Type: S-Static D-Dynamic

IP Address MAC Address VLAN ID Port Name Aging Type

2.2.2.231 0001-0001-0001 N/A N/A N/A S

2.2.1.2 0002-0002-0002 N/A N/A N/A S

-- 2 entries found ---

Note:

Character of “.” in a regular expression is a wildcard. So, as for “2.2.2.231”, “2.2.1” matches its sub-string “2.231” and thus the ARP mapping entry with an IP address of

2.2.2.231 is displayed as a matched entry.

Table 8-2 Description on the fields of the display arp command

Field

IP Address

Description

IP address of the ARP mapping entry

MAC Address MAC address of the ARP mapping entry

VLAN ID ID of the VLAN to which the static ARP entry belongs

Port Name

Aging

Type

Name of the port to which the static ARP entry belongs

Aging time of dynamic ARP entry in minutes

Type of ARP entry

8.1.7 display arp timer aging

Syntax display arp timer aging

View

Parameter

Any view

None

8-6

3Com Switch 8800 Command Reference Guide

Description

Chapter 8 ARP Configuration Commands

Use the display arp timer aging command to view the current setting of the dynamic

ARP aging timer.

Related command: arp timer aging.

Example

Display the current setting of the ARP aging timer.

[SW8800] display arp timer aging

Current ARP aging time is 10 minute(s)

You can see that the ARP aging time is 10 minutes.

8.1.8 reset arp

Syntax

reset arp [ dynamic | static | interface { interface_type interface_num |

interface_name } | all ]

View

User view

Parameter

Description

Use the reset arp command to reset the ARP mapping entries.

Related command: arp static, display arp.

Example

dynamic: Clears the dynamic ARP mapping entries.

static: Clears the static ARP mapping entries

interface_name: Clears the ARP mapping entries that are related to the specified port, represented with interface_type interface_num. interface_type is port type and

interface_num is port number. For details about interface_type, interface_num and

interface_name, refer to the Port Command Manual.

all: Clears all the ARP mapping entries.

Reset the static ARP entries.

<SW8800> reset arp static

8-7

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

Chapter 9 DHCP Configuration Commands

9.1 General DHCP Configuration Commands

9.1.1 dhcp enable

Syntax dhcp enable undo dhcp enable

View

System view

Parameter

None

Description

Use the dhcp enable command to enable DHCP service.

Use the undo dhcp enable command to disable the DHCP service.

For both DHCP server and DHCP relay, you must enable DHCP service first before performing other DHCP configurations. The other related DHCP configurations take effect only after DHCP service is enabled.

Example

Enable DHCP service.

[SW8800] dhcp enable

9.1.2 dhcp select

Syntax

In VLAN interface view:

dhcp select { global | interface | relay }

undo dhcp select

In system view:

dhcp select { global | interface | relay } { interface vlan-interface vlan_id [ to

vlan-interface vlan_id ] | all }

undo dhcp select { interface vlan-interface vlan_id [ to vlan-interface vlan_id ] |

all }

9-1

3Com Switch 8800 Command Reference Guide

View

VLAN interface view, system view

Chapter 9 DHCP Configuration Commands

Parameter

Description

Use the dhcp select command to specify a method used by the switch to process the

DHCP packets it received. You can use this command in VLAN interface view to specify a processing method of DHCP packets for current VLAN interface, or in system view to specify a processing method for multiple VLAN interfaces.

Use the undo dhcp select command to revert to the default processing mode of

DHCP packets.

By default, the switch forwards the DHCP packets it received to the local DHCP server and let the local server assign IP addresses in global address pools to DHCP clients.

(That is, the switch processes the DHCP packets in the global method.)

Example

global: Specifies to forward DHCP packets to local DHCP server and let the local server assign IP addresses in global address pools to DHCP clients.

interface: Specifies to forward DHCP packets to local DHCP server and let the local server assign IP addresses in VLAN interface address pool to DHCP clients.

relay: Specifies to forward DHCP packets to remote DHCP servers and let remote servers assign IP addresses to DHCP clients. In this case, the current switch operates as a DHCP relay.

interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies a VLAN interface or a range of VLAN interfaces.

all: Specifies all the VLAN interfaces.

Specify to forward DHCP packets to the local DHCP server and let the local server assign IP addresses in global address pools to DHCP clients.

[SW8800-Vlan-interface1] dhcp select global

9.1.3 dhcp server detect

Syntax dhcp server detect undo dhcp server detect

View

System view

9-2

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 9 DHCP Configuration Commands

Description

Use the dhcp server detect command to enable fake DHCP server detection.

Use the undo dhcp server detect command to disable fake DHCP server detection.

Fake DHCP server detection is disabled by default.

Example

Enable fake DHCP server detection.

[SW8800] dhcp server detect

9.2 DHCP Server Configuration Commands

9.2.1 debugging dhcp server

Syntax

debugging dhcp server { all | error | event | packet }

undo debugging dhcp server { all | error | event | packet }

View

User view

Parameter

Description

Use the debugging dhcp server command to enable debugging for DHCP server.

Use the undo debugging dhcp server command to disable debugging for DHCP server.

Each type of debugging concerning DHCP servers is disabled by default.

Example

all: Used to enable/disable all types of debugging for DHCP server.

error: Used to enable/disable error debugging for DHCP server errors, including those occur when a DHCP server processes DHCP packets or assigns IP addresses.

event: Used to enable/disable debugging for DHCP server events, including the assigning of IP addresses and timing out of ping packets.

packet: Specifies debugging for packets received/sent by DHCP servers, including

DHCP packets and ping packets.

Enable debugging for DHCP server events.

9-3

3Com Switch 8800 Command Reference Guide

<SW8800> debugging dhcp server event

Chapter 9 DHCP Configuration Commands

9.2.2 dhcp server dns-list

Syntax

In VLAN interface view:

dhcp server dns-list ip-address [ ip-address ]

undo dhcp server dns-list { ip-address | all }

In system view:

dhcp server dns-list ip-address [ ip-address ] { interface vlan-interface vlan_id [ to

vlan-interface vlan_id ] | all }

undo dhcp server dns-list { ip-address | all } { interface vlan-interface vlan_id [ to

vlan-interface vlan_id ] | all }

View

VLAN interface view, system view

Parameter

ip-address: IP address of a DHCP server. You can specify up to eight IP addresses

(separated by spaces) in one command.

interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one VLAN interface, or a range of VLAN interfaces.

all: Specifies all VLAN interfaces or all configured IP addresses.

Description

Use the dhcp server dns-list command to configure one or more DNS server addresses for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

Use the undo dns-list command to remove one or more DNS server addresses configured for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

By default, no DNS server address is configured.

With eight DNS server addresses already configured, if you add a new DNS server address by executing the dhcp server dns-list command, the newly configured one overwrites the oldest one.

Related command: dns-list.

Example

Configure the DNS server address 1.1.1.254 for the DHCP address pool of VLAN interface 1.

9-4

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

[SW8800] interface Vlan-interface 1

[SW8800-Vlan-interface1] dhcp server dns-list 1.1.1.254

9.2.3 dhcp server domain-name

Syntax

In VLAN interface view:

dhcp server domain-name domain-name

undo dhcp server domain-name

In system view:

dhcp server domain-name domain-name { interface vlan-interface vlan_id [ to

vlan-interface vlan_id ] | all }

undo dhcp server domain-name domain-name { interface vlan-interface vlan_id

[ to vlan-interface vlan_id ] | all }

View

DHCP address pool view, VLAN interface view, system view

Parameter

domain-name: DHCP client domain name for DHCP address pool of specified VLAN interface, a string that is of 3 to 50 characters in length.

interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one VLAN interface, or a range of VLAN interfaces.

all: Specifies all VLAN interfaces.

Description

Use the dhcp server domain-name command to configure a DHCP client domain name for the DHCP address pool of the current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

Use the undo dhcp server domain-name command to remove the DHCP client domain name configured for the DHCP address pool of the current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

No DHCP client domain name is configured by default.

Related command: domain-name.

Example

Configure the DHCP client domain name of the DHCP address pool of the current

VLAN interface to vlan-interface1.com.

[SW8800] interface vlan-interface 1

[SW8800-Vlan-interface1] dhcp server domain-name vlan-interface1.com

9-5

3Com Switch 8800 Command Reference Guide

9.2.4 dhcp server expired

Chapter 9 DHCP Configuration Commands

Syntax

In VLAN interface view:

dhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited }

undo dhcp server expired

In system view:

dhcp server expired { day day [ hour hour [ minute minute ] ] | unlimited }

{ interface vlan-interface vlan_id [ to vlan-interface vlan_id ] | all }

undo dhcp server expired { interface vlan-interface vlan_id [ to vlan-interface

vlan_id ] | all }

View

VLAN interface view, system view

Parameter

day day: Sets the number of days. The day argument ranges from 0 to 365.

hour hour: Sets the number of hours. The hour argument ranges from 0 to 23.

minute minute: Sets the number of minutes. The minute argument ranges from 0 to

59.

unlimited: Sets an unlimited lease time.

interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one VLAN interface, or a range of VLAN interfaces.

all: Specifies all VLAN interfaces.

Description

Use the dhcp server expired command to set the IP address lease time for the

DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

Use the undo dhcp server expired command to revert to the default IP address lease time for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

The default lease time is one day.

Related command: expired.

Example

Set the IP address lease time of the DHCP address pool of VLAN interface 1 to unlimited.

[SW8800] interface vlan-interface 1

9-6

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

[SW8800-Vlan-interface1] dhcp server expired unlimited

9.2.5 dhcp server forbidden-ip

Syntax

dhcp server forbidden-ip low-ip-address [ high-ip-address ]

undo dhcp server forbidden-ip low-ip-address [ high-ip-address ]

View

System view

Parameter

Description

Use the dhcp server forbidden-ip command to forbid a range of IP addresses to be automatically assigned to DHCP clients.

Use the undo dhcp server forbidden-ip command to cancel the forbiddance.

All IP addresses in a DHCP address pool can be automatically assigned by default.

Related command: dhcp server ip-pool, network, static-bind ip-address, and

dhcp server static-bind.

Example

low-ip-address: Minimum IP address in the forbidden IP address range.

high-ip-address: The highest IP address in the forbidden IP address range. Note that the value of this argument must be larger than (or equal to) that of the low-ip-address argument. If you do not provide this argument, then the forbidden IP address range contains only the IP address specified by the low-ip-address argument.

Forbid the IP addresses from 10.110.1.1 to 10.110.1.63 to be automatically assigned.

[SW8800] dhcp server forbidden-ip 10.110.1.1 10.110.1.63

9.2.6 dhcp server ip-pool

Syntax

dhcp server ip-pool pool-name

undo dhcp server ip-pool pool-name

View

System view

9-7

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 9 DHCP Configuration Commands

pool-name: Name of the address pool, a string that is of 1 to 35 characters in length.

An address pool name uniquely identifies an address pool.

Description

Use the dhcp server ip-pool command to create a global DHCP address pool and enter the corresponding DHCP address pool view.

Use the undo dhcp server ip-pool command to remove a specified global DHCP address pool.

No global DHCP address pool is created by default.

Related command: dhcp enable.

Example

Create a global DHCP address pool with a name of 0.

[SW8800] dhcp server ip-pool 0

[SW8800-dhcp-0]

9.2.7 dhcp server nbns-list

Syntax

In VLAN interface view:

dhcp server nbns-list ip-address [ ip-address ]

undo dhcp server nbns-list { ip-address | all }

In system view:

dhcp server nbns-list ip-address [ ip-address ] { interface vlan-interface vlan_id

[ to vlan-interface vlan_id ] | all }

undo dhcp server nbns-list { ip-address | all } { interface vlan-interface vlan_id [ to

vlan-interface vlan_id ] | all }

View

VLAN interface view, system view

Parameter

ip-address: NetBIOS server IP address. You can specify up to eight IP addresses

(separated by spaces) in one command.

interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one VLAN interface, or a range of VLAN interfaces.

all: Specifies all VLAN interfaces or all configured IP addresses.

9-8

3Com Switch 8800 Command Reference Guide

Description

Chapter 9 DHCP Configuration Commands

Use the dhcp server nbns-list command to configure one or more NetBIOS server

IP addresses for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

Use the undo dhcp server nbns-list command to remove one or all NetBIOS server

IP addresses configured for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s)..

By default, no NetBIOS server IP address is configured.

With eight NetBIOS server addresses already configured, if you add a new one by executing the dhcp server nbns-list command, the newly configured one overwrites the oldest one.

Related command: nbns-list, dhcp server netbios-type.

Example

Configure the NetBIOS server with an IP address of 10.12.1.99 for the DHCP address pool of VLAN interface 1.

[SW8800] interface vlan-interface 1

[SW8800-Vlan-interface1] dhcp server nbns-list 10.12.1.99

9.2.8 dhcp server netbios-type

Syntax

In VLAN interface view:

dhcp server netbios-type { b-node | h-node | m-node | p-node }

undo dhcp server netbios-type

In system view:

dhcp server netbios-type { b-node | h-node | m-node | p-node } { interface

vlan-interface vlan_id [ to vlan-interface vlan_id ] | all }

undo dhcp server netbios-type { interface vlan-interface vlan_id [ to

vlan-interface vlan_id ] | all }

View

Parameter

VLAN interface view, system view

b-node: Specifies b-node to be the NetBIOS node type. DHCP clients of this node type establish host name-to-IP address mapping by broadcasting. (b stands for broadcast.)

9-9

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

p-node: Specifies p-node to be the NetBIOS node type. DHCP clients of this node type establish host name-to-IP address mapping by communicating with NetBIOS server. (p stands for peer-to-peer.)

m-node: Specifies m-node to be the NetBIOS node type. DHCP clients of this node type are p nodes which take some broadcast features. (m stands for mixed.)

h-node: Specifies h-node to be the NetBIOS node type. DHCP clients of this node type are b nodes which take peer-to-peer mechanism. (h stands for hybrid.)

Description

Use the dhcp server netbios-type command to configure the NetBIOS node type for

DHCP clients of DHCP address pool of current or specified VLAN interface.

Use the undo dhcp server netbios-type command to remove the NetBIOS node type configured for DHCP clients of DHCP address pool of current or specified VLAN interface.

The default DHCP client NetBIOS node type is h-node.

Related command: netbios-type, dhcp server nbns-list.

Example

Configure p-node as the NetBIOS node type for DHCP clients of the DHCP address pool of VLAN interface 1.

[SW8800] interface vlan-interface 1

[SW8800-Vlan-interface1] dhcp server netbios-type p-node

9.2.9 dhcp server option

Syntax

In VLAN interface view:

dhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address

[ ip-address ] }

undo dhcp server option code

In system view:

dhcp server option code { ascii ascii-string | hex hex-string | ip-address ip-address

[ ip-address ] } { interface vlan-interface vlan_id [ to vlan-interface vlan_id ] | all }

undo dhcp server option code { interface vlan-interface vlan_id [ to

vlan-interface vlan_id ] | all }

View

VLAN interface view, system view

9-10

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 9 DHCP Configuration Commands

code: Option code customized by user. This argument ranges from 2 to 254.

ascii ascii-string: Specifies a string comprising ASCII characters. The string can be of

1 to 63 characters in length.

hex hex-string: Specifies a numeric string containing 2 or 4 hexadecimal digits (hh or hhhh).

ip-address ip-address [ ip-address ]: Specifies one or more IP addresses. You can specify up to eight IP addresses (separated by spaces) in one command.

interface vlan-interface vlan_id [ to vlan-interface vlan_id ]: Specifies one or more

VLAN interfaces.

all: Specifies all VLAN interfaces.

Description

Use the dhcp server option command to configure a custom DHCP option for the

DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

Use the undo dhcp server option command to remove a custom DHCP option configured for the DHCP address pool of current VLAN interface, or for the DHCP address pool(s) of the specified VLAN interface(s).

If you execute the dhcp server option command multiple times, the new configurations overwrite the corresponding old ones.

Related command: option.

Example

Configure a custom DHCP option for the DHCP address pool of VLAN interface 1, with the code argument of 100 and the hex-string argument of 0x11 and 0x22.

[SW8800] interface vlan-interface 1

[SW8800-Vlan-interface1] dhcp server option 100 hex 11 22

9.2.10 dhcp server ping

Syntax

dhcp server ping { packets number | timeout milliseconds }

undo dhcp server ping { packets | timeout }

View

System view

9-11

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 9 DHCP Configuration Commands

packets number: Sets the maximum times to send ping packets. The number argument ranges from 0 to 10 and defaults to 2. Value of 0 specifies not to send any ping packet.

timeout milliseconds: Sets the maximum time to wait for a response to a ping packet.

The milliseconds argument is in the unit of milliseconds; it ranges from 0 to 10000 and defaults to 500.

Description

Use the dhcp server ping command to set the maximum times to send ping packets or the maximum time for the DHCP server to wait for a response after sending a ping packet.

Use the undo dhcp server ping command to revert to the corresponding default setting.

Example

Set the maximum times to send ping packets to 10, and the maximum time to wait for a response to a ping packet to 500 milliseconds.

[SW8800] dhcp server ping packets 10

9.2.11 dhcp server static-bind

Syntax

dhcp server static-bind ip-address ip-address mac-address mac-address

undo dhcp server static-bind { ip-address ip-address | mac-address

mac-address }

View

VLAN interface view

Parameter

ip-address: IP address to be bound statically. Note that the IP address must be a valid

IP address in the address pool of the current VLAN interface.

mac-address: MAC address for the IP address to be bound to.

Description

Use the dhcp server static-bind command to statically bind an IP address in the address pool of the current VLAN interface to a MAC address.

Use the undo dhcp server static-bind command to remove a statically bound IP address entry.

9-12

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

IP addresses in the address pool of a VLAN interface are not statically bound by default.

VLAN interface address pool only supports one-to-one MAC-IP binding.

Example

Statically bind the IP address 10.1.1.1 to the MAC address 0000-e03f-0305.

[SW8800-Vlan-interface1] dhcp server static-bind 10.1.1.1 0000-e03f-0305

9.2.12 display dhcp server conflict

Syntax

display dhcp server conflict { all | ip ip-address }

View

Any view

Parameter

all: Specifies all IP addresses.

ip ip-address: Specifies an IP address.

Description

Use the display dhcp server conflict command to display the statistics about DHCP address conflicts.

Related command: reset dhcp server conflict.

Example

Display the statistics about DHCP address conflicts.

<SW8800> display dhcp server conflict all

Address Discover Time

10.110.1.2 Jan 11 2003 11:57: 7 PM

Table 9-1 Description on the fields of the display dhcp server conflict command

Field

Address

Discover Time

Description

The IP address that causes the conflict

The time when the conflict is discovered

9-13

3Com Switch 8800 Command Reference Guide

9.2.13 display dhcp server expired

Chapter 9 DHCP Configuration Commands

Syntax

display dhcp server expired { ip ip-address | pool [ pool-name ] | interface

[ vlan-interface vlan_id ] | all }

View

Any view

Parameter

ip ip-address: Specifies an IP address.

pool [ pool-name ]: Specifies a global address pool. If you do not input a pool-name, all global address pools are included.

interface [ vlan-interface vlan_id ]: Specifies a VLAN interface address pool. If you do not input a vlan_id, all VLAN interface address pools are included.

all: Specifies all DHCP address pools.

Description

Use the display dhcp server expired command to display information about lease-expired addresses. If no available IP address exists in a DHCP address pool, the DHCP server assigns the lease-expired IP addresses in the pool to DHCP clients as needed.

Example

Display information about lease-expired addresses.

<SW8800> display dhcp server expired all

Global pool:

IP address Hardware address Lease expiration Type

Interface pool:

IP address Hardware address Lease expiration Type

Table 9-2 Description on the fields of the display dhcp server expired command

Field

Global pool

Interface pool

IP address

Hardware address

Lease expiration

Description

The information followed is about expired IP addresses in global address pool(s)

The information followed is about lease-expired IP addresses in VLAN interface address pool(s)

Bound IP addresses

Bound MAC addresses

The time when an IP address expires

9-14

3Com Switch 8800 Command Reference Guide

Field

Chapter 9 DHCP Configuration Commands

Description

9.2.14 display dhcp server free-ip

Syntax display dhcp server free-ip

View

Any view

Parameter

None

Description

Use the display dhcp server free-ip command to display the ranges of available

(unassigned) IP addresses in DHCP address pools.

Example

Display the ranges of available (unassigned) IP addresses in DHCP address pools.

<SW8800> display dhcp server free-ip

IP Range from 1.0.0.0 to 2.2.2.1

IP Range from 2.2.2.3 to 2.255.255.255

IP Range from 4.0.0.0 to 4.255.255.255

IP Range from 5.5.5.0 to 5.5.5.0

IP Range from 5.5.5.2 to 5.5.5.255

9.2.15 display dhcp server ip-in-use

Syntax

display dhcp server ip-in-use { ip ip-address | pool [ pool-name ] | interface

[ vlan-interface vlan_id ] | all }

View

Any view

Parameter

ip ip-address: Specifies an IP address.

pool [ pool-name ]: Specifies a global address pool. If you do not input a pool-name, all global address pools are included.

9-15

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

interface [ vlan-interface vlan_id ]: Specifies a VLAN interface address pool. If you do not input a vlan_id, all VLAN interface address pools are included.

all: Specifies all DHCP address pools.

Description

Use the display dhcp server ip-in-use command to display information about IP address binding in DHCP address pool(s).

Related command: reset dhcp server ip-in-use.

Example

Display information about IP address binding in all DHCP address pools.

<SW8800> display dhcp server ip-in-use all

Global pool:

IP address Hardware address Lease expiration Type

Interface pool:

IP address Hardware address Lease expiration Type

5.5.5.1 0050-ba28-930a Jun 5 2003 10:56: 7 AM Auto:COMMITED

Table 9-3 Description on the fields of the display dhcp server ip-in-use command

Fields

Global pool

Interface pool

Description

The information followed is about bound IP addresses in global address pool(s)

The information followed is about bound IP addresses in

VLAN interface address pool(s)

IP address Bound IP addresses

Hardware address Bound MAC addresses

Lease expiration The time when an IP address expires

9.2.16 display dhcp server statistics

Syntax display dhcp server statistics

View

Any view

9-16

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 9 DHCP Configuration Commands

Description

Use the display dhcp server statistics command to display statistics information about the DHCP server.

Related command: reset dhcp server statistics.

Example

Display statistics information about the DHCP server.

<SW8800> display dhcp server statistics

Global Pool:

Pool Number: 5

Binding

Auto: 0

Manual: 1

Expire: 0

Interface Pool:

Pool Number: 1

Binding

Auto: 1

Manual: 0

Expire: 0

Boot Request: 6

Dhcp Discover: 1

Dhcp Request: 4

Dhcp Decline: 0

Dhcp Release: 1

Dhcp Inform: 0

Boot Reply: 4

Dhcp Offer: 1

Dhcp Ack: 3

Dhcp Nak: 0

Bad Messages: 0

Table 9-4 Description on the fields of the display dhcp server statistics command

Field

Global Pool

Interface Pool

Description

The information followed is about the statistics of the global address pools

The information followed is about the statistics of the address pools of VLAN interfaces

9-17

3Com Switch 8800 Command Reference Guide

Field

Pool Number

Auto

Manual

Expire

Boot Request: 6

Dhcp Discover: 1

Dhcp Request: 4

Dhcp Decline: 0

Dhcp Release: 1

Dhcp Inform: 0

Boot Reply: 4

Dhcp Offer: 1

Dhcp Ack: 3

Dhcp Nak: 0

Bad Messages

Total and categorized DHCP packets received by the

DHCP server

Total and categorized DHCP packets sent by the DHCP server

Chapter 9 DHCP Configuration Commands

Description

Number of address pools

Number of automatically bound IP addresses

Number of manually bound IP addresses

Number of expired IP addresses

Number of bad DHCP packets

9.2.17 display dhcp server tree

Syntax

display dhcp server tree { pool [ pool-name ] | interface [ vlan-interface vlan_id ] |

all }

View

Any view

Parameter

pool [ pool-name ]: Specifies a global address pool. If you do not specify a global address pool, all global address pools are included.

interface [ vlan-interface vlan_id ]: Specifies the address pool of a VLAN interface. If you do not specify a VALN interface, address pools of all VLAN interfaces are included.

all: Specifies all addresses pools.

Description

Use the display dhcp server tree command to display information about DHCP address pool hierarchy.

9-18

3Com Switch 8800 Command Reference Guide

Example

Chapter 9 DHCP Configuration Commands

Display information about DHCP address pool hierarchy.

<SW8800>display dhcp server tree all

Global pool:

Pool name: 5 network 10.10.1.0 mask 255.255.255.0

Child node:6

Sibling node:7

option 1 ip-address 255.0.0.0

expired 1 0 0

option 58 hex 00 00 A8 C0

option 59 hex 00 00 00 3C

Pool name: 6

static-bind ip-address 10.10.1.2 mask 255.0.0.0

static-bind mac-address 00e0-00fc-0001

Parent node:5

option 1 ip-address 255.255.0.

expired 1 0 0

option 58 hex 00 00 A8 C0

option 59 hex 00 00 00 3C

Pool name: 7 network 10.10.1.64 mask 255.255.255.192

PrevSibling node:5

option 1 ip-address 255.0.0.0

gateway-list 2.2.2.2

dns-list 1.1.1.1

domain-name 444444

nbns-list 3.3.3.3

expired 1 0 0

option 58 hex 00 00 A8 C0

option 59 hex 00 00 00 3C

Table 9-5 Description on the fields of the display dhcp server tree command

Field

Global pool

Interface pool

Pool Name

Network

Description

The information followed is about global address pools

The information followed is about VLAN interface address pools

The name of an address pool

Range of addresses available for assigning

9-19

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

Field Description

static-bind ip-address

10.10.1.2 mask

255.0.0.0

An IP address and the corresponding MAC address statically bound to it static-bind mac-address

00e0-00fc-0001 child node:6

The address pool named 6 is a child node of the one named 5

Based on the node position of the address pool named 5, the node type displayed here includes the following:

Child node: Indicates the node to which the address pool named 6 corresponds is a child node of that of the address pool named 5. In this case, node 6 stands for a subnet of the network node 5 stands for

Parent node: Indicates the node to which the address pool named 6 corresponds is the parent node of that of the address pool named 5. In this case, node 6 stands for the network segment

Sibling node: Indicates the node to which the address pool named 6 corresponds is the next sibling node of that of the address pool named 5. Information about these address pools is displayed in the order they are established

PrevSibling node: Indicates the node to which the address pool named 6 corresponds is the previous sibling node of that of the address pool named 5 expired gateway-list dns-list domain-name nbns-list

9.2.18 dns-list

Syntax

dns-list ip-address [ ip-address ]

undo dns-list { ip-address | all }

View

DHCP address pool view

The valid period of the leased IP addresses in the address pool, including number of days, hours and minutes

The list of outbound gateways configured for the DHCP clients

The list of DNS servers configured for the DHCP clients

The domain name configured for the DHCP clients

The NetBIOS server configured for the DHCP clients

9-20

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 9 DHCP Configuration Commands

ip-address: IP address of a DNS server. You can specify up to eight IP addresses

(separated by spaces) in one command.

all: Specifies all configured DNS server IP addresses.

Description

Use the dns-list command to configure one or more DNS server IP addresses for a global DHCP address pool.

Use the undo dns-list command to remove one or all DNS server IP addresses configured for a global DHCP address pool.

By default, no DNS server IP address is configured for a global DHCP address pool.

With eight DNS server addresses already configured, if you add a new one by executing the dns-list command, the new one overwrites the oldest one.

Related command: dhcp server dns-list, dhcp server ip-pool.

Example

Configure a DNS server with an IP address of 1.1.1.254 for the global DHCP address pool 0.

[SW8800] dhcp server ip-pool 0

[SW8800-dhcp-0] dns-list 1.1.1.254

9.2.19 domain-name

Syntax

domain-name domain-name

undo domain-name

View

DHCP address pool view

Parameter

domain-name: Domain name, a string that is of 3 to 50 characters in length.

Description

Use the domain-name command to configure a domain name for the DHCP clients of a global DHCP address pool.

Use the undo domain-name command to remove the domain name configured for the DHCP clients of a global DHCP address pool.

By default, no domain name is configured for the DHCP clients of a global DHCP address pool.

9-21

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

Related command: dhcp server ip-pool, dhcp server domain-name.

Example

Configure a domain name (mydomain.com) for the DHCP clients of the global DHCP address pool 0.

[SW8800] dhcp server ip-pool 0

[SW8800-dhcp-0] domain-name mydomain.com

9.2.20 expired

Syntax

expired { day day [ hour hour [ minute minute ] ] | unlimited }

undo expired

View

DHCP address pool view

Parameter

Description

Use the expired command to set the valid period for a global DHCP address pool.

Use the undo expired command to revert to the default valid period.

The default valid period is 1 day.

Related command: dhcp server ip-pool, dhcp server expired.

Example

day day: Specifies the number of days. The day argument ranges from 0 to 365.

hour hour: Specifies the number of hours. The hour argument ranges from 0 to 23.

minute minute: Specifies the number of minutes. The minute argument ranges from 0 to 59.

unlimited: Specifies an unlimited lease time.

Set the IP address lease time of the global DHCP address pool 0 to one day plus two hours and three minutes.

[SW8800] dhcp server ip-pool 0

[SW8800-dhcp-0] expired day 1 hour 2 minute 3

9.2.21 gateway-list

Syntax

gateway-list ip-address [ ip-address ]

9-22

3Com Switch 8800 Command Reference Guide

undo gateway-list { ip-address | all }

View

DHCP address pool view

Parameter

Chapter 9 DHCP Configuration Commands

ip-address: IP address of an outbound gateway. You can specify up to eight IP addresses (separated by spaces) in one command.

all: Specifies all outbound gateway IP addresses.

Description

Use the gateway-list command to configure one or more outbound gateway addresses for DHCP clients.

Use the undo gateway-list command to remove one or all outbound gateway addresses configured for DHCP clients.

By default, no outbound gateway address is configured for DHCP clients.

With eight outbound gateway addresses already configured, if you add a new outbound gateway address by executing the gateway-list command, the new one overwrites the oldest one.

Example

Configure an outbound gateway with an IP address of 10.110.1.99 for DHCP clients of global DHCP address pool 0.

[SW8800] dhcp server ip-pool 0

[SW8800-dhcp-0] gateway-list 10.110.1.99

9.2.22 nbns-list

Syntax

nbns-list ip-address [ ip-address ]

undo nbns-list { ip-address | all }

View

DHCP address pool view

Parameter

ip-address: IP address of a NetBIOS server. You can specify up to eight IP addresses

(separated by spaces) in one command.

all: Specifies all configured NetBIOS server IP addresses.

9-23

3Com Switch 8800 Command Reference Guide

Description

Chapter 9 DHCP Configuration Commands

Use the nbns-list command to configure one or more NetBIOS server addresses for a global DHCP address pool.

Use the undo nbns-list command to remove one or all NetBIOS server addresses configured for a global DHCP address pool.

By default, no NetBIOS server address is configured for a global DHCP address pool.

With eight NetBIOS server addresses already configured, if you add a new NetBIOS server address by executing the nbns-list command, the new one overwrites the oldest one.

Related command: dhcp server ip-pool, dhcp server nbns-list, netbios-type.

Example

Configure a NetBIOS server with an IP address of 10.12.1.99 for the global DHCP address pool named 0.

[SW8800] dhcp server ip-pool 0

[SW8800-dhcp-0] nbns-list 10.12.1.99

9.2.23 netbios-type

Syntax

netbios-type { b-node | h-node | m-node | p-node }

undo netbios-type

View

Parameter

DHCP address pool view

b-node: Specifies the NetBIOS node type of DHCP clients to be b-node (b stands for broadcast). Nodes of this type establish their host name-to-IP address mappings by broadcasting.

p-node: Specifies the NetBIOS node type of DHCP clients to be p-node (p stands for peer-to-peer). Nodes of this type establish their host name-to-IP address mappings by communicating with NetBIOS server.

m-node: Specifies the NetBIOS node type of DHCP clients to be m-node (m stands for mixed). Nodes of this type are p nodes which take some broadcast features.

h-node: Specifies the NetBIOS node type of DHCP clients to be h-node (h stands for hybrid). Nodes of this type are b nodes which take peer-to-peer mechanism.

9-24

3Com Switch 8800 Command Reference Guide

Description

Chapter 9 DHCP Configuration Commands

Use the netbios-type command to configure the NetBIOS node type for DHCP clients of a global DHCP address pool.

Use the undo netbios-type command to remove NetBIOS node type configuration of a global DHCP address pool.

By default, the DHCP clients are of h-node type.

Related command: dhcp server ip-pool, dhcp server netbios-byte, nbns-list.

Example

Configure the NetBIOS node type of DHCP clients of the global DHCP address pool 0 to b-node.

[SW8800] dhcp server ip-pool 0

[SW8800-dhcp-0] netbios-type b-node

9.2.24 network

Syntax

network ip-address [ mask netmask ]

undo network

View

DHCP address pool view

Parameter

ip-address: Address range for dynamic IP address assigning.

mask netmask: Specifies the subnet mask of the address pool. If you do not provide this argument, the default subnet mask is used.

Description

Use the network command to configure an address range for dynamic IP address assignment.

Use the undo network command to remove the address range configured for dynamic IP address assignment.

By default, no IP address range is configured for dynamic IP address assignment.

Each DHCP address pool can be configured with only one address range. If you execute the network command multiple times, then only the last configured address range works.

Related command: dhcp server ip-pool, dhcp server forbidden-ip.

9-25

3Com Switch 8800 Command Reference Guide

Example

Chapter 9 DHCP Configuration Commands

Configure 192.168.8.0/24 as the address range for the global DHCP address pool 0.

[SW8800-dhcp-0] network 192.168.8.0 mask 255.255.255.0

9.2.25 option

Syntax

option code { ascii ascii-string | hex hex-string | ip-address ip-address

[ ip-address ] }

undo option code

View

DHCP address pool view

Parameter

code: Customized option value, a number ranging from 2 to 254.

ascii ascii-string: Specifies an ASCII string. The ascii-string argument is a string that is of 1 to 63 characters in length.

hex hex-string: Specifies a numeric string containing two or four hexadecimal digits

(hh or hhhh).

ip-address ip-address [ ip-address ]: Specifies one or more IP addresses. You can specify up to eight IP addresses (separated by spaces) in one command.

Description

Use the option command to configure a custom DHCP option for a global DHCP address pool.

Use the undo option command to remove a custom DHCP option configured for the global DHCP address pool.

If you execute the option command multiple times, the new configurations overwrite the corresponding old ones

Related command: dhcp server ip-pool, dhcp server option.

Example

Configure a custom option for the global DHCP address pool, with an option value of

100 and two hexadecimal numbers of 0x11 and 0x22.

[SW8800] dhcp server ip-pool 0

[SW8800-dhcp-0] option 100 hex 11 22

9-26

3Com Switch 8800 Command Reference Guide

9.2.26 reset dhcp server conflict

Chapter 9 DHCP Configuration Commands

Syntax

reset dhcp server conflict { ip ip-address | all }

View

User view

Parameter

ip-address: Clears statistics about the specified IP address conflicts.

all: Clears all statistics about address conflicts.

Description

Use the reset dhcp server conflict command to clear statistics information about

DHCP address conflicts.

Related command: display dhcp server conflict.

Example

Clear all statistics information about DHCP address conflicts.

<SW8800> reset dhcp server conflict all

9.2.27 reset dhcp server ip-in-use

Syntax

reset dhcp server ip-in-use{ all | interface [ vlan-interface vlan_id ] | ip ip-address

| pool [ pool-name ] }

View

User view

Parameter

all: Specifies all binding entries.

ip-address: Specifies the binding entry that contains the specified IP address.

pool-name: Specifies a global DHCP address pool. If you do not provide this argument, then all global DHCP address pools are included.

interface_name: Specifies a VLAN interface DHCP address pool. If you do not provide this argument, then all VLAN interface DHCP address pools are included.

Description

Use the reset dhcp server ip-in-use command to clear configuration about dynamically bound DHCP addresses.

9-27

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

Related command: display dhcp server ip-in-use.

Example

Clear the binding entries that contain the IP address of 10.110.1.1.

<SW8800> reset dhcp server ip-in-use ip 10.110.1.1

9.2.28 reset dhcp server statistics

Syntax reset dhcp server statistics

View

User view

Parameter

None

Description

Use the reset dhcp server statistics command to clear statistics information about the DHCP servers, such as the number of DHCP address pools, the number of automatically bound, manually bound IP addresses and expired IP addresses, and the number of unrecognized packets, DHCP_Request packets and DHCP_ACK packets.

Related command: display dhcp server statistics.

Example

Clear statistics information about the DHCP servers.

<SW8800> reset dhcp server statistics

9.2.29 static-bind ip-address

Syntax

static-bind ip-address ip-address [ mask netmask ]

undo static-bind ip-address

View

DHCP address pool view

Parameter

ip-address: IP address to be bound.

9-28

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

mask netmask: Specifies the subnet mask of the IP address to be bound. If you do not provide the argument, the default subnet mask is used.

Description

Use the static-bind ip-address command to specify the IP address to be statically bound.

Use the undo static-bind ip-address command to free a statically bound IP address.

By default, no IP address is statically bound.

The static-bind ip-address command and the static-bind mac-address command must be coupled when you configure statically bound entries to specify the corresponding IP address bound to the MAC address specified by the static-bind

mac-address command.

Related command: dhcp server ip-pool, static-bind mac-address.

Example

Bind the PC with a MAC address of 0000-e03f-0305 to 10.1.1.1, whose subnet mask is 255.255.255.0.

[SW8800-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0

[SW8800-dhcp-0] static-bind mac-address 0000-e03f-0305

9.2.30 static-bind mac-address

Syntax

static-bind mac-address mac-address

undo static-bind mac-address

View

DHCP address pool view

Parameter

mac-address: MAC address to be bound.

Description

Use the static-bind mac-address command to specify the MAC address to be statically bound.

Use the undo static-bind mac-address command to free a statically bound MAC address.

By default, no MAC address is statically bound.

The static-bind mac-address command and the static-bind ip-address command must be coupled when you configure statically bound entries to specify the

9-29

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands corresponding MAC address bound to the IP address specified by the static-bind

ip-address command.

Related command: dhcp server ip-pool and static-bind ip-address.

Example

Bind the PC with a MAC address of 0000-e03f-0305 to 10.1.1.1, whose subnet mask is 255.255.255.0.

[SW8800-dhcp-0] static-bind ip-address 10.1.1.1 mask 255.255.255.0

[SW8800-dhcp-0] static-bind mac-address 0000-e03f-0305

9.3 DHCP Relay Configuration Commands

9.3.1 debugging dhcp relay

Syntax

debugging dhcp relay { all| packet | error | event }

undo debugging dhcp relay { all| packet | error | event }

View

User view

Parameter

Description

Use the debugging dhcp-relay command to enable debugging for DHCP Relay.

Use the undo debugging dhcp-relay command to disable specified type of debugging concerning DHCP Relay.

Debugging for DHCP Relay is disabled by default.

Example

all: Enables all types of debugging concerning DHCP Relay.

packet: Enables debugging for packets.

error: Enables debugging for error messages.

event: Enables debugging for events.

Enable debugging for DHCP Relay.

<SW8800> debugging dhcp relay

*0.7200205-DHCP-8-dhcp_debug:

From client to server:

Interface: VLAN-Interface 1

Type: dhcp-request

9-30

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

ClientHardAddress: 0010-dc19-695d

ServerIpAddress: 192.168.1.2

*0.7200230-DHCP-8-dhcp_debug:

From server to client:

Interface: VLAN-Interface 1

ServerGroupNo: 0

Type: dhcp-ack

ClientHardAddress: 0010-dc19-695d

your ip address: 10.1.1.1

*0.7200580-DHCP-8-largehop:

Discard DHCP request packet because of too large hop count!

*0.7200725-DHCP-8-invalidpkt:

Wrong DHCP packet!

Table 9-6 Description on the fields of the debugging dhcp-relay command

Field

Interface

Type

ClientHardAddress

ServerIpAddress your ip address

Description

The VLAN interface that forwards DHCP packets

Type of the forwarded DHCP packet

The MAC address of the DHCP client

The IP address of the DHCP server

The IP address assigned to the DHCP client

9.3.2 dhcp relay security

Syntax

dhcp relay security ip_address mac_address static

undo dhcp relay security ip_address

View

System view

Parameter

ip_address: IP address the user uses.

mac_address: MAC address the user owns.

static: Specifies the user address entry is static.

9-31

3Com Switch 8800 Command Reference Guide

Description

Chapter 9 DHCP Configuration Commands

Use the dhcp relay security command to add a user address entry for the DHCP server.

Use the undo dhcp relay security command to remove a user address entry configured for the DHCP server.

Before adding/removing a user address entry, you can check user address entries configured for the DHCP server using the display dhcprelay-security command.

Example

Configure a user address entry for a DHCP server, with an IP address of 1.1.1.1 and a

MAC address of 0005-5D02-F2B3.

[SW8800] dhcp relay security 1.1.1.1 0005-5D02-F2B3 static

9.3.3 dhcp relay security address-check

Syntax

dhcp relay security address-check { enable | disable }

View

VLAN interface view

Parameter

None

Description

Use the dhcp relay security address-check enable command to enable security address checking on a VLAN interface.

Use the dhcp relay security address-check disable command to disable security address checking on a VLAN interface.

For a VLAN interface, security address checking is disabled by default.

Example

Enable security address checking on VLAN interface 1.

[SW8800-Vlan-interface1] dhcp relay security address-check enable

9.3.4 dhcp-server detect

Syntax

dhcp server detect

undo dhcp server detect

9-32

3Com Switch 8800 Command Reference Guide

View

System view

Chapter 9 DHCP Configuration Commands

Parameter

None

Description

Use the dhcp server detect command to enable fake DHCP server detecting.

A private DHCP server in a network also answers IP address request packets and issues IP addresses to DHCP clients. However, the IP addresses they issued always bring addresses conflicts and cause users cannot access networks. This kind of

DHCP servers are known as fake DHCP servers.

Use the undo dhcp server detect command to disable fake DHCP server detecting.

Example

Enable fake DHCP server detecting.

[SW8800] dhcp server detect

9.3.5 display dhcp relay address

Syntax

display dhcp relay address { interface vlan-interface vlan-id | all }

View

Any view

Parameter

Description

Use the display dhcp relay address command to display information about DHCP servers configured for a VLAN interface.

Example

vlan-id: VLAN interface number.

interface vlan-interface: Specifies to display information about the DHCP servers configured for the VLAN interface.

all: Specifies to display information about the DHCP servers configured for all VLAN interfaces.

Display information about DHCP servers configured for all VLAN interfaces.

[SW8800]display dhcp relay address all

9-33

3Com Switch 8800 Command Reference Guide Chapter 9 DHCP Configuration Commands

** Vlan-interface192 DHCP Relay Address **

Relay Address [0] : 193.193.1.1

Relay Address [1] : 1.1.1.1

Display information about DHCP servers configured for VLAN interface 192.

[SW8800]display dhcp relay address interface vlan 192

** Vlan-interface192 DHCP Relay Address **

Relay Address [0] : 193.193.1.1

Relay Address [1] : 1.1.1.1

9.3.6 display dhcprelay-security

Syntax

display dhcprelay-security [ ip_address ]

View

Any view

Parameter

ip_address: User IP address.

Description

Use the display dhcprelay-security command to display information about user address entries that the DHCP server maintains.

Example

Display information about all user address entries that the DHCP server maintains.

<SW8800> display dhcprelay-security

IP Address MAC Address IP Address Type

--- 2 dhcp-security item(s) found ---

Table 9-7 Description on the fields of the display dhcp-security command

Field

IP Address

MAC Address

IP Address Type

Description

User IP address

User MAC address

Type of the user address entry, which can be static or dynamic

9-34

3Com Switch 8800 Command Reference Guide

9.3.7 ip relay address

Chapter 9 DHCP Configuration Commands

Syntax

ip relay address ip_address

undo ip relay address { ip_address | all }

View

VLAN interface view

Parameter

ip_address: IP address of the DHCP server to which the DHCP packets received by this VLAN interface are forwarded.

all: Specifies all DHCP servers configured for the VLAN interface to forward DHCP packets to.

Description

Use the ip relay address command to specify the VLAN interface to operate in

DHCP Relay mode and to specify the DHCP server to which the DHCP packets received by this VLAN interface are forwarded.

Use the undo ip relay address command to remove the DHCP server configured for the VLAN interface to forward DHCP packets.

No DHCP server is configured for a VLAN interface by default.

Example

Specify users belonging to VLAN interface 1 to acquire their IP addresses from a specified DHCP server.

<SW8800>system-view

System View: return to User View with Ctrl+Z.

[SW8800]interface vlan1

[SW8800-Vlan-interface1] ip relay address 255.255.255.10

9-35

3Com Switch 8800 Command Reference Guide Chapter 10 DNS Configuration Commands

Chapter 10 DNS Configuration Commands

10.1 Static DNS Configuration Commands

10.1.1 ip host

Syntax

ip host hostname ip-address

undo ip host hostname [ ip-address ]

View

System view

Parameter

Description

Use the ip host command to configure the host name and the host IP address.

Use the undo ip host command to cancel the host name and the host IP address.

By default, Host name and corresponding IP address are null.

Related command: display ip host.

Example

hostname: Name of the host. It is a character string that consists of 1 to 20 characters, including letters, numbers, "_" or “,”, and it must contain at least one letter.

ip-address: Host IP address (the corresponding IP address to the host name) in dotted decimal notation.

Set Lanswtich1’s IP address to be 10.110.0.1.

[SW8800] ip host Lanswitch1 10.110.0.1

10.1.2 display ip host

Syntax display ip host

View

Any view

10-1

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 10 DNS Configuration Commands

Description

Use the display ip host command to view all the host names and the corresponding

IP addresses.

Example

Display all host names and the corresponding IP addresses of the hosts.

<SW8800> display ip host

Table 10-1 Description on the fields of the display ip host command

Field Description

Age Valid period

Flags Flags

Address Host IP address

10.2 Dynamic DNS Configuration Commands

10.2.1 debugging dns

Syntax debugging dns

undo debugging dns

View

User view

Parameter

None

Description

Use the debugging dns command to enable DNS debugging.

Use the undo debugging dns command to disable DNS debugging.

By default, DNS debugging is disabled.

10-2

3Com Switch 8800 Command Reference Guide

Example

Chapter 10 DNS Configuration Commands

Enable DNS debugging

<SW8800> debugging dns make DNS packet for name 3Com.com succeed

The information above indicates that the query packet for the domain name

“3Com.com” is generated. send the packet to 172.16.1.1 DNS server for 1 time

The information above indicates that the first query is performed to the domain name with the IP address of “172.16.1.1”. receive a right answer from server 0xAC100101

The information above indicates that a correct answer packet is received from the server. query timeout

The information above indicates that the query for a domain name from a server times out because no answer is received.

10.2.2 display dns domain

Syntax

display dns domain [ dynamic ]

View

Any view

Parameter

dynamic: Displays the domain name suffix information dynamically obtained through

DHCP protocol or other protocols.

Description

Use the display dns domain command to view the domain name suffix list.

Related command: dns domain.

Example

View domain name suffix list.

<SW8800> display dns domain

No Domain-name

0 3Com.com

10-3

3Com Switch 8800 Command Reference Guide Chapter 10 DNS Configuration Commands

Table 10-2 Description on the fields of the display dns domain command

Field Description

Domain-name

10.2.3 display dns dynamic-host

Domain name suffix name

Syntax

display dns dynamic-host

View

Any view

Parameter

None

Description

Use the display dns dynamic-host command to view the dynamic domain name buffer.

Example

View the dynamic domain name buffer.

<SW8800> display dns dynamic-host

No Domain-name Ipaddress TTL Alias

0 www.baidu.com 202.108.249.134 63000

1 www.yahoo.akadns.net 66.94.230.39 24

2 www.hotmail.com 207.68.172.239 3585

3 www.eyou.com 61.136.62.70 3591

Table 10-3 Description on the fields of the display dns dynamic-host command

Field Description

Ipaddress

TTL

Alias

Corresponding IP name of the domain name

Time to live, that is, the time for an entry to be stored, in seconds.

Alias of the domain name. There can be four of them at the most.

10-4

3Com Switch 8800 Command Reference Guide

10.2.4 display dns server

Chapter 10 DNS Configuration Commands

Syntax

display dns server [ dynamic ]

View

Any view

Parameter

Description

Use the display dns server command to view the related information of the domain name server.

Related command: dns server.

Example

dynamic: Displays the domain name server information dynamically obtained through the DHCP protocol or other protocols.

View the related information of the domain name server.

<SW8800> display dns server

0 172.16.1.1

1 172.16.1.2

Table 10-4 Description on the fields of the display dns server command

Field

Domain-server

Ipaddress

Domain name server

Description

Corresponding IP address of the domain name server

10.2.5 dns domain

Syntax

dns domain domain-name

undo dns domain [ domain-name ]

View

System view

Parameter

domain-name: Domain name suffix.

10-5

3Com Switch 8800 Command Reference Guide

Description

Chapter 10 DNS Configuration Commands

Use the dns domain command to add the domain name suffix.

Use the undo dns domain command to delete the domain name suffix.

The system supports up to 10 domain name suffixes. To delete the domain name suffix, input the suffix name, and the specific suffix is deleted. Otherwise, all of the suffixes are deleted.

Related command: display dns domain.

Example

Configure a domain name suffix “com”.

[SW8800] dns domain com

10.2.6 dns resolve

Syntax

dns resolve

undo dns resolve

View

System view

Parameter

None

Description

Use the dns resolve command to enable the dynamic domain name resolution function.

Use the undo dns resolve command to disable the dynamic domain name resolution function.

By default, the dynamic domain name resolution function is disabled.

Example

Enable dynamic domain name resolution.

[SW8800] dns resolve

10.2.7 dns server

Syntax

dns server ip-address

undo dns server [ ip-address ]

10-6

3Com Switch 8800 Command Reference Guide

View

System view

Chapter 10 DNS Configuration Commands

Parameter

ip-address: IP address of the domain name server.

Description

Use the dns server command to configure the IP address of a domain name server.

Use the undo dns server command to delete the IP address of a domain name server.

The system supports up to six domain name server. To delete the domain name server, input the IP address, and the specific server is deleted. Otherwise, all of the servers are deleted.

Related command: display dns server.

Example

Configure a domain name server, with an IP address of 172.16.1.1.

[SW8800] dns server 172.16.1.1

10.2.8 reset dns dynamic-host

Syntax

reset dns dynamic-host

View

User view

Parameter

None

Description

Use the reset dns dynamic-host command to clear the dynamic domain name buffer.

Related command: display dns dynamic-host.

Example

Clear the dynamic domain name buffer.

<SW8800> reset dns dynamic-host

10-7

3Com Switch 8800 Command Reference Guide

Chapter 11 IP Performance Configuration

Commands

Chapter 11 IP Performance Configuration

Commands

11.1 IP Performance Configuration Commands

11.1.1 display fib

Syntax

display fib

View

Any view

Parameter

None

Description

Use the display fib command to view the entries of the forwarding information base.

Each line outputs indicates a FIB entry. The information includes destination address/mask length, next hop, current flag, timestamp and outbound interface.

Example

Display the entries of the Forwarding Information Base.

<SW8800> display fib

Destination/Mask Nexthop Flag TimeStamp Interface

10.153.17.0/24 10.153.17.99 U t[0] Vlan-interface1

10.153.18.88/32 127.0.0.1 GHU t[0] InLoopBack0

10.153.18.0/24 10.153.18.88 U t[0] LoopBack0

10.153.17.99/32 127.0.0.1 GHU t[0] InLoopBack0

127.0.0.0/8 127.0.0.1 U t[0] InLoopBack0

Table 11-1 Description on the fields of the display fib command

Field Description

Destination/Mask Destination address/Mask length

Nexthop The forwarding next hop address

11-1

3Com Switch 8800 Command Reference Guide

Field

Chapter 11 IP Performance Configuration

Commands

Flag

Description

The flag options include:

B – Blackhole route

D – Dynamic route

G – Gateway route

H – Local host route

S – Static route

U – Route in UP status

R – Unreachable route

L – Route generated by ARP or ESIS

Timestamp Timestamp

Interface The forwarding interface

11.1.2 display fib ip_address

Syntax

display fib ip_address1 [ { mask1 | mask-length1 } [ ip_address2 { mask2 |

mask-length2 } | longer ] | longer ]

View

Any view

Parameter

ip_address1, ip_address2: Destination IP address, in dotted decimal format.

ip_address1 and ip_address2 jointly define an address range. The FIB entries in this address range are displayed.

mask1, mask2: IP address mask, in dotted decimal format.

mask-length1, mask-length2: An integer in the range of 0 to 32 to represent the mask length.

longer: Specifies to display the FIB entries that match the specified IP address/subnet mask pairs.

Description

Use the display fib ip_address command to view the FIB entries matching the destination IP address (range). Each line outputs a FIB entry and the display contents for each entry include destination address/mask length, next hop, current flag, timestamp and outbound interface.

11-2

3Com Switch 8800 Command Reference Guide

Example

Chapter 11 IP Performance Configuration

Commands

Display the FIB entries whose destination addresses match 169.253.0.0 in the natural mask range or which match most of 169.253.0.0..

<SW8800> display fib 169.253.0.0

Route Entry Count: 1

Destination/Mask Nexthop Flag

Display the FIB entries whose destination addresses are in the range of

169.254.0.0/16 to 169.254.0.6/16.

<SW8800> display fib 169.254.0.0 255.255.0.0 169.254.0.6 255.255.0.0

Route Entry Count: 1

Destination/Mask Nexthop TimeStamp

For the descriptions of the displayed fields, refer to Table 11-1.

11.1.3 display fib acl

Syntax

display fib acl { number | name }

View

Any view

Parameter

number: ACL in number form, in the range 2000 to 2999

name: ACL in name form, a string of 1 to 32 characters.

Description

Use the display fib command to view the FIB entries matching a specific ACL.

Example

Display the FIB entries matching ACL 2000.

<SW8800> display fib acl 2000

Route entry matched by access-list 2000:

Summary counts: 1

For the descriptions of the displayed fields, refer to Table 11-1.

11-3

3Com Switch 8800 Command Reference Guide

11.1.4 display fib |

Chapter 11 IP Performance Configuration

Commands

Syntax

display fib | { { begin | include | exclude } text }

View

Any view

Parameter

Description

Use the display fib | command to view the FIB entries which are output from the buffer according to regular expression and related to the specific character string.

Example

begin: Displays the FIB entries from the first one containing the character string text.

include: Displays only those FIB entries containing the character string text.

exclude: Displays only those FIB entries excluding the character string text.

text: Character string.

Display the lines starting from the first one containing the string 169.254.0.0

<SW8800> display fib | begin 169.254.0.0

Destination/Mask Nexthop TimeStamp

For the descriptions of the displayed fields, refer to Table 11-1.

11.1.5 display fib ip-prefix

Syntax

display fib ip-prefix listname

View

Any view

Parameter

listname: Prefix list name, a string of 1 to 19 characters in length.

Description

Use the display fib command to view the FIB entries matching the specific prefix list.

11-4

3Com Switch 8800 Command Reference Guide

Example

Chapter 11 IP Performance Configuration

Commands

Display the FIB entries matching the prefix list abc0.

<SW8800> display fib ip-prefix abc0

Route Entry matched by prefix-list abc0:

Summary count: 3

Destination/Mask Nexthop TimeStamp

For the descriptions of the displayed fields, refer to Table 11-1.

11.1.6 display fib statistics

Syntax

display fib statistics

View

Any view

Parameter

None

Description

Use the display fib statistics command to view the total number of FIB entries.

Example

Display the total number of FIB entries.

<SW8800> display fib statistics

Route Entry Count : 30

11.1.7 display icmp statistics

Syntax display icmp statistics

View

Any view

Parameter

None

11-5

3Com Switch 8800 Command Reference Guide

Description

Chapter 11 IP Performance Configuration

Commands

Use the display icmp statistics command to view the statistics information about

ICMP packets.

Related command: display ip interface, reset ip statistics.

Example

View statistics about ICMP packets.

<SW8800> display icmp statistics

Input: bad formats 0 bad checksum 0

echo 5 destination unreachable 0

source quench 0 redirects 0

echo reply 10 parameter problem 0

timestamp 0 information request 0

mask requests 0 mask replies 0

time exceeded 0

Output:echo 10 destination unreachable 0

source quench 0 redirects 0

echo reply 5 parameter problem 0

timestamp 0 information reply 0

mask requests 0 mask replies 0

time exceeded 0

Table 11-2 Description on the fields of the display icmp statistics command

Field

bad formats bad checksum echo destination unreachable

Description

Number of input packets in bad format

Number of input packets with wrong checksum

Number of input/output echo request packets

Number of input/output packets with unreachable destination source quench redirects

Number of input/output source quench packets

Number of input/output redirected packets echo reply Number of input/output echo reply packets parameter problem Number of input/output packets with parameter problems timestamp Number of input/output timestamp packets information request Number of input information request packets mask requests mask replies information reply

Number of input/output mask request packets

Number of input/output mask reply packets

Number of output information reply packets

11-6

3Com Switch 8800 Command Reference Guide

Field

time exceeded

Chapter 11 IP Performance Configuration

Commands

Description

Number of packets that exceeds the time

11.1.8 display ip socket

Syntax

display ip socket [ socktype sock-type ] [ task-id socket-id ]

View

Any view

Parameter

Description

Use the display ip socket command to display the information about the sockets in the current system.

Example

sock-type: The type of a socket (tcp:1, udp: 2, raw ip: 3).

task-id: The ID of a task, with the value ranging from 1 to 100.

socket-id: The ID of a socket, with the value ranging from 0 to 3072.

Display the information about the socket of TCP type.

<SW8800> display ip socket socktype 1

SOCK_STREAM:

Task = VTYD(18), socketid = 1, Proto = 6,

LA = 0.0.0.0:23, FA = 0.0.0.0:0, sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0, socket option = SO_ACCEPTCONN SO_KEEPALIVE SO_SENDVPNID SO_SETKEEPALIVE, socket state = SS_PRIV SS_ASYNC

Task = VTYD(18), socketid = 2, Proto = 6,

LA = 10.153.17.99:23, FA = 10.153.17.56:1161, sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0, socket option = SO_KEEPALIVE SO_OOBINLINE SO_SENDVPNID SO_SETKEEPALIVE, socket state = SS_ISCONNECTED SS_PRIV SS_ASYNC

Task = VTYD(18), socketid = 3, Proto = 6,

LA = 10.153.17.99:23, FA = 10.153.17.82:1121, sndbuf = 8192, rcvbuf = 8192, sb_cc = 0, rb_cc = 0, socket option = SO_KEEPALIVE SO_OOBINLINE SO_SENDVPNID SO_SETKEEPALIVE,

11-7

Chapter 11 IP Performance Configuration

3Com Switch 8800 Command Reference Guide socket state = SS_ISCONNECTED SS_PRIV SS_ASYNC

Commands

Table 11-3 Description on the fields of the display ip socket command

Field

SOCK_STREAM The socket type

Task socketid

The ID of a task

The ID of a socket

Proto sndbuf rcvbuf sb_cc rb_cc

Description

The protocol number used by the socket

The sending buffer size of the socket

The receiving buffer size of the socket

The current data size in the sending buffer. The value makes sense only for the socket of TCP type, because only TCP is able to cache data

The current data size in the receiving buffer socket option socket state

The option of the socket

The state of the socket

11.1.9 display ip statistics

Syntax display ip statistics

View

Any view

Parameter

None

Description

Use the display ip statistics command to view the statistics information about IP packets.

Related command: display ip interface, reset ip statistics.

Example

View statistics about IP packets.

<SW8800> display ip statistics

Input: sum 7120 local 112

bad protocol 0 bad format 0

11-8

Chapter 11 IP Performance Configuration

3Com Switch 8800 Command Reference Guide

bad checksum 0 bad options 0

Commands

Output: forwarding 0 local 27

dropped 0 no route 2

compress fails 0

Fragment:input 0 output 0

dropped 0

fragmented 0 couldn't fragment 0

Reassembling:sum 0 timeouts 0

Table 11-4 Description on the fields of the display ip statistics command

Input:

Output:

Fragment:

Reassem bling: sum

Field

local bad protocol bad format bad checksum bad options forwarding local dropped no route compress fails input output dropped fragmented couldn't fragment sum timeouts

Description

Sum of input packets

Number of received packets whose destination is the local device

Number of packets with wrong protocol number

Number of packets in bad format

Number of packets with wrong checksum

Number of packets that have wrong options

Number of forwarded packets

Number of packets that are sent by the local device

Number of dropped packets during transmission

Number of packets that cannot be routed

Number of packets that cannot be compressed

Number of input fragments

Number of output fragments

Number of dropped fragments

Number of packets that are fragmented

Number of packets that cannot be fragmented

Number of packets that are reassembled

Number of packets that time out

11-9

3Com Switch 8800 Command Reference Guide

11.1.10 display tcp statistics

Chapter 11 IP Performance Configuration

Commands

Syntax

display tcp statistics

View

Any view

Parameter

None

Description

Use the display tcp statistics command to view the statistics information about TCP packets.

For the related commands, see display tcp status, reset tcp statistics.

Example

View statistics about TCP packets.

[SW8800]display tcp statistics

Received packets:

Total: 753

packets in sequence: 412 (11032 bytes)

window probe packets: 0, window update packets: 0

checksum error: 0, offset error: 0, short error: 0

duplicate packets: 4 (88 bytes), partially duplicate packets: 5 (7 bytes)

out-of-order packets: 0 (0 bytes)

packets of data after window: 0 (0 bytes)

packets received after close: 0

ACK packets: 481 (8776 bytes)

duplicate ACK packets: 7, too much ACK packets: 0

Sent packets:

Total: 665

urgent packets: 0

control packets: 5 (including 1 RST)

window probe packets: 0, window update packets: 2

data packets: 618 (8770 bytes) data packets retransmitted: 0 (0 bytes)

ACK-only packets: 40 (28 delayed)

Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0

Keepalive timeout: 0, keepalive probe: 0, Keepalive timeout, so connections disconnected : 0

11-10

3Com Switch 8800 Command Reference Guide

Chapter 11 IP Performance Configuration

Commands

Initiated connections: 0, accepted connections: 0, established connections:

0

Closed connections: 0 (dropped: 0, initiated dropped: 0)

Packets dropped with MD5 authentication: 0

Packets permitted with MD5 authentication: 0

Table 11-5 Description on the fields of the display tcp statistics command

Received packets

Total:753

Field Description

Information followed is about received packets

Total number of received packets: 753 packets in sequence: 412 (11032 bytes)

Up to 412 packets (total of 11,032 bytes) arrive in sequence window probe packets: 0, window

Number of window probe packets: 0 update packets: 0

Number of window update packets: 0 checksum error: 0, offset error: 0, short error: 0

Number of checksum errors: 0

Number of offset errors: 0

Number of short errors: 0 duplicate packets: 4 (88 bytes), partially duplicate packets: 5 (7 bytes)

Number of duplicate packets: 4 (total of

88 bytes)

Number of partially duplicate packets: 5

(total of 7 bytes) out-of-order packets: 0 (0 bytes) packets of data after window: 0 (0 bytes)

Number of out-of-order packets: 0 (0 byte)

Number of packets out of receiving window: 0 (0 byte) packets received after close: 0

ACK packets: 481 (8776 bytes) control packets: 5 (including 1 RST)

Number of packets received after the connection closed: 0

Number of ACK packets: 481 (total of

8776 bytes of data acknowledged)

Number of duplicate ACK packets: 7 duplicate ACK packets: 7, too much

ACK packets: 0

Number of too-much ACK packets: 0

(ACK packets that acknowledge data not sent)

Sent packets

Information followed is about sent packets

Total: 665 urgent packets: 0

Total number of sent packets: 665

Number of urgent packets: 0

Number of control packets: 5 (including

1 RST packet)

11-11

3Com Switch 8800 Command Reference Guide

Field

Chapter 11 IP Performance Configuration

Commands

Description

window probe packets: 0, window

Number of window probe packets: 0 update packets: 2

Number of window update packets: 2 data packets: 618 (8770 bytes) data packets retransmitted: 0 (0 bytes)

Number of data packets: 618 (total of

8770 bytes)

Number of data packets retransmitted: 0

(0 byte)

ACK-only packets: 40 (28 delayed)

Number of ACK packets: 40 (28 of which delayed)

Number of retransmitted timeout events:

0

Retransmitted timeout: 0, connections dropped in retransmitted timeout: 0

Number of connections dropped due to the number of retransmitted timeout events exceeding the specified value: 0

Keepalive timeout: 0, keepalive probe:

0, Keepalive timeout, so connections

Number of keepalive timeout events: 0

Number of keepalive probe packets sent: 0 disconnected : 0

Number of connections disconnected when keepalive probes fail: 0

Initiated connections: 0, accepted

Number of initiated connections: 0 connections: 0

Number of established connection: 0

Number of closed connection: 0

Closed connections: 0 (dropped: 0, initiated dropped: 0)

Number of dropped connections (after

SYN messages received): 0

Number of connections initiated drooped: 0 authentication: 0 authentication: 0 authentication: 0 authentication: 0

11.1.11 display tcp status

Syntax display tcp status

View

Any view

11-12

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 11 IP Performance Configuration

Commands

Description

Use the display tcp status command to view all TCP connection states. This helps user monitor TCP connection at any time.

Example

Display the state of all TCP connections.

<SW8800> display tcp status

04217174 100.0.0.204:23 100.0.0.253:65508 Established

The displayed information indicates that a TCP connection is established. The local IP address of this TCP connection is 100.0.0.204, and the local port number is 23. The remote IP address is 100.0.0.253, and the remote port number is 65508. In addition, there is a local server process which listens to the port 4001.

11.1.12 display udp statistics

Syntax

display udp statistics

View

Any view

Parameter

None

Description

Use the display udp statistics command to view UDP traffic statistic information.

It displays the statistic information of all current UDP connections. The statistics information about UDP packets are divided into two major kinds which are received packets and sent packets. The packets are further divided into different types such as check packets and error packets. There are also some statistics related closely to the connections, such as the number of broadcast packets. All these displayed information are measured in packets.

Related command: reset udp statistics.

Example

Display the UDP traffic statistic information.

11-13

Chapter 11 IP Performance Configuration

3Com Switch 8800 Command Reference Guide

<SW8800> display udp statistics

Received packet:

Total:0 checksum error:0 shorter than header:0, data length larger than packet:0 no socket on port:0 broadcast:0 not delivered, input socket full:0 input packets missing pcb cache:0

Sent packet:

Total:0

Commands

Table 11-6 Description on the fields of the display udp statistics command

Field

Received packet:

Total: 0

Description

Total received UDP packets: 0 checksum error: 0 Number of checksum errors: 0 shorter than header: 0, data length larger than packet: 0

Cases that the length of the packets is shorter than the header: 0

Cases that the data length exceeds the packet length: 0 no socket on port: 0 broadcast: 0

Cases that there is no socket on port: 0

Number of broadcast packets: 0 not delivered, input socket full: 0

Cases that the packets are not forwarded because the socket buffer is full: 0 input packets missing pcb cache:

0

Cases that the packets cannot find pcb: 0

Sent packet:

Total: 0

Total sent UDP packets: 0

11.1.13 reset ip statistics

Syntax reset ip statistics

View

User view

Parameter

None

11-14

3Com Switch 8800 Command Reference Guide

Description

Chapter 11 IP Performance Configuration

Commands

Use the reset ip statistics command to clear the IP statistics information.

Related command: display ip interface, display ip statistics.

Example

Clear the IP statistics information.

<SW8800> reset ip statistics

11.1.14 reset tcp statistics

Syntax

reset tcp statistics

View

User view

Parameter

None

Description

Use the reset tcp statistics command to clear the TCP statistics information.

Related command: display tcp statistics.

Example

Clear the TCP statistics information.

<SW8800> reset tcp statistics

11.1.15 reset udp statistics

Syntax

reset udp statistics

View

User view

Parameter

None

Description

Use the reset udp statistics command to can clear the UDP statistics information.

11-15

3Com Switch 8800 Command Reference Guide

Example

Clear the UDP traffic statistics information.

<SW8800> reset udp statistics

Chapter 11 IP Performance Configuration

Commands

11.1.16 tcp timer fin-timeout

Syntax

tcp timer fin-timeout time-value

undo tcp timer fin-timeout

View

System view

Parameter

Description

Use the tcp timer fin-timeout command to configure the TCP finwait timer.

Use the undo tcp timer fin-timeout command to restore the default value of the TCP finwait timer.

When the TCP connection state changes from FIN_WAIT_1 to FIN_WAIT_2, the finwait timer is enabled. If the switch does not receive FIN packets before the finwait timer times out, the TCP connection is terminated.

Related command: tcp timer syn-timeout, tcp window.

Example

time-value: TCP finwait timer value in second, with the value ranging from 76 to 3600;

By default, it is 675 seconds.

Configure the TCP finwait timer value as 800 seconds.

[SW8800] tcp timer fin-timeout 800

11.1.17 tcp timer syn-timeout

Syntax

tcp timer syn-timeout time-value

undo tcp timer syn-timeout

View

System view

11-16

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 11 IP Performance Configuration

Commands

time-value: TCP synwait timer value measured in seconds, whose value ranges from

2 to 600. The default time-value is 75 seconds.

Description

Use the tcp timer syn-timeout command to configure the TCP synwait timer.

Use the undo tcp timer syn-timeout command to restore the default value of the timer.

TCP enables the synwait timer if a SYN packet is sent. The TCP connection is terminated if the response packet is not received.

Related command: tcp timer fin-timeout, tcp window.

Example

Configure the TCP synwait timer value as 80 seconds.

[SW8800] tcp timer syn-timeout 80

11.1.18 tcp window

Syntax

tcp window window-size

undo tcp window

View

System view

Parameter

Description

Use the tcp window command to configure the size of the sending and receiving buffers of the connection-oriented Socket.

Use the undo tcp window command to restore the default size of the buffer.

Related command: tcp timer fin-timeout, tcp timer syn-timeout.

Example

window-size: The size of the sending and receiving buffers measured in kilobytes

(KB), whose value ranges from 1 to 32. By default, the window-size is 8KB.

Configure the size of the sending and receiving buffers as 3KB.

[SW8800] tcp window 3

11-17

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

Chapter 12 Static Route Configuration Commands

Note:

When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch

8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.

For the configuration of VPN instance, refer to the MPLS module in 3Com Switch 8800

Configuration Guide.

12.1 Display Commands of the Routing Table

12.1.1 display ip routing-table

Syntax display ip routing-table

View

Any view

Parameter

None

Description

Use display ip routing-table command to view the routing table summary.

This command displays routing table information in summary form. Each line represents one route. The contents include destination address/mask length, protocol, preference, metric, next hop and output interface.

Only current used route, namely, best route, is displayed using display ip

routing-table command.

Example

View the summary of the routing table.

<SW8800> display ip routing-table

Routing Table: public net

12-1

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

Destination/Mask Protocol Pre Cost Nexthop Interface

1.1.1.0/24 DIRECT 0 0 1.1.1.1 Vlan-interface1

1.1.1.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0

2.2.2.0/24 DIRECT

2.2.2.1/32 DIRECT

0 0

0 0

2.2.2.1 Vlan-interface2

127.0.0.1 InLoopBack0

3.3.3.0/24 DIRECT

3.3.3.1/32 DIRECT

4.4.4.0/24 DIRECT

4.4.4.1/32 DIRECT

127.0.0.0/8 DIRECT

127.0.0.1/32 DIRECT

0

0

0

0

0

0

0

0 0

0 0

0

3.3.3.1

127.0.0.1

4.4.4.1

Vlan-interface3

InLoopBack0

Vlan-interface4

127.0.0.1 InLoopBack0

127.0.0.1 InLoopBack0

127.0.0.1 InLoopBack0

Table 12-1 Description on the fields of the display ip routing-table command

Field Description

Destination/Mask Destination address/Mask length

Pre Routing preference

Cost Cost

Nexthop

Interface

Next hop address

Output interface, through which the data packet destined for the destination network segment is sent

12.1.2 display ip routing-table acl

Syntax

display ip routing-table acl { acl-number | acl-name } [ verbose ]

View

Any view

Parameter

acl-number: The number of basic ACL, ranging from 2000 to 2999.

acl-name: The basic ACL name introduced via names.

verbose: With the parameter, this command displays the verbose information of both the active and inactive routes that passed filtering rules. Without the parameter, this command only displays the summary of the active routes that passed filtering rules.

12-2

3Com Switch 8800 Command Reference Guide

Description

Chapter 12 Static Route Configuration Commands

Use the display ip routing-table acl command to view the route filtered through specified basic access control list (ACL).

This command is used in track display of route policy to display the route that passed the filtering rule according the input basic ACL number or name.

The command is only applicable to display the route that passed basic ACL filtering rules.

Example

Display the summary of active routes that are filtered through basic acl 2000.

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule permit source 10.1.1.1 0.0.0.255

[SW8800-acl-basic-2000] rule deny source any

[SW8800-acl-basic-2000] display ip routing-table acl 2000

Routes matched by access-list 2000:

Summary count: 4

Destination/Mask Protocol Pre Cost Nexthop Interface

10.1.1.0/24 DIRECT 0 0 10.1.1.2 Vlan-interface1

10.1.1.2/32 DIRECT 0 0 127.0.0.1 InLoopBack0

For detailed description of the output information, see Table 12-1.

Display the verbose information of the active and inactive routes that are filtered through basic acl 2000.

<SW8800> display ip routing-table acl 2000 verbose

Routes matched by access-list 2000:

+ = Active Route, - = Last Active, = Both * = Next hop in use

Summary count: 2

**Destination: 10.1.1.0 Mask: 255.255.255.0

Protocol: #DIRECT Preference: 0

*NextHop: 10.1.1.2 Interface: 10.1.1.2(Vlan-interface1)

Vlinkindex: 0

State: <Int ActiveU Retain Unicast>

Age: 7:24 Cost: 0/0 Tag: 0

**Destination: 10.1.1.2 Mask: 255.255.255.255

Protocol: #DIRECT Preference: 0

*NextHop: 127.0.0.1 Interface: 127.0.0.1(InLoopBack0)

Vlinkindex: 0

State: <NoAdvise Int ActiveU Retain Gateway Unicast>

Age: 7:24 Cost: 0/0 Tag: 0

12-3

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

Table 12-2 Description on the fields of the display ip routing-table acl verbose command

Field

Destination Destination address

Mask Mask

Description

Nexthop

Interface

Next hop address

Output interface, through which the data packet destined for the destination network segment is sent

Vlinkindex Virtual link index

12-4

3Com Switch 8800 Command Reference Guide

Field

State

Chapter 12 Static Route Configuration Commands

Description

Route state description:

ActiveU Valid unicast route. U stands for unicast.

Blackhole

Blackhole route is similar to Reject route, but it will not send the ICMP unreachable message to the source end

Delete The route is deleted

Gateway Indicates that the route is not directly reachable

Hidden

Holddown

Int

NoAdvise

The route exists, but it is unavailable temporarily for some reasons (e.g., configured policy or interface is

Down). Moreover, you do not wish to delete it.

Therefore, you need to hide it, so as to restore it again later

Holddown is one kind of route redistribution policy adopted by some distance-vector (D-V) routing protocols (e.g., RIP), through which these routing protocols can avoid the flooding of error routes and deliver the routing unreachable message accurately.

For example, the RIP imports a certain route every a period of time regardless of whether the actually found routes destined for the same destination change. For more details, refer to the specific routing protocols.

The route is discovered by interior gateway protocol

(IGP).

The routing protocol does not import NoAdvise route when it imports routes based on the policy.

NotInstall

Reject

Retain

Static

The routing protocol generally selects the route with the highest precedence from its routing table, then places it in its core routing table and imports it. Although the

NotInstall route cannot be placed in the core routing table, it is possibly that it is selected and imported.

Unlike the normal routes, the Reject route will discard the packets that select it as their route, and the router will send ICMP unreachable message to the source end. Reject route is usually used for the network test

When the routes from the core routing table are deleted, the routes with the Retain flag will not be deleted. Using this function you can set the Retain flag for some static routes, so that they can exist in the core routing table.

The route with Static flag will not be cleared from the routing table after you save it and reboot the router.

Generally, the static route configured manually in the router belongs to a Static route.

12-5

3Com Switch 8800 Command Reference Guide

Field

Age

Cost

Chapter 12 Static Route Configuration Commands

Description

Lifetime of a route entry, in hh : mm : ss, where hh is hours, mm is minutes, and ss is seconds. The displayed time should be read from right to left. For example, 7:24 indicates that the lifetime of a route is seven hours and 24 minutes.

Value of the cost

12.1.3 display ip routing-table ip_address

Syntax

display ip routing-table ip_address [ mask ] [ longer-match ] [ verbose ]

View

Any view

Parameter

ip_address: Destination IP address, in dotted decimal format.

mask: IP address mask, length in dotted decimal notation or integer. It ranges from 0 to

32 when it is expressed with integer.

verbose: With the verbose argument, this command displays the verbose information of both the active and inactive routes. Without the parameter, this command only displays the summary of active routes.

longer-match: Address route matching the destination address in natural mask range.

Description

Use the display ip routing-table ip_address command to view the routing information of the specified destination address.

With different parameters, the output of command is different. The following is the output description for different forms of this command: z

display ip routing-table ip_address

If destination address, ip_address, has corresponding route in natural mask range, this command will display all subnet routes or only the route best matching the destination address, ip_address, is displayed. And only the active matching route is displayed. z

display ip routing-table ip_address mask,

This command only displays the route fully matching with specified destination address and mask. z

display ip routing-table ip_address longer-match

12-6

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

This command displays all destination address route matching with destination address in natural mask range.

Example

There is a corresponding route in natural mask range. Display the summary.

<SW8800> display ip routing-table 169.0.0.0

Destination/Mask Protocol Pre Cost Nexthop Interface

169.0.0.0/16 STATIC 60 0 192.168.1.2 Vlan-interface10

169.0.0.0/8 STATIC 60 0 192.168.1.2 Vlan-interface10

For detailed description of the output information, see Table 12-1.

There is no corresponding route (only the longest matching route is displayed) in natural mask range and summary is displayed.

<SW8800> display ip routing-table 192.168.1.2

Destination/Mask Protocol Pre Cost Nexthop Interface

192.168.1.0/24 DIRECT 0 0 192.168.1.1 Vlan-interface10

There are corresponding routes in the natural mask range. Display the detailed information.

<SW8800> display ip routing-table 169.0.0.0 verbose

Routing tables:

Generate Default: no

+ = Active Route, - = Last Active, = Both * = Next hop in use

Summary count: 3

**Destination: 169.0.0.0 Mask: 255.255.0.0

Protocol: #STATIC Preference: 60

*NextHop: 192.168.1.2 Interface: 192.168.1.1(Vlan-interface10)

Vlinkindex: 0

State: <Int ActiveU Gateway Static Unicast>

Age: 10:20 Cost: 0/0 Tag: 0

**Destination: 169.0.0.0 Mask: 255.0.0.0

Protocol: #STATIC Preference: 60

*NextHop: 192.168.1.2 Interface: 192.168.1.1(Vlan-interface10)

Vlinkindex: 0

State: <Int ActiveU Gateway Static Unicast>

Age: 4:39 Cost: 0/0 Tag: 0

There are no corresponding routes in the natural mask range (only displaying the longest matched route). Display the detailed information.

<SW8800> display ip routing-table 169.168.1.2 verbose

Routing tables:

12-7

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

Generate Default: no

+ = Active Route, - = Last Active, = Both * = Next hop in use

Summary count: 1

**Destination: 192.168.1.0 Mask: 255.255.255.0

Protocol: #DIRECT Preference: 0

*NextHop: 192.168.1.1 Interface: 192.168.1.1(Vlan-interface10)

Vlinkindex: 0

State: <Int ActiveU Retain Unicast>

Age: 12:51 Cost: 0/0 Tag: 0

For detailed description of the output information, see Table 12-2.

12.1.4 display ip routing-table ip_address1 ip_address2

Syntax

display ip routing-table ip_address1 mask1 ip_address2 mask2 [ verbose ]

View

Any view

Parameter

Description

Use the display ip routing-table ip_address1 ip_address2 command to view the route information in the specified address range.

Example

ip_address1, ip_address2: Destination IP address in dotted decimal notation.

ip_address1, mask1, mask2 and ip_address2 determine one address range together.

Anding ip_address1 with mask1 specifies the start of the range while anding

ip_address2 with mask2 specifies the end. This command is used to display the routes in this address range.

mask1, mask2: IP address mask, length in dotted decimal notation or integer form. It ranges from 0 to 32 when it is presented in integer.

verbose: With the verbose keyword, this command displays the verbose information of both the active and inactive routes. Without the parameter, this command only displays the summary of active routes.

Display the routing information of destination addresses ranging from 1.1.1.0 to 2.2.2.0.

<SW8800>display ip routing-table 1.1.1.0 24 2.2.2.0 24

Routing tables:

Summary count: 3

12-8

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

Destination/Mask Protocol Pre Cost Nexthop Interface

1.1.1.0/24 DIRECT 0 0 1.1.1.1 Vlan-interface1

1.1.1.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0

2.2.2.0/24 DIRECT 0 0 2.2.2.1 Vlan-interface2

For detailed description of the output information, see Table 12-1.

12.1.5 display ip routing-table ip-prefix

Syntax

display ip routing-table ip-prefix ip-prefix-name [ verbose ]

View

Any view

Parameter

ip-prefix-name: ip prefix list name.

verbose: With the parameter, this command displays the verbose information of both the active and inactive routes that passed filtering rules. Without the parameter, this command displays the summary of the active routes that passed filtering rules.

Description

Use the display ip routing-table ip-prefix command to view the route information that passed the filtering rule according the input ip prefix list name.

This command is mainly used to trace the route-policy and display the corresponding route information.

If there is no specified address prefix list, this command will display the verbose information of all active and inactive routes with the verbose keyword and it will display the summary of all active routes without the verbose keyword.

Example

Configure the ip prefix list abc2, allowing the routes with the prefix as 10.1.1.0 and a mask length in the range 24 to 32 to pass.

[SW8800] ip ip-prefix abc2 permit 10.1.1.0 24 less-equal 32

<SW8800> dis ip routing-table protocol static

STATIC Routing tables:

Summary count: 3

STATIC Routing table status:<active>:

Summary count: 3

Destination/Mask Protocol Pre Cost Nexthop Interface

10.1.0.0/16 STATIC 60 0 48.48.48.2 Vlan-interface48

10.1.1.0/24 STATIC 60 0 48.48.48.2 Vlan-interface48

12-9

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

10.1.1.2/32 STATIC 60 0 48.48.48.2 Vlan-interface48

STATIC Routing table status:<inactive>:

Summary count: 0

<SW8800> display ip routing-table ip-prefix abc2

Routes matched by ip-prefix abc2:

Summary count: 2

Destination/Mask Protocol Pre Cost Nexthop Interface

10.1.1.0/24 STATIC 60 0 48.48.48.2 Vlan-interface48

10.1.1.2/32 STATIC 60 0 48.48.48.2 Vlan-interface48

For detailed description of the output information, see Table 12-1.

Display the details of the active and inactive routes filtered by the prefix list abc2.

<SW8800>display ip routing-table ip-prefix abc2 verbose

Routes matched by ip-prefix abc2:

Generate Default: no

+ = Active Route, - = Last Active, = Both * = Next hop in use

Summary count: 2

**Destination: 10.1.1.0 Mask: 255.255.255.0

Protocol: #STATIC Preference: 60

*NextHop: 48.48.48.2 Interface: 48.48.48.1(Vlan-interface48)

Vlinkindex: 0

State: <Int ActiveU Gateway Static Unicast>

Age: 12:42 Cost: 0/0 Tag: 0

**Destination: 10.1.1.2 Mask: 255.255.255.255

Protocol: #STATIC Preference: 60

*NextHop: 48.48.48.2 Interface: 48.48.48.1(Vlan-interface48)

Vlinkindex: 0

State: <Int ActiveU Gateway Static Unicast>

Age: 12:48 Cost: 0/0 Tag: 0

For explanations of the above information, see Table 12-2.

12.1.6 display ip routing-table protocol

Syntax

display ip routing-table protocol protocol [ inactive | verbose ] [ vpn-instance

vpn-instance-name ]

View

Any view

12-10

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 12 Static Route Configuration Commands

inactive: With the parameter, this command displays the inactive route information.

Without the parameter, this command displays the active and inactive route information.

verbose: With the verbose keyword, this command displays the verbose route information. Without the parameter, this command displays the route summary.

protocol: The parameter has multiple selectable values: z z z z z z z z

direct: Displays direct connection route information

static: Displays the static route information.

bgp: Displays BGP route information.

isis: Displays IS-IS route information.

ospf: Displays OSPF route information.

ospf-ase: Displays OSPF ASE route information.

ospf-nssa: Displays OSPF NSSA route information.

rip: Displays RIP route information. vpn-instance-name: Indicates a VPN instance name.

Description

Use the display ip routing-table protocol command to view the route information of specified protocol.

Example

Display all direct connection routes summary.

<SW8800> display ip routing-table protocol direct

DIRECT Routing tables:

Summary count: 4

DIRECT Routing tables status:<active>:

Summary count: 3

Destination/Mask Protocol Pre Cost Nexthop Interface

DIRECT Routing tables status:<inactive>:

Summary count: 1

Destination/Mask Protocol Pre Cost Nexthop

210.0.0.1/32 DIRECT

View the static routing table.

<SW8800> display ip routing-table protocol static

STATIC Routing tables:

Summary count: 1

Interface

12-11

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

STATIC Routing tables status:<active>:

Summary count: 0

STATIC Routing tables status:<inactive>:

Summary count: 1

Destination/Mask Protocol Pre Cost Nexthop Interface

1.2.3.0/24 STATIC 60 0 1.2.4.5 Vlan-interface10

STATIC Routing tables status:<inactive>:

Summary count: 1

For detailed description of the output information, see Table 12-1.

12.1.7 display ip routing-table radix

Syntax display ip routing-table radix

View

Any view

Parameter

None

Description

Use the display ip routing-table radix command to view route information in tree format.

Example

Display route information in tree format.

<SW8800> display ip routing-table radix

Radix tree for INET (2) inodes 7 routes 5:

+-32+--{210.0.0.1

+--0+

| | +--8+--{127.0.0.0

| | | +-32+--{127.0.0.1

+--8+--{20.0.0.0

+-32+--{20.1.1.1

Table 12-3 Description on the fields of the display ip routing-table radix command

Field Description

inodes Number of nodes

12-12

3Com Switch 8800 Command Reference Guide routes

12.1.8 display ip routing-table statistics

Chapter 12 Static Route Configuration Commands

Number of routes

Syntax

display ip routing-table statistics

View

Any view

Parameter

None

Description

Use the display ip routing-table statistics command to view the integrated routing information.

The integrated routing information includes total route amount, the route amount added or deleted by protocol, amount of the routes that are labeled deleted but not deleted, and the active route amount.

Example

Display the integrated route information.

<SW8800> display ip routing-table statistics

Routing tables:

Proto route active added deleted

DIRECT 24 4 25 1

STATIC 4 1 4 0

BGP 0 0 0 0

RIP 0 0 0 0

IS-IS 0 0 0 0

OSPF 0 0 0 0

O_ASE 0 0 0 0

O_NSSA 0 0 0 0

AGGRE 0 0 0 0

Total 28 5 29 1

12-13

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

Table 12-4 Description on the fields of the display ip routing-table statistics command

Field

Proto route active added deleted

Total

Description

Routing protocol. O_ASE indicates OSPF_ASE routes, O_NSSA indicates OSPF_NSSA routes and AGGRE indicates aggregated routes.

Number of routes

Number of active routes

Number of added routes after the router is rebooted or the routing table is cleared last time

Number of deleted routes (such routes will be freed in a period of time)

Total number of the different kinds of routes

12.1.9 display ip routing-table vpn-instance

Syntax

display ip routing-table vpn-instance vpn-instance-name

View

Any view

Parameter

Description

Use the display ip routing-table vpn-instance command to view the routing information about the VPN instance.

Example

vpn-instance: Specifies VPN instance parameter.

vpn-instance-name: VPN instance name.

View the routing information about the VPN instance.

<SW8800> dis ip routing-table vpn-instance vpn49-1

vpn49-1 Route Information

Routing Table: vpn49-1 Route-Distinguisher: 49:1

Destination/Mask Protocol Pre Cost Nexthop Interface

77.77.77.77/32 STATIC 60 0 195.195.1.10 Vlan-interface1016

195.168.130.0/24 DIRECT 0 0 195.168.130.1 Vlan-interface1013

195.168.130.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0

195.195.0.0/16 DIRECT 0 0 195.195.1.1 Vlan-interface1016

12-14

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

195.195.1.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0

12.1.10 display ip routing-table verbose

Syntax display ip routing-table verbose

View

Any view

Parameter

None

Description

Use the display ip routing-table verbose command to view the verbose routing table information.

With the verbose keyword, this command displays the verbose routing table information. The descriptor describing the route state will be displayed first, then the statistics of the entire routing table will be output and finally the verbose description of each route will be output.

All current routes, including inactive route and invalid route, can be displayed using the

display ip routing-table verbose command.

Example

Display the verbose routing table information.

<SW8800> display ip routing-table verbose

Routing Tables:

Generate Default: no

+ = Active Route, - = Last Active, = Both * = Next hop in use

Destinations: 3 Routes: 3

Holddown: 0 Delete: 62 Hidden: 0

**Destination: 1.1.1.0 Mask: 255.255.255.0

Protocol: #DIRECT Preference: 0

*NextHop: 1.1.1.1 Interface: 1.1.1.1(Vlan-interface1)

State: <Int ActiveU Retain Unicast>

Age: 20:17:41 Cost: 0/0

**Destination: 1.1.1.1 Mask: 255.255.255.255

Protocol: #DIRECT Preference: 0

*NextHop: 127.0.0.1 Interface: 127.0.0.1(InLoopBack0)

State: <NoAdvise Int ActiveU Retain Gateway Unicast>

Age: 20:17:42 Cost: 0/0

**Destination: 2.2.2.0 Mask: 255.255.255.0

12-15

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

Protocol: #DIRECT Preference: 0

*NextHop: 2.2.2.1 Interface: 2.2.2.1(Vlan-interface2)

State: <Int ActiveU Retain Unicast>

Age: 20:08:05 Cost: 0/0

First, display statistics of the whole routing table and then output detailed information of

every route entry in turn. The meaning of route status is shown in Table 12-2, and the

statistics of routing table is shown in the following table.

Table 12-5 Description on the fields of the display ip routing-table verbose command

Field

Holddown

Delete

Hidden

Description

Number of held-down routes

Number of deleted routes

Number of hidden routes

12.2 Static Route Configuration Commands

12.2.1 delete static-routes all

Syntax delete static-routes all

View

System view

Parameter

None

Description

Use the delete static-routes all command to delete all the static routes.

The system will request your confirmation before it deletes all the configured static routes.

Related command: ip route-static, display ip routing-table.

Example

Delete all the static routes in the router.

[SW8800] delete static-routes all

This will erase all unicast static routes and their configurations, you must reconfigure all static routes

Are you sure to delete all the static routes?[Y/N]

12-16

3Com Switch 8800 Command Reference Guide

12.2.2 delete vpn-instance

Chapter 12 Static Route Configuration Commands

Syntax

delete vpn-instance vpn-instance-name static-routes all

View

System view

Parameter

vpn-instance: Specifies VPN instance parameter.

vpn-instance-name: VPN instance name.

static-routes: VPN static route.

Description

Use the delete vpn-instance command to remove all the static routes of the VPN.

When you use this command to remove the static routes, the system will prompt your acknowledgement. The system removes all configured static routes after the acknowledgement.

Related command: ip route-static, display ip routing-table vpn-instance.

Example

Remove all static routes of the VPN.

[SW8800] delete vpn-instance vp1 static-routes all

Are you sure to delete all the VPN static routes?[Y/N]

12.2.3 ip route-static

Syntax

ip route-static [ vpn-instance vpn-instance-name ]* ip-address { mask | mask-length }

{ interface-type interface-number | [ vpn-instance

vpn-instance-name

]

gateway-address } [ preference preference-value ] [ reject | blackhole ]

undo ip route-static [ vpn-instance vpn-instance-name ]* ip-address { mask |

mask-length } [ interface-type interface-number | [ vpn-instance vpn-instance-name ]

gateway-address ] [ preference preference-value ]

View

Parameter

System view

vpn-instance: Specifies VPN instance parameter.

vpn-instance-name: VPN instance name.

12-17

3Com Switch 8800 Command Reference Guide Chapter 12 Static Route Configuration Commands

ip-address: Destination IP address in dotted decimal notation.

mask: Mask.

mask-length: Mask length. Since "1" s in the 32-bit mask are required to be consecutive, the mask in dotted decimal format can be replaced by mask-length, which is the number of the consecutive "1" s in the mask.

vpn-instance-name: Name of a VPN instance.

interface-type interface-number: Specifies the outgoing interface for the next hop. The null interface is a kind of virtual interface, where data packets are discarded directly to decrease the system load.gateway-address: Specifies the next hop IP address of the route, in dotted decimal format.

preference-value: Preference level of the route in the range from 1 to 255.

reject: Indicates an unreachable route. When a static route to a destination has the

"reject" attribute, all the IP packets to this destination will be discarded, and the source host will be informed that the destination is unreachable.

blackhole: Indicates a blackhole route. If a static route to a destination has the

“blackhole” attribute, the outgoing interface of this route is the Null 0 interface regardless of the next hop address, and any IP packets addressed to this destination are dropped without notifying the source host.

Description

Use the ip route-static command to configure a static route.

Use the undo ip route-static command to delete the configured static route.

By default, the system can obtain the sub-net route directly connected with the router. If it is not specified as reject or blackhole, the route will be reachable by default.

Precautions for static route configuration: z z

When the destination IP address and the mask are both 0.0.0.0, it is the configured default route. If it is failed to detect the routing table, a packet will be forwarded along the default route.

For different configuration of preference level, flexible routing management policy can be adopted.

Related command: display ip routing-table, delete static-routes all.

Example

Configure the next hop of the default route as 129.102.0.2.

[SW8800] ip route-static 0.0.0.0 0.0.0.0 129.102.0.2

Configure static route 129.102.0.2 255.255.255.0 in multiple VPNs.

[SW8800] ip route-static vpn-instance vpn1 vpn2 vpn3 129.102.0.2 255.255.255.0 null 0

12-18

3Com Switch 8800 Command Reference Guide Chapter 13 RIP Configuration Commands

Chapter 13 RIP Configuration Commands

Note:

When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch

8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.

For the configuration of VPN instance, refer to the MPLS module in 3Com Switch 8800

Configuration Guide.

13.1 RIP Configuration Commands

13.1.1 checkzero

Syntax

checkzero

undo checkzero

View

RIP view

Parameter

None

Description

Use the checkzero command to check the zero field of RIP-1 packet.

Use the undo checkzero command to disable the checking of the zero fields.

By default, RIP-1 performs the zero field checking.

According to the protocol (RFC1058) specifications, some fields in RIP-1 packets must be zero, called zero fields. With the checkzero command, the zero check operation of

RIP-1 can be enabled or disabled. During the zero check operation, if the RIP-1 packet in which the zero fields are not zeros is received, it will be rejected.

This command is ineffective to RIP-2 since RIP-2 packets have no zero fields.

13-1

3Com Switch 8800 Command Reference Guide

Example

Chapter 13 RIP Configuration Commands

Configure not to perform zero check for RIP-1 packet.

[SW8800-rip] undo checkzero

13.1.2 default cost

Syntax

default cost value

undo default cost

View

RIP view

Parameter

value: The default routing cost to be set, ranging from 1 to 16. The default value is 1.

Description

Use default cost command to set the default routing cost of an imported route.

Use the undo default cost command to restore the default value.

If no specific routing cost is specified when importing the route of another routing protocol with the import-route command, the redistribution will be performed with the default routing cost specified with the default cost command.

Related command: import-route.

Example

Set the default routing cost of the imported route of another routing protocol to 3.

[SW8800-rip] default cost 3

13.1.3 display rip

Syntax

display rip [ routing | vpn-instance ]

View

Parameter

Any view

routing: Displays RIP routing information.

vpn-instance: Displays VPN instance information.

13-2

3Com Switch 8800 Command Reference Guide

Description

Chapter 13 RIP Configuration Commands

Use the display rip command to view the current RIP running state and its configuration information.

Example

Display the current running state and configuration information of the RIP.

<SW8800> display rip

RIP is running

public net VPN-Instance

Checkzero is on Default cost : 1

Summary is on Preference : 100

Traffic-share is off

Period update timer : 30

Timeout timer : 180

Garbage-collection timer : 120

No peer router

Network :

202.38.168.0

Table 13-1 Description on the fields of the display rip command

Field

RIP is running public net VPN-Instance

Checkzero is on

Default cost : 1

Summary is on

Preference : 100

Traffic-share is off

Period update timer : 30

Timeout timer : 180

Garbage-collection timer : 120

RIP is active

Description

Public network in the VPN

Enable zero field checking

The default route cost is 1

Routes are summarized automatically

The preference of RIP is 100

Load balancing state for the interface

Three timers of RIP

No peer router

Network :202.38.168.0

No destination address of a transmission is specified

Enable RIP on network segment

202.38.168.0

13-3

3Com Switch 8800 Command Reference Guide

13.1.4 filter-policy export

Chapter 13 RIP Configuration Commands

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]

View

RIP view

Parameter

acl-number: Access control list number used for filtering the destination addresses of the routing information.

ip-prefix-name: Name of address prefix list used for filtering the destination addresses of the routing information.

routing-protocol: Routing protocol whose routing information is to be filtered, including

direct, isis, bgp, ospf, ospf-ase, ospf-nssa and static at present.

Description

Use the filter-policy export command to configure to filter the advertised routing information by RIP.

Use the undo filter-policy export command to configure not to filter the advertised routing information.

By default, RIP does not filter the advertised routing information.

Related command: acl, filter-policy import, ip ip-prefix.

Example

Filter the advertised route information according to ACL 2000.

[SW8800-rip] filter-policy 2000 export

13.1.5 filter-policy import

Syntax

filter-policy gateway ip-prefix-name import

undo filter-policy gateway ip-prefix-name import

filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] }

import

undo filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] }

import

13-4

3Com Switch 8800 Command Reference Guide

View

RIP view

Chapter 13 RIP Configuration Commands

Parameter

acl-number: Access control list number used for filtering the destination addresses of the routing information.

ip-prefix-name: Name of address prefix list used for filtering the destination addresses of the routing information.

gateway ip-prefix-name: Name of address prefix list used for filtering the addresses of the neighboring routers advertising the routing information.

Description

Use the filter-policy gateway import command to configure to filter the received routing information distributed from the specified address.

Use the undo filter-policy gateway import command to configure not to filter the received routing information distributed from the specified address.

Use the filter-policy import command to configure the filtering to the received global routing information.

Use the undo filter-policy import command to disable filtering to the received global routing information

By default, RIP does not filter the received routing information.

Related command: acl, filter-policy export, ip ip-prefix.

Example

Configure the filtering of the received global routing information according to acl 2000.

[SW8800-rip] filter-policy 2000 import

13.1.6 host-route

Syntax

host-route

undo host-route

View

Parameter

RIP view

None

13-5

3Com Switch 8800 Command Reference Guide

Description

Chapter 13 RIP Configuration Commands

Use the host-route command to control the RIP to accept the host route.

Use the undo host-route command to reject the host route.

By default, RIP accepts the host route.

In some special cases, RIP receives a great number of host routes in the same network segment. These routes cannot help the path searching much but occupy a lot of resources. In this case, the undo host-route command can be used to reject a host route.

Example

Configure RIP to reject a host route.

[SW8800-rip] undo host-route

13.1.7 import-route

Syntax

import-route protocol [ cost value | route-policy route-policy-name ]*

undo import-route protocol

View

RIP view

Parameter

protocol: Specifies the source routing protocol to be imported by RIP. At present, RIP can import the following routes: direct, bgp, ospf, ospf-ase, ospf-nssa, isis and

static.

value: Cost value of the route to be imported.

route-policy route-policy-name: Configures to import the route matching the condition of the specified Route-policy only.

Description

Use the import-route command to import the routes of other protocols into RIP.

Use the undo import-route command to cancel the routes imported from other protocols.

By default, RIP does not import any other route.

The import-route command is used to import the route of another protocol by using a certain cost value. RIP regards the imported route as its own route and transmits it with the specified cost value. This command can greatly enhance the RIP capability of obtaining routes, thus increasing the RIP performance.

13-6

3Com Switch 8800 Command Reference Guide Chapter 13 RIP Configuration Commands

If the cost value is not specified, routes will be imported according to the default cost ranging from 1 to 16. If the imported route cost value is 16, then RIP continues to announce this cost to other routers running RIP, and marks this route with HOLDDOWN.

However, this router can still forward packets until the Garbage Collection timer times out (defaults to 120 seconds).

Related command: default cost.

Example

Import a static route with cost as 4.

[SW8800-rip] import-route static cost 4

Set the default cost and import an OSPF route with the default cost.

[SW8800-rip] default cost 3

[SW8800-rip] import-route ospf

13.1.8 network

Syntax

network network-address

undo network network-address

View

RIP view

Parameter

network-address: Address of the network enabled/disabled. It can be the IP network address of any interface.

Description

Use the network command to enable Routing Information Protocol (RIP) for the specified network connected to the router.

Use the undo network command to disable the RIP on the interface.

By default, all RIP interfaces are disabled.

RIP route processes are disabled on all interfaces by default. To enable a RIP route process on an interface, use the network command.

The undo network command is similar to the undo rip work command in terms of function. But they are not identical. Their similarity is that the interface using either command will not receive/transmit RIP routes. The difference between them is that, in the case of undo rip work, other interfaces will still forward the routes of the interface using the undo rip work command. In the case of undo network, other interfaces will

13-7

3Com Switch 8800 Command Reference Guide Chapter 13 RIP Configuration Commands not forward the routes of the interface using this command and it seems that the interface disappeared.

When the network command is used on an address, the effect is that the interface on the network segment at this address is enabled. For example, the results of viewing the

network 129.102.1.1 with both the display current-configuration command and the

display rip command are shown as the network 129.102.0.0.

Related command: rip work.

Example

Enable the RIP on the interface with the network address as 129.102.0.0.

[SW8800-rip] network 129.102.0.0

13.1.9 peer

Syntax

View

RIP view

Parameter

ip-address: The interface IP address of the peer router, in dotted decimal format.

Description

Use the peer command to configure the sending destination address of the peer device.

Use the undo peer command to cancel the set destination address.

By default, do not send RIP packet to any destination.

RIP exchanges routing information with non-broadcasting networks in unicast view.

This command specifies the sending destination address to fit some non-broadcast networks. Usually, it is not recommended to use this command.

Example

peer ip-address

undo peer ip-address

Specify the sending destination address 202.38.165.1.

[SW8800-rip] peer 202.38.165.1

13.1.10 preference

Syntax

preference value

13-8

3Com Switch 8800 Command Reference Guide

undo preference

View

RIP view

Parameter

Chapter 13 RIP Configuration Commands

value: Preference level, ranging from 1 to 255. By default, the value is 100.

Description

Use the preference command to configure the route preference of RIP.

Use the undo preference command to restore the default preference.

Every routing protocol has its own preference. Its default value is determined by the specific routing policy. The preference will finally determine the routing algorithm to obtain the optimal route in the IP routing table. This command can be used to modify the RIP preference manually.

Example

Specify the RIP preference as 20.

[SW8800-rip] preference 20

13.1.11 reset

Syntax

reset

View

RIP view

Parameter

None

Description

Use the reset command to reset the system configuration parameters of RIP.

When you need to re-configure parameters of RIP, this command can be used to restore to the default setting.

Example

Reset the RIP system.

[SW8800-rip] reset

13-9

3Com Switch 8800 Command Reference Guide

13.1.12 rip

Chapter 13 RIP Configuration Commands

Syntax

rip

undo rip

View

system view

Parameter

None

Description

Use the rip command to enable the RIP and enter the RIP view.

Use the undo rip command to disable RIP.

By default, the system does not run RIP.

To enter the RIP view to configure various RIP global parameters, RIP should be enabled first. Whereas the configuration of parameters related to the interfaces is not restricted by enabling/disabling RIP.

Note:

Note that the interface parameters configured previously would be invalid when RIP is disabled.

Example

Enable the RIP and enter the RIP view.

[SW8800] rip

[SW8800-rip]

13.1.13 rip authentication-mode

Syntax

rip authentication-mode { simple password | md5 { usual key-string | nonstandard

key-string key-id } }

undo rip authentication-mode

View

Interface view

13-10

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 13 RIP Configuration Commands

simple: Simple text authentication mode.

password: Simple text authentication key. It is a character string of 1 to 16 characters.

md5: MD5 cipher text authentication mode.

usual: Specifies the MD5 cipher text authentication packet to use the general packet format (RFC1723 standard format).

key-string: MD5 cipher text authentication key. If it is input in a plain text form, MD5 key is a character string not exceeding 16 characters. And it will be displayed in a cipher text form in a length of 24 characters when the display current-configuration command is executed. Inputting the MD5 key in a cipher text form with 24 characters long is also supported.

nonstandard: Specifies the MD5 cipher text authentication packet to use a nonstandard packet format described in RFC2082.

key-id: MD5 cipher text authentication identifier, ranging from 1 to 255.

Description

Use the rip authentication-mode command to configure RIP-2 authentication mode and its parameters.

Use the undo rip authentication-mode command to cancel the RIP-2 authentication.

RIP-1 does not support authentication. There are two RIP authentication modes: simple authentication and MD5 cipher text authentication for RIP-2. When MD5 cipher text authentication mode is used, there are two types of packet formats. One of them is that described in RFC 1723, which was brought forward earlier. The other format is the one described specially in RFC 2082. The router supports both of the packet formats and the user can select either of them on demands.

Related command: rip version.

Example

Specify Interface Vlan-interface 10 to use the simple authentication with the key as aaa.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] rip version 2

[SW8800-Vlan-interface10] rip authentication-mode simple aaa

Set MD5 authentication at Vlan-interface 10 with the key string as aaa and the packet type as usual.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] rip version 2

[SW8800-Vlan-interface10] rip authentication-mode md5 usual aaa

13-11

3Com Switch 8800 Command Reference Guide

13.1.14 rip input

Chapter 13 RIP Configuration Commands

Syntax

rip input

undo rip input

View

Interface view

Parameter

None

Description

Use the rip input command to allow an interface to receive RIP packets.

Use the undo rip input command to disable an interface to receive RIP packets.

By default, all interfaces except loopback interfaces are enabled to receive RIP packets.

This command is used in cooperation with the other two commands: rip output and rip

work. Functionally, rip work is equivalent to rip input & rip output. The latter two control the receipt and the transmission of RIP packets respectively on an interface.

The former command equals the functional combination of the latter two commands.

Related command: rip output, rip work.

Example

Specify Vlan-interface 10 not to receive RIP packets.

[SW8800-Vlan-interface10] undo rip input

13.1.15 rip metricin

Syntax

rip metricin value

undo rip metricin

View

Interface view

Parameter

value: Additional route metric added when an interface receives a packet, ranging from

0 to 16. By default, the value is 0.

13-12

3Com Switch 8800 Command Reference Guide

Description

Chapter 13 RIP Configuration Commands

Use the rip metricin command to configure the additional route metric added to the route when an interface receives RIP packets.

Use the undo rip metricin command to restore the default value of this additional route metric.

Related command: rip metricout.

Example

Specify the additional route metric to 2 when the interface Vlan-interface 10 receives

RIP packets.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] rip metricin 2

13.1.16 rip metricout

Syntax

rip metricout value

undo rip metricout

View

Interface view

Parameter

value: Additional route metric added when an interface transmits a packet, ranging from

1 to 16. By default, the value is 1.

Description

Use the rip metricout command to configure the additional route metric to the route when an interface transmits RIP packets.

Use the undo rip metricout command to restore the default value of this additional route metric.

Related command: rip metricin.

Example

Set the additional route metric to 2 when the interface Vlan-interface 10 transmits RIP packets.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] rip metricout 2

13-13

3Com Switch 8800 Command Reference Guide

13.1.17 rip output

Chapter 13 RIP Configuration Commands

Syntax

rip output

undo rip output

View

Interface view

Parameter

None

Description

Use the rip output command to allow an interface to transmit RIP packets to the external.

Use the undo rip output command to disable an interface to transmit RIP packets to the external.

By default, all interfaces except loopback interfaces are enabled to transmit RIP packets to the external.

This command is used in cooperation with the other two commands: rip input and rip

work. Functionally, rip work is equivalent to rip input & rip output. The latter two control the receipt and the transmission of RIP packets respectively on an interface.

The former command equals the functional combination of the latter two commands.

Related command: rip input, rip work.

Example

Disable the interface Vlan-interface 10 to transmit RIP packets.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] undo rip output

13.1.18 rip split-horizon

Syntax

rip split-horizon

undo rip split-horizon

View

Interface view

13-14

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 13 RIP Configuration Commands

Description

Use the rip split-horizon command to configure an interface to use split horizon when transmitting RIP packets.

Use undo rip split-horizon command to configure an interface not to use split horizon when transmitting RIP packets.

By default, an interface is enabled to use split horizon when transmitting RIP packets.

Normally, split horizon is necessary for reducing route loop. Only in some special cases, you need to disable split horizon to ensure the correct execution of protocols. When doing that, make sure that it is necessary.

Example

Specify the interface Vlan-interface 10 not to use split horizon when processing RIP packets.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] undo rip split-horizon

13.1.19 rip version

Syntax

rip version 1

rip version 2 [ broadcast | multicast ]

undo rip version

View

Interface view

Parameter

1: Version of RIP packets on an interface is RIP-1.

2: Version of RIP packets on an interface is RIP-2.

broadcast: Transmission mode of RIP-2 packet is broadcast.

multicast: Transmission mode of RIP-2 packet is multicast.

Description

Use the rip version command to configure the version of RIP packets on an interface.

Use the undo rip version command to restore the default value of RIP packet version on the interface.

13-15

3Com Switch 8800 Command Reference Guide Chapter 13 RIP Configuration Commands

By default, the interface RIP version is RIP-1. RIP-1 transmits packets in broadcast mode, while RIP-2 transmits packets in multicast mode by default.

When running RIP-1, the interface only receives and transmits RIP-1 broadcast packets, and receives RIP-2 broadcast packets, but does not receive RIP-2 multicast packets. When running RIP-2 in broadcast mode, the interface only receives and transmits RIP-2 broadcast packets, receives RIP-1 packets and RIP-2 multicast packets. When running RIP-2 in multicast mode, the interface only receives and transmits RIP-2 multicast packets, receives RIP-2 broadcast packets, but does not receive RIP-1 packets.

Example

Configure the interface Vlan-interface 10 as RIP-2 broadcast mode.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] rip version 2 broadcast

13.1.20 rip work

Syntax

rip work

undo rip work

View

Interface view

Parameter

None

Description

Use the rip work command to enable the running of RIP on an interface.

Use the undo rip work command to disable the running of RIP on an interface.

By default, RIP is running on an interface.

This command is used in cooperation with rip input, rip output and network commands. Refer to the usage guideline of the related commands.

Related command: network, rip input, rip output.

Example

Disable the interface Vlan-interface 10 to run the RIP.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] undo rip work

13-16

3Com Switch 8800 Command Reference Guide

13.1.21 summary

Chapter 13 RIP Configuration Commands

Syntax summary undo summary

View

RIP view

Parameter

None

Description

Use the summary command to configure to activate RIP-2 automatic route summarization.

Use the undo summary command to disable RIP-2 automatic route summarization.

By default, RIP-2 route summarization is used.

Route aggregation can be performed to reduce the routing traffic on the network as well as to reduce the size of the routing table. If RIP-2 is used, route summarization function can be disabled with the undo summary command, when it is necessary to broadcast the subnet route.

RIP-1 does not support subnet mask. Forwarding subnet route may cause ambiguity.

Therefore, RIP-1 uses route summarization all the time. Thus, the undo summary command does not take effect on RIP-1.

Related command: rip version.

Example

Set RIP version on the interface Vlan-interface 10 as RIP-2 and disable the route aggregation.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] rip version 2

[SW8800-Vlan-interface10] quit

[SW8800] rip

[SW8800-rip] undo summary

13.1.22 timers

Syntax

timers { update update-timer-length | timeout timeout-timer-length } *

undo timers { update | timeout } *

13-17

3Com Switch 8800 Command Reference Guide

View

RIP view

Parameter

Chapter 13 RIP Configuration Commands

update-timer-length: Value of the Period Update timer, ranging from 1 to 3600 seconds.

By default, it is 30 seconds.

timeout-timer-length: Value of the Timeout timer, ranging from 1 to 3600 seconds. By default, it is 180 seconds.

Description

Use the timers command to modify the values of the three RIP timers: Period Update,

Timeout, and Garbage-collection.

Use the undo timers command to restore the default settings.

By default, the values of Period Update, Timeout, and Garbage-collection timers are 30 seconds, 180 seconds, and 120 seconds respectively.

Generally, it is regarded that the value of Garbage-collection timer is fixed to four times of that of Period Update timer. Adjusting Period Update timer will affect

Garbage-collection timer.

The modification of RIP timers is validated immediately.

Related command: display rip.

Example

Set the values of Period Update timer and Timeout timer of RIP to 10 seconds and 30 seconds respectively.

[SW8800] rip

[SW8800-rip] timers update 10 timeout 30

13-18

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Chapter 14 OSPF Configuration Commands

Note:

When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch

8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.

14.1 OSPF Configuration Commands

14.1.1 abr-summary

Syntax

abr-summary ip-address mask [ advertise | not-advertise ]

undo abr-summary ip-address mask

View

OSPF Area view

Parameter

ip-address: Network segment address.

mask: Network mask.

advertise: Advertises only the summarized route that matches the specified IP address and mask.

not-advertise : Not advertises routes matching the specified IP address and mask.

Description

Use the abr-summary command to configure the route aggregation on the area border router.

Use the undo abr-summary command to disable the function of route aggregation on the area border router.

By default, the area border router does not aggregate routes.

This command is applicable only to the area border router (ABR) and is used for the route aggregation in an area. The ABR only transmits an aggregated route to other areas. Route aggregation refers to that the routing information is processed in the ABR

14-1

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands and for each network segment configured with route aggregation, there is only one route transmitted to other areas.

You can summarize multiple network segments in one OSPF area.

Example

Aggregate the two network segments, 36.42.10.0 and 36.42.110.0, in OSPF area 1 into one aggregate route 36.42.0.0 and transmit it to other areas.

[SW8800-ospf-1] area 1

[SW8800-ospf-1-area-0.0.0.1] network 36.42.10.0 0.0.0.255

[SW8800-ospf-1-area-0.0.0.1] network 36.42.110.0 0.0.0.255

[SW8800-ospf-1-area-0.0.0.1] abr-summary 36.42.0.0 255.255.0.0

14.1.2 area

Syntax

View

OSPF view

Parameter

area-id: ID of the OSPF area, which can be a decimal integer (ranging from 0 to

4,294,967,295) or in IP address format.

Description

Use the area command to enter OSPF Area view.

Use the undo area command to remove the specified area.

Example

area area-id

undo area area-id

Enter OSPF Area 0 view.

[SW8800-ospf-1] area 0

[SW8800-ospf-1-area-0.0.0.0]

14.1.3 asbr-summary

Syntax

asbr-summary ip-address mask [ not-advertise | tag value ]

undo asbr-summary ip-address mask

14-2

3Com Switch 8800 Command Reference Guide

View

OSPF view

Chapter 14 OSPF Configuration Commands

Parameter

ip-address: Matched IP address in dotted decimal format.

mask: IP address mask in dotted decimal format.

not-advertise: Do not advertise routes matching the specified IP address and mask.

tag value: Tag value, which is mainly used to control advertisement of routes via route-policy. It is in the range from 0 to 4,294,967,295. The default tag value is 1.

Description

Use the asbr-summary command to configure summarization of imported routes by

OSPF.

Use the undo asbr-summary command to cancel the summarization.

By default, summarization of imported routes is disabled.

After the summarization of imported routes is configured, if the local router is an autonomous system border router (ASBR), this command summarizes the imported

Type-5 LSAs in the summary address range. When NSSA is configured, this command will also summarize the imported Type-7 LSAs in the summary address range.

If the local router acts as both an ABR and a router in the NSSA, this command summarizes Type-5 LSAs transformed from Type-7 LSAs. If the router is not the router in the NSSA, the summarization is disabled.

Related command: display ospf asbr-summary.

Example

Set summarization of imported routes.

[SW8800] ospf

[SW8800-ospf-1] asbr-summary 10.2.0.0 255.255.0.0 not-advertise

14.1.4 authentication-mode

Syntax

authentication-mode { simple | md5 }

undo authentication-mode

View

Parameter

OSPF area view

simple: Uses simple text authentication mode.

14-3

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

md5: Uses MD5 cipher text authentication mode.

Description

Use the authentication-mode command to configure one area of OSPF to support the authentication attribute.

Use the undo authentication-mode command to cancel the authentication attribute of this area.

By default, an area does not support authentication attribute.

All the routers in one area must use the same authentication mode (no authentication, simple text authentication or MD5 cipher text authentication). If the mode of supporting authentication is configured, all routers on the same segment must use the same authentication key. To configure a simple text authentication key, use the ospf

authentication-mode simple command. Use the ospf authentication-mode md5 command to configure the MD5 cipher text authentication key if the area is configured to support MD5 cipher text authentication mode.

Related command: ospf authentication-mode.

Example

Enter area 0 view.

[SW8800-ospf-1] area 0

Specify the OSPF area 0 to support MD5 cipher text authentication:

[SW8800-ospf-1-area-0.0.0.0] authentication-mode md5

14.1.5 debugging ospf

Syntax

debugging ospf [ process-id ] { event | packet [ ack | dd | hello | interface

interface-type interface-num | request | update ] | lsa-originate | spf }

undo debugging ospf [ process-id ] { event | packet [ ack | dd | hello | interface

interface-type interface-num | request | update ] | lsa-originate | spf }

View

User view

Parameter

process-id: Process ID of OSPF. The command enables/disables all process debugging if you do not specify a process ID.

event: Enables/Disables OSPF event debugging.

packet: Enables/Disables OSPF packet debugging. OSPF packets include:

ack: LSAck packet.

14-4

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

dd: Database Description packet.

hello: Hello packet.

request: Link State Request packet.

update: Link State Update packet.

interface interface-type interface-num: Interface type and number, which indicates to enable/disable debugging for the OSPF packets obtained on the specified interface.

lsa-originate: Enables/Disables OSPF LSA packet debugging.

spf: Enables/Disables OSPF minimum tree calculation debugging.

Description

Use the debugging ospf command to enable OSPF process debugging.

Use the undo debugging ospf command to disable OSPF process debugging.

If you do not specify a process ID, the command is applied to all processes. While the router is operating, the debugging state always remains regardless of the existing

OSPF process. If you specify a process ID, the command is only applied to the specified process.

Related command: display debugging ospf.

Example

Enable OSPF packet debugging.

<SW8800> debugging ospf packet

14.1.6 default cost

Syntax

default cost value

undo default cost

View

OSPF view

Parameter

value: Default routing cost of an external route imported by OSPF, ranging from 0 to

16,777,214. By default, its value is 1.

Description

Use the default cost command to configure the default cost for OSPF to import external routes.

14-5

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Use the undo default cost command to restore the default value of the default routing cost configured for OSPF to import external routes.

Since OSPF can import external routing information, whose routing cost can influence routing selection and calculation, and propagate it to the entire autonomous system, it is necessary to specify the default routing cost for the protocol to import external routes.

Example

Specify the default routing cost for OSPF to import external routes as 10.

[SW8800-ospf-1] default cost 10

14.1.7 default interval

Syntax

default interval seconds

undo default interval

View

OSPF view

Parameter

seconds: Default interval in seconds for importing external routes. It ranges from 1 to

2,147,483,647 and defaults to 1.

Description

Use the default interval command to configure the default interval for OSPF to import external routes.

Use the undo default interval command to restore the default value of the default interval for importing external routes.

Because OSPF can import the external routing information and broadcast it to the entire autonomous system, and importing routes too often will greatly affect the performances of the device, it is necessary to specify the default interval for the protocol to import external routes.

Example

Specify the default interval for OSPF to import external routes as 10 seconds.

[SW8800-ospf-1] default interval 10

14.1.8 default limit

Syntax

default limit routes

14-6

3Com Switch 8800 Command Reference Guide

undo default limit

View

Chapter 14 OSPF Configuration Commands

OSPF view

Parameter

routes: Default value to the imported external routes in a unit time, ranging from 200 to

2,147,483,647. By default, the value is 1000.

Description

Use the default limit command to configure the default value of maximum number of imported routes.

Use the undo default limit command to restore the default value.

OSPF can import external routing information and advertise them to the whole AS.

Importing too much external routes once will greatly affect the performances of the device.

Related command: default interval.

Example

Specify the default value of OSPF imported external routes as 200.

[SW8800-ospf-1] default limit 200

14.1.9 default tag

Syntax

default tag tag

undo default tag

View

OSPF view

Parameter

tag: Default tag, ranging from 0 to 4,294,967,295.

Description

Use the default tag command to configure the default tag that OSPF assigns to imported routes.

Use the undo default tag command to restore the default of the default tag that OSPF assigns to imported routes.

14-7

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

When OSPF imports a route found by other routing protocols in the router and uses it as the external routing information of its own autonomous system, some additional parameters are required, including the default cost and the default tag of the route.

Related command: default type.

Example

Set the default tag that OSPF assigns to imported routes to 10.

[SW8800-ospf-1] default tag 10

14.1.10 default type

Syntax

default type { 1 | 2 }

undo default type

View

OSPF view

Parameter

type 1: External routes of type 1.

type 2: External routes of type 2.

Description

Use the default type command to configure the default type when OSPF imports external routes.

Use the undo default type command to restore the default type when OSPF imports external routes.

By default, the external routes of type 2 are imported.

OSPF specifies the two types of external routing information. The command described in this section can be used to specify the default type when external routes are imported.

Related command: default tag.

Example

Specify the default type as type 1 when OSPF imports an external route.

[SW8800-ospf-1] default type 1

14-8

3Com Switch 8800 Command Reference Guide

14.1.11 default-cost

Chapter 14 OSPF Configuration Commands

Syntax

default-cost value

undo default-cost

View

OSPF Area view

Parameter

value: Specifies the cost value of the default route transmitted by OSPF to the stub or

NSSA area, ranging from 0 to 16,777,214. The default value is 1.

Description

Use the default-cost command to configure the cost of the default route transmitted by

OSPF to the stub or NSSA area.

Use the undo default-cost command to restore the cost of the default route transmitted by OSPF to the STUB or NSSA area to the default value.

This command only applies to the border routers connected to the stub or NSSA areas.

To configure a stub area, you need to use two commands: stub and default-cost. The

stub command is used to configure the stub attribute for this area.

Related command: stub, nssa.

Example

Set the area 1 as the stub area and the cost of the default route transmitted to this stub area to 60.

[SW8800-ospf-1] area 1

[SW8800-ospf-1-area-0.0.0.1] network 20.0.0.0 0.255.255.255

[SW8800-ospf-1-area-0.0.0.1] stub

[SW8800-ospf-1-area-0.0.0.1] default-cost 60

14.1.12 default-route-advertise

Syntax

default-route-advertise [ always | cost value | type type-value | route-policy

route-policy-name ]*

undo default-route-advertise [ always | cost | type | route-policy ]*

View

OSPF view

14-9

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 14 OSPF Configuration Commands

always: The parameter will generate an ase lsa which describes the default route and will advertise it if the local router is not configured with the default route. If this parameter is not set, the local router cannot import the ase lsa, which generates the default route only when it is configured with the default route.

cost value: The cost value of this ase lsa. The metric-value ranges from 0 to

16,777,214. If the parameter is not configured, the default value is 1.

type type-value: Cost type of this ase lsa. It ranges from 1 to 2. If the parameter is not configured, the default value is 2.

route-policy route-policy-name: If the default route match the route-policy specified by

route-policy-name, route-policy will affect the value in ase lsa. The length of

route-policy-name argument is a character string of 1 to 19 characters.

Description

Use the default-route-advertise command to import default route to OSPF route area.

Use the undo default-route-advertise command to cancel the redistribution of default route.

By default, OSPF does not import default route.

The import-route command cannot import the default route. To import the default route to the route area, this command must be used. When local router is not configured with default route, the keyword always should be used by ase lsa to generate default route.

Related command: import-route.

Example

If local route has no default route, the ase lsa of default route will be generated.

Otherwise, it will not be generated.

[SW8800-ospf-1] default-route-advertise

The ase lsa of default route will be generated and advertised to OSPF route area even the local router has no default route.

[SW8800-ospf-1] default-route-advertise always

14.1.13 display debugging ospf

Syntax display debugging ospf

View

Any view

14-10

3Com Switch 8800 Command Reference Guide

Description

Chapter 14 OSPF Configuration Commands

Use the display debugging ospf command to view the debugging states of global

OSPF and all processes.

Related command: debugging ospf.

Example

Display the debugging states of global OSPF and all processes.

<SW8800> display debugging ospf

OSPF global debugging state:

OSPF SPF debugging is on

OSPF LSA debugging is on

OSPF process 100 debugging state:

OSPF SPF debugging is on

OSPF process 200 debugging state:

OSPF SPF debugging is on

OSPF LSA debugging is on

14.1.14 display ospf abr-asbr

Syntax

display ospf [ process-id ] abr-asbr

View

Any view

Parameter

Description

Use the display ospf abr-asbr command to view the information about the ABR and

ASBR of OSPF.

Example

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

Display the information of the OSPF area border routers and autonomous system border routers.

<SW8800> display ospf abr-asbr

OSPF Process 1 with Router ID 10.110.98.138

Routing Table to ABR and ASBR

I = Intra i = Inter A = ASBR B = ABR S = SumASBR

14-11

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Destination Area Cost Nexthop Interface

IA 2.2.2.2 0.0.0.0 10 10.153.17.89 Vlan-interface1

Table 14-1 Description on the fields of the display ospf abr-asbr command

Destination

Area

Cost

Field Description

Router ID of the ABR or ASBR

Area where the router is connected with ASBR

The routing overhead value of the route

Interface The local output interface

14.1.15 display ospf asbr-summary

Syntax

display ospf [ process-id ] asbr-summary [ ip-address mask ]

View

Any view

Parameter

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

ip-address: Matched IP address in dotted decimal format.

mask: IP address mask in dotted decimal format.

Description

Use the display ospf asbr-summary command to view the summary information of

OSPF imported route.

If the parameters are not set, the summary information of all OSPF imported routes will be displayed.

Related command: asbr-summary.

Example

Display the summary information of all OSPF imported routes.

<SW8800> display ospf asbr-summary

OSPF Process 1 with Router ID 1.1.1.1

Summary Addresses

Total summary address count: 2

14-12

3Com Switch 8800 Command Reference Guide

Summary Address net : 168.10.0.0 mask : 255.254.0.0 tag : 1 status : Advertise

The Count of Route is 0

Summary Address net : 1.1.0.0 mask : 255.255.0.0 tag : 100 status : DoNotAdvertise

The Count of Route is 0

Chapter 14 OSPF Configuration Commands

Table 14-2 Description on the fields of the display ospf asbr-summary command

Field Description

mask Mask tag Tag status

Status information, including two values:

DoNotAdvertise

The summary routing information to the network segment will not be advertised

Advertise

The summary routing information to the network segment will be advertised

14.1.16 display ospf brief

Syntax

display ospf [ process-id ] brief

View

Any view

Parameter

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

Description

Use the display ospf brief command to view the main summary of OSPF.

14-13

3Com Switch 8800 Command Reference Guide

Example

Chapter 14 OSPF Configuration Commands

Display the OSPF summary.

<SW8800> display ospf brief

OSPF Process 1 with Router ID 10.110.95.189

OSPF Protocol Information

RouterID: 10.110.95.189 Border Router: Area AS spf-schedule-interval: 5

Routing preference: Inter/Intra: 10 External: 150

Default ASE parameters: Metric: 1 Tag: 0.0.0.1 Type: 2

SPF computation count: 16

Area Count: 1 Nssa Area Count: 0

Area 0.0.0.0:

Authtype: none Flags: <>

SPF scheduled: <>

Interface: 201.1.1.4 (Vlan-interface1)

Cost: 1 State: DR Type: Broadcast

Priority: 1

Designated Router: 201.1.1.4

Backup Designated Router: 201.1.1.3

Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1

Table 14-3 Description on the fields of the display ospf brief command

Field

RouterID

Border Router

Router ID of the router

Description

Border routers for connection to the area, including autonomous system border router (ASBR) and area border router (ABR) spf-schedule-interval Interval of SPF schedule in seconds

Authtype Authentication type of OSPF

Routing preference

Routing preference of OSPF. The internal route of OSPF includes intra/inter area route, and its default routing preference is 10. While that of the external route of OSPF is 150 by default and tag parameters count

Area Count

Nssa Area Count

SPF scheduled

Areas for connection to this router

Number of NSSA areas

SPF scheduled (flag)

14-14

3Com Switch 8800 Command Reference Guide

Interface

Field

Cost

Chapter 14 OSPF Configuration Commands

Description

Interface name belonging to this area

Cost of routes

Type Network type of OSPF interface

Priority Priority

Designated Router IP address of designated router (DR)

Backup Designated

IP address of backup designated router (BDR)

Router

Timers

Transmit Delay

OSPF timers, defining as follows:

Hello Interval of hello packet

Dead

Poll

Interval of dead neighbors

Interval of poll

Retransmit Interval of retransmitting LSA

Delay time of transmitting LSA

14.1.17 display ospf cumulative

Syntax

display ospf [ process-id ] cumulative

View

Any view

Parameter

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

Description

Use the display ospf cumulative command to view the OSPF cumulative information.

Example

Display the OSPF cumulative information.

<SW8800> display ospf cumulative

OSPF Process 1 with Router ID 1.1.1.1

Cumulations

IO Statistics

14-15

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Link-State Update 48 53

ASE: 1 Checksum Sum: FCAF

LSAs originated by this router

Router: 50 SumNet: 40 SumASB: 2

LSAs Originated: 92 LSAs Received: 33

Area 0.0.0.0:

Neighbors: 1 Interfaces: 1

Spf: 54 Checksum Sum F020

rtr: 2 net: 0 sumasb: 0 sumnet: 1

Area 0.0.0.1:

Neighbors: 0 Interfaces: 1

Spf: 19 Checksum Sum 14EAD

rtr: 1 net: 0 sumasb: 1 sumnet: 1

Routing Table:

Intra Area: 2 Inter Area: 0 ASE: 1

Table 14-4 Description on the fields of the display ospf cumulative command

IO Statistics

Field

Type

Input

Output

ASE checksum sum

LSAs

Router

SumNet

SumASB

Area originated received

Description

Type of input/output OSPF packet

Number of received packets

Number of transmitted packets

Number of all ASE LSAs

Checksum of ASE LSA

Number of originated LSAs

Number of received LSAs generated by other routers

Number of all Router LSAs

Number of all Sumnet LSAs

Neighbors

Interfaces

Spf

Number of all SumASB LSAs

Number of neighbors in this area

Number of interfaces in this area

Number of SPF computation count in this area rtr, net, sumasb, sumnet

Number of all LSAs in this area

14-16

3Com Switch 8800 Command Reference Guide

Field

Intra Area

Routing Table Inter Area

ASE

14.1.18 display ospf error

Chapter 14 OSPF Configuration Commands

Description

Number of intra-area routes

Number of inter-area routes

Number of external routes

Syntax

display ospf [ process-id ] error

View

Any view

Parameter

Description

Use the display ospf error command to view the OSPF error information.

Example

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

Display the OSPF error information.

<SW8800> display ospf error

OSPF Process 1 with Router ID 1.1.1.1

OSPF packet error statistics:

0: IP: received my own packet 0: OSPF: wrong packet type

0: OSPF: wrong version 0: OSPF: wrong checksum

0: OSPF: wrong area id 0: OSPF: area mismatch

0: OSPF: wrong virtual link 0: OSPF: wrong authentication type

0: OSPF: wrong authentication key 0: OSPF: too small packet

0: OSPF: packet size > ip length 0: OSPF: transmit error

0: OSPF: interface down 0: OSPF: unknown neighbor

0: HELLO: netmask mismatch 0: HELLO: hello timer mismatch

0: HELLO: dead timer mismatch 0: HELLO: extern option mismatch

0: HELLO: router id confusion 0: HELLO: virtual neighbor unknown

0: HELLO: NBMA neighbor unknown 0: DD: neighbor state low

0: DD: router id confusion 0: DD: extern option mismatch

0: DD: unknown LSA type 0: LS ACK: neighbor state low

0: LS ACK: wrong ack 0: LS ACK: duplicate ack

0: LS ACK: unknown LSA type 0: LS REQ: neighbor state low

14-17

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

0: LS REQ: empty request 0: LS REQ: wrong request

0: LS UPD: neighbor state low 0: LS UPD: newer self-generate LSA

0: LS UPD: LSA checksum wrong 0: LS UPD: received less recent LSA

0: LS UPD: unknown LSA type 0: OSPF routing: next hop not exist

0: DD: MTU option mismatch 0: ROUTETYPE: wrong type value

Table 14-5 Description on the fields of the display ospf error command

Field

IP: received my own packet

OSPF: wrong packet type

OSPF: wrong version

OSPF: wrong checksum

OSPF: wrong area id

OSPF: area mismatch

OSPF: wrong virtual link

Description

Received my own packet

OSPF packet type error

OSPF version error

OSPF checksum error

OSPF area ID error

OSPF area mismatch

OSPF virtual link error

OSPF: wrong authentication type OSPF authentication type error

OSPF: wrong authentication key OSPF authentication key error

OSPF: too small packet

OSPF: packet size > ip length

OSPF packet too small

OSPF packet size exceeds IP packet length

OSPF: transmit error

OSPF: interface down

OSPF: unknown neighbor

HELLO: netmask mismatch

HELLO: hello timer mismatch

HELLO: dead timer mismatch

OSPF transmission error

OSPF interface is down, unavailable

OSPF neighbors are unknown

Network mask mismatch

Interval of HELLO packet is mismatched

Interval of dead neighbor packet is mismatched

HELLO: extern option mismatch

HELLO: router id confusion

Extern option of Hello packet is mismatched

Hello packet: Router ID confusion

HELLO: virtual neighbor unknown Hello packet: unknown virtual neighbor

HELLO: NBMA neighbor unknown Hello packet: unknown NBMA neighbor

DD: neighbor state low

DD: unknown LSA type

LS ACK: neighbor state low

LS ACK: wrong ack

Database description (DD) packet: asynchronous neighbor state

DD packet: unknown LSA type

Link state acknowledgment (LS ACK) packet: states of neighbors are not synchronized.

Link state acknowledgment packet: ack error

14-18

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Field

LS ACK: duplicate ack

LS ACK: unknown LSA type

LS REQ: neighbor state low

LS REQ: empty request

LS REQ: wrong request

LS UPD: neighbor state low

LS UPD: newer self-generate LSA

LS UPD: LSA checksum wrong

LS UPD: received less recent LSA

LS UPD: unknown LSA type

OSPF routing: next hop not exist

DD: MTU option mismatch

ROUTETYPE: wrong type value

Description

Link state acknowledgment packet: ack duplication

Link state acknowledgment packet: unknown

LSA type

Link state request (LS REQ) packet

Link state request packet: empty request

Link state request packet: erroneous request

Link state update packet: The states of neighbors are synchronized.

Link state update packet: newer LSA generated by itself

Link state update packet: LSA checksum error

Link state update packet: received less recent LSA

Link state update packet: unknown LSA type

Next hop of OSPF routing does not exist

MTU option of DD packet is mismatched

Route type: the value of the type is wrong

14.1.19 display ospf interface

Syntax

display ospf [ process-id ] interface [ interface-type interface-number ]

View

Any view

Parameter

Description

Use the display ospf interface command to view the OSPF interface information.

Example

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

interface-type interface-number: Specifies an interface.

Display the OSPF interface information of Vlan-interface1.

14-19

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

<SW8800> display ospf interface vlan-interface 1

OSPF Process 1 with Router ID 1.1.1.1

Interfaces

Interface: 10.110.10.2 (Vlan-interface1)

Cost: 1 State: BackupDR Type: Broadcast

Priority: 1

Designated Router: 10.110.10.1

Backup Designated Router: 10.110.10.2

Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1

Table 14-6 Description on the fields of the display ospf interface command

Cost

State

Type

Priority

Field

Designated Router

Description

Cost of the interface

State of the interface state machine

Network type of OSPF on the interface

Priority of the interface for DR election in its network

DR on the network in which the interface resides

Backup Designated Router BDR on the network in which the interface resides

OSPF timers, defining as follows:

Hello Interval of hello packet

Timers

Transmit Delay

Dead

Poll

Interval of dead neighbors

Interval of poll

Retransmit Interval of retransmitting LSA

Delay time of transmitting LSA

14.1.20 display ospf lsdb

Syntax

display ospf [ process-id ] [ area-id ] lsdb [ brief | [ asbr | ase | network | nssa |

router | summary ] [ ip-address ] [ originate-router ip-address | self-originate ] ]

View

Parameter

Any view

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

14-20

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

area-id: ID of the OSPF area, which can be a decimal integer in the range 0 to

4,294,967,295 or in IP address format.

brief: Views brief database information.

asbr: Views the database information of Type-4 LSA (summary-Asbr-LSA).

ase: Views the database information of Type-5 LSA (AS-external-LSA).

network: Views the database information of Type-2 LSA (Network-LSA).

nssa: Views the database information of Type-7 LSA (NSSA-external-LSA).

router: Views the database information of Type-1 LSA (Router-LSA).

summary: Views the database information of Type-3 LSA (Summary-Net-LSA).

ip-address: Link state ID in IP address format.

originate-router ip-address: Views the IP address of the LSA generator.

self-originate: Views the database information of self-originated LSA.

Description

Use the display ospf lsdb command to view the link-state database (LSDB) of OSPF.

Example

Display the LSDB of OSPF.

<SW8800> display ospf lsdb

OSPF Process 1 with Router ID 1.1.1.1

Link State Database

Area: 0.0.0.0

Type LinkState ID AdvRouter Age Len Sequence Metric Where

Rtr 2.2.2.2 2.2.2.2 465 36 8000000c 0 SpfTree

Rtr 1.1.1.1 1.1.1.1 449 36 80000004 0 SpfTree

Net 10.153.17.89 2.2.2.2 465 32 80000004 0 SpfTree

SNet 10.153.18.0 1.1.1.1 355 28 80000003 10 Inter List

Area: 0.0.0.1

Type LinkState ID AdvRouter Age Len Sequence Metric Where

Rtr 1.1.1.1 1.1.1.1 449 36 80000004 0 SpfTree

Rtr 3.3.3.3 3.3.3.3 429 36 8000000a 0 Clist

Net 10.153.18.89 3.3.3.3 429 32 80000003 0 SpfTree

SNet 10.153.17.0 1.1.1.1 355 28 80000003 10 Inter List

ASB 2.2.2.2 1.1.1.1 355 28 80000003 10 SumAsb List

AS External Database:

Type LinkState ID AdvRouter Age Len Sequence Metric Where

ASE 10.153.18.0 1.1.1.1 1006 36 80000002 1 Ase List

ASE 10.153.16.0 2.2.2.2 798 36 80000002 1 Uninitialized

ASE 10.153.17.0 2.2.2.2 623 36 80000003 1 Uninitialized

ASE 10.153.17.0 1.1.1.1 1188 36 80000002 1 Ase List

14-21

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Table 14-7 Description on the fields of the display ospf lsdb command

Field

Type

LinkStateID

AdvRouter

Age

Len

Sequence

Metric

Where

<SW8800> display ospf lsdb ase

OSPF Process 1 with Router ID 1.1.1.1

Link State Data Base

type : ASE

ls id : 2.2.0.0

adv rtr: 1.1.1.1

ls age: 349

Description

Type of the LSA

Link state ID of the LSA

Router ID of the router originating the LSA

Age of the LSA, in seconds

Length of the LSA

Sequence number of the LSA

Cost from the router originating the LSA to LSA destination

Location of the LSA

seq#: 80000001

chksum: 0xfcaf

Options: (DC)

Net mask:255.255.0.0

Tos 0 metric: 1

Forwarding Address: 0.0.0.0

Tag: 1

Table 14-8 Description on the fields of the display ospf lsdb ase command

Field

type ls id adv rtr ls age len seq# chksum

Description

Type of the LSA

Link state ID of the LSA

Router ID of the router originating the LSA

Age of the LSA in seconds

Length of the LSA

Sequence number of the LSA

Checksum of the LSA

14-22

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Options

Net mask

E type

Forwarding Address

Options of the LSA

Network mask

Type of external route

Forwarding address

Tag Tag

14.1.21 display ospf nexthop

Syntax

display ospf [ process-id ] nexthop

View

Any view

Parameter

Description

Use the display ospf nexthop command to view the information about the next-hop.

Example

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

Display the OSPF next-hop information.

<SW8800> display ospf nexthop

OSPF Process 1 with Router ID 1.1.1.1

Address Type Refcount Intf Addr Intf Name

---------------------------------------------------------------------

Vlan-interface2

202.38.160.2 Neighbor 1

Table 14-9 Description on the fields of the display ospf nexthop command

Field

Address

Type

Refcount

Intf Addr

Intf Name

Address of next hop

Type of next hop

Description

Reference count of the next hop, i.e., number of routes using this address as the next hop

IP address of the outgoing interface to the next hop

The outgoing interface to the next hop

14-23

3Com Switch 8800 Command Reference Guide

14.1.22 display ospf peer

Chapter 14 OSPF Configuration Commands

Syntax

display ospf [ process-id ] peer [ brief ]

View

Any view

Parameter

process-id: Process ID of OSPF. The command is applied to all current OSPF processes if you do not specify a process ID.

Description

Use the display ospf peer command to view information about OSPF peers.

Use the display ospf peer brief command to view the brief information of every peer in

OSPF, mainly the numbers of peers at all states in every area.

Example

View information about OSPF peers.

<SW8800> display ospf peer

OSPF Process 1 with Router ID 1.1.1.1

Neighbors

Area 0.0.0.0 interface 10.153.17.88(Vlan-interface1)'s neighbor(s)

RouterID: 2.2.2.2 Address: 10.153.17.89

State: Full Mode: Nbr is Master Priority: 1

DR: 10.153.17.89 BDR: 10.153.17.88

Dead timer expires in 31s

Neighbor has been up for 01:14:14

Table 14-10 Description on the fields of the display ospf peer command

RouterID

Address

State

Mode

Priority

DR

Field Description

Router ID of neighbor router

Address of the interface, through which neighbor router communicates with the router

State of adjacency relation

Master/Slave mode formed by negotiation in exchanging DD packet

Priority of the neighbor in DR/BDR election

IP address of the interface of elected DR

14-24

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

BDR

Dead timer expires in 31s

IP address of the interface of elected BDR

Remaining time before the neighbor is considered dead.

Neighbor has been up for

01:14:14

Time of neighbor connection

View the brief information of every peer.

<SW8800> display ospf peer brief

OSPF Process 1 with Router ID 1.1.1.1

Neighbor Statistics

Area ID Down Attempt Init 2-Way ExStart Exchange Loading Full Total

0.0.0.0 0 0 0 0 0 0 0 1 1

0.0.0.1 0 0 0 0 0 0 0 1 1

Total 0 0 0 0 0 0 0 2 2

Table 14-11 Description on the fields of the display ospf peer brief command

Field

Area ID

Down

Attempt

Description

Area ID

Initial state for OSPF to establish neighbor relation, which indicates that OSPF router does not receive any message from a certain neighbor router within a period of time

It is enabled in NBMA environment, such as Frame Relay, X.25 or

ATM. It indicates that OSPF router does not receive the message from a certain neighbor router within a period of time, but still attempts to send Hello packet to the adjacent routers for their communications with a lower frequency.

Init

2-Way

Loading

Full

It indicates that OSPF router has received Hello packet from a neighbor router, but its IP address is not contained in the Hello packet.

Therefore, a two-way communication between them has not been established.

It indicates that a two-way communication between OSPF router and neighbor router has been established. DR and BDR can be selected in this state (or higher state).

ExStart

In this state, the router determines the sequence number of initial database description (DD) packet used for data exchange, so that it can obtain the latest link state information

Exchange

It indicates that OSPF router sends DD packet to its neighbor routers to exchange link state information

In this state, OSPF router requests neighbor routers based on the updated link state information from neighbor routers and its expired information, and waits for response from neighbor routers

It indicates that database synchronization between the routers that have established neighbor relation has been completed, and their link state databases have been consistent

14-25

3Com Switch 8800 Command Reference Guide

14.1.23 display ospf request-queue

Chapter 14 OSPF Configuration Commands

Syntax

display ospf [ process-id ] request-queue

View

Any view

Parameter

Description

Use the display ospf request-queue command to view the information about the

OSPF request-queue.

Example

process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.

Display the information of OSPF request-queue.

<SW8800> display ospf request-queue

The Router's Neighbors is

RouterID: 1.1.1.1 Address: 1.1.1.1

Interface: 1.1.1.3 Area: 0.0.0.0

LSID:1.1.1.3 AdvRouter:1.1.1.3 Sequence:80000017 Age:35

Table 14-12 Description on the fields of the display ospf request-queue command

Field

RouterID

Address

Sequence

Age

Description

Router ID of neighbor router

Address of the interface, through which neighbor routers communicate with the router

Interface

Area

Address of the interface on the network segment

Number of an OSPF area

LSID:1.1.1.3 Link State ID of the LSA

AdvRouter Router ID of the router originating the LSA

Sequence number of the LSA, used to discover old and repeated

LSAs

Age in seconds of the LSA

14-26

3Com Switch 8800 Command Reference Guide

14.1.24 display ospf retrans-queue

Chapter 14 OSPF Configuration Commands

Syntax

display ospf [ process-id ] retrans-queue

View

Any view

Parameter

Description

Use the display ospf retrans-queue command to view information about the OSPF retransmission queue.

Example

process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.

Display information about the OSPF retransmission queue.

<SW8800> display ospf retrans-queue

OSPF Process 200 with Router ID 103.160.1.1

Retransmit List

The Router's Neighbors is

RouterID: 162.162.162.162 Address: 103.169.2.2

Interface: 103.169.2.5 Area: 0.0.0.1

Retrans list:

Type: ASE LSID:129.11.77.0 AdvRouter:103.160.1.1

Type: ASE LSID:129.11.108.0 AdvRouter:103.160.1.1

Table 14-13 Description on the fields of the display ospf retrans-queue command

Field

RouterID Router ID of neighbor router

Description

Address

Address of the interface, through which neighbor routers communicate with the router

Interface

Area

Type

LSID

Address of the interface on the network segment

Number of an OSPF area

Type of the LSA

Link State ID of the LSA

AdvRouter Router ID of the router originating the LSA

14-27

3Com Switch 8800 Command Reference Guide

14.1.25 display ospf routing

Chapter 14 OSPF Configuration Commands

Syntax

display ospf [ process-id ] routing

View

Any view

Parameter

Description

Use the display ospf routing command to view information about the OSPF routing table.

Example

process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.

View the OSPF routing table.

<SW8800> display ospf routing

OSPF Process 1 with Router ID 1.1.1.1

Routing Tables

Routing for Network

Destination Cost Type NextHop AdvRouter Area

10.110.0.0/16 1 Net 10.110.10.1 1.1.1.1 0

10.10.0.0/16 1 Stub 10.10.0.1 3.3.3.3 0

Total Nets: 2

Intra Area: 2 Inter Area: 0 ASE: 0 NSSA: 0

Table 14-14 Description on the fields of the display ospf routing command

Field Description

Cost

Type

NextHop

AdvRouter

Intra Area

Inter Area

ASE

Cost of route

Type of route

Next hop of route

Router ID of the router advertising the route

Number of intra-area routes

Number of inter-area routes

Number of external routes

14-28

3Com Switch 8800 Command Reference Guide

NSSA

14.1.26 display ospf vlink

Chapter 14 OSPF Configuration Commands

Number of NSSA routes

Syntax

display ospf [ process-id ] vlink

View

Any view

Parameter

Description

Use the display ospf vlink command to view the information about OSPF virtual links.

Example

process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.

View OSPF virtual links information.

<SW8800> display ospf vlink

OSPF Process 1 with Router ID 1.1.1.1

Virtual Links

Virtual-link Neighbor-id -> 2.2.2.2, State: Full

Cost: 0 State: Full Type: Virtual

Transit Area: 0.0.0.2

Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1

Table 14-15 Description on the fields of the display ospf vlink command

Field Description

Virtual-link Neighbor-id Router ID of virtual-link neighbor router

State State

Interface IP address the interface on the virtual link

Cost

Type

Transit Area

Timers

Route cost of the interface

Type: virtual link

ID of transit area that the virtual link passes, and it cannot be backbone area, STUB area and NSSA area

OSPF timers, defining as follows:

Hello Interval of hello packet

14-29

3Com Switch 8800 Command Reference Guide

Transmit Delay

Chapter 14 OSPF Configuration Commands

Dead

Poll

Interval of dead neighbors

Interval of poll

Retransmit

Interval for retransmitting LSA on the interface

Delay time of transmitting LSA on the interface

14.1.27 filter-policy export

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name} export [ routing-protocol ]

View

OSPF view

Parameter

acl-number: Number of a basic or advanced access control list.

ip-prefix-name: Name of the address prefix list used for filtering the destination addresses in routing information.

routing-protocol: Protocol advertising the routing information, including direct, isis,

bgp, rip and static at present.

Description

Use the filter-policy export command to configure the rule used by OSPF to filter advertised routing information.

Use the undo filter-policy export command to cancel the filtering rules that have been set.

By default, no filtering of the advertised routing information is performed.

In some cases, it may be required that only the routing information meeting some conditions can be advertised. Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be advertised.

This command takes effect on the routes imported by OSPF using the import-route command. If the routing-protocol argument is specified, only the routes imported from this specified protocol are filtered. If the routing-protocol argument is not specified, all imported routes are filtered.

Related command: acl, ip ip-prefix.

14-30

3Com Switch 8800 Command Reference Guide

Example

Chapter 14 OSPF Configuration Commands

Configure OSPF to advertise only the routing information permitted by acl 2000.

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule permit source 11.0.0.0 0.255.255.255

[SW8800-acl-basic-2000] rule deny source any

[SW8800-ospf-1] filter-policy 2000 export

14.1.28 filter-policy import

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name | gateway ip-prefix-name } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name | gateway ip-prefix-name }

import

View

OSPF view

Parameter

acl-number: Number of a basic or advanced access control list used for filtering the destination addresses of the routing information.

ip-prefix-name: Name of the address prefix list used for filtering the destination addresses of the routing information.

gateway ip-prefix-name: Name of the address prefix list used for filtering the addresses of the neighboring routers advertising the routing information.

Description

Use the filter-policy import command to configure the OSPF rules of filtering the routing information received.

Use the undo filter-policy import command to cancel the filtering of the routing information received.

By default, no filtering of the received routing information is performed.

In some cases, it may be required that only the routing information meeting some conditions can be received. Then, the filter-policy command can be used to set the filtering conditions for the routing information to be received. Only the routing information passing the filtration can be received.

The filter-policy import command is used to filter the routes calculated by OSPF. Only the routes that pass the filter are added into the routing table. The command can filter the routes by next hop or by destination address.

Because OSPF is a link state-based dynamic routing protocol, its routing information is hidden in LSAs. OSPF, however, cannot filter advertised and received LSAs.

14-31

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Compared with the case with vector-based routing protocols, the use of this command is rather limited with OSPF.

Example

Filter the received routing information according to the rule defined by the access control list 2000.

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule permit source 20.0.0.0 0.255.255.255

[SW8800-acl-basic-2000] rule deny source any

[SW8800-ospf-1] filter-policy 2000 import

14.1.29 import-route

Syntax

import-route protocol [ cost value | type value | tag value | route-policy

route-policy-name ]*

undo import-route protocol

View

OSPF view

Parameter

protocol: Specifies the source routing protocol that can be imported. At present, it includes direct, rip, isis, bgp, ospf-ase, ospf-nssa and static.

cost value: Specifies the cost of imported route.

type value: Specifies the cost type of imported external routes. The value ranges from

1 to 2.

tag value: Specifies the value of tag for imported external routes.

route-policy route-policy-name: Configures only to import the routes matching the specified Route-policy.

Description

Use the import-route command to import routes from another routing protocol. Use the undo import-route command to disable OSPF to import routes from the specified routing protocol.

By default, the routing information of other protocols is not imported.

14-32

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

Note:

You are recommended to configure the route type, cost and tag together in one command. Otherwise, the new configuration overwrites the old one.

Example

Specify an imported RIP route as the route of type 2, with the route tag as 33 and the route cost as 50.

[SW8800-ospf-1] import-route rip type 2 tag 33 cost 50

14.1.30 network

Syntax

network ip-address ip-mask

undo network ip-address ip-mask

View

OSPF Area view

Parameter

Description

Use the network command to configure the interfaces running OSPF.

Use the undo network command to cancel the interfaces running OSPF.

By default, interfaces do not belong to any OSPF area.

With the two parameters, ip-address and ip-mask, one or more interfaces can be configured as an area. To run the OSPF protocol on one interface, the main IP address of this interface must belong to the network segment specified by this command. If only the secondary IP address of the interface is in the range of the network segment specified by this command, this interface will not run OSPF.

Related command: ospf.

Example

ip-address: Address of the network segment where the interface resides.

ip-mask: IP address wildcard (similar to the complement of the IP address mask), which also supports IP address mask input.

Specify the interfaces whose main IP addresses are in the segment range of

10.110.36.0 to run OSPF and specify the number of the OSPF area (where these interfaces are located) as 6.

14-33

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

[SW8800-ospf-1] area 6

[SW8800-ospf-1-area-0.0.0.6] network 10.110.36.0.0 0.0.0.255

14.1.31 nssa

Syntax

nssa [ default-route-advertise ] [ no-import-route ] [ no-summary ]*

undo nssa

View

OSPF area view

Parameter

Description

Use the nssa command to configure the type of an OSPF area as a NSSA area.

Use the undo nssa command to cancel the function.

By default, NSSA area is not configured.

For all the routers connected to the NSSA area, the command nssa must be used to configure the area as the NSSA attribute.

The default-route-advertise keyword is used to generate default type-7 LSA. No matter whether there is route 0.0.0.0 in routing table on ABR, type-7 LSA default route will be generated always. Only when there is route 0.0.0.0 in routing table on ASBR, will type-7 LSA default route be generated.

On ASBR, the no-import-route keyword enables the external route imported by OSPF through import-route command not to be advertised to NSSA area.

Example

default-route-advertise: Imports default route to NSSA area.

no-import-route: Configures not to import route to NSSA area.

no-summary: ABR is disabled to transmit summary_net LSAs to the NSSA area.

Configure area 1 as a NSSA area.

[SW8800-ospf-1] area 1

[SW8800-ospf-1-area-0.0.0.1] network 36.0.0.0 0.255.255.255

[SW8800-ospf-1-area-0.0.0.1] nssa

14.1.32 ospf

Syntax

ospf [ process-id [ router-id router-id | vpn-instance vpn-instance-name] ]

14-34

3Com Switch 8800 Command Reference Guide

undo ospf [ process-id ]

View

System view

Chapter 14 OSPF Configuration Commands

Parameter

Description

Use the ospf command to enable the OSPF protocol.

Use the undo ospf command to disable the OSPF protocol.

After starting OSPF protocol, the user can make the corresponding configuration in the

OSPF protocol view.

By default, the system does not run the OSPF protocol.

Related command: network.

Example

process-id: ID of an OSPF process, in the range 1 to 65,535. By default, the process ID is 1. process-id is locally significant.

router-id: Router ID in dotted decimal format for the specified OSPF process.

vpn-instance: Specifies VPN instance parameter.

vpn-instance-name: VPN instance name.

Enable the running of the OSPF protocol.

[SW8800] router id 10.110.1.8

[SW8800] ospf

[SW8800-ospf-1]

Enable the running of the OSPF protocol with process ID specified as 120.

[SW8800] router id 10.110.1.8

[SW8800] ospf 120

[SW8800-ospf-120]

Enable the OSPF process 120, bind the VPN instance and run the OSPF protocol.

[SW8800] ospf 120 router id 9.9.9.9 vpn-instance vpn9

[SW8800-ospf-120]

14.1.33 ospf authentication-mode

Syntax

ospf authentication-mode { simple password | md5 key-id key }

undo ospf authentication-mode { simple | md5 }

14-35

3Com Switch 8800 Command Reference Guide

View

Interface view

Chapter 14 OSPF Configuration Commands

Parameter

simple password: Enables plain text authentication and specifies a password not exceeding 8 characters.

key-id: ID of the authentication key in MD5 authentication mode in the range from 1 to

255.

key: MD5 authentication key. If it is input in a plain text form, MD5 key is a character string in the range 1 to 16 characters. It will be displayed in a cipher text form in a length of 24 characters when the display current-configuration command is executed.

Inputting the MD5 key in a cipher text form with 24 characters is also supported.

Description

Use the ospf authentication-mode command to configure the authentication mode and key between adjacent routers.

Use the undo ospf authentication-mode command to cancel the authentication key that has been set.

By default, the interface does not authenticate OSPF packets.

The passwords for authentication keys of the routers on the same network segment must be identical. In addition, using the authentication-mode command, you can set the authentication type of the area so as to validate the configuration.

Related command: authentication-mode.

Example

Set the area 1 where the network segment 131.119.0.0 of Interface Vlan-interface 1 is located to support MD5 cipher text authentication. The authentication key identifier is set to 15 and the authentication key is 3Com.

[SW8800-ospf-1] area 1

[SW8800-ospf-1-area-0.0.0.1] network 131.119.0.0 0.0.255.255

[SW8800-ospf-1-area-0.0.0.1] authentication-mode md5

[SW8800-Vlan-interface1] ospf authentication-mode md5 15 3Com

14.1.34 ospf cost

Syntax

ospf cost value

undo ospf cost

14-36

3Com Switch 8800 Command Reference Guide

View

Interface view

Chapter 14 OSPF Configuration Commands

Parameter

value: Cost for running OSPF protocol, ranging from 1 to 65,535.

Description

Use the ospf cost command to configure different message sending costs so as to send messages from different interfaces.

Use the undo ospf cost command to restore the default cost.

For a Switch 8800, the default cost for running OSPF protocol on the VLAN interface is

10.

Example

Specify the cost spent when an interface runs OSPF as 33.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] ospf cost 33

14.1.35 ospf dr-priority

Syntax

ospf dr-priority value

undo ospf dr-priority

View

Interface view

Parameter

value: Interface priority for electing the "designated router", ranging from 0 to 255. The default value is 1.

Description

Use the ospf dr-priority command to configure the priority for electing the "designated router" on an interface.

Use the undo ospf dr-priority command to restore the default value.

The priority of the interface determines the qualification of the interface when the

"designated router" is elected. The interface with higher priority will be considered first when vote collision occurs.

14-37

3Com Switch 8800 Command Reference Guide

Example

Chapter 14 OSPF Configuration Commands

Set the priority of the interface Vlan-interface 10 to 8, when electing the DR.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] ospf dr-priority 8

14.1.36 ospf mib-binding

Syntax

ospf mib-binding process-id

undo ospf mib-binding

View

System view

Parameter

process-id: ID of an OSPF process, in the range 1 to 65,535. If no OSPF process is specified, the default process ID 1 applies.

Description

Use the ospf mib-binding command to bind the MIB operation to the specified OSPF process.

Use the undo ospf mib-binding command to restore the default.

When OSPF protocol enables the first process, it always binds MIB operation to this process. You can use this command to bind MIB operation to another OSPF process.

Execute the undo ospf mib-binding command if you want to cancel the setting. OSPF will automatically re-bind MIB operation to the first process that it enables.

By default, MIB operation is bound to the first enabled OSPF process.

Example

Bind MIB operation to OSPF process 100.

[SW8800] ospf mib-binding 100

Bind MIB operation to OSPF process 200.

[SW8800] ospf mib-binding 200

Cancel the binding of MIB operation.

[SW8800] undo ospf mib-binding

14-38

3Com Switch 8800 Command Reference Guide

14.1.37 ospf mtu-enable

Chapter 14 OSPF Configuration Commands

Syntax

View

Interface view

Parameter

None

Description

Use the ospf mtu-enable command to enable the interface to write MTU value when sending DD packets.

Use the undo ospf mtu-enable command to restore the default settings.

By default, The MTU value is 0 when the interface sends DD packets, i.e. the actual

MTU value of the interface is not written.

Database Description (DD) packets are used to describe its own LSDB when the router running OSPF protocol is synchronizing the database.

The default MTU value of DD packet is 0. With this command, the specified interface can be set manually to write the MTU value area in DD packets when sending DD packets, namely, the actual MTU value of the interface is written in.

Example

ospf mtu-enable

undo ospf mtu-enable

Set interface Vlan-interface 3 to write MTU value field when sending DD packets.

[SW8800] interface Vlan-interface 3

[SW8800-Vlan-interface3] ospf mtu-enable

14.1.38 ospf network-type

Syntax

ospf network-type { broadcast | nbma | p2mp | p2p }

undo ospf network-type

View

Interface view

Parameter

broadcast: Changes the interface network type to broadcast.

14-39

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

nbma: Changes the interface network type to NBMA.

p2mp: Changes the interface network type to p2mp.

p2p: Changes the interface network type to point-to-point.

Description

Use the ospf network-type command to configure the network type of OSPF interface.

Use the undo ospf network-type command to restore the default network type of the

OSPF interface.

OSPF divides networks into four types by link layer protocol: z z z z

Broadcast: If Ethernet or FDDI is adopted, OSPF defaults the network type to broadcast.

Non-Broadcast Muli-access (nbma): If Frame Relay, ATM, HDLC or X.25 is adopted, OSPF defaults the network type to NBMA.

Point-to-Multipoint (p2mp): OSPF will not default the network type of any link layer protocol to p2mp. The general undertaking is to change a partially connected

NBMA network to p2mp network if the NBMA network is not fully-meshed.

Point-to-point (p2p): If PPP or LAPB is adopted, OSPF defaults the network type to p2p.

Change the interface type to NBMA if the router does not support multicast addresses on the broadcast network. You can also change the interface type NBMA to broadcast.

A non-broadcast network with the multi-access capability is considered an NBMA network only when it is fully meshed, meaning any two routers on it have a direct virtual circuit between them. If the network is not fully meshed, you must change the network type of the interface connected to it to p2mp. This allows two routers that are not directly reachable to exchange routing information through a router that is directly reachable for both of them.

Change the interface type to p2p if the router has only one peer on the NBMA network.

Note: When the network type of an interface is NBMA or it is changed to NBMA manually, the peer command must be used to configure the neighboring point.

Related command: ospf dr-priority.

Example

Set the interface Vlan-interface 10 to NBMA type.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] ospf network-type nbma

14.1.39 ospf timer dead

Syntax

ospf timer dead { seconds | minimal multi-hello packets }

14-40

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

undo ospf timer dead [ minimal multi-hello ]

View

Interface view

Parameter

seconds: Dead interval of the OSPF neighbor. It is in seconds and ranges from 1 to

65,535.

minimal: Specifies the port to run fast hello function.

multi-hello: Sends multiple hello packets.

packets: Number of hello packets sent within one second.

Description

Use the ospf timer dead command to configure the dead interval of the OSPF peer.

Use the undo ospf timer dead command to restore the default value of the dead interval of the peer.

By default, the dead interval for the OSPF peers of p2p and broadcast interfaces are

40 seconds, and that for those of p2mp and nbma interfaces is 120 seconds.

The dead of OSPF peers means that within this interval, if no Hello message is received from the peer, the peer will be considered to be invalid. The value of dead

seconds should be at least four times that of the Hello seconds. The dead seconds for the routers on the same network segment must be identical.

Related command: ospf timer hello.

Use the ospf timer dead minimal multi-hello packets command to set fast hello function on the port. The fixed dead interval is 1. The packets argument is the specified number of sent hello packets.

Example

Set the peer dead timer on the interface Vlan-interface 10 to 80 seconds.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] ospf timer dead 80

Configure the number of hello packets sent on the port Vlan-interface 10 within three seconds.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] ospf timer dead minimal multi-hello 3

14.1.40 ospf timer hello

Syntax

ospf timer hello seconds

14-41

3Com Switch 8800 Command Reference Guide

undo ospf timer hello

View

Chapter 14 OSPF Configuration Commands

Interface view

Parameter

seconds: Interval in seconds for an interface to transmit hello packet. It ranges from 1 to

255.

Description

Use the ospf timer hello command to configure the interval for transmitting Hello messages on an interface.

Use the undo ospf timer hello command to restore the interval to the default value.

By default, the interval is 10 seconds for an interface of p2p or broadcast type to transmit Hello messages, and 30 seconds for an interface of nbma or p2mp type.

Related command: ospf timer dead.

Example

Configure the interval for transmitting Hello messages on the interface Vlan-interface

10 to 20 seconds.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] ospf timer hello 20

14.1.41 ospf timer poll

Syntax

ospf timer poll seconds

undo ospf timer poll

View

Interface view

Parameter

seconds: Specifies the poll Hello interval, ranging from 1 to 65,535 and measured in seconds. The default value is 120 seconds.

Description

Use the ospf timer poll command to configure the poll Hello packet interval on an

NBMA or p2mp network.

Use the undo ospf timer poll command to restore the default poll interval.

14-42

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

On an NBMA or p2mp network, if a neighbor is invalid, the Hello packet will be transmitted regularly according to the poll seconds. You can configure the poll

seconds to specify how often the interface transmits Hello packet before it establishes adjacency with the adjacent router. Poll seconds should be no less than three times of

Hello.

Example

Configure to transmit poll Hello packets from interface Vlan-interface 20 every 130 seconds.

[SW8800-Vlan-interface20] ospf timer poll 130

14.1.42 ospf timer retransmit

Syntax

ospf timer retransmit interval

undo ospf timer retransmit

View

Interface view

Parameter

interval: Interval in seconds for re-transmitting LSA on an interface. It ranges from 1 to

65,535. The default value is 5 seconds.

Description

Use the ospf timer retransmit command to configure the interval for LSA re-transmitting on an interface.

Use the undo ospf timer retransmit command to restore the default interval value for

LSA re-transmitting on the interface.

If a router running OSPF transmits a "link state advertisement" (LSA) to the peer, it needs to wait for the acknowledgement packet from the peer. If no acknowledgement is received from the peer within the LSA retransmit, this LSA will be re-transmitted. This command can change the interval of re-transmitting LSA. However, according to

RFC2328, the LSA retransmit between adjacent routers should not be set too short.

Otherwise, unexpected re-transmission will be caused.

Example

Specify the retransmit for LSA transmitting between the interface Vlan-interface 10 and the adjacent routers to 12 seconds.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] ospf timer retransmit 12

14-43

3Com Switch 8800 Command Reference Guide

14.1.43 ospf trans-delay

Chapter 14 OSPF Configuration Commands

Syntax

ospf trans-delay seconds

undo ospf trans-delay

View

Interface view

Parameter

seconds: Transmitting delay of LSA on an interface. It ranges from 1 to 3600. By default, the value is 1 second.

Description

Use the ospf trans-delay command to configure the LSA transmitting delay on an interface.

Use the undo ospf trans-delay command to restore the default value of the LSA transmitting delay on an interface.

LSA will age in the "link state database" (LSDB) of the router as time goes by (add 1 for every second), but it will not age during network transmission. Therefore, it is necessary to add a period of time set by this command to the aging time of LSA before transmitting it.

Example

Specify the trans-delay of transmitting LSA on the interface Vlan-interface 10 as 3 seconds.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] ospf trans-delay 3

14.1.44 preference

Syntax

preference [ ase ] value

undo preference [ ase ]

View

Parameter

OSPF view

value: OSPF protocol route preference, ranging from 1 to 255.

ase: Indicates the preference of an imported external route of the AS.

14-44

3Com Switch 8800 Command Reference Guide

Description

Chapter 14 OSPF Configuration Commands

Use the preference command to configure the preference of an OSPF protocol route.

Use the undo preference command to restore the default value of the OSPF protocol route.

By default, the preference of an OSPF protocol internal route is 10 and the preference of an external route is 150.

Because multiple dynamic routing protocols could be running on a router, there is the problem of routing information sharing among routing protocols and selection.

Therefore, a default preference is specified for each routing protocol. When a route is identified by different protocols, the protocol with a high preference will play a decisive role.

Example

Specify the preference of an imported external route of the AS as 160.

[SW8800-ospf-1] preference ase 160

14.1.45 reset ospf

Syntax

reset ospf [ statistics ] { all | process-id }

View

User view

Parameter

statistics: Resets OSPF statistics.

all: Resets all OSPF processes.

process-id: ID of an OSPF process. If no OSPF process is specified, all OSPF processes are reset.

Description

Use the reset ospf all command to reset all OSPF processes.

Use the reset ospf process-id command to reset the corresponding OSPF process. z z z z

The following are the benefits of the reset ospf all command:

Clear invalid LSA immediately without waiting for LSA timeout.

If the Router ID changes, a new Router ID will take effect by executing the command.

Re-elect DR and BDR conveniently.

OSPF configuration before the restart will not lose.

14-45

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

The system will require the user to confirm whether to re-enable the OSPF protocol after execution of the command.

Example

Reset all the OSPF processes.

<SW8800> reset ospf all

Reset OSPF process 200.

<SW8800> reset ospf 200

14.1.46 router id

Syntax

router id router-id

undo router id

View

System view

Parameter

router-id: Router ID that is a 32-bit unsigned integer.

Description

Use the router id command to configure the ID of a router running the OSPF protocol.

Use the undo router id command to cancel the router ID that has been set.

By default, if LoopBack interface addresses exist, the system chooses the LoopBack address with the greatest IP address value as the router ID; if no LoopBack interface is configured, then the address of the physical interface with the greatest IP address value will be the router ID.

Router ID is a 32-bit unsigned integer that uniquely identifies a router in an OSPF autonomous system. The user can specify the ID for a router. If the user doesn’t specify router ID, the router will automatically select one from configured IP address as the ID of this router. If no IP address is configured for any interface of the router, the router ID must be configured in OSPF view. Otherwise, OSPF protocol cannot be enabled.

When the router ID is configured manually, the IDs of any two routers cannot be same in the autonomous system. So, the IP address of certain interface might as well be selected as the ID of this router.

Note:

The modified router ID will not be valid unless OSPF is re-enabled.

14-46

3Com Switch 8800 Command Reference Guide

Related command: ospf.

Example

Set the router ID to 10.1.1.3.

[SW8800] router id 10.1.1.3

Chapter 14 OSPF Configuration Commands

14.1.47 silent-interface

Syntax

silent-interface silent-interface-type silent-interface-number

undo silent-interface silent-interface-type silent-interface-number

View

OSPF view

Parameter

silent-interface-type: Specifies the interface type

silent-interface-number: Specifies the interface number.

Description

Use the silent-interface command to disable an interface to transmit OSPF packets.

Use the undo silent-interface command to restore the default setting.

By default, the interface is enabled to transmit OSPF packets.

You can use this command to disable an interface to transmit OSPF packets, so as to prevent the router on some network from receiving the OSPF routing information. On a switch, this command can disable/enable a VLAN interface to send OSPF packets.

Example

Disable interface Vlan-interface 20 to transmit OSPF packets.

[SW8800-ospf-1] silent-interface Vlan-interface 20

14.1.48 sham-link

Syntax

sham-link source-ip destination-ip dead minimal multi-hello packets

undo sham-link source-ip destination-ip

View

OSPF area view

14-47

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 14 OSPF Configuration Commands

sham-link: Sham-link link.

source-ip: Source IP address.

destination-ip: Destination IP address.

dead: Dead interval time.

minimal: Sends multiple hello packets within 1 second. The fixed dead interval is 1 second.

multi-hello: Sends multiple hello packets.

packets: Number of sent hello packets, in the range of 3 to 10.

Description

Use the sham-link command to run fast hello function on the sham-link link, that is, to specify multiple fast hello packets to be sent within one second. The default dead interval time is one second.

Example

Specify the sham-link link 1.1.1.1 2.2.2.2 to run fast hello function. The dead interval time is one second. Five hello packets are sent within one second.

[SW8800-ospf-1] area 0.0.0.0

[SW8800-ospf-1-area-0.0.0.0] sham-link 1.1.1.1 2.2.2.2 dead minimal multi-hello 5

14.1.49 snmp-agent trap enable ospf

Syntax

snmp-agent trap enable ospf [ process-id ] [ ifstatechange | virifstatechange |

nbrstatechange | virnbrstatechange | ifcfgerror | virifcfgerror | ifauthfail |

virifauthfail | ifrxbadpkt | virifrxbadpkt | txretransmit | viriftxretransmit |

originatelsa | maxagelsa | lsdboverflow | lsdbapproachoverflow ]

undo snmp-agent trap enable ospf [ process-id ] [ ifstatechange | virifstatechange

| nbrstatechange | virnbrstatechange | ifcfgerror | virifcfgerror | ifauthfail |

virifauthfail | ifrxbadpkt | virifrxbadpkt | txretransmit | viriftxretransmit |

originatelsa | maxagelsa | lsdboverflow | lsdbapproachoverflow ]

View

Parameter

System view

process-id: ID of an OSPF process. The command is applied to all current OSPF processes if you do not specify a process ID.

14-48

3Com Switch 8800 Command Reference Guide Chapter 14 OSPF Configuration Commands

ifstatechange, virifstatechange, nbrstatechange, virnbrstatechange, ifcfgerror,

virifcfgerror, ifauthfail, virifauthfail, ifrxbadpkt, virifrxbadpkt, txretransmit,

viriftxretransmit, originatelsa, maxagelsa, lsdboverflow, lsdbapproachoverflow:

Types of TRAP packets that the switch produces in case of OSPF anomalies.

Description

Use the snmp-agent trap enable ospf command to enable the OSPF TRAP function.

Use the undo snmp-agent trap enable ospf command to disable the OSPF TRAP function.

This command cannot be applied to the OSPF processes that are started after the command is executed.

By default, the switch does not send TRAP packets in case of OSPF anomalies.

For detailed configuration of SNMP TRAP, refer to the module “System Management" in this manual.

Example

Enable the TRAP function for OSPF process 100.

<SW8800> snmp-agent trap enable ospf 100

14.1.50 spf-schedule-interval

Syntax

spf-schedule-interval interval

undo spf-schedule-interval

View

OSPF view

Parameter

interval: SPF calculation interval of OSPF, which is in the range of 1 to 10 and is measured in seconds. The default value is five seconds.

Description

Use the spf-schedule-interval command to configure the route calculation interval of

OSPF.

Use the undo spf-schedule-interval command to restore the default setting.

According to the Link State Database (LSDB), the router running OSPF can calculate the shortest path tree taking itself as the root and determine the next hop to the destination network according to the shortest path tree. By adjusting SPF calculation interval, frequent network change can be restrained, which may lead to excessive bandwidth and router resource consumption.

14-49

3Com Switch 8800 Command Reference Guide

Example

Chapter 14 OSPF Configuration Commands

Set the OSPF route calculation interval to six seconds.

[SW8800-ospf-1] spf-schedule-interval 6

14.1.51 stub

Syntax

stub [ no-summary ]

undo stub

View

OSPF area view

Parameter

no-summary: ABR is disabled to transmit Summary LSAs to the STUB area.

Description

Use the stub command to configure the type of an OSPF area as “stub”.

Use the undo stub command to cancel the settings.

By default, no area is set to be the STUB area.

If the router is an ABR, it will send a default route to the connected stub area. Using the

default-cost command, you can configure the default route cost.

In addition, on an ABR, you can configure the no-summary argument in the stub command to prevent type-3 LSAs from entering the stub area connected to this ABR.

Related command: default-cost.

Example

Set the type of OSPF area 1 to the STUB area.

[SW8800-ospf-1] area 1

[SW8800-ospf-1-area-0.0.0.1] stub

14.1.52 vlink-peer

Syntax

vlink-peer router-id [ dead { seconds | minimal multi-hello packets } | retransmit

seconds | trans-delay seconds | hello seconds | simple password | md5 keyid key ]*

undo vlink-peer router-id

View

OSPF area view

14-50

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 14 OSPF Configuration Commands

route-id: Router ID of virtual link peer.

dead seconds: Specifies the interval of death timer. It ranges from 1 to 8192 seconds.

This value must equal the dead seconds of the router virtually linked to it and must be at least four times of the hello seconds. The default value is 40 seconds.

dead minimal multi-hello packets: Specifies the virtual link to run fast hello function.

The default dead is 1 second. The packets argument refers to the number of hello packets sent within 1 second, in the range of 3 to 10.

retransmit seconds: Specifies the interval for re-transmitting the LSA packets on an interface. It ranges from 1 to 8192 seconds. The default value is 5 seconds.

trans-delay seconds: Specifies the interval for delaying transmitting LSA packets on an interface. It ranges from 1 to 8192 seconds. By default, the value is 1 second.

hello seconds: Specifies the interval for sending Hello packets on an interface. It ranges from 1 to 8,192 (in seconds). This value must equal the hello seconds value of the router virtually linked to the interface. By default, the value is 10 seconds.

simple password: Specifies the simple text authentication password, not exceeding 8 characters, of the interface. This value must equal the authentication key of the virtually linked peer.

keyid: Specifies the MD5 authentication key ID. Its value ranges from 1 to 255. It must be equal to the authentication key ID of the virtually linked peer.

key: Specifies the MD5 authentication key. If it is input in a plain text form, MD5 key is a character string in the range 1 to 16 characters. It will be displayed in a cipher text form in a length of 24 characters when the display current-configuration command is executed. Inputting the MD5 key in a cipher text form with 24 characters is also supported.

Description

Use the vlink-peer command to create and configure a virtual link.

Use the undo vlink-peer command to cancel an existing virtual link.

According to RFC2328, the OSPF area should be connected with the backbone network. You can use the vlink-peer command to keep the connectivity. Virtual link can be regarded as a common interface that uses OSPF so that you can easily understand why to configure the parameters such as hello, retransmit, and trans-delay on it.

One thing should be mentioned. When configuring virtual link authentication, the

authentication-mode command is used to set the authentication mode as MD5 cipher text or simple text on the backbone network.

Related command: authentication-mode, display ospf.

14-51

3Com Switch 8800 Command Reference Guide

Example

Chapter 14 OSPF Configuration Commands

Create a virtual link to 10.110.0.3 and use the MD5 cipher authentication mode.

[SW8800-ospf-1] area 10.0.0.0

[SW8800-ospf-1-area-10.0.0.0] vlink-peer 10.110.0.3 md5 3 345

Specify this virtual link to run fast hello function and send five hello packets.

[SW8800-ospf-1-area-10.0.0.0] vlink-peer 10.110.0.3 dead minimal multi-hello

5

14-52

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

Chapter 15 Integrated IS-IS Configuration

Commands

Note:

When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch

8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.

For the configuration of VPN instance, refer to the MPLS module in the 3Com Switch

8800 Configuration Guide.

15.1 Integrated IS-IS Configuration Commands

15.1.1 area-authentication-mode

Syntax

area-authentication-mode { simple | md5 } password [ ip | osi ]

undo area-authentication-mode { simple | md5 } [ ip | osi ]

View

IS-IS view

Parameter

simple: Configures to transmit the password in simple text.

md5: Configures to transmit the password encrypted with MD5 algorithm.

password: Configures a password. If simple authentication is used, the password must be a simple-text password. If MD5 authentication is used, the password can be a simple-text or a cipher-text password. A simple-text password can be a character string with no more than 16 characters, for example, 3Com918. Note that the simple-text password defined for MD5 authentication is displayed in cipher text. A cipher-text password must have 24 characters in cipher text, for example,

(TT8F]Y\5SQ=^Q`MAF4<1!!.

ip: If this argument is configured, the system checks the corresponding IP field in LSP.

15-1

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

osi: If this argument is configured, the system checks the corresponding OSI field in

LSP.

The configuration of ip or osi authentication password is independent of the real network environment.

Description

Use the area-authentication-mode command to configure ISIS to authenticate the received level-1 routing information packets (LSP, CSNP and PSNP), according to the pre-defined mode and password.

Use the undo area-authentication-mode command to configure ISIS not to authenticate the said packets.

In default configuration, the system will not authenticate the received level-1 routing packets, and there is no password. By using this command, all the level-1 routing packets, whose area authentication passwords do not consistent with the one set via this command will not be received. At the same time, this command will let ISIS insert the area authentication password into all the level-1 routing packets sent by this node, in a certain mode.

Related command: reset isis all, domain-authentication-mode, isis

authentication-mode.

Example

Set the area authentication password as “hello” and the authentication type as simple.

[SW8800] isis

[SW8800-isis] area-authentication-mode simple hello

15.1.2 cost-style

Syntax

cost-style { narrow | wide | wide-compatible | { compatible | narrow-compatible }

[ relax-spf-limit ] }

undo cost-style

View

Parameter

IS-IS view

narrow: Only receives/sends packets whose cost type is narrow

wide: Only receives/sends packets whose cost type is wide.

compatible: Receives/sends packets whose cost type is narrow or wide.

15-2

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

narrow-compatible: Receives packets whose cost type is narrow or wide, but only sends packets whose cost type is narrow

wide-compatible: Receives packets whose cost type is narrow or wide, but only sends packets whose cost type is wide.

relax-spf-metric: Permits to receive routes whose cost value is larger than 1024. If it is not set, routes whose metrics values are larger than 1024 will be discarded. This setting is only valid for compatible, narrow-compatible and wide-compatible.

Description

Use the cost-style command to set the cost type of an IS-IS packet received/sent by the router.

Use the undo cost-style command to restore the default settings.

By default, IS-IS only receives/sends packets whose cost type is narrow.

Related command: isis cost.

Example

Set IS-IS to receive packets whose cost type is narrow or wide, but only send packets whose cost type is narrow.

[SW8800] isis

[SW8800-isis] cost-style narrow-compatible

15.1.3 debugging isis

Syntax

debugging isis { adjacency | all | authentication-error | checksum-error |

circuit-information

| configuration-error | datalink-receiving-packet |

datalink-sending-packet

| general-error | interface-information |

memory-allocating

| receiving-packet-content | self-originate-update |

sending-packet-content | snp-packet | spf-event | spf-summary | spf-timer |

task-error | timer | update-packet }

undo debugging isis { adjacency | all | authentication-error | checksum-error |

circuit-information

| configuration-error | datalink-receiving-packet |

datalink-sending-packet

| general-error | interface-information |

memory-allocating

| receiving-packet-content | self-originate-update |

sending-packet-content | snp-packet | spf-event | spf-summary | spf-timer |

task-error | timer | update-packet }

View

User view

15-3

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 15 Integrated IS-IS Configuration Commands

adjacency: IS-IS adjacency related packets.

all: All IS-IS related debugging information.

authentication-error: IS-IS authentication errors.

checksum-error: IS-IS checksum errors.

circuit-information: Information about IS-IS enabled interface.

configuration-error: IS-IS configuration errors.

datalink-receiving-packet: Data link layer's packets-receiving status.

datalink-sending-packet: Data link layer's packets-sending status.

general-error: IS-IS error information.

interface-information: Information about IS-IS enabled data link layer.

memory-allocating: IS-IS memory allocating status.

receiving-packet-content: Packets received through IS-IS protocol.

self-originate-update: Packets locally updated through IS-IS protocol.

sending-packet-content: Packets sent through IS-IS protocol.

snp-packet: CSNP/PSNP packet of IS-IS.

spf-event: IS-IS SPF events.

spf-summary: Statistics about IS-IS performing SPF calculation.

spf-timer: IS-IS SPF trigger events.

task-error: IS-IS events status.

timer: IS-IS timer.

update-packet: Updated packets through IS-IS protocol.

Description

Use the debugging isis command to enable IS-IS debugging.

Use the undo debugging isis command to disable the function.

Example

Enable all the information debugging of IS-IS.

<SW8800> debugging isis all

15.1.4 default-route-advertise

Syntax

default-route-advertise [ route-policy route-policy-name ]

undo default-route-advertise [ route-policy route-policy-name ]

15-4

3Com Switch 8800 Command Reference Guide

View

IS-IS view

Chapter 15 Integrated IS-IS Configuration Commands

Parameter

route-policy-name: Name of a route-policy.

Description

Use the default-route-advertise command to create the default route of L1, L2 router.

Use the undo default-route-advertise command to cancel this configuration.

By default, L2 router creates the default route.

This command can be set on L1 router or L2 router. By default, the route is generated on L2 LSP. If the apply isis level-1 command is executed in route-policy view, the default route will be generated on L1 LSP. If the apply isis level-2 command is executed in Route-policy view, the default route will be generated on L2 LSP. If the

apply isis level-1-2 command is executed in route-policy view, the default route will be generated on both L1 LSP and L2 LSP.

Example

Set the router to create the default route in the LSP of correspond level.

[SW8800-isis] default-route-advertise

15.1.5 display isis interface

Syntax

display isis interface [ verbose ]

View

Any view

Parameter

verbose: If this parameter is used, the details of the interface will be displayed.

Description

Use the display isis interface command to view the information of the enabled IS-IS interface.

This command displays the information of the enabled IS-IS interface, including interface name, IP address of the interface, link state of the interface and so on.

Besides displaying all the information shown by the display isis interface command, the display isis interface verbose command displays such information about the

IS-IS parameters of the interface as CSNP packet broadcast interval, Hello packet broadcast interval and invalid number of Hello packet.

15-5

3Com Switch 8800 Command Reference Guide

Example

Chapter 15 Integrated IS-IS Configuration Commands

Display the information about the enabled IS-IS interface.

<SW8800> display isis interface

Interface IP Address Id Link.Sta IP.Sta MTU Type DIS

Vlan-interface1 172.16.1.2 001 Up Up 1497 L1 Yes

Display the details of the IS-IS enabled interface.

<SW8800> display isis interface verbose

Interface IP Address Id Link.Sta IP.Sta MTU Type DIS

Vlan-interface1 172.16.1.2 001 Up

Secondary IP Address :

Up 1497 L1 Yes

SNPA Address : 00e0.fc44.5f71

Csnp Interval : L1 10 L2 10

Hello Interval : L1 10 L2 10

Hold Time : L1 30 L2 30

Lsp Interval : 33

Cost : L1 10 L2 10

Priority : L1 64 L2 64

Retransmission interval : 5

15.1.6 display isis lsdb

Syntax

display isis lsdb [ [ l1 | l2 | level-1 | level-2 ] | [ [ LSPID | local ] | verbose ]* ]*

View

Any view

Parameter

l1 and Level-1: Both refer to the link state database of level-1.

l2 and level-2: Both refer to the link state database of level-2.

LSPID: Specifies the LSPID of the Network-entity-title.

local: Displays the LSP information generated locally.

verbose: Configures to display the verbose information of the link state database.

Description

Use the display isis lsdb command to view the link state database of the IS-IS.

Example

Display the information of an LSP.

<SW8800> display isis lsdb 0050.0500.5005.00-00

15-6

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

IS-IS Level-1 Link State Database

Lsp ID Sequence Holdtime A_P_O Checksum

>0050.0500.5005.00-00 0x00000328 780 0_0_0 0xf211

15.1.7 display isis mesh-group

Syntax display isis mesh-group

View

Any view

Parameter

None

Description

Use the display isis mesh-group command to view the IS-IS mesh group.

This command is used for displaying the configurations of the mesh-group of the current router interface.

Example

Add Interface Vlan-interface 10 and Interface Vlan-interface 20 running IS-IS into mesh group 100.

[SW8800-Vlan-interface10] isis mesh-group 100

[SW8800] interface Vlan-interface 20

[SW8800-Vlan-interface20] isis mesh-group 100

Display the information of IS-IS mesh-group.

[SW8800-Vlan-interface20] display isis mesh-group

Interface Mesh-group/Blocked

Vlan-interface 10 100

Vlan-interface 20 100

15.1.8 display isis peer

Syntax

display isis peer [ verbose ]

View

Any view

15-7

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 15 Integrated IS-IS Configuration Commands

verbose: When this parameter is configured, the area address carried in the Hello packet from the neighbor will be displayed. Otherwise, only the universal information will be displayed.

Description

Use the display isis peer command to view IS-IS peer information.

The display isis peer verbose command yields not only all the outputs of the display

isis peer command, but also the area address, Uptime and IP address of the directly connected interface of the peer.

Example

Display detailed information about IS-IS neighbors.

<SW8800> display isis peer verbose

System ID Interface Circuit ID State HoldTime Type Pri

0002.0000.0000 Vlan-interface251 0002.0000.0000.0a Up 6s L1 64

Area Address: 00.0001

IP Address: 192.3.1.3 192.4.1.3 192.5.1.3 192.6.1.3 192.7.1.3 192.8.1.3

192.9.1.3 192.10.1.3 192.11.1.3

Period: 22:27:42

System ID Interface Circuit ID State HoldTime Type Pri

0003.0000.0000 Vlan-interface251 0002.0000.0000.0a Up 22s L1 64

Area Address: 00.0001

IP Address: 192.3.1.2

Period: 22:31:18

View IS-IS peer Information.

<SW8800> display isis peer

System ID Interface Circuit ID State HoldTime Type Pri

0002.0000.0000 Vlan-interface251 0002.0000.0000.0a Up 6s L1 64

0003.0000.0000 Vlan-interface251 0002.0000.0000.0a Up 22s L1 64

15.1.9 display isis route

Syntax

display isis route

View

Any view

15-8

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 15 Integrated IS-IS Configuration Commands

Description

Use the display isis route command to view IS-IS routing information. .

Example

View IS-IS routing information.

<SW8800> display isis route

ISIS Level - 1 Forwarding Table :

Type - D -Direct, C -Connected, I -ISIS, S -Static, O -OSPF

B -BGP, R -RIP

Flags: R-Added to RM, L-Advertised in LSPs, U-Up/Down Bit Set

Destination/Mask In.Met Ex.Met NextHop Interface Flags

--------------------------------------------------------------------------

I 3.3.3.0/24 20 7.7.7.7 Vlan-interface1000

R/-/-

6.6.6.6 Vlan-interface1001

I 0.0.0.0/0 10 7.7.7.7 Vlan-interface1000

R/-/-

6.6.6.6 Vlan-interface1001

D 7.7.7.0/25 10 Direct Vlan-interface1000

R/L/-

D 6.6.6.0/24 10 Direct Vlan-interface1001

R/L/-

I 10.1.1.0/24 10 7.7.7.7 Vlan-interface1000

R/-/-

6.6.6.6 Vlan-interface1001

15.1.10 display isis spf-log

Syntax

display isis spf-log

View

Parameter

Any view

None

15-9

3Com Switch 8800 Command Reference Guide

Description

Chapter 15 Integrated IS-IS Configuration Commands

Use the display isis spf-log command to view the SPF calculation log information of the IS-IS. .

Example

View the SPF calculation log of IS-IS.

<SW8800> display isis spf-log

Details of Level 1 SPF Run:

-------------------------------------------------------------------------

Trig.Event No.Of Nodes Duration(ms) StartTime

IS_SPFTRIG_LSPCHANGE 2 19 1:12:1

IS_SPFTRIG_LSPCHANGE 2 19 1:11:58

IS_SPFTRIG_LSPCHANGE 2 18 1:11:53

IS_SPFTRIG_CIRC_DOWN 2 19 1:11:46

IS_SPFTRIG_NEWADJ 2 20 1:11:39

IS_SPFTRIG_LSPCHANGE 2 19 1:11:35

IS_SPFTRIG_PERIODIC 3 18 1:3:25

IS_SPFTRIG_LSPCHANGE 2 22 0:55:51

IS_SPFTRIG_LSPCHANGE 2 18 0:55:46

IS_SPFTRIG_ADJDOWN 2 19 0:55:23

IS_SPFTRIG_NEWADJ 2 18 0:54:16

IS_SPFTRIG_LSPCHANGE 2 20 0:54:12

IS_SPFTRIG_LSPCHANGE 3 19 0:54:7

IS_SPFTRIG_PERIODIC 3 21 0:48:25

IS_SPFTRIG_LSPEXPIRED 3 19 0:34:10

IS_SPFTRIG_PERIODIC 3 19 0:33:25

IS_SPFTRIG_PERIODIC 3 18 0:18:25

IS_SPFTRIG_LSPCHANGE 3 19 0:13:26

IS_SPFTRIG_PERIODIC 3 19 0:3:25

IS_SPFTRIG_LSPCHANGE 2 19 1:12:7

15.1.11 domain-authentication-mode

Syntax

domain-authentication-mode { simple | md5 } password [ ip | osi ]

undo domain-authentication-mode { simple | md5 } [ ip | osi ]

View

IS-IS view

Parameter

simple: Configures to transmit the password in plain text.

15-10

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

md5: Configures to transmit the password encrypted with MD5 algorithm.

password: Configures a password. If simple authentication is used, the password must be a simple-text password. If MD5 authentication is used, the password can be a simple-text or a cipher-text password. A simple-text password can be a character string with no more than 16 characters, for example, 3Com918. Note that the simple-text password defined for MD5 authentication is displayed in cipher text. A cipher-text password must have 24 characters in cipher text, for example,

(TT8F]Y\5SQ=^Q`MAF4<1!!.

password: Specifies the authentication password which can be a character string with 1 to 16 characters. If md5 is specified, the password will be displayed in a cipher text form with 24 characters when the display current-configuration command is executed. Inputting password in a cipher text form with 24 characters is also supported.

ip: If this item is configured, the system checks the configuration of the corresponded field of the IP in LSP.

osi: If this item is configured, the system checks the configuration of the corresponded field of the OSI in LSP.

The configuration of ip or osi is independent of the real network environment.

Description

Use the domain-authentication-mode command to configure the IS-IS routing domain to authenticate the received level-2 routing packets (LSP, CSNP, PSNP), according to the pre-defined mode and password.

Use the undo domain-authentication-mode command to configure IS-IS not to authenticate the said packets.

In default configuration, the system will not authenticate the received level-2 routing packets, and there is no password. By using this command, all the level-2 routing packets, whose domain authentication passwords do not consist with the one set via this command will not be received. At the same time, this command will let IS-IS insert the domain authentication password into all the level-2 routing packets sent by this node, in a certain mode.

Related command: area-authentication-mode, isis authentication-mode.

Example

When you need to authenticate the level-2 routing packets, you can select the simple mode, and the password is “3Com”.

[SW8800] isis

[SW8800-isis] domain-authentication-mode simple 3Com

15-11

3Com Switch 8800 Command Reference Guide

15.1.12 filter-policy export

Chapter 15 Integrated IS-IS Configuration Commands

Syntax

filter-policy acl-number export [ protocol ]

undo filter-policy acl-number export [ protocol ]

View

IS-IS view

Parameter

acl-number: Specifies the number of the access control list, ranging from 2000 to 3999.

protocol: Specifies the protocols that distribute routing information, including direct, static, rip, bgp, ospf, ospf-nssa and ospf-ase. If it does not specify any protocol, the distributed routes of all the protocols will be filtered.

Description

Use the filter-policy export command to configure to filter the routes distributed by

IS-IS.

Use the undo filter-policy export command to cancel the filtering for the exporting routes.

By default, IS-IS does not filter any distributed routing information.

In some cases, only the routing information meeting the specified conditions will be distributed. You can configure the filter-policy to specify the filter conditions so as to distribute the desired routing information only.

Related command: filter-policy import.

Example

Use ACL 2000 to filter the routes distributed by IS-IS.

[SW8800-isis] filter-policy 2000 export

15.1.13 filter-policy import

Syntax

filter-policy acl-number import

undo filter-policy acl-number import

View

IS-IS view

15-12

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 15 Integrated IS-IS Configuration Commands

acl-number: Specifies the number of the access control list, ranging from 2000 to 3999.

Description

Use the filter-policy import command to configure to filter the routes received by IS-IS.

Use the undo filter-policy import command to configure not to filter the received routes.

By default, IS-IS does not filter the received routing information.

In some cases, only the routing information meeting the specified conditions will be accepted. You can configure the filter-policy to specify the filter conditions so as to accept the desired routing information only.

Related command: filter-policy export.

Example

Filter the received routes by using ACL 2000.

[SW8800-isis] filter-policy 2000 import

15.1.14 ignore-lsp-checksum-error

Syntax

ignore-lsp-checksum-error

undo ignore-lsp-checksum-error

View

IS-IS view

Parameter

None

Description

Use the ignore-lsp-checksum-error command to configure the IS-IS to discard LSPs with checksum errors.

Use the undo ignore-lsp-checksum-error command to configure the IS-IS to ignore the checksum error of LSP.

By default, the checksum error of LSP is ignored.

After receiving an LSP packet, the local IS-IS will calculate its checksum and compares the result with the checksum in the LSP packet. This process is the checksum authentication over the received LSP. By default, though the checksum in the packet is found not in consistent with the calculated result, the LSP is processed as normal.

However, after not ignoring LSP checksum error is set with the

15-13

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

ignore-lsp-checksum-error command, the LSP packet will be discarded silently if the checksum error is found.

Example

Discard the LSPs with checksum errors.

[SW8800-isis] ignore-lsp-checksum-error

15.1.15 import-route

Syntax

import-route protocol [ cost value | type { external | internal } | [ level-1 | level-1-2 |

level-2 ] | route-policy route-policy-name ]*

undo import-route protocol [ cost value | type { external | internal } | [ level-1 |

level-1-2 | level-2 ] | route-policy route-policy-name ]*

View

IS-IS view

Parameter

protocol: Specifies the source protocol for importing the routing information, which can be direct, static, rip, bgp, ospf, ospf-ase, and ospf-nssa.

value: Specifies the metric of the imported route, ranging from 0 to 63.

type: Type of routing cost: internal indicates the routing cost in the same area;

external indicates the routing cost among areas. By default, the routing cost is

internal.

level-1: Configures to import the route into Level-1 routing table.

level-2: Configures to import the route into Level-2 routing table. If the level is not specified, it defaults to importing the routes into level-2.

level-1-2: Configures to import the route into Level-1 and Level-2 routing table.

route-policy route-policy-name: Configures to import the routes matching the conditions defined in the specified route-policy only.

Description

Use the import-route command to configure IS-IS to import the routing information of other protocols.

Using the undo import-route command to disable IS-IS to import routing information from other protocols.

By default, IS-IS does not import the routing information of other protocols.

IS-IS regards all the routes imported into the routing domain as the external routes, which describe the way of routing outside the routing domain.

15-14

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

Related command: import-route isis level-2 into level-1.

Example

Import the static route. The cost value is 15.

[SW8800-isis] import-route static cost ip 15

15.1.16 import-route isis level-2 into level-1

Syntax

import-route isis level-2 into level-1 [ acl acl-number ]

undo import-route isis level-2 into level-1 [ acl acl-number ]

View

IS-IS view

Parameter

acl-number: ACL number. It is in the range of 2000 to 3999, which means basic ACLs and advanced ACLs can be used.

Description

Use the import-route isis level-2 into level-1 command to enable routing information in a Level-2 area to be imported to a Level-1 area.

Use the undo import-route isis level-2 into level-1 command to remove the function.

During routing leak configuration from Level-2 to Level-1, only the routes that are permitted by ACL can be imported to Level-1 area if an ACL has been specified.

By default, routing information in a Level-2 area is not imported to a Level-1 area.

Related command: import-route.

Example

Import routing information of a router from a Level-2 area to a Level-1 area.

[SW8800] isis

[SW8800-isis] import-route isis level2 into level1 acl 2100

15.1.17 isis

Syntax

isis [ tag ]

undo isis [ tag ]

15-15

3Com Switch 8800 Command Reference Guide

View

System view

Chapter 15 Integrated IS-IS Configuration Commands

Parameter

tag: The name given to the ISIS process. The name length should be no longer than

128 characters, and it can be 0, which means null.

Description

Use the isis command to start the corresponding IS-IS routing process and enter the

ISIS view.

Use the undo isis command to delete the specified IS-IS routing process.

By default, IS-IS routing process is not started

For the normal operation of the IS-IS protocol, the isis command must be used to enable the IS-IS process. Then the network-entity command is used to set a Network

Entity Title (NET) for the router. And, at last, the isis enable command is used to enable each interface which needs to run an IS-IS process. The IS-IS protocol is actually enabled upon the completion of these configurations.

Note:

Only one IS-IS routing process can be started on one router.

Related command: isis enable, network-entity.

Example

Start an IS-IS routing process, in which the system ID is 0000.0000.0002 and the area

ID is 01.0001.

[SW8800] isis

[SW8800-isis] network-entity 01.0001.0000.0000.0002.00

15.1.18 isis authentication-mode

Syntax

isis authentication-mode { simple | md5 } password [ { level-1 | level-2 } [ ip | osi ] ]

undo isis authentication-mode { simple | md5 } password [ { level-1 | level-2 } [ ip |

osi ] ]

View

VLAN interface view

15-16

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 15 Integrated IS-IS Configuration Commands

simple: Configures to transmit the password in plain text.

md5: Configures to transmit the password encrypted with MD5 algorithm.

password: Configures a password. If simple authentication is used, the password must be a simple-text password. If MD5 authentication is used, the password can be a simple-text or a cipher-text password. A simple-text password can be a character string with no more than 16 characters, for example, 3Com918. Note that the simple-text password defined for MD5 authentication is displayed in cipher text. A cipher-text password must have 24 characters in cipher text, for example,

(TT8F]Y\5SQ=^Q`MAF4<1!!.

level-1: Configures authentication password for L1.

level-2: Configures authentication password for L2.

ip: If this item is configured, the system checks the configuration of the corresponded field of the IP in LSP.

osi: If this item is configured, the system checks the configuration of the corresponded field of the OSI in LSP.

The configuration of ip or osi is independent of the real network environment.

Description

Use the isis authentication-mode command to configure the IS-IS to authenticate the hello packets of the corresponding level, in the specified mode and with the specified password on the IS-IS interface.

Use the undo isis authentication-mode command to cancel the authentication and delete the password at the same time.

By default, the password is not set and no authentication is executed.

If the password is set, but no parameter is specified, the default settings are level-1, plaintext and osi.

Related command: area-authentication-mode, domain-authentication-mode.

Example

Set the authentication password “tangshi” in plain text for the Level-1 neighboring relationship on Interface Vlan-interface 10.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis authentication-mode simple tangshi level-1

15.1.19 isis circuit-level

Syntax

isis circuit-level [ level-1 | level-1-2 | level-2 ]

15-17

3Com Switch 8800 Command Reference Guide

undo isis circuit-level

View

Interface view

Parameter

Chapter 15 Integrated IS-IS Configuration Commands

level-1: Configures Level-1, instead of Level-2, adjacency on the current interface only.

level-1-2: Configures Level-1-2 adjacency on the current interface.

level-2: Configures Level-2 adjacency on the current interface only.

Description

Use the isis circuit-level command to have the level-1-2 router set up link adjacency with the peer router.

Use the undo isis circuit-level command to restore the default setting of the link adjacency on the level-1-2 router.

By default, the value is level-1-2.

This command is only applicable to level-1-2 routers. If the local router is a level-1-2 router and it is required to establish a correlation with the peer router on a certain level

(level-1 or level-2), this command can specify the interface to send and receive hello packets of this level. Certainly, only one type of hello packet is sent and received on the point-to-point link. In this way, excessive processing is avoided, and the bandwidth is saved.

Related command: is-level.

Example

When interface Vlan-interface 10 is connected with a non-backbone router in the same area, you can set this interface as level-1, prohibiting the sending and receiving of level-2 hello packets.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis enable

[SW8800-Vlan-interface10] isis circuit-level level-1

15.1.20 isis cost

Syntax

isis cost value [ level-1 | level-2 ]

undo isis cost [ level-1 | level-2 ]

View

Interface view

15-18

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 15 Integrated IS-IS Configuration Commands

value: Specifies the link cost used in the SPF calculation of corresponding level. Its range is 0 to 63. By default, the value is 10.

level-1: Indicates that the link cost corresponds to level-1.

level-2: Indicates that the link cost corresponds to level-2

Description

Use the isis cost command to configure the link cost of this interface when performing

SPF calculation.

Use the undo isis cost command to restore the default link cost.

If neither Level 1 nor Level 2 is specified in the configuration, level-1 will be the default value.

The user is recommended to configure the appropriate link cost for all the interfaces.

Otherwise, the link cost in the calculation of IS-IS routes cannot reflect the link cost.

Example

Set the link cost of the Level-2 link on Interface Vlan-interface 10 to 5.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis cost 5 level-2

15.1.21 isis dis-priority

Syntax

isis dis-priority value [ level-1 | level-2 ]

undo isis dis-priority [ level-1 | level-2 ]

View

Interface view

Parameter

value: The priority when selecting DIS. Its value ranges 0 to 127, and the default priority is 64.

level-1: Specifies the priority when selecting level-1 DIS.

level-2: Specifies the priority when selecting level-2 DIS.

If the level is not specified, it defaults to setting the Level-1 priority.

Description

Use the isis dis-priority command to configure the priority of an interface for the DIS election.

15-19

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

Use the undo isis dis-priority command to restore the default priority.

The IS-IS protocol does not concern the concept of backup DIS. The router with the priority 0 can also run for the DIS, which is different from the DR election of OSPF.

Related command: area-authentication-mode, domain-authentication-mode.

Example

Set the priority of Interface Vlan-interface 10 to 127.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis dis-priority 127 level-2

15.1.22 isis enable

Syntax

isis enable [ tag ]

undo isis enable [ tag ]

View

Interface view

Parameter

tag: The name given to an IS-IS routing process, when executing the isis command in the system view. If not specified, it is null.

Description

Use the isis enable command to configure the interface to activate the corresponding

IS-IS routing process.

Use the undo isis enable command to cancel this designation.

By default, the IS-IS routing process is not enabled on an interface.

For the normal operation of the IS-IS protocol, the isis command must be used to enable the IS-IS process. Then the network-entity command is used to set a Network

Entity Title (NET) for the router. And, at last, the isis enable command is used to enable each interface which needs to run the IS-IS process. The IS-IS protocol is actually enabled upon the completion of these configurations.

Related command: isis, network-entity.

Example

Create an IS-IS routing process named “3Com”, and activate this routing process on interface Vlan-interface 10.

[SW8800] isis 3Com

[SW8800-isis] network-entity 10.0001.1010.1020.1030.00

15-20

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis enable 3Com

15.1.23 isis mesh-group

Syntax

isis mesh-group { mesh-group-number | mesh-blocked }

undo isis mesh-group

View

Interface view

Parameter

mesh-group-number: Specifies the mesh group number, ranging from 1 to

4,294,967,295.

mesh-blocked: Configures to block a specified interface, so that it will not flood the received LSP to other interfaces.

Description

Use the isis mesh-group command to add an interface to a specified mesh group.

Use the undo isis mesh-group command to delete this interface from the mesh group.

By default, the interface does not belong to any mesh group and floods LSP normally.

The interface beyond the mesh group floods the received LSP to other interfaces, following the normal procedure. This processing method applied to an NBMA network with higher connectivity and several point-to-point links will cause repeated LSP flooding and waste bandwidth.

The interface joining a mesh group only floods the received LSP to the interfaces beyond the local mesh group.

Make sure to provide some redundancy when adding an interface to a mesh group or blocking it, avoiding the affect to the normal flooding of the LSP due to link failure.

Example

Add Vlan-interface 20 running IS-IS to mesh group 3.

[SW8800-Vlan-interface20] isis mesh-group 3

15.1.24 isis timer csnp

Syntax

isis timer csnp seconds [ level-1 | level-2 ]

undo isis timer csnp [ level-1 | level-2 ]

15-21

3Com Switch 8800 Command Reference Guide

View

Interface view

Chapter 15 Integrated IS-IS Configuration Commands

Parameter

Description

Use the isis timer csnp command to configure the interval of sending CSNP packets on the broadcast network.

Use the undo isis timer csnp command to restore the default value, that is, 10 seconds.

Only DIS can periodically send CSNP packets, therefore, this command is valid only for the router that is selected as the DIS. Furthermore, DIS is divided into level-1 and level-2, and their intervals of sending CSNP packets must be set respectively.

Example

seconds: Specifies the CSNP packet interval on the broadcast network, ranging from 1 to 65535 and measured in seconds. By default, the value is 10 seconds.

level-1: Specifies the Level-1 CSNP packet interval.

level-2: Specifies the Level-2 CSNP packet interval.

Set the CSNP packet of Level-2 to be transmitted every 15 seconds on the interface

Vlan-interface 10.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis timer csnp 15 level-2

15.1.25 isis timer hello

Syntax

isis timer hello seconds [ level-1 | level-2 ]

undo isis timer hello [ level-1 | level-2 ]

View

Parameter

Interface view

seconds: Specifies the Hello interval, ranging from 3 to 255 and measured in seconds.

The default value is 10 seconds.

level-1: Specifies the Level-1 Hello interval.

level-2: Specifies the Level-2 Hello interval.

If the level is not specified, it defaults to setting the Hello interval at Level-1-2, that is, both Level-1 and Level-2 take effect.

15-22

3Com Switch 8800 Command Reference Guide

Description

Chapter 15 Integrated IS-IS Configuration Commands

Use the isis timer hello command to configure the interval of sending hello packet of corresponding level.

Use the undo isis timer hello command to restore the default value, that is, 10 seconds.

On a broadcast link, level-1 and level-2 hello packets will be sent respectively and their intervals should also be set respectively. Such settings are unnecessary on point-to-point links. The shorter the sending interval is, the more system resources are occupied to send hello packets. Therefore, the interval should not be too short and should be set according to actual conditions.

Related command: isis timer holding-multiplier.

Example

Set the Hello packet of Level-2 to be transmitted every 20 seconds on Interface

Vlan-interface 10.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis timer hello 20 level-2

15.1.26 isis timer holding-multiplier

Syntax

isis timer holding-multiplier value [ level-1 | level-2 ]

undo isis timer holding-multiplier [ level-1 | level-2 ]

View

Interface view

Parameter

value: Number of consecutive Hello messages that haven't been received from the

IS-IS neighbor for it to be considered dead. It ranges from 3 to 1000.

level-1: Level-1 IS-IS neighbor.

level-2: Level-2 IS-IS neighbor.

If you do not specify level-1 or level-2, the command applies to both level-1 and level-2

IS-IS neighbors.

Description

Use the isis timer holding-multiplier command to set the number of consecutive

Hello messages that haven’t been received from the IS-IS neighbor for it to be considered dead.

Use the undo isis timer holding-multiplier command to restore the default setting.

15-23

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

By default, an IS-IS neighbor is considered dead if three consecutive Hello messages haven’t been received from it.

Given a broadcast network, you may configure this command specific to level-1 or level-2 neighbors by specifying the keyword level-1 or level-2.

Given a PPP link, you do not need to specify level-1 or level-2, because only one kind of

Hello message is available.

This command virtually specifies a hold-down time. If the local router does not receive any Hello message from the peer within this time, the peer is considered dead.

The hold-down time is configured on a per-interface basis. Within one area, routers may have different holddown time settings.

To tune the hold-down time on a router, change the Hello timer setting of IS-IS or change the number of consecutive Hello messages that haven’t been received from an

IS-IS neighbor for it to be considered dead.

Related command: isis timer hello.

Example

On Vlan-interface 10, configure that the IS-IS neighbor is considered dead if five consecutive Hello messages haven’t been received from it.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis timer holding-multiplier 5

15.1.27 isis timer lsp

Syntax

isis timer lsp time

undo isis timer lsp

View

Interface view

Parameter

time: Specifies the LSP interval, ranging from 1 to 1000 and measured in milliseconds.

The default value is 33 milliseconds.

Description

Use the isis timer lsp command to configure the interval at which IS-IS sends link-state packets on the interface.

Use the undo isis timer lsp command to restore the default setting.

Related command: isis timer retransmit.

15-24

3Com Switch 8800 Command Reference Guide

Example

Chapter 15 Integrated IS-IS Configuration Commands

Set the LSP interval on Interface Vlan-interface 10 to 500 milliseconds.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis timer lsp 500

15.1.28 isis timer retransmit

Syntax

isis timer retransmit seconds

undo isis timer retransmit

View

Interface view

Parameter

seconds: Specifies the retransmission interval of LSP packets, in the unit of second, in the range from 1 to 300 and the default value is five seconds.

Description

Use the isis timer retransmit command to configure the LSP retransmission interval over the point-to-point link.

Use the undo isis timer retransmit command to restore the default setting.

Use caution when setting this parameter to avoid unnecessary retransmission.

The response is required when sending LSP packets on the point-to-point link, not the broadcast link, and therefore this command is unnecessary for the broadcast link.

Related command: isis timer lsp.

Example

Set the LSP retransmission interval to 10 seconds on Interface Vlan-interface 10.

[SW8800] interface Vlan-interface 10

[SW8800-Vlan-interface10] isis timer retransmit 10

15.1.29 is-level

Syntax

is-level { level-1 | level-1-2 | level-2 }

undo is-level

View

IS-IS view

15-25

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 15 Integrated IS-IS Configuration Commands

level-1: Configures the router to operate at Level-1, only calculate the intra-area routes and maintain the LSDB of L1.

level-1-2: Configures the router to operate at Level-2, calculate both the L1 and L2 routes and maintain the LSDB of L1 and L2.

level-2: Configures the router to operate at Level-2, only switch L2 LSP and calculate the L2 routes and maintain the LSDB of L2.

Description

Use the is-level command to configure the level of the IS-IS router.

Use the undo is-level command to restore the default value.

By default, the value is level-1-2.

We recommend setting the system Level, when you configure IS-IS.

If there is only one area, you are recommended to set the level of all the routers as

Level-1 or Level-2, because it is not necessary for all the routers to maintain two identical databases. You are recommended to set all the routers to Level-2 for convenient future extension, when applying them to IP network.

Related command: isis circuit-level.

Example

Set the current router to operate at Level-1.

[SW8800] isis

[SW8800-isis] is-level level-1

15.1.30 log-peer-change

Syntax log-peer-change undo log-peer-change

View

IS-IS view

Parameter

None

Description

Use the log-peer-change command to log the peer changes.

Use the undo log-peer-change command to configure not to log the peer changes.

15-26

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

By default, peer changes log disabled.

After peer changes log is enabled, the IS-IS peer changes will be output on the configuration terminal until the log is disabled.

Example

Configure to output the IS-IS peer changes on the current router.

[SW8800-isis] log-peer-change

15.1.31 md5-compatible

Syntax md5-compatible undo md5-compatible

View

IS-IS view

Parameter

None

Description

Use the md5-compatible command to set the IS-IS to use the MD5 algorithm which is compatible with that of the other vendors.

Use the undo md5-compatible command to return to the defaults.

By default, the system uses the MD5 algorithm in IS-IS which is compatible with that of

3Com.

To authenticate the devices of the vendors other than 3Com using MD5 algorithm in

IS-IS, configure this command.

Example

Set the IS-IS to use the MD5 algorithm compatible with that of the other vendors.

[SW8800] isis

[SW8800-isis] md5-compatible

15.1.32 network-entity

Syntax

network-entity network-entity-title

undo network-entity network-entity-title

15-27

3Com Switch 8800 Command Reference Guide

View

IS-IS view

Chapter 15 Integrated IS-IS Configuration Commands

Parameter

network-entity-title: Specify the network entity title in the X…X.XXXX....XXXX.00 format, in which the first “X…X” is the area address, the twelve Xs in the middle is the System

ID of the router, and the 00 in the end is SEL.

Description

Use the network-entity command to configure the name of Network Entity Title (NET) of the IS-IS routing process.

Use the undo network-entity command to delete a NET.

By default, no NET is defined.

NET means the Network Service Access Point (NSAP). An IS-IS NET is 8 to 20 bytes long.

It consists of three parts. Part one is area ID, which is variable (1 to 13 bytes), and the area IDs of the routers in the same area are identical. Part two is system ID (6 bytes) of this router, which must be unique in the whole area and backbone area. Part three, the last byte “SEL”, whose value must be “00”. Usually, one router can be configured with one NET. When the area is redesigned by combination or separation, after reconfiguration, the correctness and continuity of the routes must be ensured.

Related command: isis, isis enable.

Example

Specify NET as “10.0001.1010.1020.1030.00”, in which the system ID is

“1010.1020.1030”, area ID is “10.0001”.

[SW8800] isis

[SW8800-isis] network-entity 10.0001.1010.1020.1030.00

15.1.33 preference

Syntax

preference value

undo preference

View

Parameter

IS-IS view

value: Specifies the preference, ranging from1 to 255. By default, the value is 15.

15-28

3Com Switch 8800 Command Reference Guide

Description

Chapter 15 Integrated IS-IS Configuration Commands

Use the preference command to configure the preference of IS-IS protocol.

Use the undo preference command to restore the default value.

Several dynamic routing protocols could run simultaneously on a router. In this case, there is an issue of sharing and selecting the routing information among all the routing protocols. The system sets a preference for each routing protocol. When various routing protocols find the route to the same destination, the protocol with the higher preference will take effect.

Example

Configure the preference of IS-IS as 25.

[SW8800-isis] preference 25

15.1.34 reset isis all

Syntax reset isis all

View

User view

Parameter

None

Description

Use the reset isis all command to reset all the IS-IS data structures.

By default, IS-IS data structure will not be cleared.

This command is used when LSPs need refreshing immediately. For example, after the

area-authentication-mode and domain-authentication-mode commands are executed, the old LSP still remain on the router. This command can be used to clear them.

Related command: area-authentication-mode, domain-authentication-mode.

Example

Reset all the IS-IS data structures.

<SW8800> reset isis all

15-29

3Com Switch 8800 Command Reference Guide

15.1.35 reset isis peer

Chapter 15 Integrated IS-IS Configuration Commands

Syntax

reset isis peer system-id

View

User view

Parameter

system-id: Specifies the system ID of IS-IS neighbor.

Description

Use the reset isis peer command to reset the specified IS-IS peer.

By default, the IS-IS neighbor will not be cleared.

This command is used when you want to reconfigure a certain neighbor.

Example

Clear the IS-IS neighbor whose system ID is 0000.0c11.1111.

<SW8800> reset isis peer 0000.0c11.1111

15.1.36 set-overload

Syntax

set-overload

undo set-overload

View

IS-IS view

Parameter

None

Description

Use the set-overload command to set overload flag for the current router.

Use the undo set-overload command to cancel the overload flag.

By default, no overload flag is set.

If a router is configured with the overload flag, the routes it calculates will be ignored by other routers in SPF calculation. (However the directly connected routes will not be ignored.) And other routers should not send this router the packets which should be forwarded by it.

15-30

3Com Switch 8800 Command Reference Guide

Example

Chapter 15 Integrated IS-IS Configuration Commands

Set overload flag on the current router.

[SW8800-isis] set-overload

15.1.37 silent-interface

Syntax

silent-interface silent-interface-type silent-interface-number

undo silent-interface silent-interface-type silent-interface-number

View

IS-IS view

Parameter

silent-interface-type: Specifies the interface type.

silent-interface-number: Specifies the interface number.

Description

Use the silent-interface command to disable a specified interface to transmit IS-IS packet.

Use the undo silent-interface command to enable the interface to transmit IS-IS packet.

By default, all the interface are allowed to transmit/receive IS-IS packets.

The silent-interface command is only used to suppress the packets to be transmitted on the interface, but the routes of this interface will still be transmitted from other interfaces.

Example

Prohibit the IS-IS packets to be transmitted via Interface Vlan-interface 3.

[SW8800-isis] silent-interface Vlan-interface 3

15.1.38 spf-delay-interval

Syntax

spf-delay-interval number

undo spf-delay-interval

View

IS-IS view

15-31

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 15 Integrated IS-IS Configuration Commands

number: Specifies number of routes to process before releasing CPU. It is in unit of piece with the range from 1000 to 50000. By default, the value is 2500 pieces.

Description

Use the spf-delay-interval command to configure the number of routes to process before releasing CPU in the SPF calculation.

Use the undo spf-delay-interval command to restore the default setting.

When there are a large number of routes in the routing table, this command can be used to set that CPU resources are released automatically after a certain number of routes are processed. The unprocessed routes will be processed in one second. In this way, SPF calculation will not occupy the system resources for a long time, which has impact on the responding speed of the console.

The value of the number argument can be adjusted according to the capacity of the routing table. If the spf-slice-size command is also configured, the SPF calculation will be paused when any setting item is met.

By default, CPU is released once when every 2500 pieces of routes are processed.

Related command: spf-slice-size.

Example

Set IS-IS to release CPU once after processing every 3000 pieces of routes.

[SW8800-isis] spf-delay-interval 3000

15.1.39 spf-slice-size

Syntax

spf-slice-size seconds

undo spf-slice-size

View

Parameter

IS-IS view

seconds: Duration of one cycle in seconds of SPF calculation in the range from 0 to 120.

When the calculation duration time reaches or exceeds the set value, the calculation of this time ends. If seconds is set to 0, it indicates that SPF calculation is not divided into slices and it will operate until the end. By default, the value is 0.

15-32

3Com Switch 8800 Command Reference Guide

Description

Chapter 15 Integrated IS-IS Configuration Commands

Use the spf-slice-size command to enable IS-IS to calculate SPF routes in slices and configure the duration of each calculation.

Use the undo spf-slice-size command to restore the default setting.

When there are a large number of routes in the routing table, this command can be used to enable the SPF calculation in slices to prevent it from occupying the system resources for a long time.

The user is recommended to use the command when the number of routes reaches

150,000 or 200,000 and the value of seconds is recommended as 1. In other cases, the default setting should be used, that is, SPF runs to the end with no slice.

If the spf-delay-interval command is also configured, when SPF calculation is run, the

SPF calculation will be paused if any setting item is met.

Related command: spf-delay-interval.

Example

Set the SPF duration time to one second.

[SW8800-isis] spf-slice-size 1

15.1.40 summary

Syntax

summary ip-address mask [ level-1 | level-1-2 | level-2 ]

undo summary ip-address mask [ level-1 | level-1-2 | level-2 ]

View

IS-IS view

Parameter

ip-address: Aggregated network segment address.

mask: Aggregated network mask.

level-1: Configures to aggregate the routes imported into Level-1.

level-1-2: Configures to aggregate the routes imported into Level-1 and backbone area.

level-2: Configures to aggregate the routes imported into backbone area.

Description

Use the summary command to configure to aggregate IS-IS routes.

Use the undo summary command to cancel the summary.

By default, no routes will be summarized.

15-33

3Com Switch 8800 Command Reference Guide Chapter 15 Integrated IS-IS Configuration Commands

Similarly, the routes with the same next hops can be aggregated into one route. In this way, the sizes of the routing table, LSP packets and LSDB are reduced. Among them, the aggregated route can be either a route found by IS-IS protocol, or a imported route.

Furthermore, the cost value of the aggregated route adopts the smallest cost of the routes aggregated.

Example

Set a route summary of 202.0.0.0/8.

[SW8800-isis] summary 202.0.0.0 255.0.0.0

15.1.41 timer lsp-max-age

Syntax

timer lsp-max-age seconds

undo timer lsp-max-age

View

IS-IS view

Parameter

seconds: Specifies the maximum lifetime of LSP, measured in seconds. The range is 1 to 65535. The default value is 1200 seconds.

Description

Use the timer lsp-max-age command to configure the maximum lifetime of an LSP generated by the current router.

Use the undo timer lsp-max-age command to restore the default value.

When the router generates an LSP for the system, it adds the maximum lifetime to it.

When other routers receive this LSP, the lifetime of the LSP decreases continuously as time goes by. When this value reaches zero, the LSP times out. If no update is received before that, the timeout LSP will be deleted from the LSDB.

Related command: timer lsp-refresh.

Example

Set the lifetime of an LSP generated by the current system to 25 minutes, i.e., 1500 seconds.

[SW8800-isis] timer lsp-max-age 1500

15-34

3Com Switch 8800 Command Reference Guide

15.1.42 timer lsp-refresh

Chapter 15 Integrated IS-IS Configuration Commands

Syntax

timer lsp-refresh seconds

undo timer lsp-refresh

View

IS-IS view

Parameter

seconds: Specifies the LSP refreshment interval, measured in seconds. The range is 1 to 65535. The default value is 900 seconds.

Description

Use the timer lsp-refresh command to configure the refreshment interval of LSP.

Use the undo timer lsp-refresh command to restore the default value, that is, 900 seconds.

By this mechanism, the latest synchronization of the LSP within the entire area can be maintained.

Related command: timer lsp-max-age.

Example

Set the LSP refresh interval of the current system to 1500 seconds.

[SW8800-isis] timer lsp-refresh 1500

15.1.43 timer spf

Syntax

timer spf seconds [ level-1 | level-2 ]

undo timer spf [ level-1 | level-2 ]

View

IS-IS view

Parameter

seconds: Specifies the SPF calculation interval, ranging from 1 to 120 and measured in seconds. The default value is 10 seconds.

level-1: Sets Level-1 SPF calculation interval only.

level-2: Sets Level-2 SPF calculation interval only.

If the level is not specified, it defaults to setting Level-1 SPF calculation interval.

15-35

3Com Switch 8800 Command Reference Guide

Description

Chapter 15 Integrated IS-IS Configuration Commands

Use the timer spf command to configure the interval for the SPF calculation of corresponding level.

Use the undo timer spf command to restore the system default value, that is, 5 seconds.

In IS-IS, when the LSDB of the corresponding level is changed, SPF calculation is required. However, if the SPF calculation is performed too frequently, the system efficiency will be lowered. By setting a proper interval for performing SPF calculation, you can avoid the above situation. Certainly, the interval for SPF calculation cannot be set too long, because a long interval will prevent the current routing table from showing the actual network condition. This setting must be made according to actual conditions.

Example

Set the SPF calculation interval of the router to three seconds.

[SW8800-isis] timer spf 3

15-36

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

Chapter 16 BGP Configuration Commands

Note:

When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or a Switch

8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.

For the configuration of VPN instance, refer to the MPLS module in the 3Com Switch

8800 Configuration Guide.

16.1 BGP Configuration Commands

Note:

For the commands defining routing policies in BGP, refer to the “Routing Policy" of the next chapter.

16.1.1 aggregate

Syntax

aggregate address mask [ as-set | attribute-policy route-policy-name |

detail-suppressed | origin-policy route-policy-name | suppress-policy

route-policy-name ]*

undo aggregate address mask [ as-set | attribute-policy route-policy-name |

detail-suppressed | origin-policy route-policy-name | suppress-policy

route-policy-name ]*

View

BGP view

Parameter

address: Address of the aggregated route in dotted decimal format.

mask: Network mask of the aggregated route in dotted decimal format.

16-1

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

as-set: Creates a route with segment of AS_SET.

detail-suppressed: Only advertises the aggregated route.

suppress-policy route-policy-name: Suppresses the specific route selected and does not advertise part of the specific routes.

origin-policy route-policy-name: Selects the originate routes used for aggregation.

attribute-policy route-policy-name: Sets the attributes of the aggregated route.

Description

Use the aggregate command to establish an aggregated record in the BGP routing table.

Use the undo aggregate command to disable the function.

By default, there is no route aggregation.

The keywords are explained as follows:

Table 16-1 The use of the keywords

Keyword

as-set

Use

Used to produce an aggregated route, whose AS path information includes detailed routes. Use this keyword carefully when many AS paths need to be aggregated, for the frequent change of routes may lead to route vibration.

detail-suppressed

This keyword does not suppress any aggregated route, but it restrains the advertisement of all the specific routes. If only some specific routes are to be restrained, use the peer

filter-policy command carefully.

suppress-policy

Create an aggregated route with this keyword. At the same time, the advertisement of the specified route is restrained. If you want to restrain some specific routes selectively and leaves other routes still being advertised, use the if-match sub-statement of the route-policy command.

origin-policy

attribute-policy

Selects only the specific routes that are in accordance with route-policy to create an aggregated route.

Sets aggregated route attributes. The same work can be done by using the peer route-policy command, etc.

Example

Create an aggregated record in BGP routing table.

[SW8800-bgp] aggregate 168.328.0.0 255.255.0.0

16-2

3Com Switch 8800 Command Reference Guide

16.1.2 bgp

Chapter 16 BGP Configuration Commands

Syntax

View

System view

Parameter

as-number: The specified local AS number, in the range of 1 to 65535.

Description

Use the bgp command to enable BGP and enter the BGP view.

Use the undo bgp command to disable BGP.

By default, the system does not run BGP.

This command is used to enable and disable BGP as well as to specify the local AS number of BGP.

Example

bgp as-number

undo bgp [as-number ]

Enable BGP.

[SW8800] bgp 100

[SW8800-bgp]

16.1.3 compare-different-as-med

Syntax

compare-different-as-med

undo compare-different-as-med

View

BGP view

Parameter

None

Description

Use the compare-different-as-med command to enable comparison of MED values from different AS neighboring routes.

Use the undo compare-different-as-med command to disable the comparison.

16-3

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

By default, it is disabled to compare the MED attribute values from the routing paths of different AS peers.

If there are several routes available to one destination address, the route with smaller

MED parameter can be selected as the final route item.

Do not use this command unless it is determined that the same IGP and routing selection mode are adopted by different autonomous systems.

Example

[SW8800-bgp] compare-different-as-med

16.1.4 confederation id

Syntax

confederation id as-number

undo confederation id

View

BGP view

Parameter

as-number: The ID of BGP AS confederation. It is equal to the AS number which contains the AS numbers of multiple sub-ASs. The range is 1 to 65535.

Description

Use the confederation id command to configure confederation identifier.

Use the undo confederation id command to cancel the BGP confederation specified by as-number argument.

By default, the confederation ID is not configured.

Confederation can be adopted to solve the problem of too many IBGP full connections in a large AS domain. The solution is, first dividing the AS domain into several smaller sub-ASs, and each sub-ASs remains full-connected. These sub-ASs form a confederation. Key BGP attributes of the route, such as next hop, MED, local preference, are not discarded across each sub-ASs. The sub-ASs still look like a whole from the point of view of a confederation although these sub-ASs have EBGP relations.

This can assure the integrality of the former AS domain, and ease the problem of too many connections in the domain

Related command: confederation nonstandard, confederation peer-as.

Example

Confederation 9 consists of four sub-ASs, namely, 38, 39, 40 and 41. Here, the peer

10.1.1.1 is an internal member of the AS confederation while the peer 200.1.1.1 is an

16-4

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands external member of the AS confederation. For external members, Confederation 9 is a unified AS domain.

[SW8800] bgp 41

[SW8800-bgp] confederation id 9

[SW8800-bgp] confederation peer-as 38 39 40

[SW8800-bgp] group Confed38 external

[SW8800-bgp] peer Confed38 as-number 38

[SW8800-bgp] peer 10.1.1.1 group Confed38

[SW8800-bgp] group Remote98 external

[SW8800-bgp] peer Remote98 as-number 98

[SW8800-bgp] peer 200.1.1.1 group Remote98

16.1.5 confederation nonstandard

Syntax

confederation nonstandard

undo confederation nonstandard

View

BGP view.

Parameter

None

Description

Use the confederation nonstandard command to configure the router to be compatible with routers not following RFC1965.

Use the undo confederation nonstandard command to disable this function.

By default, it is in accordance with RFC1965.

Related command: confederation id, confederation peer-as.

Example

AS100 contains routers following nonstandard, which is composed of two sub-ASs,

64000 and 65000.

[SW8800] bgp 64000

[SW8800-bgp] confederation id 100

[SW8800-bgp] confederation peer-as 65000

[SW8800-bgp] confederation nonstandard

16-5

3Com Switch 8800 Command Reference Guide

16.1.6 confederation peer-as

Chapter 16 BGP Configuration Commands

Syntax

confederation peer-as as-number-1 [... as-number-n ]

undo confederation peer-as [ as-number-1 ] [... as-number-n ]

View

BGP view

Parameter

as-number-1...as-number-n: Sub-AS number. The range is 1 to 65535. This command can configure a maximum of 32 Sub-ASs belonging to a confederation.

Description

Use the confederation peer-as command to configure a confederation consisting of which Sub-ASs.

Use the undo confederation peer-as command to delete the specified Sub-AS in the confederation.

By default, no autonomous system is configured as a member of the confederation.

Before this command is performed, the confederation ID should be configured by the

confederation id command. Otherwise this configuration is invalid. The configured

ASs in this command are inside the confederation and each AS uses fully meshed network. The confederation appears as a single AS to the routers outside it.

Related command: confederation nonstandard, confederation id.

Example

Configure the confederation contains AS 2001 and 2002.

[SW8800-bgp]confederation peer-as 2000 2001

16.1.7 dampening

Syntax

dampening [ half-life-reachable half-life-unreachable reuse suppress ceiling ]

[ route-policy policy-name ]

undo dampening

View

BGP view

16-6

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 16 BGP Configuration Commands

half-life-reachable: Specifies the semi-dampening when the route is reachable. The range is 1 to 45 minutes. By default, the value is 15 minutes.

half-life-unreachable: Specifies the semi-dampening when the route is unreachable.

The range is 1 to 45 minutes. By default, the value is 15 minutes.

reuse: When the penalty is reduced under this value, the route is reused. The range is

1 to 20000. By default, the value is 750.

suppress: When the penalty exceeds this value, the route is suppressed. The range is

1 to 20000. By default, the value is 2000.

ceiling: The upper threshold of the penalty. The range is 1001 to 20000. By default, the value is 16000.

policy-name: Configures route policy name.

If these parameters are not set, their default values will be used.

The parameters are mutually dependent. Once one of these parameters is configured, all other parameters should also be specified.

Description

Use the dampening command to make BGP route attenuation valid or modify various

BGP route attenuation parameters.

Use the undo dampening command to make the characteristics invalid.

By default, no route attenuation is configured.

Related command: reset dampening, reset bgp flap-info, display bgp

routing-table dampened, display bgp routing-table flap-info.

Example

Modify the BGP route dampening parameters.

[SW8800-bgp] dampening 15 15 1000 2000 10000

16.1.8 debugging bgp

Syntax

debugging bgp { all | event | normal | { keepalive | mp-update | open | packet |

route-refresh | update } [ receive | send ] [ verbose ] }

undo debugging bgp { all | event | normal | keepalive | mp-update | open | packet |

route-refresh | update }

View

User view

16-7

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 16 BGP Configuration Commands

all: Indicates to enable all BGP information debugging.

event: Indicates to enable BGP event information debugging.

normal: Indicates to enable information debugging of BGP normal functions.

keepalive: Indicates to enable BGP Keepalive packet information debugging.

mp-update: Indicates to enable MBGP Update packet information debugging.

open: Indicates to enable BGP Open packet information debugging.

packet: Indicates to enable BGP packet information debugging.

route-refresh: Indicates to enable BGP route-refresh packet information debugging.

update: Indicates to enable BGP Update packet information debugging.

receive: Information of receiving packets.

send: Information of sending packets.

verbose: Detailed information.

Description

Use the debugging bgp all command to enable all the information debugging of BGP packet and events.

Use the debugging bgp event command to enable the information debugging of BGP events

Use the debugging bgp keepalive command to enable the information debugging of

BGP Keepalive packets.

Use the debugging bgp packet command to enable the information debugging of

BGP packets.

Use the undo debugging bgp command to disable the debugging functions.

Example

Enable the information debugging of BGP packets.

<SW8800> debugging bgp packet

16.1.9 default local-preference

Syntax

default local-preference value

undo default local-preference

View

BGP view

16-8

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 16 BGP Configuration Commands

value: Default local preference to be configured. The range is 0 to 4294967295. By default, its value is 100.

Description

Use the default local-preference command to configure the local preference.

Use the undo default local-preference command to restore the default value.

Configuring different local preferences will affect BGP routing selection.

Example

The two routers RTA and RTB in the same autonomous area connect with external autonomous areas. The command can be used to configure the default local preference of RTB as 180 so that the route via RTB is selected first when the same route goes through RTA and RTB at the same time.

[SW8800-bgp]default local-preference 180

16.1.10 default med

Syntax

default med med-value

undo default med

View

BGP view

Parameter

med-value: MED value to be specified. The range is 0 to 4294967295. By default, the

med-value is 0.

Description

Use the default med command to configure the default system metric.

Use the undo default med command to restore the default metric of the system.

Multi-Exit Discriminators (MED) attribute is the external metric of a route. Different from local preference, MED is exchanged between ASs. However, this attribute is non-transitive. When a router running BGP gets routes with the same destination address but different next hops from different external peers, it selects the route with the smallest MED as the optimum route, provided that all other conditions are the same.

16-9

3Com Switch 8800 Command Reference Guide

Example

Chapter 16 BGP Configuration Commands

Routers RTA and RTB belong to AS100 and router RTC belongs to AS200. RTC is the peer of RTA and RTB. So the MED of RTA can be configured as 25 to allow RTC to select the route transmitted by RTB first.

[SW8800-bgp] default med 25

16.1.11 display bgp group

Syntax

display bgp group [ group-name ]

View

Any view

Parameter

group-name: Specified a peer group.

Description

Use the display bgp group command to view the information of peer groups.

Example

View the information of the peer group aaa.

<SW8800> display bgp group aaa

Group : aaa type : external

as-number : 200 members in this group :

10.1.1.1 11.1.1.1

configuration within the group :

no export policy route-policy

no export policy filter-policy

no export policy acl

no export policy ip-prefix

route-policy specified in import policy : aaa

no import policy filter-policy

no import policy acl

no import policy ip-prefix

no default route produce

16-10

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

Table 16-2 Description on the fields of the display bgp group command

Field

Group type as-number members in this group route-policy filter-policy acl

Description

Name of peer group

Type of peer group: IBGP or EBGP

AS number of peer group

Members in this peer group

Name of configured route policy

Configured export and import route filter for BGP

Configured access control list

16.1.12 display bgp network

Syntax

display bgp network

View

Any view

Parameter

None

Description

Use the display bgp network command to view the routing information that has been configured.

Example

Display the routing information that has been configured.

<SW8800> display bgp network

Network Mask

133.1.1.0 255.255.255.0 None

Table 16-3 Description on the fields of the display bgp network command

Field Description

Network Network address

Mask Mask

16-11

3Com Switch 8800 Command Reference Guide

Field

Route-policy

16.1.13 display bgp paths

Chapter 16 BGP Configuration Commands

Description

Configured route policy

Syntax

display bgp paths as-regular-expression

View

Any view

Parameter

as-regular-expression: Matched AS path regular expression.

Description

Use the display bgp paths command to view the information about AS paths

Example

Display the information about the AS paths.

<SW8800> display bgp paths ^600$

Flags: - valid, ^ - best,

D - damped, H - history,

I - internal, S – aggregate suppressed

Id Hash-Index References Aggregator Origin As-Path

--------------------------------------------------------------------

6 90 15 <null> IGP 600

Table 16-4 Description on the fields of the display bgp paths command

Field

Flags

Id

Hash-Index

References

Description

State flags:

- valid (valid)

^ - best (selected)

D – damped (discarded)

H – history (history)

I – internal (interior gateway protocol)

S - aggregate suppressed (suppressed)

Value of sequence number

Value of Hash-index

Count of times that the route is referenced

16-12

3Com Switch 8800 Command Reference Guide

Field

Aggregator

Origin

As-path

Chapter 16 BGP Configuration Commands

Description

Mask length of aggregate route

Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:

IGP

EGP

INC

The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command

network as inside of AS, and origin type as IGP.

The route is learned from exterior gateway protocol

(EGP).

Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE

AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided

16.1.14 display bgp peer

Syntax

display bgp peer peer-address verbose

display bgp peer [ verbose ]

View

Any view

Parameter

peer-address: Specifies the peer to be displayed.

verbose: Displays the detailed information of the peer.

Description

Use the display bgp peer command to view the information about BGP peers.

Example

Display the detail information of the peer 10.110.25.20.

<SW8800> display bgp peer 10.110.25.20 verbose

Peer: 10.110.25.20 Local: Unspecified

Type: External

State: Idle Flags: <Idled>

Last State: NoState Last Event: NoEvent

Last Error: None

16-13

3Com Switch 8800 Command Reference Guide

Options: <>

Configuration within the peer :

no export policy route-policy

no export policy ip-prefix

no export policy filter-policy

no export policy acl

no import policy route-policy

no import policy ip-prefix

no import policy filter-policy

no import policy acl

no default route produce

Chapter 16 BGP Configuration Commands

Table 16-5 Description on the fields of the display bgp peer verbose command

Field

Peer

Local

Type

State

Flags

Last State

Description

IP address of peer and port number used by the peer to establish

TCP connection

IP address and port number used to establish TCP connection of local end

Type of peer: Internal for IBGP, and External for EBGP

State of peer

Flags of peer

Last state before entering the current state

Last Event

Last Error

Last event of neighbor state machine

Last error of neighbor state machine

Options Options

16.1.15 display bgp routing-table

Syntax

display bgp routing-table [ ip-address [ mask ] ]

View

Any view

Parameter

ip-address: Destination of the network.

mask: Mask of the network.

16-14

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the display bgp routing-table command to view all the BGP routing information.

Example

Display all the BGP routing information.

<SW8800> display bgp routing-table

Flags: - valid ^ - active I - internal

D - damped H - history S - aggregate suppressed

Dest/Mask Next-hop Med Local-pref Origin As-path

-----------------------------------------------------------------------

#^ 129.1.1.0/24 5.5.5.5 IGP 600

#^ 129.1.2.0/24 5.5.5.5 IGP 600

#^ 129.1.3.0/24 5.5.5.5 IGP 600

#^ 129.1.4.0/24 5.5.5.5 IGP 600

#^ 129.1.5.0/24 5.5.5.5 IGP 600

#^ 129.1.6.0/24 5.5.5.5 IGP 600

#^ 129.1.7.0/24 5.5.5.5 IGP 600

#^ 129.1.8.0/24 5.5.5.5 IGP 600

#^ 129.1.9.0/24 5.5.5.5 IGP 600

#^ 129.1.10.0/24 5.5.5.5 IGP 600

Table 16-6 Description on the fields of the display bgp routing-table command

Field

Flags

Description

State flags:

- valid (valid)

^ - best (selected)

D – damped (discarded)

H – history (history)

I – internal (interior gateway protocol)

S - aggregate suppressed (suppressed)

Dest/Mask Destination address/Mask

Next Hop IP address of next hop

Med

MULTI_EXIT_DISC attribute value, which ranges from 0 to

4294967295

Local-Pref Local preference, which ranges from 0 to 4294967295

16-15

3Com Switch 8800 Command Reference Guide

Field

Origin

As-path

Chapter 16 BGP Configuration Commands

Description

Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:

IGP

The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command network as inside of AS, and origin type as IGP.

EGP The route is learned from exterior gateway protocol (EGP).

INC

Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE

AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided

16.1.16 display bgp routing-table as-path-acl

Syntax

display bgp routing-table as-path-acl acl-number

View

Any view

Parameter

acl-number: Specifies matched AS path list number ranging from 1 to 199.

Description

Use the display bgp routing-table as-path-acl command to view routes that match an as-path acl.

Example

Display routes that match the as-path-acl 1.

<SW8800> display bgp routing-table as-path-acl 1

Flags: - valid, ^ - best,

D - damped, H - history,

I - internal, S – aggregate suppressed

Dest/Mask Pref Next-Hop Med Local-pref Origin As-path

--------------------------------------------------------------------

#^ 1.1.1.0/24 256 10.10.10.1 0 IGP 200

#^ 1.1.2.0/24 256 10.10.10.1 0 IGP 200

16-16

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

#^ 1.1.3.0/24 256 10.10.10.1 0 IGP 200

#^ 2.2.3.0/24 256 10.10.10.1 0 INC 200

#^ 4.4.4.0/24 256 10.10.10.1 0 INC 200

#^ 9.9.9.0/24 256 10.10.10.1 0 INC 200

#^ 10.10.10.0/24 256 10.10.10.1 0 IGP 200

#^ 22.1.0.0/16 256 200.1.7.2 100 INC 200

88.1.0.0/16 60 0.0.0.0 IGP

Table 16-7 Description on the fields of the display bgp routing-table as-path-acl command

Field

Dest/Mask Destination address/Mask

Description

Pref Preference

Nexthop IP address of next hop

Med MULTI_EXIT_DISC attribute value

Origin

As-path

Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:

IGP

The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command network as inside of AS, and origin type as IGP.

EGP The route is learned from exterior gateway protocol (EGP).

INC

Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE

AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided

16.1.17 display bgp routing-table cidr

Syntax

display bgp routing-table cidr

View

Any view

Parameter

None

16-17

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the display bgp routing-table cidr command to view the routing information about the non-natural mask (namely the classless interdomain routing, CIDR).

Example

<SW8800> display bgp routing-table cidr

Flags: - valid, ^ - best,

D - damped, H - history,

I - internal, S – aggregate suppressed

Dest/Mask Pref Next-Hop Med Local-pref Origin As-path

--------------------------------------------------------------------

#^ 22.1.0.0/16 256 200.1.7.2 100 INC 200

88.1.0.0/16 60 0.0.0.0 IGP

For detailed description of the output information, see Table 16-6.

16.1.18 display bgp routing-table community

Syntax

display bgp routing-table community [ aa:nn | no-export-subconfed |

no-advertise | no-export ]* [ whole-match ]

View

Any view

Parameter

Description

Use the display bgp routing-table community command to view the routing information related to the specified BGP community number in the routing table.

Example

aa:nn: Specifies a community number.

no-export-subconfed: Does not send matched route outside AS.

no-advertise: Sends matched route to no peers.

no-export: Does not announce the route to the AS or the association outside, but can advertise to other sub-ASs.

whole-match: Configures to display the exactly matched routes.

Display the routing information matching BGP community number 11:22.

<SW8800> display bgp routing-table community 11:22

Flags: - valid, ^ - best,

16-18

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

D - damped, H - history,

I - internal, S – aggregate suppressed

Dest/Mask Pref Next-Hop Med Local-pref Origin As-path

--------------------------------------------------------------------

#^ 1.0.0.0/8 256 172.10.0.2 100 IGP

#^ 2.0.0.0/8 256 172.10.0.2 100 IGP

For detailed description of the output information, see Table 16-6.

16.1.19 display bgp routing-table community-list

Syntax

display bgp routing-table community-list community-list-number [ whole-match ]

View

Any view

Parameter

community-list-number: Specifies a community-list.

whole-match: Configures to display the exactly matched routes.

Description

Use the display bgp routing-table community-list command to view the routing information matching the specified BGP community list.

Example

Display the routing information matching BGP community list 1.

[SW8800] display bgp routing-table community-list 1

Flags: - valid, ^ - best,

D - damped, H - history,

I - internal, S – aggregate suppressed

Destination/Mask Pref Next-hop Med Local-Pref Origin As-Path

-------------------------------------------------------------------

1.1.1.0/24 256 10.10.10.1 0 IGP 200

1.1.2.0/24 256 10.10.10.1 0 IGP 200

1.1.3.0/24 256 10.10.10.1 0 IGP 200

2.2.3.0/24 256 10.10.10.1 0 INC 200

4.4.4.0/24 256 10.10.10.1 0 INC 200

9.9.9.0/24 256 10.10.10.1 0 INC 200

10.10.10.0/24 0 10.10.10.2 0 IGP

10.10.10.0/24 256 10.10.10.1 0 IGP 200

For detailed description of the output information, see Table 16-6.

16-19

3Com Switch 8800 Command Reference Guide

16.1.20 display bgp routing-table dampened

Chapter 16 BGP Configuration Commands

Syntax

display bgp routing-table dampened

View

Any view

Parameter

None

Description

Use the display bgp routing-table dampened command to view BGP dampened routes.

Example

View BGP dampened information.

<SW8800> display bgp routing-table dampened

Flags: - valid, ^ - best,

I - internal, S – aggregate suppressed

Dest/Mask Source Damping-limit Origin As-path

-----------------------------------------------------------------

#D 11.1.0.0/16 133.1.1.2 1:20:00 IGP 200

Table 16-8 Description on the fields of the display bgp routing-table dampened command

Field

Flags

#D

Dest/Mask

Source

Damping-limit

Description

State flags:

- valid (valid)

^ - best (selected)

D – damped (discarded)

H – history (history)

I – internal (interior gateway protocol)

S - aggregate suppressed (suppressed)

The valid and damped route

The dampened route to the destination network 11.1.0.0

The nexthop of the route

The time before dampening turns invalid and the route can be reused.

16-20

3Com Switch 8800 Command Reference Guide

Field

Origin

As-path

Chapter 16 BGP Configuration Commands

Description

Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:

IGP

EGP

INC

The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command network as inside of AS, and origin type as IGP.

The route is learned from exterior gateway protocol

(EGP).

Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE

AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided

16.1.21 display bgp routing-table different-origin-as

Syntax

display bgp routing-table different-origin-as

View

Any view

Parameter

None

Description

Use the display bgp routing-table different-origin-as command to view routes that have different source autonomous systems

Example

View the routes that have different source ASs.

<SW8800> display bgp routing-table different-origin-as

Flags: - valid, ^ - best,

D - damped, H - history,

I - internal, S – aggregate suppressed

Destination/Mask Pref Next-hop Med Local-Pref Origin As-Path

------------------------------------------------------------------

10.10.10.0/24 0 10.10.10.2 0 IGP

10.10.10.0/24 256 10.10.10.1 0 IGP 200

16-21

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

For detailed description of the output information, see Table 16-6.

16.1.22 display bgp routing-table flap-info

Syntax

display bgp routing-table flap-info [ { regular-expression as-regular-expression } |

{ as-path-acl acl-number } | { network-address [ mask [ longer-match ] ] } ]

View

Any view

Parameter

as-regular-expression: The route flap-info matching AS path regular expression.

acl-number: Number of the specified AS path to be matched, ranging from 1 to 199.

network-address: Displays the flap information of this IP address.

mask: Network mask.

longer-match: Shows the route flap-info that is more specific than address, mask.

Description

Use the display bgp routing-table flap-info command to view BGP flap-info. If the

network-address mask arguments are set to 0.0.0.0 0.0.0.0, this command displays the flap statistics of all BGP routes.

Example

Display BGP flap-info.

<SW8800> display bgp routing-table flap-info

Flags: - valid, ^ - best,

D - damped, H - history,

I - internal, S – aggregate suppressed

Dest/Mask Source Keepup-time Damping-limit Flap-times Origin As-path

--------------------------------------------------------------------

#D 11.1.0.0/16 133.1.1.2 48 1:20:30 4 IGP 200

16-22

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

Table 16-9 Description on the fields of the display bgp routing-table flap-info command

Item

Flags

Description

State flags:

- valid (valid)

^ - best (selected)

D – damped (discarded)

H – history (history)

I – internal (interior gateway protocol)

S - aggregate suppressed (suppressed)

#D

Dest/Mask

The valid and damped route

The dampened route to the destination network 11.1.0.0

Source The nexthop of the route

Keepup-time The time that route damping has continued

Damping-limit

The time before dampening turns invalid and the route can be reused.

Flap-times The times of the route flap

Origin attribute of route, which indicates that the route updates its origin relative to the route originating it from AS. It has three optional values:

Origin

As-path

IGP

The route belongs to inside of AS. BGP treats aggregate route and the route defined by the command network as inside of AS, and origin type as IGP.

EGP The route is learned from exterior gateway protocol (EGP).

INC

Short for INCOMPLETE: indicates that the original source of the route information is unknown (learned by other methods). BGP sets the origin of the route imported through other IGP protocols as INCOMPLETE

AS-path attribute of route, which records all AS areas that the route passes. With it, route loop can be avoided

16.1.23 display bgp routing-table peer

Syntax

display bgp routing-table peer peer-address { advertised | received }

[ network-address [ mask ] | statistic ]

View

Any view

16-23

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 16 BGP Configuration Commands

peer-address: Specifies the peer to be displayed.

advertised: Routing information advertised by the specified peer.

received: Routing information the specified peer received.

network-address mask : IP address and address mask of destination network.

statistic: Statistic routing information of peer.

Description

Use the display bgp routing-table peer command to view the routing information the specified BGP peer advertised or received.

Related command: display bgp peer.

Example

Display the routing information advertised by BGP peer 10.10.10.1.

[SW8800] display bgp routing table peer 10.10.10.1 advertised

Flags: - valid, ^ - best,

D - damped, H - history,

I - internal, S – aggregate suppressed

Dest/mask Next -Hop Med Local-pref Origin As-path

*> 10.10.10.0/24 0.0.0.0 INC

For detailed description of the output information, see Table 16-6.

16.1.24 display bgp routing-table regular-expression

Syntax

display bgp routing-table regular-expression as-regular-expression

View

Any view

Parameter

as-regular-expression: Matched AS regular expression.

Description

Use the display bgp routing-table regular-expression command to view the routing information matching the specified AS regular expression

Example

Display the routing information matched with ^600$.

<SW8800> display bgp routing-table regular-expression ^600$

16-24

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

Flags: - valid, ^ - best,

D - damped, H - history,

I - internal, S – aggregate suppressed

Destination/Mask Pref Next-hop Med Local-Pref Origin Path

--------------------------------------------------------------------

1.1.1.0/24 256 10.10.10.1 0 IGP 200

1.1.2.0/24 256 10.10.10.1 0 IGP 200

1.1.3.0/24 256 10.10.10.1 0 IGP 200

2.2.3.0/24 256 10.10.10.1 0 INC 200

4.4.4.0/24 256 10.10.10.1 0 IGP 200

9.9.9.0/24 256 10.10.10.1 0 INC 200

10.10.10.0/24 256 10.10.10.1 0 IGP 200

For detailed description of the output information, see Table 16-6.

16.1.25 filter-policy export

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

View

BGP view

Parameter

acl-number: Number of IP access control list, in the range of 2000 to 3999.

ip-prefix-name: Name of ip prefix list. Its length ranges from 1 to 19.

protocol: Specified protocols advertising routing information which include direct, ospf, ospf-ase, ospf-nssa, rip, isis and static.

Description

Use the filter-policy export command to filter the advertised routes and only the routes passing the filter can be advertised by BGP.

Use the undo filter-policy export command to cancel the filtration to the advertised routes.

By default, the advertised routes are not filtered.

If the protocol argument is specified, only the imported route generated by the specified protocol is filtered and the imported routes generated by other protocols are not affected. If the protocol argument is not specified, the imported route generated by any protocol will be filtered.

16-25

3Com Switch 8800 Command Reference Guide

Example

Chapter 16 BGP Configuration Commands

Use ACL 2000 to filter the routing information advertised by BGP.

[SW8800-bgp] filter-policy 2000 export

16.1.26 filter-policy import

Syntax

filter-policy gateway ip-prefix-name import

undo filter-policy gateway ip-prefix-name import

filter-policy { acl-number | ip-prefix ip-prefix-name } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name } import

View

BGP view

Parameter

acl-number: Number of IP access control list, in the range of 2000 to 3999.

ip-prefix-name: Name of an address prefix list. It is used for filtering routing information by destination address. Its length ranges from 1 to 19.

gateway ip-prefix-name: Name of a peer-router address prefix list. It is used for filtering routing information by peer-router address. Its length ranges from 1 to 19.

Description

Use the filter-policy gateway import command to filter the learned routing information advertised by the peer with the specified address.

Use the undo filter-policy gateway import command to cancel the filtration to the routing information advertised by the peer with specified address.

Use the filter-policy import command to filter the received global routing information.

Use the undo filter-policy import command to remove the filtration to the received global routing information.

By default, filtration to the received routing information is not configured.

This command can be used to filter the routes received by BGP and determines whether to add the routes to the BGP routing table.

Example

Use ACL 2000 to filter the routing information received by BGP.

[SW8800-bgp] filter-policy 2000 import

16-26

3Com Switch 8800 Command Reference Guide

16.1.27 group

Chapter 16 BGP Configuration Commands

Syntax

group group-name [ internal | external ]

undo group group-name

View

BGP view

Parameter

group-name: Specifies the name of the peer group. It can consist of numbers or letters with a length ranging from 1 to 47. group-name is locally significant.

internal: Specifies the type of the peer group as IBGP.

external: Specifies the type of the peer group as EBGP, including other groups of other sub-ASs in the confederation.

Description

Use the group group-name command to establish a peer group.

Use the undo group group-name command to cancel the configured peer group.

The default type of BGP peer group is internal.

Rather than existing alone, a BGP peer must belong to a peer group. Therefore, when creating a BGP peer, you must create a BGP peer group first and then add the peer into the group.

All member peers must use the same update policy as the peer group, but they may use different ingress policies.

Example

Create an IBGP group named test.

[SW8800-bgp] group test

16.1.28 import-route

Syntax

import-route protocol [ med med-value | route-policy route-policy-name ]

undo import-route protocol

View

BGP view

16-27

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 16 BGP Configuration Commands

protocol: Specifies source routing protocols which can be imported, which include direct, ospf, ospf-nssa , ospf-ase, rip, isis and static at present.

med med-value: Specifies the MED value loaded by an imported route, ranging from 0 to 4294967295.

route-policy route-policy-name: Specifies a route-policy used for filtering imported routes of other protocols. It can consist of numbers and letters with a length ranging from 1 to 19.

Description

Use the import-route command to import routes of other protocols.

Use the undo import-route command to cancel importing routes of other protocols.

By default, BGP does not import routes of other protocols.

Example

Import routes of RIP.

[SW8800-bgp] import-route rip

16.1.29 network

Syntax

network ip-address [ address-mask ] [ route-policy route-policy-name ]

undo network ip-address [ address-mask ] [ route-policy route-policy-name ]

View

BGP view

Parameter

ip-address: Network address that BGP advertises.

address-mask: Mask of the network address.

route-policy-name: Route-policy applied to advertised routes.

Description

Use the network command to configure the network routes advertised by the local

BGP.

Use the undo network command to cancel the existing configuration.

By default, the local BGP does not advertise any routes.

16-28

3Com Switch 8800 Command Reference Guide

Example

Chapter 16 BGP Configuration Commands

Advertise routes to the network segment 10.0.0.0/16.

[SW8800-bgp] network 10.0.0.1 255.255.0.0

16.1.30 peer advertise-community

Syntax

peer group-name advertise-community

undo peer group-name advertise-community

View

BGP view

Parameter

group-name: Name of a peer group.

Description

Use the peer advertise-community command to enable the transmission of the community attribute to a peer group.

Use the undo peer advertise-community command to cancel the existing configuration.

By default, the community attribute is not transmitted to any peer group.

Related command: if-match community-list, apply community.

Example

Transmit community attribute to the peer group named test.

[SW8800-bgp] peer test advertise-community

16.1.31 peer allow-as-loop

Syntax

peer { group-name | peer-address } allow-as-loop [ number ]

undo peer { group-name | peer-address } allow-as-loop

View

BGP view

Parameter

group-name: Specifies name of the peer group.

peer-address: Specifies IP address of the peer.

16-29

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

number: Specifies the repeating times of local AS, ranging from 1 to 10.

Description

Use the peer allow-as-loop command to configure the repeating time of local AS.

Use the undo peer allow-as-loop command to remove the repeating time of local AS.

Related command: display current-configuration, display bgp routing-table peer,

display bgp routing-table group.

Example

Specify to configure the repeating times of local AS to 2.

[SW8800-bgp] peer 1.1.1.1 allow-as-loop 2

16.1.32 peer as-number

Syntax

peer group-name as-number as-number

undo peer group-name as-number

View

BGP view

Parameter

Description

Use the peer as-number command to configure the peer AS number of the specified peer group.

Use the undo peer as-number command to delete the peer AS number of the specified peer group.

By default, no peer AS number of the specified peer group is configured.

Example

group-name: Name of peer group.

as-number: Peer AS number of the peer group, the range is 1 to 65535.

Specify the peer AS number for the peer group test as 100.

[SW8800-bgp] peer test as-number 100

16.1.33 peer as-path-acl export

Syntax

peer group-name as-path-acl acl-number export

16-30

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

undo peer group-name as-path-acl acl-number export

View

BGP view

Parameter

group-name: Specifies name of the peer group.

acl-number: Number of an AS path list, in the range of 1 to 199.

export: Applies the AS path list to advertised routes.

Description

Use the peer as-path-acl export command to configure filtering Policy of BGP advertised routes based on AS path list.

Use the undo peer as-path-acl command to cancel the existing configuration.

By default, the peer group has no AS path list.

This command can only be configured on the peer group. The acl-number specifies the number of the AS path list. It is configured by the ip as-path-acl command rather than the acl command.

Related command: peer as-path-acl import, ip as-path-acl.

Example

Configure to filter the routes advertised by the peer group test using the AS path-list 1.

[SW8800-bgp] peer test as-path-acl 1 export

16.1.34 peer as-path-acl import

Syntax

peer { group-name | peer-address } as-path-acl acl-number import

undo peer { group-name | peer-address } as-path-acl acl-number import

View

BGP view

Parameter

group-name: Specifies the name of the peer group.

peer-address: Specifies IP address of the peer, in dotted decimal format.

acl-number: Specifies the filter list number of an AS regular expression. The range is 1 to 199.

import: Applies the AS path list to received routes.

16-31

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the peer as-path-acl import command to configure filtering policy of BGP received routes based on AS path list.

Use the undo peer as-path-acl import command to cancel the existing configuration.

By default, the peer/peer group has no AS path list.

The priority of the inbound filter policy configured for the peer is higher than that configured for the peer group.

Related command: peer as-path-acl export.

Example

Set the AS path ACL of the peer group test to filter BGP received routes.

[SW8800-bgp] peer test as-path-acl 1 import

16.1.35 peer connect-interface

Syntax

peer { group-name | peer-address } connect-interface interface-name

undo peer { group-name | peer-address } connect-interface interface-name

View

BGP view

Parameter

group-name: Specified peer group.

peer-address: IP address of the peer.

interface-name: Interface name.

Description

Use the peer connect-interface command to specify the source interface of a route update packet.

Use the undo peer connect-interface command to restore the best source interface.

By default, BGP uses the best source interface.

Usually, BGP uses the optimal route to update the source interface of the packets.

However, you can set the mode of the interface to Loopback in order to send route updates even if the interface is not work normally.

Example

Specify loopback0 as the source interface of a route update packet.

[SW8800-bgp] peer test connect-interface loopback 0

16-32

3Com Switch 8800 Command Reference Guide

16.1.36 peer default-route-advertise

Chapter 16 BGP Configuration Commands

Syntax

peer group-name default-route-advertise

undo peer group-name default-route-advertise

View

BGP view

Parameter

group-name: Specifies name of the peer group.

Description

Use the peer default-route-advertise command to configure a peer group to generate a default route for a peer.

Use the undo peer default-route-advertise command to cancel the existing configuration.

By default, a peer group does not import the default route.

For this command, no default route needs to exist in the routing table. A default route is sent unconditionally to a peer with the next hop as itself.

Example

Configure a peer group named test to generate a default route.

[SW8800-bgp] peer test default-route-advertise

16.1.37 peer description

Syntax

peer { group-name | peer-address } description description-line

undo peer { group-name | peer-address } description

View

BGP view

Parameter

group-name: Group name.

peer-address: Address of the peer.

description-line: Description information configured, which can be letters or numbers with the maximum length of 79.

16-33

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the peer description command to configure the description information of the peer/peer group.

Use the undo peer description command to cancel the description information of the peer/peer group.

By default, description information of peers/peer group is not configured.

Related command: display current-configuration, display bgp routing-table peer,

display bgp routing-table group.

Example

Configure the description information of the peer whose name is group1 as marlboro1.

[SW8800-bgp] peer group1 description marlboro1

16.1.38 peer ebgp-max-hop

Syntax

peer group-name ebgp-max-hop [ ttl ]

undo peer group-name ebgp-max-hop

View

BGP view

Parameter

Description

Use the peer ebgp-max-hop command to allow the router to establish EBGP connection with the peer on indirectly connected network.

Use the undo peer ebgp-max-hop command to cancel the existing configuration.

By default, this feature is disabled.

Example

group-name: Specifies the name of the peer group.

ttl: Maximum hop value. The range is 1 to 255. By default, the value is 64.

Allow the router to establish EBGP connection with the peer group named test indirectly connected.

[SW8800-bgp] peer test ebgp-max-hop

16-34

3Com Switch 8800 Command Reference Guide

16.1.39 peer enable

Chapter 16 BGP Configuration Commands

Syntax

peer { group-name | peer-address } enable

undo peer { group-name | peer-address } enable

View

BGP view

Parameter

group-name: Specifies the name of the peer group which specifies the entire peer group.

peer-address: IP address of a peer, which specifies a certain peer.

Description

Use the peer enable command to enable the specified peer/peer group.

Use the undo peer enable command to disable the specified peer/peer group.

By default, BGP peer/peer group is enabled.

If the specified peer/peer group is disabled, the router will not exchange routing information with the specified peer/peer group.

Example

Disable the specified peer. After the configuration, the local router does not exchange

BGP routing information with the specified peer.

[SW8800-bgp] peer 18.10.0.9 group group1

[SW8800-bgp] undo peer 18.10.0.9 enable

16.1.40 peer filter-policy export

Syntax

peer group-name filter-policy acl-number export

undo peer group-name filter-policy acl-number export

View

BGP view

Parameter

group-name: Specifies the name of the peer group.

acl-number: Specifies an IP acl number, ranging from 2000 to 3999.

export: Egress filter policy. It is only applicable to peer groups.

16-35

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the peer filter-policy export command to configure the filter-policy list of routes advertised by a peer group.

Use the undo peer filter-policy export command to cancel the existing configuration.

By default, a peer/peer group has no access control list (acl).

The peer filter-policy export command can only be configured on peer groups.

Related command: peer filter-policy export, ip as-path-acl, peer as-path-acl.

Example

Configure to use acl 2000 to filter the routes advertised by the peer group test.

[SW8800-bgp] peer test filter-policy 2000 export

16.1.41 peer filter-policy import

Syntax

peer { group-name | peer-address } filter-policy acl-number import

undo peer { group-name | peer-address } filter-policy acl-number import

View

BGP view

Parameter

group-name: Specifies the name of the peer group.

peer-address: Specifies the IP address of the peer.

acl-number: Specifies an IP acl number, ranging from 2000 to 3999. That is, you can use basic ACLs or advanced ACLs.

import: Ingress filter policy. It is only applicable to peer groups.

Description

Use the peer filter-policy import command to configure the filter-policy list of the routes received by a peer/peer group.

Use the undo peer filter-policy import command to cancel the existing configuration.

By default, a peer/peer group has no access control list (acl).

Related command: ip as-path-acl, peer as-path-acl export and peer as-path-acl

import.

The priority of the inbound filter policy configured for the peer is higher than that configured for the peer group.

16-36

3Com Switch 8800 Command Reference Guide

Example

Chapter 16 BGP Configuration Commands

Configure to use acl 2000 to filter the routes received by the peer group test..

[SW8800-bgp] peer test filter-policy 2000 import

16.1.42 peer group

Syntax

peer peer-address group group-name [ as-number as-number ]

undo peer peer-address

View

BGP view

Parameter

group-name: Specifies the name of the peer group, which can consist of letters and numbers with a length ranging from 1 to 47.

peer-address: Specifies the IP address of the peer.

as-number: Peer AS number of the peer/peer group, in the range of 1 to 65535.

Description

Use the peer group command to add a peer to the existing peer group.

Use the undo peer group command to delete the specified peer.

When you add a peer to an IBGP peer group, the as-number as-number argument is not available.

When a peer is added to an EBGP peer group that has been assigned an AS number, the peer inherits the configuration of the group. You cannot assign an AS number to the peer separately. If the peer group is not assigned an AS number, you need to assign an

AS number to each peer when adding it to the group. The peers in the same peer group may use different AS numbers.

Example

Add a peer to the peer group TEST.

[SW8800-bgp] group TEST

[SW8800-bgp] peer TEST as-number 2004

[SW8800-bgp] peer 10.1.1.1 group TEST

16.1.43 peer ip-prefix export

Syntax

peer group-name ip-prefix prefixname export

16-37

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

undo peer group-name ip-prefix prefixname export

View

BGP view

Parameter

group-name: Name of peer group.

prefixname: Name of the specified ip-prefix. It is a character string of 1 to 19 characters.

export: Applies the filtering policy on the route transmitted to the specified peer/peer group.

Description

Use the peer ip-prefix export command to configure the route filtering policy of routes advertised by the peer group based on the ip-prefix.

Use the undo peer ip-prefix export command to cancel the route filtering policy of the peer/peer group based on the ip-prefix.

By default, the route filtering policy of the peer group is not specified.

The peer ip-prefix export command can only be configured on peer groups.

Related command: peer ip-prefix import.

Example

Configure the route filtering policy of the peer group based on the ip-prefix 1.

[SW8800-bgp] peer group1 ip-prefix list1 export

16.1.44 peer ip-prefix import

Syntax

peer { group-name | peer-address } ip-prefix prefixname import

undo peer { group-name | peer-address } ip-prefix prefixname import

View

Parameter

BGP view

group-name: Name of peer group.

peer-address: IP address of the peer.

prefixname: Name of the specified ip-prefix.

import: Applies the filtering policy on the route received by the specified peer/peer group.

16-38

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the peer ip-prefix import command to configure the route filtering policy of routes received by the peer/peer group based on the ip-prefix.

Use the undo peer ip-prefix import command to cancel the route filtering policy of the peer/peer group based on the ip-prefix.

By default, the route filtering policy of the peer/peer group is not specified.

The priority of the inbound filter policy configured for the peer is higher than that configured for the peer group.

Related command: peer ip-prefix export.

Example

Configure the route filtering policy of the peer group based on the ip-prefix 1.

[SW8800-bgp] peer group1 ip-prefix list1 import

16.1.45 peer next-hop-local

Syntax

peer group-name next-hop-local

undo peer group-name next-hop-local

View

BGP view

Parameter

group-name: Specifies the name of the peer group.

Description

Use the peer next-hop-local command to configure to perform the process of the next hop in the route to be advertised to the peer/peer group and take the address of itself as the next hop.

Use the undo peer next-hop-local command to cancel the existing configuration.

Example

When BGP distributes the routes to the peer group “test”, it will take its own address as the next hop.

[SW8800-bgp] peer test next-hop-local

16-39

3Com Switch 8800 Command Reference Guide

16.1.46 peer password

Chapter 16 BGP Configuration Commands

Syntax

View

BGP view

Parameter

group-name: Name of the peer group.

peer-address: IP address of the peer, in dotted decimal format.

cipher: Displays the configured password in cipher text mode.

simple: Displays the configured password in simple text mode.

password: Password in character string form with 1 to 16 characters when parameter

simple is configured in the command or in the event of inputting the password in simple text mode but parameter cipher is configured in the command; with 24 characters in the event of inputting the password in cipher text mode when parameter cipher is configured in the command.

Description

Use the peer password command to configure MD5 authentication for BGP during

TCP connection setup.

Use the undo peer password command to cancel the configuration.

By default, BGP does not perform MD5 authentication when TCP connection is set up.

Once MD5 authentication is enabled, both parties involved in the authentication must be configured with identical authentication modes and passwords. Otherwise, TCP connection will not be set up because of the failed authentication.

This command is used to configure MD5 authentication for the specific peer only when the peer group to which the peer belongs is not configured with MD5 authentication.

Otherwise, the peer should be consistent with the peer group.

Example

peer { group-name | peer-address } password { cipher | simple } password

undo peer { group-name | peer-address } password

Adopt MD5 authentication on the TCP connection set up between the local router at

10.1.100.1 and the peer router at 10.1.100.2.

[SW8800-bgp] peer 10.1.100.2 password simple 3Com

Perform the similar configuration on the peer.

[SW8800-bgp] peer 10.1.100.1 password simple 3Com

16-40

3Com Switch 8800 Command Reference Guide

16.1.47 peer public-as-only

Chapter 16 BGP Configuration Commands

Syntax

peer group-name public-as-only

undo peer group-name public-as-only

View

BGP view

Parameter

group-name: Name of a peer group.

Description

Use the peer public-as-only command to configure not to carry the AS number when transmitting BGP update packets.

Use the undo peer public-as-only command to configure to carry the AS number when transmitting BGP update packets.

By default, private AS number is carried when transmitting BGP update packets.

Generally, BGP transmits BGP update packets with the AS number (either public AS number or private AS number). To enable some outbound routers to ignore the AS number when transmitting update packets, you can configure not to carry the AS number when transmitting BGP update packets.

Example

Configure not to carry the private AS number when transmitting BGP update packets to the peer named test.

[SW8800-bgp] peer test public-as-only

16.1.48 peer reflect-client

Syntax

peer group-name reflect-client

undo peer group-name reflect-client

View

BGP view

Parameter

group-name: Name of peer group.

16-41

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the peer reflect-client command to configure a peer group as the route reflector client.

Use the undo peer reflect-client command to cancel the existing configuration.

By default, there is no route reflector in an AS.

This command only applies to IBGP peer groups.

Related command: reflect between-clients, reflector cluster-id.

Example

Configure the peer group “test” as the route reflector client.

[SW8800-bgp] peer test reflect-client

16.1.49 peer route-policy export

Syntax

peer group-name route-policy route-policy-name export

undo peer group-name route-policy route-policy-name export

View

BGP view

Parameter

group-name: Name of peer group.

route-policy-name: The specified Route-policy.

Description

Use the peer route-policy export command to assign the Route-policy to the routes advertised to the peer group.

Use the undo peer route-policy export command to delete the specified

Route-policy.

By default, the peer/peer group has no Route-policy association.

The peer route-policy export command only applies to peer groups.

Related command: peer route-policy import.

Example

Apply the Route-policy named test-policy to the route going out of the peer group test.

[SW8800-bgp] peer test route-policy test-policy export

16-42

3Com Switch 8800 Command Reference Guide

16.1.50 peer route-policy import

Chapter 16 BGP Configuration Commands

Syntax

peer { group-name | peer-address } route-policy route-policy-name import

undo peer { group-name | peer-address } route-policy route-policy-name import

View

BGP view

Parameter

Description

Use the peer route-policy import command to assign the Route-policy to the route coming from the peer/peer group.

Use the undo peer route-policy import command to delete the specified

Route-policy.

By default, the peer/peer group has no Route-policy association.

The priority of the inbound filter policy configured for the peer is higher than that configured for the peer group.

Related commands, see peer route-policy export.

Example

group-name: Name of peer group.

peer-address: IP address of the peer.

route-policy-name: The specified Route-policy.

Apply the Route-policy named test-policy to the route coming from the peer group test.

[SW8800-bgp] peer test route-policy test-policy import

16.1.51 peer route-update-interval

Syntax

peer group-name route-update-interval seconds

undo peer group-name route-update-interval

View

BGP view

Parameter

group-name: Specifies the name of the configured peer group.

16-43

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

seconds: The minimum interval of sending BGP update packets route. The range is from 0 to 600 seconds. By default, the advertisement interval is five seconds for internal peer/peer group, and 30 seconds for external peer/peer group.

Description

Use the peer route-update-interval command to configure the interval for the transmission route of a peer group.

Use the undo peer route-update-interval command to restore the interval to the default value.

Example

Configure the interval of sending the route update packet of the BGP peer group “test” as 10 seconds.

[SW8800-bgp] peer test as-number 100

[SW8800-bgp] peer test route-update-interval 10

16.1.52 peer shutdown

Syntax

peer { peer-address | group-name } shutdown

undo peer { peer-address | group-name } shutdown

View

BGP view, BGP multicast view, BGP L2VPN view and BGP VRF view

Parameter

Description

Use the peer shutdown command to disconnect and not to reconnect bgp connections without deleting bgp configurations.

Example

group-name: Peer group names, which contain letters and numbers. The name length ranges from 1 to 47.

peer-address: Peer IP address.

Disconnect but not reconnect peer 1.1.1.1 in the BGP unicast view.

[SW8800-bgp] peer 1.1.1.1 shutdown

Disconnect but not reconnect the out group in the BGP unicast view.

[SW8800-bgp] peer out shutdown

Disconnect but not reconnect peer 1.1.1.1 in the BGP vrf view.

16-44

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

[SW8800-bgp-af-vpn-instance] peer 1.1.1.1 shutdown

Disconnect but not reconnect the out group in the BGP vrf view.

[SW8800-bgp-af-vpn-instance] peer out shutdown

16.1.53 peer timer

Syntax

peer { group-name | peer-address } timer keep-alive keepalive-interval hold

holdtime-interval }

undo peer { group-name | peer-address } timer

View

BGP view

Parameter

group-name: Name of peer group.

peer-address: IP address of the peer.

keepalive-interval: Keepalive interval to be specified. The range is 1 to 4294967295. By default, its value is 60 seconds.

holdtime-interval: Holdtime interval to be specified. The range is 3 to 4294967295. By default, its value is 180 seconds.

Description

Use the peer timer command to configure the Keepalive and Holdtime intervals for the specified peer/peer group.

Use the undo peer timer command to restore the default timer settings.

The timer configured by using this command has a higher priority than the one configured by using the timer command.

Example

Configure Keepalive and Holdtime intervals of the peer group “test”.

[SW8800-bgp] peer test timer keep-alive 60 hold 180

16.1.54 preference

Syntax

preference ebgp-value ibgp-value local-value

undo preference

16-45

3Com Switch 8800 Command Reference Guide

View

BGP view

Chapter 16 BGP Configuration Commands

Parameter

ebgp-value: Sets preference value for routes learned from external peers.

ibgp-value: Sets preference value for routes learned from internal peers.

local-value: Sets preference value for local-originated routes.

The ebgp-value, ibgp-value and local-value arguments are in the range of 1 to 256. By default, the first two is 256 and the last one is 130.

Description

Use the preference command to configure BGP preference.

Use the undo preference command to restore the default preference.

Three types of routes may be involved in BGP: routes learned from external peers, routes learned from internal peers and local-originated routes. You can set preference values for the three types of route.

Example

Set the preference of EBGP routes, IBGP routes and local-originated routes all to 170.

[SW8800-bgp] preference 170 170 170

16.1.55 reflect between-clients

Syntax

reflect between-clients

undo reflect between-clients

View

BGP view

Parameter

None

Description

Use the reflect between-clients command to configure the between-client reflection of a route.

Use the undo reflect between-clients command to disable this function.

After the route reflector is configured, the route reflector reflects the routes of one client to other clients by default.

16-46

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

By default, the clients of a route reflector need not be fully connected. If the clients are fully connected, a route reflector is not required.

Related command: reflector cluster-id, peer reflect-client.

Example

Disable the reflection between clients.

[SW8800-bgp] undo reflect between-clients

16.1.56 reflector cluster-id

Syntax

reflector cluster-id { cluster-id | address }

undo reflector cluster-id

View

BGP view

Parameter

cluster-id: Specifies the cluster ID of the route reflector with the range from 1 to

4294967295. It is an integer.

address: Used as the interface address of the route reflector’s cluster ID.

Description

Use the reflector cluster-id command to configure the cluster ID of the route reflector.

Use the undo reflector cluster-id command to delete the cluster ID of the route reflector.

By default, each route reflector uses its Router ID as the cluster ID.

Usually, there is only one route reflector in a cluster. In this case, the cluster is identified by the router ID of the route reflector. You can configure multiple route reflectors to improve network stability. If there are multiple route reflectors, you can use this command to configure the same cluster ID for all these route reflectors.

Related command: reflect between-clients, peer reflect-client.

Example

Set the cluster ID of the route reflector as 80.

[SW8800-bgp] reflector cluster-id 80

[SW8800-bgp] peer 172.38.160.10 reflect-client

16-47

3Com Switch 8800 Command Reference Guide

16.1.57 refresh bgp

Chapter 16 BGP Configuration Commands

Syntax

refresh bgp { all | peer-address | group group-name } { import | export }

View

User view

Parameter

Description

Use the refresh bgp command to request the peer to refresh advertised routes or refresh the routes advertised to the peer.

After the BGP connection is established, only incremental routes are sent. However, some special cases exist. For example, when the routing policy changes, the routes advertised to the peer or the advertised routes from the peer need refreshing so that they can be filtered according to the new policy.

Example

all: Resets all the connections with BGP.

peer-address: Resets the connection with a specified BGP peer.

group-name: Resets the connection with a specified BGP peer group.

import: Requests the peer for all its routes by sending Route-refresh packets to the peer.

export: Refreshes routes advertised to the peers.

Request all peers to re-send the routes.

<SW8800>refresh bgp all import

16.1.58 reset bgp

Syntax

reset bgp { all | peer-address [ flap-info ] }

View

User view

Parameter

peer-address: Resets the connection with a specified BGP peer.

all: Resets all the connections with BGP.

flap-info: Resets the flap-info of a record at this peer address.

16-48

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the reset bgp peer-address command to reset the connection of BGP with a specified BGP peer.

Use the reset bgp all command to reset all the connections with BGP.

If the BGP policy or the protocol configuration changes, resetting the BGP connection can make the newly configured policy take effect immediately.

Example

Reset all the BGP connections to enable the new configuration (after configuring the new Keepalive interval and Holdtime interval using the timer command).

<SW8800>reset bgp all

16.1.59 reset bgp flap-info

Syntax

reset bgp flap-info [ regular-expression as-regular-expression | as-path-acl

acl-number } | network-address [ mask ] ]

View

User view

Parameter

Description

Use the reset bgp flap-info command to reset the flap-info of a route.

Related command: dampening.

Example

regular-expression as-regular-expression: Resets the flap-info matching the AS path regular expression.

as-path-acl acl-number: Resets the flap-info in consistency with a specified filter list.

The range of the acl-number argument is 1 to 199.

network-address: Resets the flap-info of a record at this IP address.

mask: Network mask.

Reset the flap-info of all the routes that go through filter list 1.

<SW8800> reset bgp flap-info as-path-acl 1

16-49

3Com Switch 8800 Command Reference Guide

16.1.60 reset bgp group

Chapter 16 BGP Configuration Commands

Syntax

reset bgp group group-name

View

User view

Parameter

group-name: Specifies the name of the peer group. It is a character string of 1 to 47 characters.

Description

Use the reset bgp group command to reset the connections between the BGP and all the members of a group.

Related command: peer group.

Example

Reset BGP connections of all members from group1.

<SW8800> reset bgp group group1

16.1.61 reset dampening

Syntax

reset bgp dampening [ network-address [ mask ] ]

View

User view

Parameter

network-address: Network IP address related to the clearing attenuation information.

mask: Network mask.

Description

Use the reset dampening command to reset route attenuation information and release suppressed routes.

Related command: dampening, display bgp routing-table dampened.

Example

Reset the route attenuation information of the specified route 20.1.0.0, and release the suppression of a suppressed route.

16-50

3Com Switch 8800 Command Reference Guide Chapter 16 BGP Configuration Commands

<SW8800>reset dampening 20.1.0.0 255.255.0.0

16.1.62 summary

Syntax

summary

undo summary

View

BGP view

Parameter

None

Description

Use the summary command to configure auto aggregation of sub-network routes.

Use the undo summary command to disable auto aggregation of sub-network routes.

By default, no auto aggregation of sub-network routes is executed.

After the summary is configured, BGP cannot receive the sub-network routes imported from the IGP, so the amount of the routing information can be reduced.

Example

Make the auto aggregation of the sub-network routes.

[SW8800-bgp] summary

16.1.63 timer

Syntax

timer keep-alive keepalive-interval hold holdtime-interval

undo timer

View

BGP view

Parameter

keepalive-interval: Sets the interval time value for keepalive time which ranges from 1 to 4294967295. By default, its value is 60 seconds.

holdtime-interval: Sets the interval time value for hold time which ranges from 3 to

4294967295. By default, its value is 180 seconds.

16-51

3Com Switch 8800 Command Reference Guide

Description

Chapter 16 BGP Configuration Commands

Use the timer command to configure the Keep-alive and Hold-time timer of BGP.

Use the undo timer command to restore the default value of the Keep-alive and

Hold-time of the timer.

Example

Configure the Keep-alive timer as 120 seconds and Hold-time timer as 360 seconds.

[SW8800-bgp] timer keep-alive 120 hold 360

16.1.64 undo synchronization

Syntax undo synchronization

View

BGP view

Parameter

None

Description

Use the undo synchronization command to cancel the synchronization of BGP and

IGP.

By default, BGP does not synchronize with IGP.

If the local BGP is not set synchronous with the IGP and the next hop of the learned

BGP route is reachable, the local BGP will add this BGP route into its routing table immediately after it learns the route, rather than waiting till the IGP also learns the route.

This command means BGP does not synchronize with IGP in current system. You need not configure it for the Switch 8800 because they do not support synchronization of

BGP and IGP at present.

Example

Cancel the synchronization of BGP and IGP.

[SW8800-bgp] undo synchronization

16-52

3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands

Chapter 17 IP Routing Policy Configuration

Commands

Note:

When a switch runs a routing protocol, it can perform the router functions. A router that is referred to in the following or its icon represents a generalized router or an Switch

8800 running routing protocols. To improve readability, this will not be described in the other parts of the manual.

For the configuration of VPN instance, refer to the MPLS module in the 3Com Switch

8800 Configuration Guide.

17.1 IP Routing Policy Configuration Commands

17.1.1 apply as-path

Syntax

apply as-path as-number-1 [ as-number-2 [ as-number-3 ... ] ]

undo apply as-path

View

Route policy view

Parameter

as-number-1... as-number-n: AS number to be added.

Description

Use the apply as-path command to configure AS number to be added in front of the original AS path in Route-policy.

Use the undo apply as-path command to cancel the AS sequence number added in front of the original AS path.

By default, no AS number is set.

If the match condition of Route-policy is matched, the AS attribute of the transmitting route will be changed. You can add up to 10 AS numbers.

17-1

3Com Switch 8800 Command Reference Guide

Example

Chapter 17 IP Routing Policy Configuration Commands

Configure AS 200 to be added in front of the original AS path in Route-policy.

[SW8800-route-policy] apply as-path 200

17.1.2 apply community

Syntax

apply community [ [ aa:nn | no-export-subconfed | no-export | no-advertise ] *

[ additive ] | additive | none ]

undo apply community

View

Route policy view

Parameter

none: Community attribute of the deleted route.

aa:nn: Community number.

no-export-subconfed: Does not send matched route outside the sub-AS.

no-advertise: Does not send matched route to any peer.

no-export: Does not announce the route to the AS or the association outside, but can advertises to other sub-ASs.

additive: Community attribute of the additive route.

Description

Use the apply community command to configure the set BGP community attribute of

Route-policy.

Use the undo apply community command to cancel the set BGP community attribute.

By default, BGP community attribute is not set.

If the matching conditions defined in the Route-policy are satisfied, the BGP community attribute is set.

Related command: ip community-list, if-match community-list, route-policy,

display bgp routing-table community.

Example

Configure one Route-policy setcommunity, whose node serial number is 16 and match mode is permit, and enter Route policy view to set match conditions and attribute modification actions to be executed.

[SW8800] route-policy permit node 16

[SW8800-route-policy] if-match as-path 8

17-2

3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands

[SW8800-route-policy] apply community no-export

17.1.3 apply cost

Syntax

apply cost value

undo apply cost

View

Route policy view

Parameter

value: Specifies the route cost value of route information.

Description

Use the apply cost command to configure the route cost value of route information.

Use the undo apply cost command to cancel the apply sub-statement.

By default, no apply sub-statement is defined.

This command is one apply sub-statement of Route-policy. It configures the route cost value of the routing information that passes the filtration.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply

local-preference, apply origin and apply tag.

Example

Define one apply sub-statement. When it is used for setting route information attribute, it sets the route metric value of route information as 120.

[SW8800-route-policy] apply cost 120

17.1.4 apply cost-type

Syntax

apply cost-type [ internal | external ]

undo apply cost-type

View

Route policy View

17-3

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 17 IP Routing Policy Configuration Commands

internal: For BGP, it indicates when a BGP peer advertises routes to its EBGP peer, the peer uses the cost value of IGP as the MED value of BGP. For IS-IS, it indicates the internal cost. For other protocols, it is invalid.

external: It is only valid for IS-IS and it indicates external cost type of IS-IS.

Description

Use the apply cost-type command to configure the route cost type of route information.

Use the undo apply cost-type command to cancel the apply sub-statement.

By default, route cost type is not set.

Example

Set the cost type of IGP as MED value of BGP.

[SW8800-route-policy] apply cost-type internal

17.1.5 apply ip next-hop

Syntax

apply ip next-hop ip-address

undo apply ip next-hop

View

Route policy view

Parameter

ip-address: The next-hop address.

Description

Use the apply ip next-hop command to configure the next hop address of route information.

Use the undo apply ip next-hop command to cancel the apply sub-statement.

By default, no apply sub-statement is defined.

This command is one of the apply sub-statements of Route-policy. When it is used for setting route information attribute, it sets the next hop address area of route information passing filtration.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match cost, if-match tag, route-policy, apply local-preference, apply

cost, apply origin and apply tag.

17-4

3Com Switch 8800 Command Reference Guide

Example

Chapter 17 IP Routing Policy Configuration Commands

Define an apply sub-statement. Set the next hop address of route information as

193.1.1.8 when it is used for setting route information attribute.

[SW8800-route-policy] apply ip next-hop 193.1.1.8

17.1.6 apply isis

Syntax

apply isis [ level-1 | level-2 | level-1-2 ]

undo apply isis

View

Route policy view

Parameter

Description

Use the apply isis command to configure to apply the level of a matched route to be imported to level-1, level-2 or level-1-2.

Use the undo apply isis command to cancel the apply sub-statement.

By default, no apply clause is defined.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply cost,

apply origin, apply tag.

Example

level-1: Sets to import the matched route to level-1 area.

level-2: Sets to import the matched route to level-2 area.

level-1-2: Sets to import the matched route to both level-1 and levle-2 area.

Define an apply clause, setting to import the route to a level-2 area.

[SW8800-route-policy] apply isis level-2

17.1.7 apply local-preference

Syntax

apply local-preference local-preference

undo apply local-preference

View

Route policy view

17-5

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 17 IP Routing Policy Configuration Commands

local-preference: Newly set local preference.

Description

Use the apply local-preference command to configure to apply the local preference of route information.

Use the undo apply local-preference command to cancel the apply sub-statement.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply

local-preference, apply origin and apply tag.

Example

Define an apply sub-statement. Apply the local preference level of route information as

130 when this apply sub-statement is used for setting route information attribute. .

[SW8800-route-policy] apply local-preference 130

17.1.8 apply origin

Syntax

apply origin { igp | egp as-number | incomplete }

undo apply origin

View

Route policy view

Parameter

igp: Sets the BGP route information source as internal route.

egp: Sets the BGP route information source as external route

as-number: Specifies AS number of external route.

incomplete: Sets the BGP route information source as unknown source.

Description

Use the apply origin command to configure to apply the route source.

Use the undo apply origin command to cancel the apply sub-statement.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply

local-preference, apply cost and apply tag.

17-6

3Com Switch 8800 Command Reference Guide

Example

Chapter 17 IP Routing Policy Configuration Commands

Define an apply sub-statement. Define one apply sub-statement. When it is used for setting route information attribute, it sets the route source of BGP route information as igp.

[SW8800-route-policy] apply origin igp

17.1.9 apply tag

Syntax

View

Route policy view

Parameter

value: Specifies the tag value of route information.

Description

Use the apply tag command to configure to set the tag area of OSPF route information.

Use the undo apply tag command to cancel the apply sub-statement.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match cost, if-match tag, route-policy, apply ip next-hop, apply

local-preference, apply cost and apply origin.

Example

apply tag value

undo apply tag

Define one apply sub-statement. When it is used for setting route information attribute, it sets the tag area of route information as 100.

[SW8800-route-policy] apply tag 100

17.1.10 display ip ip-prefix

Syntax

display ip ip-prefix [ ip-prefix-name ]

View

Any view

Parameter

ip-prefix-name: Specifies displayed address prefix list name.

17-7

3Com Switch 8800 Command Reference Guide

Description

Chapter 17 IP Routing Policy Configuration Commands

Use the display ip ip-prefix command to view the address prefix list.

If no ip-prefix-name is specified, all configured address prefix lists are displayed.

Related command: ip ip-prefix.

Example

Display the information of the address prefix list named as p1.

<SW8800> display ip ip-prefix p1 name index conditions ip-prefix / mask GE LE p1 10 permit 10.1.0.0/16 17 18

Table 17-1 Description on the fields of the display ip ip-prefix command

Field

name index conditions ip-prefix / mask

GE

LE

Name of ip-prefix

Description

Internal sequence number of ip-prefix

Mode: permit or deny

Address and network segment length of ip-prefix

Greater-equal value of ip-prefix network segment length

Less-equal value of ip-prefix network segment length

17.1.11 display route-policy

Syntax

display route-policy [ route-policy-name ]

View

Any view

Parameter

route-policy-name: Specifies displayed Route-policy name.

Description

Use the display route-policy command to view the configured Route-policy.

If the route-policy-name argument is not specified, all configured Route-policies are displayed.

Related command: route-policy.

17-8

3Com Switch 8800 Command Reference Guide

Example

Chapter 17 IP Routing Policy Configuration Commands

Display the information of Route-policy named as policy1.

<SW8800> display route-policy policy1

Route-policy : policy1

Permit 10 : if-match (prefixlist) p1

apply cost 100

matched : 0 denied : 0

Table 17-2 Description on the fields of the display route-policy command

Field

Route-policy Name of ip-prefix

Description

Information of the route-policy with mode configured as permit and node as 10: if-match

(prefixlist) p1

The configured if-match clause

Permit 10 apply cost 100 matched denied

Apply routing cost 100 to the routes matching the conditions defined by if-match clause

Number of routes matching the conditions set by if-match clause

Number of routes not matching the conditions set by if-match clause

17.1.12 filter-policy export

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

View

Routing protocol view

Parameter

acl-number: Number of the access control list used for matching the destination address field of the routing information.

ip-prefix-name: Address prefix list used for matching the routing information destination address field.

protocol: The routing information of which kind of route protocol to be filtered.

17-9

3Com Switch 8800 Command Reference Guide

Description

Chapter 17 IP Routing Policy Configuration Commands

Use the filter-policy export command to configure to set the filtering conditions of the routing information advertised by a certain type of routing protocols.

Use the undo filter-policy export command to cancel the filtering conditions set.

By default, the advertised routing information is not filtered.

In some cases, it may be required that only the routing information meeting some conditions can be advertised. Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be advertised.

Related command: filter-policy import.

Example

Define the filtering rules for advertising the routing information of RIP. Only the routing information passing the filtering of address prefix list p1 will be advertised by RIP.

[SW8800-rip] filter-policy ip-prefix p1 export

17.1.13 filter-policy import

Syntax

filter-policy gateway ip-prefix-name import

undo filter-policy gateway ip-prefix-name import

filter-policy { acl-number | ip-prefix ip-prefix-name } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name } import

View

Routing protocol view

Parameter

acl-number: The access control list number used for matching the destination address field of the routing information.

ip-prefix ip-prefix-name: The prefix address list name. Its matching object is the destination address field of the routing information.

gateway ip-prefix-name: The prefix address list name of the neighbor router address.

Its matching object is the routing information advertised by the specified neighbor router.

Description

Use the filter-policy gateway import command to filter the received routing information advertised by a specified router.

17-10

3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands

Use the undo filter-policy gateway import command to cancel the setting of the filtering condition.

Use the filter-policy import command to set the condition for filtering the routing information.

Use the undo filter-policy import command to cancel the setting of filter condition

By default, the received routing information is not filtered.

You may use the filter-policy command to filter routing information based on certain condition when receiving of only some routing information is desired.

Related command: filter-policy export.

Example

Define the filtering rule for receiving routing information of RIP. Only the routing information filtered through the address prefix list p1 can be received by RIP.

[SW8800-rip] filter-policy ip-prefix p1 import

17.1.14 if-match { acl | ip-prefix }

Syntax

if-match { acl acl-number | ip-prefix ip-prefix-name }

undo if-match { acl | ip-prefix }

View

Route policy view

Parameter

acl-number: Specifies the number of the access control list used for filtration.

ip-prefix-name: Specifies the name of the prefix address list used for filtration.

Description

Use the if-match { acl | ip-prefix } command to specify one matching rule for the route-policy and configure the IP address range to match the Route-policy.

Use the undo if-match { acl | ip-prefix } command to cancel the setting of the match rule.

Filtration is performed by quoting an ACL or a prefix address list.

Related command: if-match interface, if-match ip next-hop, if-match cost, if-match

tag, route-policy, apply ip next-hop, apply cost, apply local-preference, apply

origin and apply tag.

17-11

3Com Switch 8800 Command Reference Guide

Example

Chapter 17 IP Routing Policy Configuration Commands

Define one if-match sub-statement. When the sub-statement is used for filtering route information, the route information filtered by route destination address through address prefix list p1 can pass the if-match sub-statement.

[SW8800-route-policy] if-match ip-prefix p1

17.1.15 if-match as-path

Syntax

if-match as-path acl-number

undo if-match as-path

View

Route policy view

Parameter

acl-number: AS path list number, ranging from 1 to 199.

Description

Use the if-match as-path command to match the AS path domain of the BGP routing information.

Use the undo if-match as-path command to cancel the match of AS path domain.

By default, AS path list number is not matched.

This command is one if-match sub-statement of route-policy. It is used to filter BGP routing information and specifies match conditions according to the AS path attribute of routing information.

Example

An as-path numbered as 2 is defined first, allowing the routing information of AS 200 and 300. Then the route-policy named test is defined. The node number 10 of this route-policy defines an if-match sub-statement, which quotes the definition of as-path.

[SW8800] ip as-path-acl 2 permit 200:300

[SW8800] route-policy test permit node 10

[SW8800-route-policy] if-match as-path 2

17.1.16 if-match community

Syntax

if-match community { basic-community-number [ whole-match ] |

adv-community-number }

17-12

3Com Switch 8800 Command Reference Guide

undo if-match community

View

Route policy view

Parameter

Chapter 17 IP Routing Policy Configuration Commands

basic-community-list-number: Basic community list number, ranging from 1 to 99.

adv-community-list-number: Advanced community list number, ranging from 100 to

199.

whole-match: Exact match. That is, all specified communities must be present and only these communities are present.

Description

Use the if-match community command to match the community attribute of the BGP information.

Use the undo if-match community command to cancel the match of the community attribute.

By default, no match operation is done on the community attribute of BGP routes.

This if-match sub-statement of route-policy is used to filter BGP routing information.

The match condition is specified according to the community attributes of the routing information.

Related command: route-policy, ip community-list.

Example

A community-list numbered as 1 is defined first, allowing the autonomous system number to contain the routing information of 100 and 200. Then, the route-policy named test is defined. The node number 10 of the route-policy defines an if-match sub-statement, which quotes the definition of the community-list.

[SW8800] ip community-list 1 permit 100:200

[SW8800] route-policy test permit node 10

[SW8800-route-policy] if-match community 1

17.1.17 if-match cost

Syntax

if-match cost value

undo if-match cost

View

Route policy view

17-13

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 17 IP Routing Policy Configuration Commands

value: Specifies the required route metric value, ranging from 0 to 4294967295.

Description

Use the if-match cost command to configure one of the match rules of the route-policy to match the cost of the routing information.

Use the undo if-match cost command to cancel the configuration of the match rule.

By default, no if-match sub-statement is defined.

This command is one if-match sub-statement of route-policy. If the cost of a route matches the specified cost, the route matches this if-match sub-statement.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match tag, route-policy, apply ip next-hop, apply local-preference,

apply cost, apply origin, apply tag.

Example

A if-match sub-statement is defined, which allows the routing information with routing cost 8 to pass this if-match sub-statement.

[SW8800-route-policy] if-match cost 8

17.1.18 if-match interface

Syntax

if-match interface { interface-name | interface-type interface-number }

undo if-match interface

View

Route policy view

Parameter

interface-type: Specifies interface type.

interface-number: Specifies interface number.

interface-name: Specifies interface name.

Description

Use the if-match interface command to configure to match the route whose next hop is designated interface.

Use the undo if-match interface command to cancel the setting of matching condition.

By default, no if-match sub-statement is defined.

17-14

3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands

This command is one if-match sub-statement of route-policy. It matches the corresponding interface of route next hop when filtering route.

Related commands: if-match acl, if-match ip-prefix, if-match ip next-hop, if-match

cost, if-match tag, route-policy, apply ip next-hop, apply cost, apply

local-preference, apply origin and apply tag.

Example

Define one if-match sub-statement to match the route whose next hop interface is

Vlan-interface 1

[SW8800-route-policy] if-match interface Vlan-interface 1

17.1.19 if-match ip next-hop

Syntax

if-match ip next-hop { acl acl-number | ip-prefix ip-prefix-name }

undo if-match ip next-hop [ ip-prefix ]

View

Route policy view

Parameter

acl-number: Specifies the number of the access control list used for filtration. The range is 2000 to 2999.

ip-prefix-name: Specifies the name of the prefix address list used for filtration. Its length ranges from 1 to 19.

Description

Use the if-match ip next-hop command to configure one match rule on next hop address of routing information for the route-policy.

Use the undo if-match ip next-hop command to cancel the setting of ACL matching condition.

Use the undo if-match ip next-hop ip-prefix command to cancel the setting of address prefix list matching condition.

Filtration is performed by quoting an ACL or an address prefix list.

By default, no if-match sub-statement is defined.

This command is one if-match sub-statement of route-policy. It filters routing information based on next hop address by referencing an ACL or an address prefix list.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match

cost, if-match tag, route-policy, apply ip next-hop, apply cost, apply

local-preference, apply origin and apply tag.

17-15

3Com Switch 8800 Command Reference Guide

Example

Chapter 17 IP Routing Policy Configuration Commands

Define an if-match sub-statement. It permits the routing information, whose route next hop address passes the filtration of the prefix address list p1, to pass this if-match sub-statement.

[SW8800-route-policy] if-match ip next-hop ip-prefix p1

17.1.20 if-match tag

Syntax

if-match tag value

undo if-match tag

View

Route policy view

Parameter

value: Specifies the value in tag field of OSPF route information.

Description

Use the if-match tag command to configure to match the tag field of OSPF route information.

Use the undo if-match tag command to cancel the existing matching rules.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match cost, route-policy, apply ip next-hop, apply cost, apply

local-preference, apply origin and apply tag.

Example

Define one if-match sub-statement and enable the OSPF route information whose value of tag is 8 to pass the if-match sub-statement.

[SW8800-route-policy] if-match tag 8

17.1.21 ip as-path-acl

Syntax

ip as-path-acl acl-number { permit | deny } as-regular-expression

undo ip as-path-acl acl-number

View

System view

17-16

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 17 IP Routing Policy Configuration Commands

acl-number: Number of AS path list ranging from 1 to 199.

as-regular-expression: AS regular expression.

Description

Use the ip as-path-acl command to configure an AS path regular express.

Use the undo ip as-path-acl command to disable the defined regular expression.

The configured AS path list can be used in BGP policy.

Related command: peer as-path-acl, display bgp routing-table as-path-acl.

Example

Configure an AS path list.

[SW8800] ip as-path-acl 10 permit 200,300

17.1.22 ip community-list

Syntax

ip community-list basic-comm-list-number { permit | deny } [ aa:nn | internet |

no-export-subconfed | no-advertise | no-export ]*

ip community-list adv-comm-list-number { permit | deny } comm-regular-expression

undo ip community-list { basic-comm-list-number | adv-comm-list-number }

View

Parameter

System view

basic-comm-list-number: Number of the basic community list ranging from 1 to 99.

adv-comm-list-number: Number of the advanced community list ranging from 100 to

199.

permit: Permits those that match conditions to access.

deny: Denies those that match conditions to access.

aa:nn: Community number.

internet: Advertises all routes.

no-export-subconfed: Used not to advertise the matched route beyond the sub-ASs.

no-advertise: Used not to send the matched route to any peer.

no-export: Does not advertise routes beyond the AS or the confederation, but can advertise routes to other sub-ASs within the confederation.

comm-regular-expression: Community attribute in regular expression format.

17-17

3Com Switch 8800 Command Reference Guide

Description

Chapter 17 IP Routing Policy Configuration Commands

Use the ip community-list command to configure a BGP community list.

Use the undo ip community-list command to cancel the configured BGP community list.

The configured community list can be used in BGP policy.

Related command: apply community, display bgp routing-table community-list.

Example

Define a community attribute list which does not advertise routes with the community attribute beyond the local AS.

[SW8800] ip community-list 6 permit no-export-subconfed

17.1.23 ip ip-prefix

Syntax

ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } network len

[ greater-equal greater-equal | less-equal less-equal ]

undo ip ip-prefix ip-prefix-name [ index index-number | permit | deny ]

View

System view

Parameter

ip-prefix-name: The specified address prefix list name. It identifies one address prefix list uniquely.

index-number: Identifies an item in the prefix address list. The item with a smaller index-number will be tested first.

permit: Specifies the match mode of the defined address prefix list items as permit mode. In this case, if the IP address of the route to be filtered matches an entry in the address prefix list, the route passes the filtering and no further check is performed. If not, it is check against the next entry.

deny: Specifies the match mode of the defined address prefix list items as deny mode.

In this case, if the IP address of the route to be filtered matches an entry in the address prefix list, the route is denied without further check. If otherwise, the IP address is checked against the next address prefix entry.

network: The IP address prefix range (IP address). If it is 0.0.0.0 0, all the IP addresses are matched.

len: The IP address prefix range (mask length). If it is 0.0.0.0 0, all the IP addresses are matched.

17-18

3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands

greater-equal, less-equal: The address prefix range [greater-equal, less-equal] to be matched after the address prefix network len has been matched. The meaning of

greater-equal is "larger than or equal to", and the meaning of less-equal is "less than or equal to". The range is len <= greater-equal <= less-equal <= 32. When only

greater-equal is used, it denotes the prefix range [greater-equal, 32]. When only

less-equal is used, it denotes the prefix range [len, less-equal].

Description

Use the ip ip-prefix command to configure an address prefix list or one of its items.

Use the undo ip ip-prefix command to delete an address prefix list or one of its items.

The address prefix list is used for IP address filtering. An address prefix list may contain several items, and each item specifies one address prefix range. The inter-item filtering relation is "OR", i.e. passing an item means passing the filtering of this address prefix list. Not passing the filtering of any item means not passing the filtration of this prefix address list.

The address prefix range may contain two parts, which are determined by len and

[greater-equal, less-equal] respectively. If the prefix ranges of these two parts are both specified, the IP to be filtered must match the prefix ranges of these two parts.

If you specify network len as 0.0.0.0 0, it only matches the default route.

If you specify network len as 0.0.0.0 0 less-equal 32, it matches all routes.

Example

Define an address prefix list named p1, permitting the routes of the network segment

10.0.192.0 8 with a mask length of 17 or 18 to pass.

[SW8800] ip ip-prefix p1 permit 10.0.192.0 8 greater-equal 17 less-equal 18

17.1.24 route-policy

Syntax

route-policy route-policy-name { permit | deny } node node-number

undo route-policy route-policy-name [ permit | deny | node node-number ]

View

System view

Parameter

route-policy-name: Specifies the Route-policy name to identify one Route-policy uniquely.

permit: Specifies the match mode of the defined Route-policy node as permit mode.

When a route satisfy all if-match sub-statements of this node and pass the filtration, the

17-19

3Com Switch 8800 Command Reference Guide Chapter 17 IP Routing Policy Configuration Commands apply sub-statement of this node will be executed on the route. Otherwise, the route will be tested by the next node.

deny: Specifies the match mode of the defined Route-policy node as deny mode.

When a route satisfy all if-match sub-statements of this node and fails to pass the filtration, it will not tested by the next node.

node: Node of the route policy.

node-number: Index of the node in the route-policy. When this route-policy is used for routing information filtration, the node with a smaller node-number will be tested first.

Description

Use the route-policy command to create a route-policy and enter its view.

Use the undo route-policy command to delete the established Route-policy.

By default, no Route-policy is defined.

Route-policy is used for route information filtration or policy routing. One Route-policy comprises of some nodes and each node comprises of some match and apply sub-statements. The if-match sub-statement defines the match rules of this node and the apply sub-statement defines the actions after passing the filtration of this node. The filtering relationship between the if-match sub-statements of the node is “and”, i.e., all if-match sub-statements that meet the node. The filtering relation between Route-policy nodes is "OR", i.e. passing the filtering of one node means passing the filtering of this

Route-policy. If the information does not pass the filtration of any nodes, it cannot pass the filtration of this Route-policy.

Related command: if-match interface, if-match acl, if-match ip-prefix, if-match ip

next-hop, if-match cost, if-match tag, apply ip next-hop, apply local-preference,

apply cost, apply origin and apply tag.

Example

Configure one Route-policy policy1, whose node number is 10 and if-match mode is permit, and enter Route policy view.

[SW8800] route-policy policy1 permit node 10

[SW8800-route-policy]

17-20

3Com Switch 8800 Command Reference Guide Chapter 18 IGMP Snooping Configuration Commands

Chapter 18 IGMP Snooping Configuration

Commands

18.1 IGMP Snooping Configuration Commands

18.1.1 display igmp-snooping configuration

Syntax display igmp-snooping configuration

View

Any view

Parameter

None

Description

Use the display igmp-snooping configuration command to view the IGMP Snooping configuration information.

When IGMP Snooping is enabled, the information displayed includes whether IGMP

Snooping is enabled, router port aging time, maximum response time of a query and multicast group port aging time.

Related command: igmp-snooping.

Example

Display the IGMP Snooping configuration information of the switch.

<SW8800> display igmp-snooping configuration

Enable IGMP-Snooping.

Enable IGMP-Snooping.

The router port timeout is 105 second(s).

The max response timeout is 1 second(s).

The host port timeout is 260 second(s).

Enable IGMP-Snooping Non-Flooding.

The information above tells us that: IGMP Snooping is enabled; the router port aging time is set to be 105 seconds; the max response time of a query is set to be 1 seconds; the aging time of a multicast group member is set to be 260 seconds. Non-broadcasting of unknown multicast data packets in a VLAN is enabled.

18-1

3Com Switch 8800 Command Reference Guide

18.1.2 display igmp-snooping group

Chapter 18 IGMP Snooping Configuration Commands

Syntax

display igmp-snooping group [ vlan vlanid ]

View

Any view

Parameter

Description

Use the display igmp-snooping group command to view the IP multicast group and

MAC multicast group information of a VLAN or all the VLAN where the Ethernet switch is located. It displays the information such as VLAN ID, router port, IP multicast group address, member ports in the IP multicast group, MAC multicast group, MAC multicast group address, and the member ports in the MAC multicast group.

Example

vlan vlanid: Specifies the VLAN where the multicast group to be viewed is located.

When the parameter is omitted, the command will display the information about all the multicast groups on the VLAN.

Display the multicast group information about VLAN2.

<SW8800> display igmp-snooping group vlan 2

***************Multicast group table***************

Vlan(id):2.

Router port(s):Ethernet3/1/1

IP group(s):the following ip group(s) match to one mac group.

IP group address:230.45.45.1

Member port(s):Ethernet3/1/12

MAC group(s):

MAC group address:01-00-5e-2d-2d-01

Member port(s):Ethernet3/1/12 z z z z z z

We can know from the information listed above that :

There is a multicast group in VLAN 2;

The router port is Ethernet 2/1/1;

The IP multicast group address is 230.45.45.1;

The member of the IP multicast group is Ethernet 2/1/2;

MAC multicast group is 0100-5e2d-2d01;

The member of the MAC multicast group is Ethernet 2/1/2.

18-2

3Com Switch 8800 Command Reference Guide Chapter 18 IGMP Snooping Configuration Commands

18.1.3 display igmp-snooping statistics

Syntax display igmp-snooping statistics

View

Any view

Parameter

None

Description

Use the display igmp-snooping statistics command to view the statistics information on IGMP Snooping.

This command displays the information such as the number of received general IGMP query packets, received IGMP group-specific query packets, received IGMP v1 packets, received IGMP v2 packets, received IGMP leave packets and error packets, and sent

IGMP group-specific query packets.

Related command: igmp-snooping.

Example

Display statistics information about IGMP Snooping.

<SW8800> display igmp-snooping statistics

Received IGMP general query packet(s) number:0.

Received IGMP specific query packet(s) number:0.

Received IGMP V1 report packet(s) number:0.

Received IGMP V2 report packet(s) number:0.

Received IGMP leave packet(s) number:0.

Received error IGMP packet(s) number:0.

Sent IGMP specific query packet(s) number:0. z z z z z z

The above information displays that IGMP Snooping receives:

0 IGMP general query packets

0 IGMP group-specific query packets

0 IGMP v1 report packets

0 IGMP v2 report packets

0 IGMP leave packets o IGMP error packets

IGMP Snooping sends: z

0 IGMP group-specific query packets

18-3

3Com Switch 8800 Command Reference Guide

18.1.4 igmp-snooping

Chapter 18 IGMP Snooping Configuration Commands

Syntax

igmp-snooping { enable | disable }

View

System view, VLAN view

Parameter

Description

Use the igmp-snooping command to enable/disable IGMP Snooping.

You’d better notice that when configuring IGMP Snooping, it is necessary to globally enable IGMP Snooping in system view, then enable IGMP Snooping in VLAN view, otherwise IGMP Snooping function can not be performed.

By default, the switch disables IGMP Snooping.

Example

enable: Enables IGMP Snooping.

disable: Disables IGMP Snooping;

Enable IGMP Snooping in system view.

[SW8800] igmp-snooping enable

Enable IGMP Snooping on VLAN 1

[SW8800] vlan 1

[SW8800-vlan1] igmp-snooping enable

18.1.5 igmp-snooping host-aging-time

Syntax

igmp-snooping host-aging-time seconds

undo igmp-snooping host-aging-time

View

Parameter

System view

seconds: Port aging time for the multicast group member, ranging from 200 to 1000 and measured in seconds. By default, it is 260.

18-4

3Com Switch 8800 Command Reference Guide

Description

Chapter 18 IGMP Snooping Configuration Commands

Use the igmp-snooping host-aging-time command to configure the port aging time of the multicast group members.

Use the undo igmp-snooping host-aging-time command to restore the default value.

This command is used to set the aging time of the multicast group member so that the refresh frequency can be controlled. When the group members change frequently, the aging time should be comparatively short, and vice versa.

Related command: igmp-snooping.

Example

Set the aging time to 300 seconds.

[SW8800] igmp-snooping host-aging-time 300

18.1.6 igmp-snooping max-response-time

Syntax

igmp-snooping max-response-time seconds

undo igmp-snooping max-response-time

View

System view

Parameter

seconds: Maximum response time for a query ranging from 1 to 25 and measured in seconds. By default, it is 1.

Description

Use the igmp-snooping max-response-time command to configure the maximum response time for a query.

Use the undo igmp-snooping max-response-time command to restore the default value.

The set maximum response time decides the time limit for the switch to respond to

IGMP Snooping query packets.

Related command: igmp-snooping and igmp-snooping router-aging-time.

Example

Configure to respond the IGMP Snooping packet within 15s.

[SW8800] igmp-snooping max-response-time 15

18-5

3Com Switch 8800 Command Reference Guide Chapter 18 IGMP Snooping Configuration Commands

18.1.7 igmp-snooping nonflooding-enable

Syntax

View

System view

Parameter

None

Description

Use the igmp-snooping nonflooding-enable command to enable unknown multicast data packets not to be broadcasted within a VLAN.

Use the undo igmp-snooping nonflooding-enable command to disable unknown multicast data packets not to be broadcasted within a VLAN.

Note that if IGMP snooping is not enabled on the VLAN (nor Layer 3 multicast), unknown multicast packets are broadcasted within the VLAN no matter whether this function is enabled or not. To make unknown multicast data packets not be broadcasted within the VLAN, you need to enable igmp-snooping in this VLAN and enable igmp-snooping nonflooding-enable globally.

By default, unknown multicast data packets are broadcasted within the VLAN.

Example igmp-snooping nonflooding-enable undo igmp-snooping nonflooding-enable

Enable multicast packets not to be broadcasted within the VLAN.

[SW8800] igmp-snooping nonflooding-enable

18.1.8 igmp-snooping router-aging-time

Syntax

igmp-snooping router-aging-time seconds

undo igmp-snooping router-aging-time

View

System view

Parameter

seconds: Specifies the router port aging time, ranging from 1 to 1000 measured in seconds; By default, it is 105.

18-6

3Com Switch 8800 Command Reference Guide

Description

Chapter 18 IGMP Snooping Configuration Commands

Use the igmp-snooping router-aging-time command to configure the router port aging time of IGMP Snooping.

Use the undo igmp-snooping router-aging-time command to restore the default value.

The port here refers to the Ethernet switch port connected to the router. The Layer-2

Ethernet switch receives general query packets from the router via this port. The timer should be set to about 2.5 times of the general query period of the router.

Related command: igmp-snooping and igmp-snooping max-response-time.

Example

Set the aging time of the IGMP Snooping router port to 500 seconds.

[SW8800] igmp-snooping router-aging-time 500

18.1.9 reset igmp-snooping statistics

Syntax reset igmp-snooping statistics

View

User view

Parameter

None

Description

Using reset igmp-snooping statistics command, you can reset the IGMP Snooping statistic information.

Related command: igmp-snooping.

Example

Clear IGMP Snooping statistic information.

<SW8800> reset igmp-snooping statistics

18-7

3Com Switch 8800 Command Reference Guide Chapter 19 Multicast VLAN Configuration Commands

Chapter 19 Multicast VLAN Configuration

Commands

19.1 Multicast VLAN Configuration Commands

19.1.1 service-type multicast

Syntax service-type multicast undo service-type multicast

View

VLAN view

Parameter

None

Description

Use the service-type multicast command to configure the current VLAN as multicast

VLAN.

Use the undo service-type multicast command to remove the configuration.

By default, all VLANs are not multicast VLANs.

If you configure multicast VLAN, add the corresponding switch ports to the multicast

VLAN and enable IGMP Snooping, users in different VLANs can share one multicast

VLAN, and multicast flow can be transmitted in the multicast VLAN only, thus saving bandwidth. The completely isolated multicast VLAN and user VLAN can effectively ensure security.

Example

Configure VLAN 2 as multicast VLAN.

<SW8800> system-view

[SW8800] vlan 2

[SW8800-vlan2] service-type multicast

19-1

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands

Chapter 20 IP Multicast Common Configuration

Commands

20.1 IP Multicast Common Configuration Commands

20.1.1 debugging multicast forwarding

Syntax

View

User view

Parameter

None

Description

Use the debugging multicast forwarding command to enable multicast packet forwarding debugging functions.

Use the undo debugging multicast forwarding command to disable the debugging functions.

By default, the debugging function is disabled.

Example debugging multicast forwarding undo debugging multicast forwarding

Enable multicast packet forwarding debugging functions.

<SW8800> debugging multicast forwarding

20.1.2 debugging multicast kernel-routing

Syntax debugging multicast kernel-routing undo debugging multicast kernel-routing

View

User view

20-1

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 20 IP Multicast Common Configuration Comm ands

Description

Use the debugging multicast kernel-routing command to enable multicast kernel routing debugging functions.

Use the undo debugging multicast kernel-routing command to disable the debugging functions.

By default, the multicast kernel routing debugging is disabled.

Example

Enable multicast kernel routing debugging functions.

<SW8800> debugging multicast kernel-routing

20.1.3 debugging multicast status-forwarding

Syntax debugging multicast status-forwarding undo debugging multicast status-forwarding

View

User view

Parameter

None

Description

Use the debugging multicast status-forwarding command to enable multicast forwarding status debugging functions.

Use the undo debugging multicast status-forwarding command to disable the debugging functions.

By default, the multicast forwarding status debugging is disabled.

Example

Enable multicast forwarding status debugging functions.

<SW8800> debugging multicast status-forwarding

20-2

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands

20.1.4 display multicast forwarding-table

Syntax

display multicast forwarding-table [ group-address [ mask { mask | mask-length } ] |

source-address [ mask { mask | mask-length } ] | incoming-interface{ interface-type

interface-number | null NULL-interface- number | register} ] *

View

Any view

Parameter

Description

Use the display multicast forwarding-table command to view the information of IP multicast forwarding table.

Note that before you view the information of IP multicast forwarding table, you must use

multicast routing-enable command in system view to enable IP multicast router.

Related command: display multicast routing-table.

Example

group-address: Multicast group address, used to specify a multicast group, ranging from 224.0.0.0 to 239.255.255.255.

source-address: Unicast IP address of the multicast source.

incoming-interface: Incoming interface of the multicast forwarding table.

interface-type interface-number: Interface type and interface number.

null: Incoming-interface is null.

NULL-interface-number: The only number is 0.

register: Register interface of PIM-SM.

View the multicast forwarding table information.

<SW8800> display multicast forwarding-table

Multicast Forwarding Cache Table

Total 2 entries

00001. (4.4.4.4, 224.2.254.84), iif Vlan-interface1, 0 oifs

Matched 240 pkts(11288 bytes), Wrong If 0 pkts

Forwarded 232 pkts(11288 bytes)

00002. (4.4.4.4, 224.2.149.17), iif Vlan-interface1, 1 oifs

List of outgoing interface:

01: Vlan-interface2

20-3

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands

Matched 236 pkts(3267 bytes), Wrong If 0 pkts

Forwarded 233 pkts(3267 bytes)

Matched 2 entries

The descriptions about the displayed information are shown in Table 20-1.

Table 20-1 Description of information generated by the command display multicast

forwarding-table

Field

Multicast Forwarding Cache Table

Total 2 entries

00002

(4.4.4.4, 224.2.149.17)

Description

Multicast forwarding cache table

Total number of entries

Sequence number of entries iif Vlan-interface1, 1 oifs

(s,g)

Multicast forwarding cache table has an incoming interface Vlan-interface 1 and one outgoing interface

List of outgoing interface:

01: Vlan-interface2

List of outgoing interface has an outgoing interface Vlan-interface 2

Matched 236 pkts(3267 bytes), Wrong If

0 pkts

Forwarded 233 pkts(3267 bytes)

236 matched packets (3267 bytes); 0 matched packets means wrong; 233 forwarded packets (3267 bytes)

Matched 2 entries 2 matched entries

20.1.5 display multicast routing-table

Syntax

display multicast routing-table [ group-address [ mask { mask | mask-length } ] |

source-address [ mask { mask | mask-length } ] | incoming-interface { interface-type

vlan-interface | register } ]*

View

Any view

Parameter

group-address: Multicast group address, used to specify a multicast group and display the corresponding routing table information of the group. The value ranges from

224.0.0.0 to 239.255.255.255.

source-address: Unicast IP address of the multicast source.

incoming-interface: Incoming interface of the multicast route entry.

20-4

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands vlan-interface interface-number: VLAN interface number.

register: Register interface of PIM-SM.

Description

Use the display multicast routing-table command to view the information of IP multicast routing table.

Notice that before you view the information of IP multicast forwarding table, you must use multicast routing-enable command in system view to enable IP multicast router.

This command displays the multicast routing table information, while the display

multicast forwarding-table command displays the multicast forwarding table information.

Example

View the route entry information in the multicast routing table.

[SW8800]display multicast routing-table

Multicast Routing Table

Total 3 entries

(4.4.4.4, 224.2.149.17)

Uptime: 00:15:16, Timeout in 272 sec

Upstream interface: Vlan-interface1(4.4.4.6)

Downstream interface list:

Vlan-interface2(2.2.2.4), Protocol 0x1: IGMP

(4.4.4.4, 224.2.254.84)

Uptime: 00:15:16, Timeout in 272 sec

Upstream interface: Vlan-interface1(4.4.4.6)

Downstream interface list: NULL

(4.4.4.4, 239.255.2.2)

Uptime: 00:02:57, Timeout in 123 sec

Upstream interface: Vlan-interface1(4.4.4.6)

Downstream interface list: NULL

Matched 3 entries

The descriptions about the displayed information are shown in Table 20-2.

20-5

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands

Table 20-2 Description of information generated by the command display multicast routing-table

Field

Multicast Routing Table

Total 3 entries

(4.4.4.4, 224.2.149.17)

3 entries in total

(s, g)

Description

Multicast routing table

Uptime: 00:15:16, Timeout in 272 sec

Upstream

Vlan-interface1(4.4.4.6) interface:

Downstream interface list:

Vlan-interface2(2.2.2.4), Protocol

0x1: IGMP

Multicast routing table lasts 15’16” and times out in 272 seconds.

Upstream interface vlan-interface 1 (its

IP address is 4.4.4.6).

Downstream interface list: has an interface Vlan-interface 2 (its IP address is 2.2.2.4). The downstream interface is configured with IGMP groups.

Matched 3 entries

3 entries in total meeting the requirement

20.1.6 multicast

Syntax

multicast ip-address

undo multicast { ip-address | all }

View

Local user view

Parameter

ip-address: Multicast group IP address.

Description

Use the multicast command to configure the multicast groups that users can join (the controlled multicast).

Use the undo multicast command to remove the configuration.

If users join the multicast group, the port-based controlled multicast controls their authority. Users must pass the 802.1x authentication for the port first. Moreover, users can only join the multicast group configured particularly for them. The port-based controlled multicast prohibits users without authority from joining, controlling users’ access to the specific multicast group.

20-6

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands

Caution:

In local user view, before configuring this command, you must configure user service type as LAN-ACCESS, which the controlled multicast supports exclusively at present.

You can use the service-type lan-access command to configure service type in local user view.

Related command: display local-user, service-type lan-access.

Example

Allow users to join the multicast group at 255.255.255.1.

[SW8800-luser-3com] multicast 255.255.255.1

20.1.7 multicast route-limit

Syntax

multicast route-limit limit

undo multicast route-limit

View

System view

Parameter

limit: Limits the capacity of multicast routing table, in the range of 0 to 512.

Description

Use the multicast route-limit command to limit the capacity of multicast routing table.

When the preset capacity is exceeded, the router will discard new (S, G) protocol and data packets.

Use the undo multicast route-limit command to restore the limit to the default value.

By default, the capacity of multicast routing table is set to 512.

If the existing route entries exceed the capacity value you configured during using this command, the system will not delete the existing entries, but prompts the information

“Existing route entries exceed the configured capacity value”.

The new configuration overwrites the old one if you run the command for a second time.

Example

Limit multicast routing table capacity at 128.

20-7

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm

[SW8800] multicast route-limit 128 ands

20.1.8 multicast routing-enable

Syntax multicast routing-enable undo multicast routing-enable

View

System view

Parameter

None

Description

Use the multicast routing-enable command to enable IP multicast routing.

Use the undo multicast routing-enable command to disable IP multicast routing.

By default, IP multicast routing is disabled.

Related command: pim dm, pim sm and igmp enable.

Example

Enable IP multicast routing.

<SW8800> system-view

[SW8800] multicast routing-enable

20.1.9 reset multicast forwarding-table

Syntax

reset multicast forwarding-table [ statistics ] { all | { group-address [ mask

{ group-mask | group-mask-length } ] | source-address [ mask { source-mask |

source-mask-length } ] | incoming-interface { null NULL-interface-number |

interface-type interface-number } }* }

View

User view

Parameter

statistics: If it is selected, the system clears the statistic information of MFC forward entries. Otherwise, the system clears MFC forward entries.

all: All MFC forward entries.

20-8

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands

group-address: Specifies multicast group address.

group-mask: Specifies Mask of multicast group address

group-mask-length: Specifies mask length of multicast group address.

source-address: Specifies source address.

source-mask: Specifies mask of source address.

source-mask-length: Specifies mask length of source address.

incoming-interface: Specifies incoming interface for the multicast forward entry.

null: Incoming-interface is null.

NULL-interface-number: The only number is 0.

interface-type interface-number: Interface type and interface number.

Description

Use the reset multicast forwarding-table command to clear MFC forwarding entries or statistic information of MFC forwarding entries.

You can type in source address first and group address after in the command, as long as they both are valid addresses. The system prompts error information if you type in invalid addresses.

Related command: reset pim routing-table, reset multicast routing-table and

display multicast forwarding-table.

Example

Clear the forwarding entry with address of 225.5.4.3 from the MFC forwarding table.

<SW8800> reset multicast forwarding-table 225.5.4.3

Clear statistic information of the forwarding entry with address of 225.5.4.3 from the

MFC forwarding table.

<SW8800> reset multicast forwarding-table statistics 225.5.4.3

20.1.10 reset multicast routing-table

Syntax

reset multicast routing-table { all | { group-address [ mask { group-mask |

group-mask-length } ] | source-address [ mask { source-mask | source-mask-length } ]

| incoming-interface vlan-interface interface-number } * }

View

User view

Parameter

all: All route entries in the core multicast routing table.

20-9

3Com Switch 8800 Command Reference Guide Chapter 20 IP Multicast Common Configuration Comm ands

group-address: Specifies multicast group address.

group-mask: Specifies Mask of multicast group address

group-mask-length: Specifies mask length of multicast group address.

source-address: Specifies source address.

source-mask: Specifies mask of source address.

source-mask-length: Specifies mask length of source address.

incoming-interface: Specifies incoming interface for the multicast forward entry.

vlan-interface-type interface-number: Interface type and VLAN virtual interface number.

Description

Use the reset multicast routing-table command to clear route entries from the core multicast routing table, as well as MFC forwarding entries.

You can type in source address first and group address after in the command, as long as they both are valid addresses. The system prompts error information if you type in invalid addresses.

Related command: reset pim routing-table, reset multicast forwarding-table and

display multicast forwarding-table.

Example

Clear the route entry with address of 225.5.4.3 from the core multicast routing table.

<SW8800> reset multicast routing-table 225.5.4.3

20-10

3Com Switch 8800 Command Reference Guide Chapter 21 IGMP Configuration Commands

Chapter 21 IGMP Configuration Commands

21.1 IGMP Configuration Commands

21.1.1 debugging igmp

Syntax

debugging igmp { all | event | host | packet | timer }

undo debugging igmp { all | event | host | packet | timer }

View

User view

Parameter

all: All the debugging information of IGMP.

event: Debugging information of IGMP event.

host: Debugging information of IGMP host.

packet: Debugging information of IGMP packets.

timer: Debugging information of IGMP timers.

Description

Use the debugging igmp command to enable IGMP debugging functions.

Use the undo debugging igmp command to disable the debugging functions.

By default, IGMP debugging functions are disabled.

Example

Enable all IGMP debugging functions

<SW8800> debugging igmp all

21.1.2 display igmp group

Syntax

display igmp group [ group-address | interface vlan-interface interface-number ]

View

Any view

21-1

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 21 IGMP Configuration Commands

group-address: Address of the multicast group.

vlan-interface interface-number: VLAN interface number.

Description

Use the display igmp group command to view the member information of the IGMP multicast group.

You can specify to show the information of a group or the member information of the multicast group on a VLAN interface. The information displayed contains the multicast groups which are joined by the downstream hosts through IGMP or through command line.

Related command: igmp host-join.

Example

Display the IGMP group members in a directly-connected subnet.

<SW8800> display igmp group

LoopBack0 (20.20.20.20): Total 3 IGMP Groups reported:

Group Address Last Reporter Uptime Expires

225.1.1.1 20.20.20.20 00:02:04 00:01:15

225.1.1.3 20.20.20.20 00:02:04 00:01:15

225.1.1.2 20.20.20.20 00:02:04 00:01:17

Table 21-1 Output description of the display igmp group command

Field

Group address

Last Reporter

Uptime

Expires

Multicast group address

Description

The last host reporting to join in the multicast group

Time passed since multicast group is discovered (hh: mm: ss).

Specifies when the member will be removed from the multicast group (hh: mm: ss).

21.1.3 display igmp interface

Syntax

display igmp interface [ vlan-interface interface-number ]

View

Any view

21-2

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 21 IGMP Configuration Commands

vlan-interface interface-number: VLAN interface number of the router, used to specify the interface. If the parameters are omitted, information about all the interfaces running

IGMP will be displayed.

Description

Use the display igmp interface command to view the IGMP configuration and running information on an interface.

Example

View the IGMP configuration and running information of all interfaces.

<SW8800> display igmp interface

Vlan-interface1 (10.153.17.99):

IGMP is enabled

Current IGMP version is 2

Value of query interval for IGMP(in seconds): 60

Value of other querier time out for IGMP(in seconds): 120

Value of maximum query response time for IGMP(in seconds): 10

Value of robust count for IGMP: 2

Value of startup query interval for IGMP(in seconds): 15

Value of last member query interval for IGMP(in seconds): 1

Value of query timeout for IGMP version 1(in seconds): 400

Policy to accept IGMP reports: none

Querier for IGMP: 10.153.17.99 (this router)

IGMP group limit is 1024

No IGMP group reported

Table 21-2 Description on the fields of the display igmp interface command

Field

IGMP version query interval querier timeout max query response time robust count startup query interval last member query interval

Description

IGMP version number

General query interval

Querier timeout

Maximum query response time

IGMP robust count. That is, the times of sending

IGMP group-specific query packets for the IGMP querier when it receives an IGMP leave packet from a host.

Startup query interval

The interval of sending IGMP group-specific query packets for the IGMP querier when it receives an

IGMP leave packet from a host

21-3

3Com Switch 8800 Command Reference Guide Chapter 21 IGMP Configuration Commands

Field

query timeout

Description

Query timeout for IGMP V1

Policy to accept IGMP Filter policy for the IGMP multicast group to control reports the accesses to the IP multicast group

Querier for IGMP

IGMP group limit

IGMP querier

Quantity limit of IGMP groups joined on the interface. After the limit is reached, the router does not process the IGMP join messages.

21.1.4 igmp enable

Syntax igmp enable undo igmp enable

View

VLAN interface view

Parameter

None

Description

Use the igmp enable command to enable IGMP on an interface.

Use the undo igmp enable command to disable IGMP on the interface.

By default, IGMP is not enabled.

Only multicast function is enabled can the igmp enable command be executed. After this, you can initiate IGMP feature configuration.

Related command: multicast routing-enable.

Example

Enable IGMP on Vlan-interface 10.

[SW8800-Vlan-interface10] igmp enable

21.1.5 igmp group-limit

Syntax

igmp group-limit limit

undo igmp group-limit

21-4

3Com Switch 8800 Command Reference Guide

View

VLAN interface view

Parameter

Chapter 21 IGMP Configuration Commands

limit: Quantity of multicast groups, in the range of 0 to 512.

Description

Use the igmp group-limit command to limit multicast groups on an interface. After the limit is reached, the router does not process IGMP join messages.

Use the undo igmp group-limit command to restore the default setting.

By default, the maximum number is 512.

If the existing IGMP groups exceed the quantity limit you configured during using this command, the system will not delete the existing entries.

The new configuration overwrites the old one if you run the command for a second time.

Example

Limit the maximum IGMP groups at Vlan-interface10 to 100.

[SW8800-Vlan-interface10] igmp group-limit 100

21.1.6 igmp group-policy

Syntax

igmp group-policy acl-number [ 1 | 2 | port { interface_type interface_ num |

interface_name } [ to { interface_type interface_ num | interface_name } ] ]

undo igmp group-policy [ port { interface_type interface_ num | interface_name } [ to

{ interface_type interface_ num | interface_name } ] ]

View

Parameter

VLAN interface view

acl-number: Number of the basic IP access control list number, defining a multicast group range. The value ranges from 2000 to 2999.

1: IGMP version 1.

2: IGMP version 2. If IGMP version is not specified, version 1 and version 2 will be used as default.

port: Packets received and sent by the port(s) and applied to the conditions set by the

ACL will be filtered. And the port(s) must belong to the VLAN interface being configured

21-5

3Com Switch 8800 Command Reference Guide Chapter 21 IGMP Configuration Commands by this command. When ports do not belong to this VLAN interface, you can still configure the filter, however, the configured filter is not valid.

Description

Use the igmp group-policy command to set the filter of multicast groups on an interface to control the accessing to the IP multicast groups.

Use the undo igmp group-policy command to remove the filter configured.

By default, no filter is configured, that is, a host can join any multicast group.

If you do not want the hosts on the network that the interface is on to join some multicast groups and receive the packets from the multicast groups, you can use this command to limit the range of the multicast groups serviced by the interface.

Related command: igmp host-join.

Example

Configure the acl 2000.

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255

Configure that only the hosts contained in the acl 2000 connected to the

VLAN-interface10 can be added to the multicast group, which is configured to use

IGMP version 2.

[SW8800-vlan-interface10] igmp group-policy 2000 2

21.1.7 igmp group-policy vlan

Syntax

igmp group-policy acl-number vlan vlanid

undo igmp group-policy vlan vlanid

View

Ethernet port view

Parameter

acl-number: Basic IP ACL number, in the range of 2000~2999, defining a multicast group range.

vlanid: VLAN where the port belongs to.

Description

Use the igmp group-policy vlan command to set multicast group filter on port , so that you can control the access to IP multicast group.

Use the undo igmp group-policy vlan command to remove the filter configured.

21-6

3Com Switch 8800 Command Reference Guide Chapter 21 IGMP Configuration Commands

By default, no filter is set and the host can join any multicast group.

The command can limit the multicast group members, so that you can prevent the host to join some multicast groups and to receive the packets from the multicast group. The function is the same as that of igmp group-policy command.

Note that the port must belong to the specified VLAN which enables IGMP. Otherwise the configuration will not work.

Related command: igmp group-policy, igmp host-join port and igmp host-join

vlan.

Example

Configure at the port Ethernet2/1/1 that only the hosts contained in the acl 2000 connected to the VLAN-interface10 can be added to the multicast group.

[SW8800-Vlan-interface10] igmp enable

[SW8800-Vlan-interface10] quit

[SW8800] interface Ethernet 2/1/1

[SW8800-Ethernet2/1/1] port access vlan 10

[SW8800-Ethernet2/1/1] igmp group-policy 2000 vlan 10

21.1.8 igmp host-join port

Syntax

igmp host-join group-address port { interface_type interface_ num | interface_name }

[ to { interface_type interface_ num | interface_name } ]

undo igmp host-join group-address port { interface_type interface_ num |

interface_name } [ to { interface_type interface_ num | interface_name } ]

View

VLAN interface view

Parameter

group-address: Multicast address of the multicast group that an interface will join.

port: Specifies the port in the VLAN interface.

Description

Use the igmp host-join command to enable a port in the VLAN interface of an

Ethernet switch to join a multicast group.

Use the undo igmp host-join command to disable the configuration.

By default, an interface does not join any multicast group.

Related command: igmp group-policy.

21-7

3Com Switch 8800 Command Reference Guide

Example

Chapter 21 IGMP Configuration Commands

Add port Ethernet 2/1/1 in VLAN-interface10 to the multicast group at 225.0.0.1.

[SW8800-Vlan-interface10] igmp host-join 225.0.0.1 port Ethernet 2/1/1

21.1.9 igmp host-join vlan

Syntax

igmp host-join group-address vlan vlanid

undo igmp host-join group-address vlan vlanid

View

Ethernet port view

Parameter

Description

Use the igmp host-join vlan command to make an Ethernet join in multicast group.

Use the undo igmp host-join vlan command to cancel the configuration.

By default, Ethernet join no multicast group.

Related command: igmp group-policy.

Example

group-address: Address of the multicast group to be joined.

vlanid: VLAN where the port belongs to.

Add port Ethernet 2/1/1 to the multicast group at 225.0.0.1

[SW8800-Vlan-interface10] igmp enable

[SW8800-Vlan-interface10] quit

[SW8800] interface Ethernet 2/1/1

[SW8800-Ethernet2/1/1] port access vlan 10

[SW8800-Ethernet2/1/1] igmp host-join 225.0.0.1 vlan 10

21.1.10 igmp lastmember-queryinterval

Syntax

igmp lastmember-queryinterval seconds

undo igmp lastmember-queryinterval

View

Interface view

21-8

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 21 IGMP Configuration Commands

seconds: Time interval before IGMP query router sends the IGMP group query message after it receives the IGMP Leave message from the host. It is in the range of 1 to 5 seconds. By default, it is 1 second.

Description

Use the igmp lastmember-queryinterval command to set the time interval before

IGMP query router sends the IGMP group query message after it receives the IGMP

Leave message from the host.

Use the undo igmp lastmember-queryinterval command to restore the default value.

In the shared network, that is, a same network segment including multiple hosts and multicast routers, the query router is responsible for maintaining the IGMP group membership on the interface. When the IGMP v2 host leaves a group, it sends an

IGMP Leave message. When receiving the IGMP Leave message, IGMP query router must send the IGMP group query message for specified times (by the robust-value parameter in the igmp robust-count command, with default value as 2) in a specified time interval (by the seconds parameter in the igmp lastmember-queryinterval command, with default value as 1 second). If other hosts which are interested in the specified group receive the IGMP query message from the IGMP query router, they will sends back the IGMP Membership Report message within the specified maximum response time interval. If it receives the IGMP Membership Report message within the defined period (equal to robust-value

× seconds), the IGMP query router continue to maintain the membership of this group. When receiving no IGMP Membership Report message from any hosts within the defined period, the IGMP query router considers it as timeout and stops membership maintenance for the group.

This command is only valid for the IGMP v2 query router. If the IGMP v1 host leaves a group, it does not send an IGMP Leave message. And then this command is invalid for the IGMP query router.

Related command: igmp robust-count and display igmp interface.

Example

Set the query interval at the Vlan-interface10 as 3 seconds.

[SW8800-Vlan-interface10] igmp lastmember-queryinterval 3

21.1.11 igmp max-response-time

Syntax

igmp max-response-time seconds

undo igmp max-response-time

21-9

3Com Switch 8800 Command Reference Guide

View

VLAN Interface view

Chapter 21 IGMP Configuration Commands

Parameter

Description

Use the igmp max-response-time command to configure the maximum response time contained in the IGMP query messages.

Use the undo igmp max-response-time command to restore the default value.

The maximum query response time determines the period for a router to quickly detect that there are no more directly connected group members in a LAN.

Related command: display igmp group.

Example

seconds: Maximum response time in the IGMP query messages in second in the range from 1 to 25. By default, the value is 10 seconds.

Set the maximum response time carried in host-query message to 8 seconds.

[SW8800-Vlan-interface10] igmp max-response-time 8

21.1.12 igmp robust-count

Syntax

igmp robust-count robust-value

undo igmp robust-count

View

VLAN interface view

Parameter

robust-value: IGMP robust value, number of sending the IGMP group query message after the IGMP query router receives the IGMP Leave message from the host. It is in the range of 2 to 5. By default, it is 2.

Description

Use the igmp robust-count command to set the number of sending the IGMP group query message after the IGMP query router receives the IGMP Leave message from the host.

Use the undo igmp robust-count command to restore the default value.

Related command: igmp lastmember-queryinterval and display igmp interface.

21-10

3Com Switch 8800 Command Reference Guide

Example

Chapter 21 IGMP Configuration Commands

Set the robust value at the Vlan-interface 10 as 3.

[SW8800-Vlan-interface10] igmp robust-count 3

21.1.13 igmp timer other-querier-present

Syntax

igmp timer other-querier-present seconds

undo igmp timer other-querier-present

View

VLAN interface view

Parameter

seconds: IGMP querier present timer value in second ranging from 1 to 131070. By default, the value is twice the value of IGMP query message interval, i.e., 120 seconds.

Description

Use the igmp timer other-querier-present command to configure the timer of presence of the IGMP querier.

Use the undo igmp timer other-querier-present command to restore the default value.

On a shared network, i.e., there are multiple multicast routers on the same network segment, the query router (querier for short) takes charge of sending query messages periodically on the interface. If other non-queriers receive no query messages within the valid period, the router will consider the previous query to be invalid and the router itself becomes a querier.

In IGMP version 1, the selection of a query is determined by the multicast routing protocol. In IGMP version 2, the router with the lowest IP address on the shared network segment acts as the querier.

Related command: igmp timer query and display igmp interface.

Example

Set querier to expire after 300 seconds.

[SW8800-Vlan-interface10] igmp timer other-querier-present 300

21.1.14 igmp timer query

Syntax

igmp timer query seconds

21-11

3Com Switch 8800 Command Reference Guide

undo igmp timer query

View

Chapter 21 IGMP Configuration Commands

VLAN interface view

Parameter

seconds: Interval at which a router transmits IGMP query messages in second in the range from 1 to 65535. By default, the value is 60 seconds.

Description

Use the igmp timer query command to configure the interval at which a router interface sends IGMP query messages.

Use the undo igmp timer query command to restore the default value.

A multicast router periodically sends out IGMP query messages to check whether there are multicast group members on the network. The query interval can be modified according to the practical conditions of the network.

Related command: igmp timer other-querier-present.

Example

Configure to transmit the host-query message every 150 seconds via VLAN-interface2.

[SW8800-Vlan-interface2] igmp timer query 150

21.1.15 igmp version

Syntax

igmp version { 1 | 2 }

undo igmp version

View

VLAN interface view

Parameter

1: IGMP Version 1.

2: IGMP Version 2. By default, IGMP Version 2 is used.

Description

Use the igmp version command to specify the version of IGMP that a router uses.

Use the undo igmp version command to restore the default value.

All routers on a subnet must support the same version of IGMP. After detecting the presence of IGMP Version 1 system, a router cannot automatically switch to Version 2.

21-12

3Com Switch 8800 Command Reference Guide

Example

Chapter 21 IGMP Configuration Commands

Run IGMP Version 1 on VLAN-interface10.

[SW8800-Vlan-interface10] igmp version 1

21.1.16 reset igmp group

Syntax

reset igmp group { all | interface vlan-interface interface-number { all |

group-address [ group-mask ] } }

View

User view

Parameter

Description

Use the reset igmp group command to delete an existing IGMP group from the interface. The deleted group can added again on the interface.

Example

all: All IGMP groups.

interface vlan-interface interface-number: VLAN virtual interface type and number.

group-address: IGMP group address.

group-mask: Segment mask of the IGMP group address.

Delete all IGMP groups on all the interfaces.

<SW8800> reset igmp group all

Delete all IGMP groups on the Vlan-intrface10.

<SW8800> reset igmp group interface Vlan-interface10 all

Delete the group 225.0.0.1 from the Vlan-interface10.

<SW8800> reset igmp group interface Vlan-interface10 225.0.0.1

Delete the IGMP groups ranging from 225.1.1.0 to 225.1.1.255 on the

Vlan-interface10.

<SW8800> reset igmp group interface Vlan-interface10 225.1.1.0 255.255.255.0

21-13

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

Chapter 22 PIM Configuration Commands

22.1 PIM Configuration Commands

22.1.1 bsr-policy

Syntax

bsr-policy acl-number

undo bsr-policy

View

PIM view

Parameter

acl-number: ACL number imported in BSR filtering policy, in the range of 2000 to 2999.

Description

Use the bsr-policy command to limit the range of legal BSRs to prevent BSR proofing.

Use the undo bsr-policy command to restore the default setting, that is, no range limit is set and all received messages are taken as legal.

In the PIM SM network using BSR (bootstrap router) mechanism, every router can set itself as C-BSR (candidate BSR) and take the authority to advertise RP information in the network once it wins in the contention. To prevent the legal BSR from being replaced maliciously in the network, the following two measures need to be taken: z z

Prevent the router from being spoofed by hosts though faking legal BSR messages to modify RP mapping. BSR messages are of multicast type and their

TTL is 1, so this type of attacks often hit edge routers. Fortunately, BSRs are inside the network, while assaulting hosts are outside, therefore neighbor and

RPF checks can be used to stop this type of attacks.

If a router in the network is manipulated by an attacker, or an illegal router is accessed into the network, the attacker may set itself as C-BSR and try to win the contention and gain authority to advertise RP information among the network.

Since the router configured as C-BSR shall propagate BSR messages, which are multicast messages sent hop by hop with TTL as 1, among the network, then the network cannot be affected as long as the peer routers do not receive these BSR messages. One way is to configure bsr-policy on each router to limit legal BSR range, for example, only 1.1.1.1/32 and 1.1.1.2/32 can be BSR, thus the routers cannot receive or forward BSR messages other than these two. Even legal BSRs cannot contest with them.

22-1

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

Problems may still exist if a legal BSR is attacked, though these two measures can effectively guarantee high BSR security.

The source parameter in the rule command is translated as BSR address in the

bsr-policy command.

Related command: acl and rule.

Example

Configure BSR filtering policy on routers, only 101.1.1.1/32 can be BSR and all others are illegal.

[SW8800-pim] bsr-policy 2000

[SW8800-pim] quit

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule 0 permit source 101.1.1.1 0

22.1.2 c-bsr

Syntax

c-bsr interface interface-type interface-number hash-mask-len [ priority ]

undo c-bsr

View

PIM view

Parameter

interface-type interface-number: Specifies the interface. The candidate BSR is configured on the interface. PIM-SM must be enabled on the interface first.

hash-mask-len: Length of the mask. The value ranges from 0 to 32.

priority: Priority of the candidate BSR. The larger the value of the priority, the higher the priority of the BSR. The value ranges from 0 to 255. By default, the priority is 0.

Description

Use the c-bsr command to configure a candidate BSR.

Use the undo c-bsr command to remove the candidate BSR configured.

By default, no candidate BSR is set.

When configure the candidate BSR, the larger bandwidth should be guaranteed since a great amount of information will be exchanged between BSR and other devices in the

PIM domain.

Related command: pim sm.

22-2

3Com Switch 8800 Command Reference Guide

Example

Chapter 22 PIM Configuration Commands

Configure the Ethernet switch as C-BSR with priority 2 (and the C-BSR address is designated as the IP address of VLAN-interface10).

[SW8800] pim

[SW8800-pim] c-bsr vlan-interface 10 24 2

22.1.3 c-rp

Syntax

c-rp interface-type interface-number [ group-policy acl-number | priority

priority-value ]*

undo c-rp { interface-type interface-number | all }

View

PIM view

Parameter

interface-type interface-number: Specifies interface with the IP address advertised as a candidate RP address.

acl-number: Number of the basic ACL that defines a group range, which is the service range of the advertised RP. The value ranges from 2000 to 2999.

priority-value: Priority value of candidate RP, in the range of 0 to 255. By default, it is 0.

The greatest value corresponds to the lowest priority level

all: Removes all candidate RP configurations.

Description

Use the c-rp command to configure the router to advertise itself as a candidate RP.

Use the undo c-rp command to remove the configuration.

By default, no candidate RP is configured.

When configuring the candidate RP, a relatively large bandwidth should be reserved for the router and other devices in the PIM domain.

Related command: c-bsr.

Example

Configure the switch to advertise itself as a C-RP in the PIM domain to BSR. The standard access list 2000 defines the groups related to the RP. The address of C-RP is designated as the IP address of VLAN-interface10.

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule permit source 225.0.0.0 0.255.255.255

[SW8800] pim

22-3

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

[SW8800-pim] c-rp vlan-interface 10 group-policy 2000

22.1.4 crp-policy

Syntax

crp-policy acl-number

undo crp-policy

View

PIM view

Parameter

acl-number: ACL number imported in C-RP filtering policy, ranging from 3000 to 3999.

Description

Use the crp-policy command to limit the range of legal C-RP, as well as target service group range of each C-RP, and prevent C-RP proofing.

Use the undo crp-policy command to restore the default setting, that is, no range limit is set and all received messages are taken as legal.

In the PIM SM network using BSR mechanism, every router can set itself as C-RP

(candidate rendezvous point) servicing particular groups. If elected, a C-RP becomes the RP servicing the current group.

In BSR mechanism, a C-RP router unicasts C-RP messages to the BSR, which then propagates the C-RP messages among the network by BSR message.

To prevent C-RP spoofing, you need to configure crp-policy on the BSR to limit legal

C-RP range and their service group range. Since each C-BSR has the chance to become BSR, you must configure the same filtering policy on each C-BSR router.

This command uses the ACLs numbered between 3000 and 3999. The source parameter in the rule command is translated as C-RP address in the crp-policy command, and the destination parameter as the service group range of this C-RP address. For the C-RP messages received, only when their C-RP addresses match the

source address and their server group addresses are subset of those in ACL, can the be considered as matched.

Related command: acl and rule.

Example

Configure C-RP filtering policy on the C-BSR routers, allowing only 1.1.1.1/32 as C-RP and to serve only for the groups 225.1.0.0/16.

[SW8800-pim] crp-policy 3000

[SW8800-pim] quit

[SW8800] acl number 3000

22-4

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

[SW8800-acl-adv-3000] rule 0 permit source 1.1.1.1 0 destination 225.1.0.0

0.0.255.255

22.1.5 debugging pim common

Syntax

debugging pim common { all | event | packet | timer }

undo debugging pim common { all | event | packet | timer }

View

User view

Parameter

Description

Use the debugging pim common command to enable common PIM debugging functions.

Use the undo debugging pim common command to disable the debugging functions.

By default, common PIM debugging functions are disabled.

Example

all: All the common debugging information of PIM.

event: Debugging information of common PIM event.

packet: Debugging information of PIM hello packet.

timer: Debugging information of common PIM timer.

Enable all common PIM debugging functions

<SW8800> debugging pim common all

22.1.6 debugging pim dm

Syntax

debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all | assert |

graft | graft-ack | join | prune } }

undo debugging pim dm { alert | all | mrt | timer | warning | { recv | send } { all |

assert | graft | graft-ack | join | prune } }

View

User view

22-5

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 22 PIM Configuration Commands

alert: Interoperation event debugging information of PIM-DM

all: All the debugging information of PIM-DM.

mrt: Debugging information of PIM-DM multicast routing table.

timer: Debugging information of PIM-DM timer.

warning: Debugging information of PIM-DM warning message.

recv: Debugging information of PIM-DM receiving packets.

send: Debugging information of PIM-DM sending packets.

assert | graft | graft-ack | join | prune: Packets type.

Description

Use the debugging pim dm command to enable PIM-DM debugging functions.

Use the undo debugging pim dm command to disable the debugging functions.

By default, PIM-DM debugging functions are disabled.

Example

Enable all PIM-DM debugging functions

<SW8800> debugging pim dm all

22.1.7 debugging pim sm

Syntax

debugging pim sm { all | mbr { alert | fresh } | verbose | mrt | msdp | timer { assert

| bsr | crpadv | jp | jpdelay | mrt | probe | spt } | warning | { recv | send } { assert |

bootstrap | crpadv | jp | reg | regstop } }

undo debugging pim sm { all | mbr { alert | fresh } | verbose | mrt | msdp | timer

{ assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt } | warning | { recv | send }

{ assert | bootstrap | crpadv | jp | reg | regstop } }

View

Parameter

User view

all: All debugging information of PIM-SM.

mbr: Debugging information of PIM-SM multicast border router event. Alert stands for debugging alert information of PIM-SM multicast border router fresh stands for debugging renew information of PIM-SM multicast.

verbose: Debugging detail information of PIM-SM.

22-6

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

mrt: Debugging information of PIM-SM multicast routing table.

msdp: Debugging information of correspondence between PIM SM and MSDP.

timer: Debugging information of PIM-SM timer.

assert | bsr | crpadv | jp | jpdelay | mrt | probe | spt: PIM-SM timer type.

warning: Debugging information of PIM-SM warning message.

recv: Debugging information of PIM-SM receiving packets.

send: Debugging information of PIM-SM sending packets.

assert | bootstrap | crpadv | jp | reg | regstop: Packets type.

Description

Use the debugging pim sm command to enable PIM-SM debugging functions.

Use the undo debugging pim sm command to disable the debugging functions.

By default, PIM-SM debugging functions are disabled.

Example

Enable all PIM-SM debugging functions

<SW8800> debugging pim sm all

22.1.8 display pim bsr-info

Syntax display pim bsr-info

View

Any view

Parameter

None

Description

Use the display pim bsr command to view the BSR information.

Related command: c-bsr and c-rp.

Example

[SW8800] display pim bsr-info

Current BSR Address: 192.168.1.1

Priority: 0

Mask Length: 30

Expires: 00:01:26

Bootstrap-Period: 60 seconds

22-7

3Com Switch 8800 Command Reference Guide

Bootstrap-Timeout: 130 seconds

Local host is BSR

Chapter 22 PIM Configuration Commands

Table 22-1 Output description of the display pim bsr command

Field

BSR

Priority

Mask Length: 30

Expires: 00:01:55

BootStrap-Period: 60 seconds

Bootstrap-timeout: 130 second

Description

Boot trap router

Priority of BSR

Length of mask

Expire time

Boot trap interval

Boot trap timeout

22.1.9 display pim interface

Syntax

display pim interface [interface interface-type interface-number ]

View

Any view

Parameter

interface-type interface-number: Interface type and interface number, used to specify the interface.

Description

Use the display pim interface command to view the PIM interface configuration information.

If no interface type or interface number is specified, this command displays the PIM configurations on all interfaces. If the interface type and interface number are specified, only the PIM configuration on the specified interface is displayed.

Example

Display the PIM configuration information on an interface.

<SW8800> display pim interface vlan 2

PIM information of VLAN-interface 2:

IP address of the interface is 10.10.1.20

PIM is enabled on interface

PIM version is 2

PIM mode is Sparse

22-8

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

PIM query interval is 30 seconds

PIM neighbor hold-time is 105 seconds

PIM neighbor limit is 128

PIM neighbor policy is none

Total 1 PIM neighbor on interface

PIM DR(designated router) is 10.10.1.20

Table 22-2 Output description of the display pim interface command

Field

PIM version

PIM mode

PIM query interval

PIM neighbor hold-time

PIM neighbor limit

PIM neighbor policy

PIM DR

Description

Version of PIM

PIM mode enabled on the interface (DM or SM)

Hello packet interval

Hold-time of PIM neighbor

Limit of the PIM neighbors on an interface. No neighbor can be added any more when the limit is reached

Filtering policy of the PIM neighbors on the current interface

Designated router

22.1.10 display pim neighbor

Syntax

display pim neighbor [ interface interface-type interface-number ]

View

Any view

Parameter

interface interface-type interface-number: Interface type and interface number, used to specify the interface.

Description

Use the display pim neighbor command to view the PIM neighbor information discovered by the switch interface. If the interface type and interface number are specified, this command only displays the PIM neighbor information on the specified interface.

22-9

3Com Switch 8800 Command Reference Guide

Example

Chapter 22 PIM Configuration Commands

Display PIM neighbor information discovered by the switch interface.

<SW8800> display pim neighbor

Neighbor's Address Interface Name Uptime Expires

90.0.0.2 Vlan-interface90 00:00:36 00:01:40

Table 22-3 Output description about PIM neighbors

Field

Neighbor Address Neighbor address

Interface

Uptime

Description

Interface where the neighbor has been discovered

Time passed since the multicast group has been discovered

22.1.11 display pim routing-table

Syntax

display pim routing-table [ { { *g [ group-address [ mask { mask-length | mask } ] ] |

**rp [ rp-address [ mask { mask-length | mask } ] ] } | { group-address [ mask

{ mask-length | mask } ] | source-address [ mask { mask-length | mask } ] } * } |

incoming-interface { interface interface-type interface-number | null } |

{ dense-mode | sparse-mode } ] *

View

Any view

Parameter

*g: (*, G) route entry.

mask: IP address mask.

mask-length: Length of the IP address mask.

**rp: (*, *, p) route entry.

rp-address: Address of the RP.

group-address: Address of the multicast group.

source-address: IP address of the multicast source.

incoming-interface interface interface-type interface-number: Route entry with the specified incoming interface.

null: Specifies the incoming interface type as Null.

dense-mode: Specifies the multicast routing protocol as PIM-DM.

22-10

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

sparse-mode: Specifies the multicast routing protocol as PIM-SM.

Description

Use the display pim routing-table command to view the contents of the PIM multicast routing table. The displayed information of the PIM multicast routing table includes the

SPT and RPF information.

Example

View the contents of the PIM multicast routing table on the router.

<SW8800> display pim routing-table

PIM-SM Routing Table

Total 0 (*,*,RP)entry, 0 (*,G)entry, 2 (S,G)entries

(192.168.1.2, 224.2.178.130),

Protocol 0x20: PIMSM, Flag 0x4: SPT

UpTime: 23:59, Timeout after 196 seconds

Upstream interface: VLAN-interface2, RPF neighbor: NULL

Downstream interface list: NULL

(192.168.1.2, 224.2.181.90),

Protocol 0x20: PIMSM, Flag 0x4: SPT

UpTime: 23:59, Timeout after 196 seconds

Upstream interface: VLAN-interface2, RPF neighbor: NULL

Downstream interface list: NULL

Total 2 entries listed

Table 22-4 Output description about PIM routing table

Field Description

(S,G) (source address, multicast group)

SPT

RPF

22.1.12 display pim rp-info

Syntax

display pim rp-info [ group-address ]

View

Shortest Path Tree

Reverse Path Forwarding

22-11

3Com Switch 8800 Command Reference Guide

Any view

Parameter

Chapter 22 PIM Configuration Commands

group-address: Specifies the group address to display. If no multicast group is specified, the RP information about all multicast groups will be displayed.

Description

Use the display pim rp-info command to view the RP information of multicast group.

In addition, this command can also display the BSR and static RP information.

Example

View the RP information of multicast group.

<SW8800> display pim rp-info

PIM-SM RP-SET information:

BSR is: 20.20.20.20

Group/MaskLen: 224.0.0.0/4

RP 20.20.20.20

Version: 2

Priority: 0

Uptime: 00:00:05

Expires: 00:02:25

Adv-Period: 60 seconds

Holdtime: 150 seconds

The following table details the display information.

Table 22-5 Description of the information for display pim rp-info

Field

PIM-SM RP-SET information:

BSR is: 4.4.4.6

Description

RP information

BSR is the virtual interface of the node

4.4.4.6.

Group/MaskLen: 224.0.0.0/4

RP 4.4.4.6

Version: 2

Priority: 0

Uptime: 00:39:50

Expires: 00:01:40

Adv-Period: 60 seconds

Holdtime: 150 seconds

The RP with IP address 224.0.0.0 and mask length of 4 is the virtual interface of the node 4.4.4.6, in version 2 and priority

0; it has been active for 39 minutes and

50 seconds and shall expire in one minute and 40 seconds; the advertisement interval is 60 seconds and holdtime is 150 seconds.

22-12

3Com Switch 8800 Command Reference Guide

22.1.13 pim

Chapter 22 PIM Configuration Commands

Syntax pim undo pim

View

System view

Parameter

None

Description

Use the pim command to enter the PIM view and configure the PIM global parameters.

Note that the command does not enable the PIM protocol.

Use the undo pim command to return to system view, clear the PIM global parameters configured before and clear the PIM view.

Example

Enter the PIM view.

<SW8800> system-view

[SW8800] multicast routing-enable

[SW8800] pim

[SW8800-pim]

22.1.14 pim bsr-boundary

Syntax pim bsr-boundary undo pim bsr-boundary

View

VLAN interface view

Parameter

None

Description

Use the pim bsr-boundary command to configure an interface to be the PIM domain border.

Use the undo pim bsr-boundary command to remove the border.

22-13

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

By default, no domain border is set.

You can use this command to set border of bootstrap messages, that is to say, bootstrap messages cannot pass interfaces that are configured with pim

bsr-boundary command while other PIM messages can. In this way, the network is divided into different BSR domains. Each domain uses a different bootstrap router.

Note that this command cannot build a multicast boundary. It just sets up the boundary for PIM bootstrap messages.

Related command: c-bsr.

Example

Configure domain border on VLAN-interface10.

[SW8800-Vlan-interface10] pim bsr-boundary

22.1.15 pim dm

Syntax pim dm undo pim dm

View

VLAN interface view

Parameter

None

Description

Use the pim dm command to enable PIM-DM.

Use the undo pim dm command to disable PIM-DM.

By default, PIM-DM is disabled.

Before enabling PIM-DM, you must execute the multicast routing-enable command in system view to enable the multicast routing protocol first.

Example

Enable PIM-DM on VLAN-interface10 of the Ethernet switch.

[SW8800] multicast routing-enable

[SW8800-Vlan-interface10] pim dm

22-14

3Com Switch 8800 Command Reference Guide

22.1.16 pim neighbor-limit

Chapter 22 PIM Configuration Commands

Syntax

View

VLAN interface view

Parameter

limit: Limits of PIM neighbors on the interface, in the range of 0~128.

Description

Use the pim neighbor-limit command to limit the PIM neighbors on an interface. No neighbor can be added any more when the limit is reached.

Use the undo pim neighbor-limit command to restore the default setting.

By default, the PIM neighbors on the interface are limited to 128.

If the existing PIM neighbors exceed the configured value during configuration, they will not be deleted.

Example

pim neighbor-limit limit

undo pim neighbor-limit

Limit the PIM neighbors on the Vlan-interface10 to 50.

[SW8800-Vlan-interface10] pim neighbor-limit 50

22.1.17 pim neighbor-policy

Syntax

pim neighbor-policy acl-number

undo pim neighbor-policy

View

VLAN interface view

Parameter

acl-number: Basic ACL number, in the range of 2000 to 2999.

Description

Use the pim neighbor-policy command to set to filter the PIM neighbors on the current interface.

Use the undo pim neighbor-policy command to remove the setting.

22-15

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

Only the routers that match the filtering rule in the ACL can serve as a PIM neighbor of the current interface.

The new configuration overwrites the old one if you run the command for a second time.

Example

Configure that 10.10.1.2 can serve as a PIM neighbor of the Vlan-interface10, but not

10.10.1.1.

[SW8800-Vlan-interface10] pim neighbor-policy 2000

[SW8800-Vlan-interface10] quit

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule permit source 10.10.1.2 0

[SW8800-acl-basic-2000] rule deny source 10.10.1.1 0

22.1.18 pim sm

Syntax pim sm undo pim sm

View

VLAN interface view

Parameter

None

Description

Use the pim sm command to enable the PIM-SM protocol on an interface.

Use the undo pim sm command to disable the PIM-SM protocol.

By default, PIM-SM is disabled.

Users need to configure the PIM-SM protocol on each interface. Generally, the PIM-SM protocol needs to be enabled on each interface.

Related command: multicast routing-enable.

Example

Enable PIM-SM on VLAN-interface10.

[SW8800-Vlan-interface10] pim sm

22-16

3Com Switch 8800 Command Reference Guide

22.1.19 pim timer hello

Chapter 22 PIM Configuration Commands

Syntax

pim timer hello seconds

undo pim timer hello

View

VLAN interface view

Parameter

seconds: Time interval for a port to send Hello packets, in the range of 1 to 18,000 (in seconds). By default, the time interval is 30 seconds.

Description

Use the pim timer hello command to configure the time interval for a port to send Hello packets.

Use the undo pim timer hello command to restore the default time interval.

After the protocol independent multicast-sparse mode (PIM-SM) protocol is enabled for a port, a switch sends Hello packets periodically to all network devices supporting protocol independent multicast (PIM) to find its neighbors. If a port receives the Hello packets, it indicates the port has a neighbor network device supporting PIM, and the port adds the neighbor to its port neighbor list. If a port does not receive the Hello packets from the existing neighbors in its neighbor list in the specified time, the system assumes the neighbor has left the multicast group.

Note:

Note that when you configure the time interval for a port to send Hello packets, the pim neighbor hold-time value automatically turns into 3.5 times the time interval value.

Therefore you need not configure a value for pim neighbor hold-time.

Example

Set the time interval to send Hello packets for VLAN-interface10 to 40 seconds.

[SW8800-Vlan-interface10] pim timer hello 40

22.1.20 register-policy

Syntax

register-policy acl-number

22-17

3Com Switch 8800 Command Reference Guide

undo register-policy

View

Chapter 22 PIM Configuration Commands

PIM view

Parameter

acl-number: Number of IP advanced ACL, defining the rule of filtering the source and group addresses. The value ranges from 3000 to 3999.

Description

Use the register-policy command to configure a RP to filter the register messages sent by the DR in the PIM-SM network and to accept the specified messages only.

Use the undo register-policy command to remove the configured message filtering.

Example

If the local device is the RP in the network, using the following command can only accept multicast message register of the source sending multicast address in the range of 225.1.0.0/16 on network segment 10.10.0.0/16.

<SW8800> system-view

[SW8800] acl number 3010

[SW8800-acl-adv-3010] rule permit ip source 10.10.0.0 0.0.255.255 destination

225.1.0.0 0.0.255.255

[SW8800-acl-adv-3010] quit

[SW8800] multicast routing-enable

[SW8800] pim

[SW8800-pim] register-policy 3010

22.1.21 reset pim neighbor

Syntax

reset pim neighbor { all | { neighbor-address | interface interface-type

interface-number } * }

View

Parameter

User view

all: All PIM neighbors

neighbor-address: Specifies neighbor address.

interface interface-type interface-number: Specifies interface.

22-18

3Com Switch 8800 Command Reference Guide

Description

Chapter 22 PIM Configuration Commands

Use the reset pim neighbor command to clear a PIM neighbor.

Related command: display pim neighbor.

Example

Clear the PIM neighbor 25.5.4.3.

<SW8800> reset pim neighbor 25.5.4.3

22.1.22 reset pim routing-table

Syntax

reset pim routing-table { all | { group-address [ mask group-mask | mask-length

group-mask-length ] | source-address [ mask source-mask | mask-length

source-mask-length ] | { incoming-interface { interface-type interface number } } } * }

View

User view

Parameter

all: All PIM neighbors.

group-address: Specifies group address.

mask group-mask: Specifies group mask.

mask-length group-mask-length: Specifies mask length of the group address.

source-address: Specifies source address.

mask source-mask: Specifies source mask.

mask-length source-mask-length: Specifies mask length of the group address.

incoming-interface: Specifies incoming interface for the route entry in PIM routing table.

interface-type interface-number: Specifies the interface.

Description

Use the reset pim routing-table command to clear a PIM route entry.

You can type in source address first and group address after in the command, as long as they are valid. Error information will be given if you type in invalid addresses.

If in this command, the group-address is 224.0.0.0/24 and source-address is the RP address (where group address can have a mask, but the resulted IP address must be

224.0.0.0, and source address has no mask), then it means only the (*, *, RP) item will be cleared.

22-19

3Com Switch 8800 Command Reference Guide Chapter 22 PIM Configuration Commands

If in this command, the group-address is any a group address, and source-address is 0

(where group address can have a mask, and source address has no mask), then only the (*, G) item will be cleared.

This command shall clear not only multicast route entries from PIM routing table, but also the corresponding route entries and forward entries in the multicast core routing table and MFC.

Related command: reset multicast routing-table, reset multicast forwarding-table and display pim routing-table.

Example

Clear the route entries with group address 225.5.4.3 from the PIM routing table.

<SW8800> reset pim neighbor 25.5.4.3

22.1.23 source-policy

Syntax

source-policy acl-number

undo source-policy

View

PIM view

Parameter

acl-number: Basic or advanced ACL, in the range of 2000 to 3999.

Description

Use the source-policy command to set the router to filter the multicast data packets based on source (or group) address.

Use the undo static-rp command to remove the configuration.

If resource address filtering is configured, as well as basic ACLs, then the router filters the resource addresses of all multicast data packets received. Those not matched will be discarded.

If resource address filtering is configured, as well as advanced ACLs, then the router filters the resource and group addresses of all multicast data packets received. Those not matched will be discarded.

When this feature is configured, the router filters not only multicast data, but the multicast data encapsulated in the registration packets.

The new configuration overwrites the old one if you run the command for a second time.

22-20

3Com Switch 8800 Command Reference Guide

Example

Chapter 22 PIM Configuration Commands

Set to receive the multicast data packets from source address 10.10.1.2, but discard those from 10.10.1.1.

[SW8800] multicast routing-enable

[SW8800] pim

[SW8800-pim] source-policy 2000

[SW8800-pim] quit

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule permit source 10.10.1.2 0

[SW8800-acl-basic-2000] rule deny source 10.10.1.1 0

22.1.24 static-rp

Syntax

static-rp rp-address [ acl-number ]

undo static-rp

View

PIM view

Parameter

Description

Use the static-rp command to configure static RP.

Use the undo static-rp command to remove the configuration.

Static RP functions as the backup of dynamic RP so as to improve the network robusticity. If the RP elected by BSR mechanism is valid, static RP will not work.

All routers in the PIM domain should be configured with this command and be specified with the same RP address.

The new configuration overwrites the old one if you run the command for a second time.

Related command: display pim rp-info.

Example

rp-address: Static RP address, only being legal unicast IP address.

acl-number: Basic ACL, used to control the range of multicast group served by static

RP, which ranges from 2000 to 2999. If an ACL is not specified upon configuration, static RP will serve all multicast groups; if an ACL is specified, static RP will only serve the multicast group passing the ACL.

Configure 10.110.0.6 as a static RP.

22-21

3Com Switch 8800 Command Reference Guide

[SW8800] multicast routing-enable

[SW8800] pim

[SW8800-pim] static-rp 10.110.0.6

Chapter 22 PIM Configuration Commands

22-22

3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands

Chapter 23 MSDP Configuration Commands

Note:

An Ethernet switch functions as a router when it supports the layer 3 protocols. A router that is referred to in the following represents a generalized router or a layer 3 Ethernet switch running related protocols.

23.1 MSDP Configuration Commands

23.1.1 cache-sa-enable

Syntax cache-sa-enable undo cache-sa-enable

View

MSDP view

Parameter

None

Description

Use the cache-sa-enable command to enable the router to cache SA state.

Use the undo cache-sa-enable command to remove the cache from the router.

By default, the router caches the SA state, i.e., (S, G) entry after it receives SA messages.

If the router is in cache state, it will not send SA request message to the specified

MSDP peer when it receives a new group join message.

Example

Configure the router to cache all the SA states.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] cache-sa-enable

23-1

3Com Switch 8800 Command Reference Guide

23.1.2 debugging msdp

Chapter 23 MSDP Configuration Commands

Syntax

debugging msdp { all | connect | event | packet | source-active }

undo debugging msdp { all | connect | event | packet | source-active }

View

User view

Parameter

all: All the debugging information of MSDP.

connect: Debugging information of MSDP peer connection reset.

event: Debugging information of MSDP event.

packet: Debugging information of MSDP packet.

source-active: Debugging information of active MSDP source.

Description

Use the debugging msdp command to enable MSDP debugging functions.

Use the undo debugging msdp command to disable MSDP debugging functions.

By default, MSDP debugging functions are disabled.

Example

Enable all common MSDP debugging functions.

<SW8800> debugging msdp all

23.1.3 display msdp brief

Syntax display msdp brief

View

Any view

Parameter

None

Description

Use the display msdp brief command to view the state of MSDP peer.

23-2

3Com Switch 8800 Command Reference Guide

Example

Chapter 23 MSDP Configuration Commands

Display the state of MSDP peer.

<SW8800> display msdp brief

MSDP Peer Brief Information

Peer's Address State Up/Down time AS SA Count Reset Count

20.20.20.20 Up 00:00:13 100 0 0

23.1.4 display msdp peer-status

Syntax

display msdp peer-status [ peer-address ]

View

Any view

Parameter

peer-address: Address of MSDP peer.

Description

Use the display msdp peer-status command to view the detailed information of

MSDP peer.

Related command: peer.

Example

Display the detailed information of the MSDP peer 10.110.11.11.

<SW8800> display msdp peer-status 10.110.11.11

MSDP Peer 20.20.20.20, AS 100

Description:

Information about connection status:

State: Up

Up/down time: 14:41:08

Resets: 0

Connection interface: LoopBack0 (20.20.20.30)

Number of sent/received messages: 867/947

Number of discarded output messages: 0

Elapsed time since last connection or counters clear: 14:42:40

Information about (Source, Group)-based SA filtering policy:

Import policy: none

Export policy: none

Information about SA-Requests:

Policy to accept SA-Request messages: none

23-3

3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands

Sending SA-Requests status: disable

Minimum TTL to forward SA with encapsulated data: 0

SAs learned from this peer: 0, SA-cache maximum for the peer: none

Input queue size: 0, Output queue size: 0

Counters for MSDP message:

Count of RPF check failure: 0

Incoming/outgoing SA messages: 0/0

Incoming/outgoing SA requests: 0/0

Incoming/outgoing SA responses: 0/0

Incoming/outgoing data packets: 0/0

23.1.5 display msdp sa-cache

Syntax

display msdp sa-cache [ group-address | source-address |

autonomous-system-number ]*

View

Any view

Parameter

group-address: Group address of (S, G) entry.

source-address: Source address of (S, G) entry. With no source address specified, all the source information of the specified group will be displayed.

If neither group address nor source address is determined, all SA caches will be displayed.

autonomous-system-number: Displays (S, G) entries from specified autonomous system.

Description

Use the display msdp sa-cache command to view (S, G) state learnt from MSDP peer.

Only cache-sa-enable command is configured, can cache state be displayed.

Example

Display the (S, G) state learned from MSDP peer.

<SW8800> display msdp sa-cache

MSDP Total Source-Active Cache - 5 entries

(Source, Group) Origin RP Pro AS Uptime Expires

(10.10.1.2, 225.1.1.1) 10.10.10.10 BGP 100 00:00:10 00:05:50

23-4

3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands

(10.10.1.3, 225.1.1.1) 10.10.10.10 BGP 100 00:00:11 00:05:49

(10.10.1.2, 225.1.1.2) 10.10.10.10 BGP 100 00:00:11 00:05:49

(10.10.2.1, 225.1.1.2) 10.10.10.10 BGP 100 00:00:11 00:05:49

(10.10.1.2, 225.1.2.2) 10.10.10.10 BGP 100 00:00:11 00:05:49

MSDP matched 5 entries

23.1.6 display msdp sa-count

Syntax

display msdp sa-count [ as-number ]

View

Any view

Parameter

as-number: Number of sources and groups from the specified autonomous system.

Description

Use the display msdp sa-count command to view the number of sources and groups in MSDP cache.

The cache-sa-enable command must be configured before the configuration of this command.

Example

view the number of sources and groups in MSDP cache.

<SW8800> display msdp sa-count

Number of cached Source-Active entries, counted by Peer

Peer's Address Number of SA

10.10.10.10 5

Number of source and group, counted by AS

AS Number of source Number of group

? 3 3

Total Source-Active entries: 5

23.1.7 import-source

Syntax

import-source [ acl acl-number ]

undo import-source

23-5

3Com Switch 8800 Command Reference Guide

View

MSDP view

Chapter 23 MSDP Configuration Commands

Parameter

Description

Use the import-source command to configure which (S, G) entries in the domain need to be advertised when a MSDP originates an SA message.

Use the undo import-source command to remove the configuration.

By default, all the (S, G) entries in the domain are advertised by the SA message.

Besides controlling SA messages creation, you can filter the forwarded SA messages by the commands peer sa-policy import and peer sa-policy export.

Example

acl-number: Number of basic or advanced IP ACL, ranging from 2000 to 3999, controlling which sources SA messages will advertise and to which groups it will be sent in the domain. Basic ACL performs filtering to source and advanced ACL performs filtering to source/group. If no ACL is specified, no multicast source will be advertised.

Configure which (S, G) entries from the multicast routing table will be advertised in SA messages originated by the MSDP peer.

<SW8800> system-view

[SW8800] acl number 3001

[SW8800-acl-adv-3001] rule permit ip source 10.10.0.0 0.0.255.255 destination

225.1.0.0 0.0.255.255

[SW8800-acl-adv-3001] quit

[SW8800] msdp

[SW8800-msdp] import-source acl 3001

23.1.8 msdp

Syntax msdp undo msdp

View

System view

Parameter

None

23-6

3Com Switch 8800 Command Reference Guide

Description

Chapter 23 MSDP Configuration Commands

Use the msdp command to enable MSDP and enter the MSDP view.

Use the undo msdp command to clear all configurations of MSDP, release all resources that MSDP occupies, and restore the initial state.

Related command: peer.

Example

Clear all configurations of MSDP.

<SW8800> system-view

[SW8800] undo msdp

23.1.9 msdp-tracert

Syntax

msdp-tracert source-address group-address rp-address [ max-hops max-hops |

next-hop-info | sa-info | peer-info | skip-hops skip-hops ]*

View

Any view

Parameter

source-address: Multicast source address.

group-address: Multicast group address.

rp-address: IP address of RP.

max-hops: The maximum number of hops that are traced, ranging from 1 to 255. By default, the value is 16.

next-hop-info: Flag bit for collecting the next hop information.

sa-info: Flag bit for collecting SA entity information.

peer-info: Flag bit for collecting MSDP peer information.

skip-hops: Number of hops that are skipped before collecting detailed information, ranging from 0 to 255. By default, the value is 0.

Description

Use the msdp-tracert command to trace the transmission path of SA messages in the network, which helps to locate the faults such as information loss and configuration error. After the transmission path of SA messages is determined, correct configuration can avoid the overflow of SA messages.

23-7

3Com Switch 8800 Command Reference Guide

Example

Chapter 23 MSDP Configuration Commands

Trace (10.10.1.1, 225.2.2.2, 20.20.20.20) path information.

<SW8800> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20

Specify the maximum number of hops that are traced and collect detailed information of

SA and MSDP peer.

<SW8800> msdp-tracert 10.10.1.1 225.2.2.2 20.20.20.20 max-hops 10 sa-info peer-info

MSDP tracert: press CTRL_C to break

D-bit: set if have this (S,G) in cache but with a different RP

RP-bit: set if this router is an RP

NC-bit: set if this router is not caching SA's

C-bit: set if this (S,G,RP) tuple is in the cache

MSDP Traceroute path information:

Router Address: 20.20.1.1

Fixed-length response info:

Peer Uptime: 10 minutes, Cache Entry Uptime: 30 minutes

D-bit: 0, RP-bit: 1, NC-bit: 0, C-bit: 1

Return Code: Reached-max-hops

Next Hop info:

Next-Hop Router Address: 0.0.0.0

SA info:

Count of SA messages received for this (S,G,RP): 0

Count of encapsulated data packets received for this (S,G,RP):0

SA cache entry uptime: 00:30:00 , SA cache entry expiry time: 00:03:32

Peering info:

Peering Uptime: 10 minutes, Count of Peering Resets: 3

Table 23-1 Description of msdp-tracert command domain

Item

Router Address

Peer Uptime

Description

Address where the local router creates Peering session with

Peer-RPF neighbor.

Time for which the local router performs Peering session with

Peer-RPF neighbor in minute, with the maximum value of

255.

Uptime

D-bit: 1

RP-bit: 1 router, in minute, with the maximum value of 255.

(S, G, RP) entry existing in SA cache of the local router.

But the RP is different from the RP specified in the request message.

The local router is an RP, but it is not necessarily the source

RP in (S, G, RP) entry.

23-8

3Com Switch 8800 Command Reference Guide

Item

NC-bit: 0

C-bit: 1

Chapter 23 MSDP Configuration Commands

Description

The local router enables SA cache.

(S, G, RP) entry exists in SA cache of the local router.

Return reason is the reached maximum hops and other

Reached-max-hops

Hit-src-RP: The local hop router is the source RP in (S, G,

RP) entry.

Address: 0.0.0.0 address will be displayed.

Count of SA

Number of SA messages received for tracing this (S, G, RP) messages received entry. for this (S,G,RP)

Count of encapsulated data Number of encapsulated data packets received for tracing for this (S,G,RP)

SA cache entry

Present time of SA cache entry. uptime

SA cache entry expiry time

Expiry time of SA cache entry.

Peering Uptime: 10 minutes

Time for which the local router performs Peering session with

Peer-RPF neighbor.

Count of Peering

Number of Peering session resets.

Resets

23.1.10 originating-rp

Syntax

originating-rp interface-type interface-number

undo originating-rp

View

MSDP view

Parameter

interface-type: Interface type.

interface-number: Interface number.

Description

Use the originating-rp command to allow a MSDP to use the IP address of specified interface as the RP address when the SA message originated.

23-9

3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands

Use the undo originating-rp command to remove the configuration.

By default, the RP address in the SA message is the RP address configured by PIM.

Configure logical RP by using this command.

Example

Configure IP address of the interface Vlan-interface10 as the RP address in the SA message originated.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] originating-rp Vlan-interface 10

23.1.11 peer

Syntax

peer peer-address connect-interface interface-type interface-number

undo peer peer-address

View

MSDP view

Parameter

peer-address: Address of MSDP peer.

connect-interface interface-type interface-number: Interface type and number whose primary address is used by the local router as the source IP address to establish TCP connection with remote MSDP peers.

Description

Use the peer command to configure an MSDP peer.

Use the undo peer command to remove the MSDP peer configured.

If the local router is also in BGP peer relation with a MSDP peer, the MSDP peer and the BGP peer should use the same IP address.

Related command: static-rpf-peer.

Example

Configure the router using IP address 125.10.7.6 as an MSDP peer of the local router.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] peer 125.10.7.6 connect-interface Vlan-interface 10

23-10

3Com Switch 8800 Command Reference Guide

23.1.12 peer description

Chapter 23 MSDP Configuration Commands

Syntax

peer peer-address description text

undo peer peer-address description

View

MSDP view

Parameter

peer-address: Address of MSDP peer.

text: Descriptive text, being case sensitive. The maximum length is 80 characters.

Description

Use the peer description command to configure descriptive text to MSDP peer.

Use the undo peer description command to remove the descriptive text configured.

By default, an MSDP peer has no descriptive text.

Administrator can conveniently differentiate MSDP peers by configuring descriptive text.

Related command: display msdp peer-status.

Example

Add descriptive text CstmrA to router 125.10.7.6 to specify that the router is Client A.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] peer 125.10.7.6 description router CstmrA

23.1.13 peer mesh-group

Syntax

peer peer-address mesh-group name

undo peer peer-address mesh-group name

View

MSDP view

Parameter

name: Name of a Mesh Group, being case sensitive. The maximum length is 32 characters.

peer-address: Address of an MSDP peer to be a member of the Mesh Group.

23-11

3Com Switch 8800 Command Reference Guide

Description

Chapter 23 MSDP Configuration Commands

Use the peer mesh-group command to configure an MSDP peer to join an Mesh

Group.

Use the undo peer mesh-group command to remove the configuration.

By default, an MSDP peer is not a member of any Mesh Group.

Example

Configure the MSDP peer with address 125.10.7.6 to be a member of the Mesh Group

Grp1.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] peer 125.10.7.6 mesh-group Grp1

23.1.14 peer minimum-ttl

Syntax

peer peer-address minimum-ttl ttl

undo peer peer-address minimum-ttl

View

MSDP view

Parameter

Description

Use the peer minimum-ttl command to configure the minimum TTL (Time-to-Live) value of the multicast data packets encapsulated in SA messages to be sent to specified MSDP peer.

Use the undo peer minimum-ttl command to restore the default TTL threshold.

By default, the value of TTL threshold is 0.

Related command: peer.

Example

peer-address: Address of the MSDP peer to which the TTL limitation applies.

ttl: TTL threshold, ranging from 0 to 255.

Configure the TTL threshold value to 10, i.e., only those multicast data packets with a

TTL value greater than or equal to 10 can be forwarded to the MSDP peer 110.10.10.1.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] peer 110.10.10.1 minimum-ttl 10

23-12

3Com Switch 8800 Command Reference Guide

23.1.15 peer request-sa-enable

Chapter 23 MSDP Configuration Commands

Syntax

peer peer-address request-sa-enable

undo peer peer-address request-sa-enable

View

MSDP view

Parameter

peer-address: Address of MSDP peer.

Description

Use the peer request-sa-enable command to enable the router to send SA request message to the specified MSDP peer when receiving a new group join message.

Use the undo peer request-sa-enable command to remove the configuration.

By default, when receiving a new group join message, the router sends no SA request messages to MSDP peers but waits to receive the next SA message.

Related command: cache-sa-enable.

Example

Configure to send SA request message to the MSDP peer 125.10.7.6.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] peer 125.10.7.6 request-sa-enable

23.1.16 peer sa-cache-maximum

Syntax

peer peer-address sa-cache-maximum sa-limit

undo peer peer-address sa-cache-maximum

View

Parameter

MSDP view

peer-address: Address of MSDP peer.

sa-limit: Maximum value that the SA cache allows, ranging from 1 to 2048.

23-13

3Com Switch 8800 Command Reference Guide

Description

Chapter 23 MSDP Configuration Commands

Use the peer sa-cache-maximum command to limit the number of caches originated when the router receives SA messages from an MSDP peer.

Use the undo peer sa-cache-maximum command to restore the default configuration.

By default, the maximum number of SA caches is 2048.

This configuration is recommended for all MSDP peers in the networks possibly attacked by DoS.

Related command: display msdp, sa-count, display msdp peer-status and display

msdp brief.

Example

Limit the number of caches originated to 100 when the router receives SA messages from the MSDP peer 125.10.7.6.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] peer 125.10.7.6 sa-cache-maximum 100

23.1.17 peer sa-policy

Syntax

peer peer-address sa-policy { import | export } [ acl acl-number ]

undo peer peer-address sa-policy { import | export }

View

MSDP view

Parameter

import: Receives SA messages from the specified MSDP peer.

export: Forwards SA messages from the specified MSDP peer.

peer-address: Address of the MSDP peer whose SA messages need to be filtered.

acl acl-number: Number of advanced IP ACL, ranging from 3000 to 3999. If no ACL is specified, all (S, G) entries are filtered.

Description

Use the peer sa-policy command to configure a filter list for SA messages received or forwarded from the specified MSDP peer.

Use the undo peer sa-policy command to remove the configuration.

23-14

3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands

By default, messages received or forwarded will not be filtered. All SA messages are received or forwarded from an MSDP peer.

Related command: peer.

Example

Forward only those SA messages that passed the advanced IP ACL.

<SW8800> system-view

[SW8800] acl number 3000

[SW8800-acl-adv-3000] rule permit ip source 170.15.0.0 0.0.255.255 destination 225.1.0.0 0.0.255.255

[SW8800-acl-adv-3000] quit

[SW8800] msdp

[SW8800-msdp] peer 125.10.7.6 connect-interface Vlan-interface 10

[SW8800-msdp] peer 125.10.7.6 sa-policy export acl 3000

23.1.18 peer sa-request-policy

Syntax

peer peer-address sa-request-policy [ acl acl-number ]

undo peer peer-address sa-request-policy

View

MSDP view

Parameter

peer-address: Address from which the local router receives SA request messages sent by the specified MSDP peer.

acl acl-number: Number of basic IP ACL, describing multicast group address, ranging from 2000 to 2999. If no ACL is specified, all SA request messages will be ignored.

Description

Use the peer sa-request-policy command to limit SA request messages that the router receives from MSDP peers.

Use the undo peer sa-request-policy command to remove the limitation.

By default, the router receives all SA request messages from the MSDP peer.

If no ACL is specified, all SA requests will be ignored. If ACL is specified, only those SA request messages from the groups permitted by the ACL will be processed and all the others will be ignored.

Related command: peer.

23-15

3Com Switch 8800 Command Reference Guide

Example

Chapter 23 MSDP Configuration Commands

Configure the ACL for filtering SA request messages from the MSDP peer 175.58.6.5.

The SA request messages from group address range 225.1.1.0/8 will be received and all the others will be ignored.

<SW8800> system-view

[SW8800] acl number 2000

[SW8800-acl-basic-2000] rule permit source 225.1.1.0 0.0.0.255

[SW8800-acl-basic-2000] quit

[SW8800] msdp

[SW8800-msdp] peer 175.58.6.5 sa-request-policy acl 2000

23.1.19 reset msdp peer

Syntax

reset msdp peer peer-address

View

User view

Parameter

peer-address: Address of MSDP peer.

Description

Use the reset msdp peer command to reset TCP connection with the specified MSDP peer, and clear all the statistics of the specified MSDP peer.

Related command: peer.

Example

Clear TCP connection and statistics of the MSDP peer 125.10.7.6.

<SW8800> reset msdp peer 125.10.7.6

23.1.20 reset msdp sa-cache

Syntax

reset msdp sa-cache [ group-address ]

View

User view

23-16

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 23 MSDP Configuration Commands

group-address: Address of the group, (S, G) entries matching this address are cleared from the SA cache. If no multicast group address is specified, all SA cache entries will be cleared.

Description

Use the reset msdp sa-cache command to clear SMDP SA cache entries.

Related command: cache-sa-enable and display msdp sa-cache.

Example

Clear the cache entries with group address 225.5.4.3 from the SA cache.

<SW8800> reset msdp sa-cache 225.5.4.3

23.1.21 reset msdp statistics

Syntax

reset msdp statistics [ peer-address ]

View

User view

Parameter

Description

Use the reset msdp statistics command to clear statistics of one or more MSDP peers without resetting the MSDP peer.

Example

peer-address: Address of the MSDP peer whose statistics, resetting information and input/output information will be cleared. If no MSDP peer address is specified, all

MSDP peers statistics will be cleared.

Clear the statistics of the MSDP peer 25.10.7.6.

<SW8800> reset msdp statistics 125.10.7.6

23.1.22 shutdown

Syntax

shutdown peer-address

undo shutdown peer-address

23-17

3Com Switch 8800 Command Reference Guide

View

MSDP view

Chapter 23 MSDP Configuration Commands

Parameter

peer-address: IP address of MSDP peer.

Description

Use the shutdown command to disable the MSDP peer specified.

Use the undo shutdown command to remove the configuration.

By default, no MSDP peer is disabled.

Related command: peer.

Example

Disable the MSDP peer 125.10.7.6.

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] shutdown 125.10.7.6

23.1.23 static-rpf-peer

Syntax

static-rpf-peer peer-address [ rp-policy ip-prefix-name ]

undo static-rpf-peer peer-address

View

MSDP view

Parameter

peer-address: Address of the static RPF peer to receive SA messages.

rp-policy ip-prefix-name: Filter policy based on RP address, which filters the RP in SA messages. If the parameter is not specified, all SA messages from static RPF peer will be accepted. If the parameter rp-policy ip-prefix-name is specified and filter policy is configured, the router will only accept SA messages from the RP which passes filtering.

If no filter policy is configured, the router will still accept all SA messages from the static

RPF peer.

Description

Use the static-rpf-peer command to configure static RPF peer.

Use the undo static-rpf-peer command to remove the static RPF peer.

By default, no static RPF peer is configured.

23-18

3Com Switch 8800 Command Reference Guide Chapter 23 MSDP Configuration Commands

You must configure the peer command before using the static-rpf-peer command.

If you do not want to perform RPF check to SA messages from a same MSDP peer or if only an MSDP peer is configured on a router, this MSDP peer will be regarded as static

RPF peer.

Related command: peer and ip prefix-list.

Example

Configure two static RPF peers.

<SW8800> system-view

[SW8800] ip ip-prefix list1 permit 130.10.2.3 32

[SW8800] ip ip-prefix list2 permit 130.10.2.4 32

[SW8800] msdp

[SW8800-msdp] peer 130.10.7.6 connect-interface Vlan-interface 10

[SW8800-msdp] peer 130.10.7.5 connect-interface Vlan-interface 10

[SW8800-msdp] static-rpf-peer 130.10.7.6 rp-policy list1

[SW8800-msdp] static-rpf-peer 130.10.7.5 rp-policy list2

In the above commands, 130.10.2.3 is the IP address of the RP for 130.10.7.5 and

130.10.2.4 is the IP address of the RP of 130.10.7.6.

23.1.24 timer retry

Syntax

timer retry seconds

undo timer retry

View

MSDP view

Parameter

seconds: Value of connection request retry period in second, ranging from 1 to 60.

Description

Use the timer retry command to configure the value of connection request re-try period.

Use the undo timer retry command to restore the default value.

By default, the value of connection request re-try period is 30 seconds.

Related command: peer.

Example

Configure the connection request re-try period to 60 seconds.

23-19

3Com Switch 8800 Command Reference Guide

<SW8800> system-view

[SW8800] msdp

[SW8800-msdp] timer retry 60

Chapter 23 MSDP Configuration Commands

23-20

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands

Chapter 24 MBGP Multicast Extension

Configuration Commands

24.1 MBGP Multicast Extension Configuration Commands

24.1.1 aggregate

Syntax

aggregate address mask [ as-set | attribute-policy route-policy-name |

detail-suppressed | origin-policy route-policy-name | suppress-policy

route-policy-name ]*

undo aggregate address mask [ as-set | attribute-policy route-policy-name |

detail-suppressed | origin-policy route-policy-name | suppress-policy

route-policy-name ]*

View

IPv4 multicast sub-address family view

Parameter

address: Address of the aggregated route.

mask: Network mask of the aggregated route.

as-set: Generates a route with AS_SET segment. This parameter is not recommended when aggregating many AS paths.

attribute-policy route-policy-name: Sets aggregate attribute.

detail-suppressed: Advertises the aggregated routes rather than the specific routes.

origin-policy route-policy-name: Filters the originate routes of the aggregate.

suppress-policy route-policy-name: Does not advertise the specific routes selected.

Description

Use the aggregate command to create a multicast aggregated record in the BGP routing table.

Use the undo aggregate command to disable this function.

By default, no route is aggregated.

Use the aggregate command without parameters to create one local aggregated route and set atomic aggregation attributes.

24-1

3Com Switch 8800 Command Reference Guide

Example

Chapter 24 MBGP Multicast Extension Configuration C ommands

Create an aggregation entry in the MBGP routing table, with aggregated route address as 192.213.0.0.

[SW8800-bgp-af-mul] aggregate 192.213.0.0 255.255.0.0

24.1.2 compare-different-as-med

Syntax compare-different-as-med undo compare-different-as-med

View

IPv4 multicast sub-address family view

Parameter

None

Description

Use the compare-different-as-med command to enable to compare the route MED values of neighbors from different ASs.

Use the undo compare-different-as-med command to disable this function.

By default, the comparison function is disabled.

If there are multiple routes available to the same destination address, you can select the route with the smallest MED value.

This command is not recommended unless you make sure that different ASs use the same IGP and route selection modes.

Example

Enable to compare the route MED values of neighbors from different ASs.

[SW8800-bgp-af-mul] compare-different-as-med

24.1.3 debugging bgp mp-update

Syntax

debugging bgp mp-update [ receive | send ] [ verbose ]

undo debugging bgp mp-update

View

User view

24-2

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 24 MBGP Multicast Extension Configuration C ommands

receive: Debugs the MBGP Update messages received.

send: Debugs the MBGP Update messages sent.

verbose: Debugs detailed information.

Description

Use the debugging bgp mp-update command to enable to debug MBGP Update messages.

Use the undo debugging bgp mp-update command to disable the debugging.

By default, the debugging function is disabled.

Example

Enable MBGP Update message debugging.

<SW8800> debugging bgp mp-update

24.1.4 default local-preference

Syntax

default local-preference value

undo default local-preference

View

IPv4 multicast sub-address family view

Parameter

Description

Use the default local-preference command to configure the default local precedence.

Use the undo default local-preference command to restore the default value.

You can affect BGP route selection by configuring different local precedence values.

Example

value: Configures default local precedence, in the range of 0 to 4294967295. By default, it is 100. The greatest value corresponds to the highest precedence level.

Configure the default local precedence value as 180.

[SW8800-bgp-af-mul] default local-preference 180

24-3

3Com Switch 8800 Command Reference Guide

24.1.5 default med

Chapter 24 MBGP Multicast Extension Configuration C ommands

Syntax

default med med-value

undo default med

View

IPv4 multicast sub-address family view

Parameter

med-value: Specifies MED value, in the range of 0 to 4294967295. By default, it is 0.

Description

Use the default med command to configure system MED value.

Use the display bgp multicast group command to restore the default value.

Multi-exit discriminator (MED) attribute is the external metric for a route. Unlike local precedence attribute, MED is exchanged, between ASs, and one it enters an AS, it does not leave the AS. MED attribute is used in best route selection. When a router running BGP travels through different external peers and get the routes with identical destination, but different next-hop addresses, it selects these routes according to their

MED values. The route with smaller MED value will be selected as the external AS route if other attributes are the same.

Example

Configure system MED value as 25.

[SW8800-bgp-af-mul] default med 25

24.1.6 display bgp multicast group

Syntax

display bgp multicast group [ group-name ]

View

Any view

Parameter

group-name: Specified peer group. If no peer group is specified, the information about all peer groups will be displayed.

24-4

3Com Switch 8800 Command Reference Guide

Description

Chapter 24 MBGP Multicast Extension Configuration C ommands

Use the display bgp multicast group command to view the information about peer groups.

Example

View the information about the peer group named my_peer.

<SW8800> display bgp multicast group my_peer

24.1.7 display bgp multicast network

Syntax display bgp multicast network

View

Any view

Parameter

None

Description

Use the display bgp multicast network command to view the routing information that

MBGP advertises.

Example

View the network segment routing information MBGP advertises.

<SW8800> display bgp multicast network

24.1.8 display bgp multicast peer

Syntax

display bgp multicast peer [ peer-address ] [ verbose ]

View

Any view

Parameter

peer-address: Peer address, in dotted decimal format.

verbose: Displays detailed information.

Description

Use the display bgp multicast peer command to view the MBGP peer information.

24-5

3Com Switch 8800 Command Reference Guide

Example

Chapter 24 MBGP Multicast Extension Configuration C ommands

View the MBGP peer detailed information.

<SW8800> display bgp multicast peer verbose

24.1.9 display bgp multicast routing-table

Syntax

display bgp multicast routing-table [ ip-address [ mask ] ]

View

Any view

Parameter

ip-address: Displays the MBGP routing information with specified IP address.

Description

Use the display bgp multicast routing-table command to view MBGP routing information.

Example

Display MBGP routing information of network segment 14.1.0.0.

<SW8800> display bgp multicast routing-table 14.1.0.0

24.1.10 display bgp multicast routing-table as-path-acl

Syntax

display bgp multicast routing-table as-path-acl acl-number

View

Any view

Parameter

acl-number: Specifies matched AS path list number ranging from 1 to 199.

Description

Use the display bgp multicast routing-table as-path-acl command to view routes that match an as-path acl.

Example

Display routes that match the as-path-acl 2.

<SW8800> display bgp multicast routing-table as-path-acl 2

24-6

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands

24.1.11 display bgp multicast routing-table cidr

Syntax display bgp multicast routing-table cidr

View

Any view

Parameter

None

Description

Use the display bgp multicast routing-table cidr command to view the mask of non-natural network mask (that is, classless inter-domain routing, CIDR).

Example

View CIDR routing information.

<SW8800> display bgp multicast routing-table cidr

24.1.12 display bgp multicast routing-table community

Syntax

display bgp multicast routing-table community [ aa:nn | no-export-subconfed |

no-advertise | no-export ]* [ whole-match ]

View

Any view

Parameter

aa:nn: Specified community number.

no-export-subconfed: Does not send matched routes outside the local autonomous system.

no-advertise: Does not advertise matched routes to any peer.

no-export: Does not advertise routes outside the local autonomous system but advertise routes to other sub-autonomous systems.

whole-match: Exact match.

Description

Use the display bgp multicast routing-table community command to view routing information of a specified MBGP community.

24-7

3Com Switch 8800 Command Reference Guide

Example

Chapter 24 MBGP Multicast Extension Configuration C ommands

Display routing information of the specified MBGP community

<SW8800> display bgp multicast routing-table community 600:1

24.1.13 display bgp multicast routing-table community-list

Syntax

display bgp multicast routing-table community-list community-list-number

[ whole-match ]

View

Any view

Parameter

Description

Use the display bgp multicast routing-table community-list command to view the routing information of a specified MBGP community list.

Example

community-list-number: Number of the specified community list.

exact-match: Exact match.

Display routing information of the specified MBGP community list.

<SW8800> display bgp multicast routing-table community-list 1

24.1.14 display bgp multicast routing-table different-origin-as

Syntax display bgp multicast routing-table different-origin-as

View

Any view

Parameter

None

Description

Use the display bgp multicast routing-table different-origin-as command to view

AS routes of different origins.

24-8

3Com Switch 8800 Command Reference Guide

Example

Chapter 24 MBGP Multicast Extension Configuration C ommands

Display AS routes of different origins.

<SW8800> display bgp multicast routing-table different-origin-as

24.1.15 display bgp multicast routing-table peer

Syntax

display bgp multicast routing-table peer peer-address { received | advertised }

[ network-address [ mask ] | statistic ]

View

Any view

Parameter

peer-address: Specified peer address, in dotted decimal format.

received: Routing information received from a specified peer.

advertised: Routing information advertised from a specified peer.

network-address: IP address of the destination network.

mask: Mask of the destination network.

statistic: Displays statistic information of the route.

Description

Use the display bgp multicast routing-table peer command to view the routes received/advertised at/to the specified peer.

Example

Display routing information advertised to the peer 10.10.1.11.

<SW8800> display bgp multicast routing-table peer 10.10.1.11 advertised

24.1.16 display bgp multicast routing-table regular-expression

Syntax

display bgp multicast routing-table regular-expression as-regular-expression

View

Parameter

Any view

as-regular-expression: AS regular expression matched.

24-9

3Com Switch 8800 Command Reference Guide

Description

Chapter 24 MBGP Multicast Extension Configuration C ommands

Use the display bgp multicast routing-table regular-expression command to view the routing information matching the specified AS regular expression.

Example

Display routing information matching AS regular expression ^600$.

<SW8800> display bgp multicast routing-table regular-expression ^600$

24.1.17 filter-policy export

Syntax

View

IPv4 multicast sub-address family view

Parameter

acl-number: Specifies the ACL used in matching the destination address domain of routing information, in the range of 2000 to 3999.

ip-prefix-name: Specifies the IP prefix used in matching the destination address domain of routing information, in the range of 1 to 19.

Protocol: Specifies which kind of routing information shall be filtered out, with options currently available include direct, ospf, ospf-ase, ospf-nssa, rip, is-is and static.

Description

Use the filter-policy export command to set to filter the advertised routes. Only those pass through the filter can be advertised by BGP.

Use the undo filter-policy export command to cancel route filtering.

By default, filtering the advertised routes is not enabled.

The command affects route advertising by BGP. If you specify the protocol parameter, the router only filters the routes with the specified protocol imported, without influence on the routes importing other protocols. Otherwise, the router filters the routes importing any protocols.

Example

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

Filter all BGP-advertised routes using ACL 2000.

[SW8800-bgp-af-mul] filter-policy 2000 export

24-10

3Com Switch 8800 Command Reference Guide

24.1.18 filter-policy import

Chapter 24 MBGP Multicast Extension Configuration C ommands

Syntax

filter-policy gateway ip-prefix-name import

undo filter-policy gateway ip-prefix-name import

filter-policy { acl-number | ip-prefix ip-prefix-name } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name } import

View

IPv4 multicast sub-address family view

Parameter

Description

Use the filter-policy gateway import command to set to filter the routes advertised by a specified neighbor router. Only those pass through the filter can be advertised by

BGP.

Use the undo filter-policy gateway import command to cancel route filtering.

Use the filter-policy import command to set to filter the global routes received.

Use the undo filter-policy import command to cancel route filtering.

By default, filtering the received routes is not enabled.

This configuration determines whether to add the routes into the BGP routing table.

Example

acl-number: Specifies the ACL used in matching the destination address domain of routing information, in the range of 2000 to 3999.

ip-prefix ip-prefix-name: Specifies the IP prefix used in matching the destination address domain of routing information, in the range of 1 to 19.

gateway ip-prefix-name: IP prefix of the neighbor router, in the range of 1 to 19, to filter the routing information advertised by a specified neighbor router.

Filter all BGP-received routes using ACL 2000.

[SW8800-bgp-af-mul] filter-policy 2000 import

24.1.19 import-route

Syntax

import-route protocol [ route-policy route-policy-name | med med-value ]*

undo import-route protocol

24-11

3Com Switch 8800 Command Reference Guide

View

Chapter 24 MBGP Multicast Extension Configuration C ommands

IPv4 multicast sub-address family view

Parameter

protocol: Specifies the source routing protocols that can be imported, which can be direct, ospf, ospf-ase, ospf-nssa, rip, isis and static.

med-value: Specifies the metric value loaded by an imported route, ranging from 0 to

4,294,967,295.

route-policy-name: Specifies the route policy used for importing routes.

Description

Use the import-route command to import routing information of other protocols into

MBGP.

Use the undo import-route command to cancel the importing.

By default, MBGP will not import routing information of other protocols.

Example

Import static routes.

[SW8800-bgp-af-mul] import-route static

24.1.20 ipv4-family multicast

Syntax ipv4-family multicast undo ipv4-family multicast

View

BGP view, VPN instance sub-address family view, VPNv4 sub-address family view

Parameter

None

Description

Use the ipv4-family multicast command to enter the IPv4 multicast sub-address family view.

Use the undo ipv4-family multicast command to exit the IPv4 multicast sub-address family view, return to the unicast view and remove all the information in multicast.

Example

Enter the IPv4 multicast sub-address family view.

24-12

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C

<SW8800> system-view

[SW8800] bgp 100

[SW8800-bgp] ipv4-family multicast

[SW8800-bgp-af-mul] ommands

24.1.21 network

Syntax

network ip-address [ address-mask ] [ route-policy route-policy-name ]

undo network ip-address [ address-mask ] [ route-policy route-policy-name ]

View

IPv4 multicast sub-address family view

Parameter

ip-address: Network address that BGP advertises.

address-mask: Mask of the network address.

route-policy policy-name: Route-policy applied to the routes advertised.

Description

Use the network command to configure the network addresses to be sent by the local

MBGP.

Use the undo network command to remove the configuration.

By default, the local MBGP does not send any route.

Example

Advertise routes to network segment 10.0.0.0/16.

[SW8800-bgp-af-mul] network 10.0.0.1 255.255.0.0

24.1.22 peer advertise-community

Syntax

peer group-name advertise-community

undo peer group-name advertise-community

View

IPv4 multicast sub-address family view

Parameter

group-name: Name of the peer group.

24-13

3Com Switch 8800 Command Reference Guide

Description

Chapter 24 MBGP Multicast Extension Configuration C ommands

Use the peer advertise-community command to set to send community attributes to a peer group.

Use the undo peer advertise-community command to remove the configuration.

By default, no community attribute is sent to any peer group.

Example

Set to send community attributes to peer group “test”.

[SW8800-bgp-af-mul] peer test advertise-community

24.1.23 peer allow-as-loop

Syntax

peer { group-name | peer-address } allow-as-loop [ number ]

undo peer { group-name | peer-address } allow-as-loop

View

IPv4 multicast sub-address family view

Parameter

Description

Use the peer allow-as-loop command to specify repetition number of local AS IDs.

Use the undo peer allow-as-loop command to remove the configuration.

Related command: display current-configuration, display bgp routing-table peer and display bgp routing-table group.

Example

group-name: Name of the peer group.

peer-address: IP address of the peer.

number: Repetition number of local AS IDs, in the range of 1 to 10. By default ,the repetition number is 3.

Configure repetition number of local AS IDs as 2.

[SW8800-bgp-af-mul] peer 1.1.1.1 allow-as-loop 2

24.1.24 peer as-path-acl export

Syntax

peer group-name as-path-acl acl-number export

24-14

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands

undo peer group-name as-path-acl acl-number export

View

IPv4 multicast sub-address family view

Parameter

Description

Use the peer as-path-acl export command to configure filtering Policy of MBGP advertised routes based on AS path list.

Use the undo peer as-path-acl command to cancel the existing configuration.

By default, the peer group has no AS path list.

This command can only be configured on peer group.

Related command: peer as-path-acl import, ip as-path-acl (refer to the Routing

Protocol part).

Example

group-name: Specifies name of the peer group.

acl-number: Specifies the filter list number of an AS regular expression. The range is 1 to 199.

export: Uses the AS path list to filter the advertised routes.

Configure the peer group test to use AS path list 2 to filter the advertised routes.

[SW8800-bgp-af-mul] peer test as-path-acl 2 export

24.1.25 peer as-path-acl import

Syntax

peer { group-name | peer-address } as-path-acl acl-number import

undo peer { group-name | peer-address } as-path-acl acl-number import

View

Parameter

IPv4 multicast sub-address family view

group-name: Specifies name of the peer group.

peer-address: Specifies IP address of the peer.

acl-number: Specifies the filter list number of an AS regular expression. The range is 1 to 199.

import: Uses the AS path list to filter the received routes.

24-15

3Com Switch 8800 Command Reference Guide

Description

Chapter 24 MBGP Multicast Extension Configuration C ommands

Use the peer as-path-acl import command to configure filtering Policy of MBGP received routes based on AS path list.

Use the undo peer as-path-acl import command to cancel the existing configuration.

By default, the peer/peer group has no AS path list.

The inbound filter policy configured for the peer takes precedence over the configurations for the peer group.

Related command: peer as-path-acl export, ip as-path-acl (refer to the Routing

Protocol part).

Example

Set the AS path ACL of the peer group test to filter BGP received routes.

[SW8800-bgp-af-mul] peer test as-path-acl 3 import

24.1.26 peer enable

Syntax

peer group-name enable

undo peer group-name enable

View

IPv4 multicast sub-address family view

Parameter

group-name: Name of the multicast peer group.

Description

Use the peer enable command to enable the MBGP peer group.

Use the undo peer enable command to disable the MBGP peer group.

By default, the MBGP peer group is disabled.

Only after the peer group is enabled, can the router establishes connection with the multicast peer.

Example

Enable peer group group1.

[SW8800-bgp-af-mul] peer group1 enable

24-16

3Com Switch 8800 Command Reference Guide

24.1.27 peer filter-policy export

Chapter 24 MBGP Multicast Extension Configuration C ommands

Syntax

peer group-name filter-policy acl-number export

undo peer group-name filter-policy acl-number export

View

IPv4 multicast sub-address family view

Parameter

Description

Use the peer filter-policy export command to configure the peer group to apply the

ACL-based filter policy to the advertised routes. Use the undo peer filter-policy

export command to cancel the existing configuration.

By default, no ACL-based filter policy is configured.

The peer filter-policy export command can only be configured on peer groups.

Related command: peer filter-policy import, acl .

Example

group-name: Specifies the name of the peer group.

acl-number: Specifies an IP acl number, ranging from 2000 to 3999. That is, you can use basic ACLs or advanced ACLs.

export: Applies the filter policy to the advertised routes. This keyword is only valid for the peer groups.

Configure the peer group test to use ACL 2000 to filter the advertised routes.

[SW8800-bgp-af-mul] peer test filter-policy 2000 export

24.1.28 peer filter-policy import

Syntax

peer { group-name | peer-address } filter-policy acl-number import

undo peer { group-name | peer-address } filter-policy acl-number import

View

IPv4 multicast sub-address family view

Parameter

group-name: Specifies the name of the peer group.

peer-address: Specifies the IP address of the peer.

24-17

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands

acl-number: Specifies an IP acl number, ranging from 2000 to 3999. That is, you can use basic ACLs or advanced ACLs.

Description

Use the peer filter-policy import command to configure the peer to apply the

ACL-based filter policy to the received routes. Use the undo peer filter-policy import command to cancel the existing configuration.

By default, no ACL-based filter policy is configured.

Related command: peer filter-policy export, acl.

The inbound filter policy configured for the peer takes precedence over the configurations for the peer group.

Example

Configure the peer group test to use ACL 2000 to filter the received routes.

[SW8800-bgp-af-mul] peer test filter-policy 2000 import

24.1.29 peer group

Syntax

peer peer-address group group-name

undo peer peer-address

View

IPv4 multicast sub-address family view

Parameter

Description

Use the peer group command to add a peer into a peer group.

Use the undo peer group command to delete the peer.

Note that you must first add in BGP view the specific peer in the peer group and enable the peer group in IPv4 multicast sub-address family view, before using this command.

Example

peer-address: IP address of the peer, in dotted decimal format.

group-name: Name of the peer, consisting of one to 47 alphanumeric characters.

Add peer 10.1.1.1 to EBGP peer group TEST.

[SW8800-bgp] group TEST

[SW8800-bgp] peer TEST as-number 2004

[SW8800-bgp] peer 10.1.1.1 group TEST

24-18

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C

[SW8800-bgp] ipv4-family multicast

[SW8800-bgp-af-mul] peer TEST enable

[SW8800-bgp-af-mul] peer 10.1.1.1 group TEST ommands

24.1.30 peer ip-prefix export

Syntax

peer group-name ip-prefix prefixname export

undo peer group-name ip-prefix prefixname export

View

IPv4 multicast sub-address family view

Parameter

group-name: Name of peer group.

prefixname: Name of the specified ip-prefix.

Description

Use the peer ip-prefix export command to configure the route filtering policy of routes advertised by the peer group based on the ip-prefix.

Use the undo peer ip-prefix export command to cancel the route filtering policy of the peer/peer group based on the ip-prefix.

By default, the route filtering policy of the peer group is not specified.

The peer ip-prefix export command can only be configured on the peer groups.

Related command: ip ip-prefix, peer ip-prefix import.

Example

Configure the route filtering policy of the peer group1 based on the ip-prefix list1.

[SW8800-bgp-af-mul] peer group1 ip-prefix list1 export

24.1.31 peer ip-prefix import

Syntax

peer { group-name | peer-address } ip-prefix prefixname import

undo peer { group-name | peer-address } ip-prefix prefixname import

View

IPv4 multicast sub-address family view

24-19

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 24 MBGP Multicast Extension Configuration C ommands

group-name: Name of peer group.

peer-address: IP address of the peer, in dotted decimal format.

prefixname: Name of the specified ip-prefix, a character string of 1 to 19 characters.

Description

Use the peer ip-prefix import command to configure the route filtering policy of routes received by the peer based on the ip-prefix.

Use the undo peer ip-prefix import command to cancel the route filtering policy of the peer based on the ip-prefix.

By default, the route filtering policy of the peer is not specified.

The inbound route policy configured for the peer takes precedence over the configurations for the peer group.

Related command: peer ip-prefix export.

Example

Configure the route filtering policy of the peer group1 based on the ip-prefix list1.

[SW8800-bgp-af-mul] peer group1 ip-prefix list1 import

24.1.32 peer next-hop-local

Syntax

peer group-name next-hop-local

undo peer group-name next-hop-local

View

IPv4 multicast sub-address family view

Parameter

group-name: Name of the peer group.

Description

Use the peer next-hop-local command to remove the processing of the next hop in routes which BGP will advertise to the peer group and set the local address as the next hop.

Use the undo peer next-hop-local command to remove the configuration.

Example

Set the local address as next-hop when advertising routes to peer group named test.

24-20

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C

[SW8800-bgp-af-mul] peer test next-hop-local ommands

24.1.33 peer public-as-only

Syntax

peer group-name public-as-only

undo peer group-name public-as-only

View

IPv4 multicast sub-address family view

Parameter

group-name: Name of the peer group.

Description

Use the peer public-as-only command to set to contain only public AS IDs in the

MBGP Update message, but not private AS IDs.

Use the undo peer public-as-only command to restore the default setting, the router contains only private AS IDs in the MBGP Update message.

By default, the private AS ID is carried when BGP sends MBGP Update message.

Generally, MBGP sends MBGP Update message with the AS ID (which can be either the public AS number or private AS number) contained. To enable some egress routers to ignore the private AS ID when sending MBGP Update message, you can configure not to carry the private AS IDs when sending MBGP Update message.

Example

Set not to carry private AS IDs when sending MBGP Update message to peer group

"test”.

[SW8800-bgp-af-mul] peer test public-as-only

24.1.34 peer reflect-client

Syntax

peer group-name reflect-client

undo peer group-name reflect-client

View

IPv4 multicast sub-address family view

Parameter

group-name: Name of the peer group.

24-21

3Com Switch 8800 Command Reference Guide

Description

Chapter 24 MBGP Multicast Extension Configuration C ommands

Use the peer reflect-client command to configure a peer (group) as a client of the route reflector.

Use the undo peer reflect-client command to remove the configuration.

By default, there is no route reflector in the autonomous system.

Example

Configure peer group “test” as the client of the route reflector.

[SW8800-bgp-af-mul] peer test reflect-client

24.1.35 peer route-policy export

Syntax

peer group-name route-policy policy-name export

undo peer group-name route-policy policy-name export

View

IPv4 multicast sub-address family view

Parameter

group-name: Name of peer group.

peer-address: IP address of the peer.

Description

Use the peer route-policy export command to assign the Route-policy to the routes advertised to the peer group.

Use the undo peer route-policy export command to delete the specified

Route-policy.

By default, the peer/peer group has no Route-policy association.

Related command: peer route-policy import.

Example

Apply the Route-policy named test-policy to the route coming from the peer group test.

[SW8800-bgp-af-mul] peer test route-policy test-policy export

24.1.36 peer route-policy import

Syntax

peer { group-name | peer-address } route-policy policy-name import

24-22

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands

undo peer { group-name | peer-address } route-policy policy-name import

View

IPv4 multicast sub-address family view

Parameter

group-name: Name of peer group.

peer-address: IP address of the peer.

policy-name: Name of the applied route policy.

Description

Use the peer route-policy import command to assign the Route-policy to the route coming from the peer..

Use the undo peer route-policy import command to delete the specified

Route-policy.

By default, the peer has no Route-policy association.

The inbound route policy configured for the peer takes precedence over the configurations for the peer group.

Related command: peer route-policy export.

Example

Apply the Route-policy named test-policy to the route coming from the peer group test.

[SW8800-bgp-af-mul] peer test route-policy test-policy import

24.1.37 preference

Syntax

preference ebgp-value ibgp-value local-vlaue

undo preference

View

IPv4 multicast sub-address family view

Parameter

ebgp-value: EBGP route priority, in the range of 1 to 256. By default, it is 256.

ibgp-value: IBGP route priority, in the range of 1 to 256. By default, it is 256.

local-value: Local route priority, in the range of 1 to 256. By default, it is 130.

Description

Use the preference command to configure MBGP protocol priority.

24-23

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands

Use the undo preference command to restore the default priority.

You can configure different priority values for different types of MBGP routes.

Example

Set the priority of EBGP, IBGP and local routes all as 170.

[SW8800-bgp-af-mul] preference 170 170 170

24.1.38 reflect between-clients

Syntax reflect between-clients undo reflect between-clients

View

IPv4 multicast sub-address family view

Parameter

None

Description

Use the reflect between-clients command to enable route reflection between clients.

Use the undo reflect between-clients command to disable route reflection between clients.

When configured, the route reflector can reflect routes of a client to other clients.

By default, all-connection is not required for the clients with route reflectors configured, since the routes are by default reflected from one client to others. For all-connection clients, route reflection is unnecessary.

Related command: reflector cluster-id and peer reflect-client.

Example

Disable route reflection function.

[SW8800-bgp-af-mul] undo reflect between-clients

24.1.39 refresh bgp multicast

Syntax

refresh bgp { all | peer-address | group group-name } multicast { import | export }

View

User view

24-24

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 24 MBGP Multicast Extension Configuration C ommands

all: Refreshes multicast sub-address family router of all peer .

peer-address: Refreshes multicast sub-address family router of all specified address peer .

group-name: Refreshes multicast sub-address family router of all member of specified peer .

import: Sends ROUTE-REFRESH packets, request the peer to send all multicast sub-address family router again .

export: Sends all multicast sub-address family router again .

Description

Use the refresh bgp multicast command to request the peer to send multicast sub-address family router again, or send multicast sub-address family router again.

Example

Request all the peers to send multicast sub-address family router again.

<SW8800> refresh bgp all multicast import

24.1.40 reflector cluster-id

Syntax

reflector cluster-id { cluster-id | address }

undo reflector cluster-id

View

IPv4 multicast sub-address family view

Parameter

cluster-id: Route reflector cluster ID, in integer number or IP address format, range 1 to

4294967295.

address: Route reflector cluster ID in IP address format.

Description

Use the reflector cluster-id command to configure route reflector cluster ID.

Use the undo reflector cluster-id command to delete route reflector cluster ID.

By default, each route reflector uses its own route ID as cluster ID.

In general, one cluster has only one route reflector, and then the router ID for the route reflector can be used to identify the cluster. If a cluster has several route reflectors, for

24-25

3Com Switch 8800 Command Reference Guide Chapter 24 MBGP Multicast Extension Configuration C ommands multiple route reflectors can improve network stability, then you can use this command to specify the same cluster ID for them all.

Related command: reflect between-clients and peer reflect-client.

Example

Specify cluster ID for local router, one of the router reflectors.

[SW8800-bgp-af-mul] reflector cluster-id 80

[SW8800-bgp-af-mul] peer test reflect-client

24.1.41 summary

Syntax summary undo summary

View

IPv4 multicast sub-address family view

Parameter

None

Description

Use the summary command to set to auto-aggregate subnet routes.

Use the undo summary command to remove the configuration.

By default, subnet routes can not be aggregated automatically.

After the summary command is executed, MBGP cannot receive the subnet routes imported by IGP. You can use this command to reduce route selection information.

Example

Enable subnet route auto-aggregation.

[SW8800-bgp-af-mul] summary

24-26

3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands

Chapter 25 ACL Commands

Caution:

z z

The syntax of the QoS/ACL command used for service processor cards

(LSBM1NATB cards in the context of this document) is somewhat different from that for interface cards. Refer to related description in the manual.

Service processor cards do not support Layer 2 ACL.

25.1 ACL Commands

25.1.1 acl

Syntax

acl { number acl-number | name acl-name [ advanced | basic | link | user ] }

[ match-order { config | auto } ]

undo acl { number acl-number | name acl-name | all }

View

Parameter

System view

number acl-number: Serial number of ACL, in the range of:

2000 to 2999: Represents basic ACL.

3000 to 3999: Represents advanced ACL.

4000 to 4999: Represents Layer 2 ACL.

5000 to 5999: Represents user-defined ACL.

name acl-name: Character string, which must be started with an English letter (i.e., a-z or A-Z), and there should not be a space or quotation mark in it; case insensitive, key words all and any are not allowed to use.

advanced: Advanced ACL.

basic: Basic ACL.

link: Layer 2 ACL.

user: User-defined ACL.

25-1

3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands

config: In configuration order during matching ACL rules.

auto: In depth-first order during matching ACL rules.

all: Deletes all ACLs (both number- and name-identified ones).

Description

Use the acl command to define a number- or name-identified ACL and enter its view.

Use the undo acl command to delete all rules of an ACL or all ACLs.

By default, the system matches ACL rules in configuration order.

Using the acl command, you can create an ACL named “acl-name”. And the type of this

ACL is decided by keywords: “advanced”, ”basic”, ”link”, or "user”. If you don’t specify the ACL type, the system create a link ACL by default. After entering a corresponding

ACL view, no matter the ACL is identified by a number or a name, you can use the rule command to create sub-rules of this named ACL (you can exit ACL view by using the

quit command).

You can select the match-order keyword to specify whether to match ACL rules in configuration order or depth-first order (matching the rules with smaller range first). By default, the former mode is selected. You cannot modify the matching order once you specify it. To do so, you have to delete all sub-rules of the ACL and specify a matching order for it again.

Note:

The user-defined ACL matching order takes effect only when multiple rules of one ACL are applied at the same time. For example, an ACL has two rules. If the two rules are not applied simultaneously, even if you configure the matching order to be depth first, the switch still matches them according to their application order.

If one rule is a subset of another rule in an ACL, it is recommended to apply the rules according to the range of the specified packets. The rule with the smallest range of the specified data packets is applied first, and then other rules are applied based on this principle.

Related command: rule.

Example

Specify depth first order as the match order of number 2000 ACL.

[SW8800] acl number 2000 match-order auto

25-2

3Com Switch 8800 Command Reference Guide

25.1.2 display acl config

Chapter 25 ACL Commands

Syntax

display acl config { all | acl-number | acl-name }

View

Any view

Parameter

Description

Use the display acl config command to view the configuration details of the ACL, including all the sub-rules, their serial numbers, quantities and number of bytes of matched packets.

The matched times here refer to the software matched times, that is, the matched times of the ACLs that needed to be processed by CPU. You can collect hardware matched times value by using the traffic-statistic command.

Example

all: Displays all ACLs (both number- and name-identified ones).

acl-number: Serial number of the ACL to be displayed, in the range of 2000 to 5999.

acl-name: Name of the ACL to be displayed. String parameter which must start with an

English letter ([a-z, A-Z]) and no space is allowed in it.

Display contents of all ACLs.

<SW8800>display acl config all

Link ACL 4000, 1 rule,

rule 0 permit ingress any egress any

Basic ACL traffic-of-host, 1 rule,

rule 1 deny source 10.1.1.1 0 time-range 3com(0 times matched) (Active)

25.1.3 display acl running-packet-filter

Syntax

display acl running-packet-filter { all | interface { interface-name | interface-type

interface-num } | vlan vlan-id }

View

Any view

25-3

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 25 ACL Commands

all: Displays all ACLs (both number- and name-identified ones).

interface { interface-name | interface-type interface-num }: Port of the switch, for detailed description, refer to Command Manual – Port. Specifying this parameter can display ACL delivery information on a specific port of an interface card.

vlan: Displays the information about the ACLs configured under a VLAN for a service processor card.

vlan-id : ID of VLAN interface, ranging from 1 to 4094.

Description

Use the display acl running-packet-filter command to view ACL delivery information, including ACL name, sub-rule and the delivery state.

Example

Display the ACLs activated on Ethernet3/1/1.

<SW8800> display acl running-packet-filter all

Ethernet3/1/1

Inbound:

Acl 4000 rule 0 running

Display the ACLs activated on VLAN2.

<SW8800> display acl running-packet-filter vlan 2

Vlan 2

Inbound:

Acl 2000 rule 1 slot 6 running

25.1.4 display flow-template

Syntax

display flow-template [ default | interface interface-type interface-num | slot slotid |

user-defined]

View

Parameter

Any view

default: Displays the default flow template configuration of system.

interface interface-type interface-num: Displays the flow template applied on the specified port.

slot slotid: Displays the flow template applied on the specified slot.

user-defined: Displays the configuration of user-defined flow template.

25-4

3Com Switch 8800 Command Reference Guide

Description

Chapter 25 ACL Commands

Use the display flow-template command to view the configuration of flow template.

The configuration includes the defined information of flow template, the port and slot for which the flow template has applied.

The Switch 8800 supports two flow templates: one is user-defined; the other is the default one. If you do not input any parameter for this command, the detailed configuration of all flow templates will be displayed.

Related command: flow-template user-defined.

Example

Display the default flow-template. default flow template : ip-protocol tcp-flag sport dport icmp-type icmp-code sip 0.0.0.0 dip 0.0.0.0

25.1.5 display time-range

Syntax

display time-range { all | name }

View

Any view

Parameter

all: Displays all time ranges.

name: Time range name, string starting with an English letter ([a-z, A-Z]) and in the range of 1 to 32 characters.

Description

Use the display time-range command to view the configuration and status of current time range. For active time range, the system shows “active” and “inactive” for inactive time range.

A delay, about one minute, exists in system’s updating ACLs, but the result of the

display time-range command is based on the current time. Then there may the case where a time range have been shown active using the display time-range command, while it is still inactive in importing the ACL. You just take it as a normal case.

Related command: time-range.

Example

Display all time ranges.

<SW8800> display time-range all

25-5

3Com Switch 8800 Command Reference Guide

Current time is 14:36:36 4-3-2003 Thursday

Time-range : hhy ( Inactive )

from 08:30 2-5-2005 to 18:00 2-19-2005

Time-range : hhy1 ( Inactive )

from 08:30 2-5-2003 to 18:00 2-19-2003

Display time range tm1.

<SW8800> display time-range tm1

Current time is 14:37:31 4-3-2003 Thursday

Time-range : tm1 ( Inactive ) from 08:30 2-5-2005 to 18:00 2-19-2005

Chapter 25 ACL Commands

25.1.6 flow-template user-defined

Syntax

flow-template user-defined

undo flow-template user-defined

View

Ethernet port view / port group view

Parameter

None.

Description

Use the flow-template user-defined command to apply the user-defined flow template to current port or current port group.

Use the undo flow-template user-defined command to cancel the applied flow template on current port or current port group.

Related command: display flow-template, flow-template user-defined slot slotid

template-info.

Example

Apply the user-defined flow template to current port Ethernet4/1/1.

[SW8800-Ethernet4/1/1] flow-template user-defined

25-6

3Com Switch 8800 Command Reference Guide

25.1.7 flow-template user-defined template-info

Chapter 25 ACL Commands

Syntax

flow-template user-defined slot slotid template-info

undo flow-template user-defined slot slotid

View

Parameter

System view z z z z z z z z z z z z z z z z z z

template-info: Information available in defining traffic classification, its value can be: z z z cos: 802.1p priority, in the length of 1 byte. dip wildcard: Destination IP domain in the IP packet header, in the length of 4 bytes. dmac wildcard: Destination MAC domain in the Ethernet packet header, in the length of 6 bytes. dport: Destination port domain, in the length of 2 bytes. dscp: DSCP domain in the IP packet header, in the length of 1 byte. ethernet-protocol: Protocol type domain in the Ethernet packet header, in the length of 2 bytes. exp: EXP field in MPLS packet, in the length of 1 byte. fragment-flags: Flag field of fragment in IP packed header, no bytes in flow template. icmp-code: ICMP code domain, in the length of 1 byte. icmp-type: ICMP type domain, in the length of 1 byte. ip-precedence: IP priority domain in the IP packet header, in the length of 1 byte. ip-protocol: Protocol type domain in the IP packet header, in the length of 1 byte. sip wildcard : Source IP domain in the IP packet header, in the length of 4 bytes. smac wildcard: Source MAC domain in the Ethernet packet header, in the length of 6 bytes. sport: Source port domain, in the length of 2 bytes. tcp-flag: Flag domain in the TCP packet header, in the length of 1 byte. tos: TOS (type of service) domain in the IP packet header, in the length of 1 byte. vlanid: VLAN ID in the packet, in the length of 2 bytes. c-tag-cos: 802.1p priority in the Internal 802.1Q tag (internal tag of QinQ tag-in-tag application), 2 bytes. c-tag-vlanid: Vlan ID in the internal 802.1Q tag (internal tag of QinQ tag-in-tag application), 2 bytes. bt-flag: Flag for Bit Torrent peer-to-peer service, 2 bytes

slot slotid: Specifies the slot on which the flow template applied.

25-7

3Com Switch 8800 Command Reference Guide

Description

Chapter 25 ACL Commands

Use the flow-template user-defined slot slotid template-info command to define a flow template.

Use the undo flow-template user-defined slot slotid command to delete a flow template.

In defining a flow template, the total length of all elements should not be more than 16 bytes.

A flow template is defined by default, which includes these items: ip-protocol tcp-flag sport dport icmp-type icmp-code sip 0.0.0.0 dip 0.0.0.0.

You cannot modify or delete the default flow template, but those you have defined.

Related command: display flow-template, flow-template user-defined.

Example

Define a flow template which classifies traffic by source and destination IP addresses, source and destination TCP/UDP ports, DSCP domain in the IP packet header.

[SW8800] flow-template user-defined slot 3 sip 0.0.0.0 dip 0.0.0.0 sport dport dscp

25.1.8 packet-filter

Syntax

I. Command Format Which Only Applies IP Group ACL

In Ethernet port view or port group view:

packet-filter inbound ip-group { acl-number | acl-name } [ rule rule [ system-index

index ] ]

undo packet-filter inbound ip-group { acl-number | acl-name } [ rule rule ]

In VLAN view:

packet-filter inbound ip-group { acl-number | acl-name } [ rule rule ] [ system-index

index ] slot slotid

undo packet-filter inbound ip-group { acl-number | acl-name } [ rule rule ] slot slotid

II. Command Format Which Applies IP Group and Link Group ACL at Same time

In Ethernet port view or port group view:

packet-filter inbound ip-group { acl-number | acl-name } { rule rule link-group

{ acl-number | acl-name } [ rule rule [ system-index index ] ] | link-group { acl-number

| acl-name } rule rule }

25-8

3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands

undo packet-filter inbound ip-group { acl-number | acl-name } { rule rule link-group

{ acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } rule rule }

III. Command Format Which Only Applies Link Group ACL

In Ethernet port view or port group view:

packet-filter inbound link-group { acl-number | acl-name } [ rule rule [ system-index

index ] ]

undo packet-filter inbound link-group { acl-number | acl-name } [ rule rule ]

View

Ethernet port view / port group view / VLAN view

Parameter

inbound: Performs filtering to the packets received by the interface.

ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced

ACLs. acl-number : Sequence number of ACL, ranging from 2000 to 3999. acl-name:

Name of the ACL, which must be a character string starting with an English letter (a-z or

A-Z), and without any space or quotation mark in it.

link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.

rule rule: Specifies the sub-rule of an active ACL, ranging from 0 to 127; if not specified, all sub-rules of ACL will be activated.

system-index index: Intra-system index of the rule. This parameter is used for trouble-shooting. User must not use this parameter during configuration.

slot slotid: Slot number of a service processor card.

Description

Use the packet-filter command to activate an ACL.

Use the undo packet-filter command to deactivate an active ACL.

Note:

The interface cards support the command syntax in Ethernet port view; while the service processor cards (LSBM1NATB cards in the context of this document) support the command syntax in VLAN view because these cards have no egress port.

Before executing the packet-filter command on a service processor card, you must first configure traffic redirection in Ethernet port view to redirect packets of a specific

VLAN to the service processor card.

25-9

3Com Switch 8800 Command Reference Guide

Example

Chapter 25 ACL Commands

Activate ACL 2000.

[SW8800-Ethernet5/1/1] packet-filter inbound ip-group 2000

25.1.9 reset acl counter

Syntax

reset acl counter { all | acl-number | acl-name }

View

User view

Parameter

Description

Use the reset acl counter command to clear ACL statistics to zero.

Example

all: Displays all ACLs (both number- and name-identified ones).

acl-number: Serial number of the ACL, in the range of 2000 to 3999.

acl-name: ACL name, string parameter. It must start with an English letter ([a-z, A-Z]).

No space or quotation mark is allowed in it. It is case insensitive. The keywords all is forbidden.

Clear the statistics of ACL 2000.

<SW8800> reset acl counter 2000

25.1.10 rule

Syntax

I. Define or delete the subrules of a basic ACL

rule [ rule-id ] { permit | deny } [ source { source-addr wildcard | any } | fragment |

time-range name | vpn-instance instance-name ]*

undo rule rule-id [ source | fragment | time-range | vpn-instance instance-name ]*

II. Define or delete the subrules of an advanced ACL

rule [ rule-id ] { permit | deny } protocol [ source { source-addr wildcard | any } ]

[ destination { dest-addr wildcard | any } ] [ source-port operator port1 [ port2 ] ]

[ destination-port operator port1 [ port2 ] ] [ icmp-type type code ] [ established ]

25-10

3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands

[ [ precedence precedence | tos tos ]* | dscp dscp ] [ fragment ] [ time-range name ]

[ vpn-instance instance-name ]

undo rule rule-id [ source | destination | source-port | destination-port | icmp-type

| precedence | tos | dscp | fragment | time-range | vpn-instance ]*

III. Define or delete the subrules of a Layer 2 ACL

rule [ rule-id ] { permit | deny } [ cos cos-value | { arp | ip | mpls [ l2lable-range ] [ exp

exp-value ] | nbx | pppoe-control | pppoe-data | rarp } | ingress { { source-vlan-id |

source-mac-addr source-mac-wildcard }* | any } | egress { dest-mac-addr

dest-mac-wildcard | any } | time-range name ]*

undo rule rule-id

View

Corresponding ACL view

Parameter

rule-id: Specifies a sub-rule of the ACL, in the range of 0 to 127

permit: Allows qualified packets to pass.

deny: Forbids qualified packets to pass.

time-range name: Time range name, optional parameter. It means the rule takes effect in this time range.

Note:

The following parameters are for the attributes of the packet. The ACL generates rules according to these attribute parameters. z

Parameters specific to basic ACLs:

source { source-addr wildcard | any }: source-addr wildcard specifies the source IP address and wildcard digit of source address represented in dotted decimal notation.

any represents all source addresses.

fragment: It is only effective to fragmented messages and is ignored by non-fragmented messages.

vpn-instance instance-name: VPN instance name. The specified MPLS VPN packets will be identified if this parameter is selected. z

Parameters specific to advanced ACLs:

protocol: Specifies the protocol type which is represented by a name or a number. For name format, the options include icmp, igmp, tcp, udp, ip, gre, ospf, ipinip etc. The IP

25-11

3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands parameter represents all IP protocols. For number format, the value ranges from 1 to

255.

source { source-addr wildcard | any }: source-addr wildcard specifies the source IP address and wildcard digit of source address represented, in dotted decimal notation.

any represents all source addresses.

destination { dest-addr wildcard | any }: dest-addr wildcard specifies the destination IP address and wildcard digit of destination address represented, in dotted decimal notation. any represents all destination addresses.

source-port operator port1 [ port2 ]: Source TCP or UDP port ID of the packet.

operator means port operator, with options including eq (equal to), gt (greater than), lt

(less than), neq (not equal to) and range (in the range of). Note that it is effective only when the protocol parameter is set as TCP or UDP. port1 [ port2 ] stands for source

TCP or UDP port ID of the packet, in characters or digits. Digital value ranges from 0 to

65535. For character options, see the port ID mnemonic symbol list. Only for the range operator, both port1 and port2 are active. For the rest operators, only port1 is required.

destination-port operator port1 [ port2 ]: Destination TCP or UDP port ID of the packet.

See source-port operator port1 [ port2 ] for detailed description.

icmp-type type code: It is active when the protocol is set as icmp. type code specifies an ICMP packet. type indicates ICMP packet type, in characters or digits. The digital value ranges from 0 to 255. code is ICMP code, which is active when ICMP is selected and ICMP packet type is not expression in characters. It ranges from 0 to 255.

established: (Optional) It is effective only to the first SYN packet established by TCP and active when protocol is set as tcp.

precedence precedence: (Optional) IP priority level, in a number (ranging from 0 to 7) or a name.

tos tos: (Optional) Indicating packets are classified by TOS value, in a number (ranging

0 to 15) or a name.

dscp dscp: (Optional) Indicating packets are classified by DSCP value, in a number

(ranging from 0 to 63) or a name.

fragment: It is only effective to fragmented messages and is ignored by non-fragmented messages.

vpn-instance instance-name: VPN instance name. The specified MPLS VPN packets will be identified if this parameter is selected. z

Parameters specific to Layer 2 ACLs:

cos: Specifies 802.1p priority.

cos-value: In number format (ranging 0 to 7) or just entering the priority name. See

Table 25-1 for their correspondence.

25-12

3Com Switch 8800 Command Reference Guide

Table 25-1 COS priority definition

Chapter 25 ACL Commands

Number Priority name

0 best-effort

1 background

2 spare

3 excellent-effort

4 controlled-load

5 video

6 voice

7 network-management

{ arp | ip | mpls [ l2lable-range ] [ exp exp-value ] | nbx | pppoe-control | pppoe-data

| rarp }: (Optional) Protocol type carried by Ethernet frame.

ingress { { source-vlan-id | source-mac-addr source-mac-wildcard }* | any }: Source information of the packet. source-vlan-id shows its source VLAN. source-mac-addr

source-mac-wildcard shows source MAC address and wildcard of the source address.

The two parameters work together to determine the range of the source MAC addresses in which the user is interested. For example, the source MAC wildcard

0-0-ffff means the user is interested in the last 16 bits (those corresponding to the wildcard 1). any represents all packets received at all the ports.

egress { dest-mac-addr dest-mac-wildcard | any }: Destination information of the packet. dest-mac-addr dest-mac-wildcard shows destination MAC address and wildcard of the destination address. The two parameters work together to determine the range of the destination MAC addresses in which the user is interested. For example, the destination MAC wildcard 0-0-ffff means the user is interested in the last 16 bits

(those corresponding to the wildcard 1). any represents all packets transferred at all the ports.

Description

Use the rule command to add a sub-rule to the ACL.

Use the undo rule command to delete a sub-rule from the ACL.

You can define multiple sub-rules for an ACL. Only the specified rules will be deleted if you select parameters in the undo rule command.

Related command: acl.

Example

Add a sub-rule to the advanced ACL.

25-13

3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands

[SW8800-acl-adv-3000] rule 1 permit tcp established source 1.1.1.1 0 destination 2.2.2.2 0

25.1.11 time-range

Syntax

time-range time-name { start-time to end-time days-of-the-week [ from start-time

start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time end-date ]

| to end-time end-date }

undo time-range time-name [ start-time to end-time days-of-the-week [ from

start-time start-date ] [ to end-time end-date ] | from start-time start-date [ to end-time

end-date ] | to end-time end-date ]

View

System view

Parameter

time-name: Name of a particular time range, used as an import identifier.

start-time: (Optional) Starting time of the particular time range, in the format of hh:mm.

end-time: (Optional), End time of the particular time range, in the format of hh:mm.

days-of-the-week: (Optional) Indicating the particular time range takes effect on which day in a week. You can type these values: z z z z z

Number (ranging from 0 to 6);

Monday, Tuesday, Wednesday, Thursday, Friday, Saturday or Sunday;

Working-day: Monday through Friday inclusive;

Off-day: Saturday and Sunday; daily: Every day of a week.

from start-time start-date: (Optional) Starting date of the particular time range, in the format of hh:mm YYYY/MM/DD.

to end-time end-date: (Optional) End date of the particular time range, in the format of hh:mm YYYY/MM/DD.

Description

Use the time-range command to define a time range.

Use the undo time-range command to cancel a time range.

The defined time range includes absolute time range and period time range. start-time and end-time days-of-the-week define period time range together. from start-time

start-date and end-time end-date define absolute time range together.

If a time range only defines the period time range, the time range is only active within the period time range.

25-14

3Com Switch 8800 Command Reference Guide Chapter 25 ACL Commands

If a time range only defines the absolute time range, the time range is only active within the absolute time range.

If a time range defines the period time range and the absolute time range, the time range is only active when the period time range and the absolute time range are both matched. For example, a time range defines a period time range which is from 12:00 to

14:00 every Wednesday, and defines an absolute time range which is from 00:00

2004/1/1 to 23:59 2004/12/31. This time range is only active from 12:00 to 14:00 every

Wednesday in 2004.

If you input parameters in the undo time-range command, only the content corresponding to the specified time range will be canceled.

Example

Define a time range starting from 0:0, Jan. 1, 2000, effective for ever.

[SW8800] time-range test from 0:0 2000/1/1

25-15

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Chapter 26 QoS Commands

Caution:

z z z

The syntax of the QoS/ACL command used for service processor cards

(LSBM1NATB cards in the context of this document) is somewhat different from that for interface cards. Refer to related description in the manual.

Service processor cards do not support Layer 2 ACL.

If you configure QoS/ACL feature in the port group view, then the QoS/ACL configurations on all ports in the group are the same. When a single port is added into a group, its QoS/ACL configuration is replaced by the group configuration. Then subsequent configuration is achieved among the group.

26.1 QoS Commands

26.1.1 display port-group

Syntax

display port-group

View

Any view

Parameter

None.

Description

Use the display port-group command to view all the port groups existed on the switch.

Related command: port-group.

Example

Display the existed port groups on the switch.

[SW8800] display port-group

Now, the following port group exist(s): 1

26-1

3Com Switch 8800 Command Reference Guide

26.1.2 display port-group index

Chapter 26 QoS Commands

Syntax

display port-group index

View

Any view

Parameter

index: Port group index.

Description

Use the display port-group index command to view the configuration of a port group.

The information displayed includes the description of port group and its member ports.

Related command: port.

Example

Display the configuration of port group 1.

[SW8800] display port-group 1

Port-group ID : 1

Description: Port group 01

Port-group is unlocked.

Port(s) description:

Ethernet3/1/1 Ethernet3/1/2 Ethernet3/1/3

26.1.3 display mirroring-group

Syntax

display mirroring-group [ groupid ]

View

Any view

Parameter

groupid: mirroring group ID, in the range of 1 to 24.

Description

Use the display mirroring-group command to view the configuration of a port mirroring group. The information displayed includes the monitored ports, direction of monitored packets, monitoring ports, etc.

Related command: mirroring-group.

26-2

3Com Switch 8800 Command Reference Guide

Example

Chapter 26 QoS Commands

Display the parameter configuration of a port mirroring group.

[SW8800] display mirroring-group mirroring-group 1 inbound Ethernet6/1/1 mirrored-to Ethernet6/1/2

26.1.4 display qos conform-level

Syntax

display qos conform-level [ conform-level-value ] { dscp-policed-service-map

[ dscp-list ] | exp-policed-service-map | local-precedence-cos-map }

View

Any view

Parameter

conform-level-value: Conform level, in the range of 0 to 2. If you type value(s) for this parameter, then only the specified conform-level DSCP items will be displayed.

Otherwise, the system displays the whole mapping connection.

dscp-policed-service-map [ dscp-list ]: Displays “DSCP + Conform-level — >

Service-parameter” mapping table. dscp-list: DSCP value, which can be a single value or values, for example, you can type single DSCP value “46”, or DSCP values “0 8 10

16” (a space is required between two values). If you type value(s) for this parameter, then only the specified DSCP items will be displayed. Otherwise, the system displays the whole mapping connection. DSCP value is in the range of 0 to 63.

exp-policed-service-map: Displays “EXP + Conform-level —> Service-parameter” mapping table. EXP is MPLS priority of MPLS packets.

local-precedence-cos-map: Displays ”Local-precedence + Conform-level — >

Priority” mapping table

Description

Use the display qos conform-level command to view the “DSCP + Conform-level —>

Service-parameter” mapping table, “EXP + Conform-level — > Service-parameter” mapping table and “Local-precedence + Conform-level —> Priority” mapping table.

Example

Display the “DSCP + Conform-level —> Service-parameter” mapping table.

<SW8800> display qos conform-level 0 dscp-policed-service-map

Conform-level 0 :

Dscp-policed-service Map : dscp : dscp exp cos local-precedence drop-precedence

--------------------------------------------------------------------------

26-3

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

0 : 0 0 0 0 0

8 : 8 1 1 1 0

10 : 10 1 1 1 0

16 : 16 2 2 2 0

18 : 18 2 2 2 0

24 : 24 3 3 3 0

26 : 26 3 3 3 0

32 : 32 4 4 4 0

34 : 34 4 4 4 0

40 : 40 5 5 5 0

46 : 46 5 5 5 0

48 : 48 6 6 6 0

56 : 56 7 7 7 0

Display the “EXP + Conform-level —> Service-parameter” mapping table.

<SW8800> display qos conform-level 0 exp-policed-service-map conform-level 0 :

exp : dscp exp cos local-precedence drop-precedence

--------------------------------------------------------------------------

0 : 2 0 0 0 0

1 : 10 1 1 1 0

2 : 18 2 2 2 0

3 : 26 3 3 3 0

4 : 34 4 4 4 0

5 : 42 5 5 5 0

6 : 50 6 6 6 0

7 : 58 7 7 7 0

Display the “Local-precedence + Conform-level —> Priority” mapping table.

<SW8800> display qos conform-level 0 local-precedence-cos-map conform-level 0 :

local-precedence : 0 1 2 3 4 5 6 7

--------------------------------------------------------------------------

cos : 0 1 2 3 4 5 6 7

26.1.5 display qos cos-drop-precedence-map

Syntax

display qos cos-drop-precedence-map

View

Any view

26-4

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 26 QoS Commands

Description

Use the display qos cos-drop-precedence-map command to view the “CoS—>

Drop-precedence” mapping table.

Example

Display the “CoS—> Drop-precedence” mapping table.

<SW8800> display qos cos-drop-precedence-map cos-drop-precedence-map:

cos : 0 1 2 3 4 5 6 7

------------------------------------------------------------------- drop-precedence : 2 2 1 1 1 1 0 0

26.1.6 display qos cos-local-precedence-map

Syntax

display qos cos-local-precedence-map

View

Any view

Parameter

None

Description

Use the display qos cos-local-precedence-map command to view the “CoS —>

Local –precedence” mapping table.

Example

Display the “CoS —> Local –precedence” mapping table.

<SW8800> display qos cos-local-precedence-map cos-local-precedence-map:

cos : 0 1 2 3 4 5 6 7

--------------------------------------------------------------------------

local-precedence : 2 0 1 3 4 5 6 7

26-5

3Com Switch 8800 Command Reference Guide

26.1.7 display qos-interface all

Chapter 26 QoS Commands

Syntax

display qos-interface [ interface-name | interface-type interface-num ] all

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

Description

Use the display qos-interface all command to view the QoS configuration of all ports, including drop mode, queue scheduling, traffic shaping etc. If you specify port IDs, only their QoS configuration will be displayed.

Example

Display QoS configurations of all ports

<SW8800> display qos-interface all

26.1.8 display qos-interface drop-mode

Syntax

display qos-interface [ interface-name | interface-type interface-num ] drop-mode

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

Description

Use the display qos-interface drop-mode command to view drop mode configuration of outbound queues at a port. If no port is specified, drop mode configuration of all ports will be displayed.

Related command: drop-mode.

Example

Display drop mode and parameters.

26-6

3Com Switch 8800 Command Reference Guide

<SW8800> display qos-interface drop-mode

Chapter 26 QoS Commands

26.1.9 display qos-interface mirrored-to

Syntax

display qos-interface [ interface-name | interface-type interface-num ] mirrored-to

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

Description

Use the display qos-interface mirrored-to command to view traffic mirroring configuration of a port.

Related command: mirrored-to.

Example

Display traffic mirroring configuration.

<SW8800> display qos-interface mirrored-to

26.1.10 display qos-interface queue-scheduler

Syntax

display qos-interface [ interface-name | interface-type interface-num ]

queue-scheduler

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

Description

Use the display qos-interface queue-scheduler command to view queue scheduling mode and parameters of a port. If no port is specified, queue scheduling mode and the parameters of all ports will be displayed.

Related command: queue-scheduler.

26-7

3Com Switch 8800 Command Reference Guide

Example

Display queue scheduling mode and parameters.

<SW8800> display qos-interface queue-scheduler

Ethernet5/1/1 Port scheduling:

QID: scheduling-group weight

-----------------------------------

0 : sp 0

1 : sp 0

2 : sp 0

3 : wrr , group1 25

4 : sp 0

5 : wrr , group2 30

6 : sp 0

7 : sp 0

Ethernet5/1/ Port scheduling:

QID: scheduling-group weight

-----------------------------------

0 : sp 0

1 : sp 0

2 : sp 0

3 : sp 0

4 : sp 0

5 : sp 0

6 : sp 0

…

Chapter 26 QoS Commands

26.1.11 display qos-interface traffic-limit

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-limit

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

Description

Use the display qos-interface traffic-limit command to view the parameter setting of traffic rate limitation, including the target ACL, committed average rate, committed burst

26-8

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands size (CBS), maximum burst size (MBS), peak rate and the related monitoring actions etc.

Related command: traffic-limit.

Example

Display parameter configuration of traffic rate limitation,.

<SW8800> display qos-interface traffic-limit

26.1.12 display qos-interface traffic-priority

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-priority

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

Description

Use the display qos-interface traffic-priority command to view traffic priority configuration of a port, including the target ACL, priority type, priority values etc.

Related command: traffic-priority.

Example

Display traffic priority marking configuration.

<SW8800> display qos-interface traffic-priority

26.1.13 display qos-interface traffic-redirect

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-redirect

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

Description

26-9

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Use the display qos-interface traffic-redirect command to view traffic redirection configuration of a port, including the target ACL, target port etc.

Related command: traffic-redirect.

Example

Display traffic redirection configuration.

<SW8800> display qos-interface traffic-redirect

26.1.14 display qos-interface traffic-shape

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-shape

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

Description

Use the display qos-interface traffic-shape command to view traffic shaping configuration of a port, including the maximum rate, MBS (in units of kbyte), the maximum queue length. If no port is specified, traffic shaping configuration of all ports will be displayed.

Example

Display traffic shaping configuration.

[SW8800] display qos-interface traffic-shape

26.1.15 display qos-interface traffic-statistic

Syntax

display qos-interface [ interface-name | interface-type interface-num ]

traffic-statistic

View

Any view

Parameter

interface-name | interface-type interface-num: Port of the switch, for detailed description, please refer to Command Manual – Port.

26-10

3Com Switch 8800 Command Reference Guide

Description

Chapter 26 QoS Commands

Use the display qos-interface traffic-statistic command to view traffic statistics of a port, including the target ACL, number of calculated packets etc.

Related command: traffic-statistics.

Example

Display traffic statistics.

<SW8800> display qos-interface traffic-statistic

26.1.16 display qos-vlan all

Syntax

display qos-vlan [ vlan-id ] all

View

Any view

Parameter

vlan-id: ID of a VLAN, in the range of 1 to 4094.

Description

Use the display qos-vlan all command to display the QoS configuration (including the configuration of priority marking, traffic policing, and traffic redirection) information about one specific VLAN (with vlan-id parameter) or all VLANs (without vlan-id parameter) on the switch.

Example

Display all the QoS parameter configurations.

<SW8800> display qos-vlan all

Vlan 1 traffic-limit

Inbound:

There is no configuration.

Vlan 1 traffic-priority

Inbound:

There is no configuration.

Vlan 1 traffic-redirect

Inbound:

There is no configuration.

Vlan 2 traffic-limit

Inbound:

Matches: Acl 2000 rule 1 running

26-11

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Committed Information Rate: 8192 Kbps

Committed Burst Size: 10000 byte(s)

Excess Burst Size: 20000 byte(s)

Peak Information Rate: 0 Kbps

Exceed action: drop

Vlan 2 traffic-priority

Inbound:

Matches: Acl 2000 rule 1 running

Priority action: remark-policed-service, untrusted, dscp: 13, cos: 6, local

-precedence: 6, drop-priority: 1

Vlan 2 traffic-redirect

Inbound:

Matches: Acl 2000 rule 1 running

Redirected to: next-hop 1.1.1.1

26.1.17 display qos-vlan traffic-limit

Syntax

display qos-vlan [ vlan-id ] traffic-limit

View

Any view

Parameter

vlan-id: ID of a VLAN, in the range of 1 to 4094.

Description

Use the display qos-vlan traffic-limit command to display the parameter configuration for traffic limit, including the configuration information about related ACL and policing actions.

Related command: traffic-limit and traffic-params.

Example

Display the parameter configuration of traffic limit.

<SW8800> display qos-vlan traffic-limit

Vlan 1 traffic-limit

Inbound:

There is no configuration.

Vlan 2 traffic-limit

Inbound:

Matches: Acl 2000 rule 3 running

26-12

3Com Switch 8800 Command Reference Guide

Committed Information Rate: 8192 Kbps

Committed Burst Size: 10000 byte(s)

Excess Burst Size: 20000 byte(s)

Peak Information Rate: 0 Kbps

Exceed action: drop

Chapter 26 QoS Commands

26.1.18 display qos-vlan traffic-priority

Syntax

display qos-vlan [ vlan-id ] traffic-priority

View

Any view

Parameter

vlan-id: ID of a VLAN, in the range of 1 to 4094.

Description

Use the display qos-vlan traffic-priority command to display the priority marking configuration, including the ACL associated with the traffic priority marking, the type and value of the priority marking.

Related command: traffic-priority.

Example

Display the priority marking configuration.

<SW8800> display qos-vlan traffic-priority

Vlan 1 traffic-priority

Inbound:

There is no configuration.

Vlan 2 traffic-priority

Inbound:

Matches: Acl 2000 rule 1 running

Priority action: remark-policed-service, untrusted, dscp: 13, cos: 6, local-precedence: 6, drop-priority: 1

26.1.19 display qos-vlan traffic-redirect

Syntax

display qos-vlan [ vlan-id ] traffic-redirect

View

Any view

26-13

3Com Switch 8800 Command Reference Guide

Parameter

vlan-id: ID of a VLAN, in the range of 1 to 4094.

Chapter 26 QoS Commands

Description

Use the display qos-vlan traffic-redirect command to display the parameter configuration for traffic redirection, including the related ACL and the destination port of the traffic redirection.

Related command: traffic-redirect.

Example

Display the parameter configuration for a traffic redirection.

<SW8800> display qos-vlan 2 traffic-redirect

Vlan 2 traffic-redirect

Inbound:

Matches: Acl 2000 rule 1 running

Redirected to: next-hop 1.1.1.1

26.1.20 display traffic-params

Syntax

display traffic-params [ traffic-index ]

View

Any view

Parameter

traffic-index: Traffic parameter index, in the range of 0 to 173 and defaulting to 1.

Description

Use the display traffic-params command to display the parameter configuration for traffic policing, including cir, cbs, ebs, pir, and so on.

Related command: traffic-params.

Example

Display the parameter configuration for traffic policing.

<SW8800> display traffic-params 1 traffic parameters configuration list:

index : cir cbs ebs pir

--------------------------------------------------------------------------

1 : 8192 10000 20000 0

26-14

3Com Switch 8800 Command Reference Guide

26.1.21 drop-mode

Chapter 26 QoS Commands

Syntax

View

Ethernet port view / port group view

Parameter

tail-drop: Tail drop mode.

wred: WRED drop mode.

wred-index: WRED index, in the range of 0 to 3. By default, it is 0. If you type nothing for this parameter, the system will use the parameters specified when WRED index is 0.

Description

Use the drop-mode command to configure drop mode for a port.

Use the undo drop-mode command to restore the default drop mode, i.e. tail drop mode.

By default, tail drop mode is selected.

In the case of network congestion, the switch drops packets to release system resources. And then no packets are put into long-delay queues. The following two drop modes are available: z z

Tail drop mode: different queues (red, yellow and green) are allocated with different drop thresholds. When these thresholds are exceeded respectively, excessive packets will be dropped.

WRED drop mode: Drop precedence is taken into account in drop action. When only min-thresholds of red, yellow and green packets are exceeded, packets between min-thresholds and max-thresholds are dropped randomly at a given slope. But when max-thresholds of red, yellow and green packets are exceeded, all excessive packets will be dropped.

Example

drop-mode { tail-drop | wred } [ wred-index ]

undo drop-mode

Set the port Ethernet3/1/1 in WRED drop mode; import WRED 0 as the threshold.

[SW8800-Ethernet3/1/1] drop-mode wred 0

26.1.22 dscp

Syntax

26-15

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

dscp

dscp-list : dscp-value exp-value cos-value

local-precedence-value drop-precedence

undo dscp dscp-list

View

Conform level view

Parameter

dscp-list: Original DSCP value, which can be a single value or several values, in the range of 0 to 63. For example, you can type single DSCP value “46”, or DSCP values “0

8 10 16” (space is required between two values).

dscp-value: Modified DSCP value, in the range of 0 to 63.

exp-value: Modified EXP value, in the range of 0 to 7. EXP is MPLS priority of MPLS packets.

cos-value: Modified 802.1p priority value, in the range of 0 to 7

local-precedence-value: Modified local precedence value, in the range of 0 to 7.

drop-precedence: Modified drop precedence value, in the range of 0 to 2.

Description

Use the dscp command to configure the “DSCP + Conform-level — >

Service-parameter” mapping table of current conform level.

Use the undo dscp command to restore default configuration of the “DSCP +

Conform-level —> Service- parameter” mapping table.

After entering conform level view, you can configure the “DSCP + Conform-level —>

Service-parameter” mapping table of the corresponding level. For example, you can enter conform level 0 view and configure the “DSCP + Conform-level 0 — >

Service-parameter” mapping table.

Example

Configure the " DSCP + Conform-level 0 —> Service-parameter ” mapping table.

[SW8800-conform-level-0] dscp 0: 0 0 0 0 0

[SW8800-conform-level-0] dscp 8 10 : 8 0 1 1 0

[SW8800-conform-level-0] dscp 16 18: 16 0 2 2 0

[SW8800-conform-level-0] dscp 24 26 : 24 0 3 3 0

[SW8800-conform-level-0] dscp 32 34 : 32 0 4 4 0

[SW8800-conform-level-0] dscp 40 46: 40 0 5 5 0

[SW8800-conform-level-0] dscp 48 : 48 0 6 6 0

[SW8800-conform-level-0] dscp 56 : 56 0 7 7 0

The configured mapping table:

26-16

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Table 26-1 “ DSCP + Conform-level

—> Service-parameter ” mapping table

DSCP

Conform

-level

Policed-

DSCP

Policed-

802.1p

Policed-L ocalprec

Policed-Drop

Precedence

0 0 0 0 0 0

8 0 8 1 1 0

16 0 16 2 2 0

18 0 16 2 2 0

24 0 24 3 3 0

26 0 24 3 3 0

32 0 32 4 4 0

34 0 32 4 4 0

40 0 40 5 5 0

46 0 40 5 5 0

48 0 48 6 6 0

56 0 56 7 7 0

26.1.23 exp

Syntax exp

exp-list : dscp-value exp-value cos-value

local-precedence-value drop-precedence

undo exp exp-list

View

Conform level view

Parameter

exp-list: Original EXP value, which can be a single value or several values, in the range of 0 to 7. For example, you can type single EXP value “2”, or EXP values “2 3 4” (space is required between values). EXP is MPLS priority of MPLS packets.

dscp-value: Modified DSCP value, in the range of 0 to 63.

exp-value: Modified EXP value, in the range of 0 to 7. EXP is MPLS priority of MPLS packets.

cos-value: Modified 802.1p priority value, in the range of 0 to 7.

26-17

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

local-precedence-value: Modified local precedence value, in the range of 0 to 7.

drop-precedence: Modified drop precedence value, in the range of 0 to 2.

Description

Use the exp command to configure the “EXP + Conform-level —> Service-parameter” mapping table of current conform level.

Use the undo exp command to restore default configuration of the “EXP +

Conform-level —> Service-parameter” mapping table.

After entering conform level view, you can configure the “EXP + Conform-level —>

Service-parameter” mapping table of the corresponding level. For example, you can enter conform level 0 view and configure the “EXP + Conform-level 0 — >

Service-parameter” mapping table.

Example

Configure the “EXP + Conform-level 0 —> Service-parameter” mapping table.

[SW8800-conform-level-0] exp 0: 0 0 0 0 0

26.1.24 local-precedence

Syntax

local-precedence cos-value0 cos-value1 cos-value2 cos-value3 cos-value4

cos-value5 cos-value6 cos-value7

undo local-precedence

View

Parameter

Conform level view

cos-value0: 802.1p priority value corresponding to Local-precedence 0, in the range of

0 to 7.

cos-value1: 802.1p priority value corresponding to Local-precedence 1, in the range of

0 to 7.

cos-value2: 802.1p priority value corresponding to Local-precedence 2, in the range of

0 to 7.

cos-value3: 802.1p priority value corresponding to Local-precedence 3, in the range of

0 to 7.

cos-value4: 802.1p priority value corresponding to Local-precedence 4, in the range of

0 to 7.

cos-value5: 802.1p priority value corresponding to Local-precedence 5, in the range of

0 to 7.

26-18

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

cos-value6: 802.1p priority value corresponding to Local-precedence 6, in the range of

0 to 7.

cos-value7: 802.1p priority value corresponding to Local-precedence 7, in the range of

0 to 7.

Description

Use the local-precedence command to configure the “Local-precedence +

Conform-level —> 802.1p priority” mapping table of current conform level.

Use the undo local-precedence command to restore default configuration of the

“Local-precedence + Conform-level —> 802.1p priority” mapping table.

After entering conform level view, you can configure the “ Local-precedence +

Conform-level —> 802.1p priority ” mapping table of the corresponding level. For example, you can enter conform level 0 view and configure the “ Local-precedence +

Conform-level 0 —> 802.1p priority “ mapping table.

Example

Configure the “Local-precedence + Conform-level 0 —> 802.1p priority” mapping table.

[SW8800-conform-level-0] local-precedence 0 1 2 3 5 5 6 7

The configured mapping table:

Table 26-2 Local-precedence + Conform-level

—> 802.1p priority ” mapping table

Local-precedence Conform-level 802.1p

0 0 0

1 0 1

2 0 2

3 0 3

4 0 5

5 0 5

6 0 6

7 0 7

26.1.25 mirrored-to

Syntax

I. Command Format Which Only Applies IP Group ACL

26-19

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

mirrored-to inbound ip-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] cpu

undo mirrored-to inbound ip-group { acl-number | acl-name } [ rule rule ]

II. Command Format Which Applies IP Group and Link Group ACL at Same time

mirrored-to inbound ip-group { acl-number | acl-name } { rule rule link-group

{ acl-number | acl-name } [ rule rule [ system-index index ] ] | link-group { acl-number

| acl-name } rule rule } cpu

undo mirrored-to inbound ip-group { acl-number | acl-name } { rule rule link-group

{ acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } rule rule }

III. Command Format Which Only Applies Link Group ACL

mirrored-to inbound link-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] cpu

undo mirrored-to inbound link-group { acl-number | acl-name } [ rule rule ]

View

Ethernet port view / port group view

Parameter

inbound: Mirrors inbound packets at the port.

ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced

ACLs. acl-number: Sequence number of ACL, ranging from 2000 to 3999. acl-name:

Name of the ACL, which must be a character string starting with an English letter (a-z or

A-Z), and without any space or quotation mark in it.

link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.

rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.

system-index index: Intra-system index of the rule, in the range of 0 to 3000. This parameter is used for trouble-shooting. User must not use this parameter during configuration.

cpu: Mirrors traffic to the CPU.

Description

Use the mirrored-to command to activate an ACL and mirror data streams to the CPU.

Use the undo mirrored-to command to remove traffic mirroring setting.

26-20

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

This configuration is only applicable to the packets which match the permitted rules in the ACL.

Related command: display qos-interface mirrored-to.

Example

Mirror the packets which match the permitted rules in the ACL 2000 to the CPU.

[SW8800-Ethernet2/1/1] mirrored-to inbound ip-group 2000 cpu

26.1.26 mirroring-group

Syntax

mirroring-group groupId { inbound | outbound } mirroring-port-list mirrored-to

monitor-port

undo mirroring-group groupId

View

System view

Parameter

groupId: mirroring group ID, in the range of 1 to 24

inbound: Monitors only the inbound packets at the port.

outbound: Monitors only the outbound packets at the port.

mirroring-port-list: Ethernet port list, including multiple Ethernet ports, in the form of

port-list = { interface_type interface_num | interface_name } &<1-8>. &<1-8> means the parameter can be typed eight times at most.

mirrored-to monitor-port: Specifies monitoring port.

Description

Use the mirroring-group command to configure a mirroring group for the port.

Use the undo mirroring-group command to remove mirroring group setting.

The switch supports multiple-to-one mirroring, that is, copying the packets at several ports to the monitoring port. For the Switch 8800, you can complete port mirroring setting by configuring mirroring groups. Each mirroring group may contain one monitoring port and several monitored ports. You can also specify the direction of the monitored packets.

The Switch 8800 supports up to 24 mirroring groups at a port.

Related command: display mirroring-group.

26-21

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Note:

The Switch 8800 supports cross-board mirroring, that is, the monitoring and monitored ports can be at different boards. z z z z

Consider these issues when configuring port mirroring: z z

For intra-board mirroring, only one monitoring port can be configured for the mirroring groups in the same direction. For example, if one mirroring group, with port A as its monitoring port, has been configured on a board to monitor those received packets, you need to choose port A as its monitoring port when configuring a second mirroring group to monitor those received packets. The same restriction applies to the mirroring group to monitor those packets sent.

For cross-board mirroring, only one monitoring port (which is on another board) can be configured for the mirroring groups in the same direction. For example, a mirroring group is configured on board 1, with port B on board 2 as its monitoring port. You must choose port B on board 1 as its monitoring port when configuring a second mirroring group in the same direction.

One mirroring group can contain eight monitored ports at most.

You can only configure eight monitored ports for all the mirroring groups in transmit group.

You can configure 24 mirroring groups in both directions in total.

One port can act as mirroring port and mirrored port at the same time for different mirroring group.

More issues for the GV48 board (LSBM1GV48DA): z z

For the mirroring (including incoming port mirroring and outgoing port mirroring) on the same GV48 board, only one monitoring port is allowed. For example, if you have configured a port mirroring group in a GV48 board, with port A as the monitoring port, then you can only choose port A as its monitoring port when configuring another port mirroring group.

For all port groups configured in the system, only one monitoring port is allowed on the same GV48 board.

Example

Configure mirroring group 1, the monitored ports are Ethernet3/1/1 to Ethernet3/1/3, and the monitoring port is Ethernet3/1/4, monitoring only inbound packets.

[SW8800] mirroring-group 1 inbound ethernet 3/1/1 ethernet 3/1/2 ethernet

3/1/3 mirrored-to ethernet 3/1/4

26.1.27 port

Syntax

26-22

3Com Switch 8800 Command Reference Guide

port interface_list

undo port interface_list

View

Port group view

Parameter

Chapter 26 QoS Commands

interface_list: list of Ethernet ports to be added to or deleted from a certain port group, expressed as interface_list= {{ interface_type interface_num | interface_name } [ to

{ interface_type interface_num | interface_name } ] }&<1-n>. interface_type is interface type, interface_num is interface number and interface_name is interface name. The interface number after keyword to must be larger than or equal to the port number before to. &<1-n>: Representing the repeatable times of parameters, 1 is the minimal and n is the maximal that the system allows.

Description

Use the port command to add the port to the port group.

Use the undo port command to delete the port from the group.

For the common interface boards except XP4, note that: z z z z

The port group members must be on the same board and only one port can be added to one port group.

The aggregated port cannot be added to the port group. If a port group member is to be aggregated, it exits from the port group automatically and the configuration of the primary port in an aggregated group overrides that of this port.

When a single port is added to a port group, its configuration is overridden by that of the port group and the ACL rule cannot be applied to the port any longer.

If there is no port in the port group, you cannot configure the QACL. If all the ports exist from the port group, the QACL of the group still exists. And this QACL is applied again when new ports are added.

Example

Add the ports Ethernet3/1/1, Ethernet3/1/2, Ethernet3/1/3 to port group 1.

[SW8800-port-group1] port Ethernet3/1/1 Ethernet3/1/2 Ethernet3/1/3

26.1.28 port-group

Syntax

port-group index

undo port-group index

View

26-23

3Com Switch 8800 Command Reference Guide

System view

Parameter

Chapter 26 QoS Commands

index : Port group index.

Description

Use the port-group command to create a port group and enter the port group view .

Use the undo port-group command to cancel a port group.

The port group index of interface cards (except XP4 card) is in the range of 1~128.

Example

Create port group 1 and enter port group view.

[SW8800] port-group 1

[SW8800-port-group1]

26.1.29 priority

Syntax

priority priority-level

undo priority

View

Ethernet port view / port group view

Parameter

priority-level: Port priority value, in the range of 0 to 7. By default, it is 0.

Description

Use the priority command to set the default local precedence value for a port.

Use the undo priority command to restore the default value of local precedence.

After receiving a packet, the switch allocates a set of service parameters to it according to a specific rule. The procedure to obtain local precedence: First obtain it according to the “CoS —>Local-precedence” mapping table. If failed, the system uses the default local precedence of the port as that for the packet.

Example

Set the defaulted local precedence value of the port Ethernet3/1/1 as 7.

[SW8800-Ethernet3/1/1] priority 7

26-24

3Com Switch 8800 Command Reference Guide

26.1.30 qos conform-level

Chapter 26 QoS Commands

Syntax

qos conform-level conform-level-value

View

System view

Parameter

conform-level conform-level-value: Conform level, in the range of 0 to 2 inclusive.

Description

Use the qos conform-level command to create a conform level and enter it.

There are three conform levels available, numbered as 0, 1 and 2. Type the conform level value and you can enter the corresponding view. In the conform level view, you can configure the “DSCP + Conform-level —> Service-parameter” mapping table, “EXP

+ Conform-level —> Service-parameter” mapping table and the “Local-precedence +

Conform-level —>802.1p” mapping table.

Example

Create the conform level 0 and enter it.

[SW8800] qos conform-level 0

[SW8800-conform-level-0]

26.1.31 qos cos-drop-precedence-map

Syntax

qos cos-drop-precedence-map

cos0-map-drop-prec cos1-map-drop-prec cos2-map-drop-prec cos3-map-drop-prec cos4-map-drop-prec cos5-map-drop-prec

cos6-map-drop-prec cos7-map-drop-prec

undo qos cos-drop-precedence-map

View

Parameter

System view

cos0-map-drop-prec: Mapping value from CoS 0 to drop precedence, in the range of 0 to 2.

cos1-map-drop-prec: Mapping value from CoS 1 to drop precedence, in the range of 0 to 2.

26-25

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

cos2-map-drop-prec: Mapping value from CoS 2 to drop precedence, in the range of 0 to 2.

cos3-map-drop-prec: Mapping value from CoS 3 to drop precedence, in the range of 0 to 2.

cos4-map-drop-prec: Mapping value from CoS 4 to drop precedence, in the range of 0 to 2.

cos5-map-drop-prec: Mapping value from CoS 5 to drop precedence, in the range of 0 to 2.

cos6-map-drop-prec: Mapping value from CoS 6 to drop precedence, in the range of 0 to 2.

cos7-map-drop-prec: Mapping value from CoS 7 to drop precedence, in the range of 0 to 2.

Description

Use the qos cos-drop-precedence-map command to configure the “CoS — >

Drop-precedence” mapping table.

Use the undo qos cos-drop-precedence-map command to restore the default values of the “CoS —> Drop-precedence” mapping table.

The system provides “CoS —> Drop-precedence” mapping table as the default value.

Table 26-3 Default “CoS

—> Drop-precedence” mapping table

CoS Value Drop-precedence

0 0

1 0

2 0

3 0

4 0

5 0

6 0

7 0

After receiving a packet, the switch allocates a set of service parameters to it according to a specific rule. The service parameters, including CoS value, local precedence and drop level, are determined according to the packet 802.1p priority value. CoS value is the packet 802.1p priority value, while local and drop precedence values are obtained according to the “CoS — > Local-precedence” mapping table and the “CoS — >

26-26

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Drop-precedence” mapping table. You can modify the CoS —> Drop-precedence mapping table using this command.

Example

Configure the “CoS —> Drop-precedence” mapping table.

[SW8800] qos cos-drop-precedence-map 2 2 1 1 1 0 0 0

Modified “CoS —> Drop-precedence” mapping table is shown as follows.

Table 26-4 Modified “CoS

—> Drop-precedence” mapping table

CoS Value Drop-precedence

0 2

1 2

2 1

3 1

4 1

5 0

6 0

7 0

26.1.32 qos cos-local-precedence-map

Syntax

qos cos-local-precedence-map

cos0-map-local-prec cos1-map-local-prec cos2-map-local-prec cos3-map-local-prec cos4-map-local-prec cos5-map-local-prec

cos6-map-local-prec cos7-map-local-prec

undo qos cos-local-precedence-map

View

System view

Parameter

cos0-map-local-prec: Mapping value from CoS 0 to local precedence, in the range of 0 to 7.

cos1-map-local-prec: Mapping value from CoS 1 to local precedence, in the range of 0 to 7.

cos2-map-local-prec: Mapping value from CoS 2 to local precedence, in the range of 0 to 7.

26-27

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

cos3-map-local-prec: Mapping value from CoS 3 to local precedence, in the range of 0 to 7.

cos4-map-local-prec: Mapping value from CoS 4 to local precedence, in the range of 0 to 7.

cos5-map-local-prec: Mapping value from CoS 5 to local precedence, in the range of 0 to 7.

cos6-map-local-prec: Mapping value from CoS 6 to local precedence, in the range of 0 to 7.

cos7-map-local-prec: Mapping value from CoS 7 to local precedence, in the range of 0 to 7.

Description

Use the qos cos-local-precedence-map command to configure the “CoS — >

Local-precedence” mapping table.

Use the undo qos cos-local-precedence-map command to restore the default values of the “CoS —> Local-precedence” mapping table.

The system provides “CoS —> Local-precedence” mapping table as the default value.

Table 26-5 Default “CoS

—> Local-precedence” mapping connection

CoS Value Local Precedence

0 2

1 0

2 1

3 3

4 4

5 5

6 6

7 7

After receiving a packet, the switch allocates a set of service parameters to it according to a specific rule. The service parameters, including CoS value, local precedence and drop level, are determined according to the packet 802.1p priority value. CoS value is the packet 802.1p priority value, while local and drop precedence values are obtained according to the “CoS — > Local-precedence” mapping table and the “CoS — >

Drop-precedence” mapping table. You can modify the “CoS —> Local-precedence” mapping table using this command.

26-28

3Com Switch 8800 Command Reference Guide

Example

Chapter 26 QoS Commands

Configure the “CoS —> Local-precedence” mapping table

[SW8800] qos cos-local-precedence-map 0 1 2 3 4 5 6 7

Configured “CoS —> Local-precedence” mapping table:

Table 26-6 Configured “CoS

—> Local-precedence” mapping table

CoS Value Local Precedence

0 0

1 1

2 2

3 3

4 4

5 5

6 6

7 7

26.1.33 queue

Syntax queue

queue-id green-min-threshhold green-max-threshhold green-max-prob

yellow-min-threshhold yellow-max-threshhold yellow-max-prob red-min-threshhold

red-max-threshhold red-max-prob exponent

undo queue queue-id

View

WRED index view

Parameter

queue-id: Outbound queue ID, in the range of 0 to 7

green-min-threshhold: Minimum queue length to trigger random green packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.

green-max-threshhold: Queue length to trigger complete green packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.

green-max-prob: Maximum drop probability for green packets, in the range of 1 to 15.

yellow-min-threshhold: Minimum queue length to trigger random yellow packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.

26-29

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

yellow-max-threshhold: Queue length to trigger complete yellow packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.

yellow-max-prob: Maximum drop probability for yellow packets, in the range of 1 to 15.

red-min-threshhold: Minimum queue length to trigger random red packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.

red-max-threshhold: Queue length to trigger complete red packet dropping, in the range of 0 to 65535. It must be a multiple of 256 bytes.

red-max-prob: Maximum drop probability for green packets, in the range of 1 to 15.

exponent: Weight for calculating average queue length, in the range of 1 to 15. By default, it is 9.

Description

Use the queue command to configure parameters for a WRED index.

Use the undo queue command to restore the default parameters for the WRED index.

The switch provides four sets of default WRED parameters, respectively numbered as

0, 1, 2 and 3. Each set includes 80 parameters, 10 parameters for each of the eight queues. The ten parameters are green-min-threshhold, yellow-min-threshhold,

red-min-threshhold, green-max-threshhold, yellow-max-threshhold,

red-max-threshhold, green-max-prob, yellow-max-prob, red-max-prob and exponent.

You can use the command to modify the parameters of a specific WRED index.

Example

Configure parameters for WRED 0: queue-id is 7; green-min-threshold is 150;

green-max-threshold is 500; green-max-prob is 5; yellow-min-threshold is 100;

yellow-max-threshold is 150; yellow-max-prob is 10; red-min-threshold is 50;

red-max-threshold is 100; red-max-prob is 15; exponent is 10.

[SW8800-wred-0] queue 7 150 500 5 100 150 10 50 100 15 10

26.1.34 queue-scheduler

Syntax

queue-scheduler wrr { group1 { queue-id queue-weight } &<1-8> | group2 { queue-id

queue-weight } &<1-8> }*

undo queue-scheduler [ queue-id ] &<1-8>

View

Ethernet port view / port group view

Parameter

wrr: Weighted round robin algorithm.

26-30

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

group1: Adds the queue to WRR priority group 1.

group2: Adds the queue to WRR priority group 2.

queue-id: Outbound queue ID, in the range of 0 to 7.

queue-weight: Queue weight, in the range of 1 to 255.

&<1-8>: You can input the queue-id and queue-weight parameters eight times at most.

Description

Use the queue-scheduler command to choose queue scheduling algorithm and parameters.

Use the undo queue-scheduler command to restore the default setting, SP algorithm.

By default, SP algorithm is selected for all outbound queues at a port.

The switch supports eight outbound queues at a port, with different scheduling algorithms for them. You can configure these queues into different scheduling groups:

SP group, WRR priority group 1 and group 2. For example, you can set queues 6 and 7 into SP group, queues 0, 1 and 2 into WRR priority group 1 and queues 3, 4 and 5 into

WRR priority group 2. Then a queue will be selected respectively for theses three groups according to their own scheduling algorithms. Then these three selected queues will scheduled in SP algorithm.

The queue weight is based on bandwidth. For example, if queues 0, 1 and 2 belong to

WRR priority group 1 and their weight is respectively as 20, 20 and 30, then in process, the proportion of their respective weight in the whole bandwidth is 20:20:30

Example

Set queues 0 to 5 in WRR algorithm, queues 0, 1 and 2 belong to group 1, with weight respectively as 20, 20 and 30; queues 3, 4 and 5 belong to group 2, with weight respectively as 20, 20 and 40. Set queues 6 and 7 in SP algorithm, the default one.

[SW8800-Ethernet3/1/1] queue-scheduler wrr group1 0 20 1 20 2 30 group2 3 20

4 20 5 40

26.1.35 reset traffic-statistic

Syntax

reset traffic-statistic inbound { { ip-group { acl-number | acl-name } rule rule |

link-group { acl-number | acl-name } }* | { ip-group { acl-number | acl-name } |

link-group { acl-number | acl-name } rule rule }* | ip-group { acl-number | acl-name }

rule rule link-group { acl-number | acl-name } rule rule }

View

Ethernet port view / port group view

26-31

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 26 QoS Commands

inbound: Clears statistics of the inbound packets at the port.

ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced

ACLs. acl-number: Sequence number of ACL, ranging from 2000 to 3999. acl-name:

Name of the ACL, which must be a character string starting with an English letter (a-z or

A-Z), and without any space or quotation mark in it.

link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.

rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.

Description

Use the reset traffic-statistic command to clear statistics of all traffic or traffic of a specific ACL.

Table 26-7 Comparison between two statistics clearing commands

Command

reset acl counter

Description

Clears ACL statistics. This command is for the ACLs that perform filtering and traffic classification to the packets processed by software. The cases for software to import

ACLs include ACL importing for routing policy, ACL importing for registered user control. The ACL ID available here is in the range of 2000 to 3999.

reset traffic-statistic

Clear traffic statistics. This command is for the ACLs sent to hardware for packet filtering and traffic classification.

This command usually clears the statistics collected with the traffic-statistic command.

Example

Clear traffic statistics of the ACL 4000.

[SW8800-Ethernet3/1/1] reset traffic-statistic inbound link-group 4000

26.1.36 traffic-limit

Syntax

I. Command format which only applies IP group ACL

In Ethernet port view or port group view:

26-32

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

traffic-limit inbound ip-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] [ tc-index index ] cir cbs ebs [ pir ] [ conform { { remark-cos |

remark-drop-priority }* | remark-policed-service } ] [ exceed { forward | drop } ]

undo traffic-limit inbound ip-group { acl-number | acl-name } [ rule rule ]

In VLAN view:

traffic-limit inbound ip-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] traffic-index index ] [ conform { { remark-cos | remark-policed-service } ]

[ exceed { forward | drop } ] slot slotid

undo traffic-limit inbound ip-group { acl-number | acl-name } [ rule rule ] slot slotid

II. Command format which applies IP group and link group ACL at the same time

In Ethernet port view or port group view:

traffic-limit inbound ip-group { acl-number | acl-name } { rule rule link-group

{ acl-number | acl-name } [ rule rule [ system-index index ] ] | link-group { acl-number

| acl-name } rule rule } [ tc-index index ] cir cbs ebs [ pir ] [ conform { { remark-cos |

remark-drop-priority }* | remark-policed-service } ] [ exceed { forward | drop } ]

undo traffic-limit inbound ip-group { acl-number | acl-name } { rule rule link-group

{ acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } rule rule }

III. Command format which only applies link group ACL

In Ethernet port view or port group view:

traffic-limit inbound link-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] [ tc-index index ] cir cbs ebs [ pir ] [ conform { { remark-cos |

remark-drop-priority }* | remark-policed-service } ] [ exceed { forward | drop } ]

undo traffic-limit inbound link-group { acl-number | acl-name } [ rule rule ]

View

Ethernet port view / port group view / VLAN view

Parameter

inbound: Sets traffic limitation for the inbound packets at the port.

ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced

ACLs. acl-number : Sequence number of ACL, ranging from 2000 to 3999. acl-name:

Name of the ACL, which must be a character string starting with an English letter (a-z or

A-Z), and without any space or quotation mark in it.

link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.

26-33

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.

system-index index: Intra-system index of the rule, in the range of 0 to 3000. This parameter is used for trouble-shooting. User must not use this parameter during configuration.

tc-index index: Index value of traffic conditioner, ranging from 0 to 12288. If you configured the same index value to different traffic rules during traffic policy configuration, then the sum of these traffics is restricted by the configured traffic policy parameter. For example, configure cir of the traffic that matches rule 1 to 10 kbps, and that of the rule 2 to 10 kbps too; and both of the rules have the same index value of traffic conditioner, then the sum of the average rates of rule 1 and rule 2 is restricted to

10 kbps.

Note: z z

The parameters of traffic policy must be the same if you configure the same tc-index for different traffic; otherwise the system prompts you for the wrong configuration.

For traffic policing configuration over the port group, all ports in the group shares the same bandwidth, that is, the traffic parameters you define take effect on all ports in the group.

cir: Committed information rate, in units of kbps and the range of 1 to 34120000.

cbs: Committed burst size, in units of byte and the range of 0 to 500000.

ebs: Excess burst size, in units of byte and the range of 0 to 500000.

pir: Peak information rate, in units of kbps and the range of 1 to 34120000.

remark-cos: Sets new 802.1p priority value for the packet according to its conform level and local precedence.

remark-drop-priority: Sets drop precedence value for the packet according to its conform level.

remark-policed-service: Sets new service parameters for the packet according to its conform level and DSCP value.

exceed: Optional parameter to set action for the case when traffic threshold is exceeded. z z forward: Forwards the packet. drop: Drops the packet.

traffic-index index: Traffic index.

slot slotid: Slot number of a service processor card.

26-34

3Com Switch 8800 Command Reference Guide

Description

Chapter 26 QoS Commands

Use the traffic-limit command to activate an ACL and set traffic limitation to take different actions for the packets within and beyond the preset traffic threshold.

Use the undo traffic-limit command to remove traffic limitation setting.

This command is only applicable to the packets which match the permitted rules in the

ACL.

It is required that CIR is less than PIR and CBS is less than or equal to CBS.

For the same traffic, you cannot select both the remark-cos and

remark-policed-service keywords, or both the remark-drop-priority and

remark-policed-service keywords.

Before selecting the remark-policed-service keyword, you must make sure you have configured the DSCP + Conform-Level —> Service parameter mapping table. Before selecting the remark-cos keyword, you must ensure you have configured the

Local-precedence + Conform-level—> 802.1p priority mapping table. For details about the two mapping tables, see the qos conform-level, dscp and local-precedence commands.

Note: z z

The interface cards support the command syntax in Ethernet port view; while the service processor cards (LSBM1NATB cards in the context of this document) support the command syntax in VLAN view.

Before executing the traffic-limit command on a service processor card, you must first configure traffic redirection in Ethernet port view to redirect Layer 3 packets of a specific VLAN to the service processor card.

Example

Set traffic limitation for the packets match the permitted rules in the ACL 4000: CIR is

200 kbps, CBS is 2000 bytes, EBS is 2500 bytes, drop the excessive packets.

[SW8800] traffic-limit inbound link-group 4000 200 2000 2500 conform remark-policed-service exceed drop

26.1.37 traffic-params

Syntax

traffic-params traffic-index cir commited-info-rate cbs commited-base-size ebs

exceed-base-size [ pir peak-info-rate ]

26-35

3Com Switch 8800 Command Reference Guide

View

System view

Chapter 26 QoS Commands

Parameter

Description

Use the traffic-params command to set the traffic parameters required by the

traffic-limit command used on the service processor card.

The requirements for setting these parameters are: cir<pir and cbs<=ebs.

Related command: display traffic-params.

Example

traffic-index: Traffic parameter index, in the range of 0 to 173.

cir commited-info-rate: Committed average information rate in Kbps.

cbs commited-burst-size: Committed burst size in bytes.

ebs exceed-burst-size: Maximum burst size in bytes.

pir peak-info-rate: Peak information rate in Kbps.

Set the traffic parameter index to 10, committed average information rate to 8192 Kbps, committed burst size to 2000 bytes, and the maximum bust size to 2500 bytes.

[SW8800] traffic-params 10 cir 8192 cbs 2000 ebs 2500

26.1.38 traffic-priority

Syntax

I. Command Format Which Only Applies IP Group ACL

In Ethernet port view or port group view:

traffic-priority inbound ip-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] { auto | remark-policed-service { trust-dscp | dscp dscp-value | untrusted

dscp dscp-value cos cos-value local-precedence local-precedence drop-priority

drop-level } }

undo traffic-priority inbound ip-group { acl-number | acl-name } [ rule rule ]

In VLAN view:

traffic-priority inbound ip-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] { auto | remark-policed-service { trust-dscp | dscp dscp-value | untrusted

dscp dscp-value cos cos-value local-precedence local-precedence drop-priority

drop-level } } slot slotid

undo traffic-priority inbound ip-group { acl-number | acl-name } [ rule rule ] slot

slotid

26-36

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

II. Command Format Which Applies IP Group and Link Group ACL at Same time

In Ethernet port view or port group view:

traffic-priority inbound ip-group { acl-number | acl-name } { rule rule link-group

{ acl-number | acl-name } [ rule rule [ system-index index ] ] | link-group { acl-number

| acl-name } rule rule } { auto | remark-policed-service { trust-dscp | dscp

dscp-value | untrusted dscp dscp-value cos cos-value local-precedence

local-precedence drop-priority drop-level } }

undo traffic-priority inbound ip-group { acl-number | acl-name } { rule rule

link-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name }

rule rule }

III. Command Format Which Only Applies Link Group ACL

In Ethernet port view or port group view:

traffic-priority inbound link-group { acl-number | acl-name } [ rule rule

[ system-index index ] ] { auto | remark-policed-service { trust-dscp | dscp

dscp-value | untrusted dscp dscp-value cos cos-value local-precedence

local-precedence drop-priority drop-level } }

undo traffic-priority inbound link-group { acl-number | acl-name } [ rule rule ]

View

Ethernet port view / port group view / VLAN view

Parameter

inbound: Sets traffic priority for inbounds packets at the port.

ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced

ACLs. acl-number: Sequence number of ACL, ranging from 2000 to 3999. acl-name:

Name of the ACL, which must be a character string starting with an English letter (a-z or

A-Z), and without any space or quotation mark in it.

link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.

rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.

system-index index: Intra-system index of the rule, in the range of 0 to 3000. This parameter is used for trouble-shooting. User must not use this parameter during configuration.

auto: Chooses the service parameters allocated automatically by the switch.

remark-policed-service: Reallocates service parameters.

26-37

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

trust-dscp: Reallocates service parameters according to packet DSCP values.

dscp dscp-value: Reallocates service parameters according to user’s DSCP values or

EXP values. For IP packets, dscp-value is the specified DSCP priority value (six bits in the packet header) and in the range of 0 to 63; for MPLS packets, other than that the

dscp-value stands for their DSCP priority value, the three high-order bits of the value represent the EXP flag field. Set the EXP value when defining the dscp-value.

untrusted dscp dscp-value cos cos-value local-precedence local-precedence

drop-priority drop-level: Customizes a set of service parameters. For IP packets,

dscp-value is the specified DSCP priority value (six bits in the packet header) and in the range of 0 to 63; for MPLS packets, other than that the dscp-value stands for their

DSCP priority value, the three high-order bits of the value represent the EXP flag field.

Set the EXP value when defining the dscp-value; local-precedence is local precedence, in number (ranging 0 to 7) or name; cos-value is 802.1p priority, in number (ranging 0 to

7) or name; drop-level is drop level, in number (ranging 0 to 2) or name.

slot slotid: Slot number of a service processor card.

Description

Use the traffic-priority command to activate an ACL and choose a set of service parameters for the matched traffic (only available to permitted ACL rules).

Use the undo traffic-priority command to remove service parameter setting.

The system can set service parameters for the matched traffic in one of following modes:

1) Employ the service parameters automatically allocated by the switch. Upon receiving a packet, the switch allocates a set of service parameters for it according to a specific rule. To choose this mode, you should select the auto keyword in this command.

2) Choose service parameters from the “DSCP + Conform-Level — >

Service-parameter” mapping table according to packet DSCP value and conform level. To choose this mode, you should select the remark-policed-service

trust-dscp keyword in this command.

3) Choose service parameters from the “ DSCP + Conform-Level — >

Service-parameter ” mapping table or “ EXP + Conform-Level — >

Service-parameter ” mapping table according to user’s DSCP or EXP value and packet conform level. To choose this mode, you should select the

remark-policed-service dscp dscp-value parameter in this command.

4) Customize a set of service parameters. To choose this mode, you should select the remark-policed-service untrusted dscp dscp-value cos cos-value

local-precedence local-precedence drop-priority drop-level parameter in this command.

26-38

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Note: z z z z

The interface cards support the command syntax in Ethernet port view; while the service processor cards (LSBM1NATB cards in the context of this document) support the command syntax in VLAN view.

Before executing the traffic-priority command on a service processor card, you must first configure traffic redirection in Ethernet port view to redirect Layer 3 packets of a specific VLAN to the service processor card.

The “DSCP + Conform-Level —> Service-parameter” mapping table and “ EXP +

Conform-Level —> Service-parameter ” mapping table here is that for the conform level 0.

Before selecting the second or third mode, you should make sure that you have configured the “DSCP + Conform-Level —> Service-parameter” mapping table and

“ EXP + Conform-Level —> Service-parameter ” mapping table. For more information about this mapping table, see the qos conform-level, dscp and exp commands.

Related command: display qos-interface traffic-priority.

Example

Choose auto service parameters for the packets which match the permitted rules in the

ACL 4000.

[SW8800-Ethernet5/1/2] traffic-priority inbound link-group 4000 auto

26.1.39 traffic-redirect

Syntax

I. Command Format Which Only Applies IP Group ACL

In Ethernet port view or port group view:

traffic-redirect inbound ip-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] { cpu | interface { interface-name | interface-type interface-num }

destination-vlan { l2-vpn | l3-vpn } | next-hop ip-addr1 [ ip-addr2 ] | slot slotid vlanid }

undo traffic-redirect inbound ip-group { acl-number | acl-name } [ rule rule ]

In VLAN view:

traffic-redirect inbound ip-group { acl-number | acl-name } [ rule rule [ system-index

index ] ] { cpu | next-hop ip-addr1 [ip-addr2] } slot slotid

undo traffic-redirect inbound ip-group { acl-number | acl-name } [ rule rule ] slot

slotid

26-39

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

II. Command Format Which Applies IP Group and Link Group ACL at Same time

In Ethernet port view or port group view:

traffic-redirect inbound ip-group { acl-number | acl-name } { rule rule link-group

{ acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } [ rule rule

[ system-index index ] } { cpu | interface { interface-name | interface-type

interface-num } destination-vlan { l2-vpn | l3-vpn } | next-hop ip-addr1 [ ip-addr2 ] |

slot slotid vlanid }

undo traffic-redirect inbound ip-group { acl-number | acl-name } { rule rule

link-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name }

rule rule } or undo traffic-redirect inbound link-group { acl-number | acl-name } { rule rule

ip-group { acl-number | acl-name } | ip-group { acl-number | acl-name } rule rule }

III. Command Format Which Only Applies Link Group ACL

In Ethernet port view or port group view:

traffic-redirect inbound link-group { acl-number | acl-name } [ rule rule

[ system-index index ] ] { cpu | interface { interface-name | interface-type

interface-num } destination-vlan l3-vpn | next-hop ip-addr1 [ ip-addr2 ] }

undo traffic-redirect inbound link-group { acl-number | acl-name } [ rule rule ]

View

Ethernet port view / port group view / VLAN view

Parameter

inbound: Sets traffic redirect for inbounds packets at the port.

ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced

ACLs. acl-number : Sequence number of ACL, ranging from 2000 to 3999. acl-name:

Name of the ACL, which must be a character string starting (1 to 32 characters) with an

English letter (a-z or A-Z), and without any space or quotation mark in it.

link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string (1 to 32 characters) started with an English letter (a-z or A-Z), and without any space or quotation mark in it.

rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.

system-index index: Intra-system index of the rule, in the range of 0 to 3000. This parameter is used for trouble-shooting. User must not use this parameter during configuration.

cpu: Redirects packets to the CPU.

26-40

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

interface { interface-name | interface-type interface-num } destination-vlan { l2-vpn |

l3-vpn : Redirects packets to the specified Ethernet port. interface-num and

interface-type together can define a port. interface-name is equivalent to interface-num plus interface-type. destination-vlan { l2-vpn | l3-vpn } is use to redirect MPLS packets.

l2-vpn means that MPLS l2-vpn packets are allowed to pass, and l3-vpn means that

MPLS l3-vpn packets are allowed to pass. destination-vlan must be the VLAN where the destination port belongs to.

next-hop ip-addr1 [ ip-addr2 ]: Redirects packets to the specified IP address. You can define two IP addresses at a stoke, but the first one is with higher priority. That is, the system redirects packets to the second IP address only if the first one is unreachable.

slot slotid: Redirects packets to the specified service processor card.

vlanid: Specifies the VLAN of the packets to be redirected.

Description

Use the traffic-redirect command to activate an ACL and configure traffic redirection.

Use the undo traffic-redirect command to remove traffic redirection setting.

You can redirect packets to the CPU, a specified Ethernet port, a specified IP address or a specified slot.

Note: z z z z z

The Interface cards support the command syntax in Ethernet port view; while the service processor cards (LSBM1NATB cards in the context of this document) support the command syntax in VLAN view.

Before executing the traffic-redirect command on a service processor card, you must first configure traffic redirection in Ethernet port view to redirect Layer 3 packets of a specific VLAN to the service processor card.

Traffic redirection setting is only available for the permitted rules in the ACL.

The packet redirected to the CPU cannot be forwarded normally.

You can achieve policy route by selecting the next-hop keyword in this command.

Related command: display qos-interface traffic-redirect.

Example

Configure traffic redirection on the interface cards for packets that match the permit rules in ACL 4000: packets are redirected to the port Ethernet5/1/1.the destination-vlan

ID is 4094, L3 VPN packet is permitted..

[SW8800-Ethernet5/1/2] traffic-redirect inbound link-group 4000 interface ethernet5/1/1 4094 l3-vpn

26-41

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Configure traffic redirection on a service processor card for packets that match the permit rules in ACL 3000.

1) Redirect the packets of VLAN4 that match the permit rules in ACL 3000 to a service processor card in Ethernet port view.

[SW8800-Ethernet5/1/2] traffic-redirect inbound ip-group 3000 slot 2 4

2) Redirect the packets that are distributed to the service processor card to the next hop 202.119.85.1 and 202.119.95.1 in VLAN view.

[SW8800-vlan4] traffic-redirect inbound ip-group 3000 next-hop 202.119.85.1

202.119.95.1 slot 2

26.1.40 traffic-shape

Syntax

traffic-shape [ queue queue-id ] max-rate burst-size

undo traffic-shape [ queue queue-id ]

View

Ethernet port view / port group view

Parameter

queue queue-id: Specifies queue ID, in the range of 0 to 7.

max-rate: Maximum traffic rate at the port, in units of Kpbs.

burst-size: Burst size, in units of KB.

Description

Use the traffic-shape command to enable traffic shaping.

Use the undo traffic-shape command to cancel traffic shaping.

The switch supports both shaping traffic based on port (shaping all traffic at the port) and shaping the traffic in a specified queue at the port. You can achieve the former mode by specifying no queue ID or the latter mode by specifying queue ID.

Example

Shape the traffic in the outbound queue 2 at the port: maximum rate 500 Kbps, burst size 12 Kbytes

[SW8800-Ethernet3/1/1] traffic-shape queue 2 500 12

26.1.41 traffic-statistic

Syntax

I. Command Format Which Only Applies IP Group ACL

26-42

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

traffic-statistic inbound ip-group { acl-number | acl-name } [ rule rule

[ system-index index ] ] [ tc-index index ]

undo traffic-statistic inbound ip-group { acl-number | acl-name } [ rule rule ]

II. Command Format Which Only Applies Link Group ACL

traffic-statistic inbound link-group { acl-number | acl-name } [ rule rule

[ system-index index ] ] [ tc-index index ]

undo traffic-statistic inbound link-group { acl-number | acl-name } [ rule rule ]

View

Ethernet port view / port group view

Parameter

inbound: Sets traffic statistics for inbound packets at the port.

ip-group { acl-number | acl-name }: Activates IP ACLs, including basic and advanced

ACLs. acl-number: Sequence number of ACL, ranging from 2000 to 3999. acl-name:

Name of the ACL, which must be a character string starting with an English letter (a-z or

A-Z), and without any space or quotation mark in it.

link-group { acl-number | acl-name }: Activates Layer 2 ACLs. acl-number: Sequence number of ACL, ranging from 4000 to 4999. acl-name: Name of ACL, which must be a character string started with an English letter (a-z or A-Z), and without any space or quotation mark in it.

rule rule: Specifies the subitem of an active ACL, ranging from 0 to 127; if not specified, all subitems of ACL will be activated.

system-index index: Intra-system index of the rule, in the range of 0 to 3000. this parameter is used for trouble-shooting. User must not use this parameter during configuration.

tc-index index: Index value of traffic conditioner, ranging from 0 to 12288. If you configured the same index value to different traffic rules during traffic statistic configuration, then the statistic of these traffics is performed.

Description

Use the traffic-statistic command to activate an ACL and run traffic statistics (only available for the permitted rules in the ACL).

Use the undo traffic-statistic command to cancel traffic statistics.

The traffic-statistic command only counts the hardware matching times in packet forwarding. You can view the statistics using the display qos-interface

traffic-statistic commands.

26-43

3Com Switch 8800 Command Reference Guide Chapter 26 QoS Commands

Note:

The system counts the traffic on all ports in the group after you use the traffic-statistic command in port group view.

Related command: display qos-interface traffic-statistic.

Example

Run traffic statistics for the packets which match the permitted rules in the ACL 2000.

[SW8800-Ethernet3/1/1] traffic-statistic inbound ip-group 2000

26.1.42 wred

Syntax

wred wred-index

undo wred wred-index

View

System view

Parameter

wred-index: WRED index, in the range of 0 to 3.

Description

Use the wred command to create a WRED index view and enter it.

Use the undo wred command to restore the default WRED parameters.

The switch provides four sets of default WRED parameters, respectively numbered as

0, 1, 2 and 3. The ten parameters for a port are green-min-threshhold,

yellow-min-threshhold, red-min-threshhold, green-max-threshhold,

yellow-max-threshhold, red-max-threshhold, green-max-prob, yellow-max-prob,

red-max-prob and exponent. Red, yellow and green packets respectively refer to those with drop precedent levels 2, 1 and 0.

Example

Create WRED 0 view and enter it.

[SW8800] wred 0

[SW8800-wred-0]

26-44

3Com Switch 8800 Command Reference Guide Chapter 27 ACL Control Commands to Control Login U sers

Chapter 27 ACL Control Commands to Control

Login Users

27.1 The ACL Control Commands to Control Login Users

27.1.1 acl

Syntax

View

User interface view

Parameter

acl-number: Number identifier of basic number-based ACLs and advanced ACLs, ranging from 2000 to 3999.

inbound: Performs ACL control to the users who access the local switch using

TELNET.

outbound: Performs ACL control to the users who access other switches from the local switch using TELNET.

Description

Use the acl command to reference ACL and implement the ACL control to the TELNET users.

Use the undo acl command to remove the control to the TELNET users.

The ACLs referenced by this command can only be the basic number-based ACLs and advanced ACLs.

Example

acl acl-number { inbound | outbound }

undo acl { inbound | outbound }

Perform ACL control to the users who access the local switch using TELNET (basic

ACL 2000 has been defined).

[SW8800] user-interface vty 0 4

[SW8800-user-interface-vty0-4] acl 2000 inbound

27-1

3Com Switch 8800 Command Reference Guide

27.1.2 snmp-agent community

Chapter 27 ACL Control Commands to Control Login U sers

Syntax

snmp-agent community { read | write } community-name [ mib-view view-name ]

[ acl acl-number ]

undo snmp-agent community community-name

View

System view

Parameter

Description

Use the snmp-agent community command to set the community access name, permit the access to the switch using SNMP, and reference the ACL to perform ACL control to the network management users by acl-number.

Use the undo snmp-agent community command to remove the setting of community access name.

By default, SNMPV1 and SNMPV2C use community name to perform access.

Example

read: Indicates that this community name has the read-only right within the specified view.

write: Indicates that this community name has the read-write right within the specified view.

community-name: Community name, consisting of 1 to 32 characters.

mib-view: Set the MIB view name which can be accessed by the community name.

view-name: MIB view name, consisting of 1 to 32 characters.

acl acl-number: The number identifier of basic number-based ACLs, ranging from 2000 to 2999.

Set the community name as “3Com”, permit the user to perform read-only access by using this community name, and reference the ACL 2000 to perform ACL control to the network management users (basic ACL 2000 has already been defined ).

[SW8800] snmp-agent community read 3Com acl 2000

27.1.3 snmp-agent group

Syntax

snmp-agent group { v1 | v2c } group-name [ read-view read-view ] [ write-view

write-view ] [ notify-view notify-view ] [ acl acl-number ]

27-2

3Com Switch 8800 Command Reference Guide Chapter 27 ACL Control Commands to Control Login U sers

undo snmp-agent group { v1 | v2c } group-name

snmp-agent group v3 group-name [ authentication | privacy ] [ read-view

read-view ] [ write-view write-view ] [ notify-view notify-view ] [ acl acl-number ]

undo snmp-agent group v3 group-name [ authentication | privacy ]

View

System view

Parameter

v1: V 1 security mode.

v2c: V 2 security mode.

v3: V 3 security mode.

group-name: Group name, ranging from 1 to 32 bytes.

authentication: With this parameter, the system will authenticate SNMP data without encrypting it.

privacy: Authenticates and encrypts packets.

read-view: Sets read-only view.

read-view: Name of read-only view, ranging from 1 to 32 bytes.

write-view: Permits to set read-write view.

write-view: Name of read-write view, ranging from 1 to 32 bytes.

notify-view: Sets notify view.

notify-view: Name of notify view, ranging from 1 to 32 bytes.

acl acl-number: Number identifier of basic number-based ACLs, ranging from 2000 to

2999.

Description

Use the snmp-agent group command to configure a new SNMP group and reference the ACL to perform ACL control to the network management users by acl acl-number.

Use the undo snmp-agent group command to remove a specified SNMP group.

Example

Create a SNMP group “3Com”, and reference the ACL 2001 to perform ACL control to the network management users (basic ACL 2001 has already been defined).

[SW8800] snmp-agent group v1 3Com acl 2001

27-3

3Com Switch 8800 Command Reference Guide

27.1.4 snmp-agent usm-user

Chapter 27 ACL Control Commands to Control Login U sers

Syntax

snmp-agent usm-user { v1 | v2c } user-name group-name [ acl acl-number ]

undo snmp-agent usm-user { v1 | v2c } user-name group-name

snmp-agent usm-user v3 user-name group-name [ authentication-mode { md5 |

sha } auth-password ] [ privacy des56 priv-password ] [ acl acl-number ]

undo snmp-agent usm-user v3 user-name group-name { local | engineid

engineid-string }

View

System view

Parameter

v1: V 1 security mode.

v2c: V 2 security mode.

v3: V 3 security mode.

user-name: User name, ranging from 1 to 32 bytes.

group-name: Corresponding group name of the user, ranging from 1 to 32 bytes.

authentication-mode: Specifies the security level to “to be authenticated”

md5: Specifies the authentication protocol as HMAC-MD5-96.

sha: Specifies the authentication protocol as HMAC-SHA-96.

auth-password: Authentication password, character string, ranging from 1 to 64 bytes.

privacy: Specifies the security level as encryption.

des56: Specifies the DES encryption protocol.

priv-password: Encryption password, character string, ranging from 1 to 64 bytes.

acl acl-number: Number identifier of basic number-based ACLs, ranging from 2000 to

2999.

local: Local entity user.

engineid: Specifies the engine ID related to the user.

engineid-string: Engine ID character string.

Description

Use the snmp-agent usm-user command to add a new user to an SNMP group, and reference the ACL to perform ACL control to the network management users by acl

acl-number.

27-4

3Com Switch 8800 Command Reference Guide Chapter 27 ACL Control Commands to Control Login U sers

Use the undo snmp-agent usm-user command to remove the user from the related

SNMP group as well as the configuration of the ACL control of the user.

Example

Add a user “3Com” to the SNMP group “3Comgroup”. Specify the security level to “to be authenticated”, the authentication protocol to HMAC-MD5-96 and the authentication password to “SW8800”, and reference the ACL 2002 to perform ACL control to the network management users (basic ACL 2002 has already been defined).

[SW8800] snmp-agent usm-user v3 3Com 3Comgroup authentication-mode md5 SW8800 acl 2002

27-5

3Com Switch 8800 Command Reference Guide Chapter 28 MPLS Basic Configuration Commands

Chapter 28 MPLS Basic Configuration Commands

28.1 MPLS Basic Configuration Commands

28.1.1 debugging mpls lspm

Syntax

debugging mpls lspm { agent | all | event | ftn | interface | packet | policy | process

| vpn }

undo debugging mpls lspm { agent | all | event | ftn | interface | packet | policy |

process | vpn }

View

User view

Parameter

Description

Use the debugging mpls lspm command to enable various LSPM debugging.

Use the undo debugging mpls lspm command to disable the corresponding debugging.

By default, all debugging is disabled.

This command is used to the debug MPLS LSPM. As running the debugging will affect the performance of the Switch 8800, you are advised to use the command with caution.

Example

agent: Enables all MPLS Agent debugging.

all: Enables all MPLS-related debugging.

event: Enables debugging for various MPLS events.

ftn: Enables MPLS ftn debugging.

interface: Enables the MPLS debugging on the message sending/receiving interface.

packet: Enables MPLS packet debugging.

policy: Enables MPLS policy debugging.

process: Enables debugging of MPLS internal processing.

vpn: Enables all MPLS VPN debugging.

Enable all MPLS VPN debugging.

29-1

3Com Switch 8800 Command Reference Guide

<SW8800> debugging mpls lspm vpn

Chapter 28 MPLS Basic Configuration Commands

28.1.2 display mpls interface

Syntax display mpls interface

View

Any view

Parameter

None

Description

Use the display mpls interface command to view the information of all MPLS-enabled interfaces.

Related command: display mpls lsp, display mpls statistics and display static-lsp.

Example

Display the information of all MPLS-enabled interface.

[SW8800] display mpls interface

28.1.3 display mpls lsp

Syntax

display mpls lsp [ include text | verbose ]

View

Any view

Parameter

include text: Displays the matching string including the specified information.

verbose: Displays detailed information.

Description

Use the display mpls lsp command to display LSP information.

By default, the display mpls lsp command displays all LSP information.

Related command: display mpls interface, display mpls statistics and display

static-lsp.

29-2

3Com Switch 8800 Command Reference Guide

Example

Chapter 28 MPLS Basic Configuration Commands

Display all the LSPs including “-----------”.

[SW8800-Vlan-interface2000] display mpls lsp include ----------------

--------------------------------------------------------------------------

LSP Information: Ldp Lsp

NO FEC NEXTHOP I/O-LABEL OUT-INTERFACE

1 10.110.1.0/24 10.110.1.1 3/----- -------

2 10.10.10.0/24 10.10.10.1 3/----- -------

3 10.100.20.20/32 127.0.0.1 3/----- -------

4 5.5.5.5/32 127.0.0.1 3/----- -------

5 10.100.20.0/24 10.100.20.20 3/----- -------

6 80.80.80.80/32 127.0.0.1 3/----- -------

7 70.70.70.70/32 200.5.5.4 -----/3 Vlan2000

TOTAL: 7 Record(s) Found.

28.1.4 display mpls static-lsp

Syntax

display mpls static-lsp [ include text | verbose ]

View

Any view

Parameter

Description

Use the display mpls static-lsp command to view the information of one static LSP or all.

Related command: display mpls interface, display mpls lsp and display mpls

statistics.

Example

include text: Displays the matching string including the specified information .

verbose: Displays detailed information.

Display the static LSP information.

[SW8800-mpls]display mpls static-lsp

29-3

3Com Switch 8800 Command Reference Guide Chapter 28 MPLS Basic Configuration Commands

--------------------------------------------------------------------

LSP Information: Static Lsp

--------------------------------------------------------------------

NO FEC NEXTHOP I/O-LABEL OUT-INTERFACE

1 1.1.1.1/32 200.5.5.4 -----/1000 Vlan2000

TOTAL: 1 Record(s) Found.

28.1.5 display mpls statistics

Syntax

display mpls statistics { interface { Vlan-interface | all } | lsp { lsp-Index | all |

lsp-name }}

View

Any view

Parameter

interface { Vlan-interface | all }: Specifies one interface or all interfaces.

lsp { lsp-Index | all | lsp-name }: Specifies one label switching path or all label switching paths. Where lsp-Index is an LSP index, lsp-name is an LSP name, and all represents all LSPs.

Description

Use the display mpls statistics command to view the MPLS statistics about one specific VLAN virtual interface/LSP or all interfaces/LSPs.

Related command: display mpls interface and display mpls lsp.

Example

Display MPLS statistics about all LSPs

<SW8800>display mpls statistics lsp all

Building the information...

LSP Index/LSP Name : 10240/dynamic-lsp

There is no information of LSP incoming segment!

The statistics of lsp Out :

OutSegment octets of LSP is: 162876

OutSegment packets of LSP is: 2943

OutSegment errors of LSP is: 0

OutSegment discard packets of LSP is: 0

29-4

3Com Switch 8800 Command Reference Guide

28.1.6 lsp-trigger

Chapter 28 MPLS Basic Configuration Commands

Syntax

lsp-trigger { all | ip-prefix ip-prefix }

undo lsp-trigger { all | ip-prefix ip-prefix }

View

MPLS view

Parameter

all: Triggers LSPs at any route.

ip-prefix: Triggers LSPs only at the routes matching the specified IP prefix list.

ip-prefix: IP prefix list, ranging from 1 to 19.

Description

Use the lsp-trigger command to configure topology-triggered LSP creation policy.

Use the undo lsp-trigger command to remove the filtering conditions specified by parameters and disable LSP trigger creation at any route.

By default, all kinds of routing protocols are filtered out.

Note:

If no route-triggered policy is configured, LSPs can be triggered at all host routes with

32-bit masks.

If you import an IP-prefix rule without contents, LSPs can be triggered at all routes.

Related command: ip ip-prefix.

Example

Triggers LSPs at all routes.

[SW8800-mpls] lsp-trigger all

28.1.7 mpls

Syntax mpls undo mpls

29-5

3Com Switch 8800 Command Reference Guide

View

System view, VLAN interface view

Parameter

None

Chapter 28 MPLS Basic Configuration Commands

Description

In system, input the mpls command for an initial use to enable MPLS function globally and enter MPLS view. Later you can go straight to the MPLS view with this command.

Use the mpls command in VLAN interface view to enable MPLS on the VLAN interface.

Use the undo mpls command to disable MPLS function in the system view or on the

VLAN interface.

By default, you cannot enter this view.

After executing the command, you can enter MPLS view. Only after you enter MPLS view, can you configure other MPLS commands.

You must configure the mpls lsr-id command first and then you can enter MPLS view.

Example

Enter MPLS view from system view.

[SW8800] mpls

[SW8800-mpls]

Execute the mpls command in interface view.

[SW8800] vlan 201

[SW8800-Vlan201] port gigabitethernet 2/1/1

[SW8800-Vlan201] quit

[SW8800] interface vlan-interface 201

[SW8800-vlan-interface201] mpls

% Info: MPLS in the interface is starting, please wait...OK

28.1.8 mpls lsr-id

Syntax

mpls lsr-id ip-address

undo mpls lsr-id

View

System view

29-6

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 28 MPLS Basic Configuration Commands

ip-address: LSR ID, in the format of IP address, used to identify an LSR.

Description

Use the mpls lsr-id command to configure an LSR ID.

Use the undo mpls lsr-id command to delete an LSR ID.

By default, no LSR has an ID.

You must configure the mpls lsr-id command first and then you can use the other

MPLS-related commands.

An LSR ID is in the format of IP address, thus a loopback address is recommended.

Related command: display mpls interface.

Example

Set the LSR ID to 202.17.41.246.

[SW8800] mpls lsr-id 202.17.41.246

% Info: Mpls lsr-id changed.

28.1.9 snmp-agent trap enable ldp

Syntax snmp-agent trap enable ldp undo snmp-agent trap enable ldp

View

System view

Parameter

None

Description

Use the snmp-agent trap enable ldp command to enable Trap function in MPLS LDP creation.

Use the undo snmp-agent trap enable ldp command to disable Trap function in

MPLS LDP creation.

By default, Trap function is not enabled during MPLS LDP creation.

Example

Enable the Trap function during MPLS LDP creation.

[SW8800] snmp-agent trap enable ldp

29-7

3Com Switch 8800 Command Reference Guide

28.1.10 snmp-agent trap enable lsp

Chapter 28 MPLS Basic Configuration Commands

Syntax snmp-agent trap enable lsp undo snmp-agent trap enable lsp

View

System view

Parameter

None

Description

Use the snmp-agent trap enable lsp command to enable Trap function in MPLS LSP creation.

Use the undo snmp-agent trap enable lsp command to disable Trap function in

MPLS LSP creation.

By default, Trap function is disabled during MPLS LSP creation.

Example

Enable the Trap function during MPLS LSP creation.

[SW8800] snmp-agent trap enable lsp

28.1.11 static-lsp egress

Syntax

static-lsp egress lsp-name incoming-interface interface-type interface-num in-label

in-label-value

undo static-lsp egress lsp-name

View

Parameter

MPLS view

lsp-name: LSP name

interface-type Interface-num: Interface type, interface number.

in-label-value: Value of inbound label, ranging 3 (implicit empty label) and from 16 to

1023.

29-8

3Com Switch 8800 Command Reference Guide

Description

Chapter 28 MPLS Basic Configuration Commands

Use the static-lsp egress command to configure a static LSP for an egress LSR.

Use the undo static-lsp egress command to delete an LSP for an egress LSR.

Related command: static-lsp ingress, static-lsp transit and debugging mpls.

Example

Configure a static LSP named bj-sh on the egress LSR.

[SW8800-mpls] static-lsp egress bj-sh incoming-interface vlan-interface 201 in-label 233

28.1.12 static-lsp ingress

Syntax

static-lsp ingress lsp-name destination dest-addr { addr-mask | mask-length }

nexthop next-hop-addr out-label out-label-value

undo static-lsp ingress lsp-name

View

MPLS view

Parameter

lsp-name: LSP name

dest-addr: Destination IP address.

addr-mask: Destination IP address mask.

mask-length: Mask length of destination IP address

next-hop-addr: Next-hop address.

out-label-value: Value of outbound label, ranging 3 (implicit empty label) and from 16 to

1023.

Description

Use the static-lsp ingress command to configure a static LSP for an ingress LSR.

Use the undo static-lsp ingress command to delete an LSP for an ingress LSR.

Related command: static-lsp egress, static-lsp transit and debugging mpls.

Example

Configure a static LSP for the ingress LSR heading for the destination address

202.25.38.1.

[SW8800-mpls] static-lsp ingress bj-sh destination 202.25.38.1 24 nexthop

202.55.25.33 out-label 237

29-9

3Com Switch 8800 Command Reference Guide

28.1.13 static-lsp transit

Chapter 28 MPLS Basic Configuration Commands

Syntax

static-lsp transit lsp-name incoming-interface interface-type interface-num in-label

in-label-value nexthop next-hop-addr out-label out-label-value

undo static-lsp transit lsp-name

View

MPLS view

Parameter

lsp-name: LSP name

interface-type Interface-num: Interface type, interface number.

next-hop-addr: Next-hop address.

in-label-value: Value of inbound label, ranging from 16 to 1023.

out-label-value: Value of outbound label, ranging 3 (implicit empty label) and from 16 to

1023.

Description

Use the static-lsp transit command to configure a static LSP for a transit LSR.

Use the undo static-lsp transit command to delete an LSP for a transit LSR.

Related command: static-lsp egress and static-lsp ingress.

Example

Configure a static LSP for the VLAN201 virtual interface on a transit LSR, with an inbound label of 123 and an outbound label of 253.

[SW8800-mpls] static-lsp transit bj-sh incoming-interface vlan-interface 201 in-label 123 nexthop 202.34.114.7 out-label 253

28.2 LDP Configuration Commands

28.2.1 debugging mpls ldp

Syntax

debugging mpls ldp { all | main | advertisement | session | pdu | notification |

remote } [ interface interface-type interface-num]

undo debugging mpls ldp { all | main | advertisement | session | pdu | notification

| remote } [ interface interface-type interface-num ]

29-10

3Com Switch 8800 Command Reference Guide

View

User view

Chapter 28 MPLS Basic Configuration Commands

Parameter

Description

Use the debugging ldp command to enable the debugging of various LDP messages.

Use the undo debugging ldp command to disable the debugging of various LDP messages.

You are advised to use the debugging command cautiously.

Example

all: Displays all debugging information related to LDP.

main: Displays the debugging information of LDP main tasks.

advertisement: Displays the debugging information during LDP advertising.

session: Displays debugging information during LDP session processing.

pdu: Displays the debugging information during PDU packet processing.

notification: Displays the debugging information during notification.

remote: Displays debugging information of all remote peers.

interface-type interface-num: Interface type, interface number.

Enable LDP debugging.

<SW8800> debugging mpls ldp all

28.2.2 display mpls ldp

Syntax display mpls ldp

View

Any view

Parameter

None

Description

Use the display mpls ldp command to display LDP and LSR information.

By default, it displays information of LDP and LSR.

Related command: mpls ldp, mpls ldp hops-count, mpls ldp loop-detection and

mpls ldp path-vectors.

29-11

3Com Switch 8800 Command Reference Guide

Example

Chapter 28 MPLS Basic Configuration Commands

Display LDP and LSR information.

[SW8800] display mpls ldp

Label Distribution Protocol: V1

LSR ID: 10.10.10.10 LSR Status: Active

Loop Detection: Disabled.

Path Vector Limit: 32 Hop Count Limit: 32

DU Readvertisement: On Request Retry: Off

Label Retention Mode: Liberal DU Explicit Request: Off

Label Distribution Control Mode: Ordered.

28.2.3 display mpls ldp buffer-info

Syntax display mpls ldp buffer-info

View

Any view

Parameter

None

Description

Use the display mpls ldp buffer-info command to view the LDP buffer information.

Example

Display the LDP buffer information.

[SW8800] display mpls ldp buffer-info

---------------------------------------------------------------

Buffer-Name Buffer-ID Buffer-Size Total-Count Free-Count

---------------------------------------------------------------

ENTITY 0 292 199 195

LOCAL-IF 1 36 200 196

PEER-IF 2 40 201 195

PDU 3 204 249 249

ADJACENCY 4 56 201 198

PEER-INF 5 116 201 198

SESSION 6 176 201 198

US-BLK 7 264 1052 1028

DS-BLK 8 240 1052 1042

FEC 9 40 1042 1032

US-LIST 10 16 1052 1028

29-12

3Com Switch 8800 Command Reference Guide Chapter 28 MPLS Basic Configuration Commands

TRIG-BLK 11 56 2076 2071

LABEL-RANGE 12 20 198 198

CR-TUNNEL 13 124 128 128

ER-HOP 14 40 4096 4096

IF-MSG 15 24 9999 9999

-----------------------------------------------------------------

Buffer no error.

28.2.4 display mpls ldp interface

Syntax

display mpls ldp interface [ | begin text | exclude text | include text ]

View

Any view

Parameter

|: Displays matched outputs.

begin: Displays the outputs matching the regular expression from the first line.

exclude: Displays the outputs excluding those lines matching the regular expression.

include: Displays only those outputs matching the regular expression.

text: Contents of the regular expression.

Description

Use the display mpls ldp interface command to display information of the interface with LDP enabled and in the UP state.

Related command: mpls ldp enable and display mpls ldp session.

Example

Display the information of the interface with LDP enabled and in the UP state.

[SW8800-Ethernet3/1/0] display mpls ldp interface

28.2.5 display mpls ldp lsp

Syntax

display mpls ldp lsp [ | begin text | exclude text | include text ]

View

Any view

29-13

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 28 MPLS Basic Configuration Commands

|: Displays matched outputs.

begin: Displays the outputs matching the regular expression from the first line.

exclude: Displays the outputs excluding those lines matching the regular expression.

include: Displays only those outputs matching the regular expression.

text: Contents of the regular expression.

Description

Use the display mpls ldp lsp command to view relevant LSP information created via

LDP.

Related command: display mpls lsp.

Example

Display LSP.

[SW8800-Ethernet3/1/0] display mpls ldp lsp

28.2.6 display mpls ldp peer

Syntax

display mpls ldp peer [ | begin text | exclude text | include text ]

View

Any view

Parameter

Description

Use the display mpls ldp peer command to view peer information.

By default, it displays all the peer information.

Example

|: Displays matched outputs.

begin: Displays the outputs matching the regular expression from the first line.

exclude: Displays the outputs excluding those lines matching the regular expression.

include: Displays only those outputs matching the regular expression.

text: Contents of the regular expression.

Display peer information.

[SW8800] display mpls ldp peer

29-14

3Com Switch 8800 Command Reference Guide

28.2.7 display mpls ldp remote

Chapter 28 MPLS Basic Configuration Commands

Syntax

display mpls ldp remote [ | begin text | exclude text | include text ]

View

Any view

Parameter

Description

Use the display mpls ldp remote command to view the configured remote peer information.

By default, you can view all the remote peer configurations.

Related command: mpls ldp remote-peer and remote-ip.

Example

|: Displays matched outputs.

begin: Displays the outputs matching the regular expression from the first line.

exclude: Displays the outputs excluding those lines matching the regular expression.

include: Displays only those outputs matching the regular expression.

text: Contents of the regular expression.

Display the remote-peer configuration.

[SW8800] display mpls ldp remote

28.2.8 display mpls ldp session

Syntax

display mpls ldp session [ | begin text | exclude text | include text ]

View

Any view

Parameter

|: Displays matched outputs.

begin: Displays the outputs matching the regular expression from the first line.

exclude: Displays the outputs excluding those lines matching the regular expression.

include: Displays only those outputs matching the regular expression.

text: Contents of the regular expression.

29-15

3Com Switch 8800 Command Reference Guide

Description

Chapter 28 MPLS Basic Configuration Commands

Use the display mpls ldp session command to know the session between peer entities.

By default, it displays the session between peer entities.

Related command: mpls ldp enable.

Example

Display the session between peer entities.

[SW8800] display mpls ldp session

Local LDP ID: 1.1.1.9:5; Peer LDP ID: 4.4.4.9:0

TCP Connection: 1.1.1.9 <- 4.4.4.9

Session State: Operational

Session Role: Passive

Session existed time:

Basic Hello Packets Sent/Received: 85/67

KeepAlive Packets Sent/Received: 1/1

Negotiated Keepalive hold time: 60 Peer PV Limit: 0

LDP Basic Discovery Source((A) means active):

Inter vlan113(A) Inter vlan112

Inter vlan111

28.2.9 mpls ldp

Syntax mpls ldp undo mpls ldp

View

System view

Parameter

None

Description

Use the mpls ldp command to enable LDP.

Use the undo mpls ldp command to disable LDP.

By default, LDP is disabled.

Before enabling LDP, you must enable MPLS and configure LSR ID first.

Related command: mpls lsr-id.

29-16

3Com Switch 8800 Command Reference Guide

Example

Enable LDP.

[SW8800] mpls ldp

Chapter 28 MPLS Basic Configuration Commands

28.2.10 mpls ldp enable

Syntax mpls ldp enable mpls ldp disable

View

VLAN interface view

Parameter

None

Description

Use the mpls ldp enable command to enable LDP on a VLAN interface.

Use the mpls ldp disable command to disable LDP on a VLAN interface.

By default, LDP is disabled on an interface.

To enable an interface, you must enable LDP first. After LDP is enabled on an interface, peer discovery and session creation proceed.

Example

Enable LDP on a VLAN interface.

[SW8800] vlan 201

[SW8800-Vlan201] port gigabitethernet 2/1/1

[SW8800-Vlan201] quit

[SW8800] interface vlan-interface 201

[SW8800-Vlan-interface201] mpls

[SW8800-vlan-interface201] mpls ldp enable

28.2.11 mpls ldp hops-count

Syntax

mpls ldp hops-count hop-number

undo mpls ldp hops-count

View

System view

29-17

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 28 MPLS Basic Configuration Commands

hop-number: Maximum hop count of loop detection, ranging from 1 to 32.

Description

Use the mpls ldp hops-count command to set the maximum hop count of loop detection.

Use the undo mpls ldp hops-count command to restore the default value.

By default, the maximum hop count of loop detection is 32.

This command should be configured before LDP is enabled on all interfaces. Its value, which depends on actual networking, determines the loop detection speed during LSP creation

Related command: mpls ldp loop-detection and mpls ldp path-vector.

Example

Set the maximum hop count of loop detection to 22.

[SW8800] mpls ldp hops-count 22

Set the maximum hop count of loop detection to its default value 32.

[SW8800] undo mpls ldp hops-count

28.2.12 mpls ldp loop-detect

Syntax mpls ldp loop-detect undo mpls ldp loop-detect

View

System view

Parameter

None

Description

Use the mpls ldp loop-detect command to enable loop detection.

Use the undo mpls ldp loop-detect command to disable loop detection.

By default, loop detection is not enabled in the system.

This command should be configured before LDP is enabled on any interface.

Related command: mpls ldp hops-count and mpls ldp path-vectors.

29-18

3Com Switch 8800 Command Reference Guide

Example

Enable loop detection.

[SW8800] mpls ldp loop-detect

Disable loop detection.

[SW8800] undo mpls ldp loop-detect

Chapter 28 MPLS Basic Configuration Commands

28.2.13 mpls ldp password

Syntax

mpls ldp password [ cipher | simple ] password

undo mpls ldp password

View

VLAN interface view, remote-peer view

Parameter

cipher: The password in configuration file will be displayed in cipher-text.

simple: The password in configuration file will be displayed in plain-text.

password: User password.

Description

Use the mpls ldp password command to configure MD5 authentication password for the LDP. After this configuration, the MD5 authentication is adopted for LDP on the interface.

Use the undo mpls ldp password command to delete the configuration.

Example

Configure the LDP authentication mode as MD5, plain-text password 123.

[SW8800-vlan-interface201] mpls ldp password simple 123

28.2.14 mpls ldp path-vectors

Syntax

mpls ldp path-vectors pv-number

undo mpls ldp path-vectors

View

System view

29-19

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 28 MPLS Basic Configuration Commands

pv-number: Maximum value of path vector, ranging from 1 to 32.

Description

Use the mpls ldp path-vectors command to set the maximum value of path vector.

Use the undo mpls ldp path-vectors command to restore the default maximum value of path vector.

By default, pv-number is 32.

This command should be configured before LDP is enabled on all interfaces. Its value, which depends on actual networking situation, determines the loop detection speed during LSP creation

Related command: mpls ldp loop-detection and mps ldp hops-count.

Example

Set the maximum value of path vector to 23

[SW8800] mpls ldp path-vectors 23

Restore the default maximum value of path vector.

[SW8800] undo mpls ldp path-vectors

28.2.15 mpls ldp remote-peer

Syntax

mpls ldp remote-peer Index

undo mpls ldp remote-peer Index

View

System view or remote-peer view

Parameter

Index: Index that identifies a remote peer entity, ranging from 0 to 99.

Description

Use the mpls ldp remote-peer command to create a remote-peer entity and enter remote-peer view.

Use the undo mpls ldp remote-peer command to delete a remote-peer entity.

You can use this command to create a remote-peer and accordingly create a remote session.

Related command: remote-ip.

29-20

3Com Switch 8800 Command Reference Guide

Example

Chapter 28 MPLS Basic Configuration Commands

Create a remote-peer.

[SW8800] mpls ldp remote-peer 22

[SW8800-mpls-remote22]

Delete a remote-peer.

[SW8800-mpls-remote22] undo mpls ldp remote-peer 22

[SW8800]

28.2.16 mpls ldp reset-session

Syntax

mpls ldp reset-session peer-address

View

VLAN interface view

Parameter

peer-address: Corresponding remote LDP Peer address (in IP address format).

Description

Use the mpls ldp reset-session command to reset a specified session on an interface.

After LDP is configured on an interface and LDP session is created, this command can be used to reset a specific session on the interface. You only need to specify the address of the peer corresponding to the session to be reset.

Related command: mpls ldp and mpls ldp enable.

Example

Reset a specified session on the VLAN201 virtual interface.

[SW8800-Vlan-interface201] mpls ldp reset-session 10.1.1.1

28.2.17 mpls ldp timer

Syntax

In VLAN interface view:

mpls ldp timer { session-hold session-holdtime | hello hello-holdtime }

undo mpls ldp timer { session-hold | hello }

In remote-peer view:

29-21

3Com Switch 8800 Command Reference Guide Chapter 28 MPLS Basic Configuration Commands

mpls ldp timer { targeted-session-hold | targeted-hello } { holdtime holdtime |

interval interval }

undo mpls ldp timer { targeted-session-hold | targeted-hello } { holdtime |

interval }

View

VLAN interface view, remote-peer view

Parameter

hello hello-holdtime: Hold time (i.e. timeout time) of the Hello hold timer, in the range of

6~65535 (seconds). By default it is 15 seconds.

session-hold session-holdtime: Time interval for Session hold timer to send a session packet, in the range of 1~65535 (seconds). By default it is 60 seconds.

targeted-hello: Hold time (i.e. timeout time) of the Targeted-hello hold timer, in the range of 1~65535 (seconds). By default holdtime is 45 seconds and interval is 13 seconds.

targeted-session-hold: Time interval for Targeted-session hold timer to send a session packet, in the range of 1~65535 (seconds). By default holdtime is 60 seconds and interval is 24 seconds.

holdtime: Time interval for the hold timer.

interval: Time interval to send a keepalive packet.

Description

Use the mpls ldp timer command to set the hold time for the Hello hold timer and

Session hold timer.

Use the undo mpls ldp timer command to restore the default values.

The timeout of the Hello hold timer means that the adjacency with the peer goes down; the timeout of the Session hold timer means the session with the peer goes down.

targeted-hello interval refers to the time interval to send a targeted-hello packet. It cannot be greater than (targeted-hello holdtime)

× 0.3, so the maximum value is

65535

× 0.3 = 19660.5.

targeted-session-hold interval refers to the time interval to send a keepalive packet. It cannot be greater than (targeted-session-hold holdtime)

× 0.4.

In general, the time interval to send a hello/keepalive packet is one third of the hold time of Hello/Session hold timer.

You can usually use the default values if not in special cases, Note that you must reset the session to validate new values if you do modify these timer parameters.

Related command: mpls ldp and mpls ldp enable.

29-22

3Com Switch 8800 Command Reference Guide

Example

Chapter 28 MPLS Basic Configuration Commands

Modify the hold time of the Hello timer to 30 seconds.

[SW8800-Vlan-interface201] mpls ldp timer hello 30

28.2.18 mpls ldp transport-ip

Syntax

mpls ldp transport-ip { interface | ip-address }

undo mpls ldp transport-ip

View

VLAN interface

Parameter

interface: Sets the IP address of the current interface as the transport address.

ip-address: Sets the IP address as the transport address.

Description

Use the mpls ldp transport-ip command to configure an LDP transport address.

Use the undo mpls ldp transport-ip command to restore the default LDP transport address.

By default, LSR ID is set as a transport address.

When there are multiple directly-connected and MPLS LDP-enabled links between two

LSR neighbors, all these links must be configured with the same transport address (it is recommended to adopt the default LSR ID as the transport address). Otherwise, the system may be unable to set up a steady LDP session.

For a remote-peer, the transport address cannot be configured and is fixed to the LSR

ID.

By default, an LSR ID is the address of some loopback interface and the remote peer can route to this address for a session. For a local peer, the address of the local interface or the Router ID of LSR can be adopted as its transport address.

Example

Set the address of the current interface as a transport address.

[Quidwa-Vlan-interface201] mpls ldp transport-ip interface

Set the address of another interface as a transport address.

[SW8800-Vlan-interface201] mpls ldp transport-ip 10.1.11.2

29-23

3Com Switch 8800 Command Reference Guide

28.2.19 remote-ip

Chapter 28 MPLS Basic Configuration Commands

Syntax

remote-ip remoteip

View

remote-peer view

Parameter

remoteip: IP address of the remote peer.

Description

Use the remote-ip command to configure a remote-IP address. The address should be the LSR ID of the remote LSR. As remote peers adopt LSR ID as their transport addresses, the last two remote peers use the LSR ID as their transport addresses for creating TCP connection.

Related command: mpls ldp remote-peer.

Example

Configure the address of remote-peer.

[SW8800] mpls ldp remote-peer 12

[SW8800-mpls-remote12] remote-ip 192.168.1.1

29-24

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Chapter 29 BGP/MPLS VPN Configuration

Commands

29.1.1 aggregate

Syntax

aggregate address mask [ as-set | attribute-policy route-policy-name |

detail-suppressed | origin-policy route-policy-name | suppress-policy

route-policy-name ]*

undo aggregate address mask [ as-set | attribute-policy route-policy-name |

detail-suppressed | origin-policy route-policy-name | suppress-policy

route-policy-name ]*

View

VPN-instance subaddress family view

Parameter

address: IP address of an aggregated route, in dotted decimal format.

mask: Network mask of an aggregated route, in dotted decimal format.

as-set: Generates routes with AS sets.

detail-suppressed: Advertises only aggregated routes.

suppress-policy route-policy-name: Suppresses advertisement of some selected specific routes.

origin-policy route-policy-name: Selects source route for aggregation.

attribute-policy route-policy-name: Sets the attributes of an aggregated route.

Description

Use the aggregate command to create an aggregation entry in the BGP routing table of

VPN instance.

Use the undo aggregate command to disable this function.

By default, route aggregation is not enabled.

The function of the keywords involved in the above commands is shown in the following table:

29-1

3Com Switch 8800 Command Reference Guide

Table 29-1 Keywords function

Chapter 29 BGP/MPLS VPN Configuration Commands

Keyword

as-set

Function

By setting this keyword, you can create an aggregated route whose AS path contains the information of all the aggregation routes. This keyword is not recommended when aggregating many AS paths because frequent changes of the specific route may result in routing oscillation.

detail-suppressed

This keyword suppresses advertisement of all the specific routes, but not of the aggregated routes. Using the peer

filter-policy command, you can suppress some specific routes.

suppress-policy

origin-policy

This keyword enables the creation of an aggregate route but disables the advertising of the specified routes. Using the

if-match clause in the route-policy command, you can choose to suppress advertisement of some specific routes.

Using this command, you can only choose the specific routes matching the Route-policy to create aggregated route.

attribute-policy

Using this keyword, you can set the attributes of the aggregation route. The peer route-policy command can also enables you to complete the same setting.

Example

Create an aggregation entry in the BGP routing table of VPN instance.

[SW8800-bgp-af-vpn-instance] aggregate 192.213.0.0 255.255.0.0

29.1.2 apply mpls-label

Syntax apply mpls-label undo apply mpls-label

View

Route-policy view

Parameter

None

Description

Use the apply mpls-label command to configure the system to assign MPLS labels to the public network routes which meet the routing policy filter conditions.

Use the undo apply mpls-label command to cancel this configuration.

By default, the public network routes carry no labels.

29-2

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Related command: if-match mpls-label.

Example

Define an apply clause to assign labels to routes meeting the routing policy filter condition.

[SW8800-route-policy] apply mpls-label

29.1.3 debugging bgp

Syntax

debugging bgp { all | event | normal | { keepalive | mp-update | open | packet |

route-refresh | update } [ receive | send ] [ verbose ] }

undo debugging bgp { all | event | normal | keepalive | mp-update | open | packet |

route-refresh | update }

View

User view

Parameter

all: Enables all types of BGP debugging.

event: Enables BGP event debugging.

normal: Enables BGP common function debugging.

keepalive: Enables BGP Keepalive packet debugging.

mp-update: Enables multi-protocol BGP Update packet debugging.

open: Enables BGP Open packet debugging.

packet: Enables BGP packet debugging.

route-refresh: Enables BGP Route-Refresh packet debugging.

update: Enables BGP Update packet debugging.

receive: Displays receive information.

send: Displays send information.

verbose: Displays detailed information.

Description

Use the debugging bgp command to enable BGP debugging..

Use the undo debugging bgp command to disable BGP debugging.

Caution should be taken in deciding to enable BGP debugging, since debugging affects system performance. Remember to disable the debugging when it is completed.

29-3

3Com Switch 8800 Command Reference Guide

Example

Chapter 29 BGP/MPLS VPN Configuration Commands

Enable the debugging on the detailed information about BGP Keepalive packets.

<SW8800> debugging bgp keepalive verbose

29.1.4 display bgp routing-table label

Syntax display bgp routing-table label

View

Any view

Parameter

None

Description

Use the display bgp routing-table label command to view the routing and label information in the BGP routing table.

For common IPv4 routes that carries no label, null is displayed for the label. When the

display bgp routing-table address [ mask ] command is used, if the route carries a label, the label will also be displayed.

Example

View the BGP routing information.

<SW8800> display bgp routing-table label

Flags: - valid ^ - active I - internal

D - damped H - history S - aggregate suppressed

In/out

Dest/Mask Next-Hop Label

--------------------------------------------------------------

#^ 9.0.0.1/32 0.0.0.0 1024/-

View a specific route entry in BGP routing table.

<SW8800> display bgp routing-table 9.0.0.1

BGP routing table entry information of 9.0.0.1/32

Age : 00:00:32

From : local

State : valid, sourced, active,

Nexthop : 0.0.0.0

Origin : INC

As-path : (null)

Med : 1563

29-4

3Com Switch 8800 Command Reference Guide

In/Out label : 1024/-

Chapter 29 BGP/MPLS VPN Configuration Commands

29.1.5 default local-preference

Syntax

default local-preference value

undo default local-preference

View

VPNv4 subaddress family view

Parameter

value: Value of the local precedence, ranging from 0 to 4294967295. A greater value enjoys higher precedence. The default local precedence is 100.

Description

Use the default local-preference command to configure the local precedence for BGP routing in VPN.

Use the undo default local-preference command to restore the default configuration.

The value of the local precedence is advertised between IBGP peers and you can affect the BGP routing in VPN by changing the precedence.

Example

Set the local precedence to be 180, so that the system-advertised routing information will be preferred.

[SW8800-bgp-af-vpn] default local-preference 180

29.1.6 default med

Syntax

default med med-value

undo default med

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

med-value: MED value, ranging from 0 to 4294967295. The default value is 0.

Description

Use the default med command to configure the MED value of the system.

29-5

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Use the undo default med command to restore the default value.

MED attributes, switched between autonomous system (AS), is an external measurement for routes and does not leave AS once entering it. The route with smaller

MED value will be selected as the external one for AS when other conditions hold.

Example

The routers RTA and RTB belong to AS100 and the router RTC belongs to AS200. RTC associates with RTA and RTB. Set the MED value of RTA 25. This makes the RTC prefer the route sent by RTB.

[SW8800-bgp-af-vpn-instance] default med 25

29.1.7 description

Syntax

description vpn-instance-description

undo description

View

VPN-instance view

Parameter

vpn-instance-description: Specifies the description of a specified VPN instance.

Description

Use the description command to configure description for a specified VPN instance.

Use the undo description command to remove the description of this VPN instance.

Example

Display the VPN description.

[SW8800-vpn-vpna] description 3Com

29.1.8 display bgp vpnv4

Syntax

display bgp vpnv4 { all | route-distinguisher rd-value | vpn-instance

vpn-instance-name } { group [ group-name ] | network | peer [ [ peer-address ]

verbose ] | routing-table [ options ] }

View

Any view

29-6

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 29 BGP/MPLS VPN Configuration Commands

all: Displays all the VPNv4 routings.

route-distinguisher rd-value: Displays the information related to RD.

vpn-instance vpn-instance-name: Displays the information related to VPN instance.

group: Displays the information of a neighbor peer group.

network: Displays the advertised routing information.

peer: Displays the peer information.

verbose: Displays detailed peer information.

routing-table: Displays routing information.

options: Configures to view the routing information.

Description

Use the display bgp vpnv4 command to view the VPN address in BGP table.

Example

Display all the BGP VPNv4 routing tables.

[SW8800] display bgp vpnv4 all routing-table

Flags: - valid ^ - active I - internal

D - damped H - history S - aggregate suppressed

In/out As

Dest/mask Next-hop Med Local-pref label path

Route Distinguisher:1.1.1.1:1 (VPN instance:v1)

#^ 1.0.0.0 0.0.0.0

Routes total: 1

-/1024

29.1.9 display ip routing-table vpn-instance

Syntax

display ip routing-table vpn-instance vpn-instance-name [ [ ip-address ] | [ verbose ]

statistics ]

View

Any view

Parameter

vpn-instance-name: Name assigned to VPN-instance.

ip-address: Displays information of the a specified address.

statistics: Displays statistics of routes.

verbose: Displays detailed information.

29-7

3Com Switch 8800 Command Reference Guide

Description

Chapter 29 BGP/MPLS VPN Configuration Commands

Use the display ip routing-table vpn-instance command to view the specified information in the IP routing table of vpn-instance.

Example

Display the IP routing table associated with the VPN-instance.

<PEA>disp ip routing-table vpn-instance vpna-ce1

vpna-ce1 Route Information

Routing Table: vpna-ce1 Route-Distinguisher: 100:1

Destination/Mask Protocol Pre Cost Nexthop Interface

20.20.20.0/24 BGP 256 0 40.40.40.40 Vlan-interface24

40.40.40.0/24 DIRECT 0

40.40.40.10/32 DIRECT 0

0 40.40.40.10 Vlan-interface24

0 127.0.0.1 InLoopBack0

80.80.80.0/24 BGP 256 0 40.40.40.40 Vlan-interface24

200.200.200.0/24 BGP 256 0 40.40.40.40 Vlan-interface24

VPN Routing Table: Route-Distinguisher: 100:2

2.2.2.2 20.20.20.0/24 BGP 256 0

InLoopBack0

30.30.30.0/24 BGP 256 0 2.2.2.2

InLoopBack0

29.1.10 display ip vpn-instance

Syntax

display ip vpn-instance [ vpn-instance-name | verbose ]

View

Any view

Parameter

Description

Use the display ip vpn-instance command to view the information related to

VPN-instance, such as RD, description, and interfaces of the VPN instance.

Example

vpn-instance-name: Name assigned to VPN-instance.

verbose: Displays detailed information.

Display the information about VPN-instance VPN 1.

[SW8800] display ip vpn-instance vpn1

VPN-Instance : vpn1

29-8

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

No description

Route-Distinguisher : 100:6

Interfaces :

Vlan-interface1100

29.1.11 display mpls l3vpn-lsp

Syntax

display mpls l3vpn-lsp [ vpn-instance vpn-instance-name ] [ transit | egress |

ingress ] [ include text | verbose ]

View

Any view

Parameter

Description

Use the display mpls l3vpn-lsp command to view the information of L3VPN LSPs.

Example

transit: LSP for device P.

egress: LSP of egress VPN.

ingress: LSP of ingress VPN.

vpn-instance: Specifies the name of VPN routing/forwarding VPN-instance

include text: Only matches the string including the specified information.

verbose: Displays detailed information.

Display the information of all the MPLS L3VPN LSPs of P device.

<SW8800>display mpls l3vpn-lsp transit

--------------------------------------------------------------------

LSP Information: L3vpn Transit Lsp

--------------------------------------------------------------------

TOTAL: 0 Record(s) Found.

Display the information of MPLS L3VPN LSPs including the text 1024.

[SW8800] display mpls l3vpn-lsp include 1024

--------------------------------------------------------------------

LSP Information: L3vpn Ingress Lsp

--------------------------------------------------------------------

TOTAL: 0 Record(s) Found.

--------------------------------------------------------------------

LSP Information: L3vpn Egress Lsp

--------------------------------------------------------------------

29-9

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

NO VRFNAME INNER-LABEL NEXTHOP OUT-INTERFACE

1 vpn1 1024 0.0.0.0 InLoop0

TOTAL: 1 Record(s) Found.

--------------------------------------------------------------------

LSP Information: L3vpn Transit Lsp

--------------------------------------------------------------------

TOTAL: 0 Record(s) Found.

29.1.12 display rip vpn-instance

Syntax

display rip vpn-instance vpn-instance-name

View

Any view

Parameter

vpn-instance vpn-instance-name: Specifies a VPN instance name.

Description

Use the display rip vpn-instance command to view the configuration related to VPN instance of RIP.

Example

View the specified VPN instance configuration of RIP.

[SW8800] disp rip vpn vpn1

RIP is running

private net VPN-Instance: vpn1

Checkzero is on Default cost : 1

Summary is on Preference : 100

Period update timer : 30

Timeout timer : 180

Garbage-collection timer : 120

No peer router

Network :

192.168.0.0

29.1.13 domain-id

Syntax

domain-id { id-number | id-addr }

undo domain-id

29-10

3Com Switch 8800 Command Reference Guide

View

OSPF protocol view

Chapter 29 BGP/MPLS VPN Configuration Commands

Parameter

id-number: Domain ID for a VPN instance, an integer in the range of 0 to 4294967295.

By default, it is 0.

id-addr: IP address format of domain ID for a VPN instance. By default, it is 0.0.0.0.

Description

Use the domain-id command to specify domain ID for a VPN instance.

Use the undo domain-id command to restore the default domain ID.

For standard BGP/OSPF interoperability, when BGP routes are imported to OSPF at

PE, their original OSPF attributes cannot be restored. As these BGP VPN IP routes are issued to CE as ASE LSA (type-5 LSA), OSPF cannot distinguish them from the routes imported from other route domains. In order to distinguish external routes from OSPF internal routes, it is required to restore the attributes of BGP routes when they are imported to OSPF at the remote end. To achieve this goal, we can configure a domain

ID for each OSPF domain. A domain ID is attached to a BGP/VPN route when an

OSPF route is imported into BGP/VPN for transmission over BGP/VPN routes. Then when BGP routes are imported to the peer PE, LAS values are filled in according to the extended community attributes. If the received BGP VPN IP routes have the same domain ID, they are from the same VPN instance route.

By default, domain ID is 0.

Caution:

The specified domain ID will not take effect until the reset ospf command is executed.

Example

Set domain ID 100 to OSPF process 100.

[SW8800-ospf-100] domain-id 100

[SW8800-ospf-100] domain-id 0.0.0.100

29.1.14 filter-policy export

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

29-11

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

View

VPNv4 subaddress family view, VPN instance subaddress family view

Parameter

acl-number: ACL number, ranging from 2000 to 3999, matching the destination address of routing.

ip-prefix-name: Name of IP prefix to match the destination of routing information.

protocol: Specifies the routing protocol whose routing information will be filtered. You can specify one of the following protocols: direct, static, isis, ospf, ospf-ase, ospf-nssa, or rip. If you specify ospf, ospf-ase, or ospf-nssa, the OSPF process ID is needed.

Description

Use the filter-policy export command to configure to filter routing information redistribute by a certain protocol. Only the filtered routing information can be advertised.

Use the undo filter-policy export command to cancel the configuration.

By default, the redistribute routing will not be filtered.

Related command: filter-policy import.

Example

Define that only the routes that can pass the filtering of ACL 3 can be received by BGP.

[SW8800-bgp-af-vpn-instance] filter-policy 3 export

29.1.15 filter-policy import

Syntax

filter-policy [ ip-prefix ip-prefix-name ] gateway ip-prefix-name import

undo filter-policy [ ip-prefix ip-prefix-name ] gateway ip-prefix-name import

filter-policy { acl-number | ip-prefix ip-prefix-name } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name } import

View

VPNv4 subaddress family view, VPN instance subaddress family view

Parameter

acl-number: ACL number, ranging from 2000 to 3999 to match the destination address of routing.

ip-prefix ip-prefix-name: Name of IP prefix list to match destination of routing.

29-12

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

gateway ip-prefix-name: Name of the IP prefix list for the neighboring routers whose routing information will be filtered.

Description

Use the filter-policy gateway import command to filter the information imported from specified routers.

Use the undo filter-policy gateway import command to cancel the setting.

Use the filter-policy import command to set the filtering conditions to filter routing information.

Use the undo filter-policy import command to cancel the setting on filtering conditions.

By default, no filtering is performed to the received information.

Related command: filter-policy export.

Example

Define a filtering rule for receiving routing information: Only the routing information matching the IP prefix ACL P1 can it be received by VPN.

[SW8800-bgp-af-vpn-instance] filter-policy ip-prefix p1 import

29.1.16 group syntax

group group-name [ internal | external ]

undo group group-name

View

VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group. It can be expressed in string of letters and numbers from 1 to 47 in length.

internal: Creates an internal peer group.

external: Creates an external peer group including other sub-AS groups in federation.

Description

Use the group command to create a BGP peer group in VPN-instance.

Use the undo group command to delete a specified BGP peer group.

By default, the MP-IBGP peer is created.

29-13

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Members in one peer group must have the same routing export policy as the group does, but can have different ingress policies.

Example

Create an MP-EBGP peer group named test.

[SW8800-bgp-af-vpn-instance] group test external

29.1.17 if-match mpls-label

Syntax if-match mpls-label undo if-match mpls-label

View

Route-policy view

Parameter

None

Description

Use the if-match mpls-label command to configure the system to match only those public network routes which carry an MPLS label.

Use the undo if-match mpls-label command to cancel this configuration.

Related command: apply mpls-label.

Example

Define an if-match clause to allow label-carrying routes to pass the filtering of this clause.

[SW8800-route-policy] if-match mpls-label

29.1.18 if-match vpn-target

Syntax

if-match vpn-target { vpn-target | begin vpn-target count }

undo if-match vpn-target

View

Route-policy view

29-14

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 29 BGP/MPLS VPN Configuration Commands

vpn-target: Route VPN-target attribute values used for matching, in ASN:nn or

IP-address:nn format.

count: Number of the route vpn-target values used for matching, in the range of 2 to

65535.

Description

Use the if-match vpn-target command to match the route's vpn-target attribute. The match for a route succeeds only when the route's vpn-target attribute is a subset of the configured values, otherwise, if the route has no vpn-target attribute or has at least one attribute value that is not in the configuration range, the match fails.

Use the undo if-match vpn-target command to cancel the configuration.

Use the if-match vpn-target vpn-target command to list up to 10 vpn-target attribute values to be matched.

Use the if-match vpn-target begin vpn-target count command to set the start value and the total number of the vpn-target values to be matched.

Example

Define an if-match clause to match the following vpn-target attribute values: 100:1,

200:1, 300:1, 300:2 and 400:3.

[SW8800-route-policy] if-match vpn-target 100:1 200:1 300:1 300:2 400:3

With the above configuration, if a route's attribute value is 100:1 300:1, the route will pass the matching; if the route's attribute value is 200:1 500:1, it will not pass the matching because 500:1 is not one of the attribute values that have been configured.

Define an if-match clause to match ten vpn-target attribute values starting from 100:1, that is, 100:1 to 100:10.

[SW8800-route-policy] if-match vpn-target begin 100:1 10

Define an if-match clause to match five vpn-target attribute values starting from

1.1.1.1:65533, that is, 1.1.1.1:65533, 1.1.1.1:65534, 1.1.1.1:65535, 1.1.1.2:0, and

1.1.1.2:1.

[SW8800-route-policy] if-match vpn-target begin 1.1.1.1:65533 5

29.1.19 import-route syntax

import-route { { ospf | ospf-ase | ospf-nssa } [ process-id ] | direct | rip | static } [med

value | route-policy route-policyname ]

undo import-route { { ospf | ospf-ase | ospf-nssa } [ process-id ] | direct | rip | static }

29-15

3Com Switch 8800 Command Reference Guide

View

Chapter 29 BGP/MPLS VPN Configuration Commands

VPN-instance subaddress family view

Parameter

process-id: OSPF process ID, ranging from 1 to 65535. By default, it is 1.

ospf: Imports only the ASE internal route discovered by the OSPF process process-id as the external route.

ospf-ase: Imports only the OSPF-ASE route discovered by OSPF process with

process-id as the external route.

ospf-nssa: Imports only the OSPF-NSSA route discovered by OSPF process with

process-id as the external route.

med value: Route cost value, ranging from 0 to 4294967295.

route-policyname: Routing policy name, consisting of 1 to 19 characters

Description

Use the import-route ospf command to enable to import OSPF route.

Use the undo import-route ospf command to disable to import OSPF route.

Caution:

By default, the process ID is 1.

Example

Enable to import an OSPF route with process ID 100.

[SW8800]ip vpn-instance sphinx

[SW8800-vpn-sphinx]route-distinguisher 168.168.55.1:85

[SW8800-vpn-sphinx]quit

[SW8800]bgp 352

[SW8800-bgp]ip vpn-instance sphinx

[SW8800-bgp-af-vpn-instance] import-route ospf 100

29.1.20 ip binding vpn-instance

Syntax

ip binding vpn-instance vpn-instance-name

undo ip binding vpn-instance vpn-instance-name

29-16

3Com Switch 8800 Command Reference Guide

View

VLAN interface view

Parameter

Chapter 29 BGP/MPLS VPN Configuration Commands

vpn-instance-name: Name assigned to VPN-instance.

Description

Use the ip binding vpn-instance command to bind a VLAN virtual interface to a

VPN-instance.

Use the undo ip binding vpn-instance command to delete the binding.

By default, global routing table is used.

You need to reconfigure the IP address for an interface since this command deletes the original IP address.

Example

Bind the VLAN201 virtual interface to the VPN-instance VPN 1.

[SW8800] interface vlan-interface 201

[SW8800-Vlan-interface201] ip binding vpn-instance vpn1

29.1.21 ip route-static vpn-instance

Syntax

ip route-static vpn-instance

vpn-instance-name

[vpn-instance-name] …

destination-ip-address { mask | mask-length } [ interface-name | vpn-instance

vpn-nexthop-name ] nexthop-ip-address [ preference preference-value ] [ reject |

blackhole ]

undo ip route-static vpn-instance vpn-instance-name [vpn-instance-name] …

destination-ip-address { mask | mask-length } [ interface-name | vpn-instance

vpn-nexthop-name ] nexthop-ip-address [ preference preference-value ] [ reject |

blackhole ]

View

System view

Parameter

vpn-instance-name: Name of VPN-instance. 6 names can be configured at most, and this value of character string is ranging from 1 to 19 characters.

destination-ip-address: Destination address of a static route.

mask: Subnet mask.

29-17

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

mask-length: Length of the mask, ranging to 0 to 32. As it requires consecutive 1s in a

32-bit mask, the mask in dotted decimal format can be substituted by mask-length

(mask-length is represented by the number of consecutive 1s in the mask).

interface-name: Outgoing interface name of a static route. You can specify the interface of a public network or other VPN-instance as the outgoing-interface of the static route .NULL 0 shows the outgoing-interface is null.

vpn-nexthop-name: Specifies VPN-instance of the next hop for the static route.

nexthop-ip-address: Specifies IP address of the next hop for the static route.

preference-value: Specifies preference value, ranging from 1 to 255, By default it is 60..

reject: Configures a route as unreachable.

blackhole: Configures a route as blackhole.

Description

Use the ip route-static vpn-instance command to configure a static route by specifying an interface of a private network as a egress interface.

Use the undo ip route-static vpn-instance command to delete the configuration of this static route.

Example

Configure a static route with destination address 100.1.1.1 and next hop address

1.1.1.2.

[SW8800] ip route-static vpn-instance vpn1 100.1.1.1 16 vpn-instance vpn1

1.1.1.2

29.1.22 ip vpn-instance

Syntax

ip vpn-instance vpn-instance-name

undo ip vpn-instance vpn-instance-name

View

System view

Parameter

vpn-instance-name: Name assigned to VPN-instance.

Description

Use the ip vpn-instance command to create a VPN instance and enter VPN instance view.

Use the undo ip vpn-instance command to delete the specified VPN instance.

29-18

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

By default, VPN-instance is not defined. Neither input nor output list is associated with

VPN-instance. No route-map is associated with VPN-instance.

Use the ip vpn-instance command to create a VPN-instance named vpn-name.

Example

Create the VPN instance VPN 1.

[SW8800] ip vpn-instance vpn1

[SW8800-vpn-vpn1]

29.1.23 ipv4-family

Syntax

BGP view, VPN-instance sub-address family view or VPNv4 sub-address family view:

ipv4-family { vpn-instance vpn-instance-name | vpnv4 [ unicast ] }

undo ipv4-family { vpn-instance vpn-instance-name | vpnv4 [ unicast ] }

RIP view:

ipv4-family [ unicast ] vpn-instance vpn-instance-name

undo ipv4-family [ unicast ] vpn-instance vpn-instance-name

View

BGP view, VPN-instance sub-address family view or VPNv4 sub-address family view, and RIP view.

Parameter

vpn-instance vpn-instance-name: Associates a specified VPN-instance with the

MBGP address family. This parameter is used to enter MBGP VPN-instance subaddress family view.

vpnv4: Enters MBGP VPNv4 address family view.

unicast: Uses unicast sub–address family.

Description

Use the ipv4-family vpn-instance command to enter MBGP VPN-instance subaddress family view.

Use the undo ipv4-family vpn-instance command to delete the association of a

VPN-instance with MBGP address family, and return to BGP unicast view.

Use the ipv4-family vpnv4 command to enter MBGP VPNv4 subaddress family view.

Use the undo ipv4-family vpnv4 command to delete the configuration of MBGP

VPNv4 subaddress family view.

By default, unicast address is used when VPNv4 address family is configured.

29-19

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

By default, use the unicast address when configuring the MBGP address family.

Use this command to enter address family view and configure parameters related to

BGP address family in this view.

Related command: peer enable.

Example

Associate a specified VPN-instance with MBGP address family to enter MBGP

VPN-instance subaddress family view. You must first configure VPN-instance before you perform that configuration.

[SW8800] bgp 100

[SW8800–bgp] ipv4-family vpn-instance abc

[SW8800-bgp-af-vpn-instance]

Enter VPNv4 subaddress family view.

[SW8800] bgp 100

[SW8800-bgp] ipv4-family vpnv4 unicast

[SW8800-bgp-af-vpn]

29.1.24 nesting-vpn

Syntax

View

BGP-VPNv4 sub-address family view

Parameter

None

Description

Use the nesting-vpn command to enable the nested VPN function.

Use the undo nesting-vpn command to disable this function.

By default, the nested VPN function is disabled.

If VPNv4 route advertisement is needed for a CE connected to a PE, the nested VPN function must be enabled on the PE.

Example nesting-vpn undo nesting-vpn

Enable the nested VPN function.

[SW8800-bgp-af-vpn] nesting-vpn

29-20

3Com Switch 8800 Command Reference Guide

29.1.25 network

Chapter 29 BGP/MPLS VPN Configuration Commands

Syntax

network ip-address [ address-mask ] [ route-policy policy-name ]

undo network ip-address [ address-mask ] [ route-policy policy-name ]

View

VPN-instance subaddress family view

Parameter

Description

Use the network command to configure the network route advertised to the outside by local BGP.

Use the undo network command to cancel the configuration.

By default, local BGP does not advertise any route to the outside.

Example

ip-address: Network address advertised by BGP in dotted decimal format.

address-mask: Mask of the network address.

policy-name: Name of the routing policy applied to the advertised route.

Configure local router to advertise the routing with the destination network segment

10.0.0.0/16.

[SW8800-bgp-af-vpn-instance] network 10.0.0.1 255.255.0.0

29.1.26 ospf

Syntax

ospf process-id [ router-id router-id-number ] [ vpn-instance vpn-instance-name ]

undo ospf process-id

View

System view

Parameter

process-id: OSPF Process ID. The default process ID is 1.

router-id-number: Router ID for an OSPF process. It is optional.

vpn-instance-name: VPN instance bound to an OSPF process.

29-21

3Com Switch 8800 Command Reference Guide

Description

Chapter 29 BGP/MPLS VPN Configuration Commands

Use the ospf command to enable an OSPF process.

Use the undo ospf command to disable an OSPF process.

After enabling an OSPF process, you can perform the configuration related to OSPF in the OSPF protocol view.

By default, OSPF protocol is not used in the system.

VRP supports multiple OSPF processes, so you can specify different process IDs to enable multiple OSPF processes on a router.

You are recommended to specify route-id in a process using router-id when enabling the OSPF process. If you want to enable multiple processes on a router, you are recommended to specify different router IDs for different processes. z z

To enable an OSPF process belonging to a public network without a router ID, the following conditions should be satisfied:

RM (Route Manage) is configured with a router ID.

There is an interface that is configured with an IP address.

If you enable an OSPF process without specifying a router ID, and the process is to be bound to a VPN instance, the VPN instance should have an interface that is configured with an IP address.

If you want to bind a process to a VPN instance, you must specify the VPN instance name.

One VPN instance may include several processes. For example, for VPN instance 1, you can configure the commands ospf 1 vpn-instance vpn1, ospf 2 vpn-instance

vpn1, and ospf 3 vpn-instance vpn1. Accordingly, VPN instance 1 will include the processes 1, 2, and 3.

But one process belongs to one instance only. If you have configured ospf 1

vpn-instance vpn1, you cannot configure ospf 1 vpn-instance vpn2. Otherwise, the system prompts: “Wrong configuration. Process 1 has been bound to vpn-instance vpn-instance 1”. If you configure ospf 1 first and then ospf 1 vpn-instance vpn1, the system prompts: “Wrong configuration. Process 1 has been running in public domain”.

If you configure ospf 1 vpn-instance vpn1 first and then ospf 1, the system enters ospf 1 vpn-instance vpn1 mode. That is, the commands ospf 1 and ospf 1

vpn-instance vpn1 are equivalent.

When an OSPF process is bound to a VPN instance, the default OSPF router is PE router. After executing the display ospf process-id brief command, you will view the information: “PE router, connected to VPN backbone”.

29-22

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Caution:

z z z

A router can run no more than 1024 OSPF processes, with up to 10 processes enabled in each VPN instance.

If you bind an OSPF process to a nonexistent VPN instance, the configuration for the command fails and display the errors: The specified VPN-Instance does not exist, or the VPN-Instance's Route-Distinguisher is not specified.

When a VPN instance is deleted, all the related OSPF processes will be deleted.

For example, the VPN instance VPN 1 includes the OSPF processes 1, 2 and 3. If

VPN instance VPN 1 is deleted, the OSPF processes 1, 2 and 3 will all be deleted at the same time.

Related command: network.

Example

Enable OSPF protocol with the default process ID 1.

[SW8800] router id 10.110.1.8

[SW8800] ospf

Enable OSPF protocol with the process ID 120.

[SW8800] router id 10.110.1.8

[SW8800] ospf 120

[SW8800-ospf-120]

Enable OSPF process with the process ID 100, specify its route ID to 2.2.2.2, and bind it to VPN instance vpn1.

[SW8800] ospf 100 router-id 2.2.2.2 vpn-instance vpn1

[SW8800-ospf-100]

29.1.27 peer advertise-community

Syntax

peer group-name advertise-community

undo peer group-name advertise-community

View

VPNv4 subaddress family view, VPN-instance sub-address family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

29-23

3Com Switch 8800 Command Reference Guide

Description

Chapter 29 BGP/MPLS VPN Configuration Commands

Use the peer advertise-community command to configure to transmit the community attributes to a specified peer group.

Use the undo peer advertise-community command to cancel this configuration.

By default, the BGP advertiser does not transmit the community attributes to peer group.

Related command: if-match community-list and apply community.

Example

Transmit the community attributes to the peer group test.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test advertise-community

29.1.28 peer allow-as-loop

Syntax

peer { group-name | peer-address } allow-as-loop [asn-limit]

undo peer { group-name | peer-address } allow-as-loop

View

VPNv4 subaddress family view, VPN-instance sub-address family view

Parameter

group-name: Name of a peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: IP address of a specified peer.

asn-limit: Maximum times for which autonomous system (AS) number is allowed to receive in route updates.

Description

Use the peer allow-as-loop command to allow loop in the route updates in the hub & spoke networking mode.

Use the undo peer allow-as-loop command to prohibit loop in the route updates.

By default, loop is prohibited in the received routing updates; by using the peer

allow-as-loop command, loop is allowed in the received routing updates. The default value of asn-limit argument is 3.

Standard BGP tests loop using AS number. However, on a Hub & Spoke network running EBGP between PE and CE, PE carries its own AS number when advertising route information to CE. Accordingly, the updated route information will contain PE’s AS number when it is sent from CE. In this case, PE will not accept the route updates.

29-24

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

You can avoid this by using the peer allow-as-loop command, which makes PE router allow the route updates from CE to contain its AS number. You can define asn-imit to control the maximum times for which AS number is received by PE.

Example

Enable route loop.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer 1.1.1.1 allow-as-loop 1

29.1.29 peer as-number

Syntax

peer { group-name | [ peer-address group group-name ] }as-number as-number

undo peer { group-name | [ peer-address group group-name ] }as-number as-number

View

VPN-instance subaddress family view

Parameter

group-name: Name of a peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: IP address of peer group.

as-number: Opposite AS number of a peer (group).

Description

Use the peer as-number command to configure the opposite AS number of a specified peer (group).

Use the undo peer as-number command to remove the opposite AS number of a specified peer (group).

By default, the opposite end of a peer (group) has no AS number.

Example

Set the opposite AS number of a specified peer (group) to 100.

[SW8800-bgp] ipv4-family vpn-instance test

[SW8800-bgp-af-vpn-instance] peer test as-number 100

29.1.30 peer as-path-acl export

Syntax

peer group-name as-path-acl acl-number export

undo peer group-name as-path-acl acl-number export

29-25

3Com Switch 8800 Command Reference Guide

View

Chapter 29 BGP/MPLS VPN Configuration Commands

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

acl-number: AS regular expression ACL number, ranging 1 to 199.

Description

Use the peer as-path-acl export command to apply the routing filtering policy based on AS path list to the advertised routing information.

Use the undo peer as-path-acl export command to cancel the configuration.

By default, there is no filtering policy based on AS path list.

You can only use the peer as-path-acl export command in the peer group.

Related command: peer as-path-acl import.

Example

Configure the test peer group to filter the advertised routing information with the AS path ACL 3.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test as-path-acl 3 export

29.1.31 peer as-path-acl import

Syntax

peer { group-name | peer-address } as-path-acl acl-number import

undo peer { group-name | peer-address } as-path-acl acl-number import

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: IP address of the peer group in dotted decimal format.

acl-number: AS regular expression ACL number, ranging 1 to 199.

import: Filters the received routes with AS path list.

29-26

3Com Switch 8800 Command Reference Guide

Description

Chapter 29 BGP/MPLS VPN Configuration Commands

Use the peer as-path-acl import command to configure peers from filter received routing information with routing filtering policy based on AS path list.

Use the undo peer as-path-acl import command to cancel the configuration.

By default, there is no filtering policy based on AS path list.

The incoming filtering policy applied to peers takes precedence over the configuration to peer groups.

Example

Configure the test peer group to filter the received routes with AS path ACL 3.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test as-path-acl 3 import

29.1.32 peer connect-interface

Syntax

peer { group-name | ip-address } connect-interface { interface-type interface_num }

undo peer { group-name | ip-address } connect-interface

View

VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

ip-address: Peer IP address.

interface-type Interface-num: Interface type, interface number.

Description

Use the peer connect-interface command to configure to allow the internal BGP session to use any operable interface for a TCP connection.

Use the undo peer connect-interface command to restore the optimum local address for a TCP connection.

By default, BGP uses the optimum local address to implement a TCP connection.

Generally, BGP uses the optimum local address to implement a TCP connection. In order to make the TCP connection valid even when the interface fails, you can configure to allow the internal BGP session to use any operable interface for the TCP connection. Usually, Loopback interface is used.

29-27

3Com Switch 8800 Command Reference Guide

Example

Chapter 29 BGP/MPLS VPN Configuration Commands

Allow the internal BGP session to use any operable interface for a TCP connection.

[SW8800-bgp] ipv4-family vpn-instance test

[SW8800-bgp-af-vpn-instance] peer 1.1.1.1 connect-interface loopback 0

29.1.33 peer default-route-advertise

Syntax

peer group-name default-route-advertise

undo peer group-name default-route-advertise

View

VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

Description

Use the peer group-name default-route-advertise command to enable a peer (group) to transmit a default route.

Use the undo peer group-name default-route-advertise command to remove the existing configuration.

By default, a peer (group) does not transmit a default route.

This command does not require any default route in the routing table but transmits a default route whose next hop address is itself to the peer unconditionally.

Example

Enable the peer group test to transmit a default route.

[SW8800-bgp] ipv4-family vpn-instance a

[SW8800-bgp-af-vpn-instance] peer test default-route-advertise

29.1.34 peer default-route-advertise vpn-instance

Syntax

peer ip-address default-route-advertise vpn-instance vpn-instance name

undo peer ip-address default-route-advertise vpn-instance vpn-instance name

View

VPNv4 subaddress family view

29-28

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 29 BGP/MPLS VPN Configuration Commands

ip-address: Peer IP address.

vpn-instance name: Name of the created VPN instance.

Description

Use the peer ip-address default-route-advertise vpn-instance vpn-instance name command to enable a peer to import a default route.

Use the undo peer ip-address default-route-advertise vpn-instance vpn-instance

name to cancel the existing configuration.

By default, a peer does not import a default route.

This command does not require any default route in the routing table but transmits a default route whose next hop address is itself to the peer unconditionally.

Example

Enable the peer test to import a default route.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer 10.1.1.1 default-route-advertise vpn-instance test

29.1.35 peer description

Syntax

peer { group-name | peer-address } description description-line

undo peer { group-name | peer-address } description

View

VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: Peer IP address, in dotted decimal format.

description-line: Description of the configuration, up to 79 characters in length.

Description

Use the peer description command to set the description of a peer (group).

Use the undo peer description command to delete the description.

By default, there is no description for a peer (group).

The peer description is independent of the peer's group description.

Related command: display bgp peer verbose and display bgp group.

29-29

3Com Switch 8800 Command Reference Guide

Example

Chapter 29 BGP/MPLS VPN Configuration Commands

Set description of the peer group group1 to be city 1.

[SW8800-bgp-af-vpn-instance] peer group1 description city1

29.1.36 peer ebgp-max-hop

Syntax

peer group-name ebgp-max-hop [ ttl ]

undo peer group-name ebgp-max-hop

View

VPN-instance subaddress family view

Parameter

Description

Use the peer ebgp-max-hop command to enable to establish an EBGP connection with a specified neighbor which is attached to the network indirectly.

Use the undo peer ebgp-max-hop command to restore the default setting.

By default, you can only make a connection with a direct accessing EBGP neighbor.

Example

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: Peer IP address.

ttl: The maximum hops, in the rang of 1 to 255 and is 64 by default.

Enable the router to connect the EBGP peer group test that is attached to the network indirectly.

[SW8800-bgp] ipv4-family vpn-instance test

[SW8800-bgp-af-vpn-instance] peer test ebgp-max-hop

29.1.37 peer enable

Syntax

peer group-name enable

undo peer group-name enable

View

VPNv4 subaddress family view

29-30

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 29 BGP/MPLS VPN Configuration Commands

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

Description

Use the peer enable command to enable a specified peer group.

Use the undo peer enable command to disable a specified peer group.

For IPv4 address family, address switching is enabled by default.

Example

Enable the peer group 168.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer 168 enable

29.1.38 peer filter-policy export

Syntax

peer group-name filter-policy acl-number export

undo peer group-name filter-policy acl-number export

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

acl-number: IP ACL number ranging from 2000 to 3999. That is, you can use basic ACL or advanced ACL.

export: Uses the filtering policy for the advertised route and this policy is only effective for peer groups.

Description

Use the peer filter-policy export command to apply the ACL-based filtering policy to the advertised route for the peer group.

Use the undo peer filter-policy export command to cancel the configuration.

By default, there is no ACL-based filtering policy.

You can only use the peer filter-policy export command to configure peer group.

Related command: ip as-path-acl, peer as-path-acl and peer filter-policy export.

29-31

3Com Switch 8800 Command Reference Guide

Example

Chapter 29 BGP/MPLS VPN Configuration Commands

Configure the test peer group to filter the advertised route with ACL 3000.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test filter-policy 3000 export

29.1.39 peer filter-policy import

Syntax

peer { group-name | peer-address } filter-policy acl-number import

undo peer { group-name | peer-address } filter-policy acl-number import

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

Description

Use the peer filter-policy import command to apply the ACL-based filtering policy to the received routing information for peers.

Use the undo peer filter-policy import command to cancel the application.

By default, there is no ACL-based filtering policy.

Related command: ip as-path-acl and peer as-path-acl.

The incoming filtering policy configured for peers take precedence over the configuration for peer groups.

Example

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: Peer IP address, in dotted decimal format.

acl-number: IP ACL number from 2000 to 3999, that is, you can use basic or advanced

ACL.

import: Performs the filtering policy on the received routes.

Configure the test peer group to filter the received route with ACL 3000.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test filter-policy 3000 import

29-32

3Com Switch 8800 Command Reference Guide

29.1.40 peer group

Chapter 29 BGP/MPLS VPN Configuration Commands

Syntax

peer peer-address group group-name [ as-number as-number ]

undo peer peer-address

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

Description

Use the peer group command to add a peer to an existing peer group.

Use the undo peer command to delete a specified peer from the group.

In BGP view and VPN-instance subaddress family view, when adding a peer to an external group out of an AS, you need to specify an AS number. When adding a peer to an internal group or an external group in an AS, the AS number is not needed.

A peer must have been added in a group in BGP view before it can be added to another group in multicast subaddress family view or VPNv4 subaddress family view.

In different address families, one peer can be in different groups and one group may have different peers.

Example

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: Peer IP address in dotted decimal format.

as-number: Peer AS number in the range of 1 to 65535. This parameter is only effective in the BGP view and VPN-instance subaddress family view.

Add the peer with IP address 10.1.1.1 to the peer group test. In this example, the peer group is IBGP peer by default, thus you need not to specify the AS number when adding peers.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer 10.1.1.1 group test

29.1.41 peer ip-prefix export

Syntax

peer group-name ip-prefix prefixname export

undo peer group-name ip-prefix prefixname export

29-33

3Com Switch 8800 Command Reference Guide

View

Chapter 29 BGP/MPLS VPN Configuration Commands

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

prefixname: Name of prefix list, a string of one to 19 characters.

Description

Use the peer ip-prefix export command to apply the routing filtering policy based on

IP prefix list to advertised routing information for peer groups.

Use the undo peer ip-prefix export command to cancel the setting.

By default, the peer group does not perform the routing filtering policy. you can only configure the peer ip-prefix export command to the peer group.

Related command: peer ip-prefix import.

Example

Configure the peer group group1 to filter the advertised routing information with the IP prefix list list1.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer group1 ip-prefix list1 export

29.1.42 peer ip-prefix import

Syntax

peer { group-name | peer-addess } ip-prefix prefixname import

undo peer { group-name | peer-addess } ip-prefix prefixname import

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: Peer IP address in dotted decimal format.

prefixname: Name of the prefix list, a string of one to 19 characters.

Description

Use the peer ip-prefix import command to apply the filtering policy based on IP prefix list to the advertised route for peer groups.

29-34

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Use the undo peer ip-prefix import command to cancel the configuration.

By default, the peer dose not use the routing filtering policy.

The incoming filtering policy configured for peers take precedence over the configuration for peer groups.

Related command: peer ip-prefix export.

Example

Configure the peer group group1 to filter the received route with the IP prefix list 1.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer group1 ip-prefix list1 import

29.1.43 peer label-route-capability

Syntax

peer group-name label-route-capability

undo peer group-name label-route-capability

View

BGP view

Parameter

group-name: Name of a neighbor peer group.

Description

Use the peer label-route-capability command to enable a peer group to handle the label-carried IPv4 routes.

Use the undo peer label-route-capability command to disable a peer group from handling the label-carried IPv4 routes.

By default, a BGP peer group cannot handle label-carried IPv4 routes.

Example

Enable IBGP peer group and EBGP peer group to handle the label-carried IPv4 routes.

[SW8800-bgp] group ibgp internal

[SW8800-bgp] peer ibgp label-route-capability

[SW8800-bgp] group ebgp external

[SW8800-bgp] peer ebgp label-route-capability

29-35

3Com Switch 8800 Command Reference Guide

29.1.44 peer next-hop-local

Chapter 29 BGP/MPLS VPN Configuration Commands

Syntax

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

Description

Use the peer next-hop-local command to cancel the processing of the next hop in the routes that BGP advertises to a peer group and configure to use its own address as the next-hop.

Use the undo peer next-hop-local command to cancel the existing setting.

Example

peer group-name next-hop-local

undo peer group-name next-hop-local

Specify the current BGP address as the next-hop in its route advertising to a peer group.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test next-hop-local

29.1.45 peer password

Syntax

peer { group-name | peer-address } password { cipher | simple } password

undo peer { group-name | peer-address } password

View

VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: Peer IP address in dotted decimal format.

cipher: Displays the password in cipher text.

simple: Displays the password in plain text.

29-36

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

password: Password string. When you choose the cipher parameter and input the password in plain text, or you choose the simple parameter, the password is one to 16 characters in length. When you choose the cipher parameter, and input the password in cipher text, the password is to be 24 in length.

Description

Use the peer password command to enable BGP to perform the MD5 authentication when making a TCP connection.

Use the undo peer password command to cancel this function.

By default, BGP does not perform the MD5 authentication when setting up a TCP connection.

When the MD5 authentication is enabled, both parties must have the same authentication mode and password, otherwise, no TCP connection can be established because the MD5 authentication cannot be passed.

A specified peer can perform the MD5 authentication only when the group to which the peer belongs is not set the authentication. Otherwise, the configuration of the peer group applies.

Example

Assign MD5 authentication to a TCP connection between the local router 10.1.100.1 and the peer 10.1.100.2.

[SW8800-bgp-af-vpn-instance] peer 10.1.100.2 password simple 3Com

Perform a similar configuration to the remote end.

[SW8800-bgp-af-vpn-instance] peer 10.1.100.1 password simple 3Com

29.1.46 peer public-as-only

Syntax

peer group-name public-as-only

undo peer group-name public-as-only

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

29-37

3Com Switch 8800 Command Reference Guide

Description

Chapter 29 BGP/MPLS VPN Configuration Commands

Use the peer public-as-only command to configure BGP not to carry private AS numbers when transmitting update packets.

Use the undo peer public-as-only command to configure BGP to carry private AS numbers when transmitting update packets.

By default, private AS numbers are carried when BGP transmits update packets.

Generally, BGP carries AS number (either public or private AS number) when transmitting BGP update packets. BGP can be configured not to carry private AS number so that some egress routers may ignore private AS number when transmitting

BGP update packets.

Example

Send MBGP update packets without bearing private AS numbers.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer 168 public-as-only

29.1.47 peer reflect-client

Syntax

peer group-name reflect-client

undo peer group-name reflect-client

View

VPNv4 subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

Description

Use the peer reflect-client command to set a specified peer group to be a client of a router reflector.

Use the undo peer reflect-client command to cancel this setting.

By default, no router reflector exists in AS.

This configuration only applies to IBGP peer group.

Related command: reflect between-clients and reflect cluster-id.

Example

Set the peer group test as a client of a router reflector.

29-38

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test reflect-client

29.1.48 peer route-policy export

Syntax

peer group-name route-policy policy-name export

undo peer group-name route-policy policy-name export

View

VPNv4 subaddress family view, VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

policy-name: Name of a routing policy.

Description

Use the peer route-policy export command to apply the routing policy to peer group for advertised routing information.

Use the undo peer route-policy export command to cancel the configuration.

By default, there is no routing policy.

The peer route-policy export command is only used to configure peer groups.

Related command: peer route-policy import.

Example

Apply the routing policy test-policy to the outgoing routes of the peer group test.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test route-policy test-policy export

29.1.49 peer route-policy import

Syntax

peer { group-name | peer-address } route-policy policy-name import

undo peer { group-name | peer-address } route-policy policy-name import

View

VPNv4 subaddress family view, VPN-instance subaddress family view

29-39

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 29 BGP/MPLS VPN Configuration Commands

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: Peer IP address in dotted decimal format.

policy-name: Name of the applied routing policy.

Description

Use the peer route-policy import command to apply a routing policy to peer for received routing information.

Use the undo peer route-policy import command to delete the setting.

By default, there is no routing policy.

The incoming filtering policy configured for peers take precedence over the configuration for peer groups.

Related command: peer route-policy export.

Example

Apply the routing policy test-policy to the incoming routes of the peer group test.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer test route-policy test-policy import

29.1.50 peer route-update-interval

Syntax

peer group-name route-update-interval seconds

undo peer group-name route-update-interval

View

VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

seconds: Update interval in seconds, ranging from 0 to 600.

Description

Use the peer route-update-interval command to set the update interval for peers.

Use the undo peer route-update-interval command to restore the default setting.

By default, the update interval is 5 seconds for IBGP peer group, and for EBGP it is 30 seconds.

29-40

3Com Switch 8800 Command Reference Guide

Example

Chapter 29 BGP/MPLS VPN Configuration Commands

Set the minimum interval for sending routing update packet to the BGP peer group group1 to be 10 seconds.

[SW8800-bgp-af-vpn-instance] peer group1 route-update-interval 10

29.1.51 peer timer

Syntax

peer { group-name | peer-address } timer keep-alive keepalive-interval hold

holdtime-interval

undo peer { group-name | peer-address } timer

View

VPN-instance subaddress family view

Parameter

group-name: Name of a neighbor peer group, consisting of 1 to 47 alphanumeric characters.

peer-address: Peer IP address in dotted decimal format.

keepalive-interval: Interval of sending the Keepalive message. It is in seconds, ranging from 1 to 65535, and with the default value 60.

holdtime-interval: Holdtime, ranging from 3 to 65535 in seconds, and with the default value 180 seconds.

Description

Use the peer timer command to set the Keepalive interval and holdtime for peers.

Use the undo peer timer command to restore the default setting.

The timer set with the peer timer command enjoys higher precedence than the timer with the timer command.

Related command: timer keep-alive hold.

Example

Set the Keepalive interval and holdtime for the peer group test.

[SW8800-bgp-af-vpn-instance] peer test timer keep-alive 60 hold 180

29.1.52 peer upe

Syntax

peer peer-address upe

29-41

3Com Switch 8800 Command Reference Guide

undo peer peer-address upe

View

VPNv4 subaddress family view

Parameter

peer-address: Peer IP address.

Chapter 29 BGP/MPLS VPN Configuration Commands

Description

Use the peer upe command to configure BGP peer as the UPE of hierarchical

BGP/MPLS VPN.

Use the undo peer upe command to delete this configuration.

Example

Configure BGP peer as the UPE of hierarchical BGP/MPLS VPN.

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer 1.1.1.1 upe

29.1.53 peer vpn-instance enable

Syntax

peer group-name vpn-instance vpn-instance-name enable

undo peer group-name vpn-instance vpn-instance-name enable

View

BGP-VPNv4 sub-address family view

Parameter

group-name: Name of a peer group.

vpn-instance-name: Name of the VPN instance the CE peer belongs to.

enable: Enable VPNv4 function for the CE.

Description

Use the peer vpn-instance enable command to enable the VPNv4 function for the

BGP peer group of a CE.

Use the undo peer vpn-instance enable command to disable the function.

By default, the VPNv4 function is disabled.

Example

Enable the VPNv4 function for the peer group of a CE.

29-42

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

[SW8800-bgp] ipv4-family vpn-instance vrf1

[SW8800-bgp-af-vpn-instance] group ebgp external

[SW8800-bgp-af-vpn-instance] quit

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer ebgp vpn-instance vrf1 enable

29.1.54 peer vpn-instance group

Syntax

peer peer-address vpn-instance vpn-instance-name group group-name

undo peer peer-address vpn-instance vpn-instance-name

View

BGP-VPNv4 sub-address family view

Parameter

peer-address: IP address of a peer, in dotted decimal notation.

vpn-instance-name: Name of the VPN instance the CE peer belongs to. group-name: Name of a peer group.

Description

Use the peer vpn-instance group command to join a CE neighbor into a BGP peer group.

Use the undo peer vpn-instance group command to clear the CE neighbor from the

BGP peer group.

By default, a CE neighbor does not belong to any peer group.

Example

Join a CE neighbor into a peer group.

[SW8800-bgp] ipv4-family vpn-instance vrf1

[SW8800-bgp-af-vpn-instance] peer 1.1.1.1 group ebgp as-number 600

[SW8800-bgp-af-vpn-instance] quit

[SW8800-bgp] ipv4-family vpnv4

[SW8800-bgp-af-vpn] peer 1.1.1.1 vpn-instance vrf1 group ebgp

29.1.55 peer vpn-instance route-policy import

Syntax

peer { peer-address | group-name } vpn-instance vpn-instance-name route-policy

policy-name import

29-43

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

undo peer { peer-address | group-name } vpn-instance vpn-instance-name

route-policy policy-name import

View

BGP-VPNv4 sub-address family view

Parameter

peer-address: IP address of a peer, in dotted decimal. group-name: Name of a peer group.

vpn-instance-name: Name of the VPN instance the CE peer belongs to.

policy-name: Name of the routing policy to be applied.

Description

Use the peer vpn-instance route-policy import command to configure the routing policy applied by the CE peer to VPNv4 routes it received.

Use the undo peer vpn-instance route-policy import command to cancel the configuration.

By default, no routing policy is configured.

The ingress routing policy configured for a peer takes precedence over the configuration for the peer group.

Example

Configure the peer group ebgp to apply the routing policy named comtest to the ingress routes.

[SW8800-bgp-af-vpn] peer ebgp vpn-instance vrf1 route-policy comtest import

29.1.56 peer vpn-instance substitute-as

Syntax

peer group-name vpn-instance vpn-instance-name substitute-as

undo peer group-name vpn-instance vpn-instance-name substitute-as

View

BGP-VPNv4 sub-address family view

Parameter

group-name: Name of a peer group.

vpn-instance-name: Name of the VPN instance the CE peer belongs to.

policy-name: Name of the routing policy to be applied.

29-44

3Com Switch 8800 Command Reference Guide

Description

Chapter 29 BGP/MPLS VPN Configuration Commands

Use the peer vpn-instance substitute-as command to enable the BGP AS number substitution on the PE.

Use the undo peer vpn-instance substitute-as command to disable the function.

By default, the BGP AS number substitution function is disabled.

After this function is enabled, when the PE advertises the specified peer the route information and the routed AS path has the same AS number as that of the peer, the AS number in the AS path will be replaced by the AS number of the PE before being advertised.

These commands take effect once being executed.

Example

Enable the BGP AS number substitution for the peer group 20.

[SW8800-bgp-af-vpn] peer 20 vpn-instance vrf1 substitute-as

29.1.57 policy vpn-target

Syntax policy vpn-target

undo policy vpn-target

View

VPNv4 subaddress family view

Parameter

None

Description

Use the policy vpn-target command to configure to filter the VPN-target extended community attributes of received routing information.

Use the undo policy vpn-target command to cancel the setting.

By default, the filtering of VPN-target extended community attribute is conducted.

Example

Filter the VPN-target extended community attributes of the received routing information.

[SW8800-bgp-af-vpn] policy vpn-target

29-45

3Com Switch 8800 Command Reference Guide

29.1.58 preference

Chapter 29 BGP/MPLS VPN Configuration Commands

Syntax

preference ebgp-preference ibgp-preference local-preference

undo preference

View

VPN-instance subaddress family view

Parameter

ebgp-preference: Preference of the routes learned from the EBGP peer, in the range 1 to 256.

ibgp-preference: Preference of the routes learned from the IBGP peer, in the range 1 to

256.

local-preference: Preference of the Local routes, in the range 1 to 256.

Description

Use the preference command to set preference value for a BGP route.

Use the undo preference command to remove the setting.

Example

Set the preference of the preference of the routes learned from the EBGP peer to 2, the preference of the routes learned from the IBGP peer to 3 and the preference of the local routes to 4.

[SW8800-bgp-af-vpn-instance] preference 2 3 4

29.1.59 reflect between-clients

Syntax reflect between-clients

undo reflect between-clients

View

VPNv4 subaddress family view

Parameter

None

Description

Use the reflect between-clients command to allow the routing reflection between clients.

29-46

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Use the undo reflect between-clients command to forbid routing reflection between clients (PE to PE).

By default, the routing reflection between clients is allowed.

The router reflector reflects one client’s route to others after configuration.

Related command: reflect cluster-id and peer reflect-client.

Example

Disable the routing reflection from client to client.

[SW8800-bgp-af-vpn] undo reflect between-clients

29.1.60 reflector cluster-id

Syntax

reflector cluster-id { cluster-id | address }

undo reflect cluster-id

View

VPNv4 subaddress family view

Parameter

cluster-id: Router reflector cluster ID in number format, in the range of 1 to

4294967295.

address: Router reflector cluster ID in IP address format.

Description

Use the reflector cluster-id command to configure a cluster ID of router reflector.

Use the undo reflector cluster-id command to delete the configuration.

By default, each router reflector uses his own ID as a cluster ID.

Usually, one cluster has one router reflector. And it is the router ID of the reflector to identify this cluster. Several router reflectors make the network more stable. If one cluster has several router reflectors, set the same cluster to all the reflectors ID with this command.

Related command: reflect between-clients and peer reflect-client.

Example

The local router is one of the reflectors in the cluster and identifies this cluster with the cluster ID.

[SW8800-bgp-af-vpn] reflect cluster-id 80

[SW8800-bgp-af-vpn] peer 11.128.160.10 reflect-client

29-47

3Com Switch 8800 Command Reference Guide

29.1.61 route-distinguisher

Chapter 29 BGP/MPLS VPN Configuration Commands

Syntax

route-distinguisher route-distinguisher

View

VPN-instance view

Parameter

route-distinguisher: Configures a VPN IPv4 prefix by adding an 8-byte value to a VPN

IPv4 prefix.

Description

Use the route-distinguisher command to configure RD for an MPLS VPN instance. A

VPN-instance cannot run until it is configured with an RD.

A route distinguisher (RD) creates route and forwarding list for a VPN and specifies the default route identifier. Add an RD to the beginning of a specific IPv4 prefix to make it a globally unique VPN IPv4 prefix.

If an RD is associated with an autonomous system number (ASN), it is composed of the

ASN and an arbitrary number; if the RD is associated with an IP address, it is a combination of the IP address and an arbitrary number.

RD has the following formats:

16-bit ASN (can be 0 here): A custom 32-bit number, for example, 101:3.

32-bit IP address (can be 0.0.0.0 here): A custom 16-bit number, for example,

192.168.122.15:1.

Example

Configure RD for an MPLS VPN instance.

[SW8800] ip vpn-instance vpn-instance_blue

[SW8800-vpn-vpn-instance_blue] route-distinguisher 100:3

[SW8800] ip vpn-instance vpn-instance_red

[SW8800-vpn-vpn-instance_red] route-distinguisher 173.13.0.12:200

29.1.62 route-tag

Syntax

route-tag tag-number

undo route-tag

29-48

3Com Switch 8800 Command Reference Guide

View

OSPF protocol view

Chapter 29 BGP/MPLS VPN Configuration Commands

Parameter

tag-number: Tag value to identify VPN import route, in the range of 0 to 4294967295.

By default, its first two bytes are fixed to 0xD000, while the last two bytes are the ASN of local BGP. For example, if the local BGP ASN is 100, then the default tag value in decimal is 3489661028. The value is an integer from 0 to 4294967295.

Description

Use the route-tag command to specify a tag value to identify VPN import route.

Use the undo route-tag command to restore the default value.

If a VPN site is linked to multiple PEs, when a route learned from MPLS/BGP is advertised by a PE router via its type-5 or type-7 LSA to the VPN site, the route may be received by another PE router. This will result in routing loop. To avoid routing loop, you should configure route-tag and you are recommended to configure the same route-tag for the PEs in the same VPN domain. The route-tag is included in the type-5/-7 LSA. It is not transmitted in the extended community attributes of BGP, and thus it is limited in the local area. Therefore, it can only be configured and function on the PE router which receives BGP routes and generates OSPF LSA. z z

Configure route-tag in OSPF protocol view. Different processes can be configured with a same route-tag. You can configure the same route-tag using different commands, but they are different in priority. z

Those configured with the import-route command are of the highest priority.

Those configured with the route-tag command are in the second place in terms of priority.

Those configure with the default tag command are of the lowest priority.

If the route-tag included in the type-5/-7 LSA is identical with its existing tag, the LSA received will be neglected in route calculation.

Caution:

The route-tag configured will not be validated until the reset ospf command is executed.

Related command: import-route and default.

29-49

3Com Switch 8800 Command Reference Guide

Example

Chapter 29 BGP/MPLS VPN Configuration Commands

Configure route-tag 100 to OSPF process 100.

[SW8800-ospf-100] route-tag 100

OSPF: Process 100's route tag has been changed

OSPF: Reboot the system or use the 'reset ospf ID' command for this to take

effect

29.1.63 timer

Syntax

timer keep-alive keepalive-interval hold holdtime-interval

undo timer

View

VPN-instance subaddress family view

Parameter

Description

Use the timer command to specify the time interval and hold time for sending

Keepalive messages.

Use the undo timer command to restore the default value.

The timer defined with the peer timer command takes preference over that with the

timer command.

Related command: peer timer.

Example

keepalive-interval: Time interval to send Keepalive messages, in seconds and ranging

1 to 65535. It defaults to 60 seconds.

holdtime-interval: Hold time, in seconds and ranging 3 to 65535. It defaults to 180 seconds.

Set the time interval and hold time for sending Keepalive messages.

[SW8800-bgp-af-vpn-instance] timer keep-alive 60 hold 180

29.1.64 traffic-redirect

Syntax

traffic-redirect inbound { link-group { acl-number | acl-name } [ rule rule

[ system-index index ] ] | ip-group { acl-number | acl-name } [ rule rule [ system-index

29-50

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

index ] ] } interface { interface-name | interface-type interface-num } destination-vlan

l3-vpn

undo traffic-redirect inbound { link-group { acl-number | acl-name } [ rule rule ] |

ip-group { acl-number | acl-name } [ rule rule ] }

View

Ethernet port view

Parameter

link-group { acl-number | acl-name } [ rule rule ]: Layer 2 ACL, acl-number is in the range of 4000 to 4999. acl-name is a string beginning with English letters (a to z and A to Z) with no spaces or quotation marks between. rule rule: Optional, ACL matching statement, in the range of 0 to 127. All matching statements will be selected if you skip this keyword.

ip-group { acl-number | acl-name } [ rule rule ]: Basic or advanced ACL. acl-number is in the range of 2000 to 3999. acl-name is a string beginning with English letters (a to z and A to Z) with no spaces or quotation marks between. rule rule: Optional, ACL matching statement, in the range of 0 to 127. All matching statements will be selected if you skip this keyword.

interface { interface-name | interface-type interface-num }: Redirect a packet to a specified Ethernet port. interface-type can be GigabitEthernet and Ethernet.

interface-num suggests a complete port name with interface-type. interface-name is composed of interface-type and interface-num.

system-index index: Intra-system index of the rule, in the range of 0~4294967295.

The system assigns automatically an index to it when delivering an ACL rule, for later retrieval. You can also assign a system index to it when delivering an ACL rule with this command. However, generally you are not recommended to do so.

Description

Use the traffic-redirect command to redirect the data flow at the port of the EX board to the port of the MX board and make the port on the EX board act as an MPLS VPN CE side interface.

Use the undo traffic-redirect command to cancel this configuration.

Example

Redirect the data flow at the Ethernet3/1/4 of the EX board to the MX board and set the port belong to VLAN 24.

[SW8800-Ethernet3/1/4] traffic-redirect inbound ip-group 2000 rule 0 system-index 1 interface Ethernet5/1/4 24 l3-vpn

Cancel the redirection configuration.

[SW8800-Ethernet5/1/4] undo traffic-redirect inbound ip-group 2000 rule 0

29-51

3Com Switch 8800 Command Reference Guide

29.1.65 routing-table limit

Chapter 29 BGP/MPLS VPN Configuration Commands

Syntax

routing-table limit integer { alarm-integer | syslog-alert }

undo routing-table limit

View

VPN-instance view

Parameter

integer: The Maximum routes allowed for a VPN instance, ranging from 1 to 65536.

alarm-integer: Route threshold for alarming.

syslog-alert: When the route maximum specified for a VPN-instance exceeds the threshold, routes can be added and only a SYSLOG error message is sent out.

Description

Use the routing-table limit command to limit the route maximum in a VPN-instance.

Use the undo routing-table limit command to cancel the limitation.

It is necessary to enter a VPN-instance sub-view before using the routing-table command. Create a VPN-instance routing table in this view and allocate a route distinguisher (RD) in either of the following formats:

16-bit ASN: A 32-bit user-defined number, for example, 100:1.

32-bit IP address: A 16-bit user-defined number, for example, 172.1.1.1:1.

Create a VPN-target extended community for a VPN-instance and specify ingress or egress interface or both of them for the vpn-target command. These parameters can be used to configure ingress/egress routing information of the VPN-target extended community for a router.

Example

Configure the maximum routes in VPN instance vpn1 to 1000.

[SW8800] ip vpn-instance vpn1

[SW8800-vpn-vpn1] route-distinguisher 100:1

[SW8800-vpn-vpn1] vpn-target 100:1 import-extcommunity

[SW8800-vpn-vpn1] routing-table limit 1000 syslog-alert

29-52

3Com Switch 8800 Command Reference Guide

29.1.66 sham-link

Chapter 29 BGP/MPLS VPN Configuration Commands

Syntax

sham-link source-addr destination-addr [ cost cost-value ] [ dead seconds ] [ hello

seconds ] [ md5 keyid key seconds ] [ retransmit seconds ] [ simple password ]

[ trans-delay seconds ]

undo sham-link source-addr destination-addr

View

OSPF area view

Parameter

source-addr: Source address of a sham-link, an interface address with a 32-bit mask.

destination-addr: Destination address of a sham-link, an interface address with a 32-bit mask.

cost-value: Cost at sham link, in the range of 1 to 65535. By default, it is 1.

password: Specifies authentication in plain text at the interface, 8 characters at most. It must be consistent with the authentication of a sham link peer.

keyid: Specifies the MD5 authentication identifier at the interface. The keyed is in the range of 1 to 255. It must be consistent with the authentication string of sham link peer.

key: Specifies the authentication at the interface. keyid is from 1 to 255 and key is a string up to 16 characters. It must be consistent with the authentication of a sham link peer. When the display current-configuration command is executed, the system displays the 24-character MD5 authentication in cipher text. You can also input a

24-character authentication in cipher text.

dead seconds: Specifies interval for the dead timer, in the range of 1 to 8192 seconds.

By default, it is 40 seconds. It must be consistent with the value of dead seconds for a sham link peer router.

hello seconds: Specifies interval between Hello message transmission at the interface, in the range of 1 to 8192 seconds. By default, it is 10 seconds. It must be consistent with the value of hello seconds for a sham link peer router.

retransmit seconds: Specifies internal for LSA packet retransmission at the interface, in the range of 1 to 8192 seconds. By default, it is 5 seconds.

trans-delay seconds: Specifies delay period for LSA packet transmission at the interface, in the range of 1 to 8192 seconds. By default, it is 1 second.

Description

Use the sham-link command to configure a sham link.

Use the undo sham-link command to delete a sham link.

29-53

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

In the OSPF PE-CE connection, suppose that in an OSPF area there are two sites which belong to the same VPN. They are connected to different PE routers and there is an intra-domain OSPF link (backdoor) between them. Though there may be other routes connecting the two sites via PE routers, these routes are intra-domain routes, and OSPF will first select those routes through the backdoor link. Sometimes, users desire to first select the routes through VPN backbone. Hence it is required to establish sham links between PE routers. In this case, the routes through VPN backbone are of the highest priority within the OSPF area.

The sham link between VPN PE routers is taken as a link within the OSPF area. Its source and destination addresses are both loopback interface addresses with a 32-bit mask, which must be bound to a VPN instance and imported into BGP through a direct-connect route. When configuring the sham link command, the optional parameters are not mutually exclusive. You can only choose in the undo command those parameters which are selected in the corresponding sham-link command.

Caution:

z z z z

The source and destination addresses of a sham link are both loopback interface addresses with a 32-bit mask, which must be bound to a VPN instance and imported into BGP through a direct-connect route.

The source and destination addresses of a sham link cannot be the same.

The same sham link cannot be configured for different OSPF processes.

50 sham links can be configured for an OSPF process at most.

Example

Configure a sham link, with its source address 1.1.1.1 and destination address 2.2.2.2.

[SW8800-ospf-100-area-0.0.0.1] sham-link 1.1.1.1 2.2.2.2 cost 100

29.1.67 summary

Syntax summary

undo summary

View

VPN-instance subaddress family view

Parameter

None

29-54

3Com Switch 8800 Command Reference Guide

Description

Chapter 29 BGP/MPLS VPN Configuration Commands

Use the summary command to enable BGP to perform auto summary to subnet routes.

Use the undo summary command to cancel this summary.

By default, BGP does not perform the auto summary to subnet routes.

After auto summary is enabled, BGP cannot receive the subnet routes imported from

IGP. Using this feature, you can reduce the amount of routing information.

Example

Perform auto summary to subnet routes.

[SW8800-bgp-af-vpn-instance] summary

29.1.68 vpn-instance-capability simple

Syntax vpn-instance-capability simple

undo vpn-instance-capability

View

OSPF protocol view

Parameter

None

Description

Use the vpn-instance-capability simple command to configure a router as

Multi-VPN-Instance CE.

Use the undo vpn-instance-capability command to cancel the configuration.

OSPF multi-VPN-instance is often run at a PE router. So a CE router, on which OSPF multi-VPN-instance runs, is called Multi-VPN-Instance CE. Though they both support multi-VPN-instance, Multi-VPN-Instance CE does not necessarily support BGP/OSPF interoperability.

When an OSPF process is bound to a VPN instance, the default OSPF router is PE router. This command will remove the default setting and change a router into a

Multi-VPN-Instance CE. . After the configuration, OSPF processes will reestablish all its neighbors. DN bits and route-tag will not be checked in routing calculation. To prevent route loss, routing loop test is disabled on PE routes. MGP/OSPF interoperability is also disabled to save system resources.

After the display ospf brief command is executed successfully, the system prompts the information:

29-55

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Multi-VPN-Instance enable on CE router.

Caution:

OSPF processes will set up all its neighbors again after this command is executed.

Example

Configure OSPF process 100 as Multi-VPN-Instance CE.

[SW8800-ospf-100] vpn-instance-capability simple

Restore the OSPF process 100 as PE.

[SW8800-ospf-100] undo vpn-instance-capability

29.1.69 vpn-target

Syntax

vpn-target vpn-target-ext-community [ import-extcommunity |

export-extcommunity | both ]

undo vpn-target vpn-target-ext-community [ import-extcommunity |

export-extcommunity | both ]

View

VPN-instance view

Parameter

import-extcommunity: Ingress route information from the extended community of target VPN.

export-extcommunity: Egress route information to the extended community of target

VPN.

both: Imports both ingress and egress route information to the extended community of target VPN.

vpn-target-ext-community: Adds VPN-target extended community attributes to the ingress and egress of VPN-instance or the VPN-target extended community list of ingress and egress.

Description

Use the vpn-target command to create a VPN-target extended community for

VPN-instance.

29-56

3Com Switch 8800 Command Reference Guide Chapter 29 BGP/MPLS VPN Configuration Commands

Use the undo vpn-target command to remove the VPN-target extended community attributes.

By default, the default value is both.

Use the vpn-target command you can create ingress and egress route target extended community lists for a specified VPN-instance. Execute this command once for each target community. Import the received routing information bearing the specific

VPN-target extended community to all VPN-instances, for which an extended community is configured as ingress VPN-target. VPN-target specifies a target VPN extended community. The same as RD, an extended community is either composed of an ASN and an arbitrary number, or composed of an IP address and an arbitrary number.

RD is in either of the following formats:

16-bit ASN (can be 0 here): A custom 32-bit number, for example, 101:3.

32-bit IP address (can be 0.0.0.0 here): A custom 16-bit number, for example,

192.168.122.15:1.

Example

Create a VPN-target extended community for the VPN-instance.

[SW8800] ip vpn-instance vpn-instance_blue

[SW8800-vpn-vpn-instance_blue] vpn-target 1000:1 both

[SW8800-vpn-vpn-instance_blue] vpn-target 1000:2 export-extcommunity

[SW8800-vpn-vpn-instance_blue] vpn-target 173.27.0.130:2 import-extcommunity

29-57

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Chapter 30 MSTP Configuration Commands

30.1 MSTP Configuration Commands

30.1.1 active region-configuration

Syntax active region-configuration

View

MST region view

Parameter

None

Description

Use the active region-configuration command to activate the configurations of MST region.

This command is used to manually activate the configurations of MST region.

Configuring the related parameters, especially the VLAN mapping table, of the MST region, will lead to the recalculation of spanning tree and network topology flapping. To avoid such flapping, MSTP applies the configured parameters and launches recalculation of the spanning tree only when you activate the configured MST region parameters or enable MSTP.

After you have entered this command, MSTP will apply the MST region parameters you have configured to the system and recalculate the spanning tree.

Related command: instance, region-name, revision-level, vlan-mapping modulo,

check region-configuration.

Example

Manually activate MST region configurations.

[SW8800-mst-region] active region-configuration

30.1.2 check region-configuration

Syntax

check region-configuration

30-1

3Com Switch 8800 Command Reference Guide

View

MST region view

Parameter

None

Chapter 30 MSTP Configuration Commands

Description

Use the check region-configuration command to view the configuration information

(including switch region name, revision level, and VLAN mapping table) to be activated.

MSTP defines that the user must ensure the correct region configurations, especially the VLAN mapping table configuration. The switches can be configured in the same region only if their region names, VLAN mapping tables, and MSTP revision levels are configured exactly the same. The switch may not be configured in the expected region due to any slight deviation. You can use this command to display the MST region configuration information to be activated to know to which MST regions the switch belongs and check if the MST region configurations are correct.

Related command: instance, region-name, revision-level, vlan-mapping modulo,

active region-configuration.

Example

Display the configuration information about the region.

[SW8800-mst-region] check region-configuration

Admin. Configuration

Format selector :0

Region name :00b010000001

Revision level :0

Instance Vlans Mapped

0 1 to 9, 11 to 4094

16 10

Table 30-1 Description on the fields of the check region-configuration command

Format selector

Region name

Field

Revision level

Instance Vlans Mapped

Description

The selector defined by MSTP

Region name of MST region

Revision level of MST region

VLAN mapping table of MST region

30-2

3Com Switch 8800 Command Reference Guide

30.1.3 debugging stp

Chapter 30 MSTP Configuration Commands

Syntax

debugging stp { global-error | global-event }

undo debugging stp { global-error | global-event }

View

User view

Parameter

None

Description

Use the debugging stp { global-error | global-event } command to enable STP global error or event debugging.

Use the undo debugging stp { global-error | global-event } command to disable the function.

Example

Enable STP global event debugging.

<SW8800>debugging stp global-event

30.1.4 display stp

Syntax

display stp [ instance instance-id ] [ interface interface-list | slot slot-num ] [ brief ]

View

Parameter

Any view

instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16. Instance 0 represents CIST.

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

slot slot-num: Displays STP information about a specified slot.

30-3

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

brief: Displays only port state, port protection type and port role in the corresponding instance.

Description

Use the display stp command to view the state information and statistics information of the spanning tree.

The MSTP state and statistics information can help analyze and maintain the network topology and maintain the normal operation of MSTP.

If no spanning tree instance ID or port list is specified, the command will display the spanning tree information of all the instances on all the ports in port number order. If the instance ID is specified, the command will display the spanning tree information of the specified instance on all the port in port number order. If only the port list is specified, the command will display the information about all the MSTIs on the port in port number order. If both instance ID and port list are specified, the command will display the spanning tree information of the specified instance and port according to the port list of the instance ID.

If there is an aggregation port, the command will only display the instance information on the master port.

MSTP state information includes:

1) Global CIST parameter: Protocol operation mode, switch priority in the CIST instance, MAC address, Hello Time, Max Age, Forward Delay, Max Hops, CIST common root, external path cost of the switch to the CIST common root, region root, internal path cost of the switch to the region root, CIST root port of the switch, and whether to enable BPDU protection; Number of received TC/TCN packets, time interval for receiving packets. If you specify the relationship between a master root and one or multiple slave roots, the global CIST parameters can also be displayed in CIST Root Type.

2) CIST port parameter: Port state, role, priority, path cost, path cost standard designated bridge, designated port, edge port/non-edge port, whether connected to the point-to-point link, port transit limit, whether to enable Root protection, whether being a region edge port, Hello Time, Max Age, Forward Delay,

Message-age time, and Remaining-hops; Num of Vlans Mapped, whether to remove MAC address table and dynamic ARP (address resolution protocol) table, number of sent BPDU packets, and number of received BPDU packets.

3) Global MSTIs parameter: MSTI instance ID, bridge priority of the instance, region root, internal path cost, MSTI root port, MASTER bridge, path cost to region root and number of the received TC packets. If you specify the relationship between master roots and slave roots in an instance, the global MSTI parameters can also be displayed in MSTI Root Type.

30-4

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

4) MSTIs port parameter: Port state, role, priority, path cost, path cost standard, designated bridge, designated port, and remaining hops. You can view Num of

Vlans Mapped in port view.

Statistics information: Count of TCN, CONFIG BPDU, RST, and MST BPDU transmitted/received via the port.

Related command: reset stp.

Example

Display the state and statistics information about the spanning tree.

<SW8800> display stp instance 0 interface Ethernet 2/1/1 to Ethernet 2/1/4

GigabitEthernet 3/2/1 to GigabitEthernet 3/2/4 GigabitEthernet 3/3/1 brief

MSTID Port Role STP State Protection

0 Ethernet2/1/1 ALTE DISCARDING LOOP

0 Ethernet2/1/2 DESI FORWARDING NONE

0 Ethernet2/1/3 DESI FORWARDING NONE

0 Ethernet2/1/4 DESI FORWARDING NONE

0 GigabitEthernet3/2/1 DESI FORWARDING NONE

0 GigabitEthernet3/2/2 DESI FORWARDING NONE

0 GigabitEthernet3/2/3 DESI FORWARDING NONE

0 GigabitEthernet3/2/4 DESI FORWARDING NONE

0 GigabitEthernet3/3/1 ROOT FORWARDING NONE

Table 30-2 Description on the fields of the display stp command

Field

MSTID

Port

Role

STP State

Protection

Description

MST instance ID in a MST region

Port number, corresponding to the related MST instance

Role of the port

Port STP state, including enabled status and disabled status, and also monitoring and learning status during transition

Protection type on the port

30.1.5 display stp region-configuration

Syntax display stp region-configuration

View

Any view

30-5

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 30 MSTP Configuration Commands

Description

Use the display stp region-configuration command to view the effective MST region configurations.

MST region configuration information includes: region name, region revision level, and associations between VLANs and MSTIs. All these configurations together determine to which MST region a switch belongs.

Related command: stp region-configuration.

Example

Display the MST region configuration information.

<SW8800> display stp region-configuration

Oper Configuration

Format selector :0

Region name :3Com

Revision level :0

Instance Vlans Mapped

0 21 to 4094

1 1 to 10

2 11 to 20

Table 30-3 Description on the fields of the display stp region-configuration command

Format selector

Region name

Field

Revision level

Instance Vlans Mapped

Description

Selector defined by MSTP

Region name of MST region

Revision level of MST region

VLAN mapping table of MST region

30.1.6 display stp tc

Syntax

display stp tc [ instance instanceid ] { all | detected | received | sent }

View

Any view

30-6

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 30 MSTP Configuration Commands

instance instanceid: Instance to be displayed. By default, TC (Topology Change) statistics of all the instances will be displayed.

detected: TC statistics detected by the bridge.

received: TC statistics received at the bridge.

sent: TC statistics sent from the bridge.

all: All TC statistics, including those detected, received and sent by the bridge.

Description

Use the display stp tc command to view TC (transaction capabilities) statistics.

Example

Display all TC statistics.

<SW8800>dis stp tc all

---------- Stp Instance 0 tc or tcn received count ----------

Port Ethernet3/1/1 0

Port Ethernet3/1/9 1

---------- Stp Instance 0 tc or tcn detected count ----------

Port Ethernet3/1/1 1

Port Ethernet3/1/9 0

---------- Stp Instance 0 tc or tcn sent count ----------

Port Ethernet3/1/1 1

Port Ethernet3/1/9 0

30.1.7 instance

Syntax

instance instance-id vlan vlan-list

undo instance instance-id [ vlan vlan-list ]

View

MST region view

Parameter

instance-id: Specifies the spanning tree instance ID, ranging from 0 to 48. The value 0 indicates a CIST.

vlan vlan-list: Specifies the VLAN list, ranging from 1 to 4094. vlan-list = { vlan-id [ to

vlan-id ] }&<1-10>. Where, &<1-10> represents that you can input vlan-ids up to 10 times

30-7

3Com Switch 8800 Command Reference Guide

Description

Chapter 30 MSTP Configuration Commands

Use the instance command to map the specified VLAN list to the specified MSTI.

Use the undo instance command to cancel the specified VLAN list from the specified

MSTI, and the removed VLAN will then be mapped to the CIST (i.e., the Instance 0). If no VLAN is specified in the undo command, all the VLANs associated with the specified MSTI will be mapped to CIST.

By default, all the VLANs are mapped to CIST, i.e., the Instance 0.

MSTP describes the association between VLANs and MSTIs with the VLAN mapping table. You can use this command to configure this table. Every VLAN can be mapped to an MSTI as per your configuration.

You cannot map one VLAN to different instances, while you can map multiple VLANs to one instance. When you remap the mapped VLAN to a different instance, the original mapping relation is removed automatically. The mapping relationship of VLANs and instances in the same MSTP domain must be correct. The data will be transmitted according to the spanning tree topology structure of the instance the VLAN maps to.

Related command: region-name, revision-level, check region-configuration,

vlan-mapping modulo, active region-configuration.

Example

Map VLAN 2 to MSTI 1.

[SW8800-mst-region] instance 1 vlan 2

Map VLAN5-10 to MSTI 3.

[SW8800-mst-region] instance 3 vlan 5 6 7 8 9 10

30.1.8 region-name

Syntax

region-name name

undo region-name

View

MST region view

Parameter

name: Specifies the MST region name of the switch with a character string not exceeding 32 bytes.

Description

Use the region-name command to configure the MST region name of a switch.

30-8

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Use the undo region-name command to restore the default MST region name.

By default, the MST region name of the switch is the switch MAC address in hexadecimal notation.

The switch region name, together with VLAN mapping table of the MST region and

MSTP revision level, is used for determining the region to which the switch belongs.

Related command: instance, revision-level, check region-configuration,

vlan-mapping modulo, active region-configuration.

Example

Set the MST region name of the switch as 3Com.

[SW8800-mst-region] region-name 3Com

30.1.9 reset stp

Syntax

reset stp [ interface interface-list ]

View

User view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

Description

Use the reset stp command to reset the spanning tree statistics information.

The spanning tree statistics information includes TCN, Config BPDU, RST, and MST

BPDU, received and transmitted on the port. Among them, STP BPDU and TCN BPDU are counted on CIST.

If you specify a port list, the command clears the spanning tree statistics information of the specified port. If you do not specify any port, the command clears the spanning tree statistics information of all ports.

Related command: display stp.

Example

Clear the statistics information on the ports from Ethernet2/1/1 through Ethernet2/1/3

<SW8800> reset stp interface Ethernet 2/1/1 to Ethernet 2/1/3

30-9

3Com Switch 8800 Command Reference Guide

30.1.10 revision-level

Chapter 30 MSTP Configuration Commands

Syntax

revision-level level

undo revision-level

View

MST region view

Parameter

level: Specifies the MSTP revision level, ranging from 0 to 65535. By default, MSTP revision level takes 0.

Description

Use the revision-level command to configure MSTP revision level of the switch.

Use the undo revision-level command to restore the default revision level.

MSTP revision level, together with region name and VLAN mapping table, is used for determining the MST region to which the switch belongs.

Related command: instance, region-name, check region-configuration,

vlan-mapping modulo and active region-configuration.

Example

Set the MSTP revision level of the switch MST region to 5.

[SW8800-mst-region] revision-level 5

30.1.11 stp

Syntax

stp { enable | disable }

undo stp

View

System view, Ethernet port view

Parameter

enable: Enables global or port MSTP.

disable: Disables global or port MSTP.

Description

Use the stp command to enable or disable MSTP on a device or a port.

30-10

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Use the undo stp command to restore the default MSTP state on a device or a port.

By default, MSTP is disabled on the switch.

After MSTP is enabled, the switch determines to run MSTP in STP-compatible mode or

MSTP mode as per your configurations. The switch serves as a transparent bridge after

MSTP is disabled.

After MSTP is enabled, it will dynamically maintain the spanning tree state of the corresponding VLAN according to the received configuration BPDU until it is disabled.

After MSTP is disabled, it will not maintain the state.

By default, global and port MSTP are disabled. When you enable MSTP on a device or a port, both global STP and port STP are enabled; if you do not enable MSTP globally, you will fail to use the stp enable command on a port.

Related command: stp mode, stp interface.

Example

Enable MSTP globally.

[SW8800] stp enable

Disable MSTP on Ethernet 2/1/1

[SW8800-Ethernet 2/1/1] stp disable

30.1.12 stp bpdu-protection

Syntax stp bpdu-protection undo stp bpdu-protection

View

System view

Parameter

None

Description

Use the stp bpdu-protection command to enable the BPDU protection on the switch.

Use the undo stp bpdu-protection command to restore the default state of BPDU protection.

By default, BPDU protection is disabled.

Generally, the access ports of the access layer devices are directly connected to user terminals (such as PC) or file servers. In this case, the access ports are set to edge ports to implement fast state transition. However, when such access ports receive configuration BPDU, the system will automatically set them to non-edge ports and

30-11

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands recalculate the spanning tree, which makes the network topology flap. These ports will not receive any STP configuration BPDU in normal cases. Anyway, if someone maliciously attacks the switch with fake configuration BPDU, the network will flap.

MSTP provides BPDU protection function to avoid such attack: After configured with

BPDU protection, the switch will disable the edge port through MSTP, which receives a

BPDU, and notify the network manager at same time. These ports can be resumed by the network manager only.

Example

Enable BPDU protection on the switch.

[SW8800] stp bpdu-protection

30.1.13 stp bridge-diameter

Syntax

stp bridge-diameter bridgenum

undo stp bridge-diameter

View

System view

Parameter

bridgenum: Ranges from 2 to 7 and defaults to 7.

Description

Use the stp bridge-diameter command to configure the switching network diameter.

Use the undo stp bridge-diameter command to restore the default network diameter.

The definition of network diameter: Maximum count of switches between the farthest communication ends.

The stp bridge-diameter command configures the switching network diameter and determines the three time parameters of MSTP accordingly. This configuration takes effect on CIST only but makes no sense for MSTI.

The spanning tree convergence can be speeded up, when Hello Time, Forward Delay, and Max Age are well configured. These parameters are related to the network scale.

You can configure the network scale to get the time parameters. When users configure the bridge-diameter parameter of the switch, MSTP will automatically set Hello Time,

Forward Delay, and Max Age to moderate values. When bridge-diameter defaults to 7, the time parameters also take their respective default values.

Related command: stp timer forward-delay, stp timer hello, stp timer max-age.

30-12

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Note:

The stp bridge-diameter command configures the switching network diameter and determines the three MSTP time parameters (Hello Time, Forward Delay, and Max Age) accordingly.

Example

Set the diameter of the switching network to 5.

[SW8800] stp bridge-diameter 5

30.1.14 stp cost

Syntax

stp [ instance instance-id ] cost cost

undo stp [ instance instance-id ] cost

View

Ethernet port view

Parameter

instance instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16.

The Instance 0 represents CIST.

cost cost: Port path cost. Its range depends on the selected standard of path cost.

Description

Use the stp instance cost command to configure the port path cost on the specified

MSTI for the current port.

Use the undo stp instance cost command to restore the path cost on the specified

MSTI.

By default, switch calculates the path costs of a port on different MSTIs.

You may specify the instance-id parameter as 0 to configure CIST path cost of the port.

The path cost has effect on the port role selection. A port can be configured with different path costs on different MSTIs. Thus the traffic from different VLANs can run over different physical links, thereby implementing the VLAN-based load-balancing.

MSTP will recalculate the port role and transit its state, upon the port path cost changes.

Related command: stp interface instance cost.

30-13

3Com Switch 8800 Command Reference Guide

Example

Chapter 30 MSTP Configuration Commands

Set the path cost of Ethernet 2/1/3 on MSTI 2 to 200.

[SW8800-Ethernet2/1/3] stp instance 2 cost 200

30.1.15 stp edged-port

Syntax

stp edged-port { enable | disable }

undo stp edged-port

View

Ethernet port view

Parameter

enable: Configures the current port as an edge port.

disable: Configures the current port as a non-edge port.

Description

Use the stp edged-port enable command to configure the current Ethernet port as an edge port.

Use the stp edged-port disable command to configure the current Ethernet port as a non-edge port.

Use the undo stp edged-port command to restore the default state, i.e., non-edge port.

By default, all the switch ports are configured as non-edge ports.

If the current Ethernet port is connected to other switch, you can use the stp edged-port

disable or no stp edged-port command to configure it as a non-edge port. The stp edged-port enable command is used for configuring the port as an edge port.

A port is considered as an edge port when it is directly connected to the user terminal, instead of any other switches or shared network segments. The edge port will not cause loop upon network topology changes. Accordingly, you can configure a port as an edge port, so that it can transit to forwarding state fast. For this purpose, configure the Ethernet port directly connected to the user terminal as an edge port.

Because the edge port is not connected to any other switches, it will not receive the configuration BPDUs from them. Before BPDU protection is enabled on the switch, the port received a BPDU runs as a non-edge port, even if it is configured as an edge port.

Related command: stp interface edged-port.

30-14

3Com Switch 8800 Command Reference Guide

Example

Chapter 30 MSTP Configuration Commands

Configure Ethernet 2/1/1 as a non-edge port.

[SW8800-Ethernet2/1/1] stp edged-port disable

30.1.16 stp instance root primary

Syntax

stp [ instance instance-id ] root primary [ bridge-diameter bridgenum [ hello-time

centi-senconds ] ]

undo stp [ instance instance-id ] root

View

System view

Parameter

instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16. Specify it as

0 to configure the root bridge of CIST.

root primary: Configures the current switch as the primary root of the specified MSTI.

bridge-diameter bridgenum: Specifies the network diameter of the spanning tree, ranging from 2 to 7.

hello-time centi-senconds: Specifies the Hello Time of the spanning tree, which is in the range from 100 to 1000 and measured in centiseconds.

Description

Use the stp root primary command to configure the current switch as the primary root of the specified MSTI.

Use the undo stp root command to cancel the current switch for the primary root of the designated MSTI.

If you execute these commands without using the instance instance-id option, your configuration takes effect only on the CIST instance.

When you set the instance-id parameter to 0, its following parameter setting takes effect.

By default, the switch does not server as a root bridge.

You can specify one root bridge for each MSTI regardless of the switch priority. When setting a root bridge, you can use this command to specify the switching network diameter and determine the three time parameters (Hello time, Forward Delay and Max

Age). Because the switch calculates inaccurate Hello time value, you can specify the switching network diameter and the Hello Time for the root bridge, and thus determine

30-15

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands other two parameter values for the root bridge. In general, you are recommended to determine the other two time parameter values by setting the network diameter.

Caution:

In a switching network, you can configure only one root bridge for each MSTI and one or more secondary switches. Do not configure more than one root bridge for an MSTI at the same time. Otherwise, the calculation result will be unpredictable.

After a switch is configured as a primary root bridge or a secondary root bridge, users cannot modify the bridge priority of the switch.

Example

Designate the current switch as the root bridge of MSTI 1 and specify the diameter of the switching network as 4 and the Hello Time as 500 centiseconds.

[SW8800] stp instance 1 root primary bridge-diameter 4 hello-time 500

30.1.17 stp interface

Syntax

stp interface interface-list { enable | disable }

View

System view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

enable: Enables MSTP on the port.

disable: Disables MSTP on the port.

Description

Use the stp interface command to enable/disable MSTP on a switch port in system view.

30-16

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

By default, if MSTP is enabled globally, it is enabled on every port. If MSTP is disabled globally, it is also disabled on every port.

When MSTP is disabled, the corresponding port stays in forwarding state and does not take part in any MSTI calculation.

Caution:

If you disable MSTP on a port, a loop may be generated.

Related command: stp mode, stp.

Example

Enable MSTP on Ethernet 2/1/1 in system view.

[SW8800] stp interface Ethernet 2/1/1 enable

30.1.18 stp interface instance cost

Syntax

stp interface interface-list [ instance instance-id ] cost cost

undo stp interface interface-list [ instance instance-id ] cost

View

System view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16. The instance

0 represents CIST.

cost: Port path cost. Its range depends on the selected standard of path cost.

Description

Use the stp interface cost command to configure the path cost of the specified port on the specified MSTI in system view.

30-17

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Use the undo stp interface cost command to restore the path cost of the specified port on the specified MSTI to the default value in system view.

By default, switch automatically calculates the path costs of a port on different MSTIs based on corresponding standard.

You may specify the instance-id parameter as 0 to configure CIST path cost of the port.

The path cost has effect on the port role selection. You can configure different path costs for different MSTIs on a port. Thus the traffic from different VLANs can run over different physical links, thereby implementing the VLAN-based load-balancing. MSTP will recalculate the port role and transit its state, upon the port path cost changes.

Related command: stp cost.

Example

Set the path cost of Ethernet 2/1/3 on MSTI 2 to 400 in system view.

[SW8800] stp interface Ethernet 2/1/3 instance 2 cost 400

30.1.19 stp interface edged-port

Syntax

stp interface interface-list edged-port {enable | disable }

undo stp interface interface-list edged-port

View

System view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

enable: Configures the current port as an edge port.

disable: Configures the current port as a non-edge port.

Description

Use the stp interface edged-port enable command to configure a port as an edge port in system view.

Use the stp interface edged-port disable command to configure a port as a non-edge port in system view.

30-18

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Use the undo stp interface edged-port command to restore the port to the default type (that is, non-edge port) in system view.

By default, all the switch ports are configured as non-edge ports.

If the current Ethernet port is connected to other switches, you can use the stp

interface edged-port disable or undo stp interface edged-port command to configure it as a non-edge port. The stp interface edged-port enable command is used for configuring the port as an edge port.

A port is considered as an edge port when it is directly connected to the user terminal, instead of any other switches or shared network segments. The edge port will not cause loop upon network topology changes. Accordingly, you can configure a port as an edge port, so that it can transit to forwarding state fast. For this purpose, configure the Ethernet port directly connected to the user terminal as an edge port.

Because the edge port is not connected to any other switches, it will not receive the configuration BPDUs from them. Before BPDU protection is enabled on the switch, the port that receives a BPDU runs as a non-edge port, even if it is configured as edge port.

Related command: stp edged-port.

Example

Configure Ethernet2/1/3 as an edge port in system view.

[SW8800] stp interface Ethernet 2/1/3 edged-port enable

30.1.20 stp interface instance port priority

Syntax

stp interface interface-list instance instance-id port priority priority

undo stp interface interface-list instance instance-id port priority

View

System view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16. The Instance

0 represents CIST.

30-19

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

port priority priority: Specifies the port priority, ranging from 0 to 240 with a step length of 16, e.g., 0, 16 and 32. By default, the port has a priority of 128 on every MSTI.

Description

Use the stp interface instance port priority command to configure the priority of the specified port on the specified MSTI in system view.

Use the undo stp interface instance port priority command to restore the default priority.

You may specify the instance-id parameter as 0 to configure CIST priority of the port.

The port priority has effect on the port role selection for the specified MSTI. A port can be configured with different priorities on different MSTIs. Thus the traffic from different

VLANs can run over different physical links, thereby implementing the VLAN-based load-balancing. MSTP will recalculate the port role and transit its state, upon the port priority changes.

Related command: stp instance port priority.

Example

Set the priority of Ethernet 2/1/3 on MSTI 2 to 16 in system view.

[SW8800] stp instance 2 interface Ethernet 2/1/3 port priority 16

30.1.21 stp interface loop-protection

Syntax

stp interface interface-list loop-protection

undo stp interface interface-list loop-protection

View

System view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

Description

Use the stp interface loop-protection command to enable loop protection on the switch in system view.

30-20

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Use the undo stp interface loop-protection command to restore the default loop protection state.

When port roles change, you can use the stp interface loop-protection command to change port state from forwarding state to discarding state, thus avoiding port loopback.

The root port and other blocked ports maintain their state according to the BPDUs sent by uplink switch. Due to link congestion or unidirection link failure, these ports may be unable to receive BPDUs and the switch will select root port again. In this case, the former root port will turn into the specified port and the former blocked ports will change to the forwarding state, and link loop appears.

The loop protection function can inhibit the generation of loop. After it is enabled, the root port role will change according to the uplink port state. The blocked port will maintain in discarding state and do not forward packets, thus avoiding link loop.

By default, loop protection is disabled.

Related command: stp loop-protection.

Note:

For a loopback port, if the port participates in STP calculation, it must be specified port regardless of internal loop or external loop. However, the port is always set to be in discarding state on all instances.

Example

Enable loop protection on the Ethernet2/1/1.

[SW8800] stp interface Ethernet2/1/1 loop-protection

30.1.22 stp interface mcheck

Syntax

stp interface interface-list mcheck

View

System view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions

30-21

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

Description

Use the stp interface mcheck command to perform mcheck operation on the port in system view.

If a port of an MSTP switch on a switching network has ever been connected to an STP switch, the port will automatically transit to operate in STP-compatible mode. However, when the STP switch is removed, the port stays in STP-compatible mode and cannot automatically transit back to MSTP mode. In this case, you can perform mCheck operation to transit the port to MSTP mode by force.

Note:

By default, MSTP runs in MSTP mode, which is compatible with RSTP and STP (This mode can recognize MSTP BPDU, STP config BPDU and RSTP config BPDU).

However, the STP switch can only recognize config BPDU (STP BPDU) sent by the

STP and RSTP bridges. After the switch running STP-compatible mode switches back to MSTP mode, it will not send MSTP BPDU if you do not execute the stp mcheck command. Therefore, the connected device still sends config BPDU (STP BPDU) to it, causing the same configuration exist in different regions and other problems.

Remember to perform stp interface mcheck after modifying stp mode.

Related command: stp mcheck, stp mode.

Example

Set mcheck parameter of Ethernet2/1/3 in system view.

[SW8800] stp interface Ethernet2/1/3 mcheck

30.1.23 stp interface point-to-point

Syntax

stp interface interface-list point-to-point { force-true | force-false | auto }

undo stp interface interface-list point-to-point

View

System view

30-22

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 30 MSTP Configuration Commands

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

force-true: Indicates the Ethernet port connected to a point-to-point link.

force-false: Indicates the Ethernet port not connected to a point-to-point link.

auto: Configures to automatically check if the link to the Ethernet port is a point-to-point link.

Description

Use the stp interface point-to-point command to configure a port (not) to be connected to a point-to-point link in system view.

Use the undo stp interface point-to-point command to restore the default state of the link to the Ethernet port.

By default, the parameter defaults to auto, that is, MSTP checks if the link to the

Ethernet port is a point-to-point link.

The port not connected with the point-to-point link cannot transit fast.

The master ports of the link aggregation and the ports operating in full-duplex mode are connected to the point-to-point link. You are recommended to keep the default settings and let MSTP detect the link state automatically.

This configuration takes effect on the CIST and all the MSTIs. The settings of a port whether to connect the point-to-point link will be applied to all the MSTIs where the port belongs. Note that a temporary loop may be redistributed if you configure a port not physically connected with the point-to-point link as connected to such a link by force.

Related command: stp point-to-point.

Example

Configure Ethernet2/1/3 to be connected to the point-to-point link in system view.

[SW8800] stp interface Ethernet2/1/3 point-to-point force-true

30.1.24 stp interface reset-arp

Syntax

stp interface interface-list reset-arp { enable | disable }

30-23

3Com Switch 8800 Command Reference Guide

View

System view

Parameter

Chapter 30 MSTP Configuration Commands

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

Description

Use the stp interface reset-arp enable command to enable reset-arp on the port of the device, removing the MAC address table and dynamic ARP table of the port.

Use the stp interface reset-arp disable command to disable reset-arp on the port.

After the port receives TC/TCN packets, the system checks whether the reset-arp is enabled for the stp-enabled ports of the whole switch. If reset-arp is enabled on the port, and the STP port is in active state, the system deletes MAC address and dynamic ARP tables on the port. In the case of TC/TCN entries of instance 0, the system deletes the

ARP entries of all instances. In the case of TC/TCN entries of any other instance, the system deletes the ARP entries of this instance.

By default, the function is disabled.

Related command: stp reset-arp.

Example

Enable reset-arp on the port Ethernet3/1/20 in system view.

[SW8800]stp interface Ethernet3/1/20 reset-arp enable

30.1.25 stp interface root-protection

Syntax

stp interface interface-list root-protection

undo stp interface interface-list root-protection

View

System view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

30-24

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

Description

Use the stp interface root-protection command to enable Root protection on the switch in system view.

Use the undo stp interface root-protection command to restore the default Root protection state.

By default, Root protection is disabled.

In case of configuration error or malicious attack, the legal primary root may receive the

BPDU with a higher priority and then loose its place, which causes network topology change errors. Due to the illegal change, the traffic supposed to travel over the high-speed link may be pulled to the low-speed link and congestion will occur on the network.

Root protection function is used against such problem. The port configured with Root protection only plays a role of designated port on every instance. Whenever such port receives a higher-priority BPDU, that is, it is about to turn into non-designated port, it will be set to listening state and not forward packets any more (as if the link to the port is disconnected). So, Root protection takes effect only when it is enabled on a designated port. If the port has not received any higher-priority BPDU for a certain period of time thereafter, it will resume its original state.

Related command: stp root-protection.

Example

Enable Root protection on the Ethernet2/1/1

[SW8800] stp interface Ethernet2/1/1root-protection

30.1.26 stp interface transmit-limit

Syntax

stp interface interface-list transmit-limit packetnum

undo stp interface interface-list transmit-limit

View

System view

Parameter

interface-list: Ethernet port list, containing multiple Ethernet ports and expressed as

interface _list = { { interface_type interface_num | interface_name } [ to { interface_type

30-25

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

interface_num | interface_name } ] }&<1-10>. For detail descriptions of interface_type,

interface_num and interface_name parameters, refer to the corresponding descriptions in Port Command Manual. &<1-10> means that the preceding parameters can be entered up to 10 times.

packetnum: Maximum number of configuration BPDUs that can be transmitted via the port per Hello Time, ranging from 1 to 255 (expressed as a counter value without any units). By default, the transmission limit on every port is 3.

Description

Use the stp interface transmit-limit command to configure an amount limit to the configuration BPDU transmitted via a specified port during the Hello Time in system view.

Use the undo stp interface transmit-limit command to restore the default limit on the specified port in system view.

The larger the value is, the more packets can be transmitted in a time unit, yet the more switch resources will be occupied. With a moderate value, the amount of the BPDUs transmitted during Hello Time via every port can be limited and MSTP will not occupy too many bandwidth resources when the network topology flaps.

Related command: stp transmit-limit.

Example

Set a limit of 5 to the packets transmitted via Ethernet2/1/3 in system view.

[SW8800] stp interface Ethernet2/1/3transmit-limit 5

30.1.27 stp loop-protection

Syntax stp loop-protection undo stp loop-protection

View

Ethernet port view

Parameter

none

Description

Use the stp loop-protection command to enable loop protection function.

Use the undo stp loop-protection command to restore the default setting.

By default, the loop protection function is not enabled.

30-26

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Note:

The port configured with loop protection can only turn into discarding state on every instance. When such port receives no configuration message for a long time, only the port role changes, its discarding state remains unchanged, so no packets are forwarded. In this way, if the peer end cannot send BPDU packets due to error operation, and the port enters forwarding state directly for not receiving configuration message for a long time, no loop will be generated by enabling the loop protection.

Example

Enable loop protection function in Ethernet2/1/1.

[SW8800-Ethernet2/1/1] stp loop-protection

30.1.28 stp max-hops

Syntax

stp max-hops hop

undo stp max-hops

View

System view

Parameter

hop: Specifies the max hops, ranging from 1 to 40. By default, MST region Max Hops is

20.

Description

Use the stp max-hops command to configure the Max Hops of an MST region.

Use the undo stp max-hops command to restore the default Max Hops.

On CIST and MSTIs, the Max Hops configured on the region root determines the max switching network diameter supported by the local MST region. As the BPDU travels from the spanning tree root, each time when it is forwarded by a switch, the max hops will be reduced by 1. The switch discards the configuration BPDU with 0 hops left, thereby limiting the network scale inside the region. If the current switch is a CIST root bridge or MSTI root bridge in an MST region, the Max Hops configured on it will be the network diameter of the spanning tree to limit its scale in the local MST region. The Max

Hops configured on the root bridge in an MST region will be adopted by other switches in the same region.

30-27

3Com Switch 8800 Command Reference Guide

Example

Set the Max Hops of an MST region to 35.

[SW8800] stp max-hops 35

Chapter 30 MSTP Configuration Commands

30.1.29 stp mcheck

Syntax stp mcheck

View

Ethernet port view

Parameter

None

Description

Use the stp mcheck command to perform mcheck on the current port.

If a port of an MSTP switch on a switching network has ever been connected to an STP switch, the port will automatically transit to operate in STP-compatible mode. However, when the STP switch is removed, the port stays in STP-compatible mode and cannot automatically transit back to MSTP mode. In this case, you can perform mCheck operation to transit the port to MSTP mode by force.

Note:

By default, MSTP runs in MSTP mode, which is compatible with RSTP and STP (This mode can recognize MSTP BPDU, STP config BPDU and RSTP config BPDU).

However, the STP switch can only recognize config BPDU (STP BPDU) sent by the

STP and RSTP bridges. After the switch running STP-compatible mode switches back to MSTP mode, it will not send MSTP BPDU if you do not execute the stp mcheck command. Therefore, the connected device still sends config BPDU (STP BPDU) to it, causing the same configuration exist in different regions and other problems.

Remember to perform stp interface mcheck after modifying stp mode.

Related command: stp mode, stp interface mcheck.

Example

Set mcheck parameter for Ethernet2/1/1.

[SW8800-Ethernet2/1/1] stp mcheck

30-28

3Com Switch 8800 Command Reference Guide

30.1.30 stp mode

Chapter 30 MSTP Configuration Commands

Syntax

stp mode { stp | mstp }

undo stp mode

View

System view

Parameter

stp: Configures the MSTP operation mode as STP-compatible.

mstp: Configures the MSTP operation mode as MSTP.

Description

Use the stp mode command to configure MSTP operation mode of the switch.

Use the undo stp mode command to restore the default MSTP operation mode.

By default, switch work in MSTP mode

MSTP and RSTP are compatible and they can recognize the packets of each other.

However, STP cannot recognize MSTP packets. To implement the compatibility, MSTP provides two operation modes, STP-compatible mode and MSTP mode. In

STP-compatible mode, the switch sends STP BPDU packets via every port. In MSTP mode, the switch ports send MSTP BPDU packets. When detecting it is connected to an STP switch (it receives config BPDU packets from the STP switch), the switch port enters automatically STP-compatible mode and sends config BPDU packets from the

STP switch. The port enters MSTP mode only when receiving MSTP BPDU packets again.

Related command: stp mcheck, stp, stp interface, stp interface mcheck.

Example

Set MSTP operation mode as STP-compatible.

[SW8800] stp mode stp

30.1.31 stp pathcost-standard

Syntax

stp pathcost-standard { dot1t | dot1d-1998 | legacy }

View

System view

30-29

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 30 MSTP Configuration Commands

dot1t, dot1d-1998, legacy : Three standards of the path cost calculation on STP port.

Description

Use the stp pathcost-standard command to set the path cost calculation standard on

STP port.

The port rate must be obtained first before you can calculate the path cost of a port as the path cost is associated with the port rate. The three standards use their own way to work out the port rate, based on which each standard calculates the port path cost by a certain algorithm.

By default, DOT1T calculation standard is applied.

Example

Set the DOT1D-1998 as the path cost calculation standard on the STP port.

[SW8800]stp pathcost-standard dot1d-1998

30.1.32 stp point-to-point

Syntax

stp point-to-point { force-true | force-false | auto }

undo stp point-to-point

View

Ethernet port view

Parameter

force-true: Indicates the Ethernet port connected to a point-to-point link.

force-false: Indicates the Ethernet port not connected to a point-to-point link.

auto: Configures to automatically check if the link to the Ethernet port is a point-to-point link.

Description

Use the stp point-to-point command to configure the current Ethernet port (not) to connect with point-to-point link.

Use undo stp point-to-point command to configure the link state to the default state in which MSTP automatically detects if the link to the Ethernet port is point-to-point link.

By default, switch adopts auto mode.

The port not connected with the point-to-point link cannot transit fast.

30-30

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

The master ports of the link aggregation and the ports operating in full-duplex mode are connected to the point-to-point link. You are recommended to keep the default settings and let MSTP detect the link state automatically.

This configuration takes effect on the CIST and all the MSTIs. The settings of a port whether to connect the point-to-point link will be applied to all the MSTIs where the port belongs. Note that a temporary loop may be redistributed if you configure a port not physically connected with the point-to-point link as connected to such a link by force.

Related command: stp interface point-to-point.

Example

Configure Ethernet2/1/3 to be connected to the point-to-point link.

[SW8800-Ethernet2/1/3] stp point-to-point force-true

30.1.33 stp port priority

Syntax

stp [ instance instance-id ] port priority priority

undo stp [ instance instance-id ] port priority

View

Ethernet port view

Parameter

instance instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16.

The Instance 0 represents CIST.

port priority priority: Specifies the port priority, ranging from 0 to 240, with a step length of 16, e.g., 0, 16, and 32. By default, the priorities of a port on the MSTIs are 128.

Description

Use the stp port prioritycommand to configure the priority of a port on a specified

MSTI.

Use the undo stp port priority command to restore the default priority of the port on the specified MSTI.

You may specify the instance-id parameter as 0 to configure CIST priority of the port.

The port priority has effect on the port role selection. A port can be configured with different priorities on different MSTIs. Thus the traffic from different VLANs can run over different physical links, thereby implementing the VLAN-based load-balancing. MSTP will recalculate the port role and transit its state, upon the port priority changes.

If you execute these command without using the instance instance-id option, your configuration takes effect only on the CIST instance.

30-31

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Caution:

This command will affect the root bridge selection in different instances and even the common root bridge selection, as well as modify the whole network topology. Modify the configuration with caution after you configured them according to the network program.

Related command: stp interface port priority.

Example

Set the priority of Ethernet2/1/3 on MSTI 2 to 16.

[SW8800-Ethernet2/1/3] stp instance 2 port priority 16

30.1.34 stp region-configuration

Syntax stp region-configuration undo stp region-configuration

View

System view

Parameter

None

Description

Use the stp region-configuration command to enter MST region view.

Use the undo stp region-configuration command to restore the default MSTP region configurations.

By default, the three MST region parameters take the default values. The MST region name of the switch is the first MAC address, all the VLANs are mapped to CIST, and

MSTP revision level takes 0.

You can enter MST region view, using the stp region-configuration command. Then you can configure the parameters including region name, revision level, and VLAN mapping table of the region.

Example

Enter MST region view.

30-32

3Com Switch 8800 Command Reference Guide

[SW8800] stp region-configuration

[SW8800-mst-region]

Chapter 30 MSTP Configuration Commands

30.1.35 stp reset-arp

Syntax

stp reset-arp { enable | disable }

View

Ethernet port view

Parameter

None

Description

Use the stp reset-arp enable command to enable reset-arp on the port of the device, removing the MAC address table and dynamic ARP tables of the port.

Use the stp reset-arp disable command tot disable the function.

By default, the function is disabled.

Related command: stp interface reset-arp.

Example

Enable reset-arp on Ethernet port Ethernet3/1/20.

[SW8800-Ethernet3/1/20]stp reset-arp enable

30.1.36 stp instance root secondary

Syntax

stp [ instance instance-id ] root secondary [ bridge-diameter bridgenum ]

[ hello-time centi-senconds ]

undo stp [ instance instance-id ] root

View

System view

Parameter

instance instance-id: Specifies the spanning tree instance ID, ranging from 0 to 16.

Specify it as 0 to configure CIST.

root secondary: Configures the current switch as the secondary root of the designated

MSTI.

30-33

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

bridge-diameter bridgenum: Specifies the network diameter of the spanning tree, ranging from 2 to 7.

hello-time centi-senconds: Specifies the Hello Time of the spanning tree, which is in the range from 100 to 1000 and is measured in centiseconds.

Description

Use thestp root secondary command to configure the current switch as the secondary root bridge of a specified MSTI.

Use the undo stp root command to cancel the current switch for the secondary root bridge of a specified MSTI.

Only when the instance-id parameter is set to 0, can its following parameters take effect.

By default, the switch does not server as a secondary root bridge.

You can configure one or more secondary root bridges in an MSTI. If the primary root is down or powered off, the secondary root will take its place. Among several secondary root bridges, the one with the smallest MAC address takes the place of the failed primary root.

When configuring the secondary root bridge, you may also specify the switching network diameter and the Hello Time of the switch, so that the other two parameters,

Forward Delay and Max Age, of the switch can be determined. To configure the current switch as the root bridge of CIST, simply specify instance-id as 0. You can configure only one root bridge for an MSTI and one or more secondary root bridges for it.

After a switch is configured as a primary root bridge or a secondary root bridge, users cannot modify the bridge priority of the switch.

Example

Configure the current switch as the secondary root bridge of MSTI 4 and specify the diameter of the switching network as 5 and the Hello Time of the switch as 300 centiseconds.

[SW8800] stp instance 4 root primary bridge-diameter 5 hello-time 300

30.1.37 stp root-protection

Syntax stp root-protection undo stp root-protection

View

Ethernet port view

30-34

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 30 MSTP Configuration Commands

Description

Use the stp root-protection command to enable on Root protection the switch.

Use the undo stp root-protection command to restore the default state of Root protection.

By default, Root protection is disabled.

In case of configuration error or malicious attack, the legal primary root may receive the

BPDU with a higher priority and then loose its place, which causes network topology change errors. Due to the illegal change, the traffic supposed to travel over the high-speed link may be pulled to the low-speed link and congestion will occur on the network.

MSTP provides Root protection function to protect the root bridge: The port configured with Root protection only plays a role of designated port on every instance. Whenever such a port receives a higher-priority BPDU, it will be set to listening state and not forward packets any more (as if the link to the port is disconnected). If the port has not received any higher-priority BPDU for a certain period of time thereafter, it will resume the normal state.

Related command: stp interface root-protection.

Example

Enable Root protection on the Ethernet2/1/1 port of the switch.

[SW8800-Ethernet2/1/1] stp root-protection

30.1.38 stp tc-protection

Syntax stp tc-protection enable stp tc-protection disable

View

System view

Parameter

None

Description

Use the stp tc-protection enable command to enable the protection function so that the switch is protected against attack from TC-BPDU packets.

30-35

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

Use the stp tc-protection disable command to disable the protection function.

By default, the protection against TC-BPDU packet attack is enabled.

As a general rule, the switch deletes the corresponding entries in the MAC address table and ARP table upon receiving TC-BPDU packets. Under malicious attacks of

TC-BPDU packets, the switch shall receive a great number of TC-BPDU packets in a very short period. Too frequent delete operations shall consume huge switch resources and bring great risk to network stability.

When the protection from TC-BPDU packet attack is enabled, the switch just perform one delete operation in a specified period (generally, 15 seconds) after receiving

TC-BPDU packets, as well as monitoring whether it receives TC-BPDU packets during this period. Even if it detects a TC-BPDU packet is received in a period shorter than the specified interval, the switch shall not run the delete operation till the specified interval is reached. This can avoid frequent delete operations to the MAC address table and

ARP table.

Example

Enable TC-BPDU protection on the switch.

[SW8800] stp tc-protection enable

30.1.39 stp timer forward-delay

Syntax

stp timer forward-delay centi-senconds

undo stp timer forward-delay

View

System view

Parameter

centi-senconds: Specifies Forward Delay, which is in the range from 400 to 3000 and measured in centiseconds. By default, the Forward Delay of the switch is 1500 centiseconds.

Description

Use the stp timer forward-delay command to configure Forward Delay for the switch.

Use the undo stp timer forward-delay command to restore the default Forward Delay.

To avoid temporary loop, MSTP defines a medium state, Learning, when the port switches from the Discarding state to Forwarding state. There is also a delay before state switchover to guarantee the synchronous switchover with the remote switch. The

Forward Delay configured on the root bridge determines the state transition time.

30-36

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

The root bridge will determine the state transition time according to the configured values, while the other switches will apply the forward delay configured on it.

When configuring Hello time, Forward Delay and Max Age, guarantee the following equations:

2 x (Forward Delay - 1.0 second) >= Max Age

Max Age >= 2 x (Hello Time + 1.0 second)

Only if the above-mentioned formulas are equal can the MSTP normally operate on the entire network. Otherwise, the network may flap frequently. You are recommended to use the stp instance root primary command to specify the diameter of the switching network, so that MSTP can automatically calculate and give the moderate values for the time parameters.

Note:

Hello time, Forward Delay and Max Age affect each other. Modifying any of them will affect the value of other two parameters.

Related command: stp timer hello, stp timer max-age, stp bridge-diameter.

Example

Set the Forward Delay of the device to 2000 centiseconds.

[SW8800] stp timer forward-delay 2000

30.1.40 stp timer hello

Syntax

stp timer hello centi-senconds

undo stp timer hello

View

System view

Parameter

centi-senconds: Specifies Hello Time value with an integer in the range of 100 to 1000 in units of centiseconds. By default, the Hello Time of the switch is 200 centiseconds.

Description

Use the stp timer hello command to configure Hello Time of the switch.

Use the undo stp timer hello command to restore the default Hello Time.

30-37

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

The STP defines to transmit configuration BPDU regularly at an interval specified with

Hello Time to keep the spanning tree stable. If the switch receives no BPDU packets for a period of time, it will recalculate the spanning tree upon the BPDU timeouts. The root bridge transmits BPDU packets at an interval as you configured, while other switches apply the Hello Time configured on the root bridge.

When configuring Hello time, Forward Delay and Max Age, remember to guarantee the following equations:

2 x (Forward Delay -1.0 second) >= Max Age

Max Age >= 2 x (Hello Time + 1.0 second)

Only if the earlier-mentioned formulas are equal can the MSTP normally operate on the entire network. Otherwise, the network may flap frequently. You are recommended to use the stp root primary command to specify the diameter of the switching network, so that MSTP can automatically calculate and give the moderate values for the time parameters.

Related command: stp timer forward-delay, stp timer max-age, stp

bridge-diameter.

Example

Set Hello Time of the switch to 400 centiseconds.

[SW8800] stp timer hello 400

30.1.41 stp timer max-age

Syntax

stp timer max-age centi-senconds

undo stp timer max-age

View

System view

Parameter

centiseconds: Specifies the Max Age, which is in the range from 600 to 4000 and measured with centiseconds. By default, the Max Age of the switch is 2000 centiseconds.

Description

Use the stp timer max-age command to configure the Max Age of the switch.

Use the undo stp timer max-age command to restore the default Max Age.

MSTP can detect the link fault and automatically resume the forwarding state of the redundant link. On the CIST, the switch checks if the configuration BPDU received via

30-38

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands the port expires according to the Max Age. If the BPDU expires, the MSTI has to be calculated again.

Max Age takes no effect on MSTIs. If the current switch is CIST root bridge, it will check if the configuration BPDU expires according to the configured Max Age. Otherwise, the switch adopts the Max Age configured on the CIST root bridge.

When you configure Hello time, Forward Delay and Max Age, remember to guarantee the following equations:

2 x (Forward Delay -1.0 second) >= Max Age

Max Age >= 2 x (Hello Time + 1.0 second)

Only if the earlier-mentioned formulas are equal can the MSTP normally operate on the entire network. Otherwise, the network may flap frequently. You are recommended to use the stp instance root primary command to specify the diameter of the switching network, so that MSTP can automatically calculate and give the moderate values for the time parameters.

Related command: stp timer forward-delay, stp timer hello, stp bridge-diameter.

Example

Set Max Age of the device to 1000 centiseconds.

[SW8800] stp timer max-age 1000

30.1.42 stp timer-factor

Syntax

stp timer-factor number

undo stp timer-factor

View

System view

Parameter

number: Specifies the multiple of hello time, in the range of 1 to 10. The default value is

3.

Description

Use the stp timer-factor command to configure the multiple of hello time for the switch.

Use the undo stp timer-factor command to restore the default multiple value.

The Ethernet switch transmits STP packets every hello time. Generally, if the switch does not receive the STP packets from the upstream switch for three times of hello time, the switch will decide the upstream switch is dead and will recalculate the topology of the network. Then in steady network, the recalculation may be caused when the

30-39

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands upstream is busy. In this case, users can redefine the timeout interval to a longer time

(four times the hello time or larger) by define the multiple of hello time. It is recommended to set 5, 6 or 7 as the value of multiple in the steady network.

Example

Set the multiple value of hello time to 7.

[SW8800] stp timer-factor 7

30.1.43 stp transmit-limit

Syntax

stp transmit-limit packetnum

undo stp transmit-limit

View

Ethernet port view

Parameter

packetnum: Specifies the amount limit to the transmitted packets, ranging from 1 to 255

(expressed as a counter value without any units). By default, the value is 3.

Description

Use the stp transmit-limit command to configure an amount limit to the configuration

BPDU transmitted via a port during the Hello Time.

Use the undo stp transmit-limit command to restore the default limit.

The larger the value is, the more packets can be transmitted in a time unit, yet the more switch resources will be occupied. With a moderate value, the amount of the BPDUs transmitted during Hello Time via every port can be limited and MSTP will not occupy too many bandwidth resources when the network topology flaps.

Related command: stp interface transmit-limit.

Example

Set a limit of 5 to the packets transmitted via Ethernet2/1/1.

[SW8800-Ethernet2/1/1] stp transmit-limit 5

30.1.44 stp update-arp

Syntax

stp update-arp { enable | disable }

30-40

3Com Switch 8800 Command Reference Guide

View

System view

Parameter

None

Chapter 30 MSTP Configuration Commands

Description

Use the stp update-arp enable command to enable ARP address update. After the

TC-protection feature is enabled, the switch deletes MAC address entries if receiving

TC/TCN packets, and deletes ARP address entries if the newly learned MAC address conflicts with the ARP address.

Use the stp update-arp disable command to restore the former principle for deleting

ARP address entries. That is, when receiving TC/TCN packets, the port broadcasts TC packets to delete the MAC address entries of the port in STP active state on the bridge.

By default, ARP address update is enabled.

Example

Disable ARP address update.

[SW8800] stp update-arp disable

30.1.45 vlan-mapping modulo

Syntax

vlan-mapping modulo modulo

View

MST region view

Parameter

modulo: Specifies the modulus, ranging from 1 to 16.

Description

Use the vlan-mapping modulo command to map fast and symmetrically all VLAN lists to the specified MSTIs according to the modulo operation results.

By default, all the VLANs are mapped to CIST, namely Instance 0.

MSTP describes the association between VLANs and MSTIs with the VLAN mapping table. You can use this command to configure this table. Every VLAN can be mapped to an MSTI as per your configuration.

You cannot map one VLAN to multiple different MSTIs. After you map a VLAN to a

MSTI, if you map it again to another MSTI, the new mapping will overwrite the old one.

30-41

3Com Switch 8800 Command Reference Guide Chapter 30 MSTP Configuration Commands

The vlan-mapping modulo modulo command designates VLAN for every MSTI fast. It maps the VLAN to an MSTI whose ID is (VLAN ID-1)%modulo+1. (Note: (VLAN ID-1)

%modulo performs modulo operation on (VLAN ID-1). Taking the operation modulo 16 as an example, vlan 1 maps to MSTI 1, vlan 2 maps to MSTI2 ...vlan 16 maps to

MSTI16, vlan 17 maps to MSTI 1, and so on.)

Related command: region-name, revision-level, check region-configuration,

active region-configuration

Example

Map VLAN to MSTI based on modulo 16.

[SW8800-mst-region] vlan-mapping modulo 16

30-42

3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands

Chapter 31 802.1x Configuration Commands

31.1 802.1x Configuration Commands

31.1.1 display dot1x

Syntax

display dot1x [ enabled-interface | guest vlan | interface interface-list | sessions |

statistics ]

View

Any view

Parameter

enabled-interface: Configures to display the Ethernet port that starts the 802.1x.

guest vlan: Displays Guest VLAN IDs and specifies the port that enables Guest VLAN.

interface: Configures to display the 802.1x information on the specified interface.

interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.

interface-num specifies a single Ethernet interface in the format interface-num =

{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the

Parameter of the Port Command Manual section.

sessions: Configures to display the session connection information of 802.1x.

statistics: Configures to display the relevant statistics information of 802.1x.

Description

Use display dot1x command to view the relevant information of 802.1x, including configuration information, running state (session connection information) and relevant statistics information.

By default, all the relevant 802.1x information about each interface will be displayed.

This command can be used to display the following information on the specified interface: 802.1x configuration, state or statistics. If no port is specified when executing this command, the system will display all 802.1x related information. For example,

802.1x configuration of all ports, 802.1x session connection information, and 802.1x data statistical information. The output information of this command can help the user to verify the current 802.1x configurations so as to troubleshoot 802.1x.

31-1

3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands

Related command: reset dot1x statistics, dot1x, dot1x retry, dot1x max-user,

dot1x port-control, dot1x port-method, dot1x timer.

Example

Display the configuration information of 802.1x.

<SW8800> display dot1x

Equipment 802.1X protocol is enabled

CHAP authentication is enabled

DHCP-launch is disabled

Proxy trap checker is disabled

Proxy logoff checker is disabled

Configuration: Transmit Period 30 s, Handshake Period 30 s

Quiet Period 60 s, Quiet Period Timer is disabled

Supp Timeout 30 s, Server Timeout 100 s

The maximal retransmitting times 2

Total maximum 802.1x user resource number is 2048

Total current used 802.1x resource number is 0

Ethernet3/1/1 is link-down

802.1X protocol is disabled

Proxy trap checker is disabled

Proxy logoff checker is disabled

The port is a(n) authenticator

Authenticate Mode is auto

Port Control Type is Mac-based

Max on-line user number is 1024

… (Omitted)

31.1.2 dot1x

Syntax

dot1x [ interface interface-list ]

undo dot1x [ interface interface-list ]

View

System view, Ethernet port view

Parameter

interface interface-list: Ethernet port list including several Ethernet ports. interface-list

= { interface-num [ to interface-num ] } & < 1-10 >. interface-num specifies a single

31-2

3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands

Ethernet port in the format interface-num = { interface-type interface-num |

interface-name }, where interface-type specifies the port type, interface-num specifies the port number and interface-name specifies the port name. For the respective meanings and value ranges, read the Parameter of the Port Configuration section.

Description

Use the dot1x command to enable 802.1x on the specified port or globally (i.e., on the current device).

Use the undo dot1x command to disable the 802.1x on the specified port or globally.

By default, 802.1x is disabled on all the ports and globally on the device.

When the dot1x command is used in system view, if the parameter interface-list is not specified, 802.1x will be globally enabled. If the parameter interface-list is specified,

802.1x will be enabled on the specified port. When this command is used in Ethernet port view, the parameter interface-list cannot be input and 802.1x can only be enabled on the current port.

The configuration command can be used to configure the global or port 802.1x performance parameters before or after 802.1x is enabled. Before 802.1x is enabled globally, if the parameters are not configured globally or for a specified port, they will maintain the default values.

After the global 802.1x performance is enabled, only when port 802.1x performance is enabled will the configuration of 802.1x become effective on the port.

If 802.1x is enabled on a port, you cannot configure the maximum number of learned

MAC addresses (by using the mac-address max-mac-count command). and vice versa.

Related command: display dot1x.

Example

Enable 802.1x on Ethernet 3/1/1.

[SW8800] dot1x interface Ethernet 3/1/1

Enable the 802.1x globally.

[SW8800] dot1x

31.1.3 dot1x authentication-method

Syntax

dot1x authentication-method { chap | pap | eap md5-challenge }

undo dot1x authentication-method

View

System view

31-3

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 31 802.1x Configuration Commands

chap: Uses CHAP authentication method.

pap: Uses PAP authentication method.

eap: Uses EAP authentication method. By now, only md5 encryption method is available.

Description

Use the dot1x authentication-method command to configure the authentication method for 802.1x user.

Use the undo dot1x authentication-method command to restore the default authentication method of 802.1x user.

By default, CHAP authentication is used for 802.1x user authentication.

Password Authentication Protocol (PAP) is a kind of authentication protocol with two handshakes. It sends password in the form of simple text.

Challenge Handshake Authentication Protocol (CHAP) is a kind of authentication protocol with three handshakes. It only transmits username but not password. CHAP is more secure and reliable.

In the process of EAP authentication, switch directly sends authentication information of 802.1x user to RADIUS server in the form of EAP packet. It is not necessary to transfer the EAP packet to standard RADIUS packet first and then send it to RADIUS server.

Please note: To realize PAP, CHAP or EAP authentication, RADIUS server should support PAP, CHAP or EAP authentication respectively.

Related command: display dot1x.

Example

Configure 802.1x user to use PAP authentication

[SW8800] dot1x authentication-method pap

31.1.4 dot1x dhcp-launch

Syntax dot1x dhcp-launch

undo dot1x dhcp-launch

View

System view

31-4

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 31 802.1x Configuration Commands

Description

Use the dot1x dhcp-launch command to set 802.1x to disable the switch to trigger the user ID authentication over the users who configure static IP addresses in DHCP environment.

Use the undo dot1x dhcp-launch command to set 802.1x to enable the switch to trigger the authentication over them.

By default, the switch can trigger the user ID authentication over the users who configure static IP addresses in DHCP environment.

Related command: dot1x.

Example

Disable the switch to trigger the authentication over the users who configure static IP addresses in DHCP environment.

[SW8800] dot1x dhcp-launch

31.1.5 dot1x guest-vlan

Syntax

dot1x guest-vlan vlan-id [ interface interface-list ]

undo dot1x guest-vlan vlan-id [ interface interface-list ]

View

System view, Ethernet interface view

Parameter

vlan-id: ID of the VLAN specified as the Guest VLAN. It ranges from 1 to 4094.

interface-list: List of Guest VLAN-enabled ports. Provide this argument in the form of

interface_list = { interface_type interface_num | interface_name } [ to { interface_type

interface_num | interface_name } ] &<1-10>, where the interface_type argument is interface type, the interface_num argument is interface number. (Refer to the Port part in this manual for more information.) Note that the value of the interface_num argument after the to key word cannot be less than that of the one before the to key word.

&<1-10> means you can provide up to 10 interface lists for the command.

Description

Use the dot1x guest-vlan command to enable Guest VLAN on a specific port.

Use the undo dot1x guest-vlan command to disable Guest VLAN.

31-5

3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands

If you execute the dot1x guest-vlan command in system view and do not provide the

interface-list argument, Guest VLAN is enabled on all ports. However, if you provide the

interface-list argument, Guest VLAN is enabled on the ports specified by this argument.

If you execute the dot1x guest-vlan command in Ethernet interface view, this command does not accept the interface-list argument and Guest VLAN is enabled only on the current port.

Example

Specify to perform port-based authentications.

[SW8800] dot1x port-method portbased

Enable Guest VLAN on all ports.

[SW8800] dot1x guest-vlan 1

31.1.6 dot1x max-user

Syntax

dot1x max-user user-number [ interface interface-list ]

undo dot1x max-user [ interface interface-list ]

View

System view, Ethernet port view

Parameter

user-number: Specifies the limit to the amount of supplicants on the port, ranging from 1 to 1024.

By default, the maximum user number is 1024. And a switch can accommodate a total of 2048 users.

interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.

interface-num specifies a single Ethernet interface in the format interface-num =

{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the

Parameter of the Port Command Manual section.

Description

Use the dot1x max-user command to configure a limit to the amount of supplicants on the specified interface of 802.1x.

Use the undo dot1x max-user command to restore the default value.

31-6

3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands

This command is used for setting a limit to the amount of supplicants that 802.1x can hold on the specified interface. This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet interface view and it has effect only on the current interface.

Related command: display dot1x.

Example

Configure the interface Ethernet 3/1/1 to hold no more than 32 users.

[SW8800] dot1x max-user 32 interface Ethernet 3/1/1

31.1.7 dot1x port-control

Syntax

dot1x port-control { auto | authorized-force | unauthorized-force } [ interface

interface-list ]

undo dot1x port-control [ interface interface-list ]

View

System view, Ethernet interface view

Parameter

auto: Automatic identification mode, showing that the initial state of the interface is unauthorized. The user is only allowed to receive or transmit EAPoL packets but not to access the network resources. If the user passes the authentication flow, the interface will switch over to the authorized state and then the user is allowed to access the network resources. This is the most common case.

authorized-force: Forced authorized mode, showing that the interface to always stay in authorized state and the user is allowed to access the network resources without authentication/authorization.

unauthorized-force: Forced unauthorized mode, showing that the interface to always stay in non-authorized mode, the switch does not respond to authentication requests and the user is not allowed to access the network resources.

interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.

interface-num specifies a single Ethernet interface in the format interface-num =

{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the

Parameter of the Port Command Manual section.

31-7

3Com Switch 8800 Command Reference Guide

Description

Chapter 31 802.1x Configuration Commands

Use the dot1x port-control command to configure the mode for 802.1x to perform access control on the specified interface.

Use the undo dot1x port-control command to restore the default access control mode.

By default, the access control mode is auto.

This command is used to set the mode, or the interface state, for 802.1x to perform access control on the specified interface. This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet port view and it has effect only on the current interface.

Related command: display dot1x.

Example

Configure the interface Ethernet 3/1/1 to be in unauthorized-force state.

[SW8800] dot1x port-control unauthorized-force interface ethernet 3/1/1

31.1.8 dot1x port-method

Syntax

dot1x port-method { macbased | portbased } [ interface interface-list ]

undo dot1x port-method [ interface interface-list ]

View

System view, Ethernet interface view

Parameter

macbased: Configures the 802.1x authentication system to perform authentication on the supplicant based on MAC address.

portbased: Configures the 802.1x authentication system to perform authentication on the supplicant based on interface number.

interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.

interface-num specifies a single Ethernet interface in the format interface-num =

{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the

Parameter of the Port Command Manual section.

31-8

3Com Switch 8800 Command Reference Guide

Description

Chapter 31 802.1x Configuration Commands

Use the dot1x port-method command to configure the base for 802.1x to perform access control on the specified interface.

Use the undo dot1x port-method command to restore the default access control base.

By default, the value is macbased.

This command is used to set the base for 802.1x to perform access control, namely authenticate the users, on the specified interface. When macbased is adopted, the user access this interface must be authenticated independently, and if one successful authentication user is to finish network service, the other accessed users can still use network service. When portbased is adopted, if only the first access user by this interface can be authenticated successfully, the other access users followed can be considered authenticated successfully automatically, but if the first one finish the network service, the other accessed users’ network service will be rejected . .

This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet interface view and it has effect only on the current interface.

Related command: display dot1x.

Example

Authenticate the supplicant based on the interface number on Ethernet 3/1/1.

[SW8800] dot1x port-method portbased interface ethernet 3/1/1

31.1.9 dot1x quiet-period

Command

dot1x quiet-period

undo dot1x quiet-period

View

System view

Parameter

None

Description

Use the dot1x quiet-period command to enable the quiet-period timer.

Use the undo dot1x quiet-period command to disable this timer.

By default, quiet-period timer is disabled.

31-9

3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands

If an 802.1x user has not passed the authentication, the Authenticator will keep quiet for a while (which is specified by quiet-period timer) before launching the authentication again. During the quiet period, the Authenticator does not do anything related to 802.1x authentication.

Related command: display dot1x , dot1x timer.

Example

Enable quiet-period timer.

[SW8800] dot1x quiet-period

31.1.10 dot1x retry

Syntax

dot1x retry max-retry-value

undo dot1x retry

View

System view

Parameter

max-retry-value: Specifies the maximum times an Ethernet switch can retransmit the authentication request frame to the supplicant, ranging from 1 to 10.

By default, the value is 2, that is, the switch can retransmit the authentication request frame to the supplicant for 2 times.

Description

Use the dot1x retry command to configure the maximum times an Ethernet switch can retransmit the authentication request frame to the supplicant.

Use the undo dot1x retry command to restore the default maximum retransmission time.

After the switch has transmitted authentication request frame to the user for the first time, if no user response is received during the specified time-range, the switch will re-transmit authentication request to the user. This command is used for specifying how many times the switch can re-transmit the authentication request frame to the supplicant. When the time is 1, the switch is configured to transmit authentication request frame only once. 2 indicates that the switch is configured to transmit authentication request frame once again when no response is received for the first time and so on. This command has effect on all the port after configuration.

Related command: display dot1x.

31-10

3Com Switch 8800 Command Reference Guide

Example

Chapter 31 802.1x Configuration Commands

Configure the current device to transmit authentication request frame to the user for no more than 9 times.

[SW8800] dot1x retry 9

31.1.11 dot1x supp-proxy-check

Syntax

dot1x supp-proxy-check { logoff | trap } [ interface interface-list ]

undo dot1x supp-proxy-check { logoff | trap } [ interface interface-list ]

View

System view, Ethernet interface view

Parameter

logoff: Cuts network connection to a user upon detecting the use of proxy.

trap: Sends trap message upon detecting a user using proxy to access the switch.

interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to interface-num ] } & < 1-10 >.

interface-num specifies a single Ethernet interface in the format interface-num =

{ interface-type interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the

Parameter of the Port Command Manual section.

Description

Use the dot1x supp-proxy-check command to configure the control method for

802.1x access users via proxy logon the specified interface.

Use the undo dot1x supp-proxy-check command to cancel the control method set for the 802.1x access users via proxy.

Note that when performing this function, the user logging on via proxy need to run

3Com 802.1x client program,( 3Com 802.1x client program version V1.29 or above is needed).

This command is used to set on the specified interface when executed in system view.

The parameter interface-list cannot be input when the command is executed in

Ethernet Port view and it has effect only on the current interface. After globally enabling proxy user detection and control in system view, only if you enable this feature on a specific port can this configuration take effects on the port.

Related command: display dot1x.

31-11

3Com Switch 8800 Command Reference Guide

Example

Chapter 31 802.1x Configuration Commands

Configure the switch cut network connection to a user upon detecting the use of proxy on Ethernet 2/1/1 ~ Ethernet 2/1/8.

[SW8800] dot1x supp-proxy-check logoff

[SW8800] dot1x supp-proxy-check logoff interface Ethernet 2/1/1 to Ethernet

2/1/8

Configure the switch to send trap message upon detecting the use of proxy on Ethernet

2/1/9.

[SW8800] dot1x supp-proxy-check trap

[SW8800] dot1x supp-proxy-check trap interface Ethernet 2/1/9 or

[SW8800] dot1x supp-proxy-check trap

[SW8800] interface Ethernet 2/1/9

[SW8800-GigabitEthernet2/1/9] dot1x supp-proxy-check trap

31.1.12 dot1x timer

Syntax

dot1x timer { handshake-period handshake-period-value | quiet-period

quiet-period-value | tx-period tx-period-value | supp-timeout supp-timeout-value |

server-timeout server-timeout-value }

undo dot1x timer { handshake-period | quiet-period | tx-period | supp-timeout |

server-timeout }

View

Parameter

System view

handshake-period: This timer begins after the user has passed the authentication.

After setting handshake-period, system will send the handshake packet by the period.

Suppose the dot1x retry time is configured as N, the system will consider the user having logged off and set the user as logoff state if system doesn’t receive the response from user for consecutive N times.

handshake-period-value: Handshake period. The value ranges from 1 to 1024 in units of second and defaults to 30.

quiet-period: Specifies the quiet timer. If an 802.1x user has not passed the authentication, the Authenticator will keep quiet for a while (which is specified by quiet-period timer) before launching the authentication again. During the quiet period, the Authenticator does not do anything related to 802.1x authentication.

31-12

3Com Switch 8800 Command Reference Guide Chapter 31 802.1x Configuration Commands

quiet-period-value: Specifies how long the quiet period is. The value ranges from 10 to

120 in units of second and defaults to 60.

server-timeout: Specifies the timeout timer of an Authentication Server. If an

Authentication Server has not responded before the specified period expires, the

Authenticator will resend the authentication request.

server-timeout-value: Specifies how long the duration of a timeout timer of an

Authentication Server is. The value ranges from 100 to 300 in units of second and defaults to 100 seconds.

supp-timeout: Specifies the authentication timeout timer of a Supplicant. After the

Authenticator sends Request/Challenge request packet which requests the MD5 encrypted text, the supp-timeout timer of the Authenticator begins to run. If the

Supplicant does not respond back successfully within the time range set by this timer, the Authenticator will resend the above packet.

supp-timeout-value: Specifies how long the duration of an authentication timeout timer of a Supplicant is. The value ranges from 10 to 120 in units of second and defaults to

30.

tx-period: Specifies the transmission timeout timer. After the Authenticator sends the

Request/Identity request packet which requests the user name or user name and password together, the tx-period timer of the Authenticator begins to run. If the

Supplicant does not respond back with authentication reply packet successfully, then the Authenticator will resend the authentication request packet.

tx-period-value: Specifies how long the duration of the transmission timeout timer is.

The value ranges from 10 to 120 in units of second and defaults to 30.

Description

Use the dot1x timer command to configure the 802.1x timers.

Use the undo dot1x timer command to restore the default values.

When it is run, 802.1x enables many timers to control the rational and orderly interacting of the Supplicant, the Authenticator and the Authenticator Server. This command can set some of the timers (while other timers cannot be set) to adapt the interaction process. It could be necessary for some special and hard network environment. Generally, the user should keep the default values of the timers.

Related command: display dot1x.

Example

Set the Authentication Server timeout timer is 150s.

[SW8800] dot1x timer server-timeout 150

31-13

3Com Switch 8800 Command Reference Guide

31.1.13 reset dot1x statistics

Chapter 31 802.1x Configuration Commands

Syntax

reset dot1x statistics [ interface interface-list ]

View

User view

Parameter

interface interface-list: Ethernet port list including several Ethernet ports. interface-list

= { interface-num [ to interface-num ] } & < 1-10 >. interface-num specifies a single

Ethernet port in the format port-num = { interface-type interface-num | interface-name }, where interface-type specifies the port type, interface-num specifies the port number and interface-name specifies the port name. For the respective meanings and value ranges, read the Parameter of the Port Configuration section.

Description

Use the reset dot1x statistics command to reset the statistics of 802.1x.

This command can be used to re-perform information statistics if the user wants to delete the former statistics of 802.1x.

When the original statistics is cleared, if no port type or port number is specified, the global 802.1x statistics of the switch and 802.1x statistics on all the ports will be cleared.

If the port type and port number are specified, the 802.1x statistics on the specified port will be cleared.

Related command: display dot1x.

Example

Clear the 802.1x statistics on Ethernet 3/1/2.

<SW8800> reset dot1x statistics interface Ethernet 3/1/2

31-14

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Chapter 32 AAA and RADIUS/TACACS+ Protocol

Configuration Commands

32.1 AAA Configuration Commands

32.1.1 access-limit

Syntax

access-limit { disable | enable max-user-number }

undo access-limit

View

ISP domain view

Parameter

Description

Use the access-limit command to configure a limit to the amount of supplicants in the current ISP domain.

Use the undo access-limit command to restore the limit to the default setting.

By default, there is no limit to the amount of supplicants in the current ISP domain.

This command limits the amount of supplicants contained in the current ISP domain.

The supplicants may contend with each other for the network resources. So setting a suitable limit to the amount will guarantee the reliable performance for the existing supplicants.

Example

disable: No limit to the supplicant number in the current ISP domain.

enable max-user-number: Specifies the maximum supplicant number in the current

ISP domain, ranging from 1 to 2312.

Set a limit of 500 supplicants for the ISP domain, 3Com163.net.

[SW8800-isp-3Com163.net] access-limit enable 500

32.1.2 accounting optional

Syntax accounting optional

32-1

3Com Switch 8800 Command Reference Guide

undo accounting optional

View

ISP domain view

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Parameter

None

Description

Use the accounting optional command to enable accounting to be optional.

Use the undo accounting optional command to disable accounting to be optional.

By default, accounting is not optional. By executing the accounting optional command, you can enable users to utilize the network resources even when no accounting server is available or the switch fails to communicate with the accounting server. Users are denied if you do not execute this command under the same circumstance. This command is used when you want the server to authenticate without charging.

Example

Enable accounting option for domain user named 3Com163.net.

[SW8800] domain 3Com163.net

[SW8800-isp-3Com163.net] accounting optional

32.1.3 attribute

Syntax

attribute { ip ip-address | mac mac-address | idle-cut second | access-limit

max-user-number | vlan vlanid | location { nas-ip ip-address port portnum | port

portnum }*

undo attribute { ip | mac | idle-cut | access-limit | vlan | location }*

View

Local user view

Parameter

ip: Specifies the IP address of a user.

mac mac-address: Specifies the MAC address of a user. Where, mac-address takes on the hexadecimal format of X-X-X.

idle-cut second: Allows/Disallows the local users to enable the idle-cut function. (The specific data for this function depends on the configuration of the ISP domain where the

32-2

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands users locate.) The argument minute defines the idle-cut time, which is in the range of 60 to 7200 seconds.

access-limit max-user-number: Specifies the maximum number who access the device by using the current user name. The argument max-user-number is in the range of 1 to 2048.

vlan vlanid: Sets the VLAN attribute of user, in other words, the VLAN to which a user belong. The argument vlanid is an integer in the range of 1 to 4094.

location: Sets the port binding attribute of user.

nas-ip ip-address: IP address of the access server in the event of binding a remote port with a user. The argument ip-address is an IP address in dotted decimal format and defaults to 127.0.0.1 (which represents the local machine).

port portnum: Sets the port with which a user is bound. The argument portnum is represented by “SlotNumber SubSlotNumber PortNumber”. If the bound port has no

SubSlotNumber, the value 0 can be used as the SubSlotNumber.

Description

Use the attribute command to configure some attributes for specified local user.

Use the undo attribute command to cancel the attributes that have been defined for this local user.

As for attributes of the users that are of local LAN service type, user IP address and

MAC address attribute are valid only when the ISP domain authentication scheme is a local authentication scheme, or the ISP domain authentication scheme is a RADIUS authentication scheme and the type of the RADIUS scheme is 3COM.

It should be noted that the argument nas-ip must be defined for a user bound with a remote port, which is unnecessary, however, in the event of a user bound with a local port.

Related command: display local-user.

Example

Configure the IP address 10.110.50.1 to the user 3Com1.

[SW8800-luser-3Com1] attribute ip 10.110.50.1

32.1.4 cut connection

Syntax

cut connection { all | access-type { dot1x | gcm | mac-authentication } | domain

domain-name | interface interface-type interface-num | ip ip-address | mac

mac-address | radius-scheme radius-scheme-name | vlan vlanid | ucibindex

ucib-index | user-name user-name }

32-3

3Com Switch 8800 Command Reference Guide

View

System view

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Description

Use the cut connection command to disconnect a user or a category of users by force.

Related command: display connection.

Example

all : Configures to disconnect all connection.

access-type: Configures to cut a category of connections according to logon type.

dot1x: Specifies 802.1x users.

gcm: Specifies GCM users.

mac-authentication: Specifies users authenticated by MAC addresses.

domain domain-name: Configures to cut the connection according to ISP domain.

domain-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.

mac mac-address: Configures to cut the connection of the supplicant whose MAC address is mac-address. The argument mac-address is in the hexadecimal format

(x-x-x).

radius-scheme radius-server-name: Configures to cut the connection according to

RADIUS scheme name. radius-server-name specifies the RADIUS server name with a character string not exceeding 32 characters.

interface interface-type interface-num: Configures to cut the connection according to the port.

ip ip-address: Configures to cut the connection according to IP address.

vlan vlanid: Configures to cut the connection according to VLAN ID. Here, vlanid ranges from 1 to 4094.

ucibindex ucib-index: Configures to cut the connection according to ucib-index. Here,

ucib-index ranges from 0 to 2311.

user-name user-name: Configures to cut the connection according to user name .

user-name is the argument specifying the username. It is a character string not exceeding 80 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 55 characters.

Cut all the connections in the ISP domain, 3Com163.net.

[SW8800] cut connection domain 3Com163.net

32-4

3Com Switch 8800 Command Reference Guide

32.1.5 display connection

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

display connection [ access-type { dot1x | gcm } | domain domain-name | interface

interface-type interface-number | ip ip-address | mac mac-address | radius-scheme

radius-scheme-name | vlan vlanid | ucibindex ucib-index | user-name user-name ]

View

Any view

Parameter

access-type: Configures to display the supplicants according to their logon type.

dot1x: Specifies 802.1x users.

gcm: Specifies GCM users.

domain domain-name: Configures to display all the users in an ISP domain.

domain-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.

mac mac-address: Configures to display the supplicant whose MAC address is

mac-address. The argument mac-address is in the hexadecimal format (x-x-x).

radius-scheme radius-server-name: Configures to display the supplicant according to

RADIUS server name. radius-server-name specifies the RADIUS server name with a character string not exceeding 32 characters.

interface interface-type interface-number: Configures to display the supplicant according the port.

ip ip-address: Configures to display the user specified with IP address.

vlan vlanid: Configures to display the user specified with VLAN ID. Here, vlanid ranges from 1 to 4094.

ucibindex ucib-index: Configures to display the user specified with ucib-index. Here,

ucib-index ranges from 0 to 2311.

user-name user-name: Configures to display a user specifies with user-name.

user-name is the argument specifying the username. It is a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.

Description

Use the display connection command to view the relevant information of all the supplicants or the specified one(s). The output can help you with the user connection diagnosis and troubleshooting.

32-5

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

If no parameter is specified, this command displays the related information about all connected users.

Related command: cut connection.

Example

Display the relevant information of all the users.

<SW8800> display connection

Total 0 connections matched ,0 listed.

32.1.6 display domain

Syntax

display domain [ isp-name ]

View

Any view

Parameter

isp-name: Specifies the ISP domain name, with a character string not exceeding 24 characters. The specified ISP domain shall have been created.

Description

Use the display domain command to view the configuration of a specified ISP domain or display the summary information of all ISP domains.

By default, this command displays the summary information about all the ISP domains in the system.

This command is used to output the configuration of a specified ISP domain or display the summary information of all ISP domains. If an ISP domain is specified, the configuration information will be displayed exactly the same, concerning the content and format, as the displayed information of the display domain command. The output information can help with ISP domain diagnosis and troubleshooting.

Related command: access-limit, domain, radius scheme, user-template, state,

display domain.

Example

Display the summary information of all ISP domains of the system.

<SW8800> display domain

0 Domain = system

State = Active

RADIUS Scheme = system

Access-limit = Disable

32-6

3Com Switch 8800 Command Reference Guide

Domain User Template:

Idle-cut = Disable

Self-service = Disable

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

32.1.7 display local-user

Syntax

display local-user [ domain isp-name | idle-cut { enable | disable } | service-type

{ ftp | lan-access | ppp | ssh | telnet | terminal } | state { active | block } | user-name

user-name | vlan vlanid ]

View

Any view

Parameter

domain isp-name: Configures to display all the local users in the specified ISP domain.

isp-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.

idle-cut: Configures to display the local users according to the state of idle-cut function.

disable means that the user disables the idle-cut function and enable means the user enables the function. This parameter only takes effect on the users configured as lan-access type. For other types of users, the display local-user idle-cut enable and

display local-user idle-cut disable commands will not display any information.

service-type: Configures to display local user of a specified type. telnet means that the specified user type is telnet.

ftp means that the specified user type is ftp.

lan-access means that the specified user type is lan-access which mainly refers to

Ethernet accessing users, 802.1x supplicants for example.

ppp: Specifies PPP users.

ssh: Specifies SSH users.

terminal: Specifies terminal users.

state { active | block }: Configures to display the local users in the specified state.

active means that the system allows the user requesting network service and block means the system does not allow the user requesting network service.

user-name user-name: Configures to display a local user specified with user-name .

user-name is the argument specifying the username. It is a character string not exceeding 80 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 55 characters.

32-7

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

vlan vlanid: Configures to display the local users belonged to specified VLAN. vlanid is the integer, ranging from 1 to 4094.

Description

Use the display local-user command to view the relevant information about all the local users or the specified one(s).

The output can help you with the fault diagnosis and troubleshooting related to local user.

By default, this command displays the relevant information about all the local users.

Related command: local-user.

Example

Display the relevant information of all the local users.

<SW8800> display local-user

The contents of local user user1:

State: Active ServiceType Mask: None

Idle Cut: Disable

AccessLimit: Disable Current AccessNum: 0

Bind location: Disable

Vlan ID: Disable

IP address: Disable

MAC address: Disable

Total 1 local user(s) Matched,1 listed.

32.1.8 domain

Syntax

domain { isp-name | default { disable | enable isp-name } }

undo domain isp-name

View

System view

Parameter

isp-name: Specifies an ISP domain name. The name is expressed with a character string not exceeding 24 characters, excluding “/”, “: ”, “*”, “? ”, “<”, and “>”.

default enable isp-name: Enables the default ISP domain specified by isp-name.

default disable: Disables the configuration of the default ISP. Restores the default ISP domain to “system”.

32-8

3Com Switch 8800 Command Reference Guide

Description

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Use the domain command to configure an ISP domain or enter the view of an existing

ISP domain.

Use the undo domain command to cancel a specified ISP domain.

By default, a domain named as system has been created in the system. The attributes of system are all default values.

ISP domain is a group of users belonging to the same ISP. Generally, for a username in the userid@isp-name format, taking [email protected] as an example, the isp-name (i.e.3Com163.net) following the @ is the ISP domain name. When the Switch

8800 controls user access, as for an ISP user whose username is in userid@isp-name format, the system will take userid part as username for identification and take isp-name part as domain name.

The purpose of introducing ISP domain settings is to support the application environment with several ISP domains. In this case, an access device may have supplicants from different ISP domains. Because the attributes of ISP users, such as username and password structures, service types, may be different, it is necessary to separate them by setting ISP domains. In ISP domain view, you can configure a complete set of exclusive ISP domain attributes for each ISP domain, which includes

AAA schemes ( RADIUS scheme group applied and so forth.)

For a switch, each supplicant belongs to an ISP domain. The system supports to configure up to 16 ISP domains.

When this command is used, if the specified ISP domain does not exist, the system will create a new ISP domain. All the ISP domains are in the active state when they are created.

Related command: access-limit, radius scheme, state, display domain.

Example

Create a new ISP domain, 3Com163.net, and enters its view.

[SW8800] domain 3Com163.net

New Domain added.

[SW8800-isp-3Com163.net]

32.1.9 idle-cut

Syntax

idle-cut { disable | enable minute flow }

View

ISP domain view

32-9

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

disable: means disabling the user to use idle-cut function.

enable: means enabling the user to use idle-cut function.

minute: Specifies the maximum idle time, ranging from 1 to 120 and measured in minutes.

flow: Minimum data traffic, ranging from 1 to 10,240,000 and measured in bytes.

Description

Use the idle-cut command to configure the user template in the current ISP domain.

By default, after an ISP domain is created, this attribute in user template is disable, that is, the user idle-cut is disabled.

The user template is a set of default user attributes. If a user requesting for the network service does not have some required attributes, the corresponding attributes in the template will be endeavored to him as default ones. The user template of the switch you are using may only provide user idle-cut settings. After a user is authenticated, if the idle-cut is configured to enable or disable by neither the user nor the RADIUS server, the user will adopt the idle-cut state in the template.

Because a user template only works in one ISP domain, it is necessary to configure user template attributes for users from different ISP domain respectively.

Related command: domain.

Example

Enable the user in the current ISP domain, 3Com163.net, to use the idle-cut attribute specified in the user template (that is, enabling the user to use the idle-cut function).

The maximum idle time is 50 minutes and the minimum data traffic is 500 bytes.

[SW8800-isp-3Com163.net] idle-cut enable 50 500

32.1.10 ip pool

Syntax

ip pool pool-number low-ip-address [ high-ip-address ]

undo ip pool pool-number

View

Parameter

System view, ISP domain view

pool-number: Address pool number ranging from 0 to 99.

32-10

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

low-ip-address and high-ip-address: Two ends of the IP address pool. The number of IP addresses in an address pool cannot exceed 1024. If you do not provide the

high-ip-address argument, then the address pool only contains the one specified by the

low-ip-address argument.

Description

Use the ip pool command to create a local IP address pool for PPP users.

Use the undo ip pool command to remove a specified local address pool.

By default, no local IP address pool is created.

After creating an IP address pool in system view, you can use the remote address command to assign IP addresses in it to PPP users.

The IP addresses in an IP address pool created in ISP domain view are mainly for PPP users of the ISP domain. This kind of IP address pools is suitable for ports with many

PPP users connected to them and the available IP address these ports provide are not sufficient. For example, a PPPoE-enabled Ethernet port can accommodate up to 4095 users, but its Virtual Template can have only one IP address pool configured, which contains up to only 1024 IP address. By configuring an ISP domain address pool for the

Ethernet port, PPP users of the ISP can obtain their IP addresses from the IP address pool, through which the tension of the port address pool can be eased.

Related command: remote address.

Example

Create a local IP address pool ranging from 129.102.0.1 to 129.102.0.10.

[SW8800] domain 3Com163.net

[SW8800-isp-3Com163.net] ip pool 0 129.102.0.1 129.102.0.10

32.1.11 level

Syntax

level level

undo level

View

Local user view

Parameter

level: User priority, an integer ranging from 0 to 3.

Description

Use the level command to set user priority.

32-11

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Use the undo level command to restore the default user priority.

By default, the user priority is 0.

Related command: local user.

Note:

If you specify not to authenticate or to authenticate by passwords, the levels of the commands available to an authenticated user are determined by the priority of the user interface. If a user needs to provide user name and password to pass the authentication, the levels of the commands available to an authenticated user are determined by the priority of the user.

Example

Set the user priority to 3.

[SW8800-luser-3Com1] level 3

32.1.12 local-user

Syntax

local-user user-name

undo local-user { user-name | all [ service-type { ftp | lan-access | ppp | ssh | telnet

| terminal } ] }

View

Parameter

System view

user-name : Specifies a local username with a character string not exceeding 80 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 55 characters. The user-name is case-insensitive, so that UserA is the same as usera.

service-type: Specifies the service type.

telnet means that: the specified user type is telnet.

ftp means that: the specified user type is ftp.

lan-access means that the specified user type is lan-access which mainly refers to

Ethernet accessing users, 802.1x supplicants for example.

ppp: Specifies PPP users.

32-12

3Com Switch 8800 Command Reference Guide

ssh: Specifies SSH users.

terminal: Specifies terminal users.

all: All the users.

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Description

Use the local-user command to configure a local user and enter the local user view.

Use the undo local-user command to cancel a specified local user.

By default, no local user.

Related command: display local-user , service-type.

Example

Add a local user named 3Com1.

[SW8800] local-user 3Com1

[SW8800-luser-3Com1]

32.1.13 local-user password-display-mode

Syntax

local-user password-display-mode { cipher-force | auto }

undo local-user password-display-mode

View

System view

Parameter

cipher-force: Forced cipher mode specifies that the passwords of all the accessed users must be displayed in cipher text.

auto: The auto mode specifies that a user is allowed to use the password command to set a password display mode.

Description

Use the local-user password-display-mode command to configure the password display mode of all the accessing users.

Use the undo local-user password-display-mode command to cancel the password display mode that has been set for all the accessing users.

If cipher-force has been adopted, the user efforts of specifying to display passwords in simple text will render useless.

The password display mode of all the accessing users defaults to auto.

Related command: display local-user , password.

32-13

3Com Switch 8800 Command Reference Guide

Example

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Force all the accessing users to display passwords in cipher text.

[SW8800] local-user password-display-mode cipher-force

32.1.14 password

Syntax

password { simple | cipher } password

undo password

View

Local user view

Parameter

simple: Specifies to display passwords in simple text.

cipher: Specifies to display passwords in cipher text.

password: Defines a password, which is a character string of up to 16 characters if it is in simple text and of up to 24 characters if it is in cipher text.

Description

Use the password command to configure a password display mode for local users.

Use the undo password command to cancel the specified password display mode.

If local-user password-display-mode cipher-force has been adopted, the user efforts of using the password command to set the password display mode to simple text (simple) will render useless.

Related command: display local-user.

Example

Set the user 3Com1 to display the password in simple text, given the password is

20030422.

[SW8800-luser-3Com1] password simple 20030422

32.1.15 scheme

Syntax

scheme { radius-scheme radius-scheme-name [ local ] | tacacs+-scheme

tacacs+-scheme-name [ local ] | local | none }

undo scheme { radius-scheme | tacacs+-scheme | none }

32-14

3Com Switch 8800 Command Reference Guide

View

ISP domain view

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

radius-scheme-name: RADIUS scheme name, a string no longer than 32 characters in length.

tacacs+-scheme-name: TACACS+ scheme name, a string no longer than 32 characters in length.

local: Specifies to perform local authentications.

none: Specifies not to perform authentications.

Description

Use the scheme command to configure the AAA scheme used in the current ISP domain.

Use the undo scheme command to restore the default domain AAA scheme.

By default, an AAA scheme specifies to perform local authentications.

The scheme command specifies a RADIUS/TACACS+ scheme for the current ISP domain. The specified scheme must be an existing scheme.

You can use the radius-scheme radius-scheme-name local or tacacs+-scheme

tacacs+-scheme-name local command to specify to perform local authentications in case the RADIUS server or the TACACS server fails to respond properly. That is, local authentications are performed only when the RADIUS server or the TACACS server fails.

If you specify local authentications to be the primary scheme, then only local authentications are performed and you cannot adopt RADIUS and TACACS+ scheme simultaneously. In this case, the none and local keywords act the same.

Related command: radius scheme, tacacs+ scheme.

Example

With 3Com163.net as the current ISP domain, specify to adopt the RADIUS scheme named 3Com.

[SW8800-isp-3Com163.net] scheme radius-scheme 3Com

Specify the ISP domain named 3Com to adopt the scheme named rd, with local authentication as the secondary authentication scheme.

[SW8800-isp-3Com] scheme radius-scheme rd local

Specify the ISP domain named 3Com to adopt tacacs+-scheme hwtac scheme, with local authentication as the secondary authentication scheme.

[SW8800-isp-3Com] scheme tacacs+-scheme hwtac local

32-15

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

32.1.16 private-group-id mode standard

Syntax private-group-id mode standard undo private-group-id mode standard

View

System view

Parameter

private-group-id: Specifies the way to represent the RADIUS attribute

private-group-id.

mode: Specifies the way to represent the RADIUS attribute private-group-id.

standard: Specify to code the RADIUS attribute private-group-id according to RFC

2868.

Description

Use the private-group-id mode standard command to configure VLAN delivering mode. A VLAN ID can be a string.

By default, a switch does not support a VLAN ID delivered by a RADIUS server to be of string type.

Dynamic VLAN delivering enables an Ethernet switch to monitor network resources available to users by adding the ports to which the authenticated users connect to different VLANS according to the attributes delivered by RADIUS servers. To work with

Guest VLAN, ports are usually configured to perform port-based authentications. (If you configure a port to perform MAC address-based authentications, it can have only one user connected.)

Example

Configure the VLAN delivering mode to be of string type.

[SW8800] private_group_id mode standard

32.1.17 self-service-url

Syntax

self-service-url enable url-string

self-service-url disable

View

ISP domain view

32-16

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

url-string: The URL (uniform resource locator) of the Web page on a self-service server.

The Web page is used to modify passwords. This argument is a string that is of 1 to 64 characters in length. Do not provide character of “?” in this argument. If an URL contains "?", replace it with "|" when inputting the URL in the command line.

Description

Use the self-service-url enable command to configure self-service server uniform resource locator (URL).

Use the self-service-url disable command to remove the configuration of self-service server URL.

By default, self-service server URL is not configured on a switch. z z

This command must be incorporated with a RADIUS server (such as a CAMS server) that supports self-service. Self-service means that users can manage their accounts and card numbers by themselves. And a server with the self-service software installed is called a self-service server.

Once this function is enabled on a switch, users can locate the self-service server through the following operations: z

Select "Change user password" on the 802.1x client.

After the client opens the default explorer (IE or NetScape), it locates the specified

URL page used to change the user password on the self-service server.

Change user password on this page.

The "Change user password" option is available only when the user passes the authentication; otherwise, this option is in grey and unavailable.

Example

Specify the URL of the Web page used to change password on the self-service server to be http://10.153.89.94/selfservice/modPasswd1x.jsp|userName.

[SW8800] domain system

[SW8800-isp-system] self-service-url enable http://10.153.89.94/selfservice/modP asswd1x.jsp|userName

32.1.18 service-type

Syntax

service-type { ftp [ ftp-directory directory ] | lan-access | ppp [call-number

call-number | callback-nocheck | callback-number callback-number ] | ssh [ level

level | telnet | terminal ] | telnet [ level level | ssh | terminal ] | terminal [ level level |

ssh | telnet ] }

32-17

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

undo service-type { ftp [ ftp-directory directory ] | lan-access | ppp [call-number

call-number | callback-nocheck | callback-number callback-number ] | ssh [ level

level | telnet | terminal ] | telnet [ level level | ssh | terminal ] | terminal [ level level |

ssh | telnet ] }

View

Local user view

Parameter

telnet: Specifies user type as Telnet.

level level: Specifies the level of Telnet users. The argument level is an integer in the range of 0 to 3 and defaults to 0.

ftp: Specifies user type as ftp.

ftp-directory directory: Specifies the directory of ftp users, directory is a character string of up to 64 characters.

lan-access: Specifies user type to lan-access, which mainly refers to Ethernet accessing users, 802.1x supplicants for example.

ppp: Specifies PPP users.

call-number: Sets the phone number of the caller.

callback-nocheck: Specifies no to check when the modem calls back.

callback-number: Sets the callback number for callback user.

ssh: Specifies SSH users.

Description

Use the service-type command to configure a service type for a particular user.

Use the undo service-type command to cancel the specified service type for the user.

Example

Set to provide the lan-access service for the user 3Com1.

[SW8800-luser-3Com1] service-type lan-access

32.1.19 state

Syntax

state { active | block }

View

ISP domain view, Local user view

32-18

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

active: Configures the current ISP domain (ISP domain view)/current user (local user view) as being in active state, that is, the system allows the users in the domain (ISP domain view) or the current user (local user view) to request network service.

block: Configures the current ISP domain (ISP domain view)/current user (local user view) as being in block state, that is, the system does not allow the users in the domain

(ISP domain view) or the current user (local user view) to request network service.

Description

Use the state command to configure the state of the current ISP domain/ current user.

By default, after an ISP domain is created, it is in the active state (in ISP domain view).

A local user will be active (in local user view) upon its creation.

In ISP domain view, every ISP can either be in active or block state. If an ISP domain is configured to be active, the users in it can request for network service, while in block state, its users cannot request for any network service, which will not affect the users currently online.

Related command: domain.

Example

Set the current ISP domain 3Com163.net to be in the block state. The supplicants in this domain cannot request for the network service.

[SW8800-isp-3Com163.net] state block

Set the user 3Com1 to be in the block state.

[SW8800-luser-3Com1] state block

32.2 RADIUS Protocol Configuration Commands

32.2.1 accounting optional

Syntax accounting optional

undo accounting optional

View

RADIUS scheme view

Parameter

None

32-19

3Com Switch 8800 Command Reference Guide

Description

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Use the accounting optional command to enable the selection of RADIUS accounting option.

Use the undo accounting optional command to disable the selection of RADIUS accounting option.

By default, selection of RADIUS accounting option is disabled.

If no RADIUS server is available or if RADIUS accounting server fails when the

accounting optional is configured, the user can still use the network resource, otherwise, the user will be disconnected.

The user configured with accounting optional command in RADIUS scheme will no longer send real-time accounting update packet or stop accounting packet.

The accounting optional command in RADIUS scheme view is only effective on the accounting that uses this RADIUS scheme.

Example

Enable the selection of RADIUS accounting of the RADIUS scheme named as CAMS.

[SW8800-radius-cams] accounting optional

32.2.2 data-flow-format

Syntax

data-flow-format data { byte | giga-byte | kilo-byte | mega-byte } packet { giga-byte

| kilo-byte | mega-byte | one-packet }

undo data-flow-format

View

RADIUS scheme view

Parameter

data: Sets data unit.

byte: Sets 'byte' as the unit of data flow.

giga-byte: Sets 'giga-byte' as the unit of data flow.

kilo-byte: Sets 'kilo-byte' as the unit of data flow.

mega-byte: Sets 'mega-byte' as the unit of data flow.

packet: Sets data packet unit.

giga-packet: Sets 'giga-packet' as the unit of packet flow.

kilo-packet: Sets 'kilo-packet' as the unit of packet flow.

mega-packet: Sets 'mega-packet' as the unit of packet flow.

32-20

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

one-packet: Sets 'one-packet' as the unit of packet flow.

Description

Use the data-flow-format command to configure the unit of data flow that send to

RADIUS Server.

Use the undo data-flow-format command to restore the unit to the default setting.

By default, the data unit is byte and the data packet unit is one-packet.

Related command, see display radius.

Example

Set the unit of data flow that send to RADIUS Server 3Com is kilo-byte and the data packet unit is kilo-packet.

[SW8800-radius-3Com] data-flow-format data kilo-byte packet kilo-packet

32.2.3 display local-server

Syntax

display local-server { statistics | nas-ip }

View

Any view

Parameter

None

Description

Use the display local-server statistics command to view the statistics of local

RADIUS scheme.

Use the display local-server nas-ip command to view the nas ip that is allowed to access the local-server.

Related command: local-server.

Example

Display the statistics of local RADIUS scheme.

<SW8800> display local-server statistics

The localserver packet statistics:

Receive: 0 Send: 0

Discard: 0 Receive Packet Error: 0

Auth Reveive: 0 Auth Send: 0

Acct Receive: 0 Acct Send: 0

32-21

3Com Switch 8800 Command Reference Guide

32.2.4 display radius

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

display radius [ radius-server-name ]

View

Any view

Parameter

radius-server-name: Specifies the RADIUS scheme name with a character string not exceeding 32 characters. Display all RADIUS scheme when the parameter is not set.

Description

Use the display radius command to view the configuration information of all RADIUS scheme or a specified one.

By default, This command outputs the configuration information about the specified or all the RADIUS scheme.

Related command: radius scheme.

Example

Display the configuration information of all the RADIUS scheme.

<SW8800> display radius

------------------------------------------------------------------

SchemeName =system Index=0 Type=3Com

Primary Auth IP =127.0.0.1 Port=1645 State=active

Primary Acct IP =127.0.0.1 Port=1646 State=active

Second Auth IP =0.0.0.0 Port=1812 State=block

Second Acct IP =0.0.0.0 Port=1813 State=block

Auth Server Encryption Key= 3Com

Acct Server Encryption Key= 3Com

TimeOutValue(in second)=3 RetryTimes=3 RealtimeACCT(in minute)=12

Permitted send realtime PKT failed counts =5

Retry sending times of noresponse acct-stop-PKT =500

Username format =without-domain

Data flow unit =Byte

Packet unit =1

------------------------------------------------------------------

Total 1 RADIUS scheme(s). 1 listed

32-22

3Com Switch 8800 Command Reference Guide

32.2.5 display radius statistics

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

display radius statistics

View

Any view

Parameter

None

Description

Use the display radius statistics command to view the statistics information of

RADIUS packet.

The displayed packet information can help with RADIUS diagnosis and troubleshooting.

Related command: radius scheme.

Example

Display the statistics information of RADIUS packets.

<SW8800> display radius statistics state statistic(total=4120):

DEAD=4120 AuthProc=0 AuthSucc=0

AcctStart=0 RLTSend=0 RLTWait=0

AcctStop=0 OnLine=0 Stop=0

StateErr=0

Receive and Send packets statistic:

Send PKT total :0 Receive PKT total:0

RADIUS received packets statistic:

Code= 2,Num=0 ,Err=0

Code= 3,Num=0 ,Err=0

Code= 5,Num=0 ,Err=0

Code=11,Num=0 ,Err=0

Code=22,Num=0 ,Err=0

Running statistic:

RADIUS received messages statistic:

Normal auth request ,Num=0 ,Err=0 ,Succ=0

EAP auth request ,Num=0 ,Err=0 ,Succ=0

Account request ,Num=0 ,Err=0 ,Succ=0

32-23

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Account off request ,Num=0 ,Err=0 ,Succ=0

Leaving request ,Num=0 ,Err=0 ,Succ=0

PKT auth timeout ,Num=0 ,Err=0 ,Succ=0

PKT acct_timeout ,Num=0 ,Err=0 ,Succ=0

Realtime Account ,Num=2317 ,Err=0 ,Succ=2317

PKT response ,Num=0 ,Err=0 ,Succ=0

EAP reauth_request ,Num=0 ,Err=0 ,Succ=0

PORTAL access ,Num=0 ,Err=0 ,Succ=0

Update ack ,Num=0 ,Err=0 ,Succ=0

PORTAL access ack ,Num=0 ,Err=0 ,Succ=0

Session ctrl pkt ,Num=0 ,Err=0 ,Succ=0

RADIUS send messages statistic:

Normal auth accept ,Num=0

Normal auth reject ,Num=0

EAP auth accept ,Num=0

EAP auth reject ,Num=0

EAP auth replying ,Num=0

EAP reauth accept ,Num=0

EAP_reauth_reject ,Num=0

Account success ,Num=0

Account failure ,Num=0

Account off ack ,Num=0

Update request ,Num=0

Leaving ack ,Num=0

Cut req ,Num=0

RecError_MSG_sum:0 SndMSG_Fail_sum :0

Timer_Err :0 Alloc_Mem_Err :0

State Mismatch :0 Other_Error :0

No-response-acct-stop packet=0

Discarded No-response-acct-stop packet=0

32.2.6 display stop-accounting-buffer

Syntax

display stop-accounting-buffer { radius-scheme radius-scheme-name | session-id

session-id | time-range start-time stop-time | user-name user-name }

View

Any view

32-24

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

radius-scheme radius-server-name: Configures to display the saved stopping accounting requests according to RADIUS scheme name. radius-server-name specifies the RADIUS scheme name with a character string not exceeding 32 characters.

session-id session-id: Configures to display the saved stopping accounting requests according to the session ID. session-id specifies the session ID with a character string not exceeding 50 characters.

time-range start-time stop-time: Configures to display the saved stopping accounting requests according to the saving time. start-time specifies the start time of the saving time range and stop-time specifies the stop time of the saving time range. The time is expressed in the format hh:mm:ss-yyyy/mm/dd. When this parameter is specified, all the stopping accounting requests saved in the time range since start-time to stop-time will be displayed.

user-name user-name: Configures to display the saved stopping accounting requests according to the username. User-name specifies the username, a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.

Description

Use the display stop-accounting-buffer command to view the stopping accounting requests, which have not been responded and saved in the buffer. You can select to display the packets sent to a certain RADIUS scheme, or display the packets according to user session ID or username. You may also display the request packets saved during a specified time range. The displayed packet information can help with diagnosis and troubleshooting.

After transmitting the stopping accounting requests, if there is no response from the

RADIUS scheme, the switch will save the packet in the buffer and retransmit it for several times, which is set through the retry stop-accounting command.

Related command: reset stop-accounting-buffer, stop-accounting-buffer enable,

retry stop-accounting.

Example

Display the stopping accounting requests saved in the system buffer since 0:0:0 to

23:59:59 on August 31, 2002.

<SW8800> display stop-accounting-buffer time-range 0:0:0-2002/08/31

23:59:59-2002/08/31

Total find 0 record

32-25

3Com Switch 8800 Command Reference Guide

32.2.7 key

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

key { accounting | authentication } string

undo key { accounting | authentication }

View

RADIUS scheme view

Parameter

accounting: Configures to set the encryption key for RADIUS accounting packet.

authentication: Configures to set the encryption key for RADIUS authentication/authorization packet.

string: Specifies the key with a character string not exceeding 16 characters. By default, the key is 3Com.

Description

Use the key command to configure encryption key for RADIUS authentication/authorization or accounting packet.

Use the undo key command, you can restore the default key.

RADIUS client (switch system) and RADIUS scheme use MD5 algorithm to encrypt the exchanged packets. The two ends verify the packet through setting the encryption key.

Only when the keys are identical can both ends accept the packets from each other and give responses. So it is necessary to ensure that the keys set on the switch and the

RADIUS scheme are identical. If the authentication/authorization and accounting are performed on two different servers with different encryption keys, you are supposed to set two encryption keys respectively.

Related command: primary accounting, primary authentication, radius scheme.

Example

Example 1:

Set the authentication/authorization key of the RADIUS scheme, 3Com, to hello.

[SW8800-radius-3Com] key authentication hello

Example 2:

Set the accounting packet key of the RADIUS scheme, 3Com, to ok.

[SW8800-radius-3Com] key accounting ok

32-26

3Com Switch 8800 Command Reference Guide

32.2.8 local-server

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

local-server nas-ip ip-address key password

undo local-server nas-ip ip-address

View

System view

Parameter

nas-ip ip-address: Sets NAS-IP address of access server. ip-address is expressed in the format of dotted decimal. By default, there is a local server with the NAS-IP address of 127.0.0.1.

key password: Sets password of logon user. password is a character string containing up to 16 characters.

Description

Use the local-server command to configure the parameters of local RADIUS server.

Using undo local-server command, you can cancel a local RADIUS server.

RADIUS service, which adopts authentication/authorization/accounting servers to manage users, is widely used in the Switch 8800. Besides, local authentication/authorization service is also used in these products and it is called local

RADIUS function, i.e. realize basic RADIUS function on the switch.

Caution:

z z z

When using local RADIUS server function of 3Com, remember the number of UDP port used for authentication is 1645 and that for accounting is 1646.

The password configured by this command must be the same as that of the

RADIUS authentication/authorization packet configured by the command key

authentication in RADIUS scheme view.

When operating as a local RADIUS server, a Switch 8800 supports CHAP and PAP authentications but not EAP MD5-challenge authentication.

The Switch 8800 supports up to 16 local RADIUS schemes.

Related command: radius scheme, state.

Example

Set the IP address of local RADIUS scheme to 10.110.1.2 and the password to 3Com.

32-27

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf

3Com Switch 8800 Command Reference Guide

[SW8800] local-server nas-ip 10.110.1.2 key 3Com iguration Commands

32.2.9 primary accounting

Syntax

primary accounting ip-address [ port-number ]

undo primary accounting

View

RADIUS scheme view

Parameter

ip-address: IP address, in dotted decimal format.

port-number: Specifies UDP port number. ranging from 1 to 65535.

Description

Use the primary accounting command to configure the IP address and port number for the primary accounting server.

Use the undo primary accounting command to restore the default IP address and port number of the primary RADIUS accounting server. By default, the primary accounting server of the RADIUS scheme created by the system, whose name is

“system”, uses IP address of 127.0.0.1 and UDP port of 1646. The primary accounting server of a newly created RADIUS scheme uses IP address of 0.0.0.0 and UDP port of

1813.

After creating a new RADIUS scheme, you need to set the IP address and the UDP port for the RADIUS servers the scheme contains, such as authentication/authorization server and accounting server. Besides, you can set primary and secondary server for each kind of server. Although, in actual use, these settings depend on specific demands, at least one authentication/authorization server and one accounting server is required. Make sure the port settings on the switch about RADIUS service are identical to those on the RADIUS servers.

Related command: key, radius scheme, state.

Example

Set the IP address of the primary accounting server of RADIUS scheme, “3Com”, to

10.110.1.2 and the UDP port 1813 to provide RADIUS accounting service.

[SW8800-radius-3Com] primary accounting 10.110.1.2 1813

32-28

3Com Switch 8800 Command Reference Guide

32.2.10 primary authentication

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

primary authentication ip-address [ port-number ]

undo primary authentication

View

RADIUS scheme view

Parameter

ip-address: IP address, in dotted decimal format.

port-number: Specifies UDP port number. ranging from 1 to 65535.

Description

Use the primary authentication command to configure the IP address and port number for the primary RADIUS authentication/authorization.

Use the undo primary authentication command to restore the default IP address and port number of the primary RADIUS authentication/authorization.

By default, the primary authentication server of the RADIUS scheme created by the system, whose name is “system”, uses IP address of 127.0.0.1 and UDP port of 1645.

The secondary authentication server uses IP address of 0.0.0.0 and UDP port of 1812.

The primary and secondary authentication server of a newly created RADIUS scheme uses IP address of 0.0.0.0 and UDP port of 1812.

After creating a RADIUS scheme, you are supposed to set IP addresses and UDP port numbers for the RADIUS servers, including primary/secondary authentication/authorization servers and accounting servers. In real networking environments, the above parameters shall be set according to the specific requirements. However, at least you have to set one authentication/authorization server and an accounting server. Besides, ensure that the RADIUS service port settings on the switch is consistent with the port settings on the RADIUS server.

Related command: key, radius scheme , state.

Example

Set the IP address of the primary authentication/authorization server of RADIUS scheme, “3Com”, to 10.110.1.1 and the UDP port 1812 to provide RADIUS authentication/authorization service.

[SW8800-radius-3Com] primary authentication auth 10.110.1.1 1812

32-29

3Com Switch 8800 Command Reference Guide

32.2.11 radius scheme

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

radius scheme radius-server-name

undo radius scheme radius-server-name

View

System view

Parameter

radius-server-name: Specifies the RADIUS scheme name with a character string not exceeding 32 characters.

Description

Use the radius scheme command to configure a RADIUS scheme and enter its view.

Use the undo radius scheme command to delete the specified RADIUS scheme.

By default, RADIUS scheme named as system has been created in the system. The attributes of system are all default values.

RADIUS protocol configuration is performed on a per-RADIUS-scheme basis. Every

RADIUS scheme shall at least have the specified IP address and UDP port number of the RADIUS authentication/authorization/accounting server and some necessary parameters exchanged with the RADIUS client end (switch system). So it is necessary to create the RADIUS scheme and enter its view before performing other RADIUS protocol configurations.

A RADIUS scheme can be used by several ISP domains at the same time. You can configure up to 16 RADIUS schemes, including the default scheme named as system.

Although undo radius scheme can remove a specified RADIUS scheme. However, the default one cannot be removed. Note that a scheme currently in use by the online user cannot be removed.

Related command: key, retry realtime-accounting, radius-scheme, timer

realtime-accounting, stop-accounting-buffer enable, retry stop-accounting,

server-type, state, user-name-format, retry, display radius, display radius

statistics.

Example

Create a RADIUS scheme named “3Com” and enters its view.

[SW8800] radius scheme 3Com

[SW8800-radius-3Com]

32-30

3Com Switch 8800 Command Reference Guide

32.2.12 reset radius statistics

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

reset radius statistics

View

User view

Parameter

None

Description

Use the reset radius statistics command to clear the statistic information related to the RADIUS protocol.

Related command: display radius.

Example

Clear the RADIUS protocol statistics.

<SW8800> reset radius statistics

32.2.13 reset stop-accounting-buffer

Syntax

reset stop-accounting-buffer { radius-scheme radius-scheme-name | session-id

session-id | time-range start-time stop-time | user-name user-name }

View

Parameter

User view

radius-scheme radius-server-name: Configures to delete the stopping accounting requests from the buffer according to the specified RADIUS scheme.

radius-server-name specifies the RADIUS scheme name with a character string not exceeding 32 characters.

session-id session-id: Configures to delete the stopping accounting requests from the buffer according to the specified session ID. session-id specifies the session ID with a character string not exceeding 50 characters.

time-range start-time stop-time: Configures to delete the stopping accounting requests from the buffer according to the saving time. Start-time specifies the start time of the saving time range and stop-time specifies the stop time of the saving time range. The

32-31

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands time is expressed in the format hh:mm:ss-yyyy/mm/dd. When this parameter is set, all the stopping accounting requests saved since start-time to stop-time will be deleted.

user-name user-name: Configures to delete the stopping accounting requests from the buffer according to the username. User-name specifies the username, a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before

@, namely the user ID) cannot exceed 24 characters.

Description

Use the reset stop-accounting-buffer command to reset the stopping accounting requests, which are saved in the buffer and have not been responded.

After transmitting the stopping accounting requests, if there is no response from the

RADIUS scheme, the switch will save the packet in the buffer and retransmit it for several times, which is set through the retry stop-accounting command.

This command is used to delete the stopping accounting requests from the switch buffer. You can select to delete the packets transmitted to a specified RADIUS scheme, or according to the session-id or username, or delete the packets transmitted during the specified time-range.

Related command: stop-accounting-buffer enable, retry stop-accounting, display

stop-accounting-buffer.

Example

Delete the stopping accounting requests saved in the system buffer by the user, [email protected].

<SW8800> reset stop-accounting-buffer user-name [email protected]

Delete the stopping accounting requests saved in the system buffer since 0:0:0 to

23:59:59 on August 31, 2002.

<SW8800> reset stop-accounting-buffer time-range 0:0:0-2002/08/31

23:59:59-2002/08/31

32.2.14 retry

Syntax

retry retry-times

undo retry

View

RADIUS scheme view

32-32

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

retry-times: Specifies the maximum times of retransmission, ranging from 1 to 20. By default, the value is 3.

Description

Use the retry command to configure retransmission times of RADIUS request packet.

Use the undo retry command to restore the retransmission times to default value.

Because RADIUS protocol uses UDP packets to carry the data, its communication process is not reliable. If the RADIUS server has not responded NAS until timeout, NAS has to retransmit RADIUS request packet. Suppose the maximum retransmission times is N. If the accumulative transmission times is more than N-[N/2] but the primary

RADIUS server still gives no answer, the NAS will consider that it has lost the communication with the current RADIUS server and then turn to transmit the request to another RADIUS server.

Setting a suitable retry-time according to the network situation can speed up the system response.

Related command: radius scheme.

Example

Set to retransmit the RADIUS request packet no more than 5 times in the RADIUS scheme “3Com”.

[SW8800-radius-3Com] retry 5

32.2.15 retry realtime-accounting

Syntax

retry realtime-accounting retry-times

undo retry realtime-accounting

View

RADIUS scheme view

Parameter

retry-times: Specifies the maximum times of real-time accounting request failing to be responded, ranging from 1 to 255. By default, the accounting request can fail to be responded up to 5 times.

Description

Use the retry realtime-accounting command to configure the maximum times of real-time accounting request failing to be responded.

32-33

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Use the undo retry realtime-accounting command to restore the maximum times of real-time accounting request failing to be responded to the default value.

RADIUS server usually checks if a user is online with timeout timer. If the RADIUS server has not received the real-time accounting packet from NAS, it will consider that there is line or device failure and stop accounting. Accordingly, it is necessary to disconnect the user at NAS end and on RADIUS server synchronously when some unexpected failure occurs. The Switch 8800 can set the maximum times of real-time accounting request failing to be responded. NAS will disconnect the user if it has not received real-time accounting response from RADIUS server for some specified times.

How to calculate the value of count? Suppose RADIUS server connection will timeout in T and the real-time accounting interval of NAS is t, then the integer part of the result from dividing T by t is the value of count. Therefore, when applied, T is suggested the numbers which can be divided exactly by t.

Related command:radius scheme, timer realtime-accounting.

Example

Allow the real-time accounting request failing to be responded for up to 10 times.

[SW8800-radius-3Com] retry realtime-accounting 10

32.2.16 retry stop-accounting

Syntax

retry stop-accounting retry-times

undo retry stop-accounting

View

RADIUS scheme view

Parameter

retry-times: Maximal retransmission times of a buffered stop-accounting request, ranging from 10 to 65535. By default, the value is 500.

Description

Use the retry stop-accounting command to configure the maximal retransmission times after a stop-accounting request is saved into the buffer due to getting no response.

Use the undo retry stop-accounting command to restore the retransmission times to the default value.

Because the stopping accounting request concerns account balance and will affect the amount of charge, which is very important for both the user and ISP, NAS shall make its best effort to send the message to RADIUS accounting server. Accordingly, if the

32-34

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands message from the switch to RADIUS accounting server has not been responded, the switch shall save it in the local buffer and retransmit it until the server responds or discard the messages after transmitting for specified times.

Related command: reset stop-accounting-buffer, radius scheme, display

stop-accounting-buffer.

Example

#Perform the following configuration such that the switch can retransmit a buffered stop-accounting request to the server configured for the RADIUS scheme “3Com” for up to 1000 times

[SW8800-radius-3Com] retry stop-accounting 1000

32.2.17 secondary accounting

Syntax

secondary accounting ip-address [ port-number ]

undo secondary accounting

View

RADIUS scheme view

Parameter

Description

Use the secondary accounting command to configure the IP address and port number for the secondary RADIUS accounting server.

Use the undo secondary accounting command to restore the IP address and port number to default values.

For detailed information, read the description of the primary accounting command.

Related command: key, radius scheme, state.

Example

ip-address: IP address, in dotted decimal format. By default, the IP addresses of secondary accounting server is at 0.0.0.0.

port-number: Specifies the UDP port number, ranging from 1 to 65535. By default, the accounting service is provided via UDP 1813.

Set the IP address of the secondary accounting server of RADIUS scheme, 3Com, to

10.110.1.1 and the UDP port 1813 to provide RADIUS accounting service.

[SW8800-radius-3Com] secondary accounting 10.110.1.1 1813

32-35

3Com Switch 8800 Command Reference Guide

32.2.18 secondary authentication

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

secondary authentication ip-address [ port-number ]

undo secondary authentication

View

RADIUS scheme view

Parameter

ip-address: IP address, in dotted decimal format. By default, the IP address of secondary authentication/authorization server is 0.0.0.0.

port-number: Specifies the UDP port number, ranging from 1 to 65535. By default, the authentication/authorization service is provided via UDP 1812.

Description

Use the secondary authentication command to configure the IP address and port number for the secondary RADIUS authentication/authorization server.

Use the undo secondary authentication command to restore the IP address and port number to default values.

For detailed information, read the description of the primary authentication command.

Related command: key, radius scheme, state.

Example

Set the IP address of the secondary authentication/authorization server of RADIUS scheme, “3Com”, to 10.110.1.2 and the UDP port 1812 to provide RADIUS authentication/authorization service.

[SW8800-radius-3Com] secondary authentication 10.110.1.2 1812

32.2.19 server-type

Syntax

server-type { 3Com | standard }

undo server-type

View

Parameter

RADIUS scheme view

32-36

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

3Com: Configures the switch system to support the RADIUS scheme of 3Com type, which requires the RADIUS client end (switch system) and RADIUS server to interact according to the private RADIUS protocol regulation and packet format of 3Com

Technologies Co., Ltd.

standard: Configures the switch system to support the RADIUS server of Standard type, which requires the RADIUS client end (switch system) and RADIUS server to interact according to the regulation and packet format of standard RADIUS protocol

(RFC 2138/2139 or newer).

Description

Use the server-type command to configure the RADIUS scheme type supported by the switch.

Use the undo server-type command to restore the RADIUS scheme type to the default value.

The default RADIUS server type of a newly created RADIUS scheme is standard. The

RADIUS server type of the default RADIUS scheme (with a name of “system”), which is created by the system, is 3Com.

The Switch 8800 supports standard RADIUS protocol and the extended RADIUS service platform IP Hotel, 201+ and Portal. This command is used to select the supported RADIUS scheme type.

Related command: radius scheme.

Example

Set RADIUS scheme type of RADIUS scheme , “3Com” , to standard.

[SW8800-radius-3Com] server-type standard

32.2.20 state

Syntax

state { primary | secondary } { accounting | authentication } { block | active }

View

RADIUS scheme view

Parameter

primary: Configures to set the state of the primary RADIUS server.

secondary: Configures to set the state of the secondary RADIUS server.

accounting: Configures to set the state of RADIUS accounting server.

authentication: Configures to set the state of RADIUS authentication/authorization.

block: Configures the RADIUS server to be in the state of block.

32-37

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

active: Configures the RADIUS server to be active, namely the normal operation state.

Description

Use the state command to configure the state of RADIUS server.

By default, all the RADIUS servers in every RADIUS scheme are in the state of active.

For the primary and secondary servers (no matter an authentication/authorization or an accounting server), if the primary server is disconnected to NAS for some fault, NAS will automatically turn to exchange packets with the secondary server. However, after the primary one recovers, NAS will not resume the communication with it at once, instead, it continues communicating with the secondary one. When the secondary one fails to communicate, NAS will turn to the primary one again. This command is used to set the primary server to be active manually, in order that NAS can communicate with it right after the troubleshooting.

When the primary and secondary servers are all active or block, NAS will send the packets to the primary server only.

Related command: radius scheme, primary authentication, secondary

authentication, primary accounting, secondary accounting.

Example

Set the secondary authentication server of RADIUS scheme, “3Com”, to be active.

[SW8800-radius-3Com] state secondary authentication active

32.2.21 stop-accounting-buffer enable

Syntax stop-accounting-buffer enable undo stop-accounting-buffer enable

View

RADIUS scheme view

Parameter

None

Description

Use the stop-accounting-buffer enable command to configure to save the stopping accounting requests without response in the switch system buffer.

Use the undo stop-accounting-buffer enable command to cancel the function of saving the stopping accounting requests without response in the switch system buffer.

By default, enable to save the stopping accounting requests in the buffer.

32-38

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Because the stopping accounting request concerns account balance and will affect the amount of charge, which is very important for both the user and ISP, NAS shall make its best effort to send the message to RADIUS accounting server. Accordingly, if the message from the switch to RADIUS accounting server has not been responded, the switch shall save it in the local buffer and retransmit it until the server responds or discard the messages after transmitting for specified times.

Related command: reset stop-accounting-buffer, radius scheme, display

stop-accounting-buffer.

Example

,Enable the switch to buffer the stop-accounting requests that get no answer from the server configured for the RADIUS scheme "3Com".

[SW8800-radius-3Com] stop-accounting-buffer enable

32.2.22 timer

Syntax

timer seconds

undo timer

View

RADIUS scheme view

Parameter

seconds: RADIUS server response timeout timer, ranging from 1 to 10 and measured in seconds. By default, the value is 3.

Description

Use the timer command to configure RADIUS server response timer.

Use the undo timer command to restore the default value of the timer.

After RADIUS (authentication/authorization or accounting) request packet has been transmitted for a period of time, if NAS has not received the response from RADIUS server, it has to retransmit the message to guarantee RADIUS service for the user.

The period taken is called RADIUS server response timeout time, which is controlled by the RADIUS server response timeout timer in the switch system. This command is used to set this timer.

Setting a suitable timer according to the network situation will enhance the system performance.

Related command: radius scheme, retry.

32-39

3Com Switch 8800 Command Reference Guide

Example

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Set the response timeout timer of RADIUS scheme, “3Com”, to 5 seconds.

[SW8800-radius-3Com] timer 5

32.2.23 timer realtime-accounting

Syntax

timer realtime-accounting minute

undo timer realtime-accounting

View

RADIUS scheme view

Parameter

minute: Real-time accounting interval, ranging from 3 to 60 and measured in minutes. It must be a multiple of 3.By default, the value is 12.

Description

Use the timer realtime-accounting command to configure the real-time accounting interval.

Use the undo timer realtime-accounting command to restore the default interval.

To implement real-time accounting, it is necessary to set a real-time accounting interval.

After the attribute is set, NAS will transmit the accounting information of online users to the RADIUS server regularly.

The value of minute is related to the performance of NAS and RADIUS server. The smaller the value is, the higher the requirement for NAS and RADIUS server is. When there are a large amount of users (more than 1000, inclusive), we suggest a larger value. The following table recommends the ratio of minute value to number of users.

Table 32-1 Recommended ratio of minute to number of users

Number of users

1 to 99

100 to 499

500 to 999

≥1000

3

6

Real-time accounting interval (in minutes)

12

≥15

Related command: retry realtime-accounting , radius scheme.

32-40

3Com Switch 8800 Command Reference Guide

Example

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Set the real-time accounting interval of RADIUS scheme, “3Com”, to 15 minutes.

[SW8800-radius-3Com] timer realtime-accounting 15

32.2.24 user-name-format

Syntax

user-name-format { with-domain | without-domain }

View

RADIUS scheme view

Parameter

with-domain: Specifies to send the username with domain name to RADIUS server.

without-domain: Specifies to send the username without domain name to RADIUS server.

Description

Use the user-name-format command to configure the username format sent to

RADIUS server.

By default, as for the newly created RADIUS scheme, the username sent to RADIUS servers includes an ISP domain name; as for the "system" RADIUS scheme created by the system, the username sent to RADIUS servers excludes the ISP domain name.

The supplicants are generally named in userid@isp-name format. The part following

“@” is the ISP domain name. The switch will put the users into certain ISP domains according to the domain names. However, some earlier RADIUS servers reject the username including ISP domain name. In this case, the username will be sent to the

RADIUS server after its domain name is removed. Accordingly, the switch provides this command to decide whether the username to be sent to RADIUS server carries ISP domain name or not.

Note:

If a RADIUS scheme is configured to reject usernames including ISP domain names, the RADIUS scheme shall not be simultaneously used in more than one ISP domains.

Otherwise, the RADIUS server will regard two users in different ISP domains as the same user by mistake, if they have the same username (excluding their respective domain names.)

32-41

3Com Switch 8800 Command Reference Guide

Related command: radius scheme.

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Example

Specify to send the username without domain name to RADIUS scheme.

[SW8800-radius-3Com] user-name-format without-domain

32.3 TACACS+ Configuration Commands

32.3.1 data-flow-format

Syntax

data-flow-format data { byte | giga-byte | kilo-byte | mega-byte }

data-flow-format packet { giga-packet | kilo-packet | mega-packet | one-packet }

undo data-flow-format { data | packet }

View

TACACS+ view

Parameter

data: Sets data unit.

byte: Sets 'byte' as the unit of data flow.

giga-byte: Sets 'giga-byte' as the unit of data flow.

kilo-byte: Sets 'kilo-byte' as the unit of data flow.

mega-byte: Sets 'mega-byte' as the unit of data flow.

packet: Sets data packet unit.

giga-packet: Sets 'giga-packet' as the unit of packet flow.

kilo-packet: Sets 'kilo-packet' as the unit of packet flow.

mega-packet: Sets 'mega-packet' as the unit of packet flow.

one-packet: Sets 'one-packet' as the unit of packet flow.

Description

Use the data-flow-format command to configure the unit of data flow sent to TACACS

Server.

Use the undo data-flow-format command to restore the unit to the default setting.

By default, the data unit is byte and the data packet unit is one-packet.

Related command: display tacacs+.

32-42

3Com Switch 8800 Command Reference Guide

Example

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Set the unit of data flow sent to TACACS Server 3Com to kilo-byte and the data packet unit to kilo-packet.

[SW8800-tacacs+-3Com] data-flow-format data kilo-byte packet kilo-packet

32.3.2 debugging tacacs+

Syntax

debugging tacacs+ { all | error | event | message | receive-packet | send-packet }

undo debugging tacacs+ { all | error | event | message | receive-packet |

send-packet }

View

User view

Parameter

all: Enables all TACACS+ debugging.

error: Enables error debugging.

event: Enables event debugging.

message: Enables message debugging.

receive-packet: Enables incoming packet debugging.

send-packet: Enables outgoing packet debugging.

Description

Use the debugging tacacs+ command to enable TACACS+ debugging.

Use the undo debugging tacacs+ command to disable TACACS+ debugging.

By default, TACACS+ debugging is disabled.

Example

Enable the event debugging of TACACS+.

<SW8800> debugging tacacs+ event

32.3.3 display tacacs+

Syntax

display tacacs+ [ tacacs+-scheme-name]

View

Any view

32-43

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

tacacs+-scheme-name: Scheme name of the TACACS+ server, a string of 1 to 32 case-insensitive characters, excluding "?". If this argument is null, configuration information of all TACACS+ schemes are displayed.

Description

Use the display tacacs+ command to view configuration information of one or all

TACACS+ schemes.

By default, configuration information of all TACACS+ schemes is displayed.

Related command: tacacs+ scheme.

Example

Display the configuration information of the TACACS+ scheme gy.

<SW8800> display tacacs+ gy

--------------------------------------------------------------------

TACACS+-server template name : gy

Primary-authentication-server : 172.31.1.11:49

Primary-authorization-server : 172.31.1.11:49

Primary-accounting-server : 172.31.1.11:49

Secondary-authentication-server : 0.0.0.0:0

Secondary-authorization-server : 0.0.0.0:0

Secondary-accounting-server : 0.0.0.0:0

Current-authentication-server : 172.31.1.11:49

Current-authorization-server : 172.31.1.11:49

Current-accounting-server : 172.31.1.11:49

Source-IP-address : 0.0.0.0

key authentication : 790131

key authorization : 790131

key accounting : 790131

Quiet-interval(min) : 5

Response-timeout-Interval(sec) : 5

Domain-included : No

Traffic-unit : B

Packet traffic-unit : one-packet

32.3.4 display stop-accounting-buffer tacacs+-scheme

Syntax

display stop-accounting-buffer tacacs+-scheme tacacs+-scheme-name

32-44

3Com Switch 8800 Command Reference Guide

View

Any view

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

tacacs+-scheme tacacs+-scheme-name: Displays information on buffered stop-accounting requests related to the TACACS+ scheme specified by

tacacs+-scheme-name, a character string not exceeding 32 characters, excluding “?”.

Description

Use the display stop-accounting-buffer command to view information on the stop-accounting requests buffered in the switch.

Related command: reset stop-accounting-buffer, stop-accounting-buffer enable,

retry stop-accounting.

Example

Display information on the buffered stop-accounting requests related to the TACACS+ scheme “3Com".

<SW8800> display stop-accounting-buffer tacacs+-scheme 3Com

32.3.5 tacacs+ nas-ip

Syntax

tacacs+ nas-ip ip-address

undo tacacs+ nas-ip

View

System view

Parameter

ip-address: IP address of a specified source, which is that of the local host and cannot be a broadcast address of class A, B or C, a class D address, an all-zero address, or an address begins with 127.

Description

Use the tacacs+ nas-ip command to specify the source address of the tacacs+ packet sent from NAS.

Use the undo tacacs+ nas-ip command to restore the default setting.

By specifying the source address of the tacacs+ packet, you can avoid unreachable packets as returned from the server upon interface failure. The source address is normally recommended to be a loopback interface address.

32-45

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

For the tacacs+ nas-ip command, the tacacs+ view takes precedence over the system view.

By default, the source address is not specified, that is, the address of the interface sending the packet serves as the source address.

This command specifies only one source address; therefore, the newly configured source address may overwrite the original one.

Example

Configure the switch to send tacacs+ packets from 129.10.10.1.

[SW8800] tacacs+ nas-ip 129.10.10.1

32.3.6 tacacs+ scheme

Syntax

tacacs+ scheme tacacs+-scheme-name

undo tacacs+ scheme tacacs+-scheme-name

View

System view

Parameter

tacacs+-scheme-name: Name of a TACACS+ scheme, a character string not exceeding 32 characters.

Description

Use the tacacs+ scheme command to enter the TACACS+ view. If you specified a nonexistent scheme, a new TACACS+ scheme will be created.

Use the undo tacacs+ scheme command to delete a TACACS+ scheme.

Example

Create a TACACS+ scheme named test1 and enter the TACACS+ view.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1]

32.3.7 key

Syntax

key { accounting | authentication | authorization } string

undo key { accounting | authentication | authorization } string

32-46

3Com Switch 8800 Command Reference Guide

View

TACACS+ view

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Description

Use the key command to configure a shared key for TACACS+ authentication, authorization or accounting.

Use the undo key command to delete the configuration.

By default, no key is set.

The TACACS+ client (the switch system) and TACACS+ server use MD5 algorithm to encrypt the exchanged packets. The two ends verify packets using a shared key. Only when the same key is used can both ends accept the packets from each other and give responses. So it is necessary to ensure that the same key is set on the switch and the

TACACS+ server. If the authentication/authorization and accounting are performed on two server devices with different shared keys, you must set one shared key for each.

Related command: display tacacs+.

Example

accounting: Shared key of the accounting server.

authentication: Shared key of the authentication server.

authorization: Shared key of the authorization server.

string: Shared key, a string up to 16 characters excluding the characters “?”.

Use “hello” as the shared key for TACACS+ accounting.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] key accounting hello

32.3.8 nas-ip

Syntax

nas-ip ip-address

undo nas-ip

View

TACACS+ view

Parameter

ip-address: Source IP address, in dotted decimal format.

32-47

3Com Switch 8800 Command Reference Guide

Description

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Use the nas-ip command to set the source IP address for TACACS+ packets sent from the NAS (switch), such that all the packets sent to the TACACS server carry the same source IP address.

Use the undo nas-ip command to delete the configuration.

Specifying the source address for sending TACACS+ packet avoids the unreachability of packet returned from the server when the physical interface fails. Generally, the loopback interface address is recommended.

By default, the source IP address of the packets is the IP address of the virtual interface of the VLAN to which the port connecting the server belongs.

Related command: display tacacs+ and tacacs+ nas-ip.

Example

Configure the source IP address for TACACS+ packets sent from the NAS (switch) to

10.1.1.1.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] nas-ip 10.1.1.1

32.3.9 primary accounting

Syntax

primary accounting ip-address [ port ]

undo primary accounting

View

TACACS+ view

Parameter

ip-address: IP address of the server, a valid unicast address in dotted decimal format.

port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.

Description

Use the primary accounting command to configure a primary TACACS accounting server.

Use the undo primary accounting command to delete the configured primary

TACACS accounting server.

By default, the IP address of the TACACS accounting server is all zeros.

You are not allowed to assign the same IP address to both primary and secondary accounting servers.

32-48

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

If you repeatedly use this command, the latest configuration overwrites the previous one.

You can remove a TACACS scheme accounting server only when no active TCP connection used to send accounting packets is now using the server, and the removal impacts only packets forwarded afterwards.

Example

Configure a primary accounting server.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] primary accounting 10.163.155.12 49

32.3.10 primary authentication

Syntax

primary authentication ip-address [ port ]

undo primary authentication

View

TACACS+ view

Parameter

ip-address: IP address of the server, a valid unicast address in dotted decimal format.

port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.

Description

Use the primary authentication command to configure a primary TACACS authentication server.

Use the undo primary authentication command to delete the configured authentication server.

By default, the IP address of the TACACS authentication server is all zeros.

You are not allowed to assign the same IP address to both primary and secondary authentication servers.

If you repeatedly use this command, the latest configuration overwrites the previous one.

You can remove a TACACS scheme authentication server only when no active TCP connection used to send authentication packets uses the server., and the removal impacts only packets forwarded afterwards.

Related command: display tacacs+.

32-49

3Com Switch 8800 Command Reference Guide

Example

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Configure a primary authentication server.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] primary authentication 10.163.155.13 49

32.3.11 primary authorization

Syntax

primary authorization ip-address [ port ]

undo primary authorization

View

TACACS+ view

Parameter

ip-address: IP address of the server, a valid unicast address in dotted decimal format.

port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.

Description

Use the primary authorization command to configure a primary TACACS authorization server.

Use the undo primary authorization command to delete the configured primary authorization server.

By default, the IP address of the TACACS authorization server is all zeros.

You are not allowed to assign the same IP address to both primary and secondary authorization servers.

If you repeatedly use this command, the latest configuration overwrites the previous one.

You can remove a TACACS scheme authorization server only when no active TCP connection used to send authorization packets is now using the server, and the removal impacts only packets forwarded afterwards.

Related command: display tacacs+.

Example

Configure a primary authorization server.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] primary authorization 10.163.155.13 49

32-50

3Com Switch 8800 Command Reference Guide

32.3.12 reset tacacs+ statistics

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

reset tacacs+ statistics { accounting | authentication | authorization | all }

View

User view

Parameter

accounting: Clears all the TACACS+ accounting statistics.

authentication: Clears all the TACACS+ authentication statistics.

authorization: Clears all the TACACS+ authorization statistics.

all: Clears all statistics.

Description

Use the reset tacacs+ statistics command to clear TACACS+ protocol statistics.

Related command: display tacacs+.

Example

Clear all TACACS+ protocol statistics.

<SW8800>reset tacacs+ statistics

32.3.13 reset stop-accounting-buffer

Syntax

reset stop-accounting-buffer tacacs+-scheme tacacs+-scheme-name

View

User view

Parameter

tacacs+-scheme tacacs+-scheme-name: Configures to delete the stop-accounting requests from the buffer according to the specified TACACS+ scheme name. The

tacacs+-scheme-name specifies the TACACS+ scheme name with a character string not exceeding 32 characters, excluding“?”.

Description

Use the reset stop-accounting-buffer command to clear the stop-accounting requests that have no response and are buffered on the switch.

32-51

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Related command: stop-accounting-buffer enable, retry stop-accounting, display

stop-accounting-buffer.

Example

Delete the buffered stop-accounting requests that are related to the TACACS+ scheme

“3Com”.

<SW8800> reset stop-accounting-buffer tacacs+-scheme 3Com

32.3.14 retry stop-accounting

Syntax

retry stop-accounting retry-times

undo retry stop-accounting

View

TACACS+ view

Parameter

retry-times: The maximum number of stop-accounting request attempts. It is in the range 1 to 300 and defaults to 100.

Description

Use the retry stop-accounting command to enable stop-accounting packet retransmission and configure the maximum number of stop-accounting request attempts.

Use the undo retry stop-accounting command to restore the default setting.

By default, stop-accounting packet retransmission is enabled and up to 100 packets are allowed to be transmitted for each request.

Related command: reset stop-accounting-buffer, tacacs+ scheme, and display

stop-accounting-buffer.

Example

Enable stop-accounting packet retransmission and allow up to 50 packets to be transmitted for each request.

[SW8800] retry stop-accounting 50

32.3.15 secondary accounting

Syntax

secondary accounting ip-address [ port ]

32-52

3Com Switch 8800 Command Reference Guide

undo secondary accounting

View

TACACS+ view

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

ip-address: IP address of the server, a valid unicast address in dotted decimal format.

port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.

Description

Use the secondary accounting command to configure a secondary TACACS accounting server.

Use the undo secondary accounting command to delete the configured secondary

TACACS accounting server.

By default, IP address of TACACS accounting server is all zeros.

You are not allowed to assign the same IP address to both primary and secondary accounting servers.

If you repeatedly use this command, the latest configuration overwrites the previous one.

You can remove a TACACS scheme accounting server only when no active TCP connection used to send accounting packets is now using the server, and the removal impacts only packets forwarded afterwards.

Example

Configure a secondary accounting server.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] secondary accounting 10.163.155.12 49

32.3.16 secondary authentication

Syntax

secondary authentication ip-address [ port ]

undo secondary authentication

View

TACACS+ view

Parameter

ip-address: IP address of the server, a valid unicast address in dotted decimal format.

port: Port number of the server, which is in the range 1 to 65535 and defaults to 49.

32-53

3Com Switch 8800 Command Reference Guide

Description

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Use the secondary authentication command to configure a secondary TACACS authentication server.

Use the undo secondary authentication command to delete the configured secondary authentication server.

By default, IP address of TACACS authentication server is all zeros.

You are not allowed to assign the same IP address to both primary and secondary authentication servers.

If you repeatedly use this command, the latest configuration overwrites the previous one.

You can remove a TACACS scheme authentication server only when no active TCP connection used to send authentication packets is now using the server, and the removal impacts only packets forwarded afterwards.

Related command: display tacacs+.

Example

Configure a secondary authentication server.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] secondary authentication 10.163.155.13 49

32.3.17 secondary authorization

Syntax

secondary authorization ip-address [ port ]

undo secondary authorization

View

TACACS+ view

Parameter

ip-address: IP address of the server, a legal unicast address in dotted decimal format.

port: Port number of the server, ranging from 1 to 65535. By default, it is 49.

Description

Use the secondary authorization command to configure a secondary TACACS authorization server.

Use the .undo secondary authorization command to delete the configured secondary authorization server.

By default, IP address of TACACS authorization server is all zeros.

32-54

3Com Switch 8800 Command Reference Guide

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

You are not allowed to assign the same IP address to both primary and secondary authorization servers.

If you repeatedly use this command, the latest configuration overwrites the previous one.

You can remove a TACACS scheme authorization server only when no active TCP connection used to send authorization packets is now using the server, and the removal impacts only packets forwarded afterwards.

Related command: display tacacs+.

Example

Configure the secondary authorization server.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] secondary authorization 10.163.155.13 49

32.3.18 timer quiet

Syntax

timer quiet minutes

undo timer quiet

View

TACACS+ view

Parameter

minutes: Ranges from 1 to 255 minutes. By default, the primary server must wait five minutes before it resumes the active state.

Description

Use the timer quiet command to set the waiting time before the primary server resumes the active state.

Use the undo timer quiet command to restore the default configuration.

This command is designed to inhibit the switch from processing user request packets for a time when the communication between the switch and the server is interrupted.

After the switch waits for a time that is equal or greater than the time set by this command, it re-attempts to send packets to the server.

Related command: display hwtacac.

Example

Set the quiet timer for the primary server to ten minutes.

[SW8800] tacacs+ scheme test1

32-55

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf

3Com Switch 8800 Command Reference Guide

[SW8800-tacacs+-test1] timer quiet 10 iguration Commands

32.3.19 timer realtime-accounting

Syntax

timer realtime-accounting minutes

undo timer realtime-accounting

View

TACACS+ view

Parameter

minutes: Real-time accounting interval, which is in the range of 3 to 60 minutes and must be a multiple of 3. By defaults, it is 12 minutes.

Description

Use the timer realtime-accounting command to set the real-time accounting interval.

Use the undo timer realtime-accounting command to restore the default interval.

The setting of real-time accounting interval is necessary for real-time accounting. After an interval is set, the NAS transmits the accounting information of online users to the

TACACS accounting server periodically.

The setting of real-time accounting interval somewhat depends on the performance of the NAS and the TACACS server: a shorter interval requires higher device performance.

You are therefore recommended to adopt a longer interval when there are a large number of users (more than 1000, inclusive). The following table lists the numbers of users and the recommended intervals.

Table 32-2 Number of users and recommended interval

Number of users

1 – 99

100 – 499

500 – 999

ƒ1000

3

6

Real-time accounting interval ( in minutes)

12

ƒ15

Example

Set the real-time accounting interval of the TACACS+ scheme 3Com to 51 minutes.

[SW8800-tacacs+-3Com] timer realtime-accounting 51

32-56

3Com Switch 8800 Command Reference Guide

32.3.20 timer response-timeout

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

Syntax

timer response-timeout seconds

undo timer response-timeout

View

TACACS+ view

Parameter

seconds: TACACS server response timeout time, which is in the range of 1 to 300 seconds and defaults to 5 seconds.

Description

Use the timer response-timeout command to set the TACACS server response timeout time.

Use the undo timer response-timeout command to restore the default setting.

Note:

Since TACACS+ is implemented based on TCP, so server response timeout or TCP timeout may terminate the connection to the TACACS server.

Related command: display tacacs+.

Example

Set the TACACS server response timeout time to 30 seconds.

[SW8800] tacacs+ scheme test1

[SW8800-tacacs+-test1] timer response-timeout 30

32.3.21 user-name-format

Syntax

user-name-format { with-domain | without-domain }

View

TACACS+ view

32-57

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 32 AAA and RADIUS/TACACS+ Protocol Conf iguration Commands

with-domain: Specifies that the domain name is taken along with the username that will be sent to the TACACS server.

without-domain: Specifies that no domain name is taken along with the username that will be sent to the TACACS server.

Description

Use the user-name-format command to set the username format acceptable to the

TACACS server.

For a TACACS+ scheme, each username sent to a TACACS server contains a domain name by default.

Username is usually in the “userid@isp-name” format, with the ISP domain name following “@”. The switch uses domain names to group users to different ISP domains.

While some earlier TACACS servers do not accept the username with domain name. In this case, you must remove the domain name before sending a username to the server.

Note:

When you specify that no ISP domain name is contained in usernames for a TACACS+ scheme, this scheme cannot be used in two or more ISP domains at the same time; otherwise, errors may occur because the TACACS server considers users in different

ISP domains but with the same name as one user.

Related command: tacacs+ scheme.

Example

Specify that no domain name is taken along with the username that will be sent out with the TACACS+ scheme 3Com.

[SW8800-tacacs+-3Com] user-name-format without-domain

32-58

3Com Switch 8800 Command Reference Guide Chapter 33 VRRP Configuration Commands

Chapter 33 VRRP Configuration Commands

33.1 VRRP Configuration Commands

33.1.1 debugging vrrp

Syntax

debugging vrrp { state | packet | error }

undo debugging vrrp { state | packet | error }

View

User view

Parameter

state: Debugs VRRP state.

packet: Debugs VRRP packets.

error: Debugs VRRP errors.

Description

Use the debugging vrrp command to enable the VRRP debugging.

Use the undo debugging vrrp command to disable the VRRP debugging.

By default, the VRRP debugging is disabled.

Example

Enable VRRP state debugging.

<SW8800> debugging vrrp state

33.1.2 display vrrp

Syntax

display vrrp [ interface vlan-interface interface-num [ virtual-router-ID ] ]

View

Parameter

Any view

interface: Displays the VRRP state of a specified VLAN interface.

vlan-interface interface-num: VLAN interface name.

33-1

3Com Switch 8800 Command Reference Guide Chapter 33 VRRP Configuration Commands

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

Description

Use the display vrrp command to view the information about the VRRP state.

If the interface name and virtual router ID are not specified, the state information about all the virtual routers on the switch will be displayed. If only the interface name is specified, the state information about all the virtual routers on the interface will be displayed. If the interface name and virtual router ID are specified, the state information about the specified virtual router on the interface is displayed.

Example

Display the VRRP state information on VLAN-interface 1.

[SW8800-Vlan-interface1] display vrrp interface vlan-interface 1

Run Method : VIRTUAL-MAC

Virtual Ip Ping : Disable

Interface : Vlan-interface1

VRID : 1 Adver. Timer : 1

Admin Status : UP State : Initialize

Config Pri : 100 Run Pri : 90

Preempt Mode : YES Delay Time : 0

Auth Type : NONE

Track IF : Vlan-interface2 Pri Reduced : 10

Virtual IP : 1.1.1.1

Master IP : 0.0.0.0

Table 33-1 Description on the fields of the display vrrp command

Field

Run Method

Virtual IP ping

Interface

VRID

Adver.Timer

Admin Status

State

Config Pri

Run Pri

Preempt Mode

Delay Time

Description

Run method: real or virtual MAC method

Whether to enable to ping through virtual

IP

Interface in which virtual router resides

ID of virtual router

Interval for sending vrrp packets

Control status of virtual router

Running state of virtual router

Configured priority

Run priority

Preempt mode

Delay time

33-2

3Com Switch 8800 Command Reference Guide

Field

Auth Type

Track IF

Pri Reduced

Virtual IP

Master IP

Chapter 33 VRRP Configuration Commands

Description

Authentication type

Track interface

Reduced priority value for virtual router when track interface is Down

Virtual IP address list of virtual router

IP address of the master device in virtual router

33.1.3 display vrrp statistics

Syntax

display vrrp statistics [ vlan-interface interface-num [ virtual-router-ID ] ]

View

Any view

Parameter

Description

Use the display vrrp statistics command to view the information about the VRRP statistics.

If the interface name and virtual router ID are not specified, the statistics information about all the virtual routers on the switch will be displayed. If only the interface name is specified, the statistics information about all the virtual routers on the interface will be displayed. If the interface name and virtual router ID are specified, the statistics information about the specified virtual router on the interface will be displayed.

Example

vlan-interface interface-num: Specifies the name of the VLAN interface to which the virtual router belongs.

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

Display the VRRP statistics information on VLAN-interface 2.

<SW8800>display vrrp statistics vlan-interface 2

Interface : Vlan-interface2

VRID : 1

CheckSum Errors : 0 Version Errors : 0

VRID Errors : 0 Advertisement Interval Errors : 0

IP TTL Errors : 0 Auth Failures : 0

33-3

3Com Switch 8800 Command Reference Guide Chapter 33 VRRP Configuration Commands

Invalid Auth Type : 0 Auth Type Mismatch : 0

Packet Length Errors : 0 Address List Errors : 0

Become Master : 0 Priority Zero Pkts Rcvd : 0

Advertise Rcvd : 0 Priority Zero Pkts Sent : 0

Advertise Sent : 0 Invalid Type Pkts Rcvd : 0

33.1.4 display vrrp summary

Syntax

display vrrp summary

View

Any view

Parameter

None

Description

Use the display vrrp summary command to view the VRRP summary information on the switch.

Example

Display the VRRP summary information on the switch.

<SW8800>display vrrp summary

Run Method : VIRTUAL-MAC

Virtual Ip Ping : Disable

The total number of the vitual routers: 64

VLANID VRID State Run Adver. Auth Virtual

Pri Time Type IP

--------------------------------------------------------------------------

2 2 Initialize 100 1 NONE 2.2.2.192

3 3 Initialize 100 1 NONE 3.3.3.192

4 4 Initialize 100 1 NONE 4.4.4.192

5 5 Initialize 100 1 NONE 5.5.5.192

6 6 Initialize 100 1 NONE 6.6.6.192

7 7 Initialize 100 1 NONE 7.7.7.192

8 8 Initialize 100 1 NONE 8.8.8.192

9 9 Initialize 100 1 NONE 9.9.9.192

10 10 Initialize 100 1 NONE 10.10.10.192

11 11 Initialize 100 1 NONE 11.11.11.192

12 12 Initialize 100 1 NONE 12.12.12.192

13 13 Initialize 100 1 NONE 13.13.13.192

33-4

3Com Switch 8800 Command Reference Guide Chapter 33 VRRP Configuration Commands

14 14 Initialize 100 1 NONE 14.14.14.192

15 15 Initialize 100 1 NONE 15.15.15.192

16 16 Initialize 100 1 NONE 16.16.16.192

17 17 Initialize 100 1 NONE 17.17.17.192

Table 33-2 Description on the fields of the display vrrp summary command

Field

Run Method

Virtual IP ping

VRID

Adver.Timer

State

Run Pri

Auth Type

Virtual IP

Description

Run method: real or virtual MAC method

Whether to enable to ping through virtual

IP

ID of virtual router

Interval for sending vrrp packets

Running state of virtual router

Run priority

Authentication type

Virtual IP address list of virtual router

33.1.5 reset vrrp statistics

Syntax

reset vrrp statistics [ vlan-interface interface-num [ virtual-router-ID ] ]

View

User view

Parameter

statistics: VRRP statistics.

vlan-interface interface-num: Interface name.

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

Description

Use the reset vrrp statistics command to clear the statistics information about VRRP.

If the interface name and virtual router ID are not specified, the statistics information about all the virtual routers on the switch will be cleared. If only the interface name is specified, the statistics information about all the virtual routers on the interface will be cleared. If the interface name and virtual router ID are specified, the statistics information about the specified virtual router on the interface will be cleared.

33-5

3Com Switch 8800 Command Reference Guide

Example

Clear the VRRP statistics on the switch.

<SW8800> reset vrrp statistics

Chapter 33 VRRP Configuration Commands

33.1.6 vrrp authentication-mode

Syntax

vrrp authentication-mode authentication-type authentication-key

undo vrrp authentication-mode

View

VLAN interface view

Parameter

z z

authentication-type: Authentication type. There are following types:

simple: Indicates to perform simple character authentication.

md5: Indicates to perform the AH authentication with MD5 algorithm.

key: Authentication key, the key cannot exceed 8 characters.

Description

Use the vrrp authentication-mode command to configure the authentication type and key of a specified VRRP virtual router.

Use the undo vrrp authentication-mode command to reset the authentication type and key of a specified VRRP virtual router.

If the simple or md5 authentication is configured, it is required to set the authentication key.

This command is used to configure the authentication type and key for all the VRRP virtual routers on an interface. As defined in the protocol, all the virtual routers on an interface shall use the same authentication type and key. And all the members joining the same virtual router shall also use the same authentication type and key.

The authentication key is case sensitive.

Example

Specify the authentication type and key for a VRRP virtual router.

[SW8800-vlan-interface2] vrrp authentication-mode simple 3Com

33.1.7 vrrp method

Syntax

vrrp method { real-mac | virtual-mac }

33-6

3Com Switch 8800 Command Reference Guide

undo vrrp method

View

System view

Chapter 33 VRRP Configuration Commands

Parameter

real-mac: Uses the real MAC address of the interface to match the virtual IP address of the virtual router in VRRP backup.

virtual-mac: Uses the virtual MAC address of the interface to match the virtual IP address of the virtual router in VRRP backup.

Description

Use vrrp method command to set correspondence between the MAC address and the virtual IP address of the virtual router: matching the real MAC address or the virtual address with the virtual IP address.

Use the undo vrrp method command to reset the correspondence to the default value.

By default, the switch matches the virtual MAC address with the IP address of the virtual router.

Due to the chips installed, some switches support matching one IP address to multiple

MAC addresses. Then you may configure correspondence between the virtual IP address of the virtual router and the real/virtual MAC address.

You should set correspondence between the IP address of the virtual router and the

MAC address before configuring the virtual router. Otherwise, you cannot configure the correspondence.

If you set correspondence between the IP address of the virtual router and the real

MAC address, then you can configure only one virtual router on VLAN interface.

Example

Set the real MAC address of the interface match the virtual IP address of the virtual router.

[SW8800] vrrp method real-mac

33.1.8 vrrp ping-enable

Syntax

vrrp ping-enable

undo vrrp ping-enable

View

System view

33-7

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 33 VRRP Configuration Commands

Description

Use vrrp ping-enable command to enable the function to ping the virtual IP address of the virtual router.

Use the undo vrrp ping-enable command to disable the function.

By default, the ping function is disabled.

You can only use the commands before configuring any virtual router. If a virtual router is already established on the switch, you cannot perform this configuration any more.

Example

Enable to ping the virtual IP address of the virtual router.

[SW8800] vrrp ping-enable

33.1.9 vrrp un-check ttl

Syntax

vrrp un-check ttl

undo vrrp un-check ttl

View

VLAN interface view

Parameter

None

Description

Use the vrrp un-check ttl command to disable the check of TTL value of VRRP packet.

Use the undo vrrp un-check ttl command to enable the check of TTL value of VRRP packet.

The TTL value must be 225. If the switch finds TTL is not 225 when receiving VRRP packet, the packet will be discarded.

By default, the switch checks TTL value of VRRP packets.

Example

Disable to check TTL value of VRRP packet.

[SW8800-vlan-interface2] vrrp un-check ttl

33-8

3Com Switch 8800 Command Reference Guide

33.1.10 vrrp vrid preempt-mode

Chapter 33 VRRP Configuration Commands

Syntax

vrrp vrid virtual-router-ID preempt-mode [ timer delay delay-value ]

undo vrrp vrid virtual-router-ID preempt-mode

View

VLAN interface view

Parameter

Description

Use the vrrp vrid preempt-mode command to configure the preemption and delay of the virtual router.

Use the undo vrrp vrid preempt-mode command to cancel the preemption.

By default, virtual router is in preempt mode and delay-value is 0 second.

If a higher-priority switch is required to preempt the master, you need to configure it as preemption. You can also set a delay for the preemption. If you configure it not to preempt, the delay will be set to 0 automatically.

Example

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

delay-value: Delay in seconds, ranging from 0 to 255.

Configure the switch to preempt.

[SW8800-vlan-interface2] vrrp vrid 1 preempt-mode

Set a delay.

[SW8800-vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5

Configure the switch not to preempt.

[SW8800-vlan-interface2] undo vrrp vrid 1 preempt-mode

33.1.11 vrrp vrid priority

Syntax

vrrp vrid virtual-router-ID priority priority

undo vrrp vrid virtual-router-ID priority

View

VLAN interface view

33-9

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 33 VRRP Configuration Commands

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

priority: Priority value, ranging from 1 to 254; By default, the priority value is 100.

Description

Use the vrrp vrid priority command to configure the virtual router priority.

Use the undo vrrp vrid priority command to remove the virtual router priority.

The priority decides the status of a switch in the virtual router. A higher-priority switch is more likely to be a master. Priority 0 is reserved for some special purpose. 255 is reserved for the IP address owner. The priority of the IP address owner is always 255 and cannot be modified.

Example

Set the virtual router priority on VLAN-interface2.

[SW8800-vlan-interface2] vrrp vrid 1 priority 120

33.1.12 vrrp vrid timer

Syntax

vrrp vrid virtual-router-ID timer advertise adver-interval

undo vrrp vrid virtual-router-ID timer advertise

View

VLAN interface view

Parameter

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

adver-interval: VRRP packet interval of the master in the virtual router in seconds, ranging from 1 to 255; By default, the value is 1s.

Description

Use the vrrp vrid timer command to set the time interval for the master in the virtual router to send VRRP packets.

Use the undo vrrp vrid timer advertise command to restore the default value.

You are supposed to set the identical timer value for the switches in the same virtual router to avoid wrong configuration.

Example

Configure the master to transmit VRRP packets every 15 seconds.

[SW8800-vlan-interface2] vrrp vrid 1 timer advertise 15

33-10

3Com Switch 8800 Command Reference Guide

33.1.13 vrrp vrid track

Chapter 33 VRRP Configuration Commands

Syntax

vrrp vrid virtual-router-ID track vlan-interface interface-num [ reduced

value-reduced ]

undo vrrp vrid virtual-router-ID track [ vlan-interface interface-name ]

View

VLAN interface view

Parameter

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

vlan-interface interface-num: Interface which is to be tracked.

value-reduced: Reduced value of priority, ranging from 1 to 255; By default, the reduced value of priority is 10.

Description

Use the vrrp vrid track command to configure the switch to track the interface.

Use the undo vrrp vrid track command to stop tracking the interface.

VRRP interface track expends the backup function, which thereby can be implemented not only when the switch fails, but also when a network interface is down. The user can use this command to track or stop tracking an interface or all the interfaces. After the command is configured, the priority of the switch will be reduced, if the tracked interface turns down. Accordingly, some other switch in the virtual router will have the comparatively highest priority and become the new master, thereby implementing the backup function. The IP address owner does not allow the configuration of interface tracking.

Each virtual router can track up to eight interfaces.

Example

Set to track vlan-interface1 on vlan-interface2, and lower the priority of virtual router 1 on vlan-interface2 by 50 when vlan-interface1 goes down.

[SW8800-vlan-interface2] vrrp vrid 1 track vlan-interface 1 reduced 50

33.1.14 vrrp vrid virtual-ip

Syntax

vrrp vrid virtual-router-ID virtual-ip ip-address

undo vrrp vrid virtual-router-ID [ virtual-ip virtual-address ]

33-11

3Com Switch 8800 Command Reference Guide

View

VLAN interface view

Parameter

Chapter 33 VRRP Configuration Commands

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

ip-address: Virtual IP address.

Description

Use the vrrp vrid virtual-ip command to create a virtual router or add a virtual IP address to an existing virtual router.

Use the undo vrrp vrid virtual-ip command to cancel an address from the virtual router.

You can add up to 16 virtual IP addresses to one virtual router.

If all of the addresses in a virtual router are deleted, the system will delete the virtual router automatically.

Example

Create a virtual router.

[SW8800-vlan-interface2] vrrp vrid 1 virtual-ip 10.10.10.10

Add a virtual IP address to an existing virtual router.

[SW8800-vlan-interface2] vrrp vrid 1 virtual-ip 10.10.10.11

Delete a virtual IP address.

[SW8800-vlan-interface2] undo vrrp vrid 1 virtual-ip 10.10.10.10

Delete a virtual router.

[SW8800-vlan-interface2] undo vrrp vrid 1

33-12

3Com Switch 8800 Command Reference Guide Chapter 34 HA Configuration Commands

Chapter 34 HA Configuration Commands

34.1 HA Configuration Commands

34.1.1 display switchover state

Syntax

display switchover state [ slot-id ]

View

Any view

Parameter

slot-id: Slot number of the main or secondary Fabric.

Description

Use the display switchover state command to view the backup status of the main or secondary Fabric.

This command is used to display the backup state of the main or secondary Fabric according to the specified slot number. If slot-id is not specified, the status of the Fabric will be displayed.

Example

Display the status of the Fabric.

<SW8800> display switchover state

HA FSM State(master): Slave is absent.

34.1.2 display xbar

Syntax display xbar

View

Parameter

System view

None

34-1

3Com Switch 8800 Command Reference Guide

Description

Chapter 34 HA Configuration Commands

Use the display xbar command to view the load mode of the main or secondary Fabric, which includes the configured system Xbar load mode and the active system Xbar load mode.

Note that the configured system Xbar load mode is not always the same as the active system Xbar load mode. Only when the secondary Fabric is in position or is started, can the system operate in the configured load mode.

Example

Display the load mode of the the main or secondary Fabric.

[SW8800] display xbar

The configured system HA Xbar Load Mode is BALANCE

The active system HA Xbar Load Mode is SINGLE

34.1.3 slave auto-update config

Syntax

slave auto-update config

undo slave auto-update config

View

System view

Parameter

None

Description

Use the slave auto-update config command to enable automatic synchronization between the main and secondary systems.

Use the undo slave auto-update config command to disable automatic synchronization between the main and secondary systems.

By default, automatic synchronization is enabled.

Related command: slave update config.

Example

Enable automatic synchronous switch between the main or secondary systems.

[SW8800] slave auto-update config

34-2

3Com Switch 8800 Command Reference Guide

34.1.4 slave restart

Chapter 34 HA Configuration Commands

Syntax

slave restart

View

User view

Parameter

None

Description

Use the slave restart command to restart the secondary Fabric.

When the secondary system works abnormally, and needs to be reloaded, you can use this command to restart the secondary Fabric.

Example

Implement the restart of the secondary system.

<SW8800> slave restart

The slave will reset! Continue?[Y/N]:y

34.1.5 slave switchover

Syntax

slave switchover

View

User view

Parameter

None

Description

Use the slave switchover command to start the main-secondary switchover manually.

In the environment in which the secondary board is available and master in real-time backup state, the user can inform the secondary board of a main-secondary switchover by using a command if he expects the secondary Fabric to operate in place of the

Fabric. After the switchover, the secondary Fabric will control the system and the original Fabric will be forced to reset.

34-3

3Com Switch 8800 Command Reference Guide

Example

Chapter 34 HA Configuration Commands

Enable main-secondary switchover manually.

<SW8800> slave switchover

Caution!!! Confirm switch slave to master[Y/N]?y

Starting.....

RAM Line....OK

34.1.6 slave update configuration

Syntax

slave update configuration

View

User view

Parameter

None

Description

Use the slave update configuration command to manually synchronize the configuration file between the the main or secondary Fabric.

Related command: slave auto-update config.

Example

Synchronize the configuration file between the main or secondary Fabric.

<SW8800> slave update configuration

34.1.7 xbar

Syntax

xbar [ load-balance | load-single ]

View

System view

Parameter

load-balance: Sets Xbar load balance mode.

load-single: Sets Xbar load single mode.

Description

Use the xbar command to configure the load mode of the main or secondary Fabric.

34-4

3Com Switch 8800 Command Reference Guide Chapter 34 HA Configuration Commands

Note that the configured system Xbar load mode is not always the same as the active system Xbar load mode. Only when the secondary Fabric is in position or is started, can the system operate in the configured load mode..

Example

Configure the system Xbar load mode.

[SW8800] xbar load-balance

34-5

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

Chapter 35 File System Management Commands

35.1 File System

Note:

The limitation on the names of directories and files on switch are as follows: z z

The name of one direction or file can be up to 64 characters long.

The total number of characters including device, directory and file names can be up to 136 characters long.

35.1.1 cd

Syntax

cd directory

View

User view

Parameter

Description

Use the cd command to change the current user configuration path on the Ethernet

Switch.

Example

directory: Destination directory; By default, the directory is the working path configured by the user when the system starts.

Change the current working directory of the switch to flash.

<SW8800>cd flash:

<SW8800>pwd flash:

35.1.2 copy

Syntax

copy fileurl-source fileurl-dest

35-1

3Com Switch 8800 Command Reference Guide

View

User view

Chapter 35 File System Management Commands

Parameter

Description

Use the copy command to copy a file.

You can use this command to copy a file from current directory to another directory, or vise versa. Where, the source filename must be the name of a file that has already existed in the specified directory, and the destination filename can be changed as required. When the destination filename is the same as that of an existing file, the system will ask whether to overwrite it.

Example

fileurl-source: Source file name.

fileurl-dest: Destination file name.

Display current directory information.

<SW8800> dir

Directory of *

0 -rw- 595 Jul 12 2001 19:41:50 test.txt

16125952 bytes total (13975552 bytes free)

Copy the file test.txt and saves it as test.bak.

<SW8800> copy test.txt test.bak

Copy flash:/test/test.txt to flash:/test/test.bak ?[confirm]:y

% Copyed file flash:/test/test.txt flash:/test/test.bak

Display current directory information.

<SW8800> dir

Directory of *

0 -rw- 595 Jul 12 2001 19:41:50 test.txt

1 -rw- 595 Jul 12 2001 19:46:50 test.bak

16125952 bytes total (13974528 bytes free)

35.1.3 delete

Syntax

delete [ /unreserved ] file-url

View

User view

35-2

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 35 File System Management Commands

/unreserved: Delete the file completely.

file-url: path and name of the file you want to delete.

Description

Use the delete command to cancel a specified file from the storage device of the

Ethernet Switch.

This command supports wildcard characters.The deleted files are kept in the recycle bin and will not be displayed when you use the dir command. However they will be displayed, using the dir /all command. The files deleted by the delete command can be recovered with the undelete command or deleted permanently from the recycle bin, using the reset recycle-bin command.

Note that, if two files with the same name in a directory are deleted, only the latest deleted file will be kept in the recycle bin.

Example

Delete the file flash:/test/test.txt

<SW8800> delete flash:/test/test.txt

Delete flash:/test/test.txt?[Y/N]:

35.1.4 dir

Syntax

dir [ /all ] [ file-url ]

View

User view

Parameter

Description

Use the dir command to view the information about the specified file or directory in storage device of Ethernet Switch. This command supports wildcard characters.

Example

/all: Display all the files (including the deleted ones).

file-url: File or directory name to be displayed. The file-url parameter supports “*” matching. For example, using dir *.txt will display all the files with the extension txt in the current directory.

Display the information about the file flash:/test/test.txt

35-3

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

<SW8800> dir flash:/test/test.txt

Directory of flash:/test/

-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:28:52 test.txt

7932928 bytes total (4966400 bytes free)

Display the information about all the files (including the deleted ones) in the flash:/test/ directory.

<SW8800> dir /all flash:/test/

Directory of flash:/test/

-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:28:52 test.txt

1 -rw- 4 Apr 04 2005 20:13:47 [snmpboots]

31877 KB total (2182 KB free)

The files that have already been deleted and kept in the recycle bin are displayed with the [ ] prompt.

Display the information about all the files (including the deleted ones) in the flash:/test/ directory whose names start with the t character.

<SW8800> dir /all flash:/test/t*

Directory of flash:/test/

0 -rw- 1 noone nogroup 971 Sep 20 2003 14:28:52 test.txt

7932928 bytes total (4966400 bytes free)

35.1.5 execute

Syntax

execute filename

View

System view

Parameter

filename: Name of the batch file, ranging from 1 to 256, with a suffix of “.bat”.

Description

Use the execute command to execute the specified batch file.

The batch command executes the command lines in the batch file one by one. There should be no invisible character in the batch file. If invisible characters are found, the batch command will quit the current execution without back off operation. The batch command does not guarantee the execution of each command, nor does it perform hot backup itself. The forms and contents of the commands are not restricted in the batch file.

35-4

3Com Switch 8800 Command Reference Guide

Example

Chapter 35 File System Management Commands

Execute the batch file “test.bat” in the directory of “flash:/”.

[SW8800] execute test.bat

35.1.6 file prompt

Syntax

file prompt { alert | quiet }

View

System view

Parameter

Description

Use the command to Using file prompt command, you can modify prompt modes of the file operation on the Ethernet switch.

If the prompt mode is set as quiet, that is, no prompt for file operations, some non-recoverable operations may lead to system damage.

Example

alert: Performs interactive confirmation on dangerous file operations; The default value is alert, which configures to perform interactive confirmation on dangerous file operations.

quiet: Does not prompt for the file operations.

Configure the prompt mode of file operation as quiet.

[SW8800] file prompt quiet

35.1.7 fixdisk

Syntax

fixdisk device

View

User view

Parameter

device: Device name.

Description

Use the fixdisk command to restore the space of a storage device.

35-5

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

Some of the space of a storage device may be unavailable due to some reason (such as abnormal operations). In this case, you can use this command to restore the space.

Currently, the switch does not support this command on the compact flash (CF) card.

Example

Restore the space of the storage device flash.

<SW8800> fixdisk flash:

35.1.8 format

Syntax

format filesystem

View

User view

Parameter

filesystem: Device name.

Description

Use the format command to format the storage device.

Format operation will cause non-recoverable loss of all the files on the device. Specially, configuration files will be lost after formatting the flash memory.

Example

Format flash.

<SW8800> format flash:

All data on Flash will be lost , proceed with format ? [Y/N] y

% Now begin to format flash, please wait for a while...

Format winc: completed

35.1.9 mkdir

Syntax

mkdir directory

View

User view

Parameter

directory: Directory name, in the range 1 to 136 characters.

35-6

3Com Switch 8800 Command Reference Guide

Description

Chapter 35 File System Management Commands

Use the mkdir command to create directory in the specified directory on the storage device.

The directory to be created cannot have the same name as that of other directory or file in the specified directory.

Example

Create the directory dd.

<SW8800> mkdir dd

% Created dir flash:/dd

35.1.10 more

Syntax

more file-url

View

User view

Parameter

file-url: File name.

Description

Use the more command to view the contents of a specific file.

At present, the file system can display files in text format. This command can be used to display the contents of the files with .txt suffix or .cfg (configuration) suffix.

Example

Display the contents of file test.txt.

<SW8800> more test.txt

AppWizard has created this test application for you.

This file contains a summary of what you will find in each of the files that make up your test application.

Test.dsp

This file (the project file) contains information at the project level and is used to build a single project or subproject. Other users can share the project

(.dsp) file, but they should export the makefiles locally.

35-7

3Com Switch 8800 Command Reference Guide

35.1.11 move

Chapter 35 File System Management Commands

Syntax

move fileurl-source fileurl-dest

View

User view

Parameter

fileurl-source: Source file name.

fileurl-dest: Destination file name.

Description

Use the move command to move files.

When the destination filename is the same as that of an existing file, the system will ask whether to overwrite it.

Example

Display the current directory information.

<SW8800> dir

Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit

-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt

-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots

-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31

0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test

<SW8800> dir flash:/test/

Directory of flash:/test/ drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:36:11 dd

-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:40:05 sample.txt

7932928 bytes total (4963328 bytes free)

Move flash:/test/sample.txt to flash:/sample.txt.

<SW8800> move flash:/test/sample.txt flash:/sample.txt

Move flash:/test/sample.txt to flash:/sample.txt ?[Y/N]:y

% Moved file flash:/test/sample.txt to flash:/sample.txt

Display the directory after moving a file.

<SW8800> dir

Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit

-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt

35-8

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots

-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31

0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test

-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:41:44 sample.txt

7932928 bytes total (4963328 bytes free)

<SW8800> dir flash:/test/

Directory of flash:/test/ drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:36:11 dd

7932928 bytes total (4963328 bytes free)

Note:

The switch has the following limitation on directory name and filename: z

The maximum length of a directory name or filename is 64 characters. z

The maximum length of a full-path filename (including the device name, directory z name, and filename) is 136 characters.

The move command can be successfully executed only when the source file and the destination file are on the same device.

35.1.12 pwd

Syntax pwd

View

User view

Parameter

None

Description

Use the pwd command to view the current path.

Error may occur without setting the current path.

Example

Display the current path.

<SW8800> pwd flash:

35-9

3Com Switch 8800 Command Reference Guide

35.1.13 rename

Chapter 35 File System Management Commands

Syntax

rename fileurl-source fileurl-dest

View

User view

Parameter

Description

Use the rename command to rename a file.

If the destination file name is identical with that of an already existent directory or file, the rename operation fails and the system prompts that name has already been used or the file is being used.

Example

fileurl-source: Source file name.

fileurl-dest: Destination file name.

Display the current directory information.

<SW8800> dir

Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit

-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt

-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots

-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31

0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test

-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:41:44 sample.txt

7932928 bytes total (4963328 bytes free)

Rename the file sample.txt with sample.bak.

<SW8800> rename sample.txt sample.bak

Rename flash:/sample.txt to flash:/sample.bak ?[Y/N]:y

% Renamed file flash:/sample.txt to flash:/sample.bak

Display the directory after renaming sample.txt with sample.bak.

<SW8800>dir

Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit

-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt

-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots

-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31

35-10

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test

-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:44:54 sample.bak

7932928 bytes total (4962304 bytes free)

35.1.14 reset recycle-bin

Syntax

reset recycle-bin [ file-url ]

View

User view

Parameter

file-url: Name of the file to be deleted.

Description

Use the reset recycle-bin command to permanently delete files from the recycle bin.

The file-url supports the wildcard character "*”.The delete command only puts the file into the recycle bin, but reset recycle-bin command will delete this file permanently.

Example

Delete the file from the recycle bin.

<SW8800> reset recycle-bin flash:/ vrpcfg.vrrp

Squeeze flash:/ vrpcgf.vrrp ? [Y/N]:

35.1.15 rmdir

Syntax

rmdir directory

View

User view

Parameter

directory: Directory name.

Description

Use the rmdir command to cancel a directory.

The directory to be deleted must be empty, that is, all the files under the directory should be removed first.

35-11

3Com Switch 8800 Command Reference Guide

Example

Delete the directory 3Com.

<SW8800> rmdir 3Com

Rmdir 3Com?[Y/N]:y

% Removed directory 3Com

Chapter 35 File System Management Commands

35.1.16 umount

Syntax

umount device

View

User view

Parameter

device: Device name. Now, it can only be CF.

Description

Use the umount command to unload the CF card from the file system.

Note: The error message “% Device can’t be found or file can’t be found in the directory” can indicate that the CF card is not formatted.

Example

Unload the CF card from the file system.

<SW8800> umount cf:

35.1.17 undelete

Syntax

undelete file-url

View

User view

Parameter

file-url: Name of the file to be recovered.

Description

Use the undelete command to recover the file that has not been deleted completely.

The file name to be recovered cannot be the same as an existing directory name. If the destination file name is the same as an existing file name, prompt whether to overwrite.

35-12

3Com Switch 8800 Command Reference Guide

Example

Chapter 35 File System Management Commands

Display the information of all the files (including the deleted ones) in the current directory.

<SW8800> dir /all

Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit

-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt

-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots

-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31

0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test

-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:53:32 [sample.bak]

7932928 bytes total (4962304 bytes free)

Recover the deleted file sample.bak.

<SW8800> undelete sample.bak

Undelete flash:/sample.bak ?[Y/N]:y

% Undeleted file flash:/sample.bak

Display the information of all the files (including the deleted ones) in the current directory.

<SW8800> dir /all

Directory of flash:/ drwxrwxrwx 1 noone nogroup - Jun 22 2002 02:19:16 shit

-rwxrwxrwx 1 noone nogroup 971 Jun 30 2003 11:45:19 vrpcfg.txt

-rwxrwxrwx 1 noone nogroup 4 Aug 27 2003 16:56:56 snmpboots

-rwxrwxrwx 1 noone nogroup 2957562 Sep 20 2003 10:49:57 QX-S5516-VRP31

0-0030.app drwxrwxrwx 1 noone nogroup - Sep 20 2003 14:27:58 test

-rwxrwxrwx 1 noone nogroup 971 Sep 20 2003 14:54:16 sample.bak

7932928 bytes total (4962304 bytes free)

35.2 Configuration File Management Commands

35.2.1 display current-configuration

Syntax

display current-configuration [ controller | interface

interface-type

[ interface-number ] | configuration [ configuration ] ] [ | { begin | exclude | include }

regular-expression ]

View

Any view

35-13

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 35 File System Management Commands

controller: Views the configuration information of controllers.

interface: Views the configuration information of interfaces.

interface-type: Type of the interface, including Aux, Ethernet, GigabitEthernet, NULL,

Vlan-interface, M-Ethernet, LoopBack.

interface-number: Number of the interface.

configuration configuration: Views the pre-positive and post-positive configuration information. The value of configuration is the key word of the configuration, such as: z z

system: Views the host name.

timerange: Views the configuration information of time range.

|: Filters the configuration information to be output by regular expression.

begin: Begins with the line that matches the regular expression.

exclude: Excludes lines that match the regular expression.

include: Includes lines that match the regular expression.

regular-expression: Defines the regular expression.

Table 35-1 Special characters in the regular expression

Special characters

Description

_

(

Restriction

Underscore, similar to a wildcard and can stand for these characters:

If the first character in the regular expression is not a underscore, then there is no restriction on the number of the underscore (but it is restricted by the command length)

(^|$|[,(){} ])

A space, the beginning of the input string, the end of the input string

If the first character in the regular expression is an underscore, then there should be less than five consecutive underscores.

If the underscores in a command are discrete, on the first group of underscores are filtered for the output information, but not the subsequent underscores.

Left parenthesis, push It is recommended not to use this flag in program character in the regular expression.

Description

Use the display current-configuration command to display the currently effective configuration parameters of the switch.

If some running configuration parameters are the same with the default operational parameters, they will not be displayed.

35-14

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

If a user needs to authenticate whether the configurations are correct after finishing a set of configuration, the display current-configuration command can be used to display the running parameters. Although the user has configured some parameters, but the related functions are not effective, they are not displayed.

When there is much configuration information, you can use the regular expression to filter the output information. For specific rules about the regular expression, refer to the corresponding operation manual.

Related command: save, reset saved-configuration and display

saved-configuration.

Example

View the running configuration parameters of the switch.

<SW8800> display current-configuration

#

sysname SW8800

# radius scheme system

server-type nec

primary authentication 127.0.0.1 1645

primary accounting 127.0.0.1 1646

user-name-format without-domain domain system

radius-scheme system

access-limit disable

state active

idle-cut disable

domain default enable system

#

local-server nas-ip 127.0.0.1 key 3Com

#

router id 2.2.2.2

#

stp timer hello 500

# vlan 1

# vlan 2

# interface Vlan-interface1

#

35-15

3Com Switch 8800 Command Reference Guide interface Vlan-interface2

ip address 10.1.1.2 255.255.255.0

# interface Aux0/0 interface Aux0/0/1

# interface M-Ethernet0/0/0

# interface Ethernet4/1/1

# interface Ethernet4/1/2

# interface Ethernet4/1/3

# interface Ethernet4/1/4

# interface Ethernet4/1/5

# interface Ethernet4/1/6

# interface Ethernet4/1/7

…

# interface NULL0

# ospf

#

area 0.0.0.0

network 10.1.1.0 0.0.0.255

# user-interface aux 0 user-interface vty 0 4

# return

Chapter 35 File System Management Commands

View the lines containing the character string “10*.110” in the configuration information.

The “*” indicates that the “0” before it can appear 0 times or multiple consecutive times.

<SW8800> display current-configuration | include 10*.110 primary authentication 127.0.0.1 1645

primary accounting 127.0.0.1 1646

local-server nas-ip 127.0.0.1 key 3Com vlan 1 interface Vlan-interface1

35-16

3Com Switch 8800 Command Reference Guide

ip address 10.1.1.2 255.255.255.0 interface Ethernet4/1/1

speed 1000 interface Ethernet4/1/2 interface Ethernet4/1/3 interface Ethernet4/1/4 interface Ethernet4/1/5

network 10.1.1.0 0.0.0.255

Chapter 35 File System Management Commands

View configuration information begin with “user”.

<SW8800> display current-configuration | include ^user user-interface aux 0 user-interface vty 0 4

View the pre-positive and post-positive configuration information.

<SW8800> display current-configuration configuration

#

sysname SW8800

# radius scheme system

server-type nec

primary authentication 127.0.0.1 1645

primary accounting 127.0.0.1 1646

user-name-format without-domain domain system

radius-scheme system

access-limit disable

state active

idle-cut disable

domain default enable system

#

local-server nas-ip 127.0.0.1 key 3Com

#

router id 2.2.2.2

#

stp timer hello 500

# ospf

#

area 0.0.0.0

network 10.1.1.0 0.0.0.255

#

35-17

3Com Switch 8800 Command Reference Guide user-interface aux 0 user-interface vty 0 4

# return

Chapter 35 File System Management Commands

35.2.2 display saved-configuration

Syntax display saved-configuration

View

Any view

Parameter

None

Description

Use the display saved-configuration command to view the configuration files in the flash memory or CF card of Ethernet Switch.

If the Ethernet Switch works abnormally after electrified, execute the display

saved-configuration command to view the startup configuration of the Ethernet

Switch.

Related command: save, reset saved-configuration and display

current-configuration.

Example

Display configuration files in flash memory or CF card of Ethernet Switch.

<SW8800> display saved-configuration

#

sysname SW8800

# local-user abc password simple abc

#

tcp window 8

# interface Aux7/1/1

link-protocol ppp

# interface Ethernet2/1/1

# interface Ethernet2/1/2

#

35-18

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands interface Ethernet2/1/3

ip address 10.110.101.17 255.255.255.0

# interface NULL0

# ospf 1

#

ip route-static 10.12.0.0 255.255.0.0 Ethernet 12/1/0

# user-interface con 0 user-interface aux 0 user-interface vty 0 4

authentication-mode none

# return

The displayed information is global, port and user configurations.

35.2.3 display this

Syntax

display this

View

Any view

Parameter

None

Description

Use the display this command to display the running configuration of the current view.

If you need to authenticate whether the configurations is correct after you have finished a set of configurations under a view, you can use the display this command to view the running parameters.

Some effective parameters are not displayed if they are the same with the default ones, while some parameters, though have been configured by the user, if their related functions are not effective, are not displayed either. For example, if X.25 is encapsulated at the data link layer on an interface, you can configure PPP parameter on the interface, but cannot view the configuration information when executing the

display this command.

Associated configuration of the interface is displayed when executing the command in different interface views; related configuration of the protocol view is displayed when

35-19

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands executing this command in different protocol views; and all the configuration of the protocol view is displayed when executing this command in protocol sub-views.

Related command: save, reset saved-configuration, display current-configuration,

display saved-configuration.

Example

Display the running configuration parameters for the current view of the switch system.

[SW8800] display this

35.2.4 display startup

Syntax

display startup

View

Any view

Parameter

None

Description

Use the display startup command to display the related system software and configuration filenames used for the current and the next start-ups.

This command is used to display the following information: the filename of the system software for the current enabling configured by the user, the filename of the system software actually used for the current enabling, the filename of the system software configured for the next enabling, the configuration filename used for the current enabling, the configuration filename configured for the next enabling.

Related command: startup saved-configuration.

Example

Display the filenames related to the current and the next enabling.

<SW8800> display startup

MainBoard:

Startup saved-configuration file: flash:/8800.cfg

Next startup saved-configuration file: flash:/8800.cfg

35.2.5 reset saved-configuration

Syntax reset saved-configuration

35-20

3Com Switch 8800 Command Reference Guide

View

User view

Parameter

None

Chapter 35 File System Management Commands

Description

Use the reset saved-configuration command to erase configuration files from the flash memory of the Ethernet Switch.

Perform this command with cautious. It is suggested to consult technical support personnel first.

Generally, this command is used in the following situations: z z

After upgrade of software, configuration files in flash memory may not match the new version's software. Perform the reset saved-configuration command to erase the old configuration files.

If a used Ethernet Switch is applied to the new circumstance and the original configuration files cannot meet the new requirements, the Ethernet Switch should be configured again. Erase the original configuration files for reconfiguration.

If the configuration files do not exist in the flash memory when Ethernet Switch is electrified and initialized, it will enter setup switch view automatically.

Related command: save, display current-configuration, display

saved-configuration.

Example

Erase the configuration files from the flash memory of Ethernet Switch.

<SW8800> reset saved-configuration

The saved configuration will be erased.

Are you sure?[Y/N]

35.2.6 save

Syntax

save [ file-name ]

View

User view

Parameter

file-name: Name of the configuration file with the extension .cfg. It is a character string of 5 to 56 characters.

35-21

3Com Switch 8800 Command Reference Guide

Description

Chapter 35 File System Management Commands

Use the save command to save the current configuration files to Flash memory.

After finishing a group of configurations and achieving corresponding functions, user should remember to get the current configuration files stored in the flash memory.

Even if the problems like reboot and power-off occur during saving, the configuration can be still saved to Flash.

Related command: reset saved-configuration, display current-configuration,

display saved-configuration.

Example

Get the current configuration files stored in the flash memory.

<SW8800> save

The switch configurations will be written to the device.

Are you sure?[Y/N]y

Now saving current configuration to the device.

Saving configuration flash:/vrpcfg.cfg. Please wait..

Current configuration is saved to the device successfully.

35.2.7 startup saved-configuration

Syntax

startup saved-configuration cfgfile

View

User view

Parameter

cfgfile: Name of the configuration file. It is a string with a length of 5 to 56 characters.

Description

Use the startup saved-configuration command to configure the configuration file used for enabling the system for the next time.

The configuration file must have “.cfg” as its extension name and must be saved under the root directory of the Flash. By default, the configuration file will be saved under the root directory of Flash.

The extension of configuration file must be .cfg, and the startup configuration file must be saved under the directory where the memory resides. The memory is Flash.

Related command: display startup.

35-22

3Com Switch 8800 Command Reference Guide

Example

Chapter 35 File System Management Commands

Configure the configuration file for the next start-up

<SW8800> startup saved-configuration vrpcfg.cfg

35.3 FTP Server Configuration Commands

35.3.1 display ftp-server

Syntax display ftp-server

View

Any view

Parameter

None

Description

Use the display ftp-server command to view the parameters of the current FTP Server.

You can perform this command to verify the configuration after setting FTP parameters.

Example

Display the configuration of FTP Server parameters.

<SW8800> display ftp-server

FTP server is running

Max user number 5

User count 0

Timeout value(in minute) 30

The above infomration displays the running state of FTP server, maximum number of user connections, number of current login users, and timeout.

35.3.2 display ftp-user

Syntax display ftp-user

View

Any view

Parameter

None

35-23

3Com Switch 8800 Command Reference Guide

Description

Chapter 35 File System Management Commands

Use the display ftp-user command to view the parameters of current FTP user.

Example

Show the configuration of FTP user parameters.

<SW8800> display ftp-user

% No ftp user

35.3.3 ftp disconnect

Syntax

ftp disconnect user-name

View

System view

Parameter

user-name: FTP user name.

Description

Use the ftp disconnect command to disconnect an FTP user.

Example

Disconnect the FTP user ftptest.

[SW8800] ftp disconnect ftptest

35.3.4 ftp server enable

Syntax ftp sever enable undo ftp sever

View

System view

Parameter

None

Description

Use the ftp server enable command to start FTP Server and enable FTP user logon.

Use the undo ftp server command to close FTP Server and disable FTP user logon.

35-24

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

By default, FTP Server is shut down.

Perform this command to easily start or shut down FTP Server, preventing Ethernet

Switch from being attacked by some unknown user.

Example

Shut down FTP Server.

[SW8800] undo ftp server

% Close FTP server

35.3.5 ftp timeout

Syntax

ftp timeout minute

undo ftp timeout

View

System view

Parameter

minute: Connection timeouts (measured in minutes), ranging from 1 to 35791; By default, the connection timeout time is 30 minutes.

Description

Use the ftp timeout command to configure connection timeout interval.

Use the undo ftp timeout command to restore the default connection timeout interval.

After a user logs on to an FTP Server and has established connection, if the connection is interrupted or cut abnormally by the user, FTP Server will still hold the connection.

The connection timeout can avoid this problem. If the FTP server has no command interaction with a client for a specific period of time, it considers the connection to be failed and disconnect to the client.

Example

Set the connection timeout to 36 minutes.

[SW8800] ftp timeout 36

35.3.6 local-user

Syntax

local-user { username | multicast [ domain domain-name ] ipaddress |

password-display-mode { auto | cipher-force } }

35-25

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

undo local-user { username | all [ service-type { ftp | lan-access | telnet | ppp | ssh

| terminal } ] | multicast [ domain domain-name ] ipaddress |

password-display-mode }

View

System view

Parameter

username: User name.

all [ service-type { ftp | lan-access | telnet | ppp | ssh | terminal }: Deletes all local users. The parameters ftp, lan-access, telnet, ppp are used respectively to delete all the FTP, LAN access, telnet, and point-to-point access local users. The SSH parameter is used to delete all the SSH local view. And the terminal parameter is used to delete all the user terminals.

multicast [ domain domain-name]: Adds or deletes multicast address.

Ipaddress: Multicast IP address.

password-display-mode { auto | cipher-force }: Specifies the display mode of password. auto indicates the password will be displayed in the same mode as that used when the user configure the password. And cipher-force indicates the password will be displayed in forcible cipher mode.

Description

Use the local-user command to configure a local user and enter the local user view.

Use the undo local-user command to cancel one or all the local users.

By default, no local user exists.

This configuration is required if you want to access FTP server through FTP from a client.

Example

Create a local user, and enter the local user view.

[SW8800] local-user SW8800

[SW8800-luser-SW8800]

35.3.7 local-user password-display-mode

Syntax

local-user password-display-mode { auto | cipher-force }

undo local-user password-display-mode

35-26

3Com Switch 8800 Command Reference Guide

View

System view

Chapter 35 File System Management Commands

Parameter

Description

Use the local-user password-display-mode command to set the display mode of the user password when the switch displays the local user.

Use the undo local-user password-display-mode command to restore the default mode.

By default, this mode is auto.

Example

password-display-mode: Sets the display mode of user password when the switch displays the local user.

auto: Sets the display mode to what was used in configuring the password. That is, if the password was configured in cipher mode, it is also displayed in cipher mode, or else, it is displayed in plain mode.

cipher-force: Forcibly sets the display mode to cipher.

Set the display mode of user password when the switch displays the local user to cipher-force.

[SW8800] local-user password-display-mode cipher-force

35.3.8 password

Syntax

password { simple | cipher } password

undo password

View

Local user view

Parameter

simple: Specifies to display passwords in simple text.

cipher: Specifies to display passwords in cipher text.

password: Defines a password, which is a character string of up to 16 characters if it is in simple text and of up to 24 characters if it is in cipher text.

Description

Use the password command to configure a password display mode for local users.

35-27

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

Use the undo password command to cancel the specified password display mode.

By default, a local user does not have a password.

If a client uer wants to access FTP server through FTP, a password must be configured.

Example

Configure the password for the local user SW8800 as 3Com (encrypted).

[SW8800-luser-SW8800] password cipher 3Com

35.3.9 service-type

Syntax

service-type { ftp [ ftp-directory directory ] | lan-access | telnet [ level level ] }

undo service-type { ftp [ ftp-directory ] | lan-access | telnet [ level ] }

View

Local user view

Parameter

Description

Use the service-type command to configure a service type for a particular user.

Use the undo service-type command to cancel the specified service type for the user.

This configuraiton is required if you want to access FTP server through FTP from a client.

Example

ftp: Specifies user type as ftp.

ftp-directory directory: Specifies the directory of ftp users, directory is a character string of up to 64 characters.

lan-access: Specifies user type to lan-access, which mainly refers to Ethernet acc essing users, 802.1x supplicants for example.

telnet: Specifies user type as Telnet.

level level: Specifies the level of Telnet or SSH users. The argument level is an integer in the range of 0 to 3 and defaults to 1.

Sets a local user as FTP user who can access the directory flash:/3Com/lst/.

[SW8800-luser-SW8800] service-type ftp ftp-directory flash:/3Com/lst/

35-28

3Com Switch 8800 Command Reference Guide

35.4 FTP Client Commands

35.4.1 ascii

Chapter 35 File System Management Commands

Syntax ascii

View

FTP Client view

Parameter

None

Description

Use the ascii command to configure data transmission mode as ASCII mode.

By default, the file transmission mode is ASCII mode.

Perform this command if the user needs to change the file transmission mode to default mode.

Example

Configure to transmit data in the ASCII mode.

[ftp] ascii

200 Type set to A.

35.4.2 binary

Syntax binary

View

FTP Client view

Parameter

None

Description

Use the binary command to configure file transmission type as binary mode.

Example

Configure to transmit data in the binary mode.

[ftp] binary

35-29

3Com Switch 8800 Command Reference Guide

200 Type set to I.

Chapter 35 File System Management Commands

35.4.3 bye

Syntax bye

View

FTP Client view

Parameter

None

Description

Use the bye command to disconnect with the remote FTP Server and return to user view.

After performing this command, you can terminate the control connection and data connection with the remote FTP Server.

Example

Terminate connection with the remote FTP Server and return to user view.

[ftp] bye

35.4.4 cd

Syntax

cd pathname

View

FTP Client view

Parameter

pathname: Path name.

Description

Use the cd command to change the working path on the remote FTP Server.

This command is used to access another directory on FTP Server. Note that the user can only access the directories authorized by the FTP server.

Example

Change the working path to flash:/temp

35-30

3Com Switch 8800 Command Reference Guide

[ftp] cd flash:/temp

Chapter 35 File System Management Commands

35.4.5 cdup

Syntax cdup

View

FTP Client view

Parameter

None

Description

Use the cdup command to change working path to the upper level directory.

This command is used to exit the current directory and return to the upper level directory.

Example

Change working path to the upper level directory.

[ftp] cdup

35.4.6 close

Syntax close

View

FTP Client view

Parameter

None

Description

Use the close command to disconnect FTP client side from FTP server side without exiting FTP client side view. That is to say, you can terminate the control connection and data connection with the remote FTP Server at the same time.

Example

Terminate connection with the remote FTP Server and stays in FTP Client view.

[ftp] close

35-31

3Com Switch 8800 Command Reference Guide

35.4.7 debugging

Chapter 35 File System Management Commands

Syntax

debugging

undo debugging

View

FTP client view

Parameter

None

Description

Use the debugging command to enable the debugging for FTP client commands.

Use the undo debugging command to disable the debugging for FTP client commands.

By default, the debugging for FTP client commands is disabled.

Example

Enable the debugging for FTP client commands.

[ftp] debugging

35.4.8 delete

Syntax

delete remotefile

View

FTP Client view

Parameter

remotefile: File name.

Description

Use the delete command to cancel the specified file.

Example

Delete the file temp.c

[ftp] delete temp.c

35-32

3Com Switch 8800 Command Reference Guide

35.4.9 dir

Chapter 35 File System Management Commands

Syntax

dir [ filename ] [ localfile ]

View

FTP Client view

Parameter

filename: File name to be queried.

localfile: Saved local file name.

Description

Use the dir command to query a specified file.

If no parameter of this command is specified, then all the files in the directory will be displayed.

Example

Query the file temp.c and saves the results in the file temp1.

[ftp] dir temp.c temp1

35.4.10 disconnect

Syntax disconnect

View

FTP Client view

Parameter

None

Description

Use the disconnect command to disconnect FTP client side from FTP server side without exiting FTP client side view.

This command terminates the control connection and data connection with the remote

FTP Server at the same time.

Example

Terminate connection with the remote FTP Server and stays in FTP Client view.

[ftp] disconnect

35-33

3Com Switch 8800 Command Reference Guide

35.4.11 ftp

Chapter 35 File System Management Commands

Syntax

ftp [ ipaddress [ port ] ]

View

User view

Parameter

Description

Use the ftp command to establish control connection with the remote FTP Server and enter FTP Client view.

Example

ipaddress: IP address of the remote FTP Server.

port: Port number of remote FTP Server.

Connect to FTP Server at the IP address 1.1.1.1

<SW8800> ftp 1.1.1.1

35.4.12 get

Syntax

get remotefile [ localfile ]

View

FTP Client view

Parameter

localfile: Local file name.

remotefile: Name of a file on the remote FTP Server.

Description

Use the get command to download a remote file and save it locally.

If no local file name is specified, it will be considered the same as that on the remote

FTP Server.

Example

Download the file temp1.c and saves it as temp.c

[ftp] get temp1.c temp.c

35-34

3Com Switch 8800 Command Reference Guide

35.4.13 lcd

Chapter 35 File System Management Commands

Syntax lcd

View

FTP Client view

Parameter

None

Description

Use the lcd command to view local working path of FTP Client.

Example

Show local working path.

[ftp] lcd

% Local directory now flash:/temp

35.4.14 ls

Syntax

ls [ remotefile ] [ localfile ]

View

FTP Client view

Parameter

remotefile: Remote file to be queried.

localfile: Saved local file name.

Description

Use the ls command to query a specified file.

If no parameter is specified, all the files will be shown.

Note that, the ls command only displays the file names, while the dir command also displays other file-related information such as the file size and creation date.

Example

Query file temp.c

[ftp] ls temp.c

35-35

3Com Switch 8800 Command Reference Guide

35.4.15 mkdir

Chapter 35 File System Management Commands

Syntax

mkdir pathname

View

FTP Client view

Parameter

pathname: Directory name.

Description

Use the mkdir command to create a directory on the remote FTP Server.

User can perform this operation as long as the remote FTP server has authorized.

Example

Create the directory flash:/lanswitch on the remote FTP Server.

[ftp] mkdir flash:/lanswitch

35.4.16 open

Syntax

open ipaddr [ port ]

View

FTP client view

Parameter

Description

Use the open command to set up an FTP connection with a remote FTP server.

Example

ipaddr: IP address of the remote FTP server.

port: Port number of the remote server.

Set up a FTP connection with the FTP server with the IP address of 10.110.3.1.

[ftp] open 10.110.3.1

35-36

3Com Switch 8800 Command Reference Guide

35.4.17 passive

Chapter 35 File System Management Commands

Syntax

passive

undo passive

View

FTP Client view

Parameter

None

Description

Use the passive command to configure the data transmission mode as passive mode.

Use the undo passive command to configure the data transmission mode as active mode.

By default, the data transmission mode is passive mode

Example

Set the data transmission to passive mode.

[ftp] passive

35.4.18 put

Syntax

put localfile [ remotefile ]

View

FTP Client view

Parameter

localfile: Local file name.

remotefile: File name on the remote FTP Server.

Description

Use the put command to upload a local file to the remote FTP Server.

If the user does not specify the filename on the remote server, the system will consider it the same as the local file name by default.

Example

Upload the local file temp.c to the remote FTP Server and saves it as temp1.c.

35-37

3Com Switch 8800 Command Reference Guide

[ftp] put temp.c temp1.c

Chapter 35 File System Management Commands

35.4.19 pwd

Syntax pwd

View

FTP Client view

Parameter

None

Description

Use the pwd command to view the current directory on the remote FTP Server.

Example

Show the current directory on the remote FTP Server.

[ftp] pwd

"flash:/temp" is current directory.

35.4.20 quit

Syntax quit

View

FTP Client view / Port-group view

Parameter

None

Description

Use the quit command to terminate the connection with the remote FTP Server and return to user view.

Example

Terminate connection with the remote FTP Server and returns to user view.

[ftp] quit

<SW8800>

35-38

3Com Switch 8800 Command Reference Guide

35.4.21 remotehelp

Chapter 35 File System Management Commands

Syntax

remotehelp [ protocol-command ]

View

FTP Client view

Parameter

protocol-command: FTP protocol command.

Description

Use the remotehelp command to view help information about the FTP protocol command. This command takes effects only when the FTP server provides the protocol command help. (Switch 8800s serving as servers provide this help service, but common FTP software do not provide this service).

Example

Show the syntax of the protocol command user.

[ftp] remotehelp user

214 Syntax: USER <sp> <username>

35.4.22 rmdir

Syntax

rmdir pathname

View

FTP Client view

Parameter

pathname: Directory name of remote FTP Server.

Description

Use the rmdir command to remove the specified directory from FTP Server. Note that, this command can be successfully executed only when the specified directory contains no files.

Example

Delete the directory flash:/temp1 from FTP Server.

[ftp] rmdir flash:/temp1

35-39

3Com Switch 8800 Command Reference Guide

35.4.23 user

Chapter 35 File System Management Commands

Syntax

user username [ password ]

View

FTP Client view

Parameter

Description

Use the user command to register an FTP user.

This command is available when you log in FTP server with a specified user account.

Example

username: Logon username.

password: Logon password.

Log in the FTP Server with username tom and password bjhw.

[ftp] user tom bjhw

35.4.24 verbose

Syntax verbose undo verbose

View

FTP Client view

Parameter

None

Description

Use the verbose command to enable the client to display the commands received from/sent to the server.

Use the undo verbose command to disable the client from display the commands received from/sent to the server

By default, the client displays the commands received from/sent to the server.

Example

Enable verbose.

35-40

3Com Switch 8800 Command Reference Guide

[ftp]verbose

Chapter 35 File System Management Commands

35.5 TFTP Configuration Commands

35.5.1 tftp get

Syntax

tftp tftp-server get source-file [ dest-file ]

View

User view

Parameter

tftp-server: IP address or hostname of the TFTP server. The name of the TFTP server should be a string ranging from 1 to 20 characters.

source-file: Specifies the filename of the source file on the TFTP server.

dest-file: Specifies the filename of the destination file which will be saved on the switch.

Description

Use the tftp get command to download a file from the specified directory of the TFTP server and saving it on the switch.

Related command: tftp put.

Example

Download the file LANSwitch.app from the TFTP server at 1.1.3.214 and save it as vxWorks.app on the local switch.

<SW8800> tftp 1.1.3.214 get LANSwitch.app vxWorks.app

35.5.2 tftp put

Syntax

tftp tftp-server put source-file [ dest-file ]

View

Parameter

User view

tftp-server: IP address or hostname of the TFTP server. The name of the TFTP server should be a string ranging from 1 to 20 characters.

source-file: Specifies the filename of the source file which is saved on the switch.

35-41

3Com Switch 8800 Command Reference Guide Chapter 35 File System Management Commands

dest-file: Name of the file that will be uploaded to the specified directory on the TFTP server.

Description

Use the tftp put command to upload a file from the switch to the specified directory on the TFTP server.

Related command: tftp get.

Example

Upload the vrpcfg.txt to the TFTP server at 1.1.3.214 and save it as Temp.txt.

<SW8800> tftp 1.1.3.214 put vrpcfg.txt temp.txt

35-42

3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands

Chapter 36 MAC Address Table Management

Commands

36.1 MAC Address Table Management Commands

36.1.1 display mac-address aging-time

Syntax display mac-address aging-time

View

Any view

Parameter

None

Description

Use the display mac-address aging-time command to view the aging time of the dynamic entry in the MAC address table.

Related command: mac-address, mac-address timer, display mac-address.

Example

Display the aging time of the dynamic entry in the MAC address table.

[SW8800] display mac-address aging-time mac-address aging-time: 300s

The above information indicates that the aging time of the dynamic entry in the MAC address is 300s.

36.1.2 display mac-address

Syntax

display mac-address [ mac-addr [ vlan vlan-id ] | [ static | dynamic ] [ interface

{ interface-name | interface-type interface-num } ] [ vlan vlan-id ] [ count ] ]

View

Parameter

Any view

36-1

3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands

mac-addr: Specifies the MAC address.

vlan-id: Specifies the VLAN ID.

static: Static table entry, that is no aging, If the configuration is saved, it can be restored after the switch is reset.

dynamic: Dynamic table entry, which will be aged.

interface-type: Specifies the interface type.

interface-num: Specifies the interface number.

interface-name: Specifies the interface name.

For details about the interface-type, interface-num and interface-name parameters, refer to the Port Configuration in this manual.

count: the display information will only contain the sum number of MAC addresses in the MAC address table if user choice this parameter when using this command.

Description

Use the display mac-address command to view MAC address table information.

When managing the Layer-2 addresses of the switch, the administrator can perform this command to view such information as the Layer-2 address table, address status

(static or dynamic), Ethernet port of the MAC address, VLAN of the address, and system address aging time.

Related command: mac-address, mac-address timer.

Example

Show the information of the entry with MAC address at 00e0-fc01-0101

[SW8800] display mac-address 00e0-fc01-0101

MAC ADDR VLAN ID STATE PORT INDEX AGING TIME(s)

Table 36-1 Description on the fields of the display mac-address command

Field

MAC ADDR

VLAN ID

STATE

PORT INDEX

AGING TIME(s) The aging time

Description

The destination MAC address

The VLAN of the MAC address

The state of the item, which can be Learned, Config static

The forwarding port

36-2

3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands

36.1.3 mac-address

Syntax

mac-address { static | dynamic } mac-addr interface { interface-name | interface-type

interface-num } vlan vlan-id

undo mac-address [ static | dynamic ] [ mac-addr [ interface { interface-name |

interface-type interface-num } ] vlan vlan-id | interface { interface-name | interface-type

interface-num } | vlan vlan-id ]

View

System view

Parameter

static: Static table entry, lost after resetting switch.

dynamic: Dynamic table entry, which will be aged.

mac-addr: Specifies the MAC address.

For detailed description on interface-type, interface-num, and interface-name see Port

Configuration section of this manual.

vlan-id: Specifies the VLAN ID.

Description

Use the mac-address command to add/modify the MAC address table entry.

Use the undo mac-address command to cancel the MAC address table entry

If the input address has been existed in the address table, the original entry will be modified. That is, replace the interface pointed by this address with the new interface and the entry attribute with the new attribute (dynamic entry, static entry and permanent entry).

All the (MAC unicast) addresses on a certain interface can be deleted. User can choose to delete any of the following addresses: address learned by system automatically, dynamic address configured by user, static and permanent addresses configured by user.

Related command: display mac-address.

Example

Configure the port number corresponding to the MAC address 00e0-fc01-0101 as

Ethernet2/1/1 in the address table, and sets this entry as static entry.

[SW8800] mac-address static 00e0-fc01-0101 interface ethernet 2/1/1 vlan 2

36-3

3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands

36.1.4 mac-address max-mac-count

Syntax

mac-address max-mac-count count

undo mac-address max-mac-count

View

Ethernet port view

Parameter

count: Maximum number of MAC addresses learned by a port, ranging from 0 to 14,336, the value of 0 means that address learning is disabled.

Description

Use the mac-address max-mac-count command to set the maximum number of MAC addresses learned by an Ethernet port.

Use the undo mac-address max-mac-count command to remove the limit on the maximum number of MAC addresses learned by an Ethernet port.

By default, a port can learn as many MAC addresses as a board can have. You can change the default value by using this command: if you set the value to count, and when the number of MAC addresses learned by the port reaches this value, this port will no longer learn any more MAC addresses; and you can use the undo

mac-address max-mac-count command to remove the limit on the number.

Note: z z z

The maximum number of MAC addresses of a board ranges from 12 K to 16 K depending on various software versions and board types.

The aforementioned number of MAC addresses includes only the MAC addresses learned by the switch dynamically, and excludes those configured by the user.

When executing the mac-address max-mac-count command, if the current number of MAC addresses exceeds the threshold value, the switch neither delete the present MAC address entries nor learn new MAC address until the number of entries less than the threshold value after some entries are aged out.

Related command: mac-address and mac-address timer.

Example

Set the maximum number of MAC addresses learned by Ethernet port Ethernet3/1/3 to

600.

36-4

3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands

[SW8800-Ethernet3/1/3] mac-address max-mac-count 600

36.1.5 mac-address max-mac-count enable forward

Syntax

mac-address max-mac-count enable forward

undo mac-address max-mac-count enable forward

View

Ethernet port view

Parameter

None

Description

Use the mac-address max-mac-count enable forward command to set the switch to forward packets whose source MAC addresses are not learned by the port when the number of MAC addresses learned exceeds the threshold value.

Use the undo mac-address max-mac-count enable forward command to set the switch to drop the packets whose source MAC addresses are not learned by the port when the number of MAC addresses learned exceeds the threshold value.

By default, the switch forwards packets whose source MAC addresses are not leaned by the port when the number of MAC addresses learned exceeds the threshold value.

Related command: mac-address and mac-address timer.

Example

Set the maximum number of MAC addresses learned by Ethernet port Ethernet3/1/3 to

600, and the switch will drop the packets whose source MAC addresses are not learned by the port when the number of MAC addresses learned exceeds 600.

[SW8800-Ethernet3/1/3]mac-address max-mac-count 600

[SW8800-Ethernet3/1/3]undo mac-address max-mac-count enable forward

36.1.6 mac-address max-mac-count alarm

Syntax

mac-address max-mac-count alarm

undo mac-address max-mac-count alarm

View

Ethernet port view

36-5

3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands

Parameter

alarm: when the current number of MAC addresses exceeds the threshold value, whether the switch gives the network administrator an alarm or not. By default, the switch doesn’t give an alarm.

Description

Use the mac-address max-mac-count alarm command to enable the switch to send alarms to network administrator.

After the mac-address max-mac-count alarm command is executed, if the MAC addresses learned by a port reach the maximum number of MAC addresses that the port can learned, the port will send an alarm to network administrator to prompt that the port will no longer learn any MAC addresses.

Use the undo mac-address max-mac-count alarm command to disable the switch from sending alarms to network administrator.

Related command: mac-address and mac-address timer.

Note: z z z

The maximum number of MAC addresses of a board ranges from 12 K to 16 K depending on various software versions and board types.

The aforementioned number of MAC addresses includes only the MAC addresses learned by the switch dynamically, and excludes those configured by the user.

When executing the mac-address max-mac-count command, if the current number of MAC addresses exceeds the threshold value, the switch neither delete the present MAC address entries nor learn new MAC address until the number of entries less than the threshold value after some entries are aged out.

Example

Set the maximum number of MAC addresses learned by Ethernet port Ethernet3/1/3 to

600, and the switch will give an alarm to the network administrator and forward the packets when the number of MAC addresses learned exceeds 600.

[SW8800-Ethernet3/1/3] mac-address max-mac-count 600

[SW8800-Ethernet3/1/3]mac-address max-mac-count enable forward alarm cancel the alarm function

[SW8800-Ethernet3/1/3]undo mac-address max-mac-count enable alarm

36-6

3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands

36.1.7 mac-address timer

Syntax

mac-address timer { aging age | no-aging }

undo mac-address timer aging

View

System view

Parameter

aging age: Specifies the aging time (measured in seconds) of the Layer-2 dynamic address table entry, ranging from 10 to 630. By default, the aging time is 300 seconds.

no-aging : No aging time.

Description

Use the mac-address timer command to configure the aging time of the Layer-2 dynamic address table entry.

Use the undo mac-address timer command to restore the default value.

If aging time is too short, the MAC address might be deleted before the Ethernet switch gets the address information. That way the switch broadcasts the received packets to all the ports within the VLAN. This will affect the switch operation performance.

If aging time is too long, the Ethernet switch will store a great number of out-of-date

MAC address tables. This will consume MAC address table resources and the switch will not be able to update MAC address table according to the network change.

Caution:

The aging of dynamic MAC address is completed during the second aging cycle that has been configured.

Example

Configure the entry aging time of Layer-2 dynamic address table to be 500 seconds.

[SW8800] mac-address timer aging 500

36-7

3Com Switch 8800 Command Reference Guide Chapter 36 MAC Address Table Management Commands

36.1.8 reset mac-address

Syntax

reset mac-address { all | dynamic | static | interface { interface_type interface_num |

interface_name } | Vlan vlan_number}

View

User view

Parameter

Description

Use the reset mac-address command to clear corresponding MAC address entries.

Example

all: All of the MAC address entries.

dynamic: Dynamic MAC address entry.

static: Static MAC address entry.

interface_name:MAC address entries associated with the specified port. Where

interface_type is the port type, interface_num is the port number, and interface_name =

interface_type interface_num.

Vlan vlan_number: All of the MAC address entries in the specified VLAN.

Clear all MAC address entries.

<SW8800>reset mac-address all

36-8

3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands

Chapter 37 Device Management Commands

37.1 Device Management Commands

37.1.1 boot boot-loader

Syntax

boot boot-loader file-url [ slot slot-no ]

View

User view

Parameter

file-url: Path and name of APP file.

slot slot-no: Specifies the APP file of slave board.

Description

Use the boot boot-loader command to configure the app file used for boot of the next time.

Note:

The Switch 8800 supports master board and slave board. The two boards both have file system. User can operate the file on the two boards. In the case user designate the

APP adopted on slave board next time, the file directory or URL should be started with

“slot[No.]#flash:”, the [No.] is the slave board number. For example, suppose slot 1 is slave board, “text.txt” file URL on slave board should be “slot1#flash:/text.txt”.

Example

Specify the APP application used for boot of next time.

<SW8800> boot boot-loader PLATV100R002B09D002.APP

The specifed file will be booted next time!

37.1.2 boot bootrom

Syntax

boot bootrom file-url slot slot-num-list

37-1

3Com Switch 8800 Command Reference Guide

View

User view

Chapter 37 Device Management Commands

Parameter

file-url: Path and name of Bootrom file.

slot slot-num-list: Specifies the slot number list of switch. The formula is

slot-num-list={ slot-num [ to slot-num ] }&<1-n>. &<1-n> indicates that the prior parameter can be input for n times. For the 7-slot chassis, n is 7; for the 14-slot chassis, n is 14.

Description

Use the boot bootrom command to upgrade bootrom.

Note:

The Switch 8800 supports master board and slave board. The two boards both have file system. User can operate the file on the two boards. In the case user upgrade the

BootROM adopted on slave board, the file directory or URL should be started with

“slot[No.]#flash:”, the [No.] is the slave board number. For example, suppose slot 1 is slave board, “text.txt” file URL on slave board should be “slot1#flash:/text.txt”.

When you are upgrading the BootROM on a slave board, the boot code file must be present in the local flash.

Example

Upgrade bootrom of No.1slot.

<SW8800> boot bootrom PLATV100R002B09D002.btm slot 1

37.1.3 display boot-loader

Syntax display boot-loader

View

Any view

Parameter

None

37-2

3Com Switch 8800 Command Reference Guide

Description

Chapter 37 Device Management Commands

Use the display boot-loader command to view APP file used this time and next time.

Example

<SW8800> display boot-loader

The app to boot at the next time is: PLATV100R002B09D002.APP

The app to boot of board 0 at this time is: flash:/PLAT.APP

Table 37-1 Description on the display boot-loader command

Field Description

The app to boot of board 0 at the next time is: flash:/Switch.app

Startup file used on startup next time

The app to boot of board 0 at this time is: flash:/PLAT.APP

Startup file used on startup this time

37.1.4 display cpu

Syntax

display cpu [slot slot-no ]

View

Any view

Parameter

slot slot-no: Specifies the board number.

Description

Use the display cpu command to display CPU occupancy.

Example

Display CPU occupancy on slot 0.

<SW8800> display cpu slot 0

Board 0 CPU busy status:

6% in last 5 seconds

7% in last 1 minute

12% in last 5 minutes

37-3

3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands

Table 37-2 Description on display information

Field Description

Board 0 CPU busy status: CPU usage of switch

6% in last 5 seconds

7% in last 1 minute

12% in last 5 minutes

CPU usage in last 5 seconds is 6%.

CPU usage in last 1 minute is 7%.

CPU usage in last 5 minutes is 12%.

37.1.5 display device

Syntax

display device [ detail | [ shelf shelf-no ] [ frame frame-no ] [ slot slot-no ] ]

View

Any view

Parameter

detail: displays all slot detail information.

shelf-no: Shelf number.

frame-no: Frame number.

slot-no: Slot number.

Description

Use the display device command to display the module type and working status information of a card, including physical card number, physical daughter card number, number of ports, hardware version number, FPGA version number, version number of

BOOTROM software, application version number, address learning mode, interface card type and interface card type description, and so on.

Example

Show device information.

<SW8800> display device

Slot No. Brd Type Brd Status Subslot Num Sft Ver

0 LSB1SRPB Master 0 8800-0004

1 NONE Absent Absent None

2 NONE Absent Absent None

3 NONE Absent Absent None

4 NONE Absent Absent None

5 NONE Absent Absent None

6 NONE Absent Absent None

37-4

3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands

7 NONE Absent Absent None

The following table describes the displaying information.

Table 37-3 Description on the fields of the display device command

Field

Slot No

Brd Type

Brd Status

Subslot Num

Sft Ver

Description

Physical card number

Type of board

Status of board

Subslot number

Software version number

37.1.6 display environment

Syntax display environment

View

Any view

Parameter

None

Description

Use the display environment command to view environment information.

Example

Display the environment information.

<SW8800> display environment

System temperature information (degree centigrade):

----------------------------------------------------

Board Temperature Lower limit Upper limit

0 33 10 45

2 35 10 65

4 34 10 65

37-5

3Com Switch 8800 Command Reference Guide

37.1.7 display fan

Chapter 37 Device Management Commands

Syntax

display fan [ fan-id ]

View

Any view

Parameter

fan-id: the fan ID.

Description

Use the display fan command to view the working state of the built-in fans. User can perform this command to see if they work normally.

Example

Display the working state of the fans.

<SW8800> display fan

Fan 1 State: Normal

The above information indicates that all of the four fans work normally.

37.1.8 display memory

Syntax

display memory [ slot slot-no ]

View

Any view

Parameter

slot-no: Specifies slot number

Description

Use the display memory command to display memory situation.

Example

Display memory situation.

<SW8800> display memory slot 0

System Total Memory(bytes): 197932416

Total Used Memory(bytes): 65234704

Used Rate: 32%

37-6

3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands

Table 37-4 Description on the fields of the display memory command

Field

System Total Memory(bytes)

Total Used Memory(bytes)

Used Rate

Description

The Total Memory of switch, unit in byte

The Total used Memory of switch, unit in byte

The memory used rate

37.1.9 display power

Syntax

display power [ power-ID ]

View

Any view

Parameter

power-ID: Power ID.

Description

Use the display power command to view the working state of the built-in power supply.

Example

Show power state.

<SW8800> display power

Power 1 State: Absent

Power 2 State: Normal

Power 3 State: Absent

37.1.10 display schedule reboot

Syntax

display schedule reboot

View

Any view

Parameter

None

37-7

3Com Switch 8800 Command Reference Guide

Description

Chapter 37 Device Management Commands

Use the display schedule reboot command to check the configuration of related parameters of the switch schedule reboot terminal service.

Related command: reboot, schedule reboot at.

Example

Display the configuration of the schedule reboot terminal service parameters of the current switch.

<SW8800> display schedule reboot

System will reboot at 16:00:00 2004/11/1 (in 2 hours and 5 minutes).

37.1.11 reboot slot

Syntax

reboot [ slot slot-no ]

View

User view

Parameter

slot-num: Specifies the physical card number.

Description

Use the reboot command to reboot to restart the Ethernet switch or the specified card.

Example

Reset the card in Slot 1.

<SW8800> reboot

37.1.12 schedule reboot at

Syntax

schedule reboot at hh:mm [ yyyy/mm/dd ]

undo schedule reboot

View

User view

Parameter

hh:mm: Reboot time of the switch, in the format of "hour: minute" The hh ranges from 0 to 23, and the mm ranges from 0 to 59.

37-8

3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands

yyyy/mm/dd: Reboot date of the switch, in the format of "year/month/day. The yyyy ranges from 2000 to 2099, the mm ranges from 1 to 12, and the value of dd is related to the specific month.

Description

Use the schedule reboot at command to enable the timing reboot function of the switch and set the specific reboot time and date.

Use the undo schedule reboot command to disable the timing reboot function.

By default, the timing reboot switch function is disabled.

Note:

The precision of switch timer is 1 minute. The switch will reboot in one minute when time comes to the specified rebooting point.

If the schedule reboot at command sets specified date parameters, which represents a data in the future, the switch will be restarted in specified time, with error not more than 1 minute.

If no specified date parameters are configured, two cases are involved: If the configured time is after the current time, the switch will be restarted at the time point of that day; if the configured time is before the current time, the switch will be restarted at the time point of the next day.

It should be noted that the configured date should not exceed the current date more than 30 days. In addition, after the command is configured, the system will prompt you to input confirmation information. Only after the "Y" or the "y" is entered can the configuration be valid. If there is related configuration before, it will be covered directly.

Moreover, after the schedule reboot at command is configured and the system time is adjusted by the clock command, the former configured schedule reboot at parameter will go invalid.

Related command: reboot, display schedule reboot.

Example

Set the switch to be restarted at 22:00 that night (the current time is 15:50).

<SW8800> schedule reboot at 22:00

Reboot system at 22:00:00 UTC 2003/11/18 (in 6 hours and 10 minutes) confirm?[Y/N]:y aux0: schedule reboot parameters at 15:50:00 UTC 2003/11/18. And system will reboot at 22:00:00 UTC 2003/11/18

Proceed with reboot? [Y/N]:y

37-9

3Com Switch 8800 Command Reference Guide

37.1.13 schedule reboot delay

Chapter 37 Device Management Commands

Syntax

schedule reboot delay { hhh:mm | mmm }

undo schedule reboot

View

User view

Parameter

hhh:mm: Waiting time for rebooting a switch, in the format of "hour: minute" The hhh ranges from 0 to 720, and the mm ranges from 0 to 59.

mmm: Waiting delay for rebooting a switch, in the format of "absolute minutes" .

Ranging from 0 to 43200,

Description

Use the schedule reboot delay command to enable the timing reboot switch function and set the waiting time.

Use the undo schedule reboot command to disable the timing reboot function.

By default, the timing reboot switch function is disabled.

Note:

The precision of switch timer is 1 minute. The switch will reboot in one minute when time comes to the specified rebooting point.

Two formats can be used to set the waiting delay of timing reboot switch, namely the format of "hour: minute" and the format of "absolute minutes". But the total minutes should be no more than 30×24×60 minutes, or 30 days.

After this command is configured, the system will prompt you to input confirmation information. Only after the "Y" or the "y" is entered can the configuration be valid. If there is related configuration before, it will be covered directly.

Moreover, after the schedule reboot at command is configured, and the system time is adjusted by the clock command, the original schedule reboot at parameter will become invalid.

Related command: reboot, schedule reboot at, undo schedule reboot, display

schedule reboot.

37-10

3Com Switch 8800 Command Reference Guide

Example

Chapter 37 Device Management Commands

Configure the switch to be restarted after 88 minutes (the current time is 21:32).

<SW8800> schedule reboot delay 88

Reboot system for 23:00:00 UTC 2002/11/1 (in 1 hours and 28 minutes)

Confirm? [Y/N]:y

37.1.14 temperature-limit

Syntax

temperature-limit slot down-value up-value

undo temperature-limit slot

View

User view

Parameter

Description

Use the temperature-limit command to configure temperature limit.

Use the undo temperature-limit command to restore temperature limit to default value.

Example

slot: Physical card number.

down-value: Lower temperature limit, in the range 0 to 70 °C.

up-value: Upper temperature limit, in the range 20 to 90 °C.

Set the lower and upper temperature limit of card 0.

<SW8800> temperature-limit 0 10 75

37.1.15 update l3plus

Syntax

update l3plus slot slot-no filename file-name ftpserver server-name username

user-name password password [ port port-num ]

View

System view

Parameter

slot-no: Slot for the service processing board to be updated.

37-11

3Com Switch 8800 Command Reference Guide Chapter 37 Device Management Commands

file-name: Name of upgrading file to be downloaded. The file suffix is .app.

server-name: IP address or host name of FTP Server where the file to be updated locates.

user-name: User name for file transfer protocol (FTP) login.

password: User password for FTP login.

port-num: FTP port number, in the range 0 to 65,535. By default, it is 21.

Description

Use the update l3plus command to update service processing boards. After the command is executed, the system logs into an FTP Server with the host name, user name and user password provided. The system downloads the host software containing load program of service processing board to the system’s synchronous dynamic random access memory (SDRAM), and uses the file to enable service processing boards.

Example

Update the service processing board in slot 2. The file to be downloaded is place in the host with the IP address 192.168.1.100, and its name is L3PLUS.app. The user name and password for FTP login are 3Com and 123456 respectively.

[SW8800] update l3plus slot 2 filename L3PLUS.app ftpserver 192.168.1.100 username 3Com password 123456

37-12

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

Chapter 38 System Maintenance Commands

38.1 Basic System Configuration and Management

Commands

38.1.1 clock datetime

Syntax

clock datetime HH:MM:SS YYYY/MM/DD

View

User view

Parameter

HH:MM:SS: Current clock. HH ranges from 0 to 23. MM and SS range from 0 to 59.

YYYY/MM/DD: Specifies the current year, month and date. YYYY ranges from 2000 to

2100. MM ranges from 1 to 12 and DD ranges from 1 to 31.

Description

Use the clock datetime command to configure the current date and clock of Ethernet

Switch.

By default, the date and clock of Ethernet Switch is set as 0:0:0, 2000/1/1.

The current date and clock of Ethernet Switch must be set in the circumstance that absolute time is strictly required.

Related command: display clock.

Example

Set the current date of Ethernet Switch to 0:0:0, 2001/01/1.

<SW8800> clock datetime 0:0:0 2001/01/01

38.1.2 clock summer-time

Syntax

clock summer-time zone_name { one-off | repeating } start-time start-date end-time

end-date offset-time

undo clock summer-time

38-1

3Com Switch 8800 Command Reference Guide

View

User view

Chapter 38 System Maintenance Commands

Parameter

Description

Use the clock summer-time command to set the name, starting and ending time of the summer time.

Use the undo clock summer-time command to remove the configuration of the summer time.

After the configuration takes effect, the display clock command can be used to check it. Besides, the time of the log or debug information uses the local time after the adjustment of the time zone and summer time.

Related command: clock timezone.

Example

zone_name: Name of the summer time, which is a character with the length ranging 1 to 32.

one-off: Only set the summer time of a certain year.

repeating: Set the summer time of every year starting from a certain year.

start-time: Set start time of the summer time, input like HH:MM:SS

(hour/minute/second).

start-date: Set start date of the summer time, input like YYYY/MM/DD

(year/month/day).

end-time: Set end time of the summer time, input like HH:MM:SS

(hour/minute/second).

end-date: Set end date of the summer time, input like YYYY/MM/DD (year/month/day).

offset-time: Set offset time of the summer time, input like HH:MM:SS

(hour/minute/second).

Set the summer time for z2 that starts at 06:00:00 on 08/06/2002 and ends at 06:00:00 on 01/09/2002 with the time adding 1 hour.

<SW8800> clock summer-time z2 one-off 06:00:00 2002/06/08 06:00:00 2002/09/01

01:00:00

Set the summer time for z2 that starts at 06:00:00 on 08/06 and ends at 06:00:00 on

01/09 in each year from 2002 on with the time adding 1 hour.

<SW8800> clock summer-time z2 repeating 06:00:00 2002/06/08 06:00:00

2002/09/01 01:00:00

38-2

3Com Switch 8800 Command Reference Guide

38.1.3 clock timezone

Chapter 38 System Maintenance Commands

Syntax

clock timezone zone-name { add | minus } HH:MM:SS

undo clock timezone

View

User view

Parameter

zone-name: Name of the time zone, which is a character with the length ranging 1 to

32.

add:Tme is adding compared with the UTC.

minus: Time is minus compared with the UTC.

HH:MM:SS: Time (hour/minute/second).

Description

Use the clock timezone command to set the information of the local time zone.

Use the undo clock timezone command to restore to the default Universal Time

Coordinated (UTC) time zone.

After the configuration takes effect, the display clock command can be used to check it. Besides, the time of the log or debug information uses the local time after the adjustment of the time zone and summer time.

Related command: clock summer-time.

Example

Set the name of the local time zone as Z5 with the time adding 5 hours compared with the UTC.

<SW8800> clock timezone z5 add 05:00:00

38.1.4 ping-distribute enable

Syntax ping-distribute enable undo ping-distribute

View

System view

38-3

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 38 System Maintenance Commands

Description

Use the ping-distribute enable command to enable the ping distribution function.

Use the undo ping-distribute enable command to disable the ping distribution function.

By default, the ping distribution function is enabled.

Example

Enable the ping distribution function.

[SW8800] ping-distribute enable

38.1.5 sysname

Syntax

sysname sysname

undo sysname

View

System view

Parameter

Description

Use the sysname command to configure the hostname of Ethernet Switch.

By default, the hostname of Ethernet Switch is SW8800.

Changing the hostname name of Ethernet Switch will affect the prompt of command line interface. E.g. the host name of Ethernet Switch is SW8800, and the prompt in user view is <SW8800>.

Example

sysname: Specifies the hostname with a character string with the length ranging from1 to 30 characters. The name of the Ethernet switch defaults to SW8800.

Set the hostname of the Ethernet Switch as SW8800LANSwitch.

[SW8800] sysname SW8800LANSwitch

[SW8800LANSwitch]

38-4

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

38.2 System Status and System Information Display

Commands

38.2.1 display clock

Syntax display clock

View

Any view

Parameter

None

Description

Use the display clock command to obtain information about system data and time from the terminal display. You can adjust the system time if it is wrong.

The maximum date and time the system can display is 23:59:59 9999/12/31.

Related command: clock datetime

Example

View the current system date and clock.

<SW8800> display clock

18:36:31 Marlboro Sat 2002/02/02

Time Zone : Marlboro add 01:00:00

Summer-Time : bj one-off 01:00:00 2003/01/01 01:00:00 2003/08/08 01:00:00

Table 38-1 Description on the fields of the display clock command

Field

18:36:31 Marlboro Sat 2002/02/02

Description

Current time of the system

Time Zone : Marlboro add 01:00:00

Information about the time zone configured by the user

Summer-Time : bj one-off 01:00:00

2003/01/01 01:00:00 2003/08/08

01:00:00 time configured by the user

38-5

3Com Switch 8800 Command Reference Guide

38.2.2 display debugging

Chapter 38 System Maintenance Commands

Syntax

display debugging [ interface { interface-name | interface-type interface-num } ]

[ module-name ]

View

Any view

Parameter

Description

Use the display debugging command to view the enabled debugging process.

Use the display debugging command to view the debuggings that are currently enabled. Show all the enabled debugging when there is no parameter.

Related command: debugging.

Example

interface-name: Specifies the Ethernet port name.

interface-type: Specifies the Ethernet port type.

interface-num: Specifies the Ethernet port number.

module-name: Specifies the module name.

Show all the enabled debugging.

<SW8800> display debugging

IP packet debugging switch is on.

The above output shows that the IP packet debugging is enabled.

38.2.3 display fiber-module

Syntax

display fiber-module [ interface-type interface-number | interface-name ]

View

Parameter

Any view

interface-name: Interface name, in the format of interface-type + interface-num.

interface-type: Interface type, which can be Ethernet and GigabitEthernet.

interface-num: Interface number.

38-6

3Com Switch 8800 Command Reference Guide

Description

Chapter 38 System Maintenance Commands

Use the display fiber-module command to view the information about all optical modules seated in the current frame, including module information, module type, connector type, vendor name, model number, single mode or multimode, wavelength and transmission distance.

Use the display fiber-module [ interface-type interface-number | interface-name ] command to view information about the specific optical module.

Example

Display information about all optical modules seated in the current frame.

<SW8800>display fiber-module

Pos3/1/1:

Card info: 10G-XFP

Fiber connect: LC

VendorName: Intel Corp

PartNumber: TXN181072013X07

Mode: SingleMode

WaveLength: 1310nm

Length for 9um: 10km

Pos4/1/1:

Card info: 100BASE-SFP

Fiber connect: LC

VendorName: AGILENT

PartNumber: HFBR-5760LP

Mode: MultiMode

WaveLength: Unknown

Length for 50/125um: 0m

Length for 62.5/125um: 2000m

Warning: This Port Use Wrong Optical Module !

Pos4/1/2:

Card info: 1000BASE-SFP

Fiber connect: LC

VendorName: Hitachi Cable

PartNumber: HTR6511R

Mode: SingleMode

WaveLength: 1310nm

Length for 9um: 10km

Warning: This Port Use Wrong Optical Module !

38-7

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

Pos4/1/3:

Card info: 2.5G-SFP

Fiber connect: LC

VendorName: FIBERXON INC

PartNumber: FTM-3125C-L2

Mode: SingleMode

WaveLength: 1310nm

Length for 9um: 2km

Pos4/1/4:

Card info: 1000BASE-SFP

Fiber connect: LC

VendorName: AGILENT

PartNumber: HFBR-5710L

Mode: MultiMode

WaveLength: 850nm

Length for 50/125um: 550m

Length for 62.5/125um: 270m

Warning: This Port Use Wrong Optical Module !

GigabitEthernet6/1/1:

Card info: 10G-XFP

Fiber connect: LC

VendorName: JDS Uniphase

PartNumber: 64P0215

Mode: SingleMode

WaveLength: 1310nm

Length for 9um: 10km

GigabitEthernet6/1/3:

Card info: 10G-XFP

Fiber connect: LC

VendorName: JDS Uniphase

PartNumber: 64P0215

Mode: SingleMode

WaveLength: 1310nm

Length for 9um: 10km

38-8

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

Table 38-2 Description on the fields of the display fiber-module command

Field

Card info

Fiber connect

Module information

Description

Connector type

Mode Single mode or multimode

WaveLength Wavelength

Length for X um: Y km/m

The transmission distance at the diameter of X um is

Y km/m.

Length for A / B um: Y km/m

The transmission distance at the inner diameter of A um and outer diameter of B um is Y km/m.

38.2.4 display users

Syntax

display users [ all ]

View

Any view

Parameter

all: display all users connected to the switch.

Description

Use the display users command to view information about users connected to the switch.

Example

Display the information about all the active users on the console.

<SW8800>display users

UI Delay Type Ipaddress Username

+ 0 CON 0 00:00:00

130 VTY 0 00:00:05 TEL 192.168.1.253 tb

Display the information about all the users on the console.

<SW8800>display users all

UI Delay Type Ipaddress Username

+ 0 CON 0 00:00:00

38-9

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

129 AUX 0

+ 130 VTY 0 00:00:16 TEL 192.168.1.253 tb

131 VTY 1

132 VTY 2

133 VTY 3

134 VTY 4

Table 38-3 Description on the fields of the display users command

+

UI

Field Description

Information about an active user

The first number is the absolute number of the UI (user interface), and the second number is the relative number of the UI.

Delay

Type

The time elapsed after the last user input, in the format of hh:mm:ss

User type, such as Telnet, SSH, PAD

Ipaddress Initial connection location, that is, the IP address of the incoming host

Username

Name of the user who uses this UI, that is, the login username of this user. If the current terminal line is in anonymous login mode (AAA authentication is enabled on it), this field is null.

38.2.5 display version

Syntax display version

View

Any view

Parameter

None

Description

Use the display version command to view such information as software version, issue date and the basic hardware configurations.

Example

Display the information about the system version.

<SW8800> display version

Copyright Notice:

All rights reserved (Apr 9 2005).

Without the owner's prior written consent, no decompiling

38-10

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands nor reverse-engineering shall be allowed.

Copyright (c) 2003-2005 3Com Corporation All rights reserved.

Switch uptime is 0 week, 5 days, 6 hours, 20 minutes

FABRICA 0: uptime is 0 weeks,5 days,6 hours,20 minutes

Switch 8800 with 1 MPC755 Processor

512M bytes SDRAM

16384K bytes Flash Memory

512K bytes NVRAM Memory

PCB Version : Ver.B

BootROM Version : 112

CPLD Version : 003

Software Version : S8800-VRP310-r1211

LSB1F32GC 3: uptime is 0 weeks,4 days,20 hours,9 minutes

SW8800 I/O module with 1 MPC8245 Processor

128M bytes SDRAM

0K bytes NVRAM Memory

PCB Version : REV.0

BootROM Version : 103

CPLD Version : 002

Software Version : S8800-VRP310-r1211

SubCard 1

PCB Ver : Ver.B

CPLD Ver : NONE

SubCard 2

PCB Ver : REV.0

CPLD Ver : NONE

38.3 System Debug Commands

38.3.1 debugging

Syntax

debugging { all [ timeout interval ] | module-name [ debugging-option ] }

undo debugging { all | module-name [ debugging-option ] }

View

Parameter

User view

all: Enables or disables all the debugging.

38-11

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

timeout interval: Specifies the interval during which the debugging all switch is on.

The value ranges from 1 to 1440, in minutes. With this configuration, all debugging take the time at which they are enabled as the start time, and take effect during the predefined time. And after that, all debuggings are disabled.

module-name: Specifies the module name.

debugging-option: Debugging option.

Description

Use the debugging command to enable the system debugging.

Use the undo debugging command to disable the system debugging.

By default, all the debugging processes are disabled.

Ethernet Switch provides various kinds of debugging functions for technical support personnel and experienced maintenance staff to troubleshoot the network.

Enabling the debugging will generate a large amount of debugging information and decrease the system efficiency. Specially, network system may collapse after all the debugging is enabled by debugging all command. So it is not suggested to use the

debugging all command. It is convenient for the user to disable all the debugging with

undo debugging all command.

Related command: display debugging.

Example

Enable IP Packet debugging.

<SW8800> debugging ip packet

IP packet debugging switch is on.

The above output shows that the IP packet debugging is enabled.

38.3.2 display diagnostic-information

Syntax display diagnostic-information

View

Any view

Parameter

None

38-12

3Com Switch 8800 Command Reference Guide

Description

Chapter 38 System Maintenance Commands

Use the display diagnostic-information command to view the current configuration information about all running modules. You can use all these information to help diagnose and troubleshoot the Ethernet switch.

When the Ethernet switch does not run well, you can collect all sorts of information about the switch to locate the source of fault. However, each module has its corresponding display command, which make it difficult for you to collect all the information needed. In this case, you can use display diagnostic-information command.

Example

Display all system configuration information

<SW8800> display diagnostic-information

This operation may take a few minutes, continue?[Y/N]y

---------------display clock---------------

20:12:39 UTC Mon 2000/5/8

---------------display version---------------

VRP(R) Software, Version COMWAREHZV300R001B07D011, Release 0001

VRP(tm) Lanswitch Platform Software Version COMWAREHZV300R001B07D011

S8800 Software Version V100R002B01D010SP03

………

38.4 Network Connection Test Commands

38.4.1 ping

Syntax

ping [ ip ] [ -a ip-address | -c count | -d | -h ttl | -i { interface-type interface-num |

interface-name } | -n | - p pattern | -q | -r | -s packetsize | -t timeout | -tos tos | -v |

-vpn-instance vpn-instance-name ]* host

View

Any view

Parameter

-a ip-address: Specifies the source IP address to transmit ICMP ECHO-REQUEST.

-c: count Specifies how many times the ICMP ECHO-REQUEST packet will be transmitted, ranging from 1 to 4,294,967,295. The default value is five.

-d: Configures the socket to be in DEBUGGING mode.

-h ttl: Configures TTL value for echo requests to be sent, range from 1 to 255. The default value is 255.

38-13

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

-i: Configures to choose packet sent on the interface.

interface-type: Specifies the interface type.

interface-num: Specifies the interface number.

interface-name: Specifies the interface name.

-n: Configures to take the host parameter as IP address without domain name resolution.

-p: pattern is the hexadecimal padding of ICMP echo-request, for example -p ff pads the packet completely with ff.By default, the starting padding is 0x01, crescent, and the ending padding is 0x09, and then repeat.

-q: Configures not to display any other detailed information except statistics.

-r: Record route. By default, the system does not record route.

-s packetsize: Specifies the length of ECHO-REQUEST (excluding IP and ICMP packet header) in bytes. The length of the echo-request packet defaults to 56 bytes.

-t timeout: Maximum waiting time after sending the echo-request (measured in ms).

The time defaults to 2000 ms.

-tos tos: Specifies TOS value for echo requests to be sent, range from 0 to 255. The default value is 0.

-v: Displays other received ICMP packets (non echo-response). By default, no other non echo-response ICMP packets is displayed.

-vpn-instance vpn-instance-nam:VPN instance name.

host: Destination host domain name or IP address of the destination host.

ip: Chooses IP ICMP packet.

Description

Use the ping command to check the IP network connection and the reachability of the host.

The ping command sends ICMP ECHO-REQUEST message to the destination. If the network to the destination works well, then the destination host will send ICMP

ECHO-REPLY to the source host after receiving ICMP ECHO-REQUEST.

Perform ping command to troubleshoot the network connection and line quality. The output information includes: z z

Responses to each of the ECHO-REQUEST messages. If the response message is not received until timeout, output "Request time out". Or display response message bytes, packet sequence number, TTL and response time.

The final statistics, including number of sent packets, number of response packets received, percentage of non-response packets and minimal/maximum/average value of response time.

38-14

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

If the network transmission rate is too low, you can increase the response message timeout.

Related command: tracert.

Example

Check whether the host 202.38.160.244 is reachable.

<SW8800> ping 202.38.160.244 ping 202.38.160.244 : 56 data bytes

Reply from 202.38.160.244 : bytes=56 sequence=1 ttl=255 time = 1ms

Reply from 202.38.160.244 : bytes=56 sequence=2 ttl=255 time = 2ms

Reply from 202.38.160.244 : bytes=56 sequence=3 ttl=255 time = 1ms

Reply from 202.38.160.244 : bytes=56 sequence=4 ttl=255 time = 3ms

Reply from 202.38.160.244 : bytes=56 sequence=5 ttl=255 time = 2ms

--202.38.160.244 ping statistics--

5 packets transmitted

5 packets received

0% packet loss round-trip min/avg/max = 1/2/3 ms

38.4.2 tracert

Syntax

tracert [ -a source-IP | -f first-TTL | -m max-TTL | -p port | -q num-packet |

-vpn-instance vpn-instance-name | -w timeout ] string

View

Parameter

Any view

-a source-IP: Configures the source IP address used by tracert command.

-f: Configures to verify the -f switch, first-TTL specifies an initial TTL, ranging from 0 to the maximum TTL.first-TTL defaults to 1.

-m: Configures to verify the -m switch, max-TTL specifies a maximum TTL larger than the initial TTL. max-TTL defaults to 30.

-p: Configures to verify the -p switch, port is an integer host port number. Generally, user need not modify this option. port defaults to 33434.

-q: Configures to verify the -q switch, nqueries is an integer specifying the number of query packets sent, larger than 0. num-packet defaults to 3.

-vpn-instance vpn-instance-name: VPN instance name.

-w: Configures to verify the -wf switch, timeout is an integer specifying IP packet timeout in seconds, larger than 0.timeout defaults to 5s.

38-15

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

string: IP address of the destination host or the hostname of the remote system.

Description

Use the command to Using tracert command, you can check the reachability of network connection and troubleshoot the network. User can test gateways passed by the packets transmitted from the host to the destination.

By default, when the parameters are not specified,

The tracert command sends a packet with TTL 1, and the first hop will send an ICMP error message back to indicate this packet cannot be transmitted (because of TTL timeout). Then this packet will be sent again with TTL 2, and the second hop will indicate a TTL timeout error. Perform this operation repeatedly till reaching the destination. These processes are operated to record the source address of each ICMP

TTL timeout so as to provide a path to the destination for an IP packet.

After ping command finds some error on the network, perform tracert to locate the error.

The output of tracert command includes IP address of all the gateways to the destination. If a certain gateway times out, output "***".

Example

Test the gateways passed by the packets to the destination host at 18.26.0.115.

<SW8800> tracert 18.26.0.115 tracert to allspice.lcs.mit.edu (18.26.0.115), 30 hops max

1 helios.ee.lbl.gov (128.3.112.1) 0 ms 0 ms 0 ms

2 lilac-dmc.Berkeley.EDU (128.32.216.1) 19 ms 19 ms 19 ms

3 lilac-dmc.Berkeley.EDU (128.32.216.1) 39 ms 19 ms 19 ms

4 ccngw-ner-cc.Berkeley.EDU (128.32.136.23) 19 ms 39 ms 39 ms

5 ccn-nerif22.Berkeley.EDU (128.32.168.22) 20 ms 39 ms 39 ms

6 128.32.197.4 (128.32.197.4) 59 ms 119 ms 39 ms

7 131.119.2.5 (131.119.2.5) 59 ms 59 ms 39 ms

8 129.140.70.13 (129.140.70.13) 80 ms 79 ms 99 ms

9 129.140.71.6 (129.140.71.6) 139 ms 139 ms 159 ms

10 129.140.81.7 (129.140.81.7) 199 ms 180 ms 300 ms

11 129.140.72.17 (129.140.72.17) 300 ms 239 ms 239 ms

12 * * *

13 128.121.54.72 (128.121.54.72) 259 ms 499 ms 279 ms

14 * * *

15 * * *

16 * * *

17 * * *

18 ALLSPICE.LCS.MIT.EDU (18.26.0.115) 339 ms 279 ms 279 ms

38-16

3Com Switch 8800 Command Reference Guide

38.5 Log Commands

38.5.1 display channel

Chapter 38 System Maintenance Commands

Syntax

display channel [ channel-number | channel-name ]

View

Any view

Parameter

channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.

channel-name: Specifies the channel name. the name can be channel7, channel8,

channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.

Description

Use the display channel command to view the details about the information channel.

Without parameter, display channel command shows the configurations of all the channels.

Example

Show details about the information channel 0.

<SW8800> display channel 0 channel number:0, channel name:console

MODU_ID NAME ENABLE LOG LEVEL ENABLE TRAP LEVEL ENABLE DEBUGGING LEVEL

38.5.2 display info-center

Syntax

display info-center

View

Any view

Parameter

None

Description

Use the display info-center command to view the configuration of system log and the information recorded in the memory buffer.

38-17

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

If the information in the current log/trap buffer is less than the size of buffer, display the actual log/trap information.

Related command: info-center enable,info-center loghost,info-center

logbuffer,info-center console channel,info-center monitor channel.

Example

Show the system log information.

<SW8800> display info-center

Information Center:enabled

Log host:

Console:

channel number:0, channel name:console

Monitor:

channel number:1, channel name:monitor

SNMP Agent:

channel number:5, channel name:snmpagent

Log buffer:

enabled, max buffer size:1024, current buffer size:256

current messages:6, channel number:4, channel name:logbuffer

dropped messages:0, overwrote messages:0

Trap buffer:

enabled, max buffer size:1024, current buffer size:256

current messages:0, channel number:3, channel name:trapbuffer

dropped messages:0, overwrote messages:0

Log file :

enabled,max file buffer size 32KB, current file buffer size 7KB,

channel number : 6, channel name : logfile

max log file number : 5, max length of each log file : 2MB

log file directory : cf:/logfile

Information timestamp setting:

log - date, trap - date, debug - boot

Table 38-4 Description on the fields of the display info-center command

Field

Information Center:

Log host:

Console:

Monitor:

Description

The status of the information center

The status of the log host, including its IP address, occupied channel number, channel name, language and the priority level of the log host.

The status of the console port, including the occupied channel name and channel number.

The status of the monitoring port, including the occupied channel number and channel name.

38-18

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

SNMP Agent:

Log buffer:

Trap buffer:

Log file

The status of the SNMP agent, including the occupied channel number and channel name.

The status of the log buffer, including enable status, maximum size, current size, number of current messages, channel name, channel number, number of dropped messages, number of the overwritten messages.

The status of the trap buffer, including enable status, maximum size, current size, number of current messages, channel name, channel number, number of dropped messages, number of the overwritten messages.

The status of the log file, including enable status, maximum file buffer size, channel number, channel name, maximum number of log files, maximum size of the log file, storage path of log files.

Information timestamp setting:

Information timestamp settings, including the timestamp type of log messages, trap messages and debugging messages.

38.5.3 display logbuffer

Syntax

display logbuffer [ summary ] [ level [ levelnum | emergencies | alerts | critical |

debugging | errors | informational | notifications | warnings ] ] [ | [ begin | exclude

| include text ] [ size sizenum ]

View

Any view

Parameter

level: level.

levelnum: Information level value, ranging from 1 to 8.

emergencies, alerts, critical, debugging, errors, informational, notifications,

warnings are the names of the eight log severity levels. You can type the values or

names of the desired severity levels, which are equivalent, in commands. Table 38-5

gives the details.

Table 38-5 Severity levels defined in the information center

Severity Value Description

alerts 2 Errors you must correct immediately critical 3 errors

38-19

3Com Switch 8800 Command Reference Guide errors warnings notifications informational

4

5

6

7

Chapter 38 System Maintenance Commands

Errors requiring your attention but not critical

Warning, an error may occur

Information requiring your attention

General prompt information

size: Configures the size of buffer.

sizenum: Size of buffer (number of messages which can be kept); ranging from 1 to

1024. By default, the size of the buffer is 512.

|: Filters the configuration information to be output by regular expression.

begin: Begins with the line that matches the regular expression.

exclude: Excludes lines that match the regular expression.

include: Includes lines that match the regular expression.

Text: Defines the regular expression.

Table 38-6 Special characters in the regular expression

Special characters

Description

_

(

Restriction

If the first character in the regular

Underscore, similar to a wildcard and can stand for these characters: expression is not a underscore, then there is no restriction on the number of the underscore (but it is restricted by the command length)

(^|$|[,(){} ])

A space, the beginning of the input string, the end of the input string

If the first character in the regular expression is an underscore, then there should be less than five consecutive underscores.

If the underscores in a command are discrete, on the first group of underscores are filtered for the output information, but not the subsequent underscores.

Left parenthesis, push flag in program

It is recommended not to use this character in the regular expression.

Description

Use the display logbuffer command to view the attribute of logbuffer and the information recorded in logbuffer.

Example

Show the system logbuffer attribute and the log information in logbuffer.

38-20

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

<SW8800> display logbuffer

Logging buffer configuration and contents:enabled

Allowed max buffer size : 1024

Actual buffer size : 512

Channel number : 4 , Channel name : logbuffer

Dropped messages : 0

Overwritten messages : 0

Current messages : 91

38.5.4 display logbuffer summary

Syntax

display logbuffer summary [ level severity ]

View

Parameter

Any view

level: Information level.

severity: Information level, do not output information below this level. Information at different levels is as the following table:

Table 38-7 Severity levels defined in the information center

Severity Value Description

emergencies 1 Emergent alerts 2 Errors you must correct immediately errors warnings notifications informational

6

7

4

5

Errors requiring your attention but not critical

Warning, an error may occur

Information requiring your attention

General prompt information

Description

Use the display logbuffer summary command to view the summary information recorded in logbuffer.

Related command: info-center enable,info-center loghost,info-center

logbuffer,info-center console channel,info-center monitor channel.

38-21

3Com Switch 8800 Command Reference Guide

Example

Chapter 38 System Maintenance Commands

Show the summary information recorded in logbuffer.

<SW8800> display logbuffer summary

EMERG ALERT CRIT ERROR WARN NOTIF INFO DEBUG

0 0 0 0 94 0 1 0

38.5.5 display trapbuffer

Syntax

display trapbuffer [ summary ] [ level [ levelnum | emergencies | alerts | critical |

debugging | errors | informational | notifications | warnings ] ] [size sizenum]

View

Parameter

Any view

size: Configures the size of buffer.

summary: Number of statistical logs.

sizenum: Size of buffer (number of messages which can be kept), ranging from 1 to

1024. By default, the size of the buffer is 512.

level: level.

levelnum: Information level value, ranging from 1 to 8.

emergencies, alerts, critical, debugging, errors, informational, notifications,

warnings are the names of the eight log severity levels. You can type the values or

names of the desired severity levels, which are equivalent, in commands. Table 38-5

gives the details.

Table 38-8 Severity levels defined in the information center

Severity Value Description

alerts errors warnings notifications informational

2

6

7

4

5

Errors you must correct immediately

Errors requiring your attention but not critical

Warning, an error may occur

Information requiring your attention

General prompt information

38-22

3Com Switch 8800 Command Reference Guide

Description

Chapter 38 System Maintenance Commands

Use the display trapbuffer command to view the attribute of trapbuffer and the information recorded in trapbuffer.

Example

Show the system trapbuffer attribute and the log information in trapbuffer.

<SW8800> display trapbuffer

Trapping Buffer Configuration and contents: enabled allowed max buffer size : 1024 actual buffer size : 256 channel number : 3 , channel name : trapbuffer dropped messages : 0 overwrote messages : 0 current messages : 6

#Dec 31 14:01:25 2004 SW8800 DEV/2/LOAD FINISHED:

Trap 1.3.6.1.4.1.2011.2.23.1.12.1.20: frameIndex is 0, slotIndex 0.4

#Dec 31 14:01:33 2004 SW8800 DEV/2/BOARD STATE CHANGE TO NORMAL:

Trap 1.3.6.1.4.1.2011.2.23.1.12.1.11: frameIndex is 0, slotIndex 0.2

#Dec 31 14:01:40 2004 SW8800 DEV/2/BOARD STATE CHANGE TO NORMAL:

Trap 1.3.6.1.4.1.2011.2.23.1.12.1.11: frameIndex is 0, slotIndex 0.

38.5.6 info-center channel name

Syntax

info-center channel channel-number name channel-name

undo info-center channel channel-number

View

Parameter

System view

channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels. channel-name: Specifies the channel name with a character string not exceeding 30 characters, excluding digit, "-", "/" or "\". .

38-23

3Com Switch 8800 Command Reference Guide

Description

Chapter 38 System Maintenance Commands

Use the info-center channel name command to rename a channel specified by the

channel-number as channel-name.

Use the undo info-center channel command to restore the channel name.

The system assigns a channel in each output direction by default. See the table below.

Table 38-9 Numbers and names of the channels for log output

Output direction

Console

Monitor

Info-center loghost

Trap buffer

Logging buffer

Channel number Default channel name

0 console

1 monitor

2 loghost

3 trapbuf

4 logbuf

Log file 6

Note that the channel name cannot be duplicated.

Logfile

Example

Rename the channel 0 as execconsole.

[SW8800] info-center channel 0 name execconsole

38.5.7 info-center console channel

Syntax

info-center console channel { channel-number | channel-name }

undo info-center console channel

View

Parameter

System view

channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.

channel-name: Specifies the channel name. The name can be channel7, channel8,

channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.

38-24

3Com Switch 8800 Command Reference Guide

Description

Chapter 38 System Maintenance Commands

Use the info-center console channel command to configure the channel through which the log information is output to the console.

By default, Ethernet switches do not output log information to the console.

This command takes effect only after system logging is started.

Related command: info-center enable, display info-center.

Example

Configure to output log information to the console through channel 0.

[SW8800] info-center console channel 0

38.5.8 info-center enable

Syntax

info-center enable

undo info-center enable

View

System view

Parameter

None

Description

Use the info-center enable command to enable the system log function.

Use the undo info-center enable command to disable system log function.

By default, system log function is enabled.

Only after the system log function is enabled can the system output the log information to the info-center loghost and console, and so on.

Related command: info-center loghost, info-center logbuffer, info-center console

channel, info-center monitor channel, display info-center.

Example

Enable the system log function.

[SW8800] info-center enable

38-25

3Com Switch 8800 Command Reference Guide

38.5.9 info-center logbuffer

Chapter 38 System Maintenance Commands

Syntax

info-center logbuffer [ channel { channel-number | channel-name } | size buffersize ]*

undo info-center logbuffer [ channel | size ]

View

System view

Parameter

Description

Use the info-center logbuffer command to configure to output information to the memory buffer.

Use the undo info-center logbuffer command to cancel the information output to buffer.

By default, the switch outputs information to the memory buffer whose size is 512.

This command takes effect only after the system logging is enabled.

Related command: info-center enable, display info-center.

Example

channel: Configures the channel to output information to buffer.

channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.

channel-name: Specifies the channel name. The name can be channel7, channel8,

channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.

size: Configures the size of buffer.

buffersize: Size of buffer (number of messages which can be kept).

Send log information to buffer and sets the size of buffer as 50.

[SW8800] info-center logbuffer size 50

38.5.10 info-center logfile

Syntax

info-center logfile

undo info-center logfile

View

System view

38-26

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 38 System Maintenance Commands

Description

Use the info-center logfile command to configure to output information to the logfile.

Use the undo info-center logfile command to cancel the information output to logfile.

This command takes effect only after the system logging is enabled.

Related command: info-center enable, display info-center.

Example

Send log information to logfile.

[SW8800] info-center logfile

38.5.11 info-center loghost

Syntax

info-center loghost host-ip-addr [ channel { channel-number | channel-name } |

facility local-number | language { chinese | english } ]*

undo info-center loghost host-ip-addr

View

System view

Parameter

host-ip-addr: IP address of info-center loghost.

channel: Configures information channel of the info-center loghost.

channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.

channel-name: Specifies the channel name. The name can be channel7, channel8,

channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.

facility: Configures the recording tool of info-center loghost.

local-number: Record tool of info-center loghost, ranging from local0 to local7.

language: Sets the logging language.

chinese,english: Language used in log file.

Description

Use the info-center loghost command to configurethe system to output information to the log host.

Use the undo info-center loghost command to cancel output to info-center loghost.

38-27

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

By default, Ethernet switches do not output information to info-center loghost.

This command takes effect only after the system logging is enabled.

Note:

You must input the correct IP address when configuring the IP address for the log host by using the info-center loghost command. If you input a loopback address, you are prompted for invalid address.

Related command: info-center enable, display info-center.

Example

Configure to send log information to the UNIX workstation at 202.38.160.1.

[SW8800] info-center loghost 202.38.160.1

38.5.12 info-center loghost source

Syntax

info-center loghost source{ interface-name | interface-type interface-number }

undo info-center loghost source

View

System view

Parameter

{ interface-name | interface-type interface-number }:Layer 3 interface on the switch.

Description

Use the command to Using info-center loghost source command, you can set source address of the packets sent to loghost as the address of the interface specified by the

interface-name.

Use the command to Using undo info-center loghost source command, you can cancel the setting source address of the packets sent to loghost.

Related command: info-center enable, display info-center.

Example

Set source address of the packets sent to loghost as the address of the VLAN interface

1.

[SW8800] info-center loghost source vlan-interface 1

38-28

3Com Switch 8800 Command Reference Guide

38.5.13 info-center monitor channel

Chapter 38 System Maintenance Commands

Syntax

info-center monitor channel { channel-number | channel-name }

undo info-center monitor channel

View

System view

Parameter

channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.

channel-name: Specifies the channel name. The name can be channel7, channel8,

channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.

Description

Use the info-center monitor channel command to configure the channel to output the log information to the user terminal.

Use the undo info-center monitor channel command to restore the channel to output the log information to the user terminal to default value.

By default, Ethernet switches do not output log information to user terminal.

This command takes effect only after system logging is started.

Related command: info-center enable, display info-center.

Example

Configure channel 0 to output log information to user terminal.

[SW8800] info-center monitor channel 0

38.5.14 info-center snmp channel

Syntax

info-center snmp channel { channel-number | channel-name }

undo info-center snmp channel

View

System view

Parameter

channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels. By default, channel 5 is used.

38-29

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

channel-name: Specifies the channel name. The name can be channel7, channel8,

channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.

Description

Use the info-center snmp channel command to configure new channel for transmitting the SNMP information.

Use the undo info-center snmp channel command to restore the default channel for transmitting the SNMP information.

The default channel for transmitting the SNMP information is channel 5.

Related command: display snmp.

Example

Configure channel 6 as the SNMP information channel.

[SW8800] info-center snmp channel 6

38.5.15 info-center source

Syntax

info-center source { modu-name | default } channel { channel-number |

channel-name } [ debug { level severity | state state }* | log { level severity | state

state }* | trap { level severity | state state }* ]*

undo info-center source { modu-name | default | all } channel { channel-number |

channel-name }

View

Parameter

System view

modu-name: Module name.

Table 38-10 gives the details.

Table 38-10 The module name field

Module name Description

ACL

ADBM

ARP

BGP

CFM

ACL (access control list) module

MAC address management module

ARP (address resolution protocol) module

BGP (border gateway protocol) module

Configuration file management module

38-30

3Com Switch 8800 Command Reference Guide

Module name

default

DEV

DHCP

Chapter 38 System Maintenance Commands

Description

Default setting of all modules

Device management module

Dynamic host configuration protocol module

DNS

DRVMPLS

DRV_L2

DRV_L3

DRV_L3MC

MPLS

DRVQACL

DRVVPLS

FTPS

HA

IFNET

IGSP

IP

ISIS

L2INF

L2V

LACL

LDP

LQOS

LSPAGENT

LSPM

MIX

MMC

Domain name server module

MPLS (multiprotocol label switching) drive module

Layer 2 drive module

Layer 3 drive module

Layer 3 multicast module

MPLS (multiprotocol label switching) drive module

QACL drive module

VPLS (virtual private LAN service) drive module

FTP server module

High availability module

Interface management module

IGMP snooping module

IP (internet protocol) module

IS-IS (intermediate system-to-intermediate system intradomain routing protocol) module

L2 interface management module

L2 VPN module

LAN switch ACL module

LDP (label distribution protocol) module

LAN switch QoS module

LSP (label switched path) agent module

LSPM (label switch path management) module

Dual system management module

MMC module

38-31

3Com Switch 8800 Command Reference Guide

Module name

MPLSFW

MPM

MSDP

MSTP

NAT

NTP

OSPF

PHY

PPP

Chapter 38 System Maintenance Commands

Description

MPLS forward module

Multicast port management module

MSDP (multicast source discovery protocol) module

MSTP (multiple spanning tree protocol) module

NAT (network address translation) module

NTP (network time protocol) module

OSPF (open shortest path first) module

Physical sublayer & physical layer module

PPP (point to point protocol) module

RM

RMON

RSA

RTPRO

SHELL

SNMP

Routing management module

Remote monitor module

RSA (Revest, Shamir and Adleman) encryption module

Routing protocol module

User interface module

SNMP (simple network management protocol) module

SYSM System manage veneer module

VFS

VLAN

VRRP

VTY

default: All the modules.

log: Log information.

trap: Trap information.

VFS (virtual file system) module

VLAN (virtual local area network) module

VRRP (virtual router redundancy protocol) module

VTY (virtual type terminal) module

38-32

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

all: Clears all the information filtering configuration on the channelnum channel except the default one.

debugging: Debugging information.

level: Level.

severity: Information level, do not output information below this level.

Table 38-11 gives detailed severity information:

Table 38-11 Severity levels defined in the information center

Severity Value Description

alerts errors warnings notifications informational

2

6

7

4

5

Errors you must correct immediately

Errors requiring your attention but not critical

Warning, an error may occur

Information requiring your attention

General prompt information

By default, the information level of each channel is as follows:

Table 38-12 Default information level of each channel

channel

Log information level

Trap information level

Debugging information level

Console warning debugging debugging

Terminal warning debugging debugging

Log host informational debugging

Trapbuffer informational warning debugging debugging

Logbuffer warning debugging debugging

SNMPagent debugging warning debugging

Channel7 debugging debugging debugging

Channel8 debugging debugging debugging

Channel9 debugging debugging debugging

By default, the information switch state of each channel is shown in Table 38-13:

38-33

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

Table 38-13 Default information switch state of each channel

Channel

Log information switch

Trap information switch

Debug information switch

Console Enable Disable Enable

Terminal Enable Disable Enable

Trapbuffer Disable

Logbuffer Enable

Enable Disable

Disable Disable

SNMPagent Disable Enable Disable

Logfile Enable Disable Disable

Note:

If you only specify the level for one/two of the three types of information, the level(s) of the unspecified two/one return(s) to the default. For example, if you only define the level of the log information, then the levels of the trap and debugging information return to the defaults.

channel-number: Channel number to be set.

channel-name: Channel name to be set. The name can be channel7, channel8,

channel9, console, logbuffer, loghost, monitor, snmpagent, trapbuffer, logfile.

state: Sets the state of the information.

state: Specifies the state as on or off.

Description

Use the info-center source command to add/delete a record to the information channel.

Use the undo info-center source command to cancel the contents of the information channel.

Use this command to configure the information of log/trap/debugging type. For example, for the filter of IP module log output, you can configure to output the logs at a level higher than warnings to the log host and output those higher than informational to the log buffer. You can also configure to output the trap information on the IP module to a specified trap host, and so on.

38-34

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

The channels for filtering in all the directions are specified by this configuration command. All the information will be sent to the corresponding directions through the specified channels. You can configure the channels in the output direction, channel filter information, filtering and redirecting of all kinds of information.

At present, the system distributes an information channel in each output direction by default, shown as follows:

Table 38-14 Default information channel in each output direction

Console

Monitor

Output direction

Info-center loghost

Log buffer

Trap buffer

Information channel name console monitor loghost logbuffer trapbuffer snmp snmpagent

Log file logfile

In addition, each information channel has a default record with the module name

“default” and module number as 0xffff0000. However, for different information channel, the default log, trap and debugging settings in the records may be different with one another. Use default configuration record if a module does not have any specific configuration record in the channel.

Example

Configure to enable the log information of VLAN module in SNMP channel and allows the output of the information with a level higher than emergencies.

[SW8800] info-center source vlan channel snmp log level emergencies

38.5.16 info-center timestamp

Syntax

info-center timestamp { log | trap | debugging } { boot | date | none }

undo info-center timestamp { log | trap | debugging }

View

System view

Parameter

log: Log information.

38-35

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

trap: Trap information.

debugging: Debugging information.

boot: Time elapsing after system starts. Format: xxxxxx.yyyyyy, xxxxxx is the high 32 bits of the elapsed time (in milliseconds) after system starts, and yyyyyy is the low 32 bits.

date: Current system date and time. It shows as yyyy/mm/dd-hh:mm:ss in Chinese environment and mm dd hh:mm:ss yyyy in Western language environment.

none: No timestamp format.

Description

Use the info-center timestamp command to configure the timestamp output format in debugging/trap information.

Use the undo info-center timestamp command to disable the output of timestamp field.

By default, date stamp is used.

Example

Configure the debugging information timestamp format as boot.

[SW8800] info-center timestamp debugging boot

38.5.17 info-center trapbuffer

Syntax

info-center trapbuffer [ size buffersize | channel { channel-number |

channel-name } ]*

undo info-center trapbuffer [ channel | size ]

View

System view

Parameter

size: Configures the size of the trap buffer.

buffersize: Size of trap buffer (numbers of messages).

channel: Configures the channel to output information to trap buffer.

channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.

channel-name: Specifies the channel name.

38-36

3Com Switch 8800 Command Reference Guide

Description

Chapter 38 System Maintenance Commands

Use the info-center trapbuffer command to output information to the trap buffer.

Use the undo info-center trapbuffer command to cancel output information to trap buffer.

By default, output information is transmitted to trap buffer and size of trap buffer is 256.

This command takes effect only after the system logging is enabled.

The information can be output to the trap buffer by configuring the size of the buffer.

Related command: info-center enable, display info-center.

Example

Send information to the trap buffer and sets the size of buffer as 30.

[SW8800] info-center trapbuffer size 30

38.5.18 reset logbuffer

Syntax reset logbuffer

View

User view

Parameter

None

Description

Use the reset logbuffer command to reset information in log buffer.

Example

Clear information in log buffer.

<SW8800> reset logbuffer

38.5.19 reset trapbuffer

Syntax reset trapbuffer

View

User view

38-37

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 38 System Maintenance Commands

Description

Use the reset trapbuffer command to reset information in trap buffer.

Example

Clear information in trap buffer.

<SW8800> reset trapbuffer

38.5.20 terminal debugging

Syntax

terminal debugging

undo terminal debugging

View

User view

Parameter

None

Description

Use the terminal debugging command to configure to display the debugging information on the terminal.

Use the undo terminal debugging command to configure not to display the debugging information on the terminal.

By default, the displaying function is disabled.

Related command: debugging.

Example

Enable the terminal display debugging.

<SW8800> terminal debugging

38.5.21 terminal logging

Syntax

terminal logging

undo terminal logging

38-38

3Com Switch 8800 Command Reference Guide

View

User view

Chapter 38 System Maintenance Commands

Parameter

None

Description

Use the terminal logging command to enable terminal log information display.

Use the undo terminal logging command to disable terminal log information display.

By default, the log information display is enabled on the console and disabled on the terminal.

Example

Disable the terminal log display.

<SW8800> undo terminal logging

38.5.22 terminal monitor

Syntax

terminal monitor

undo terminal monitor

View

User view

Parameter

None

Description

Use the terminal monitor command to enable the log debugging/log/trap on the terminal monitor.

Use the undo terminal monitor command to disable these functions.

By default, enable these functions for the console user and disable them for the terminal user.

This command only takes effect on the current terminal where the commands are input.

The debugging/log/trap information can be output to the current terminal, beginning in user view. When the terminal monitor is shut down, no debugging/log/trap information will be displayed in local terminal, which is equals to having performed undo terminal

debugging, undo terminal logging, undo terminal trapping commands. When the terminal monitor is enabled, you can use terminal debugging / undo terminal

38-39

3Com Switch 8800 Command Reference Guide Chapter 38 System Maintenance Commands

debugging, terminal logging / terminal logging and terminal trapping / undo

terminal trapping respectively to enable or disable the corresponding functions.

Example

Disable the terminal monitor.

<SW8800> undo terminal monitor

38.5.23 terminal trapping

Syntax

terminal trapping

undo terminal trapping

View

User view

Parameter

None

Description

Use the terminal trapping command to enable terminal trap information display.

Use the undo terminal trapping command to disable this function.

By default, this function is enabled.

Example

Enable trap information display.

<SW8800> terminal trapping

38-40

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

Chapter 39 SNMP Configuration Commands

39.1 SNMP Configuration Commands

39.1.1 display snmp-agent

Syntax

display snmp-agent { local-engineid | remote-engineid }

View

Any view

Parameter

local-engineid: Local engine ID.

remote-engineid: Remote engine ID.

Description

Use the display snmp-agent { local-engineid | remote-engineid } command to view engine ID of current device.

SNMP engine is the core of SNMP entity. It performs the function of sending, receiving and authenticating SNMP message, extracting PDU, packet encapsulation and the communication with SNMP application, and so on.

Example

Display the engine ID of current device.

<SW8800> display snmp-agent local-engineid

SNMP local engineID: 00000009020000000C025808

The above displayed information ”SNMP local engine ID” represents local SNMP engine ID.

39.1.2 display snmp-agent community

Syntax

display snmp-agent community [ read | write ]

View

Any view

Parameter

39-1

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

read: Displays read-only community information.

write: Displays read-write community information.

Description

Use the display snmp-agent community command to view the currently configured community names.

Example

Display the currently configured community names.

<SW8800> display snmp-agent community

Community name:public

Group name:public

Storage-type: nonVolatile

Community name:private

Group name:private

Storage-type: nonVolatile

Table 39-1 Description on the fields of the display snmp-agent community command community name

Field

Group name

Description

Community name

Group name

39.1.3 display snmp-agent group

Syntax

display snmp-agent group [ group-name ]

View

Any view

Parameter

groupname: Group name.

Description

Use the display snmp-agent group command to view group name, security mode, state of various views and storage modes.

39-2

3Com Switch 8800 Command Reference Guide

Example

Chapter 39 SNMP Configuration Commands

Display SNMP group name and safe mode.

<SW8800> display snmp-agent group

Group name: 3Com

Security model: v2c noAuthnoPriv

Readview: ViewDefault

Writeview: <no specified>

Notifyview :<no specified>

Storage-type: nonVolatile

The following table describes the output fields.

Table 39-2 Description on the fields of the display snmp-agent group command

Field Description

groupname SNMP Group name

Security model The security mode adopted by SNMP readview Read-only MIB view name corresponding to that group writeview notifyview

Writable MIB view corresponding to that group

The name of the notify MIB view corresponding to that group

39.1.4 display snmp-agent mib-view

Syntax

display snmp-agent mib-view [ exclude | include | { viewname mib-view } ]

View

Any view

Parameter

exclude: Displays the SNMP MIB view excluded.

Include: Displays the SNMP MIB view included.

viewname: Displays the SNMP MIB view according to the mib view name.

mib-view: Specifies the MIB view name.

Description

Use the display snmp-agent mib-view command to view the MIB view configuration information of the Ethernet switch.

39-3

3Com Switch 8800 Command Reference Guide

Example

Chapter 39 SNMP Configuration Commands

Display the information about the currently configured MIB view.

<SW8800> display snmp-agent mib-view

View name:ViewDefault

MIB Subtree:internet

Subtree mask:

Storage-type: nonVolatile

View Type:included

View status:active

View name:ViewDefault

MIB Subtree:snmpUsmMIB

Subtree mask:

Storage-type: nonVolatile

View Type:excluded

View status:active

View name:ViewDefault

MIB Subtree:snmpVacmMIB

Subtree mask:

Storage-type: nonVolatile

View Type:excluded

View status:active

The following table describes the output fields.

Table 39-3 Description on the fields of the display snmp-agent mib-view command

Field Description

View name View name

MIB Subtree

Subtree mask

MIB subtree

Subtree mask

View Type

View status

Permit or forbid access to an MIB object

Indicate the line state in the table

Caution:

If the SNMP Agent is disabled, "Snmp Agent disabled" will be displayed after you execute the above display commands.

39-4

3Com Switch 8800 Command Reference Guide

39.1.5 display snmp-agent statistics

Chapter 39 SNMP Configuration Commands

Syntax display snmp-agent statistics

View

Any view

Parameter

None

Description

Use the display snmp-agent statistics command to view current state of SNMP communication.

This command provides a counter for SNMP operations.

Example

Display the current state of SNMP communication.

<SW8800> display snmp-agent statistics

9 Messages delivered to the SNMP entity

0 Messages which were for an unsupported version

0 Messages which used a SNMP community name not known

0 Messages which represented an illegal operation for the community supplied

0 ASN.1 or BER errors in the process of decoding

9 Messages passed from the SNMP entity

0 SNMP PDUs which had badValue error-status

0 SNMP PDUs which had genErr error-status

0 SNMP PDUs which had noSuchName error-status

0 SNMP PDUs which had tooBig error-status (Maximum packet size 2000)

9 MIB objects retrieved successfully

0 MIB objects altered successfully

0 GetRequest-PDU accepted and processed

9 GetNextRequest-PDU accepted and processed

9 GetResponse-PDU accepted and processed

0 SetRequest-PDU accepted and processed

0 Trap PDUs accepted and processed

The following table describes the output fields.

39-5

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

Table 39-4 Description on the fields of the display snmp-agent statistics command

Field Description

0 Messages delivered to the SNMP entity

Total number of the input SNMP packets

0 Messages which were for an Number of packets with version unsupported version information error

0 Messages which used an unknown community name

Number of packets with community name error

0 Messages which represented an

Number of packets with authority error illegal operation for the community supplied corresponding to the community name

0 ASN.1 or BER errors in the process of decoding

Number of SNMP packets with encoding error

0 MIB objects retrieved successfully

0 MIB objects altered successfully

Number of variables requested by NMS

The number of variables set by NMS

0 Get-request PDUs accepted and Number of the received packets processed requested by get

0 Get-next PDUs accepted and Number of the received packets processed requested by get-next

0 Set-request PDUs accepted and Number of the received packets processed requested by set

3 Messages passed from the SNMP entity

Total number of the output SNMP packets

0 SNMP PDUs which had a tooBig error

(Maximum packet size 1500)

Number SNMP packet with too_big error

0 SNMP PDUs which had a Number of the packets requesting noSuchName error nonexistent MIB objects

0 SNMP PDUs which had a badValue error

Number of SNMP packets with

Bad_values error

0 SNMP PDUs which had a general error

Number of SNMP packets with

General_errors

0 Response PDUs accepted and

Number of the response packets sent processed

3 Trap PDUs accepted and processed Number of the sent Trap packets

39.1.6 display snmp-agent sys-info

Syntax

display snmp-agent sys-info [ contact | location | version ]*

39-6

3Com Switch 8800 Command Reference Guide

View

Any view

Parameter

None

Chapter 39 SNMP Configuration Commands

Description

Use the display snmp-agent sys-info command to view the character string sysContact (system contact), character string describing the system location and the version information about the running SMNMP in the system.

Example

Display the character string sysContact (system contact).

<SW8800> display snmp-agent sys-info contact

The contact person for this managed node:

R&D 3Com Corporation, Marlboro, Massachusetts

The above information represents that the contact person for this machine is R&D at

3Com Corporation in Marlboro, Massachusetts.

Display the character string describing the system location.

<SW8800> display snmp-agent sys-info location

The physical location of this node:

Marlboro, Massachusetts

The above information represents that the physical location of this machine is: Marlboro,

Massachusetts.

Display the version information of running SNMP

<SW8800> display snmp-agent sys-info version

SNMP version running in the system:

SNMPv3

The above information represents that the SNMP version running in the system is:

SNMPv3.

39.1.7 display snmp-agent usm-user

Syntax

display snmp-agent usm-user [ engineid engineid | group groupname | username

username ]*

View

Any view

39-7

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 39 SNMP Configuration Commands

engineid: Displays user information with specified engine ID.

username: Displays user information with specified user name.

groupname: Displays user information of specified group.

Description

Use the display snmp-agent usm-user command to view information of all the SNMP usernames in the group username list.

SNMP user is the remote user executing SNMP administrative operation. You can use the snmp-agent usm-user command to specify the SNMP user.

Example

Display the information of all the current users.

<SW8800> display snmp-agent usm-user

User name: NotifyV3

Group name: NotifyGroup

Authencation Mode: sha

Privacy Mode: des

Engine ID: 800007DB00E0FC2085026877 active

User name: publicV3

Group name: groupV3

Authencation Mode: no

Privacy Mode: no

Engine ID: 800007DB00E0FC2085026877 active

Acl:2000

The following table describes the output fields.

Table 39-5 Description on the fields of the display snmp-agent usm-user command

Field

User name

Description

Character string identifying the SNMP user

Group name Character string identifying the group the user belongs to

Authencation Mode Authentication code

Privacy Mode

Engine ID

Acl

Personal code

Character string identifying the SNMP device

Character string identifying the access control list

39-8

3Com Switch 8800 Command Reference Guide

39.1.8 enable snmp trap

Chapter 39 SNMP Configuration Commands

Syntax

enable snmp trap updown

undo enable snmp trap updown

View

Ethernet port view / VLAN interface view

Parameter

None

Description

Use the enable snmp trap updown command to enable current port or VLAN interface to transmit the LINK UP and LINK DOWN trap messages.

Use the undo enable snmp trap updown command to disable current port or VLAN interface to transmit the LINK UP and LINK DOWN trap messages.

The enable snmp trap command should be used in cooperation with the snmp-agent

trap enable and the snmp-agent target-host commands. The snmp-agent

target-host command is used to specify which hosts can receive the trap messages.

To enable the transmitting of trap messages, you must execute the snmp-agent

target-host command at least once.

Example

Enable current port Ethernet6/1/1 to transmit the LINK UP and LINK DOWN trap information with the community name public

[SW8800-Ethernet6/1/1] snmp trap updown enable

[SW8800] snmp-agent target-host trap address udp-domain 10.1.1.1 params securityname public

[SW8800] interface ethernet6/1/1

[SW8800-Ethernet6/1/1] enable snmp trap updown

39.1.9 snmp-agent community

Syntax

snmp-agent community { read | write } community-name [ [ mib-view view-name ]

[ acl acl-list ] ]

undo snmp-agent community community-name

View

System view

39-9

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 39 SNMP Configuration Commands

read: Indicates that MIB object can only be read.

write: Indicates that MIB object can be read and written.

community-name: Community name character string.

view-name: MIB view name.

acl acl-list: sets access control list for specified community.

Description

Use the snmp-agent community command to configure community access name and enable the access to SNMP.

Use the undo snmp-agent community command to cancel the settings of community access name.

Example

Configure community name as comaccess and permits read-only access by this community name.

[SW8800] snmp-agent community read comaccess

Configure community name as mgr and permits read-write access.

[SW8800] snmp-agent community write mgr

Delete the community name comaccess.

[SW8800] undo snmp-agent community comaccess

39.1.10 snmp-agent group

Syntax

snmp-agent group { v1 | v2c } group-name [ read-view read-view ] [ write-view

write-view ] [ notify-view notify-view ] [ acl acl-list ]

undo snmp-agent group { v1 | v2c } group-name

snmp-agent group v3 group-name [ authentication | privacy ] [ read-view

read-view ] [ write-view write-view ] [notify-view notify-view ] [ acl acl-list ]

undo snmp-agent group v3 group-name [ authentication | privacy ]

View

Parameter

System view

v1: V1 security mode.

v2c: V2C security mode.

39-10

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

v3: V3 security mode.

group-name: Group name, ranging from 1 to 32 bytes.

authentication: Configures to authenticate the packet without encryption.

privacy: Configures to authenticate and encrypt the packet.

read-view: Configures to allow read-only view settings.

read-view: Read-only view name, ranging from 1 to 32 bytes.

write-view: Configures to allow read-write view settings.

write-view: Name of read-write view, ranging from 1 to 32 bytes.

notify-view: Configures to allow notify view settings.

notify-view: Specifies the notify view name, ranging from 1 to 32 bytes.

acl Sets access control list for this group name.

acl-list: access control list

Description

Use the snmp-agent group command to configure a new SNMP group, that is, to map

SNMP user to SNMP view.

Use the undo snmp-agent group command to cancel a specified SNMP group.

By default, the SNMP group configured using the snmp-agent group v3 command is in none authentication mode.

Related command: snmp-agent mib-view and snmp-agent usm-user.

Example

Create an SNMP group named 3Com.

[SW8800] snmp-agent group v3 3Com.

39.1.11 snmp-agent local-engineid

Syntax

snmp-agent local-engineid engineid

undo snmp-agent local-engineid

View

System view

Parameter

engineid: Specifies the engine ID with a character string, only composed of hexadecimal numbers between 5 and 32 including.

39-11

3Com Switch 8800 Command Reference Guide

Description

Chapter 39 SNMP Configuration Commands

Use the snmp-agent local-engineid command to configure a name for a local or remote SNMP engine on the Ethernet Switch.

Use the command to Using undo snmp-agent local-engineid command, you can restore the default setting of engine ID.

By default, the engine ID is corporation number + device information. Device information is determined according to different products. It can be IP address, MAC address or user defined text. However, you must use numbers in hexadecimal form.

Example

Configure the ID of a local or remote device as 1234512345.

[SW8800] snmp-agent local-engineid 1234512345

39.1.12 snmp-agent mib-view

Syntax

snmp-agent mib-view { included | excluded } view-name oid-tree

undo snmp-agent mib-view view-name

View

System view

Parameter

Description

Use the snmp-agent mib-view command to create or update the view information.

Use the undo snmp-agent mib-view command to cancel the view information

By default, the view name is ViewDefault. OID is 1.3.6.1.

This command supports the parameter input of both OID and node name.

Related command: snmp-agent group.

Example

included: Includes this MIB subtree.

excluded: Excludes this MIB subtree.

view-name: Specifies the view name, with a character string, ranging from 1 to 32 characters.

oid-tree: MIB object subtree. It can be a character string of the variable OID, or a variable name, ranging from 1 to 255 characters.By default, OID is 1.3.6.1.

Create a view that consists of all the objects of MIB-II.

39-12

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

[SW8800] snmp-agent mib-view included mib2 1.3.6.1.2.1

39.1.13 snmp-agent packet max-size

Syntax

snmp-agent packet max-size byte-count

undo snmp-agent packet max-size

View

System view

Parameter

Description

Use the snmp-agent packet max-size command to configure the size of SNMP packet that the Agent can send/receive.

Use the undo snmp-agent packet max-size command to restore the default size of

SNMP packet.

The sizes of the SNMP packets received/sent by the Agent are different in different network environment.

Example

byte-count: Specifies the size of SNMP packet (measured in bytes), ranging from 484 to 17940. By default, the size is 2000 bytes.

Set the size of SNMP packet to 1042 bytes.

[SW8800] snmp-agent packet max-size 1042

39.1.14 snmp-agent sys-info

Syntax

snmp-agent sys-info { contact sysContact | location syslocation | version { { v1 |

v2c | v3 } * | all } }

undo snmp-agent sys-info { { contact | location }* | version { { v1 | v2c | v3 } * | all } }

View

System view

Parameter

contact:The contact information for system maintenance.

sysContact: Characters describe the contact information for system maintenance.

location: Sets the geographical location of the device.

39-13

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

sysLocation: Geographical location of the device.

version: version of running SNMP.

v1: SNMP V1.

v2c: SNMP V2C.

v3: SNMP V3.

*: Indicates that you can select more than one item from the three options v1, v2c, and

v3. Here, you must select at least one option, and you can select all the three options.

all: all SNMP version (includes SNMP V1, SNMP V2C, SNMP V3).

Description

Use the snmp-agent sys-info command to configure system information such as geographical location of the device, contact information for system maintenance and version information of running SNMP.

Use the undo snmp-agent sys-info location command to restore the default value.

Related command: display snmp-agent sys-info.

Example

Set the system maintenance information to "Dial System Operator at beeper 27345".

[SW8800] snmp-agent sys-info contact Dial System Operator at beeper 27345

39.1.15 snmp-agent target-host

Syntax

snmp-agent target-host trap address udp-domain host-addr [ udp-port

udp-port-number ] params securityname community-string [ v1 | v2c | v3

[ authentication | privacy ] ]

undo snmp-agent target-host host-addr securityname community-string

View

System view

Parameter

address: Specifies the address of the host which receives SNMP messages.

host-addr: IP address of the host.

udp-port udp-port-number: Specifies the UDP port number of the host to receive the

SNMP notification.

v1: Represent the version of SNMPV1.

v2c: Represent the version of SNMPV2C.

v3: Represent the version of SNMPV3.

39-14

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

community-string: Specifies the community name. The character string ranges from 1 to 32 bytes.

authentication: Configures to authenticate the packet without encryption.

privacy: Configures to authenticate and encrypt the packet.

Description

Use the snmp-agent target-host command to configure destination of SNMP notification.

Use the undo snmp-agent target-host command to cancel the host that receives

SNMP notification.

The snmp-agent target-host command and the snmp-agent trap enable command should be used at the same time. Use the snmp-agent trap enable command to enable the device to transmit Trap packets. The snmp-agent trap enable command and snmp-agent target-host command should be used at the same time on the host to enable notify message sending.

Related command: snmp-agent trap enable, snmp-agent trap source and

snmp-agent trap life.

Example

Enable sending Trap message to 10.1.1.1 with community name public.

[SW8800] snmp-agent trap enable

[SW8800] snmp-agent target-host trap address udp-domain 10.1.1.1 params securityname public

39.1.16 snmp-agent trap enable

Syntax

snmp-agent trap enable [ bgp [ backwardtransition | established ]* | configuration

| flash | ospf [ process-id ] [ ospf-trap-list ] | ldp | lsp | standard [ authentication |

coldstart | linkdown | linkup | warmstart ]* | system | vrrp [ authfailure |

newmaster ] ]

undo snmp-agent trap enable [ bgp [ backwardtransition | established ]* |

configuration | flash | ospf [ process-id ] [ ospf-trap-list ] | ldp | lsp | standard

[ authentication | coldstart | linkdown | linkup | warmstart ]* | system | vrrp

[ authfailure | newmaster ] ]

View

System view

39-15

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 39 SNMP Configuration Commands

standard [ authentication ] [ coldstart ] [ linkdown ] [ linkup ]: Enables the sending of standard Trap messages.

authentication: Enables the sending of SNMP authentication Trap messages.

coldstart: Enables the sending of SNMP cold start Trap messages.

linkdown: Enables the sending of SNMP link down Trap messages.

linkup: Enables the sending of SNMP link up Trap messages.

warmstart: Enables the sending of SNMP hot start Trap messages.

bgp [ backwardtransition ] [ established ] : Enables the sending of BGP Trap messages.

configuration: Enables the sending of configuration management Trap messages.

flash: Enables the sending of FLASH Trap messages.

System: Enables the sending of system management MIB Trap messages.

vrrp [ authfailure | newmaster ]: Enables the sending of VRRP Trap messages.

ldp: Enables the sending of LDP Trap messages.

lsp: Enables the sending of LSP trap messages.

Description

Use the snmp-agent trap enable command to enable the sending of Trap messages.

Use the undo snmp-agent trap enable command to disable the sending of Trap messages.

By default, Trap message sending is disabled.

The snmp-agent trap enable command and snmp-agent target-host command should be used at the same time. The snmp-agent target-host command specifies which hosts can receive Trap message. However, to send Trap message, at least one the snmp-agent target-host command should be configured.

Example

Enable to send the trap packet of SNMP authentication failure to 10.1.1.1. The community name is public.

[SW8800] snmp-agent trap enable standard authentication

[SW8800] snmp-agent target-host trap address udp-domain 10.1.1.1 params securityname public

39.1.17 snmp-agent trap life

Syntax

snmp-agent trap life seconds

39-16

3Com Switch 8800 Command Reference Guide

undo snmp-agent trap life

View

Chapter 39 SNMP Configuration Commands

System view

Parameter

seconds: Specifies the timeouts, ranging from 1 to 2,592,000 seconds; By default, the timeout interval is 120 seconds.

Description

Use the snmp-agent trap life command to configure the timeout of Trap packets.

Use the undo snmp-agent trap life command to restore the default value.

The set timeout of Trap packet is represented by seconds. If time exceeds seconds, this Trap packet will be discarded.

Related command: snmp-agent trap enable, snmp-agent target-host .

Example

Configure the timeout interval of Trap packet as 60 seconds.

[SW8800] snmp-agent trap life 60

39.1.18 snmp-agent trap queue-size

Syntax

snmp-agent trap queue-size length

undo snmp-agent trap queue-size

View

System view

Parameter

length: Length of queue, ranging from 1 to 1,000. By default, the length is 100.

Description

Use the snmp-agent trap queue-size command to configure the information queue length of Trap packet sent to destination host.

Use the undo snmp-agent trap queue-size command to restore the default value.

Related command: snmp-agent trap enable, snmp-agent target-host, snmp-agent

trap life.

Example

Configure the queue length to 200.

39-17

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

[SW8800] snmp-agent trap queue-size 200

39.1.19 snmp-agent trap source

Syntax

snmp-agent trap source vlan-interface vlan-id

undo snmp-agent trap source

View

System view

Parameter

vlan-id: Specifies the VLAN interface ID, ranging from 1 to 4094.

Description

Use the snmp-agent trap source command to configure the source address for sending Trap.

Use the undo snmp-agent trap source command to cancel the source address for sending Trap.

You can use this command to configure to track specific event by using the trap address.

Example

Configure the IP address of the VLAN interface 1 as the source address for transmitting the Trap packets.

[SW8800] snmp-agent trap source vlan-interface 1

39.1.20 snmp-agent usm-user

Syntax

snmp-agent usm-user { v1 | v2c } username groupname [ acl acl-list ]

undo snmp-agent usm-user { v1 | v2c } username groupname

snmp-agent usm-user v3 username groupname [ authentication-mode { md5 | sha }

authpassstring [ privacy-mode { des56 privpassstring } ] ] [ acl acl-list ]

undo snmp-agent usm-user v3 username groupname { local | engineid engine-id }

View

System view

Parameter

v1: Configures to use V1 safe mode.

39-18

3Com Switch 8800 Command Reference Guide Chapter 39 SNMP Configuration Commands

v2c: Configures to use V2c safe mode.

v3: Configures to use V3 safe mode.

username: Specifies the user name, ranging from 1 to 32 bytes.

groupname: Specifies the group name corresponding to that user, a character string at the length ranging from 1 to 32 bytes.

authentication-mode: Specifies the safety level as authentication required.

md5: MD5 algorithm is adopted in authentication. MD5 authentication uses the

128-digit password. Computation speed of MD5 is faster than that of SHA

sha: SHA algorithm is adopted in authentication. SHA authentication uses the 160-digit password. Computation speed of SHA is slower than that of MD5, but with higher security.

authpasstring: Specifies the authentication password with a character string, ranging from 1 to 64 bytes.

privacy-mode: Specifies the safety level as encrypted.

des56: Specifies the authentication protocol as DES.

privpassword: Specifies the encryption password with a character string, ranging from 1 to 64 bytes.

acl acl-list: Sets access control list for this user based on USM name

engineid engine-id: SNMP engineID.

Description

Use the snmp-agent usm-user command to add a new user to an SNMP group.

Use the undo snmp-agent usm-user command to cancel a user from SNMP group.

SNMP engineID (for authentication) is required when configuring remote user for an agent. This command will not be effective without engineID configured.

For V1 and V2C, this command will add a new community name. For V3, it will add a new user for an SNMP group.

Example

Add a user smith for 3Com (an SNMP group), configures to authenticate with MD5 and sets authentication password as pass.

[SW8800] snmp-agent usm-user v3 smith 3Com authentication-mode md5 pass

39.1.21 undo snmp-agent

Syntax undo snmp-agent

39-19

3Com Switch 8800 Command Reference Guide

View

System view

Parameter

None

Chapter 39 SNMP Configuration Commands

Description

Use the undo snmp-agent command to disable all versions of SNMP running on the server.

Perform any command of snmp-agent will enable SNMP Agent.

Example

Disable the running SNMP agents of all SNMP versions.

[SW8800] undo snmp-agent

39-20

3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands

Chapter 40 RMON Configuration Commands

40.1 RMON Configuration Commands

40.1.1 display rmon alarm

Syntax

display rmon alarm [ alarm-table-entry ]

View

Any view

Parameter

alarm-table-entry: Alarm table entry index.

Description

Use the display rmon alarm command to view RMON alarm information.

Related command: rmon alarm.

Example

Display the RMON alarm information.

<SW8800> display rmon alarm

Alarm table 1 owned by monitor is VALID.

Samples type : delta

Variable formula : 1.3.6.1.2.1.16.1.1.1.3.1<etherStatsDropEvents.1>

Description : Ethernet5/1/1

Sampling interval : 10(sec)

Rising threshold : 10(linked with event 1)

Falling threshold : 2(linked with event 1)

When startup enables : risingOrFallingAlarm

Latest value : 0

Table 40-1 Description on the fields of the display rmon alarm command

Field

Alarm table 1

Description

Index 1 in alarm table monitor Owner

VALID The alarm entry corresponding to this index is valid.

Samples type Type of sampling

40-1

3Com Switch 8800 Command Reference Guide

Field

Variable formula

Chapter 40 RMON Configuration Commands

Variable parameters

Description

Sampling interval

Rising threshold is 1000

Falling threshold is 100

Time interval for sampling

The rising threshold is 1000.

The falling threshold is 100.

When startup enables : risingOrFallingAlarm

Type of the first alarm. The startup may trigger rising threshold alarm, falling threshold alarm, or both.

Latest value Last sample value

40.1.2 display rmon event

Syntax

display rmon event [ event-table-entry ]

View

Any view

Parameter

event-table-entry: Entry index of event table.

Description

Use the display rmon event command to view RMON events.

The display includes event index in event table, owner of the event, description to the event, action caused by event (log or alarm information), and occurrence time of the latest event (counted on system initiate/boot time in centiseconds).

Related command: rmon event.

Example

Show the RMON event.

<SW8800> display rmon event

Event table 1 owned by null is VALID.

Description: null.

Will cause log-trap when triggered, last triggered at 0days 00h:02m:27s.

40-2

3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands

Table 40-2 Description on the fields of the display rmon event command

Event table 1

VALID

Field Description

Index 1 in event table

The entry corresponding to the index is valid

Cause log-trap when triggered,

Last triggered at 0days 00h:02m:27s

When the event is triggered, it will cause the log-trap.

The last triggered time is 00h:02m:27s

40.1.3 display rmon eventlog

Syntax

display rmon eventlog [ event-number ]

View

Any view

Parameter

event-number: Entry index of event table.

Description

Use the display rmon eventlog command to view RMON event log.

The display includes event index in the event table, the status of the event, the time at which the event log is generated (this time starts from the system initialization or booting and counted in milliseconds), and event description.

Example

Show event log of RMON.

<SW8800> display rmon eventlog 1

Event table 1 owned by null is VALID.

Generates eventLog 1.1 at 0days 00h:01m:39s.

Description: The 1.3.6.1.2.1.16.1.1.1.4.1 defined in alarm table 1, less than(or =) 100 with alarm value 0. Alarm sample type is absolute.

Generates eventLog 1.2 at 0days 00h:02m:27s.

Description: The alarm formula defined in private alarm table 1, less than(or =) 100 with alarm value 0. Alarm sample type is absolute.

40-3

3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands

Table 40-3 Description on the fields of the display rmon eventlog command

Field Description

Event table 1 Index 1 in event table

VALID

The entry corresponding to the index is valid less than(or =) 100 with alarm value 0

The alarm sample value is less than or equal to 100

The type of alarm sampling is absolute Alarm sample type is absolute

Generates eventLog 1.2 at 0days The eventlog corresponding to the index

00h:02m:27s 1.2 is generated at 0days 00h:02m:27s.

40.1.4 display rmon history

Syntax

display rmon history [ port-num ]

View

Any view

Parameter

port-num: Ethernet port name.

Description

Use the display rmon history command to view latest RMON history sampling information (including utility, error number and total packet number).

Related command: rmon history.

Example

Show the RMON history information.

<SW8800> display rmon history ethernet 2/1/1

History control entry 1 owned by null is VALID

Samples interface : Ethernet2/1/1<ifEntry.642>

Sampling interval : 10(sec) with 10 buckets max

Latest sampled values :

Dropevents :0 , octets :0

packets :0 , broadcast packets :0

multicast packets :0 , CRC alignment errors :0

undersize packets :0 , oversize packets :0

40-4

3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands

fragments :0 , jabbers :0

collisions :0 , utilization :0

Table 40-4 Description on the fields of the display rmon history command

Field Description

Samples interface The sampled interface

History control entry

VALID

Index number in history control table

The entry corresponding to the index is valid

Sampling interval buckets

Latest sampled values dropevents

Sampling interval

Records in history control table

The latest sample information

Dropping packet events octets packets broadcast packets multicast packets

CRC alignment errors undersized packets oversized packets fragments

Sent/Received octets in sampling time

Packets sent/received in sampling time

Number of broadcast packets

Number of multicast packets

Number of CRC error packets

Number of undersized packets

Number of oversized packets

Number of undersized and CRC error packets jabbers collisions

Number of oversized and CRC error packets

Number of collision packets utilization Utilization

40.1.5 display rmon prialarm

Syntax

display rmon prialarm [ prialarm-table-entry ]

View

Any view

Parameter

prialarm-table-entry: Entry index of extended RMON alarm table.

Description

40-5

3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands

Use the display rmon prialarm command to view information about extended RMON alarm table.

Related command: rmon prialarm.

Example

Display the information about extended RMON alarm table.

<SW8800> display rmon prialarm

Prialarm table 1 owned by monitor is UNDERCREATION.

Samples type : changeratio

Variable formula :

(.1.3.6.1.2.1.2.2.1.10.201326601+.1.3.6.1.2.1.2.2.1.16

.201326601)*8*100/.1.3.6.1.2.1.2.2.1.5.201326601

Description : ifUtilization.Ethernet5/1/1

Sampling interval : 10(sec)

Rising threshold : 50(linked with event 1)

Falling threshold : 5(linked with event 1)

When startup enables : risingOrFallingAlarm

This entry will exist : forever.

Latest value : 0

Table 40-5 Description on the fields of the display rmon prialarm command

Field

Prialarm table 1

Description

Index of extended alarm entry. owned by monitor Creator of the extended alarm entry.

UNDERCREATION Valid

Samples type Type of sampling

Variable formula Variable parameter

Sampling interval :

10(sec)

Sampling interval

Rising threshold

Falling threshold

Rising threshold. When sampling value rises from normal value to this threshold, rising threshold alarm will be triggered.

Falling threshold. When sampling value decreases from normal value to this threshold, falling threshold alarm will be triggered. linked with event 1

Corresponding event index of ring and falling threshold alarm. risingOrFallingAlarm alarm or falling threshold alarm or both.

40-6

3Com Switch 8800 Command Reference Guide

Field

This entry will exist forever

Latest value : 0

Chapter 40 RMON Configuration Commands

Description

The lifespan of this alarm entry which can be forever or a specified period of time.

The value of the latest sampling.

40.1.6 display rmon statistics

Syntax

display rmon statistics [ port-num ]

View

Any view

Parameter

port-num: Ethernet port number.

Description

Use the display rmon statistics command to view RMON statistics.

The displayed information includes collision, CRC (Cyclic Redundancy Check) and queue, undersized or oversized packet, timeout, fragment, broadcast, multicast, unicast, and bandwidth utility.

Related command: rmon statistics.

Example

Show RMON statistics.

<SW8800> display rmon statistics Ethernet 2/1/1

Statistics entry 1 owned by aaa is VALID.

Interface : Ethernet2/1/1<ifIndex.872418178>

etherStatsOctets : 756 , etherStatsPkts : 9

etherStatsBroadcastPkts : 9 , etherStatsMulticastPkts : 0

etherStatsUndersizePkts : 0 , etherStatsOversizePkts : 0

etherStatsFragments : 0 , etherStatsJabbers : 0

etherStatsCRCAlignErrors : 0 , etherStatsCollisions : 0

etherStatsDropEvents (insufficient resources): 0

Packets received according to length (etherStatsPktsXXXtoYYYOctets):

64 : 0 , 65-127 : 444 , 128-255 : 0

256-511: 0 , 512-1023: 0 , 1024-max : 0

40.1.7 rmon alarm

40-7

3Com Switch 8800 Command Reference Guide

Syntax

Chapter 40 RMON Configuration Commands

rmon alarm entry-number alarm-variable sampling-time { delta | absolute }

rising-threshold threshold-value1 event-entry1 falling-threshold threshold-value2

event-entry2 [ owner text ]

undo rmon alarm entry-number

View

System view

Parameter

entry-number: Number of the entry to be added/deleted, ranging from 1 to 65535.

alarm-variable: Specifies the alarm variable with a character string, ranging from 1 to

256, in the OID dotted format, like 1.3.6.1.2.1.2.1.10.1 (or ifInOctets.1).

sampling-time: Specifies the sampling interval, ranging from 5 to 65535 (measured in seconds).

delta: Sampling type is delta.

absolute: Sampling type is absolute.

rising-threshold threshold-value1: Rising threshold, ranging from 0 to 2147483647.

event-entry1: Event number corresponding to the upper limit of threshold, ranging from

0 to 65535.

falling-threshold threshold-value2: Falling threshold, ranging from 0 to 2147483647.

event-entry2: Event number corresponding to the falling threshold, ranging from 0 to

65535.

owner text: Specifies the creator of the alarm. Length of the character string ranges from 1 to 127.

Description

Use the rmon alarm command to add an entry to the alarm table.

Use the undo rmon alarm command to cancel an entry from this table.

In this way, the alarm event can be triggered in the abnormal situations and then decides to log and send trap to the NM station.

Note:

Before adding an alarm entry, you need first to define the event to be referenced in the alarm entry using the rmon event command.

The system takes these actions on the defined alarm entries:

40-8

3Com Switch 8800 Command Reference Guide z z

Chapter 40 RMON Configuration Commands

Sampling the defined alarm variables at a specified time interval.

Comparing the sample values against the predefined threshold and take further

actions (see Table 40-6).

Table 40-6 Handling alarm entries

Item Handling

The sample value is greater than the upper limit threshold-value1.

Triggers the defined event event-entry1

The sample value is less than the lower limit threshold-value2.

Triggers the defined event event-entry2

Example

Delete the information of entry 15 from the alarm table.

[SW8800] undo rmon alarm 15

40.1.8 rmon event

Syntax

rmon event event-entry [ description string ] { log | trap trap-community | log-trap

log-trapcommunity | none } [ owner text ]

undo rmon event event-entry

View

System view

Parameter

event-entry: Number of the entry to be added/deleted, ranging from 1 to 65535.

description string: Event description. Length of the character string ranges from 1 to

127.

log-trap log-trapcommunity: Defines the event as log and trap event, and specifies the community name of the NMS which receives the messages triggered by the event.

log: Log event.

trap trap-community: Defines the event as trap event, and specifies the community name of the NMS which receives the messages triggered by the event.

none: Neither log nor trap event.

owner text: Creator for this entry. The length of the character string ranges from 1 to

127.

40-9

3Com Switch 8800 Command Reference Guide

Description

Chapter 40 RMON Configuration Commands z z z

Use the rmon event command to add an entry to the event table.

Use the undo rmon event command to cancel an entry from this table.

RMON event management defines the event ID and the handling of the event.

You can handle the event in the following ways:

Keeping logs

Sending the trap messages to NMS

Keeping logs and sending the trap messages to NMS

Example

Add the entry 10 to the event table and marks it as log event.

[SW8800] rmon event 10 log

40.1.9 rmon history

Syntax

rmon history entry-number buckets number interval sampling-interval [ owner

text-string ]

undo rmon history entry-number

View

Ethernet port view

Parameter

entry-number: Number of the entry to be added/deleted, ranging from 1 to 65,535.

buckets number: Capacity of the history table corresponding to the control line.

interval sampling-interval: Sampling interval, ranging from 5 to 3600 (measured in seconds).

owner text-string: Creator of this entry. Length of the character string ranges from 1 to127.

Description

Use the rmon history command to add an entry to the history control table.

Use the undo rmon history command to cancel an entry from history control table.

Perform this command to sample, set sample parameter (sample time interval) and storage amounts for a port. RMON will periodically perform data collection and save for query on this port. Sample information includes utility, error number and total packet number.

40-10

3Com Switch 8800 Command Reference Guide Chapter 40 RMON Configuration Commands

You can use the display rmon history command to view the statistics of the history control entry.

Example

Delete the entry 15 from the history control table.

[SW8800-Ethernet2/1/1] undo rmon history 15

40.1.10 rmon prialarm

Syntax

rmon prialarm entry-number prialarm-formula prialarm-des sampling-timer { delta |

absolute | changeratio } rising-threshold threshold-value1 event-entry1

falling-threshold threshold-value2 event-entry2 entrytype { forever | cycle

cycle-period } [ owner text ]

undo rmon prialarm entry-number

View

System view

Parameter

entry-number: Specifies the entry number, ranging from 1 to 65535.

prialarm-formula: Variables in the formula must be represented by OID, for example,

(1.3.6.1.2.1.2.1.10.1)*8. The operation results are in long integers. Every operation result must be within the range of the long integer; otherwise, errors may be prompted.

prialarm-des : Specifies the alarm description with a length ranging from 1 to 256;

sampling-timer: Sets the sampling interval, ranging from 10 to 65535 and measured in seconds.

delta | absolute | changeratio: Specifies the sampling type as delta ratio, absolute ratio or change ratio.

threshold-value1: Rising threshold value, specified with a number greater than 0.

event-entry1: Corresponding event number to the upper limit threshold value, ranging from 0 to 65535.

threshold-value2: Falling threshold value, specified with a number greater than 0.

event-entry2: Event number corresponding to the falling threshold, ranging from 0 to

65535.

forever | cycle cycle-period: Specifies the type of the alarm instance line.

cycle-period specifies the functional cycle of the instance.

owner text: Creator of this entry. Length of the character string ranges from 1 to 127.

40-11

3Com Switch 8800 Command Reference Guide

Description

Chapter 40 RMON Configuration Commands

Use the rmon prialarm command to add an entry to the extended RMON alarm table.

Use the undo rmon prialarm command to cancel an entry from the extended RMON alarm table.

The number of instances can be created in the table depends on the hardware resource of the product.

Note:

Before adding an extended alarm entry, you need first to define the event to be referenced in the extended alarm entry using the rmon event command.

You can define up to 50 prialarm entries. z z

The system takes these actions on the extended alarm entries you defined: z

Sampling the alarm variables in the defined extended alarm formula at a specified time interval.

Calculating the sample value using the defined extended alarm formula.

Comparing the sample values against the predefined threshold and take further

actions (see Table 40-7).

Table 40-7 Handling extended alarm entries

Item Handling

The calculated sample value is greater than the upper limit threshold-value1.

Triggers the defined event event-entry1

The calculated sample value is less than the lower limit threshold-value2.

Triggers the defined event event-entry2

Example

Delete line 10 from the extended RMON alarm table.

[SW8800] undo rmon prialarm 10

40.1.11 rmon statistics

Syntax

rmon statistics entry-number [ owner text-string ]

undo rmon statistics entry-number

40-12

3Com Switch 8800 Command Reference Guide

View

Ethernet port view

Chapter 40 RMON Configuration Commands

Parameter

entry-number: Number of the entry to be added/deleted, ranging from 1 to 65535.

owner text-string: Creator of this entry. Length of the character string ranges from 1 to127.

Description

Use the rmon statistics command to add an entry to the statistic table.

Use the undo rmon statistics command to cancel an entry from statistic table.

RMON statistic management concerns the statistics and monitoring of the usage and error on a port. Statistics includes collision, undersized or oversized packet, timeout, fragment, broadcast, multicast, unicast, and bandwidth utility.

You can use the display rmon statistics command to view information about statistics table entry.

Example

Add statistics of Ethernet2/1/1 to the entry 20.

[SW8800-Ethernet2/1/1] rmon statistic 20

40-13

3Com Switch 8800 Command Reference Guide Chapter 41 NTP Configuration Commands

Chapter 41 NTP Configuration Commands

41.1 NTP Configuration Commands

41.1.1 debugging ntp-service

Syntax

debugging ntp-service { access | adjustment | authentication | event | filter |

packet | parameter | refclock | selection | synchronization | validity | all }

undo debugging ntp-service { access | adjustment | authentication | event | filter |

packet | parameter | refclock | selection | synchronization | validity | all }

View

User view

Parameter

access: NTP access control debugging.

adjustment: NTP clock adjustment debugging.

all: All NTP debugging functions.

authentication: NTP authentication debugging.

event: NTP event debugging.

filter: NTP filter information debugging.

packet: NTP packet debugging.

parameter: NTP clock parameter debugging.

refclock: NTP reference clock debugging.

selection: NTP clock selection information debugging.

synchronization: NTP clock synchronization information debugging.

validity: NTP remote host validity debugging.

Description

Use the debugging ntp-service command to debug different NTP services.

Use the undo debugging ntp-service command to disable corresponding debugging function.

By default, no debugging function is enabled.

41-1

3Com Switch 8800 Command Reference Guide

Example

Enable NTP access control debugging.

<SW8800> debugging ntp-service access

Chapter 41 NTP Configuration Commands

41.1.2 display ntp-service sessions

Syntax

display ntp-service sessions [ verbose ]

View

Any view

Parameter

verbose: Indicates to display the detail information about the sessions.

Description

Use the display ntp-service sessions command to display the status of all the sessions maintained by NTP service provided by the local equipment.

By default, the status of all the sessions maintained by NTP service provided by the local equipment will be displayed.

When you configure this command without the verbose parameter, the Ethernet switch will display the brief information about all the sessions it maintains.

With the verbose parameter configured, Ethernet switch will display the detail information about all the sessions it maintains.

Example

Display status of all sessions maintained by the local device NTP service.

<SW8800> display ntp-service sessions source reference stra reach poll now offset delay disper

******************************************************************** note: 1 source(master),2 source(peer),3 selected,4 candidate,5 configured

41.1.3 display ntp-service status

Syntax display ntp-service status

View

Any view

41-2

3Com Switch 8800 Command Reference Guide

Parameter

None

Chapter 41 NTP Configuration Commands

Description

Use the display ntp-service status command to display the NTP service status.

Example

Display the NTP service status.

<SW8800> display ntp-service status clock status: unsynchronized

clock stratum: 16

reference clock ID: none

nominal frequency: 100.0000 Hz

actual frequency: 100.0000 Hz

clock precision: 2^17

clock offset: 0.0000 ms

root delay: 0.00 ms

root dispersion: 0.00 ms

peer dispersion: 0.00 ms

reference time: 00:00:00.000 UTC Jan 1 1900(00000000.00000000)

The following table describes the outputs:

Table 41-1 Description on the fields of the display ntp-service status command

Field Description

unsynchronized server. clock stratum: 16 Indicates the NTP stratum of local clock. reference clock ID

Indicates the address of a remote server of the reference ID, in the case that the local system has been synchronized by a remote NTP server or the ID of some clock source. nominal frequency Nominal frequency of the local system hardware clock actual frequency Actual frequency of the local system hardware clock clock precision clock offset

Precision of local system clock

Offset of the local clock to the NTP server clock root delay root dispersion peer dispersion reference time

Root delay from local equipment to the master reference clock.

Dispersion of the local clock relative to the NTP server clock

Dispersion of the remote NTP server

Reference timestamp

41-3

3Com Switch 8800 Command Reference Guide

41.1.4 display ntp-service trace

Chapter 41 NTP Configuration Commands

Syntax

display ntp-service trace

View

Any view

Parameter

None

Description

Use the display ntp-service trace command to display the brief information about every NTP server on the way from the local device to the reference clock source.

With this command, the system synchronizes the NTP server link from the local device along time till the reference clock source, and displays brief information about every

NTP server.

Example

Display brief information about every NTP server on the way from the local device to the reference clock source.

<SW8800> display ntp-service trace server 127.0.0.1,stratum 8, offset 0.000000, synch distance 0.00000

refid 127.127.1.0

41.1.5 ntp-service access

Syntax

ntp-service access { query | synchronization | server | peer } acl-number

undo ntp-service access { query | synchronization | server | peer }

View

System view

Parameter

query: Allows to control query authority.

synchronization: Only allows the server to access.

server: Allows query to server and access.

peer: Full access authority.

acl-number: IP address list number.

41-4

3Com Switch 8800 Command Reference Guide

Description

Chapter 41 NTP Configuration Commands

Use the ntp-service access command to set the authority to access the local equipment.

Use the undo ntp-service access command to cancel the access authority settings.

By default, there is no limit to the access.

Set authority to access the NTP services on a local Ethernet Switch. This is a basic and brief security measure, compared to authentication. An access request will be matched with peer, server, synchronization, and query in an ascending order of the limitation.

The first matched authority will be given.

Example

Give the authority of time request, query control and synchronization with the local equipment to the peer in ACL 2000.

[SW8800] ntp-service access peer 2000

Give the authority of time request and query control of the local equipment to the peer in ACL 2000.

[SW8800] ntp-service access synchronization 2000

41.1.6 ntp-service authentication enable

Syntax ntp-service authentication enable undo ntp-service authentication enable

View

System view

Parameter

None

Description

Use the ntp-service authentication enable command to enable the NTP-service authentication function.

Use the undo ntp-service authentication enable command to disable this function.

By default, the authentication is disabled.

Example

Enable NTP authentication function.

[SW8800] ntp-service authentication enable

41-5

3Com Switch 8800 Command Reference Guide

41.1.7 ntp-service authentication-keyid

Chapter 41 NTP Configuration Commands

Syntax

ntp-service authentication-keyid number authentication-mode md5 value

undo ntp-service authentication-keyid number

View

System view

Parameter

Description

Use the ntp-service authentication-keyid command to set NTP authentication key.

Use the undo ntp-service authentication-keyid command to cancel the NTP authentication key.

By default, there is no authentication key.

Only MD5 authentication is supported for the NTP authentication key settings.

Example

number: Key number, ranging from 1 to 4,294,967,295.

value: Value of the key with 1 to 32 ASCII characters.

Set MD5 authentication key 10 as 3Com.

[SW8800] ntp-service authentication-keyid 10 authentication-mode md5 3Com

41.1.8 ntp-service broadcast-client

Syntax

ntp-service broadcast-client

undo ntp-service broadcast-client

View

VLAN interface view

Parameter

None

Description

Use the ntp-service broadcast-client command to configure NTP broadcast client mode.

41-6

3Com Switch 8800 Command Reference Guide Chapter 41 NTP Configuration Commands

Use the undo ntp-service broadcast-client command to disable the NTP broadcast client mode.

By default, the NTP broadcast client mode is disabled.

Designate an interface on the local Ethernet Switch to receive NTP broadcast messages and operate in broadcast client mode. The local Ethernet Switch listens to the broadcast from the server. When it receives the first broadcast packet, it starts a brief client/server mode to switch messages with a remote server for estimating the network delay. Thereafter, the local Ethernet Switch enters broadcast client mode and continues listening to the broadcast and synchronizes the local clock according to the arrived broadcast message.

Example

Configure to receive NTP broadcast packets through Vlan-Interface1.

[SW8800] interface vlan-interface1

[SW8800-Vlan-Interface1] ntp-service broadcast-client

41.1.9 ntp-service broadcast-server

Syntax

ntp-service broadcast-server [ authentication-keyid keyid version number ]

undo ntp-service broadcast-server

View

VLAN interface view

Parameter

authentication-keyid: Specifies the authentication key.

keyid: Key ID used in broadcast, ranging from 0 to 4294967295.

version: Defines NTP version number.

number: NTP version number, ranging from 1 to 3.

Description

Use the ntp-service broadcast-server command to configure NTP broadcast server mode.

Use the undo ntp-service broadcast-server command to disable the NTP broadcast server mode.

By default, the broadcast service is disabled and number defaults to 3.

Designate an interface on the local equipment to broadcast NTP packets. The local equipment runs in broadcast-server mode and regularly broadcasts packets to its clients.

41-7

3Com Switch 8800 Command Reference Guide

Example

Chapter 41 NTP Configuration Commands

Configure to broadcast NTP packets through Vlan-Interface1, encrypt them with Key 4, and set the NTP version number as 3.

[SW8800] interface vlan-interface1

[SW8800-Vlan-Interface1] ntp-service broadcast-server authentication-key 4 version 3

41.1.10 ntp-service max-dynamic-sessions

Syntax

ntp-service max-dynamic-sessions number

undo ntp-service max-dynamic-sessions

View

System view

Parameter

number: The maximum sessions can be created locally, ranging from 0 to 100.

Description

Use the ntp-service max-dynamic-sessions command to set how many sessions can be created locally.

Use the undo ntp-service max-dynamic-sessions command to resume the default maximum session number

By default, a local device allows up to 100 sessions.

Example

Set the local equipment to allow up to 50 sessions.

[SW8800] ntp-service max-dynamic-sessions 50

41.1.11 ntp-service multicast-client

Syntax

ntp-service multicast-client [ ip-address ]

undo ntp-service multicast-client [ ip-address ]

View

VLAN interface view

41-8

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 41 NTP Configuration Commands

ip-address: Specifies an multicast IP address of Class D. By default, the ip-address is set to 224.0.1.1. Actually, for the Switch 8800, you can set 224.0.1.1 as the multicast IP address only.

Description

Use the ntp-service multicast-client command to configure the NTP multicast client mode.

Use the undo ntp-service multicast-client command to disable the NTP multicast client mode.

By default, the multicast client service is disabled. ip-address defaults to 224.0.1.1.

Designate an interface on the local Ethernet Switch to receive NTP multicast messages and operate in multicast client mode. The local Ethernet Switch listens to the multicast from the server. When it receives the first multicast packet, it starts a brief client/server mode to switch messages with a remote server for estimating the network delay.

Thereafter, the local Ethernet Switch enters multicast client mode and continues listening to the multicast and synchronizes the local clock according to the arrived multicast message.

Example

Configure to receive NTP multicast packet through Vlan-Interface1 and the multicast group corresponding to these packets located at 224.0.1.1.

[SW8800] interface vlan-interface 1

[SW8800-Vlan-Interface1] ntp-service multicast-client 224.0.1.1

41.1.12 ntp-service multicast-server

Syntax

ntp-service multicast-server [ ip-address ] [ authentication-keyid keyid ] [ ttl

ttl-number ] [ version number ]*

undo ntp-service multicast-server [ ip-address ]

View

VLAN interface view

Parameter

ip-address: Specifies a multicast IP address of Class D and default to 224.0.1.1.

Actually, for the Switch 8800, you can set 224.0.1.1 as the multicast IP address only.

authentication-keyid: Specifies authentication key.

keyid: Key ID used in multicast, ranging from 1 to 4294967295.

41-9

3Com Switch 8800 Command Reference Guide Chapter 41 NTP Configuration Commands

ttl: Time to live of a multicast packet.

ttl-number: ttl of a multicast packet,ranging from 1 to 255.

version: NTP version number.

number: NTP version number and range from 1 to 3.

Description

Use the ntp-service multicast-server command to configure NTP multicast server mode, if no IP address is specified, switch automatically choice the 224.0.1.1 as the multicast IP address.

Use the undo ntp-service multicast-server command to disable NTP multicast server mode, if no IP address is specified, the switch will disable the configuration of the multicast IP address 224.0.1.1.

By default, the multicast service is disabled. IP address defaults to 224.0.1.1 and the version number defaults to 3.

Designate an interface on the local equipment to transmit NTP multicast packet. The local equipment operates in multicast-server mode and multicasts packets regularly to its clients.

Example

Configure to transmit NTP multicast packets encrypted with Key 4 through

Vlan-Interface1 at 224.0.1.1 and use NTP version 3.

[SW8800] interface vlan-interface 1

[SW8800-Vlan-Interface1] ntp-service multicast-server 224.0.1.1 authentication-keyid 4 version 3

41.1.13 ntp-service refclock-master

Syntax

ntp-service refclock-master [ ip-address ] [ stratum ]

undo ntp-service refclock-master [ ip-address ]

View

System view

Parameter

ip-address: Specifies the reference clock IP address as 127.127.u, where u ranges from 0 to 3.

stratum: Specifies which stratum the local clock is located at and range from 1 to 15.

41-10

3Com Switch 8800 Command Reference Guide

Description

Chapter 41 NTP Configuration Commands

Use the ntp-service refclock-master command to configure an external reference clock or the local clock as an NTP master clock.

Use the undo ntp-service refclock-master command to cancel the NTP master clock settings.

By default, ip-address is 127.127.1.0 and stratum defaults to 8.

You can use this command to designate an NTP external reference clock or the local clock as an NTP master clock to provide synchronized time for other equipment.

ip-address specifies the IP address of an external clock as 127.127.u. If no IP address is specified, the local clock is set as the NTP master clock by default. You can also specify the stratum of the NTP master clock.

Example

Set the local clock as the NTP master clock to provide synchronized time for its peers and locate it at stratum 3.

[SW8800] ntp-service refclock-master 3

41.1.14 ntp-service reliable authentication-keyid

Syntax

ntp-service reliable authentication-keyid number

undo ntp-service reliable authentication-keyid number

View

System view

Parameter

number: Specifies the key number, ranging from 1 to 4294967295.

Description

Use the ntp-service reliable authentication-keyid command to configure the key as reliable.

Use the undo ntp-service reliable authentication-keyid command to cancel the current setting.

By default, no key is configured as reliable.

When you enable the authentication, you can use this command to configure one or more than one keys as reliable. In this case, a client will only get synchronized by a server whichever can provide a reliable key.

41-11

3Com Switch 8800 Command Reference Guide

Example

Chapter 41 NTP Configuration Commands

Enable NTP authentication, adopt MD5 encryption, and designate Key 37 BetterKey and configure it as reliable.

[SW8800] ntp-service authentication enable

[SW8800] ntp-service authentication-keyid 37 authentication-mode md5

BetterKey

[SW8800] ntp-service reliable authentication-keyid 37

41.1.15 ntp-service source-interface

Syntax

ntp-service source-interface { interface-name | interface-type interface-number }

undo ntp-service source-interface

View

System view

Parameter

interface-name: Specifies an interface. The source IP address of the packets will be taken from the address of the interface.

interface-type: Specifies the interface type and determine an interface with the

interface-number parameter. The interface can be VLAN interface and Loopback interface currently.

interface-number: Specifies the interface number and determine an interface with the

interface-type parameter.

Description

Use the ntp-service source-interface command to designate an interface to transmit

NTP message.

Use the undo ntp-service source-interface command to cancel the current setting.

By default, the source address specifies where the packets are transmitted from.

You can use this command to designate an interface to transmit all the NTP packets and take the source address of these packets from its IP address. If you do not want any other interface to receive the acknowledgement packets, use this command to specify one interface to send all the NTP packets.

Example

Configure all the outgoing NTP packets to use the IP address of Vlan-Interface1 as their source IP address.

[SW8800] ntp-service source-interface Vlan-Interface 1

41-12

3Com Switch 8800 Command Reference Guide

41.1.16 ntp-service unicast-peer

Chapter 41 NTP Configuration Commands

Syntax

ntp-service unicast-peer ip-address [ version number ] [ authentication-key keyid ]

[ source-interface { interface-name | interface-type interface-number } ] [ priority ]*

undo ntp-service unicast-peer ip-address

View

System view

Parameter

ip-address: Specifies the IP address of a remote server.

version: Defines NTP version number.

number: NTP version number, ranging from 1 to 3.

authentication-keyid: Defines authentication key.

keyid: Key ID used for transmitting messages to a remote server, ranging from 1 to

4294967295.

source-interface: Specifies the name of an interface, the interface can be VLAN interface and Loopback interface currently.

interface-name: Specifies the interface name. When a local device sends an NTP message to a peer, the source IP address of the message is taken from the address of the interface.

interface-type: Specifies the interface type and determine an interface together with the

interface-number parameter.

interface-number: Specifies the interface number and determine an interface together with the interface-type parameter.

priority: Designates a server as the first choice.

Description

Use the ntp-service unicast-peer command to configure NTP peer mode.

Use the undo ntp-service unicast-peer command to cancel NTP peer mode.

By default, version number number defaults to 3, the authentication is disabled, and the local server is not the first choice.

This command sets the remote server at ip-address as a peer of the local equipment, which operates in symmetric active mode. ip-address specifies a host address other than an IP address of broadcast, multicast, or reference clock. By operating in this mode, a local device can synchronize and be synchronized by a remote server.

41-13

3Com Switch 8800 Command Reference Guide

Example

Chapter 41 NTP Configuration Commands

Configure the local equipment to synchronize or synchronized by a peer at

128.108.22.44. Set the NTP version to 3. The IP address of the NTP packets are taken from that of Vlan-Interface1.

[SW8800] ntp-service unicast-peer 131.108.22.33 version 3 source-interface

Vlan-Interface 1

41.1.17 ntp-service unicast-server

Syntax

ntp-service unicast-server ip-address [ version number ] [ authentication-keyid

keyid ] [ source-interface { interface-name | interface-type interface-number } ]

[ priority ]*

undo ntp-service unicast-server ip-address

View

System view

Parameter

ip-address: Specifies the IP address of a remote server.

version: Defines NTP version number.

number: NTP version number, ranging from 1 to 3.

authentication-keyid: Defines authentication key.

keyid: Key ID used for transmitting messages to a remote server, ranging from 1 to

4294967295.

source-interface: Specifies the name of an interface, the interface can be VLAN interface and Loopback interface.

interface-name: Specifies the interface name. When a local device sends an NTP message to a peer, the source IP address of the message is taken from the address of the interface.

interface-type: Specifies the interface type and determine an interface together with the

interface-number parameter.

interface-number: Specifies the interface number and determine an interface together with the interface-type parameter.

priority: Designates a server as the first choice.

Description

Use the ntp-service unicast-server command to configure NTP server mode.

Use the undo ntp-service unicast-server command to disable NTP server mode.

41-14

3Com Switch 8800 Command Reference Guide Chapter 41 NTP Configuration Commands

By default, version number number defaults to 3, the authentication is disabled, and the local server is not the first choice.

The command announces to use the remote server at ip-address as the local time server. ip-address specifies a host address other than an IP address of broadcast, multicast, or reference clock. By operating in client mode, a local device can be synchronized by a remote server, but not synchronize any remote server.

Example

Designate the server at 128.108.22.44 to synchronize the local device and use NTP version 3.

[SW8800] ntp-service unicast-server 128.108.22.44 version 3

41-15

3Com Switch 8800 Command Reference Guide

Chapter 42 SSH Terminal Service Configuration Comm ands

Chapter 42 SSH Terminal Service Configuration

Commands

42.1 SSH Server Configuration Commands

42.1.1 debugging ssh server

Syntax

View

User view

Parameter

index: SSH channel to be debugged, whose value is dictated by VTY numbers. The default VTY numbers are 0 to 4.

all: All the SSH channels.

Description

Use the debugging ssh server command to send information regulated by the

SSH2.0 protocol, such as the negotiation procedure, to the information center in the format of debugging information. You can also use it to debug a user interface individually.

Use the undo debugging ssh server command to disable the debugging.

By default, the debugging is disabled.

Related command: ssh server authentication-retries, ssh server rekey-interval,

ssh server timeout.

Example

debugging ssh server { VTY index | all }

undo debugging ssh server { VTY index | all }

Print the debugging information when the SSH is running.

<SW8800> debugging ssh server vty 0

00:23:20: SSH0: starting SSH control process

00:23:20: SSH0: sent protocol version id SSH-1.5-SW8800-1.25

00:23:20: SSH0: protocol version id is - SSH-1.5-1.2.26

00:23:20: SSH0: SSH_SMSG_PUBLIC_KEY msg

00:23:21: SSH0: SSH_CMSG_SESSION_KEY msg - length 112, type 0x03

42-1

Chapter 42 SSH Terminal Service Configuration Comm

3Com Switch 8800 Command Reference Guide

00:23:21: SSH: RSA decrypt started ands

00:23:21: SSH: RSA decrypt finished

00:23:21: SSH: RSA decrypt started

00:23:21: SSH: RSA decrypt finished

42.1.2 display rsa local-key-pair public

Syntax display rsa local-key-pair public

View

Any view

Parameter

None

Description

Use the display rsa local-key-pair public command to display the public key of the server’s host key pair and server key pair. If no key has been created, you will see a prompt like this: RSA keys not found.

Related command: rsa local-key-pair create.

Example

Display the public key of the server’s host key pair and server key pair.

<SW8800> display rsa local-key-pair public

% Key pair was generated at: 12:26:33 UTC 2002/4/4

Key name: rtvrp_Host

Usage: Encryption Key

Key Data:

30470240 AF7DB1D0 DA78944F 53B7B59B 40D425D0 DC9C57D2 A60916C2 1F165807

08B84DDB 5F4DB8E7 A115B74E 2D41D96C AC61D276 AA027E41 DD48DE64 696E0934

EB872805 02030100 01

% Key pair was generated at: 12:26:45 UTC 2002/4/4

Key name: rtvrp_Server

Usage: Encryption Key

Key Data:

30670260 C05280D9 BA0D56C8 7BE43379 8634CDE7 83ABA9A2 3F36280E 25995487

4FF6AD7A 0E57871C 761E6D92 9914D8C5 CC577388 5B580B94 C2172C8F 36039EED

160A0478 651DED3A 9CCF1AAD D800AAF2 DF7FBEC4 A13ADA59 9E738319 AF366B8B

519D39F5 02030100 01

42-2

3Com Switch 8800 Command Reference Guide

42.1.3 display rsa peer-public-key

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

display rsa peer-public-key [ brief | name keyname ]

View

Any view

Parameter

brief: Displays the brief information about all client public keys.

keyname: Specifies the public key name of the client to be displayed. The key name is a consecutive string whose length ranges from 1 to 64 characters.

Description

Use the display rsa peer-public-key command to display the public key of RSA key pair specified by the client. If you do not specify the keyname argument, all public keys will be displayed.

Related command: rsa local-key-pair create.

Example

Display information about public keys of all clients.

<SW8800> display rsa peer-public-key

Address Bits Name

1023 abcd

1024 hq

1024 wn1

1024 hq_all

Display information about the public key of the client named abcd.

<SW8800> display rsa peer-public-key name abcd

Key name:abcd

Key address:

Data:

30818602 8180739A 291ABDA7 04F5D93D C8FDF84C 42746319 91C164B0 DF178C55

FA833591 C7D47D53 81D09CE8 2913D7ED F9C08511 D83CA4ED 2B30B809 808EB0D1

F52D045D E40861B7 4A0E1355 23CCD74C AC61F8E5 8C452B2F 3F2DA0DC C48E3306

367FE187 BDD94401 8B3B69F3 CBB0A573 202C16BB 2FC1ACF3 EC8F828D 55A36F1C

DDC4BB45 504F0201 25

42-3

3Com Switch 8800 Command Reference Guide

42.1.4 display ssh server

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

display ssh server { status | session }

View

Any view

Parameter

Description

Use the display ssh server command to display the status information or session information of an SSH server.

Related command: ssh server authentication-retries, ssh server rekey-interval,

ssh server timeout.

Example

status: Displays the SSH status information.

session: Displays the SSH session information.

Display the status information of the SSH server.

[SW8800] display ssh server status

SSH - version 2.0

SSH connection timeout: 60 seconds

SSH Authentication retries: 3 times

SFTP Server state: Disable

Display the session information of the SSH server.

[SW8800] display ssh server session

Connection Version Encryption State Username

VTY0 2.0 3DES Session started SW8800

VTY3 1.5 DES Session started switch

42.1.5 display ssh user-information

Syntax

display ssh user-information [ username ]

View

Any view

Parameter

username: Valid SSH username.

42-4

3Com Switch 8800 Command Reference Guide

Description

Chapter 42 SSH Terminal Service Configuration Comm ands

Use the display ssh user-information command to display information about the current SSH user, including username, peer key name, authentication mode and the types of authorized services. If you specify the argument username in the command, the user information about the specified username will be displayed.

Related command: ssh user username assign rsa-key, ssh user username

authentication-type, ssh user username service-type.

Example

Display the current user information.

[SW8800] display ssh user-information

Username user-public-key-name authentication-type service-type

42.1.6 peer-public-key end

Syntax peer-public-key end

View

Public key view

Parameter

None

Description

Use the peer-public-key end command to exit from the public key view and return to the system view.

Related command: rsa peer-public-key, public-key-code begin.

Example

Exit the public key view and save the configuration.

[SW8800] rsa peer-public-key SW8800003

[SW8800-rsa-public-key] peer-public-key end

[SW8800]

42-5

3Com Switch 8800 Command Reference Guide

42.1.7 protocol inbound

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

protocol inbound { all | pad | ssh | telnet }

View

VTY user interface view

Parameter

all: Supports all protocols, including Telnet and SSH.

ssh: Supports the SSH protocol only, and does not support the Telnet protocol.

telnet: Supports the Telnet protocol only, and does not support the SSH protocol.

Description

Use the protocol inbound command to specify the protocol supported by the current user interface.

By default, all protocols are supported.

This configuration takes effect at the next login. Note that after enabling SSH by this command, you still cannot log in through SSH if the client RSA key is not configured.

Caution:

z z

If the supported protocol configured in the user interface is SSH, make sure to configure the corresponding authentication mode to authentication-mode scheme

(using AAA authentication mode).

If the authentication mode is configured as authentication-mode password or

authentication-mode none, the configuration of protocol inbound ssh will fail; contrarily, if a user interface is configured to support the SSH protocol, you will fail to configure authentication-mode password and authentication-mode none.

Related command: user-interface vty.

Example

Set VTY 0 to 4 to support the SSH protocol only.

[SW8800] user-interface vty 0 4

[SW8800-ui-vty0-4] protocol inbound ssh

Disable the Telnet function of VTY 0 and make it support SSH only.

[SW8800] user-interface vty 0

42-6

Chapter 42 SSH Terminal Service Configuration Comm

3Com Switch 8800 Command Reference Guide

[SW8800-ui-vty0] protocol inbound ssh ands

42.1.8 public-key-code begin

Syntax public-key-code begin

View

Public key view

Parameter

None

Description

Use the public-key-code begin command to enter the public key edit view and input the public key of the client. Note that you must use the rsa peer-public-key command to specify a client key name before performing this command.

When inputting the public key, you may type spaces between the characters (the system will delete the spaces automatically), or press <Enter> and then continue to input the key. Note that the public key must be a hexadecimal string coded in the public key format and is randomly generated by the SSH 2.0-enabled client software or the client switch.

Related command: rsa peer-public-key, public-key-code end.

Example

Enter the public key edit view and input the key.

[SW8800] rsa peer-public-key SW8800003

[SW8800-rsa-public-key] public-key-code begin

[SW8800-key-code] 308186028180739A291ABDA704F5D93DC8FDF84C427463

[SW8800-key-code] 1991C164B0DF178C55FA833591C7D47D5381D09CE82913

[SW8800-key-code] D7EDF9C08511D83CA4ED2B30B809808EB0D1F52D045DE4

[SW8800-key-code] 0861B74A0E135523CCD74CAC61F8E58C452B2F3F2DA0DC

[SW8800-key-code] C48E3306367FE187BDD944018B3B69F3CBB0A573202C16

[SW8800-key-code] BB2FC1ACF3EC8F828D55A36F1CDDC4BB45504F020125

[SW8800-key-code] public-key-code end

[SW8800-rsa-public-key]

42.1.9 public-key-code end

Syntax public-key-code end

42-7

3Com Switch 8800 Command Reference Guide

View

Public key edit view

Parameter

Chapter 42 SSH Terminal Service Configuration Comm ands

None

Description

Use the public-key-code end command to return from the public key edit view to the public key view and save the public key entered.

After this command is performed to end the public key edit procedure, the system will check the validity of the key before saving the input public key. If the public key string contains any illegal character, the system will prompt the failure of the configuration and the configured key will be discarded; otherwise, the key is valid and will be saved to the user public key list.

Related command: rsa peer-public-key, public-key-code begin.

Example

Exit the public key edit view and save the configured public key.

[SW8800-rsa-key-code] public-key-code end

[SW8800-rsa-public-key]

42.1.10 rsa local-key-pair create

Syntax rsa local-key-pair create

View

System view

Parameter

None

Description

Use the rsa local-key-pair create command to generate the RSA key pair (including the host key and server key) of the server. The naming conventions for the keys are

switch name + host and switch name + server respectively, for example, SW8800_host,

SW8800_server.

When configuring by this command, if the RSA key pair already exists, you will get a warning asking if you want to replace the existing one. Note that the host key and the server key must have a difference of 128 bits at least, and that the minimum and maximum lengths for the host key and the server key are 512 bits and 2048 bits .

42-8

3Com Switch 8800 Command Reference Guide

Chapter 42 SSH Terminal Service Configuration Comm ands

Generating the RSA key pair of the server is the first step to perform after SSH login. It needs to be performed only once; you need not re-perform it after rebooting the switch.

Related command: rsa local-key-pair destroy.

Example

Generate the local RSA key pair.

[SW8800] rsa local-key-pair create

The name for the keys will be: rtvrp_Host

% You already have RSA keys defined for rtvrp_Host

% Do you really want to replace them? [yes/no]:y

Choose the size of the key modulus in the range of 512 to 2048 for your Keys.

Choosing a key modulus greater than 512 may take a few minutes.

How many bits in the modulus [512]:512

Generating keys...

.....++++++++++++

........................++++++++++++

..........++++++++

............................++++++++

42.1.11 rsa local-key-pair destroy

Syntax rsa local-key-pair destroy

View

System view

Parameter

None

Description

Use the rsa local-key-pair destroy command to destroy all the RSA key pairs of the server, including the host keys and server keys.

Related command: rsa local-key-pair create.

Example

Destroy all the RSA keys of the server.

[SW8800] rsa local-key-pair destroy

% Keys to be removed are named rtvrp_Host .

% Do you really want to remove these keys? [yes/no]:y

42-9

3Com Switch 8800 Command Reference Guide

42.1.12 rsa peer-public-key

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

rsa peer-public-key key-name

View

System view

Parameter

key-name: Name of the public key of the client. It is a consecutive string whose length ranges from 1 to 64 characters.

Description

Use the rsa peer-public-key command to enter the public key view.

Performing this command, you can enter the public key view. Then you can use the

public-key-code begin command to configure the client public key on the server. The client public key is generated randomly by the SSH 2.0-enabled client software.

Related command: public-key-code begin, public-key-code end.

Example

Enter the public key view named SW8800002.

[SW8800] rsa peer-public-key SW8800002

[SW8800-rsa-public-key]

42.1.13 ssh server authentication-retries

Syntax

ssh server authentication-retries times

undo ssh server authentication-retries

View

System view

Parameter

times: Number of authentication retries, in the range from 1 to 5. By default, the value is

3.

Description

Use the ssh server authentication-retries command to set the number of SSH connection authentication retries.

42-10

3Com Switch 8800 Command Reference Guide

Chapter 42 SSH Terminal Service Configuration Comm ands

Use the ssh server authentication-retries command to restore the default number of

SSH connection authentication retries.

Related command: display ssh server.

Example

Specify the number of login authentication retries to 4.

[SW8800] ssh server authentication-retries 4

42.1.14 ssh server compatible_ssh1x enable

Syntax ssh server compatible_ssh1x enable undo ssh server compatible_ssh1x

View

System view

Parameter

None

Description

Use the ssh server compatible_ssh1x enable command to make the server compatible with the SSH 1.x client.

Use the undo ssh server compatible_ssh1x command to make the server not compatible with an SSH 1.x client.

By default, the server is compatible with the SSH 1.x client.

Example

Set the server to be compatible with the SSH 1.x client.

[SW8800] ssh server compatible_ssh1x enable

42.1.15 ssh server rekey-interval

Syntax

ssh server rekey-interval hours

undo ssh server rekey-interval

View

System view

42-11

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 42 SSH Terminal Service Configuration Comm ands

hours: Update interval of the server key, in range of 1 to 24 (hours). It cannot be 0.

Description

Use the ssh server rekey-interval command to set update interval of the server key.

Use the undo ssh server rekey-interval command to remove the configuration.

By default, the system does not update the server key.

Related command: display ssh server

Example

Set to update the server key every three hours.

[SW8800] ssh server rekey-interval 3

42.1.16 ssh server timeout

Syntax

ssh server timeout seconds

undo ssh server timeout

View

System view

Parameter

seconds: Specifies the login timeout (in seconds), in the range from 1 to 120. By default, the value is 60.

Description

Use the ssh server timeout command to set the authentication timeout of SSH connections.

Use the undo ssh server timeout command to restore the default SSH authentication timeout.

The configuration takes effect at the next login.

Related command: display ssh server.

Example

Set the login timeout to 80 seconds.

[SW8800] ssh server timeout 80

42-12

3Com Switch 8800 Command Reference Guide

42.1.17 ssh user assign rsa-key

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

ssh user username assign rsa-key keyname

undo ssh user username assign rsa-key

View

System view

Parameter

Description

Use the ssh user assign rsa-key command to assign an existing public key for the specified SSH user.

Use the undo ssh user assign rsa-key command to cancel the corresponding relationship between the user and the public key.

The new public key takes effect at the next login.

If a public key already exists before this command is performed, the newly configured key takes effect.

Related command: display ssh user-information.

Example

keyname: Name of the client public key. It is a consecutive string whose length ranges from 1 to 64 characters.

username: Valid SSH username. It is a consecutive string whose length ranges from 1 to 80 characters.

Assign public key1 for user zhangsan.

[SW8800] ssh user zhangsan assign rsa-key key1

42.1.18 ssh user authentication-type

Syntax

ssh user username authentication-type { password | rsa | password-publickey |

all }

undo ssh user username authentication-type

View

System view

42-13

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 42 SSH Terminal Service Configuration Comm ands

password: Forces the user’s authentication mode to password authentication.

rsa: Forces the user’s authentication mode to RSA public key authentication.

password-publickey: Forces the user’s authentication mode to password authentication plus RSA public key authentication.

all: Specifies that the user’s authentication mode can be either password authentication or public authentication.

Description

Use the ssh user authentication-type command to specify an authentication mode for a user.

Use the undo ssh user authentication-type command to restore the default unable-to-login mode.

The new authentication mode takes effect at the next login.

By default, no login authentication mode is specified, that is, SSH users are unable to login.

For a new user, you must specify an authentication mode; otherwise, the new user will not be able to log in.

Related command: display ssh user-information.

Example

Specify the authentication mode of user zhangsan to password authentication.

[SW8800] ssh user zhangsan authentication-type password

42.2 SSH Client Configuration Commands

42.2.1 display ssh server-info

Syntax display ssh server-info

View

Any view

Parameter

None

42-14

3Com Switch 8800 Command Reference Guide

Description

Chapter 42 SSH Terminal Service Configuration Comm ands

Use the display ssh server-info command to view the corresponding relationship between the client’s servers and public keys.

Example

Display the corresponding relationship between the client’s servers and public keys.

[SW8800] display ssh server-info

ServerIP public-key-name

192.168.0.1 3Com_key01

192.168.0.2 3Com_key02

42.2.2 quit

Syntax quit

View

User view

Parameter

None

Description

Use the quit command to terminate the connection with the remote SSH server.

Example

Terminate the connection with the remote SSH server.

<SW8800> quit

42.2.3 ssh client assign rsa-key

Syntax

ssh client server-ip assign rsa-key keyname

undo ssh client server-ip assign rsa-key

View

Parameter

System view

server-ip: IP address of the server.

keyname: Public key name of the client.

42-15

3Com Switch 8800 Command Reference Guide

Description

Chapter 42 SSH Terminal Service Configuration Comm ands

Use the ssh client assign rsa-key command to specify the IP address and the corresponding public key name of the server on the client.

Use the undo ssh client assign rsa-key command to cancel the configuration.

Example

Specify the public key of a server with IP address 192.168.0.1 on the client to serverkey01.

[SW8800] ssh client 192.168.0.1 assign rsa-key serverkey01

42.2.4 ssh client first-time enable

Syntax ssh client first-time enable

undo client ssh first-time

View

System view

Parameter

None

Description

Use the ssh client first-time enable command to set the SSH client to perform the first-time authentication of the SSH server to be accessed.

Use the undo ssh client first-time command to cancel the first-time authentication.

The first-time authentication means that when the SSH client accesses the server for the first time in the case that there is no local copy of the server’s public key, the user can proceed to access the server and save a local copy of the server’s public key; when the client accesses the server next time, it uses the saved public key to authenticate the server.

If the first-time authentication is not supported, when there is no local copy of the public key of the connected server, the client assumes that the server is illegal and will refuse to access the server. The user can save a copy of the server’s public key locally by other means beforehand.

By default, the client does not perform the first-time authentication.

Example

Set the SSH client to perform the first-time authentication of the SSH server to be accessed.

42-16

Chapter 42 SSH Terminal Service Configuration Comm

3Com Switch 8800 Command Reference Guide

[SW8800] ssh client first-time enable ands

42.2.5 ssh2

Syntax

ssh2 { host-ip | host-name } [ port-num ] [ prefer_kex { dh_group1 |

dh_exchange_group } ] [ prefer_ctos_cipher { des | 3des | aes128 } ]

[ prefer_stoc_cipher { des | 3des | aes128 } ] [ prefer_ctos_hmac { sha1 | sha1_96 |

md5 | md5_96 } ] [ prefer_stoc_hmac { sha1 | sha1_96 | md5 | md5_96 } ]

View

System view

Parameter

host-ip: IP address of the server.

host-name: Server name, a string with 1 to 20 characters.

port-num: Server port number, ranges from 0 to 65535, and defaults to 22.

prefer_kex: Preferred key exchange algorithm, which can be one of the two algorithms.

dh_group1: Key exchange algorithm diffie-hellman-group1-sha1, which is the default algorithm.

dh_exchange_group: Key exchange algorithm diffie-hellman-group-exchange-sha1.

prefer_ctos_cipher: Preferred encryption algorithm from the client to the server. The default algorithm is aes128.

prefer_stoc_cipher: Preferred encryption algorithm from the server to the client. The default algorithm is aes128.

des: Encryption algorithm des_cbc.

3des: Encryption algorithm 3des_cbc.

aes128: Encryption algorithm aes_128.

prefer_ctos_hmac: Preferred HMAC algorithm from the client to the server. The default algorithm is sha1_96.

prefer_stoc_hmac: Preferred HMAC algorithm from the server to the client. The default algorithm is sha1_96.

sha1: HMAC algorithm hmac-sha1.

sha1_96: HMAC algorithm hmac-sha1-96.

md5: HMAC algorithm hmac-md5.

md5_96: HMAC algorithm hmac-md5-96.

42-17

3Com Switch 8800 Command Reference Guide

Description

Chapter 42 SSH Terminal Service Configuration Comm ands

Use the ssh2 command to enable the connection between the SSH client and the server, and specify the preferred key exchange algorithm, encryption algorithm and

HMAC algorithm of the client and the server.

Example

Log in to remote SSH2 server with IP address 10.214.50.51, and configure encryption algorithms as follows: z z z z

Preferred key exchange algorithm: dh_exchange_group

Preferred encryption algorithm from the client to the server: 3DES-CBC

Preferred HMAC algorithm from the client to the server: HMAC-MD5

Preferred encryption algorithm from the server to the client: AES-128 z

Preferred HMAC algorithm from the server to the client: HMAC-SHA1-96

[SW8800] ssh2 10.214.50.51 prefer_kex dh_exchange_group prefer_ctos_cipher

3des prefer_ctos_hmac md5

42.3 SFTP Server Configuration Commands

42.3.1 sftp server enable

Syntax

View

System view

Parameter

None

Description

Use the sftp server enable command to start the SFTP server.

Use the undo sftp server enable command to shutdown the SFTP server.

By default, the SFTP server is shutdown.

Example

sftp server enable

undo sftp server

Start the SFTP server.

[SW8800] sftp-server enable

Shutdown the SFTP server.

[SW8800] undo sftp-server enable

42-18

3Com Switch 8800 Command Reference Guide

42.3.2 ssh user service-type

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

ssh user username service-type { telnet | sftp | all }

undo ssh user username service-type

View

System view

Parameter

Description

Use the ssh user service-type command to specify the service type for a particular user.

Use the undo ssh user service-type command to restore the default service type.

By default, the service type is telnet.

Related command: display ssh user-information.

Example

username: Local username or username defined by the remote RADIUS server.

telnet: Specifies the service type as Telnet.

sftp: Specifies the service type as SFTP.

all: Includes both Telnet and SFTP service types.

Specify the service type to be SFTP for user zhangsan.

[SW8800] ssh user zhangsan service-type sftp

42.4 SFTP Client Configuration Commands

42.4.1 bye

Syntax bye

View

Parameter

SFTP client view

None

42-19

3Com Switch 8800 Command Reference Guide

Description

Chapter 42 SSH Terminal Service Configuration Comm ands

Use the bye command to terminate the connection with the remote SFTP server and return to the user view.

This command has the same functionality as the exit and quit commands.

Example

Terminate the connection with the remote SFTP server. sftp-client> bye

<SW8800>

42.4.2 cd

Syntax

cd [remote-path ]

View

SFTP client view

Parameter

remote-path: Name of a path on the server.

Description

Use the cd command to change the current path on the SFTP server. If you do not specify the remote-path argument, the current path will be displayed.

Example

Change the current path to d:/temp. sftp-client> cd d:/temp

42.4.3 cdup

Syntax cdup

View

SFTP client view

Parameter

None

42-20

3Com Switch 8800 Command Reference Guide

Description

Chapter 42 SSH Terminal Service Configuration Comm ands

Use the cdup command to change the current path to its upper directory.

Example

Change the current path to its upper directory. sftp-client> cdup

42.4.4 delete

Syntax

delete remote-file

View

SFTP client view

Parameter

remote-file: Name of a file on the server.

Description

Use the delete command to delete the specified file from the server.

This command has the same functionality as the remove command.

Example

Delete file temp.c from the server. sftp-client> delete temp.c

42.4.5 dir

Syntax

dir [remote-path ]

View

SFTP client view

Parameter

remote-path: Name of the directory to view.

Description

Use the dir command to view the files in the specified directory.

If the remote-path argument is not specified, the files in the current directory will be displayed.

42-21

3Com Switch 8800 Command Reference Guide

Chapter 42 SSH Terminal Service Configuration Comm ands

This command has the same functionality as the ls command.

Example

View directory flash:/ sftp-client> dir flash:/

-rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 vrpcfg.cfg

-rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2

-rwxrwxrwx 1 noone nogroup 283 Aug 24 07:39 pubkey1

-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:28 pub1 drwxrwxrwx 1 noone nogroup 0 Sep 28 08:24 new1 drwxrwxrwx 1 noone nogroup 0 Sep 28 08:18 new2

-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:30 pub2

42.4.6 exit

Syntax exit

View

SFTP client view

Parameter

None

Description

Use the exit command to terminate the connection with the remote SFTP server and return to the user view.

This command has the same functionality as the bye and quit commands.

Example

Terminate the connection with the remote SFTP server. sftp-client> exit

<SW8800>

42.4.7 get

Syntax

get remote-file [ local-file ]

View

SFTP client view

42-22

3Com Switch 8800 Command Reference Guide

Parameter

Chapter 42 SSH Terminal Service Configuration Comm ands

remote-file: Name of a file on the remote SFTP server.

local-file: Name of a local file.

Description

Use the get command to download a file from the remote server and save it locally.

By default, if no local file name is specified, it is assumed that the local file has the same name as the file on the SFTP server.

Example

Download file temp1.c and save it with name temp.c. sftp-client> get temp1.c temp.c

42.4.8 help

Syntax

help [ command ]

View

SFTP client view

Parameter

command: Name of a command.

Description

Use the help command to view the help information for SFTP client commands.

If the command argument is not specified, all command names will be displayed.

Example

View the help information for the get command. sftp-client> help get get remote-path [local-path] Download file

Default local-path is the same with remote-path

42.4.9 ls

Syntax

ls [ remote-path ]

42-23

3Com Switch 8800 Command Reference Guide

View

SFTP client view

Parameter

Chapter 42 SSH Terminal Service Configuration Comm ands

remote-path: Name of the directory to view.

Description

Use the ls command to view the files in the specified directory.

If the remote-path argument is not specified, the files in the current directory will be displayed.

This command has the same functionality as the dir command.

Example

View directory flash:/ sftp-client> ls flash:/

-rwxrwxrwx 1 noone nogroup 1759 Aug 23 06:52 vrpcfg.cfg

-rwxrwxrwx 1 noone nogroup 225 Aug 24 08:01 pubkey2

-rwxrwxrwx 1 noone nogroup 283 Aug 24 07:39 pubkey1

-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:28 pub1 drwxrwxrwx 1 noone nogroup 0 Sep 28 08:24 new1 drwxrwxrwx 1 noone nogroup 0 Sep 28 08:18 new2

-rwxrwxrwx 1 noone nogroup 225 Sep 28 08:30 pub2

42.4.10 mkdir

Syntax

mkdir remote-path

View

SFTP client view

Parameter

remote-path: Name of a directory on the remote SFTP server.

Description

Use the mkdir command to create a directory on the remote SFTP server.

Example

Create directory test on the remote SFTP server. sftp-client> mkdir test

42-24

3Com Switch 8800 Command Reference Guide

42.4.11 put

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

put local-file [ remote-file ]

View

SFTP client view

Parameter

local-file: Name of a local file.

remote-file: Name of a file on the remote SFTP server.

Description

Use the put command to upload a local file to the remote SFTP server.

By default, if no name of the file on the remote server is specified, it is assumed that the file on the remote server has the same name as the local file.

Example

Upload local file temp.c to the remote SFTP server and save it with the name temp1.c. sftp-client> put temp.c temp1.c

42.4.12 pwd

Syntax pwd

View

SFTP client view

Parameter

None

Description

Use the pwd command to display the current directory on the SFTP server.

Example

Display the current directory on the SFTP server. sftp-client> pwd flash:

42-25

3Com Switch 8800 Command Reference Guide

42.4.13 quit

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax quit

View

SFTP client view

Parameter

None

Description

Use the quit command to terminate the connection with the remote SFTP server and return to the user view.

This command has the same functionality as the bye and exit commands.

Example

Terminate the connection with the remote SFTP server. sftp-client> quit

<SW8800>

42.4.14 remove

Syntax

remove remote-file

View

SFTP client view

Parameter

remote-file: Name of a file on the server.

Description

Use the remove command to delete the specified file from the server.

This command has the same functionality as the delete command.

Example

Delete the file temp.c from the server. sftp-client> delete temp.c

42-26

3Com Switch 8800 Command Reference Guide

42.4.15 rename

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

rename oldname newname

View

SFTP client view

Parameter

oldname: Original file name.

newname: New file name.

Description

Use the rename command to change the name of the specified file on the SFTP server.

Example

Change the name of the file temp1 on the SFTP server to temp2. sftp-client> rename temp1 temp2

42.4.16 rmdir

Syntax

rmdir remote-path

View

SFTP client view

Parameter

remote-path: Name of a directory on the remote SFTP server.

Description

Use the rmdir command to delete the specified directory from the SFTP server.

Example

Delete the directory D:/temp1 from the SFTP server. sftp-client> rmdir D:/temp1

42-27

3Com Switch 8800 Command Reference Guide

42.4.17 sftp

Chapter 42 SSH Terminal Service Configuration Comm ands

Syntax

sftp ipaddr [ prefer_kex { dh_group1 | dh_exchange_group } ] [ prefer_ctos_cipher

{ des | 3des | aes128 } ] [ prefer_stoc_cipher { des | 3des | aes128 } ]

[ prefer_ctos_hmac { sha1 | sha1_96 | md5 | md5_96 } ] [ prefer_stoc_hmac { sha1

| sha1_96 | md5 | md5_96 } ]

View

System view

Parameter

ipaddr: IP address of the server.

prefer_kex: Preferred key exchange algorithm, which can be either diffie-hellman-group1-sha1 or diffie-hellman-group-exchange-sha1.

dh_group1: Key exchange algorithm diffie-hellman-group1-sha1, which is default algorithm.

dh_exchange_group: Key exchange algorithm diffie-hellman-group-exchange-sha1.

prefer_ctos_cipher: Preferred encryption algorithm from the client to the server. The default algorithm is aes128.

prefer_stoc_cipher: Preferred encryption algorithm from the server to the client. The default algorithm is aes128.

des: Encryption algorithm des_cbc.

3des: Encryption algorithm 3des_cbc.

aes128: Encryption algorithm aes_128.

prefer_ctos_hmac: Preferred HMAC algorithm from the client to the server. The default algorithm is sha1_96.

prefer_stoc_hmac: Preferred HMAC algorithm from the server to the client. The default algorithm is sha1_96.

sha1: HMAC algorithm hmac-sha1.

sha1_96: HMAC algorithm hmac-sha1-96.

md5: HMAC algorithm hmac-md5.

md5_96: HMAC algorithm hmac-md5-96.

Description

Use the sftp command to establish the connection with the remote SFTP server and enter the SFTP client view.

42-28

3Com Switch 8800 Command Reference Guide

Example

Chapter 42 SSH Terminal Service Configuration Comm ands

Connect to the SFTP server with IP address 10.214.49.126 using the default encryption algorithm.

[SW8800] sftp 10.214.49.126

42-29

3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands

Chapter 43 PoE Configuration Commands

43.1 PoE Configuration Commands

43.1.1 display poe interface

Syntax

display poe interface { interface-name | interface-type interface-num }

View

Any view

Parameter

Description

Use the display poe interface{ interface-name | interface-type interface-num } command to display the PoE status of a specific port on the switch.

Use the display poe interface command without any option to display the PoE status of all the PoE-capable ports on the switch.

Example

interface-name | interface-type interface-num: Port on the switch; refer to Command

Manual – Port for details.

Display the PoE status of the port GigabitEthernet3/1/1.

<SW8800> display poe interface GigabitEthernet3/1/1

Port power status :delivering

Port power mode :signal

Port PD class :2 port power priority :high

Port max power :16800 mW

Port current power :552 mW

Port remaining power :16248 mW

Port average power :717 mW

Port peak power :1196 mW

Port current :13 mA

Port voltage :53.7 V

43-1

3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands

Table 43-1 Description on the fields of the display poe interface command

Field

Port power status

Port power mode

Description

PoE status of the port:

1) disabled: PoE is disabled on the port.

2) searching: the port is searching for a PD.

3) delivering: the port is supplying power to the PD.

4) PD disconnected: the port is not connected with a

PD.

5) testing: the port is in testing.

6) fault: the port detected an nonstandard or fault PD.

PoE mode of the port:

1) auto: the system automatically selects the PoE mode.

2) signal

3) spare

The class of the power the port supplies to the PD Port PD class

Port power priority

Port priority:

1) critical (the highest)

2) high

3) low

Maximum power on the port Port max power

Port current power

Port average power

Port peak power

Port current

Port voltage

Present power on the port

Average power on the port

Peak power on the port

Present current on the port

Present voltage on the port

Port remaining power Remaining power on the port

43.1.2 display poe interface power

Syntax

display poe interface power { interface-name | interface-type interface-num }

View

Any view

Parameter

interface-name | interface-type interface-num: Port on the switch; refer to Command

Manual – Port for details.

43-2

3Com Switch 8800 Command Reference Guide

Description

Chapter 43 PoE Configuration Commands

Use the display poe interface power command to display the PoE power information of a specific port or all ports on the switch.

Example

Display the power information of the port GigabitEthernet3/1/1.

<SW8800> display poe interface power GigabitEthernet3/1/1

Port power :700 mW

43.1.3 display poe pse

Syntax

display poe pse

View

Any view

Parameter

None

Description

Use the display poe pse command to display the parameters of all the PoE cards in the switch that serve as a power sourcing equipment (PSE).

Example

Display the parameters of all the PoE cards in the switch.

<SW8800> display poe pse

PSE Information of board 6:

Power Current Value :67 W

Power Remaining Value :738 W

Power Max Value :806 W

Power Peak Value :1 W

Power Average Value :0 W

Software Version :290

Hardware Version :000

CPLD Version :021

Table 43-2 Description on the fields of the display poe pse command

Field

Power Current Value

Power Remaining Value

Description

Current power of the card

Remaining power of the card

43-3

3Com Switch 8800 Command Reference Guide

Power Max Value

Power Peak Value

Power Average Value

Software Version

Hardware Version

43.1.4 display poe slot

Chapter 43 PoE Configuration Commands

Maximum power of the card

Peak power of the card

Average power of the card

PSE software version

PSE hardware version

Syntax

display poe slot slotnum

View

Any view

Parameter

slotnum: Slot number of a PoE card

Description

Use the display poe slot slotnum command to display the information of a PoE card in the switch.

Example

Display the information of the PoE card in slot 8 of the switch.

[8508] displaypoe slot 8

PSE Information of board 8:

Power Current Value :33 W

Power Remaining Value :772 W

Power Max Value :806 W

Power Peak Value :34 W

Power Average Value :33 W

Software Version :290

Hardware Version :000

43.1.5 poe enable

Syntax poe enable

undo poe enable

43-4

3Com Switch 8800 Command Reference Guide

View

Ethernet port view

Parameter

None

Chapter 43 PoE Configuration Commands

Description

Use the poe enable command to enable the PoE feature on a port.

Use the undo poe enable command to disable the PoE feature on a port.

By default, PoE is disabled on port.

Example

Enable PoE on current port.

[SW8800-GigabitEthernet3/1/1] poe enable

Disable PoE on current port.

[SW8800-GigabitEthernet3/1/1] undo poe enable

43.1.6 poe max-power

Syntax

poe max-power max-power

undo poe max-power

View

Ethernet port view

Parameter

Description

Use the poe max-power command to set the maximum PoE power on the current port.

Use the undo poe max-power command to restore the default PoE power on current port.

By default, the maximum PoE power on a port is 16800 mW.

Example

max-power: Maximum power distributed to the port, ranging from 3000 mW to 16800 mW.

Set the maximum PoE power on current port to 12000 mW.

[SW8800-GigabitEthernet3/1/1] poe max-power 12000

43-5

3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands

Restore the default PoE power on current port.

[SW8800-GigabitEthernet3/1/1] undo poe max-power

43.1.7 poe max-power slot

Syntax

poe max-power max-power slot slot-num

undo poe max-power slot slot-num

View

System view

Parameter

max-power: Maximum power distributed to the card, ranging from 37 W to 806 W.

slot-num: Slot number of a card.

Description

Use the poe max-power command to set the maximum power on a card.

Use the undo poe max-power command to restore the default maximum power on the card.

By default, the maximum power on a card is 806 W.

Example

Set the maximum power on the card in slot 3 to 400 W.

[SW8800] poe max-power 400 slot 3

Restore the default maximum power on the card.

[SW8800] undo poe max-power slot 3

43.1.8 poe mode

Syntax

poe mode { signal | spare | auto }

undo poe mode

View

Ethernet port view

Parameter

signal: The port supplies power through signal lines.

spare: The port supplies power through spare lines.

43-6

3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands

auto: The port supplies power in automatically selected mode.

Description

Use the poe mode command to configure the PoE mode on the current port.

Use the undo poe mode command to restore the default PoE mode on current port.

By default, the port adopts signal lines to supply power.

Caution:

The Switch 8800 does not support the spare mode. If a PD only supports the spare mode, a conversion will be needed.

Example

Configure the PoE mode on current port to signal.

[SW8800-GigabitEthernet3/1/1] poe mode signal

43.1.9 poe priority

Syntax

poe priority { critical | high | low }

undo poe priority

View

Ethernet port view

Parameter

critical: Sets the port priority to critical (the highest).

high: Sets the port priority to high.

low: Sets the port priority to low.

Description

Use the poe priority command to set the PoE priority on a port.

Use the undo poe priority command to restore the default priority.

By default, the PoE priority on each port is low.

43-7

3Com Switch 8800 Command Reference Guide Chapter 43 PoE Configuration Commands

Caution:

When the PoE power of the switch is not enough to support all the port, the switch supplies power to ports with higher priority, and powers down some ports with lower priority.

Example

Set the PoE priority of current port to critical.

[SW8800-GigabitEthernet3/1/1] poe priority critical

Restore the default priority.

[SW8800-GigabitEthernet3/1/1] undo poe priority

43-8

3Com Switch 8800 Command Reference Guide Chapter 44 PoE PSU Supervision Commands

Chapter 44 PoE PSU Supervision Commands

44.1 PoE PSU Supervision Display Commands

44.1.1 display poe-power ac-input state

Syntax display poe-power ac-input state

View

Any view

Parameter

None

Description

Use the display poe-power ac-input state command to display the AC input state of each power supply unit (PSU).

Example

Display the AC input state of each PSU.

<SW8800> display poe-power ac-input state

PSU 1 AC Input State : Lack Phase

PSU 2 AC Input State : Normal

PSU 3 AC Input State : Lack Phase

Table 44-1 Description on the fields of the display poe-power ac-input state command

NORMAL

Under Limit

Upper Limit

Lack Phase

Fuse Broken

Switch Off

Field Description

The AC input is normal.

The AC input is below the lower threshold.

The AC input is above the upper threshold.

The AC input is lack of phase.

The fuse is blown.

The switch is off.

44-1

3Com Switch 8800 Command Reference Guide

44.1.2 display poe-power alarm

Chapter 44 PoE PSU Supervision Commands

Syntax display poe-power alarm

View

Any view

Parameter

None

Description

Use the display poe-power alarm command to display detailed alarm information about the PoE PSUs.

Example

Display detailed alarm information about the PoE PSUs.

<SW8800> display poe-power alarm

PSU alarm detail, PSU number : 2

PSU 1 alarm : NORMAL

PSU 2 alarm : NOTLINK Controller/Rectifer communication Fail/Rectifier not in present

Table 44-2 Description on the fields of the display poe-power alarm command

Field

NORMAL Normal

NOTLINK

INERROR

Description

The PSU is disconnected. That is, the controller was able to communicate with the PSU; but it cannot now. Power-cycling the unit or re-inserting a new PSU can resolve this problem.

The PSU input is in trouble. Restoring the AC input can resolve this problem.

OUTERROR

HIGHVOL

HIGHTEP

FANERROR

CLOSE

CURLIMIT

The PSU output is in trouble, the PSU cannot output normal DC voltage.

The PSU is over-voltage. The PSU is shut down because the output voltage is too high.

It is overheated in the PSU.

The PSU fan is in trouble.

The PSU is shut down remotely.

The PSU is current limited.

44-2

3Com Switch 8800 Command Reference Guide

44.1.3 display poe-power dc-output state

Chapter 44 PoE PSU Supervision Commands

Syntax

display poe-power dc-output state

View

Any view

Parameter

None

Description

Use the display poe-power dc-output state command to display the current DC output state of the PoE PSUs.

Example

Display the current DC output state.

<SW8800> display poe-power dc-output state

DC Output State : Normal

44.1.4 display poe-power dc-output value

Syntax

display poe-power dc-output value

View

Any view

Parameter

None

Description

Use the display poe-power dc-output value command to display the DC output voltage/current value of the PoE PSUs.

Example

Display the DC output voltage/current value of the PoE PSUs.

<SW8800> display poe-power dc-output value

DC Output Voltage : 53.997 V

DC Output Current : 0.000 A

44-3

3Com Switch 8800 Command Reference Guide

44.1.5 display poe-power switch state

Chapter 44 PoE PSU Supervision Commands

Syntax

display poe-power switch state

View

Any view

Parameter

None

Description

Use the display poe-power switch state command to display the number and current state of the AC power distribution switches of the PSUs.

Example

Display the number and current state of the AC power distribution switches.

<SW8800>display poe-power switch state

Switch Number : 0

Table 44-3 Description on the fields of the display poe-power switch state command

On

Off

High Volt Input

Low Volt Input

Field Description

The switch is on.

The switch is off.

The input is high voltage.

The input is low voltage.

44.1.6 display supervision-module information

Syntax

display supervision-module information

View

Any view

Parameter

None

Description

44-4

3Com Switch 8800 Command Reference Guide Chapter 44 PoE PSU Supervision Commands

Use the display supervision-module information command to display the name of the supervision module, power supply model, specifications and output power, and other information.

Example

Display current information about the power system

<SW8800> display supervision-module information

Supervision Module Version : 2.0

Supervision Module Name :Spring Pms

Power Type :PSE4500-A

Power Rating Value : 2250 W (220V)/1125 W(110V)

Power Current Value : 53 W

Power Remaining Value : 2197 W

Power Peak Value : 0 W

Power Average Value : 0 W

PSU Number : 2

PSU 1

Rating Output Power : 2500 W

Hard Version Info :NP 2500

PSU 2

Rating Output Power : 2500 W

Hard Version Info :NP 2500

Table 44-4 Description on the fields of the display supervision-module information command

Field Description

Supervision Module Version Software version of the supervision module

Supervision Module Name Name of the supervision module

Power Type Power type

Power Rating Value

Power Current Value

Power Remaining Value

Power Peak Value

Power Average Value

Rating Output Power

Rated power of the power system

Current consumption power of the power system

Current remaining power of the power system

Peak power of the power system

Average power of the power system

Rated output power. When one or two PSUs are available, it is 2250 W for 220 VAC input and 1125

W for 110 VAC input. When three PSUs are available, it is 4500 W for 220 VAC input and 2250

W for 110 VAC input.

44-5

3Com Switch 8800 Command Reference Guide Chapter 44 PoE PSU Supervision Commands

44.2 PoE PSU Supervision Configuration Commands

44.2.1 poe-power input-thresh lower

Syntax

poe-power input-thresh lower string

View

System view

Parameter

Description

z z

Use the poe-power input-thresh lower command to set the undervoltage alarm threshold of AC input for the PoE PSUs (lower threshold):

For 220 VAC input, it is recommended to set the threshold to 181.0 V.

For 110 VAC input, it is recommended to set the threshold to 90.0 V.

Example

string: Undervoltage alarm threshold. It ranges from 90.00 V to 264.00 V in the format of X.X and within the accuracy of the second decimal.

Set the undervoltage alarm threshold of AC input to 181.0 V.

[SW8800] poe-power input-thresh lower 181.0

Set lower input-threshold power successfully!

44.2.2 poe-power input-thresh upper

Syntax

poe-power input-thresh upper string

View

System view

Parameter

string: Overvoltage alarm threshold. It ranges from 90 V to 264 V in the format of X.X.

Description

z z

Use the poe-power input-thresh upper command to set overvoltage alarm threshold of AC input (upper threshold):

For 220 VAC input, it is recommended to set the threshold to 264.0 V.

For 110 VAC input, it is recommended to set the threshold to 132.0 V.

44-6

3Com Switch 8800 Command Reference Guide

Example

Chapter 44 PoE PSU Supervision Commands

Set the overvoltage alarm threshold of AC input to 264.0 V.

[SW8800] poe-power input upper 264.0

Set upper input-threshold power successfully!

44.2.3 poe-power output-thresh lower

Syntax

poe-power output-thresh lower string

View

System view

Parameter

Description

Use the poe-power output-thresh lower command to set the undervoltage alarm threshold of DC output (lower threshold):

For both 220 VAC and 110 VAC input, it is recommended to set the threshold to 45.00

V.

Example

string: Undervoltage alarm threshold. It ranges from 45.00 V to 47.00 V in the format of x.x.

Set the undervoltage alarm threshold of DC output to 45.00 V.

[SW8800] poe-power output-thresh upper 57.0

Set lower output-threshold power successfully!

44.2.4 poe-power output-thresh upper

Syntax

poe-power output-thresh upper string

View

Parameter

System view

string: Overvoltage alarm threshold. It ranges from 55.00 V to 57.00 V in the format of

X.X.

44-7

3Com Switch 8800 Command Reference Guide

Description

Chapter 44 PoE PSU Supervision Commands

Use the poe-power output-thresh upper command to set the overvoltage alarm threshold of DC output (upper threshold):

For both 220 VAC and 110 VAC input, it is recommended to set the threshold to 57.00

V.

Example

Set the overvoltage alarm threshold of DC output to 57.00V.

[SW8800] poe-power output upper 57.00

Set upper output-threshold power successfully!

44-8