3Com 7700 network switch Command Reference

Below you will find brief information for network switch 7700. This document provides a comprehensive reference for all commands available on the 3Com Switch 7700, covering areas such as system access, port configuration, VLAN management, network protocols, routing protocols, security, and more. Using this document, you can configure and manage your switch effectively, ensuring optimal network performance and security.

PDF

Document

Switch 7700

Command Reference

http://www.3com.com/

Published July 2003

Chapter 1 About This Manual................................................................................................................................................17

1.1. Version.................................................................................................................................................................................................. 17

1.3. Organization of the Manual................................................................................................................................................................... 17

1.4. Intended Readers ................................................................................................................................................................................. 17

1.5. Conventions .......................................................................................................................................................................................... 18

Chapter 2 System Access .....................................................................................................................................................17

2.1. Logging in Commands .......................................................................................................................................................................... 19

2.1.1. authentication-mode.......................................................................................................................................................................... 19

2.1.2. auto-execute command..................................................................................................................................................................... 19

2.1.3. command-privilege level ................................................................................................................................................................... 20

2.1.4. databits ............................................................................................................................................................................................. 21

2.1.5. display history-command .................................................................................................................................................................. 22

2.1.6. display tcp status............................................................................................................................................................................... 22

2.1.7. display user-interface ........................................................................................................................................................................ 23

2.1.8. display users ..................................................................................................................................................................................... 24

2.1.9. flow-control........................................................................................................................................................................................ 25

2.1.10. free user-interface ........................................................................................................................................................................... 25

2.1.11. header ............................................................................................................................................................................................. 26

2.1.12. history-command max-size ............................................................................................................................................................. 27

2.1.13. idle-timeout...................................................................................................................................................................................... 27

2.1.14. lock.................................................................................................................................................................................................. 28

2.1.15. modem ............................................................................................................................................................................................ 28

2.1.16. modem auto-answer ....................................................................................................................................................................... 29

2.1.17. modem timer answer....................................................................................................................................................................... 30

2.1.18. parity ............................................................................................................................................................................................... 30

2.1.19. quit .................................................................................................................................................................................................. 31

2.1.20. return............................................................................................................................................................................................... 31

2.1.21. screen-length .................................................................................................................................................................................. 32

2.1.22. send ................................................................................................................................................................................................ 32

2.1.23. service-type telnet level................................................................................................................................................................... 33

2.1.24. set authentication password............................................................................................................................................................ 34

2.1.25. shell................................................................................................................................................................................................. 35

2.1.26. speed .............................................................................................................................................................................................. 36

2.1.27. stopbits............................................................................................................................................................................................ 36

2.1.28. super ............................................................................................................................................................................................... 37

2.1.29. super password............................................................................................................................................................................... 37

2.1.30. sysname.......................................................................................................................................................................................... 38

2.1.31. system-view .................................................................................................................................................................................... 39

2.1.32. telnet ............................................................................................................................................................................................... 39

2.1.33. user-interface .................................................................................................................................................................................. 40

2.1.34. user privilege level .......................................................................................................................................................................... 41

Chapter 3 Port .......................................................................................................................................................................19

3.1. Ethernet Port Configuration Commands ............................................................................................................................................... 43

3.1.1. description......................................................................................................................................................................................... 43

3.1.2. display interface ................................................................................................................................................................................ 43

3.1.3. display mirror..................................................................................................................................................................................... 45

3.1.4. display port........................................................................................................................................................................................ 45

3.1.5. display port vlan-vpn ......................................................................................................................................................................... 46

3.1.6. duplex ............................................................................................................................................................................................... 46

3.1.7. flow-control........................................................................................................................................................................................ 47

3.1.8. interface ............................................................................................................................................................................................ 47

3.1.9. jumboframe ....................................................................................................................................................................................... 48

3.1.10. loopback.......................................................................................................................................................................................... 49

3.1.11. mac-address max-mac-count.......................................................................................................................................................... 49

3.1.12. mdi .................................................................................................................................................................................................. 50

3.1.13. mirroring-port................................................................................................................................................................................... 50

3.1.14. monitor-port..................................................................................................................................................................................... 51

3.1.15. port access vlan .............................................................................................................................................................................. 51

3.1.16. port hybrid pvid vlan ........................................................................................................................................................................ 52

3.1.17. port hybrid vlan................................................................................................................................................................................ 52

3.1.18. port link-type.................................................................................................................................................................................... 53

3.1.19. port trunk permit vlan ...................................................................................................................................................................... 54

3.1.20. port trunk pvid vlan.......................................................................................................................................................................... 54

3.1.21. reset counters interface................................................................................................................................................................... 55

3.1.22. shutdown......................................................................................................................................................................................... 55

3.1.23. speed .............................................................................................................................................................................................. 56

3.2. Ethernet Port Link Aggregation Commands ......................................................................................................................................... 56

3.2.1. display link-aggregation .................................................................................................................................................................... 56

3.2.2. link-aggregation................................................................................................................................................................................. 57

Chapter 4 VLAN.....................................................................................................................................................................59

4.1. VLAN Configuration Commands........................................................................................................................................................... 59

4.1.1. broadcast-suppression ...................................................................................................................................................................... 59

4.1.2. description......................................................................................................................................................................................... 59

4.1.3. display interface VLAN-interface ....................................................................................................................................................... 60

4.1.4. display vlan ....................................................................................................................................................................................... 60

4.1.5. interface VLAN-interface ................................................................................................................................................................... 61

4.1.6. ip address.......................................................................................................................................................................................... 62

4.1.7. port.................................................................................................................................................................................................... 62

4.1.8. shutdown........................................................................................................................................................................................... 63

4.1.9. vlan ................................................................................................................................................................................................... 64

4.2. GARP Configuration Commands .......................................................................................................................................................... 64

4.2.1. display garp statistics ........................................................................................................................................................................ 64

4.2.2. display garp timer.............................................................................................................................................................................. 65

4.2.3. garp timer .......................................................................................................................................................................................... 66

4.2.4. garp timer leaveall............................................................................................................................................................................. 66

4.2.5. reset garp statistics ........................................................................................................................................................................... 67

4.3. GVRP Configuration Command............................................................................................................................................................ 68

4.3.1. display gvrp statistics ........................................................................................................................................................................ 68

4.3.2. display gvrp status ............................................................................................................................................................................ 68

4.3.3. gvrp ................................................................................................................................................................................................... 69

4.3.4. gvrp registration ................................................................................................................................................................................ 69

Chapter 5 Network Protocol .................................................................................................................................................71

5.1. IP Address Configuration Commands .................................................................................................................................................. 71

5.1.1. display ip host ................................................................................................................................................................................... 71

5.1.2. display ip interface ............................................................................................................................................................................ 71

5.1.3. ip address.......................................................................................................................................................................................... 72

5.1.4. ip host ............................................................................................................................................................................................... 72

5.2. ARP Configuration Commands............................................................................................................................................................. 73

5.2.1. arp static ........................................................................................................................................................................................... 73

5.2.2. debugging arp ................................................................................................................................................................................... 74

5.2.3. display arp......................................................................................................................................................................................... 74

5.2.4. reset arp ............................................................................................................................................................................................ 75

5.3. DHCP Relay Configuration Commands................................................................................................................................................ 75

5.3.1. debugging dhcp-relay........................................................................................................................................................................ 75

5.3.2. dhcp-security..................................................................................................................................................................................... 76

5.3.3. dhcp-server ....................................................................................................................................................................................... 77

5.3.4. dhcp-server ip ................................................................................................................................................................................... 77

5.3.5. disable address-check ...................................................................................................................................................................... 78

5.3.6. display dhcp-relay ............................................................................................................................................................................. 78

5.3.7. display dhcp-security......................................................................................................................................................................... 79

5.3.8. display dhcp-server interface ............................................................................................................................................................ 80

5.3.9. enable address-check ....................................................................................................................................................................... 80

5.4. IP Performance Configuration Commands ........................................................................................................................................... 81

5.4.1. display tcp status............................................................................................................................................................................... 81

5.4.2. tcp timer fin-timeout........................................................................................................................................................................... 81

5.4.3. tcp timer syn-timeout......................................................................................................................................................................... 82

5.4.4. tcp window ........................................................................................................................................................................................ 82

Chapter 6 Routing Protocol...................................................................................................................................................85

6.1. Display Commands of the Routing Table ............................................................................................................................................. 85

6.1.1. display ip routing-table ...................................................................................................................................................................... 85

6.1.2. display ip routing-table acl................................................................................................................................................................. 86

6.1.3. display ip routing-table ip_address.................................................................................................................................................... 87

6.1.4. display ip routing-table ip_address1 ip_address2 ............................................................................................................................. 88

6.1.5. display ip routing-table ip-prefix......................................................................................................................................................... 89

6.1.6. display ip routing-table protocol......................................................................................................................................................... 90

6.1.7. display ip routing-table radix.............................................................................................................................................................. 91

6.1.8. display ip routing-table statistics........................................................................................................................................................ 92

6.1.9. display ip routing-table verbose......................................................................................................................................................... 92

6.2. Static Route Configuration Command .................................................................................................................................................. 93

6.2.1. ip route-static..................................................................................................................................................................................... 93

6.3. RIP Configuration Commands .............................................................................................................................................................. 94

6.3.1. checkzero.......................................................................................................................................................................................... 94

6.3.2. default cost........................................................................................................................................................................................ 95

6.3.3. display rip .......................................................................................................................................................................................... 95

6.3.4. filter-policy export .............................................................................................................................................................................. 96

6.3.5. filter-policy import .............................................................................................................................................................................. 96

6.3.6. host-route .......................................................................................................................................................................................... 97

6.3.7. import-route....................................................................................................................................................................................... 97

6.3.8. network ............................................................................................................................................................................................. 98

6.3.9. peer................................................................................................................................................................................................... 99

6.3.10. preference ....................................................................................................................................................................................... 99

6.3.11. rip .................................................................................................................................................................................................. 100

6.3.12. rip authentication-mode................................................................................................................................................................. 100

6.3.13. rip input ......................................................................................................................................................................................... 102

6.3.14. rip metricin..................................................................................................................................................................................... 102

6.3.15. rip metricout .................................................................................................................................................................................. 103

6.3.16. rip output ....................................................................................................................................................................................... 103

6.3.17. rip split-horizon.............................................................................................................................................................................. 104

6.3.18. rip version...................................................................................................................................................................................... 104

6.3.19. rip work ......................................................................................................................................................................................... 105

6.3.20. summary ....................................................................................................................................................................................... 105

6.4. OSPF Configuration Commands ........................................................................................................................................................ 106

6.4.1. abr-summary ................................................................................................................................................................................... 106

6.4.2. area................................................................................................................................................................................................. 107

6.4.3. asbr-summary ................................................................................................................................................................................. 107

6.4.4. authentication-mode........................................................................................................................................................................ 108

6.4.5. default cost...................................................................................................................................................................................... 108

6.4.6. default interval................................................................................................................................................................................. 109

6.4.7. default limit ...................................................................................................................................................................................... 109

6.4.8. default tag ....................................................................................................................................................................................... 110

6.4.9. default type...................................................................................................................................................................................... 110

6.4.10. default-cost.................................................................................................................................................................................... 111

6.4.11. default-route-advertise .................................................................................................................................................................. 112

6.4.12. display ospf abr-asbr..................................................................................................................................................................... 112

6.4.13. display ospf asbr-summary ........................................................................................................................................................... 113

6.4.14. display ospf brief ........................................................................................................................................................................... 113

6.4.15. display ospf cumulative ................................................................................................................................................................. 114

6.4.16. display ospf error........................................................................................................................................................................... 115

6.4.17. display ospf interface .................................................................................................................................................................... 116

6.4.18. display ospf lsdb............................................................................................................................................................................ 116

6.4.19. display ospf nexthop ..................................................................................................................................................................... 117

6.4.20. display ospf peer ........................................................................................................................................................................... 118

6.4.21. display ospf request-queue ........................................................................................................................................................... 118

6.4.22. display ospf retrans-queue ............................................................................................................................................................ 119

6.4.23. display ospf routing ....................................................................................................................................................................... 119

6.4.24. display ospf vlink ........................................................................................................................................................................... 120

6.4.25. filter-policy export .......................................................................................................................................................................... 120

6.4.26. filter-policy import .......................................................................................................................................................................... 121

6.4.27. import-route................................................................................................................................................................................... 122

6.4.28. network ......................................................................................................................................................................................... 122

6.4.29. nssa .............................................................................................................................................................................................. 123

6.4.30. ospf ............................................................................................................................................................................................... 123

6.4.31. ospf authentication-mode .............................................................................................................................................................. 124

6.4.32. ospf cost........................................................................................................................................................................................ 125

6.4.33. ospf dr-priority ............................................................................................................................................................................... 125

6.4.34. ospf mtu-enable ............................................................................................................................................................................ 126

6.4.35. ospf timer dead ............................................................................................................................................................................. 126

6.4.36. ospf timer hello.............................................................................................................................................................................. 127

6.4.37. ospf timer poll................................................................................................................................................................................ 127

6.4.38. ospf timer retransmit ..................................................................................................................................................................... 128

6.4.39. ospf trans-delay............................................................................................................................................................................. 128

6.4.40. peer............................................................................................................................................................................................... 129

6.4.41. preference ..................................................................................................................................................................................... 129

6.4.42. reset ospf all.................................................................................................................................................................................. 130

6.4.43. router id ......................................................................................................................................................................................... 130

6.4.44. silent-interface............................................................................................................................................................................... 131

6.4.45. spf-schedule-interval ..................................................................................................................................................................... 132

6.4.46. stub ............................................................................................................................................................................................... 132

6.4.47. vlink-peer....................................................................................................................................................................................... 133

6.5. IP Routing Policy Configuration Commands....................................................................................................................................... 134

6.5.1. apply as-path................................................................................................................................................................................... 134

6.5.2. apply community ............................................................................................................................................................................. 134

6.5.3. apply cost ........................................................................................................................................................................................ 135

6.5.4. apply cost-type ................................................................................................................................................................................ 136

6.5.5. apply ip next-hop............................................................................................................................................................................. 136

6.5.6. apply local-preference..................................................................................................................................................................... 137

6.5.7. apply origin...................................................................................................................................................................................... 138

6.5.8. apply tag ......................................................................................................................................................................................... 138

6.5.9. display ip ip-prefix ........................................................................................................................................................................... 139

6.5.10. display route-policy ....................................................................................................................................................................... 139

6.5.11. filter-policy export .......................................................................................................................................................................... 140

6.5.12. filter-policy import .......................................................................................................................................................................... 141

6.5.13. if-match { acl | ip-prefix }................................................................................................................................................................ 142

6.5.14. if-match as-path ............................................................................................................................................................................ 142

6.5.15. if-match community ....................................................................................................................................................................... 143

6.5.16. if-match cost.................................................................................................................................................................................. 144

6.5.17. if-match interface........................................................................................................................................................................... 144

6.5.18. if-match ip next-hop....................................................................................................................................................................... 145

6.5.19. if-match tag ................................................................................................................................................................................... 146

6.5.20. ip ip-prefix...................................................................................................................................................................................... 146

6.5.21. route-policy.................................................................................................................................................................................... 147

Chapter 7 Multicast Protocol ..............................................................................................................................................149

7.1. GMRP Configuration Commands ....................................................................................................................................................... 149

7.1.1. debugging gmrp event .................................................................................................................................................................... 149

7.1.2. display gmrp statistics ..................................................................................................................................................................... 149

7.1.3. display gmrp status ......................................................................................................................................................................... 150

7.1.4. gmrp................................................................................................................................................................................................ 150

7.2. Multicast Common Configuration Commands .................................................................................................................................... 151

7.2.1. debugging multicast forwarding....................................................................................................................................................... 151

7.2.2. debugging multicast kernel-routing ................................................................................................................................................. 151

7.2.3. debugging multicast status-forwarding ............................................................................................................................................ 152

7.2.4. display multicast forwarding-table ................................................................................................................................................... 152

7.2.5. display multicast routing-table ......................................................................................................................................................... 153

7.2.6. display multicast rpf-info.................................................................................................................................................................. 153

7.2.7. display multicast vif ......................................................................................................................................................................... 154

7.2.8. multicast minimum-ttl ...................................................................................................................................................................... 154

7.2.9. multicast packet-boundary .............................................................................................................................................................. 154

7.2.10. multicast routing-enable ................................................................................................................................................................ 155

7.3. IGMP Configuration Commands ......................................................................................................................................................... 155

7.3.1. debugging igmp............................................................................................................................................................................... 155

7.3.2. display igmp group .......................................................................................................................................................................... 156

7.3.3. display igmp interface ..................................................................................................................................................................... 156

7.3.4. display ip igmp port ......................................................................................................................................................................... 157

7.3.5. igmp group-policy............................................................................................................................................................................ 158

7.3.6. igmp host-join.................................................................................................................................................................................. 158

7.3.7. igmp max-response-time................................................................................................................................................................. 159

7.3.8. igmp timer other-querier-present..................................................................................................................................................... 160

7.3.9. igmp timer query ............................................................................................................................................................................. 160

7.3.10. igmp version.................................................................................................................................................................................. 161

7.4. PIM Configuration Commands............................................................................................................................................................ 161

7.4.1. register-policy.................................................................................................................................................................................. 161

7.4.2. c-bsr ................................................................................................................................................................................................ 162

7.4.3. c-rp.................................................................................................................................................................................................. 162

7.4.4. debugging pim common .................................................................................................................................................................. 163

7.4.5. debugging pim dm........................................................................................................................................................................... 164

7.4.6. debugging pim sm........................................................................................................................................................................... 164

7.4.7. display pim bsr ................................................................................................................................................................................ 165

7.4.8. display pim interface ....................................................................................................................................................................... 165

7.4.9. display pim neighbor ....................................................................................................................................................................... 166

7.4.10. display pim routing-table ............................................................................................................................................................... 166

7.4.11. display pim rp-info ......................................................................................................................................................................... 167

7.4.12. pim ................................................................................................................................................................................................ 168

7.4.13. pim bsr-boundary .......................................................................................................................................................................... 168

7.4.14. pim dm .......................................................................................................................................................................................... 169

7.4.15. pim sm .......................................................................................................................................................................................... 169

7.4.16. pim timer hello............................................................................................................................................................................... 170

7.4.17. spt-switch-threshold ...................................................................................................................................................................... 170

Chapter 8 QoS/ACL..............................................................................................................................................................173

8.1. ACL Configuration Command List ...................................................................................................................................................... 173

8.1.1. acl ................................................................................................................................................................................................... 173

8.1.2. acl mode ......................................................................................................................................................................................... 174

8.1.3. display acl config............................................................................................................................................................................. 174

8.1.4. display acl mode ............................................................................................................................................................................. 175

8.1.5. display acl runtime all ...................................................................................................................................................................... 175

8.1.6. display time-range........................................................................................................................................................................... 176

8.1.7. packet-filter...................................................................................................................................................................................... 177

8.1.8. reset acl counter.............................................................................................................................................................................. 177

8.1.9. rule .................................................................................................................................................................................................. 178

8.1.10. time-range ..................................................................................................................................................................................... 180

8.2. QoS Configuration Commands List .................................................................................................................................................... 180

8.2.1. display priority-trust ......................................................................................................................................................................... 180

8.2.2. display qos-info queue-scheduler.................................................................................................................................................... 181

8.2.3. display qos-interface all................................................................................................................................................................... 181

8.2.4. display qos-interface traffic-bandwidth ............................................................................................................................................ 182

8.2.5. display qos-interface traffic-limit ...................................................................................................................................................... 182

8.2.6. display qos-interface traffic-priority.................................................................................................................................................. 183

8.2.7. display qos-interface traffic-red ....................................................................................................................................................... 183

8.2.8. display qos-interface traffic-statistic ................................................................................................................................................ 184

8.2.9. priority-trust ..................................................................................................................................................................................... 184

8.2.10. queue-scheduler ........................................................................................................................................................................... 185

8.2.11. traffic-limit...................................................................................................................................................................................... 186

8.2.12. traffic-priority ................................................................................................................................................................................. 187

8.2.13. traffic-red ....................................................................................................................................................................................... 188

8.2.14. traffic-statistic ................................................................................................................................................................................ 189

8.3. Logon user’s ACL Control Command ................................................................................................................................................. 189

8.3.1. acl ................................................................................................................................................................................................... 189

8.3.2. snmp-agent community................................................................................................................................................................... 190

8.3.3. snmp-agent group ........................................................................................................................................................................... 190

8.3.4. snmp-agent usm-user ..................................................................................................................................................................... 191

Chapter 9 STP .....................................................................................................................................................................193

9.1. RSTP Configuration Commands......................................................................................................................................................... 193

9.1.1. display stp ....................................................................................................................................................................................... 193

9.1.2. reset stp .......................................................................................................................................................................................... 194

9.1.3. stp ................................................................................................................................................................................................... 194

9.1.4. stp bpdu-protection ......................................................................................................................................................................... 195

9.1.5. stp bridge-diameter ......................................................................................................................................................................... 196

9.1.6. stp cost............................................................................................................................................................................................ 197

9.1.7. stp edged-port ................................................................................................................................................................................. 197

9.1.8. stp loop-protection........................................................................................................................................................................... 198

9.1.9. stp mcheck ...................................................................................................................................................................................... 199

9.1.10. stp mode ....................................................................................................................................................................................... 199

9.1.11. stp point-to-point ........................................................................................................................................................................... 200

9.1.12. stp port priority .............................................................................................................................................................................. 201

9.1.13. stp priority...................................................................................................................................................................................... 201

9.1.14. stp root primary ............................................................................................................................................................................. 202

9.1.15. stp root secondary......................................................................................................................................................................... 202

9.1.16. stp root-protection ......................................................................................................................................................................... 203

9.1.17. stp timer forward-delay.................................................................................................................................................................. 204

9.1.18. stp timer hello................................................................................................................................................................................ 204

9.1.19. stp timer max-age ......................................................................................................................................................................... 205

9.1.20. stp transit-limit ............................................................................................................................................................................... 206

Chapter 10 AAA and RADIUS ..............................................................................................................................................193

10.1. 802.1x Configuration Commands ..................................................................................................................................................... 207

10.1.1. display dot1x ................................................................................................................................................................................. 207

10.1.2. dot1x ............................................................................................................................................................................................. 208

10.1.3. dot1x dhcp-launch......................................................................................................................................................................... 209

10.1.4. dot1x eap-relay ............................................................................................................................................................................. 209

10.1.5. dot1x max-user ............................................................................................................................................................................. 210

10.1.6. dot1x port-control .......................................................................................................................................................................... 210

10.1.7. dot1x port-method ......................................................................................................................................................................... 211

10.1.8. dot1x quiet-period ......................................................................................................................................................................... 212

10.1.9. dot1x retry ..................................................................................................................................................................................... 213

10.1.10. dot1x supp-proxy-check .............................................................................................................................................................. 213

10.1.11. dot1x timer .................................................................................................................................................................................. 214

10.1.12. reset dot1x statistics.................................................................................................................................................................... 215

10.2. AAA Configuration Commands ......................................................................................................................................................... 216

10.2.1. access-limit ................................................................................................................................................................................... 216

10.2.2. attribute ......................................................................................................................................................................................... 216

10.2.3. cut connection ............................................................................................................................................................................... 217

10.2.4. display connection......................................................................................................................................................................... 218

10.2.5. display domain .............................................................................................................................................................................. 219

10.2.6. display local-user .......................................................................................................................................................................... 219

10.2.7. domain .......................................................................................................................................................................................... 220

10.2.8. idle-cut .......................................................................................................................................................................................... 221

10.2.9. local-user....................................................................................................................................................................................... 222

10.2.10. local-user password-display-mode.............................................................................................................................................. 222

10.2.11. password..................................................................................................................................................................................... 223

10.2.12. radius-scheme............................................................................................................................................................................. 223

10.2.13. service-type................................................................................................................................................................................. 224

10.2.14. state ............................................................................................................................................................................................ 225

10.3. RADIUS Protocol Configuration Commands .................................................................................................................................... 225

10.3.1. data-flow-format ............................................................................................................................................................................ 225

10.3.2. display local-server statistics......................................................................................................................................................... 226

10.3.3. display radius ................................................................................................................................................................................ 227

10.3.4. display radius statistics ................................................................................................................................................................. 228

10.3.5. display stop-accounting-buffer ...................................................................................................................................................... 229

10.3.6. key ................................................................................................................................................................................................ 230

10.3.7. local-server.................................................................................................................................................................................... 230

10.3.8. primary accounting........................................................................................................................................................................ 231

10.3.9. primary authentication ................................................................................................................................................................... 232

10.3.10. radius scheme............................................................................................................................................................................. 232

10.3.11. reset stop-accounting-buffer........................................................................................................................................................ 233

10.3.12. retry............................................................................................................................................................................................. 234

10.3.13. retry realtime-accounting............................................................................................................................................................. 234

10.3.14. retry stop-accounting................................................................................................................................................................... 235

10.3.15. secondary accounting ................................................................................................................................................................. 236

10.3.16. secondary authentication ............................................................................................................................................................ 236

10.3.17. state ............................................................................................................................................................................................ 237

10.3.18. stop-accounting-buffer enable..................................................................................................................................................... 237

10.3.19. timer ............................................................................................................................................................................................ 238

10.3.20. timer realtime-accounting ............................................................................................................................................................ 239

10.3.21. user-name-format........................................................................................................................................................................ 239

Chapter 11 Reliability..........................................................................................................................................................241

11.1. VRRP Configuration Commands ...................................................................................................................................................... 241

11.1.1. debugging vrrp .............................................................................................................................................................................. 241

11.1.2. display vrrp.................................................................................................................................................................................... 241

11.1.3. vrrp authentication-mode .............................................................................................................................................................. 242

11.1.4. vrrp vrid preempt-mode ................................................................................................................................................................. 243

11.1.5. vrrp vrid priority ............................................................................................................................................................................. 243

11.1.6. vrrp vrid timer ................................................................................................................................................................................ 244

11.1.7. vrrp vrid track ................................................................................................................................................................................ 244

11.1.8. vrrp vrid virtual-ip........................................................................................................................................................................... 245

Chapter 12 System Management........................................................................................................................................247

12.1. File System Management Commands.............................................................................................................................................. 247

12.1.1. cd .................................................................................................................................................................................................. 247

12.1.2. copy .............................................................................................................................................................................................. 247

12.1.3. delete ............................................................................................................................................................................................ 248

12.1.4. dir .................................................................................................................................................................................................. 248

12.1.5. file prompt ..................................................................................................................................................................................... 249

12.1.6. format ............................................................................................................................................................................................ 250

12.1.7. mkdir ............................................................................................................................................................................................. 250

12.1.8. more .............................................................................................................................................................................................. 251

12.1.9. move ............................................................................................................................................................................................. 251

12.1.10. pwd ............................................................................................................................................................................................. 252

12.1.11. rename ........................................................................................................................................................................................ 253

12.1.12. reset recycle-bin.......................................................................................................................................................................... 253

12.1.13. rmdir ............................................................................................................................................................................................ 254

12.1.14. undelete ...................................................................................................................................................................................... 254

12.2. Configuration File Management Commands .................................................................................................................................... 255

12.2.1. reset saved-configuration .............................................................................................................................................................. 255

12.2.2. save .............................................................................................................................................................................................. 256

12.3. FTP Server Configuration Commands.............................................................................................................................................. 256

12.3.1. display ftp-server........................................................................................................................................................................... 256

12.3.2. display ftp-user.............................................................................................................................................................................. 257

12.3.3. ftp server ....................................................................................................................................................................................... 257

12.3.4. ftp timeout ..................................................................................................................................................................................... 258

12.3.5. local-user ftp-directory................................................................................................................................................................... 258

12.4. FTP Client Commands...................................................................................................................................................................... 259

12.4.1. ascii............................................................................................................................................................................................... 259

12.4.2. binary ............................................................................................................................................................................................ 259

12.4.3. bye ................................................................................................................................................................................................ 260

12.4.4. cd .................................................................................................................................................................................................. 260

12.4.5. cdup .............................................................................................................................................................................................. 261

12.4.6. close.............................................................................................................................................................................................. 261

12.4.7. delete ............................................................................................................................................................................................ 262

12.4.8. dir .................................................................................................................................................................................................. 262

12.4.9. disconnect ..................................................................................................................................................................................... 262

12.4.10. ftp ................................................................................................................................................................................................ 263

12.4.11. get ............................................................................................................................................................................................... 263

12.4.12. lcd ............................................................................................................................................................................................... 264

12.4.13. ls ................................................................................................................................................................................................. 264

12.4.14. mkdir ........................................................................................................................................................................................... 265

12.4.15. passive ........................................................................................................................................................................................ 265

12.4.16. put ............................................................................................................................................................................................... 265

12.4.17. pwd ............................................................................................................................................................................................. 266

12.4.18. quit .............................................................................................................................................................................................. 266

12.4.19. remotehelp .................................................................................................................................................................................. 267

12.4.20. rmdir ............................................................................................................................................................................................ 267

12.4.21. user ............................................................................................................................................................................................. 268

12.4.22. verbose ....................................................................................................................................................................................... 268

12.5. TFTP Configuration Commands ....................................................................................................................................................... 269

12.5.1. tftp ................................................................................................................................................................................................. 269

12.5.2. tftp get ........................................................................................................................................................................................... 269

12.5.3. tftp put ........................................................................................................................................................................................... 270

12.6. MAC Address Table Management Commands ................................................................................................................................ 270

12.6.1. display mac-address learning........................................................................................................................................................ 270

12.6.2. display mac-address aging-time.................................................................................................................................................... 271

12.6.3. display mac-address ..................................................................................................................................................................... 271

12.6.4. mac-address ................................................................................................................................................................................. 272

12.6.5. mac-address mac-learning disable ............................................................................................................................................... 273

12.6.6. mac-address timer ........................................................................................................................................................................ 273

12.7. Device Management Commands...................................................................................................................................................... 274

12.7.1. boot bootloader ............................................................................................................................................................................. 274

12.7.2. boot bootrom ................................................................................................................................................................................. 274

12.7.3. boot bootrom ................................................................................................................................................................................. 275

12.7.4. display backboard view ................................................................................................................................................................. 275

12.7.5. display bootloader ......................................................................................................................................................................... 276

12.7.6. display device................................................................................................................................................................................ 276

12.7.7. display environment ...................................................................................................................................................................... 277

12.7.8. display fan ..................................................................................................................................................................................... 277

12.7.9. display power ................................................................................................................................................................................ 278

12.7.10. reboot .......................................................................................................................................................................................... 278

12.7.11. reboot slot ................................................................................................................................................................................... 279

12.7.12. set backboard view ..................................................................................................................................................................... 279

12.7.13. temperature-limit ......................................................................................................................................................................... 280

12.8. Basic System Configuration and Management Commands ............................................................................................................. 280

12.8.1. clock.............................................................................................................................................................................................. 280

12.8.2. sysname........................................................................................................................................................................................ 281

12.9. System Status and System Information Display Commands ........................................................................................................... 281

12.9.1. display clock.................................................................................................................................................................................. 281

12.9.2. display current-configuration ......................................................................................................................................................... 282

12.9.3. display debugging ......................................................................................................................................................................... 284

12.9.4. display saved-configuration........................................................................................................................................................... 284

12.9.5. display users ................................................................................................................................................................................. 286

12.9.6. display version .............................................................................................................................................................................. 286

12.10. System Debug Commands ............................................................................................................................................................. 287

12.10.1. debugging ................................................................................................................................................................................... 287

12.11. Network Connection Test Commands ............................................................................................................................................ 288

12.11.1. ping ............................................................................................................................................................................................. 288

12.11.2. tracert .......................................................................................................................................................................................... 289

12.12. Log Commands............................................................................................................................................................................... 291

12.12.1. display info-center ....................................................................................................................................................................... 291

12.12.2. info-center console channel ........................................................................................................................................................ 292

12.12.3. info-center enable ....................................................................................................................................................................... 292

12.12.4. info-center logbuffer .................................................................................................................................................................... 293

12.12.5. info-center loghost....................................................................................................................................................................... 294

12.12.6. info-center monitor channel......................................................................................................................................................... 294

12.12.7. info-center snmp channel ............................................................................................................................................................ 295

12.12.8. info-center source ....................................................................................................................................................................... 295

12.12.9. info-center timestamp.................................................................................................................................................................. 297

12.12.10. info-center trapbuffer................................................................................................................................................................. 297

12.12.11. rename channel ........................................................................................................................................................................ 298

12.12.12. reset logbuffer ........................................................................................................................................................................... 298

12.12.13. reset trapbuffer.......................................................................................................................................................................... 299

12.12.14. terminal debugging.................................................................................................................................................................... 299

12.12.15. terminal logging......................................................................................................................................................................... 300

12.12.16. terminal monitor ........................................................................................................................................................................ 300

12.12.17. terminal trapping ....................................................................................................................................................................... 301

12.13. SNMP Configuration Commands.................................................................................................................................................... 301

12.13.1. display snmp-agent community................................................................................................................................................... 301

12.13.2. display snmp-agent engineid....................................................................................................................................................... 302

12.13.3. display snmp-agent group ........................................................................................................................................................... 302

12.13.4. display snmp-agent mib-view ...................................................................................................................................................... 303

12.13.5. display snmp-agent statistics ...................................................................................................................................................... 304

12.13.6. display snmp-agent sys-info contact ........................................................................................................................................... 305

12.13.7. display snmp-agent sys-info location .......................................................................................................................................... 305

12.13.8. display snmp-agent sys-info version ........................................................................................................................................... 306

12.13.9. display snmp-agent usm-user ..................................................................................................................................................... 306

12.13.10. snmp-agent local-engineid ........................................................................................................................................................ 307

12.13.11. snmp-agent community ............................................................................................................................................................. 307

12.13.12. snmp-agent group ..................................................................................................................................................................... 308

12.13.13. snmp-agent mib-view ................................................................................................................................................................ 309

12.13.14. snmp-agent packet max-size .................................................................................................................................................... 309

12.13.15. snmp-agent sys-info .................................................................................................................................................................. 310

12.13.16. snmp-agent target-host ............................................................................................................................................................. 311

12.13.17. snmp-agent trap enable ............................................................................................................................................................ 311

12.13.18. snmp-agent trap life .................................................................................................................................................................. 312

12.13.19. snmp-agent trap queue-size...................................................................................................................................................... 313

12.13.20. snmp-agent trap source ............................................................................................................................................................ 313

12.13.21. snmp-agent usm-user ............................................................................................................................................................... 314

12.13.22. undo snmp-agent ...................................................................................................................................................................... 314

12.14. RMON Configuration Commands ................................................................................................................................................... 315

12.14.1. display rmon alarm...................................................................................................................................................................... 315

12.14.2. display rmon event ...................................................................................................................................................................... 316

12.14.3. display rmon eventlog ................................................................................................................................................................. 316

12.14.4. display rmon history .................................................................................................................................................................... 317

12.14.5. display rmon prialarm .................................................................................................................................................................. 318

12.14.6. display rmon statistics ................................................................................................................................................................. 319

12.14.7. rmon alarm .................................................................................................................................................................................. 320

12.14.8. rmon event .................................................................................................................................................................................. 320

12.14.9. rmon history ................................................................................................................................................................................ 321

12.14.10. rmon prialarm ............................................................................................................................................................................ 322

12.14.11. rmon statistics ........................................................................................................................................................................... 322

Chapter 1 About This Manual

1.1. Version

This manual supports V1.0 of the software for the 3Com SW7700 Ethernet Switch.

1.2. Related Manuals

The Switch 7700 Installation Guide provides information about system installation and maintenance.

1.3. Organization of the Manual

Note: The operational software in the 3Com Switch 7700 is a subset of a highly featured common code-base, which is used in many 3Com products. Depending on the hardware capabilities of an individual platform, some functions may not be available although the non-functional commands may still appear as you use the Command

Language Interface. If you try to use an unavailable feature, you will receive an error message. In addition, any command that is not specifically described in this manual is unsupported by 3Com and its attempted use is at your own risk.

The 3Com Switch 7700 Command Reference Guide consists of the following chapters:

System Access — Introduces the commands used for accessing the Switch 7700.

Port — Introduces the commands used for configuring Ethernet port and link aggregation.

VLAN — Introduces the commands used for configuring VLAN.

Network Protocol — Introduces the commands used for configuring network protocols.

Routing Protocol — Introduces the commands used for configuring routing protocols.

Multicast Protocol — Introduces the commands used for configuring multicast protocols.

QoS/ACL — Introduces the commands used for configuring QoS/ACL.

STP — Introduces the commands used for configuring STP.

AAA & RADIUS — Introduces the commands used for configuring 802.1X, AAA and RADIUS.

Reliability — Introduces the commands used for configuring VRRP.

System Management — Introduces the commands used for system management and maintenance.

1.4. Intended Readers

The manual is intended for the following readers:

Network engineers

Network administrators

Users who are familiar with network fundamentals

A B O U T T H I S M A N U A L

1.5.

Conventions

This manual uses the following conventions:

Table 1 General conventions

Table 2 and Table 3 list conventions that are used throughout this guide.

Table 2 Notice Icons

Information note

Caution

Warning

Table 3 Text Conventions

Description

Information that describes important features or instructions.

Information that alerts you to potential loss of data or potential damage to an application, system, or device.

Information that alerts you to potential personal injury.

Screen displays

Keyboard key names

The words “enter” and type”

italic

Bold

[ ]

{ x | y | ... }

[ x | y | ... ]

Convention Description

{ x | y | ... } *

[ x | y | ... ] *

This typeface represents text as it appears on the screen.

If you must press two or more keys simultaneously, the key names are linked with a plus sign (+), for example:

Press Ctrl+Alt+Del

When you see the word “enter” in this guide, you must type something, and then press Return or

Enter. Do not press Return or Ente r when an instruction simply says “type.”

Command arguments are in italic.

The keywords of a command line are in Boldface.

Items (keywords or arguments) in square brackets [ ] are optional.

Alternative items are grouped in braces and separated by vertical bars. One is selected.

Optional alternative items are grouped in square brackets and separated by vertical bars. One or none is selected.

Alternative items are grouped in braces and separated by vertical bars. A minimum of one or a maximum of all can be selected.

Optional alternative items are grouped in square brackets and separated by vertical bars. Many or none can be selected.

A line starting with a # mark contains comments.

Chapter 2 System Access

2.1. Logging in Commands

2.1.1. authentication-mode

Syntax

authentication-mode { password |

scheme

} authentication-mode none

View

User interface view

Parameter

password: Performs local password authentication.

scheme: Performs local or remote authentication of username and password.

Description

Using the authentication-mode command, you can configure the authentication method for a login user. Using the authentication-mode none command, you can configure no authentication.

This command with the password parameter specifies local password authentication, that is, you need to configure a login password using the set authentication password { cipher | simple } password command.

This command with the scheme parameter specifies authentication of local or remote username and password. The type of the authentication depends on your configuration. For detailed information, see the “AAA and Radius” section.

By default, users logging in using the Console port do not need to pass any terminal authentication, whereas the password is required for authenticating the Modem and Telnet users when they log in.

Example

# Configure local password authentication.

[SW7700-ui-aux0] authentication-mode password.

2.1.2. auto-execute command

Syntax

auto-execute command text

S Y S T E M A C C E S S

undo auto-execute command

View

User interface view

Parameter

text: Specifies the command to be run automatically.

Description

Using the auto-execute command command, you can configure to automatically run a specified command.

When a user logs in, the command configured will be executed automatically. The user will be disconnected after that. Using the undo auto-execute command command, you can configure not to run the command automatically.

This command is usually used to configure the telnet command on the terminal, which will connect the user to a designated device automatically.

By default, auto run is disabled.

Caution: If you execute this command, the user-interface can no longer be used to perform routine configurations on the local system. Therefore use caution when using this command.

Ensure that you will be able to log into the system in some other way to cancel the configuration, before you configure the auto-execute command command and save the configuration.

Example

# Configure to automatically telnet 10.110.100.1 after the user logs in via VTY 0.

[SW7700] auto-execute command telnet 10.110.100.1

2.1.3. command-privilege level

Syntax

command-privilege level level view view command

undo command-privilege view view command

View

System view

Parameter

level: Specifies the command level, ranging from 0 to 3.

view: Specifies the command view, which can be any of the views supported by the switch.

command: Specifies the command to be configured.

S Y S T E M A C C E S S

Description

Using the command-privilege level command, you can configure the priority of the specifically command of the specifically view. Using the undo command-privilege view command, you can restore the default command priority.

The command levels include visit, monitoring, configuration, and management, which are identified as 0 through 3 respectively. An administrator assigns authorities as per-user requirements and allows them to operate in corresponding views. When a user logs in the switch, the command level that it can access depends on two points.

One is the command level that the user itself can access, the other is the set command level of this user interface. If the two levels are different, the former will be taken. For example, the command level of VTY 0 user interface is 1, however, user Tom has the right to access commands of level 3; if Tom logs in from VTY 0 user interface, he can access commands of level 3 and lower.

By default, ping, tracert, and telnet are at visit level (0); display and debugging are at monitoring level (1); all the configuration commands are at configuration level (2); and FTP, XMODEM, TFTP and commands for file system operations are at management level (3).

Example

# Configure the precedence of the command "interface" as 0.

[SW7700] command-privilege level 0 view system interface

2.1.4. databits

Syntax

databits { 7 | 8 }

undo databits

View

User interface view

Parameter

7: The data bits are 7.

8: The data bits are 8.

Description

Using the databits command, you can configure the data bits for AUX (Console) port. Using the undo databits command, you can restore the default bits of the AUX (Console).

This command can only be performed in the AUX user interface view.

By default, the value is 8.

Example

# Configure the data bits of AUX (Console) port to 7 bits.

S Y S T E M A C C E S S

[SW7700-ui-aux0] databits 7

2.1.5. display history-command

Syntax display history-command

View

All views

Parameter

None

Description

Using the display history-command command, you can view the saved history commands.

For a related command, see history-command max-size.

Example

# Display history commands.

<SW7700> display history-command

sys

quit

display his

2.1.6. display tcp status

Syntax display tcp status

View

All views

Parameter

None

Description

Using the display tcp status command, you can view all the current TCP connections to the Ethernet switch. The displayed information of this command includes the local address, local port number, foreign address, foreign port number and the state of TCP connection.

For the related command, see telnet.

S Y S T E M A C C E S S

Example

# Display all the current TCP connections to the Ethernet switch.

<SW7700> display tcp status

LocalAddress LocalPort ForeignAddress

129.102.100.142 23

ESTABLISHED

129.102.001.092 23

0.0.0.0 0

LISTEN

The information shown in this example indicates that one TCP connection has been set up. The local IP address of the TCP connection is 129.102.100.142 with the local port number as 23, and the remote IP address is

129.102.001.92 with the remote port number as.

2.1.7. display user-interface

Syntax

display user-interface [ type number ] [ number ]

View

All views

Parameter

type: Specifies the type of a user interface.

number: Specifies the number of a user interface.

Description

Using the display user-interface command, you can view the relational information of the user interface. The displayed information includes user interface type, absolute/relative index, transmission speed, priority, and authentication methods.

Example

# Display the relational information of user interface 0.

<SW7700> display user-interface 0

Idx Type Tx/Rx Modem Privi Auth

I 0 AUX 0 9600 3 N

* : Current user-interface is active.

I : Current user-interface is active and work in async mode.

Idx : Absolute index of user-interface.

Type : Type and relative index of user-interface.

Privi: The privilege of user-interface.

Auth : The authentication mode of user-interface.

S Y S T E M A C C E S S

A: Authenticate use AAA.

L: Authenticate use local database.

N: Current user-interface need not authentication.

P: Authenticate use current UI's password.

Table 4 Output description of the display user-interface command

Idx

Type

Tx/Rx

Field Description

User interface in use

Absolute index of user interface

Type and relative index of user interface

User interface speed

Privi

Auth

2.1.8. display users

Which levels of commands can be used after logging in from the user interface

User interface authentication method

Syntax display users

[ all ]

View

All views

Parameter

all: Display the information of all user interfaces.

Description

Using the display users command, you can view the information of the user interface.

Example

# Display the information of the current user interface.

[SW7700] display users

UI Delay IPaddress

I 0 AUX 0 00:00:00

Username

Table 5 Output description of the display users command

Field Description

User interface in use.

Number of the first list is the absolute number of user interface. Number of the second list is the relative number of user interface.

Delay Indicates the interval from the latest input till now in minutes.

IPaddress Displays initial connection location, namely the host IP address of the incoming connection.

Username Display the name of the user using this user interface, namely the login username of the user.

S Y S T E M A C C E S S

2.1.9. flow-control

Syntax

flow-control { hardware | none | software }

undo flow-control

View

User interface view

Parameter

hardware: Configures to perform hardware flow control.

none: Configures no flow control.

software: Configures to perform software flow control.

Description

Using the flow-control command, you can configure the flow control mode on AUX (Console) port. Using the

undo flow-control command, you can restore the default flow control mode.

This command can only be performed in the AUX user interface view.

By default, the value is none. That is, no flow control will be performed.

Example

# Configure software flow control on AUX (Console) port.

[SW7700-ui-aux0] flow-control software

2.1.10. free user-interface

Syntax

free user-interface [ type ] number

View

User view

Parameter

type: Specifies the user interface type.

number: Specifies the absolute/relative number of the user interface. Configured together with the type, it will specify the user interface number of the corresponding type. If the type is not specified, number will specify an absolute user interface number.

S Y S T E M A C C E S S

Description

Using the free user-interface command, you can reset a specified user interface. The user interface will be disconnected after the command is executed.

Note that the current user interface cannot be cleared.

Example

# Reset user interface 1 after logged in to the Ethernet switch via user interface 0.

<SW7700> free user-interface 1

After the command is executed, user interface 1 will be disconnected. It will not be connected to the Ethernet switch until you log in via the user interface 1 for the next time.

2.1.11. header

Syntax

header [ shell | incoming | login ] text

undo header [ shell | incoming | login ]

View

System view

Parameter

login: Configures to display login information.

shell: Configures to display the header of setting up a session for the user.

incoming: Configures to display the login header.

text: Specifies the header content.

Description

Using the header command, you can configure to display header when user login. Using the undo header command, you can configure not to display the header.

When the users log in the Ethernet switch, if a connection is activated, the login header will be displayed. After the user successfully logs in the switch, the shell header will be displayed.

The first English character in the text is regarded as the start and stop characters. After the stop character is input, the system will exit interactive process automatically.

If you do not want to enter the interactive process, input the text with same English characters at the beginning and end of the text and press <Enter> directly.

Example

# Configure the header of setting up a session.

[SW7700] header shell %

S Y S T E M A C C E S S

Enter TEXT message. End with the character '%'.

SHELL : Hello! Welcome %

The header of setting up a session displays on terminal when a user logs on again.

[SW7700] quit

<SW7700> quit

Press ENTER to get started

SHELL : Hello! Welcome

2.1.12. history-command max-size

Syntax

history-command max-size value

undo history-command max-size

View

User interface view

Parameter

value: Defines the size of the history buffer, ranging from 0 to 256. By default, the size is 10, that is, 10 history commands can be saved.

Description

Using the history-command max-size command, you can configure the size of the history command buffer.

Using the undo history-command max-size command, you can restore default size of the history command buffer.

Example

# Set the history buffer to 20, namely saving 20 history commands.

[SW7700] history-command max-size 20

2.1.13. idle-timeout

Syntax

idle-timeout minutes [ seconds ]

undo idle-timeout

View

User interface view

S Y S T E M A C C E S S

Parameter

minutes: Specifies the minute, ranging from 0 to 35791.

seconds: Specifies the second, ranging from 0 to 59.

Description

Using the idle-timeout command, you can configure the timeout function. If there is no user operation performed before idle-timeout expires, the user interface will be disconnected. Using the undo idle-timeout command, you can restore the default idle-timeout. idle-timeout 0 means disabling idle-timeout.

By default, idle-timeout is set to 10 minutes.

Example

# Configure the timeout value to 1 minute on the AUX user interface.

[SW7700-ui-aux0] idle-timeout 1 0

2.1.14. lock

Syntax lock

View

User view

Parameter

None

Description

Using the lock command, you can lock the user interface to prevent unauthorized user from operating it.

Example

# Lock the current user interface.

<SW7700> lock

Password: xxxx

Again: xxxx

2.1.15. modem

Syntax modem [ call-in | both ] undo modem [ call-in | both ]

S Y S T E M A C C E S S

View

User interface view

Parameter

call-in: Configures to allow call-in.

both: Configures to allow call-in and call-out.

Description

Using the modem command, you can configure the call-in and call-out attributes of the Modem. Using the undo

modem command, you can cancel the configuration of Modem call-in and call-out attributes.

The modem command without parameters is used to allow call-in and call-out.

The undo modem command without parameters is used to ban call-in and call-out.

Example

# Configure to allow call-in and call-out of Modem on the AUX (Console) port.

[SW7700-ui-aux0] modem both

2.1.16. modem auto-answer

Syntax modem auto-answer undo modem auto-answer

View

User interface view

Parameter

None

Description

Using the modem auto-answer command, you can configure the answer mode as auto-answer. Using the undo

modem auto-answer command, you can configure the answer mode as manual answer.

By default, the mode is set to manual answer.

Example

# Configure the answer mode of the Modem on the AUX (Console) port as auto-answer.

[SW7700-ui-aux0] modem auto-answer

S Y S T E M A C C E S S

2.1.17. modem timer answer

Syntax

modem timer answer seconds

undo modem timer answer

View

User interface view

Parameter

seconds: Specifies the timer answer in seconds, ranging from 1 to 60.The default value is 30s.

Description

Using the modem timer answer command, you can configure the timer answer from off-hook to carrier detected when establishing the call in connection. Using the undo modem timer answer command, you can restore the default timeout value.

Example

# Set the timer answer of AUX 0 to 45s.

[SW7700-ui-aux0] modem timer answer 45

2.1.18. parity

Syntax parity { even | mark | none | odd | space } undo parity

View

User interface view

Parameter

even: Configures to perform even parity.

mark: Configures to perform mark parity.

none: Configures not to perform parity.

odd: Configures to perform odd parity.

space: Configures to perform space parity.

Description

Using the parity command, you can configure the parity mode on AUX (Console) port. Using the undo parity command, you can restore the default parity mode.

S Y S T E M A C C E S S

This command can only be performed in AUX user interface view.

By default, the mode is set to none.

Example

# Set mark parity on the AUX (Console) port.

[SW7700-ui-aux0] parity mark

2.1.19. quit

Syntax quit

View

All views

Parameter

None

Description

Using the quit command, you can return to the lower level view from the current view. If the current view is user view, you can quit the system.

There are three levels of views, which are, from low to high: user view, system view, VLAN view, Ethernet port view, and so on.

For the related commands, see return, system-view.

Example

# Return to user view from system view.

[SW7700] quit

2.1.20. return

Syntax return

View

System view

Parameter

None

S Y S T E M A C C E S S

Description

Using the return command, you can return to user view from a view other than user view.

Ctrl+Z performs the same function with the return command.

For the related command, see quit.

Example

# Return to user view from system view.

[SW7700] return

2.1.21. screen-length

Syntax

screen-length screen-length

undo screen-length

View

User interface view

Parameter

screen-length: Specifies how many lines can be displayed on a screen, ranging from 0 to 512. The default value is 24.

Description

Using the screen-length command, you can configure how many lines that can be displayed on a screen of the terminal. Using undo screen-length command, you can restore the default number of terminal information lines displayed on the terminal screen.

The screen-length 0 command is used to disable this function.

Example

# Configure the lines that can be displayed on a screen as 20 lines.

[SW7700-ui-aux0] screen-length 20

2.1.22. send

Syntax

send { all | number | type number }

View

User view

S Y S T E M A C C E S S

Parameter

all: Configures to send message to all user interfaces.

type: Specifies the user interface type, which can be aux or vty.

number: Specifies the absolute/relative number of the user interface.

Description

Using the send command, you can send messages between different user interfaces.

Example

# Send message to all the user interfaces.

<SW7700> send all

2.1.23. service-type telnet level

Syntax

service-type telnet level level

undo service-type telnet level

View

Local-user view

Parameter

level: Specifies which level of command a user can use after logon, ranging from 0 to 3 and defaults to level 1.

Description

Using the service-type telnet level command, you can configure which level of command a user can use after logon. Using the undo service-type telnet level command, you can restore the default level of command a user can use after logon.

Commands are classified into four levels, namely visit level, monitoring level, configuration level and management level. They are introduced as follows:

Visit level: Commands of this level involve command of network diagnosis tool (such as ping and tracert), and telnet command etc. The operation of saving configuration file is not allowed on this level of commands.

Monitoring level: Commands of this level, including the display command and the debugging command, are used for system maintenance, service fault diagnosis, etc. The operation of saving the configuration file is not allowed on this level of commands.

Configuration level: Service configuration commands, including routing command and commands on each network layer, are used to provide direct network service to the user.

Management level: These are commands that influence the basic operation of the system and system support module, which plays a supporting role on service. Commands of this level involve file

S Y S T E M A C C E S S system commands, FTP commands, TFTP commands, XModem downloading commands, user management commands, and level setting commands.

Example

# Configure the user zbr to use commands at level 0 after logon.

[SW7700] local-user zbr

[SW7700-user-zbr] service-type telnet level 0

# Quit the system and logs on with username “zbr” again. Now only the commands at level 0 are listed on the terminal.

[SW7700] quit

<SW7700> ?

User view commands:

ping

quit

Ping function

Exit from current command view

super Privilege specified user priority level

telnet Establish one TELNET connection

tracert Trace route function

2.1.24. set authentication password

Syntax

set authentication password { cipher | simple } password

undo set authentication password

View

User interface view

Parameter

cipher: Configure cipher text password.

simple: Configure plain text password.

password: If the authentication is in the simple mode, the password must be in plain text. If the authentication is in the cipher mode, the password can be either in cipher text or in plain text. The result is determined by the input. If no authentication mode is specified, it is in plain text by default. A plain text password is a sequential character string of no more than 16 digits, for example, 3Com918. The length of a cipher password must be 24 digits and in cipher text, for example, _(TT8F]Y\5SQ=^Q`MAF4<1!!.

Description

Using the set authentication password command, you can configure the password for local authentication.

Using the undo set authentication password command, you can cancel local authentication password.

The password in plain text is required when performing authentication, regardless whether the configuration is plain text or cipher text.

S Y S T E M A C C E S S

Note: By default, the password is required to be set for authenticating the users connecting over Modem or

Telnet. If no password has been set, the following prompt is displayed “password required, but none set.”

Example

# Configure the local authentication password on VTY 0 to 3Com.

[SW7700-ui-vty0] set authentication password simple 3com

2.1.25. shell

Syntax shell undo shell

View

User interface view

Parameter

None

Description

Using the shell command, you can enable terminal service of a user interface. Using the undo shell command, you can disable the terminal service of a user interface.

By default, terminal service is enabled.

When using the undo shell command, note the following points.

For the sake of security, the undo shell command can only be used on the user interfaces other than the AUX user interface.

You cannot use this command on the user interface via which you log in.

You will be asked to confirm before executing this command on any legal user interface.

Example

# Disable terminal service on the vty user interface 0 to 4 after logging in to the Ethernet switch via user interface

[SW7700] user-interface vty 0 4

[SW7700-ui-vty0-4] undo shell

# The following message will be displayed on the Telnet terminal after logon.

Connection to host lost.

S Y S T E M A C C E S S

2.1.26. speed

Syntax

speed speed-value

undo speed

View

User interface view

Parameter

speed-value: Specifies the transmission rate on the AUX (Console) port in bit/s, which can be 300, 600, 1200, 4800,

9600, 19200, 38400, 57600 115200 or 4096000. The default rate is 9600bit/s.

Description

Using the speed command, you can configure the transmission rate on the AUX (Console) port. Using the undo

speed command, you can restore the default rate.

This command can only be performed in AUX user interface view.

Example

# Configure the transmission speed on the AUX (Console) port as 9600bit/s.

[SW7700] speed 9600

2.1.27. stopbits

Syntax

stopbits { 1 | 1.5 | 2 }

undo stopbits

View

User interface view

Parameter

1: Sets 1 stop bit.

1.5: Sets 1.5 stop bits.

2: Sets 2 stop bits.

Description

Using the stopbits command, you can configure the stop bits on the AUX (Console) port. Using the undo

stopbits command, you can restore the default stop bits.

This command can only be performed in AUX user interface view.

S Y S T E M A C C E S S

By default, the value is 1.

Example

# Configure 2 stop bits on the AUX (Console) port.

[SW7700] stopbits 2

2.1.28. super

Syntax

super [ level ]

View

All views

Parameter

level: User level, ranging 0 to 3. The default value is 3.

Description

Using the super command, you can enable the user to change to user level from the current user level. If the user has set the super password [ level level ] { simple | cipher } password, then user password of the higher level is needed, or the former user level will not change.

Login users are classified into four levels that correspond to the four command levels respectively. After users of different levels log in, they can only use commands at the levels that are equal to or lower than its own level.

For the related commands, see super password, quit.

Example

# change to user level 3 from the current user level.

<SW7700> super 3

Password:

2.1.29. super password

Syntax

super password [ level level ] { simple | cipher } password

undo super password [ level level ]

View

System view

S Y S T E M A C C E S S

Parameter

level: User level, ranging from 1 to 3. The default value is 3, i.e. do not specify user level. It means the password to be set is used for entering level 3.

simple: Configure plain text password.

cipher: Configure cipher text password.

password: If the authentication is in the simple mode, the password must be in plain text. If the authentication is in the cipher mode, the password can either be in cipher text or in plain text. The result is determined by the input. If no authentication mode is specified, it is in plain text by default. A plain text password is a sequential character string of no more than 16 digits, for example, 3Com918. The length of a cipher password must be 24 digits and in cipher text, for example, _(TT8F]Y\5SQ=^Q`MAF4<1!!.

Description

Using the super password command, you can configure the password for changing the user from a lower level to a higher level. In order to prevent unauthorized users from illegal intrusion, user ID authentication is performed when users switch from a lower level to a higher level. For the sake of confidentiality, on the screen the user cannot see the password that he entered. Only when correct password is input for three times, can the user switch to the higher level. Otherwise, the original user level will remain unchanged. Using the undo super password command, you can cancel the current settings.

The password in plain text is required when performing authentication, regardless whether the configuration is plain text or encrypted text.

Example

# Configure the password to zbr for changing the user from the current level to level 3.

[SW7700] super password level 3 simple zbr

2.1.30. sysname

Syntax

sysname text

undo sysname

View

System view

Parameter

text: Specifies the hostname with a character string, ranging from 1 to 30 characters. The default name is SW7700.

Description

Using the sysname command, you can configure the hostname of the Ethernet switch. Using the undo sysname command, you can restore the default hostname.

S Y S T E M A C C E S S

Changing the hostname of the Ethernet switch will affect the prompt of command line interface. For example, if the hostname of the Ethernet switch is MyHost, the prompt in user view will be <MyHost>.

Example

# Configure the hostname of Ethernet switch to 3Com.

[SW7700] sysname MyHost

[MyHost]

2.1.31. system-view

Syntax system-view

View

User view

Parameter

None

Description

Using system-view command, you can enter system view from user view.

For the related commands, see quit, return.

Example

# Enter system view from user view.

<SW7700> system-view

Enter system view , return user view with Ctrl+Z.

[SW7700]

2.1.32. telnet

Syntax

telnet host-ip-address [ service-port ]

View

User view

Parameter

host-ip-address: Specifies the IP address or the hostname of the remote Ethernet switch. If it is the hostname, the

Ethernet switch must have the function of static resolution.

S Y S T E M A C C E S S

service-port: Designates the TCP port on the remote Ethernet switch providing Telnet service, ranging from 0 to

65535.

Description

Using telnet command, you can log in to another Ethernet switch from the current one via telnet for remote management. To terminate the Telnet logon, press <Ctrl+]>.

By default, when the service-port is not specified, the default telnet port number is 23.

For the related command, see display tcp status.

Example

# Log in to Ethernet switch Switch32 at 129.102.0.1 from the current Switch01 switch.

<Switch01> telnet 129.102.0.1

Trying 129.102.0.1

Connected to 129.102.0.1

2.1.33. user-interface

Syntax

user-interface [ type ] first-number [ last-number ]

View

System view

Parameter

type: Specifies the user interface type, which can be aux or vty.

first-number: Specifies the number of the first user interface to be configured.

last-number: Specifies the number of the last user interface to be configured.

Description

Using user-interface command, you can enter single user interface view or multiple user interface views to configure the corresponding user interfaces.

Example

# Enter user interface view 0 through 5, that is, 1 AUX (Console) port user interface view and 5 VTY user interface views.

[SW7700] user-interface 0 5

[SW7700]

S Y S T E M A C C E S S

2.1.34. user privilege level

Syntax

user privilege level level

undo user privilege level

View

User interface view

Parameter

level: Specifies which level of command a user can use after logon from the specifically user interface, ranging from

0 to 3.

Description

Using user privilege level command, you can configure which level of command a user can use after logon from the specifically user interface, so that a user can use all the available commands at this level. Using undo user

privilege level command, you can restore the default level of command a user can use after logon from the specifically user interface.

By default, a user can access the commands at Level 3 after logging in through the AUX user interface, and the commands at Level 0 after logging in through the VTY user interface.

Example

# Configure to use commands level 0 after logging in from VTY 0 user interface.

[SW7700] user privilege level 0.

# After you telnet from VTY 0 user interface to the switch, you will view the terminal only displays commands at level 0.

<SW7700> ?

User view commands:

ping

tracert

Ping function

quit Exit from current command view

super Enter the command workspace with specified user priority level

telnet Establish one TELNET connection

Trace route function

Chapter 3 Port

3.1. Ethernet Port Configuration Commands

3.1.1. description

Syntax

description text

undo description

View

Ethernet port view

Parameter

text: Port description character string, with 80 characters at most.

Description

Using the description command, you can configure the description character string for Ethernet port. Using the undo

description command, you can cancel the port description character string.

By default, the port description character string is null.

Example

# Configure the description character string of Ethernet port Ethernet0/1 as lanswitch-interface.

[SW7700-Ethernet0/1] description lanswitch-interface

3.1.2. display interface

Syntax

display interface [ interface_type | interface_type interface_num | interface_name ]

View

All views

Parameter

interface_type: Specifies the port type.

interface_num: Specifies the port number.

interface_name: Specifies the port name in the interface_name= interface_type interface_num format.

For parameter description, refer to the interface command.

S Y S T E M A C C E S S

Description

Using the display interface command, you can view the configuration information on the port.

If the port type and number are not specified when displaying the port information, the information of all the ports will be displayed. If only the port type is specified, all the information of the ports of this type will be displayed. If both port type and port number are specified, the information of the designated port will be displayed.

Example

# Display configuration information of Ethernet1/0/1.

<SW7700> display interface ethernet1/0/1

Ethernet1/0/1 current state : UP

IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0-fc00-0010

Description : aaa

The Maximum Transmit Unit is 1500

Media type is twisted pair, loopback not set

Port hardware type is 100_BASE_TX

100Mbps-speed mode, full-duplex mode

Link speed type is autonegotiation, link duplex type is autonegotiation

Flow-control is not supported

The Maximum Frame Length is 1536

Allow jumbo frame to pass

PVID: 1

Mdi type: auto

Port link-type: access

Tagged VLAN ID : none

Untagged VLAN ID : 1

Last 5 minutes input rate 229 bytes/sec, 2 packets/sec

Last 5 minutes output rate 25 bytes/sec, 0 packets/sec input: 0 packets, 0 bytes

0 broadcasts, 0 multicasts input: 0 input errors, 0 runts, 0 giants, 0 throttles, 0 CRC

0 frame, 0 overruns, 0 aborts, 0 ignored, 0 parity errors

Output: 0 packets, 0 bytes

0 broadcasts, 0 multicasts, 0 pauses

Output: 0 output errors, 0 underruns, 0 buffer failures

0 aborts, 0 deferred, 0 collisions, 0 late collisions

0 lost carrier, 0 no carrier

Output description of the display interface command

Field Description

Ethernet1/0/1 current state

IP Sending frames’ format

Hardware address

Description

The Maximum Transmit Unit

Media type loopback not set

Port hardware type

100Mbps-speed mode, full-duplex mode, link speed type is autonegotiation, link duplex type is autonegotiation

The Maximum Frame Length

The current state of the Ethernet port (enabled or disabled)

Ethernet frame format

Port hardware address

Port description character string

Maximum transmit unit

Type of media

Port loopback test state

Port hardware type

Both the duplex mode and the rate are set to auto-negotiation. The rate of

100Mbps and the mode of full-duplex are adopted after negotiating with its peer

Both the duplex mode and the rate are set to auto-negotiation. The rate of

100Mbps and the mode of full-duplex are adopted after negotiating with its peer

Maximum length of the Ethernet frames that can pass through the port

S Y S T E M A C C E S S

Field Description

Allow jumbo frame to pass

PVID

Mdi type

Port link-type

Tagged VLAN ID

Untagged VLAN ID

Last 5 minutes input rate 229 bytes/sec, 2 packets/sec

Last 5 minutes output rate 25 bytes/sec, 0 packets/sec

Jumbo frame is allowed to pass through the port

Port default VLAN ID

Cable type

Port link type

The VLANs with packets tagged

The VLANs with packets untagged

The input/output rate and the passing packet number on this port in the last 5 minutes

3.1.3. display mirror

Syntax

display mirror

View

System view

Parameter

None

Description

Using the display mirror command, you can display the mirror-port(s) and the monitor port.

For the related commands, see mirroring-port and monitor port.

Example

# Display the mirror-ports and the monitor port.

[SW7700] display mirror

Monitor-port:

Ethernet1/0/2

Mirroring-port:

Ethernet1/0/1 inbound

[SW7700]

3.1.4. display port

Syntax

display port { hybrid | trunk }

View

All Views

Parameter

hybrid: Display Hybrid port.

Trunk: Display Trunk port.

S Y S T E M A C C E S S

Description

Using the display port command, you can view the ports in the current system, whose link type is Hybrid or Trunk. If there is any such port, display the corresponding port name.

Example

# Display the Hybrid ports in the current system.

<SW7700> display port hybrid

Now, the following hybrid ports exist:

Ethernet1/0/1 Ethernet1/0/2

The above information displays that the current system has two Hybrid ports, Ethernet1/0/1 and Ethernet1/0/2.

3.1.5. display port vlan-vpn

Syntax display port vlan-vpn

View

All views

Parameter

None

Description

Using the display port vlan-vpn command, you can view the ports on which VLAN VPN has been enabled and the VLAN ID of the VLAN VPN.

Example

# Display the related information of the port VLAN VPN feature.

<SW7700> display port vlan-vpn

GigabitEthernet5/0/1

VLAN-VPN status: enabled

VLAN-VPN VLAN: 1

GigabitEthernet5/0/2

VLAN-VPN status: enabled

VLAN-VPN VLAN: 2

Port VLAN VPN information description

3.1.6. duplex

Field Description

GigabitEthernet5/0/1

VLAN-VPN status

VLAN-VPN VLAN

The Ethernet port on which VLAN VPN has been enabled.

VLAN VPN status.

VLAN ID of the VLAN VPN.

Syntax duplex { auto | full | half } undo duplex

S Y S T E M A C C E S S

View

Ethernet port view

Parameter

auto: Port auto-negotiation attribute.

full: Port full-duplex attribute.

half: Port half-duplex attribute.

Description

Using the duplex command, you can configure the full-duplex/half-duplex attribute of the Ethernet port. Using the undo

duplex command, you can restore the duplex attribute of the port to default auto-negotiation mode.

By default, the duplex attribute is auto.

For the related command, see speed.

Example

# Configure the Ethernet port Ethernet0/1 as auto-negotiation attribute.

[SW7700-Ethernet0/1] duplex auto

3.1.7. flow-control

Syntax flow-control undo flow-control

View

Ethernet port view

Parameter

None

Description

Using the flow-control command, you can enable flow control feature on the Ethernet port to avoid discarding data packets due to congestion. Using the undo flow-control command, you can disable flow control feature.

By default, flow control on the Ethernet port is disabled.

Example

# Enable flow control on Ethernet0/1.

[SW7700-Ethernet0/1] flow-control

3.1.8. interface

Syntax

interface { interface_type interface_num | interface_name }

S Y S T E M A C C E S S

View

System view

Parameter

interface-type: Specifies the port type. Possible values are Ethernet, GigabitEthernet, or M-Ethernet. M-Ethernet describes the outof-band Ethernet Management port located on the Fabric.

interface_num: Specifies the port number. The port number is expressed as slot-number/subslot-number/port-number. For SW7700 7-slot chassis, the slot number ranges from 1to 6 (the Fabric slot is slot 0). No module uses the concept of sub-slots and this parameter should always be 0. Depending on the module used, the port number can be 1 to 8 (for 8-port Gigabit modules), 1 to 24 (for 24port 100BASE-FX modules), or 1 to 48 (for 48-port 10/100/BASE-TX modules). The M-Ethernet interface is always 0/0/0.

interface_name: Specifies the port name in the interface_name = interface_type interface_num format.

Description

Using the interface command, you can enter the Ethernet port view.

If the user wants to configure the related parameters of the Ethernet port, he must first use this command to enter the Ethernet port view.

Example

# Enter the Ethernet0/1 port view.

[SW7700] interface ethernet0/1

3.1.9. jumboframe

Syntax jumboframe enable undo jumboframe enable

View

Ethernet port view

Parameter

enable: Permit jumbo frame to pass through the current Ethernet port.

Description

Using the jumboframe enable command, you can permit jumbo frames up to 9KB to pass through the specified Ethernet port.

Using the undo jumboframe enable command, you can disable this capability.

By default, jumbo frames are disabled. Please note that packets up to 1536 bytes, including the IEEE 802.1Q tagging are always allowed to pass through Ethernet ports.

Jumbo frames are only allowed for Ethernet Type II frames. Most network equipment, including NICs, switches, and routers are not capable of supporting jumbo frames and will always discard these packets.

Example

# Permit jumbo frame to pass through GigabitEthernet 1/0/1.

[SW7700-GigabitEthernet1/0/1] jumboframe enable

S Y S T E M A C C E S S

3.1.10. loopback

Syntax loopback { external | internal }

View

Ethernet port view

Parameter

external: External loop test.

internal: Internal loop test.

Description

Using the loopback command, you can configure the Ethernet port to perform the loopback test to check whether the Ethernet port works normally and the loop test will finish automatically after being performed for a while.

By default, the port will not perform the loopback test.

Example

# Perform the internal loop test for Ethernet0/1.

[SW7700-Ethernet0/1] loopback internal

3.1.11. mac-address max-mac-count

Syntax

mac-address max-mac-count count

undo mac-address max-mac-count

View

Ethernet port view

Parameter

count: Specifies how many MAC addresses a port can learn. Values range from 0 to 32768. 0 means that the port is not allowed to learn MAC addresses.

Description

Using the mac-address max-mac-count command, you can configure the maximal number of MAC address learned by

Ethernet port. If the number of MAC address learned by this port exceeds the value set by the user, this port will not learn MAC address. Using the undo mac-address-table max-mac-count command, you can cancel the limit to maximal number of MAC address learned by Ethernet port.

By default, there is no limit to the maximal number of MAC address learned by Ethernet port. However, how many MAC addresses a port can learn is still restricted by MAC address table.

Example

# Cancel the limit to the maximal number of MAC address learned by Ethernet port Ethernet0/1.

[SW7700-Ethernet0/1] undo mac-address max-mac-count

S Y S T E M A C C E S S

3.1.12. mdi

Syntax mdi { across | auto | normal } undo mdi

View

Ethernet port view

Parameter

across: The network cable type is cross-over cable.

auto: The network cable will be recognized whether it is straight-through cable or cross-over cable.

normal: The network cable of the port is straight-through cable.

Description

Using the mdi command, you can configure the network cable type of the Ethernet ports. Using the undo mdi command, you can restore the default type.

By default, the network cable type will be recognized automatically.

Note that this command only has effect on 10/100Base-T and 10/100/1000Base-T ports. The SW7700 Ethernet switch only supports auto (auto-sensing). If you set some other type, you will see the prompt “Not support this operation!”

Example

# Configure the network cable type of Ethernet port Ethernet0/1 as cross-over cable.

[SW7700-Ethernet0/1] mdi across

3.1.13. mirroring-port

Syntax

mirroring-port port-list inbound

undo mirroring-port port-list inbound

View

System view

Parameter

port-list: Ethernet port list, indicating multiple Ethernet ports, represented in the following form: port-list = { { interface_type

interface_num } [ to { interface_type interface_num } ] }&<1-10>. For specific description about such parameters as interface_type and

interface_num refer to the corresponding contents in the Port chapter of this manual. The parameter “&<1-10>” indicates the former parameters can be input 10 times at most.

inbound: Direction of the monitored packets on a mirror port. The keyword parameter inbound indicates that only packets received by the port are monitored.

Description

Using the mirroring-port command, you can configure the mirror port. Using the undo mirroring-port command, you can remove the configuration of the mirror port.

S Y S T E M A C C E S S

A switch supports multi-to-one port mirror, namely the operation of copying packets on multiple ports to the mirror port. Before using this command to configure the mirror port, you must specify the monitor port first.

For the related command, see display mirror.

Example

# Configure the Ethernet port Ethernet 1/0/1 as a mirror port and monitor the packets received by this port.

[SW7700] mirroring-port ethernet 1/0/1 inbound

3.1.14. monitor-port

Syntax

monitor-port { interface_type interface_num }

undo monitor-port { interface_type interface_num }

View

System view

Parameter

{ interface_type interface_num }: The Ethernet port of a Ethernet switch. For specific description about such parameters as interface_type and interface_num, refer to the corresponding contents in the Port chapter of this manual.

Description

Using the monitor-port command, you can configure the monitor port. Using undo monitor-port command, you can remove the configuration of the monitor port.

The Switch 7700 switch supports multi-to-one port mirroring, namely the operation of copying packets on multiple ports to the monitor port for monitoring. A switch supports two monitor ports at most. Before using this command to remove the monitor ports, you must first remove all the mirror ports.

For the related command, see display mirror.

Example

# Configure the Ethernet port Ethernet 1/0/4 as a monitor port.

[SW7700] monitor-port ethernet 1/0/4

3.1.15. port access vlan

Syntax

port access vlan vlan_id

undo port access vlan

View

Ethernet port view

Parameter

vlan_id: VLAN ID defined in IEEE802.1Q, ranging from 2 to 4094.

S Y S T E M A C C E S S

Description

Using the port access vlan command, you can join the access port to a specified VLAN. Using the undo port access vlan command, you can cancel the access port from the VLAN.

The use condition of this command is the VLAN indicated in vlan_id must exist.

Example

# Join Ethernet0/1 port to VLAN3 (VLAN3 has existed).

[SW7700-Ethernet0/1] port access vlan 3

3.1.16. port hybrid pvid vlan

Syntax

port hybrid pvid vlan vlan_id

undo port hybrid pvid

View

Ethernet port view

Parameter

vlan_id: VLAN ID defined in IEEE802.1Q, ranging from1 to 4094 and the default vlan_id is 1.

Description

Using the port hybrid pvid vlan command, you can configure the default VLAN ID of the hybrid port. Using the undo port

hybrid pvid command, you can restore the default VLAN ID of the hybrid port.

Hybrid port can be configured together with the isolate-user-vlan. But if the default VLAN has set mapping in the isolate-uservlan, the default VLAN ID cannot be modified. If you want to modify it, cancel the mapping first.

The default VLAN ID of local hybrid port shall be consistent with that of the peer one, otherwise, the packet cannot be properly transmitted.

For the related command, see port link-type.

Example

# Configure the default VLAN of the hybrid port Ethernet0/1 to 100.

[SW7700-Ethernet0/1] port hybrid pvid vlan 100

3.1.17. port hybrid vlan

Syntax

port hybrid vlan vlan_id_list { tagged | untagged }

undo port hybrid vlan vlan_id_list

View

Ethernet port view

S Y S T E M A C C E S S

Parameter

vlan_id_list: vlan_id_list = [ vlan_id1 [ to vlan_id2 ] ]&<1-10> specifies which VLAN the hybrid port will be added to. It can be discrete. The vlan_id ranges from 1 to 4094. &<1-10> indicates that the former parameter can be input 10 times repeatedly at most.

tagged: The packet of specified VLAN will have tag.

untagged: The packet of specified VLAN will not have tag.

Description

Using the port hybrid vlan command, you can join the hybrid port to specified existing VLAN. Using the undo port hybrid

vlan command, you can cancel the hybrid port from the specified VLAN.

Hybrid port can belong to multiple VLANs. If the port hybrid vlan vlan_id_list { tagged | untagged } command is used for many times, the VLANs carried by the hybrid port is the set of vlan_id_list.

This command can be used on condition that the VLAN specified with vlan_id must have been existed.

For the related command, see port link-type.

Example

# Join hybrid port Ethernet0/1 to VLAN of 2, 4 and 50-100, and these VLAN will have tags.

[SW7700-Ethernet0/1] port hybrid vlan 2 4 50 to 100 tagged

3.1.18. port link-type

Syntax port link-type { access | hybrid | trunk } undo port link-type

View

Ethernet port view

Parameter

access: Configure the port as a access port.

hybrid: Configure the port as a hybrid port

trunk: Configure the port as a trunk port.

Description

Using the port link-type command, you can configure the link type of Ethernet port. Using the undo port link-type command, you can restore the port as default status, i.e. access port.

Note that a port on an Ethernet switch cannot be configured as a Trunk port and Hybrid port at the same time. A port that has been designated as a mirror port cannot be set as a Trunk port.

By default, the port is access port.

Example

# Configure Ethernet port Ethernet0/1 as trunk port.

[SW7700-Ethernet0/1] port link-type trunk

S Y S T E M A C C E S S

3.1.19. port trunk permit vlan

Syntax

port trunk permit vlan { vlan_id_list | all }

undo port trunk permit vlan { vlan_id_list | all }

View

Ethernet port view

Parameter

vlan_id_list: vlan_id_list = [ vlan_id1 [ to vlan_id2 ] ]&<1-10> is the VLAN range joined by the trunk port. It can be discrete. The vlan_id ranges from 2 to 4094. &<1-10> indicates that the former parameter can be input 10 times repeatedly at most.

all: Join the trunk port to all VLANs.

Description

Using the port trunk permit vlan command, you can join trunk port to specified VLAN. Using the undo port trunk permit

vlan command, you can cancel trunk port from specified VLAN.

Trunk port can belong to multiple VLANs. If the port trunk permit vlan command is used many times, then the VLAN enabled to pass on trunk port is the set of these vlan_id_list.

This command can be used on condition that the VLAN specified with vlan_id is not the default one.

For the related command, see port link-type.

Example

# Join the trunk port Ethernet0/1 to VLAN 2, 4 and 50-100.

[SW7700-Ethernet0/1] port trunk permit vlan 2 4 50 to 100

3.1.20. port trunk pvid vlan

Syntax

port trunk pvid vlan vlan_id

undo port trunk pvid

View

Ethernet port view

Parameter

vlan_id: VLAN ID defined in IEEE802.1Q, ranging from1 to 4094 and the default vlan_id is 1.

Description

Using the port trunk pvid vlan command, you can configure the default VLAN ID of trunk port. Using the undo port trunk

pvid command, you can restore the default VLAN ID of the port.

The default VLAN ID of local trunk port should be consistent with that of the peer one, otherwise, the packet cannot be properly transmitted.

For the related command, see port link-type.

S Y S T E M A C C E S S

Example

# Configure the default VLAN of the trunk port Ethernet0/1 to 100.

[SW7700-Ethernet0/1] port trunk pvid vlan 100

3.1.21. reset counters interface

Syntax

reset counters interface [ interface_type | interface_type interface_num | interface_name ]

View

User view

Parameter

interface_type: Specifies the port type.

interface_num: Specifies the port number. interface_name: Specifies the port name in the interface_name= interface_type interface_num format.

For parameter description, refer to the interface command.

Description

Using the reset counters interface command, you can reset the statistical information on the port and count the related information again on the port for the user.

If the port type and number are not specified when clearing the port information, information of all ports on the switch will be cleared. If only the port type is specified, all the information on the ports of this type will be cleared. If both port type and port number are specified, the information on the designated port will be cleared.

After 802.1X is enabled, the port information cannot be reset.

Example

# Reset statistical information on Ethernet port Ethernet0/1.

<SW7700> reset counters interface ethernet0/1

3.1.22. shutdown

Syntax shutdown undo shutdown

View

Ethernet port view

Parameter

None

Description

Using the shutdown command, you can disable the Ethernet port. Using the undo shutdown command, you can enable the

Ethernet port.

S Y S T E M A C C E S S

By default, the Ethernet port is enabled.

Example

# Enable Ethernet port Ethernet0/1.

[SW7700-Ethernet0/1] undo shutdown

3.1.23. speed

Syntax

For a 100M Ethernet port, this command is in the following format:

speed { 10 | 100 | auto }

For a 1000M Ethernet port, this command is in the following format:

speed { 10 | 100 | 1000 | auto }

The undo form of this command is:

undo speed

View

Ethernet port view

Parameter

10: The speed on the port is 10Mbps.

100: The speed on the port is 100Mbps.

1000: The speed on the port is 1000Mbps.

auto: The port speed is in peer auto-negotiation status.

Description

Using the speed command, you can configure the port speed. Using the undo speed command, you can restore the default speed.

By default, the speed is auto.

For the related command, see duplex.

Example

# Configure Ethernet port Ethernet0/1 port speed as 10Mbps.

[SW7700-Ethernet0/1] speed 10

3.2. Ethernet Port Link Aggregation Commands

3.2.1. display link-aggregation

Syntax

display link-aggregation [ master_port_num ]

View

All views

S Y S T E M A C C E S S

Parameter

master_port_num: Master port number in an aggregation port group.

Description

Using the display link-aggregation command, you can view the related information on the aggregation port.

If the master port number of an aggregation is specified, information on this link aggregation will be displayed. If the master port number is not specified, information of all link aggregations will be displayed.

For the related command, see link-aggregation.

Example

# Display the related information of the aggregation group with the master port number as Ethernet1/0/1.

<SW7700> display link-aggregation ethernet1/0/1

Master port: Ethernet1/0/1

Other sub-ports:

Ethernet1/0/2

Mode: both

The description of link aggregation

Master port

Other sub-ports

Field Description

Master port

Other member ports

3.2.2. link-aggregation

Syntax

link-aggregation port_num1 to port_num2 { both | ingress }

undo link-aggregation { master_port_num | all }

View

System view

Parameter

port_num1: Starting range value of Ethernet port joined the Ethernet link aggregation.

port_num: Last range value of Ethernet port joined the Ethernet link aggregation.

both: Configures that the sub-ports in the link aggregation share outgoing load on the port depending on the source address and destination MAC address.

ingress: Configures that the sub-ports in the link aggregation share outgoing load on the port depending on the source MAC addresses. The SW7700 Ethernet switch does not support ingress aggregation mode.

master_port_num: Master port number in link aggregation.

all: all aggregated ports.

Description

Using the link-aggregation command, you can configure a series of ports to the aggregation port and the port with the smallest port number as master port. Using the undo link-aggregation command, you can cancel the Ethernet link aggregation.

S Y S T E M A C C E S S

Note that the Ethernet ports to be aggregated should work in the same mode, which can be 10M_FULL (10Mbps speed, full duplex), 100M_FULL (100Mbps speed, full duplex), or 1000M_FULL (1000Mbps speed, full duplex), otherwise, they cannot be aggregated.

For the related command, see display link-aggregation.

Example

# Configure outgoing load balance on the port depending on the source and destination MAC addresses.

[SW7700] link-aggregation ethernet1/0/1 to ethernet1/0/2 both

Chapter 4 VLAN

4.1. VLAN Configuration Commands

4.1.1. broadcast-suppression

Syntax

broadcast-suppression max-ratio

undo broadcast-suppression

View

VLAN view

Parameter

max-ratio: Specifies the VLAN broadcast suppression with an integer in the range from 0 to 100 with the step of 1. The smaller the value is, the less broadcast traffic is allowed to pass through. If the ratio value is 100, no broadcast suppression will be performed on VLAN.

Description

Using the broadcast-suppression command, you can configure the broadcast suppression ratio for VLAN. Using the undo

broadcast-suppression command, you can restore the default ratio.

By default, the value of max-ratio is 100, namely no VLAN broadcast suppression.

This command limits the broadcast traffic passing through the VLAN. When the traffic exceeds a certain threshold, the system will drop packets to guarantee the network service and reduce the broadcast traffic to a rational scale.

For the related command, see display vlan.

Example

# Set the broadcast suppression ratio for the current VLAN to 50%.

[SW7700-vlan2] broadcast-suppression 50

4.1.2. description

Syntax

description string

undo description

View

VLAN view

N E T W O R K P R O T O C O L

Parameter

string: description character string of current VLAN, with a length ranging from 1 to 32 characters.

Description

Using the description command, you can configure a description for the current VLAN. Using the undo description command, you can cancel the description to current VLAN.

For the related command, see display vlan

Example

# Specify a description character string “RESEARCH” for current VLAN.

[SW7700-vlan3] description RESEARCH

4.1.3. display interface VLAN-interface

Syntax

display interface VLAN-interface [ vlan_id ]

View

All views

Parameter

vlan_id: ID of VLAN interface, ranging from 1 to 4094. Note that VLAN1 is the default VLAN and cannot be deleted.

Description

Using the display interface VLAN-interface command, you can view the related information about specified or all VLAN interfaces. The display interface VLAN-interface command can display such related information as: physical status and link status of VLAN interface, interface description character string, MTU, IP address and sub-net mask, format of set frame and

MAC address, etc.

With vlan_id specified, only the information about the specified VLAN interface will be displayed. If no vlan_id is specified, the information about all the existing VLAN interfaces will be displayed.

For the related command, see interface VLAN-interface.

Example

# Display related information about VLAN-interface 2.

<SW7700> display interface vlan-interface 2

VLAN-Interface2 is up line protocol is up

Description : 3COM, SW7700, VLAN-Interface2 Interface

The Maximum Transmit Unit is 1500

Internet Address is 1.1.1.1/8

IP Sending Frames' Format is PKTFMT_ETHNT_2, Hardware address is 00e0.fc00.5517

4.1.4. display vlan

Syntax

display vlan [ vlan_id | all | static | dynamic ]

V L A N

View

All views

Parameter

vlan_id: Display information of specified VLAN.

all: Display information of all VLANs.

static: Display information of VLAN created statically by the system.

dynamic: Display information of VLAN created dynamically by the system.

Description

Using the display vlan command, you can view related information about the specified or all VLANs.

This command is to display information of VLAN.

If vlan_id is specified, display information of specified VLAN. It includes: VLAN state, VLAN ID, whether the routing function has been enable on this VLAN (i.e. whether the route interface exists. If it exists, display IP address and mask), VLAN description, and the ports VLAN contains. If vlan-id is not specified, display information of the VLAN that has been created.

If the parameter all is selected, display information of all the VLANs. It includes: VLAN state, VLAN ID, whether the routing function has been enable on this VLAN (i.e. whether the route interface exists. If it exists, display IP address and mask), VLAN description, and the ports VLAN contains.

If the parameter dynamic is selected, display information of VLAN created dynamically by the system.

If the parameter static is selected, display information of VLAN created statically by the system.

For the related command, see vlan.

Example

# Display the information about VLAN2.

[SW7700] display vlan 2

Vlan ID: 2

Vlan Type: static

Route interface: not configured

Broadcast Max-ratio: 100%

Description: 3COM

Tagged Ports: none

Untagged Ports:

Ethernet1/0/1 Ethernet1/0/5 Ethernet1/0/7

4.1.5. interface VLAN-interface

Syntax

interface VLAN-interface vlan_id undo interface VLAN-interface vlan_id

View

System view

Parameter

vlan_id: ID of VLAN interface, ranging from 1 to 4094. Note that VLAN1 is the default VLAN and cannot be deleted.

N E T W O R K P R O T O C O L

Description

Using the interface VLAN-interface command, you can configure VLAN interface or enter VLAN interface view. Using the

undo interface VLAN-interface command, you can cancel one VLAN interface.

For the related command, see display interface VLAN-interface.

Example

# Enter VLAN-interface 1 view of VLAN interface.

[SW7700] interface vlan-interface 1

4.1.6. ip address

Syntax

ip address ip_address ip_netmask

undo ip address [ ip_address ip_netmask ]

View

VLAN interface view.

Parameter

ip_address: IP address of the VLAN interface.

ip_netmask: IP address Mask of the VLAN interface.

Description

Using the ip address command, you can configure the IP address and the mask for VLAN interface. Using the undo ip address command, you can cancel the IP address and the mask of one VLAN interface.

This command can only be used to specify corresponding IP address and mask for the VLAN interface when the corresponding

VLAN interface is created.

For the related command, see display vlan

Example

# Specify IP address and mask for VLAN interface 20.

[SW7700-VLAN-interface20] ip address 1.1.1.1 255.0.0.0

4.1.7. port

Syntax

port interface_list

undo port interface_list

View

VLAN view

Parameter

interface_list: list of Ethernet ports to be added to or deleted from a certain VLAN, expressed as interface_list= {{ interface_type

interface_num | interface_name } [ to { interface_type interface_num | interface_name } ] }&<1-10>. interface_type is interface type,

V L A N

interface_num is interface number and interface_name is interface name. For their meanings and value range, read Parameter of “Port

Configuration” in this document.

The interface number after keyword to must be larger than or equal to the port number before to. Ensuring that the port types input with the to form are identical and all the ports included in the list must exist on the switch.

&<1-10>: Representing the repeatable times of parameters, 1 is the minimal and 10 is the maximal. In addition, there cannot be any Trunk ports included in the list of interfaces.

Description

Using the port command, you can add one port or one group of ports to VLAN. Using the undo port command, you can cancel one port or one group of ports from VLAN.

This command can be used to add the specified Ethernet port to the specified VLAN or delete the specified Ethernet port from the specified VLAN.

For the related command, see display vlan.

Example

# Add the interfaces from Ethernet 1/0/1 through Ethernet 1/0/3 to VLAN 2.

[SW7700-vlan2] port ethernet 1/0/1 to ethernet 1/0/3

4.1.8. shutdown

Syntax shutdown undo shutdown

View

VLAN interface view.

Parameter

None

Description

Using the shutdown command, you can disable the VLAN interface. Using the undo shutdown command, you can enable the

VLAN interface.

By default, when all Ethernet ports are in DOWN status in VLAN interface, the VLAN interface is in DOWN status, i.e. disabled status. When there is one or more Ethernet ports in VLAN interface are in UP status, the VLAN interface is UP.

This command can be used to start interface after the related parameters and protocols of VLAN interface are set well. Or when the VLAN interface fails, the interface can be shut down first and then restarted, in this way, the interface may be restored to normal status. Shutting down or starting VLAN interface will not take any effect on any Ethernet port of this VLAN.

Example

# Restart interface after shutting down the interface.

[SW7700-VLAN-interface2] shutdown

[SW7700-VLAN-interface2] undo shutdown

N E T W O R K P R O T O C O L

4.1.9. vlan

Syntax

vlan vlan_id

undo vlan vlan_id

View

System view

Parameter

vlan_id: Specifies the ID of a VLAN to be created and/or entered, ranging from 1 to 4094.

Description

Using the vlan command, you can enter VLAN view. If the specified VLAN is not created, create it first. Using the undo vlan command, you can cancel the specified VLAN.

VLAN 1 is default VLAN and cannot be deleted.

For the related commands, see display vlan.

Example

# Enter the view of VLAN 3.

[SW7700] vlan 3

4.2. GARP Configuration Commands

4.2.1. display garp statistics

Syntax

display garp statistics [ interface interface_list ]

View

All views

Parameter

interface_list: List of Ethernet port to be displayed, expressed as interface _list = { { interface_type interface_num | interface_name } [ to {

interface_type interface_num | interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and

interface_name is interface name. For their meanings and value range, read command parameters description of “Port

Configuration” in this document.

&<1-10>: Representing the repeatable times of parameters, 1 is the minimal and 10 is the maximal.

Description

Using the display garp statistics command, you can view the GARP statistics information.

V L A N

This command can be used to display GARP statistics information (like the number of received/sent packet or the number of discarded packet by GVRP/GMRP).

Example

# Display the GARP statistics information on Ethernet port Ethernet 1/0/1.

<SW7700> display garp statistics interface ethernet 1/0/1

GARP statistics on port Ethernet1/0/1

Number Of GMRP Frames Received : 0

Number Of GVRP Frames Received : 0

Number Of GMRP Frames Transmitted : 0

Number Of GVRP Frames Transmitted : 0

Number Of Frames Discarded : 0

The above information indicates that the numbers of GVRP/GMRP packets received/sent and discarded on Ethernet 1/0/1 are

4.2.2. display garp timer

Syntax

display garp timer [ interface interface_list ]

View

All views

Parameter

interface_list: List of Ethernet port to be displayed, expressed as interface _list = { { interface_type interface_num | interface_name } [ to {

interface_type interface_num | interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and

interface_name is interface name. For their meanings and value range, read command parameters description of “Port

Configuration” in this document.

&<1-10>: Representing the repeatable times of parameters, 1 is the minimal and 10 is the maximal.

Description

Using display the garp timer command, you can view the value of GARP timer.

This command can be used to display the value of GARP timer, including Hold timer, Join timer, Leave timer and LeaveAll timer.

For the related command, see garp timer, garp timer leaveall.

Example

# Show GARP timer on Ethernet 1/0/2

<SW7700> display garp timer interface ethernet 1/0/2

GARP timers on port Ethernet1/0/2

GARP JoinTime : 20 centiseconds

GARP Leave Time : 60 centiseconds

GARP LeaveAll Time : 1000 centiseconds

GARP Hold Time : 10 centiseconds

N E T W O R K P R O T O C O L

4.2.3. garp timer

Syntax

garp timer { hold | join | leave } timer_value

undo garp timer { hold | join | leave }

View

Ethernet port view

Parameter

timer_value: Value of GARP hold timer, join timer and leave timer in centisecond, ranging from 10 to 32765. The minimal granularity of timer value is 5 centiseconds.

By default, the Hold time value is 10 centiseconds, i.e. 100ms.

By default, the Join time value is 20 centiseconds, i.e. 200ms.

By default, the Leave time value is 60 centiseconds, i.e. 600ms.

Description

Using the garp timer command, you can configure GARP timer value. Using the undo garp timer command, you can restore the default value of GARP timer.

GARP timer includes Hold timer, Join timer, Leave timer and LeaveAll timer. For the meanings and detailed description of configuration commands of timer, read next section.

GARP application entity will send out Join message after the Join timer goes timeout to make other GARP application entity register its own information.

When a GARP application entity wants to deregister certain attribute formation, it sends leave message. The GARP application entity received the message will starts leave timer. If the entity receives no join message before the timer goes timeout, it will deregister the attribute information.

After received certain registration information, the GARP application entity will not send Join Message at once, instead, it starts the hold timer. All the registration information received within a duration of the Hold timer will be transmitted in the same frame after the hold timer times out, thereby saving the bandwidth resource.

Join timer shall be no shorter than double hold timer. Leave timer shall be longer than double join time and shorter than leave timer, otherwise, the system will give error prompt.

For the related command, see display garp timer.

Example

# Set Join timer of GARP as 300ms.

[SW7700-Ethernet1/0/1] garp timer join 30

4.2.4. garp timer leaveall

Syntax

garp timer leaveall timer_value

undo garp timer leaveall

View

System view

V L A N

Parameter

timer_value: Value of GARP leaveall timer in centisecond, ranging from 10 to 32765.

By default, the value of LeaveAll timer is 1000 centiseconds, i.e. 10s.

Description

Using the garp timer leaveall command, you can configure GARP leaveall timer. Using the undo garp timer leaveall command, you can restore the default value.

After every GARP application entity is started, the LeaveAll timer will be started simultaneously. The GARP application entity will send LeaveAll message after the timer times out to make other application entities re-register all attribute information on themselves. Then, the LeaveAll timer is started and the new cycle begins.

For the related command, see display garp timer.

Example

# Set GARP LeaveAll timer as 1s.

[SW7700] garp timer leaveall 100

4.2.5. reset garp statistics

Syntax

reset garp statistics [ interface interface_list ]

View

User view

Parameter

interface_list: Specifies a list of Ethernet ports, on which the GARP statistics information will be cleared, expressed as interface_list = {

{ interface_type interface_num | interface_name } [ to { interface_type interface_num | interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. For their meanings and value range, read Parameter

Description of “Port Configuration” in this document.

&<1-10>: Representing the repeatable times of parameters, 1 is the minimal and 10 is the maximal.

Description

Using the reset garp statistics command, you can reset the GARP statistics information.

This command can be used to clear GARP statistics information (such as the received/sent packets or discarded packets by

GVRP/GMRP). If the command has no parameter, it will clear the GARP statistics information of all the ports.

For the related command, see display garp statistics

Example

# Clear GARP statistics information.

<SW7700> reset garp statistics

4.3. GVRP Configuration Command

4.3.1. display gvrp statistics

Syntax

display gvrp statistics [ interface interface_list ]

View

All views

Parameter

interface_list: List of Ethernet port to be displayed, expressed as interface _list = { { interface_type interface_num | interface_name } [ to {

interface_type interface_num | interface_name } ] }&<1-10>. interface_type is interface type, interface_num is interface number and interface_name is interface name. For their meanings and value range, read the command parameters description of “Port

Configuration” in this manual.

&<1-10>: Representing the repeatable times of parameters, 1 is the minimal and 10 is the maximal.

Description

Using the display gvrp statistics command, you can view the statistics information about GVRP.

This command can be used to display the GVRP statistics information of all the Trunk ports, including the list of ports enabled with GVRP, GVRP status information, failed GVRP registration entries and the last GVRP data unit origin etc.

Example

# Display the GVRP statistics information about Ethernet1/0/3

<SW7700> display gvrp statistics interface ethernet 1/0/3

GVRP statistics on port Ethernet1/0/3

GVRP Status : Enabled

GVRP Failed Registrations : 0

GVRP Last Pdu Origin : 0000-0000-0000

GVRP Registration Type : Normal

4.3.2. display gvrp status

Syntax

display gvrp status

View

All views

Parameter

None

V L A N

Description

Using the display gvrp status command, you can view the global status information about GVRP.

This command is used to display the enable/disable status information about global GVRP.

Example

# Display the global status information about GVRP.

<SW7700> display gvrp status

GVRP is enabled

4.3.3. gvrp

Syntax gvrp undo gvrp

View

System view/Ethernet port view

Parameter

None

Description

Using the gvrp command, you can enable GVRP. Using the undo gvrp command, you can restore the GVRP to default mode, i.e. disable GVRP.

By default, GVRP is disabled.

This command can be used to enable/disable global GVRP in System view or enable/disable port GVRP in Ethernet port view.

Before enabling port GVRP, the user must enable global GVRP first and port GVRP must be enabled/disabled on Trunk port.

For the related commands, see display gvrp status.

Example

# Enable global GVRP.

[SW7700] gvrp

4.3.4. gvrp registration

Syntax

gvrp registration { fixed | forbidden | normal }

undo gvrp registration

View

Ethernet port view

Parameter

fixed: Enable to create or register VLAN on the port manually and disable to register or deregister VLAN dynamically.

forbidden: Only VLAN 1 is not deregistered and new VLAN can’t be created or registered on the port.

N E T W O R K P R O T O C O L

normal: Enable to create, register and deregister VLAN on the port manually or dynamically.

Description

Using the gvrp registration command, you can configure GVRP registration type. Using the undo gvrp registration command, you can restore the default type.

By default, the registration type is normal.

This command can be only used on Trunk port.

For the related commands, see display gvrp statistics.

Example

# Set the GVRP registration type of Ethernet 1/0/4 as fixed.

[SW7700-Ethernet1/0/4] gvrp registration fixed.

Chapter 5 Network Protocol

5.1. IP Address Configuration Commands

5.1.1. display ip host

Syntax display ip host

View

All views

Parameter

None

Description

Using the display ip host command, you can display all the host names and the corresponding IP addresses.

Example

<SW7700> display ip host

Host32

5.1.2. display ip interface

Syntax

display ip interface { interface-type interface-number | interface-name }

View

All views

Parameter

interface-type: Type of interface.

interface-number: Number of interface.

interface-name: Name of interface.

Description

Using the display ip interface command, you can display the information of an IP interface.

By default, the information about all the IP interfaces will be displayed if undo interface is specified. This command outputs all the information related to IP on the interface, which is useful for troubleshooting.

N E T W O R K P R O T O C O L

Example

# Display the information related to interface VLAN-Interface 1.

5.1.3. ip address

Syntax

ip address ip-address net-mask [ sub ]

undo ip address [ ip-address net-mask [sub ] ]

View

VLAN interface view

Parameter

ip-address: IP address of interface;

net-mask: Corresponding subnet mask.

sub: the secondary IP address of the interface.

Description

Using the ip address command, you can configure an IP address for VLAN interface. Using the undo ip address command, you can remove an IP address of the VLAN interface

By default, all interfaces’ IP addresses are null.

The subnet address of an IP address can be identified by subnet mask. For instance, the IP address of an interface is 202.38.10.102, and the mask is 255.255.0.0. You can know that the subnet address is 129.9.0.0 by performing the logic operation “AND” on the

IP address and mask,

Generally, it is enough to configure one IP address for an interface. You can also configure more than one IP addresses for an interface, so that it can be connected to several subnets. Among these IP addresses, one is the primary IP address and all others are secondary. The relationship between primary and secondary addresses is:

When you configure a primary IP address for an interface, which already has a primary IP address, the newly configured one will replace the old one.

If you input the undo ip address command without any parameter, the switch will delete both primary and secondary IP address of an interface. The undo ip address ip-address net-mask command can be used to delete the primary IP address, while the undo ip

address ip-address net-mask sub command can be used to delete the secondary IP address. Before deleting the primary IP address, you need to delete all the secondary IP addresses.

For the related command, see ip route, display ip interface, display interface.

Example

# Configure the IP address of interface VLAN-Interface 2 as 202.38.10.66 and subnet mask as 255.255.255.0.

[SW7700-vlan-interface1] ip address 202.38.10.66 255.255.255.0

5.1.4. ip host

Syntax

ip host hostname ip-address

undo ip host hostname [ ip-address ]

N E T W O R K P R O T O C O L

View

System view

Parameter

host-name: Name of the host, a character string containing 1 to 20 characters.

ip-address: Host IP address (the corresponding IP address to the host name) in dotted decimal notation.

Description

Using the ip host command, you can configure the host name and the host IP address. Using the undo ip host command, you can remove the host name and the host IP address.

By default, Host name and corresponding IP address are null.

Example

# Set the Lanswtich1’s IP address to 202.38.0.8.

[SW7700] ip host Lanswitch1 202.38.0.8

5.2. ARP Configuration Commands

5.2.1. arp static

Syntax

arp static ip-address mac-address [ VLANID { port_type port_num | port_name } ]

undo arp static ip-address

View

System view

Parameter

ip-address: IP address of the ARP mapping entry.

mac-address: Ethernet MAC address of ARP mapping entry, whose format is H.H.H ( H indicates a hexadecimal number).

VLANID: ID of the local VLAN passed by frames transmitted to the destination. The VLANID ranges from 1 to 4094.

port-type: Type of the local interface passed by frames transmitted to the destination.

port-number: Sequence number of the local interface passed by frames transmitted to the destination.

port-name: Interface name of the local interface passed by frames transmitted to the destination.

Description

Using the arp static command, you can configure the static ARP mapping entries in an ARP mapping table.

Using the undo arp static command, you can remove a static ARP mapping entry from the ARP table

By default, the mapping table of the system ARP is empty and the switch can maintain its address mapping by means of dynamic ARP.

Normally, the switch forms and changes its ARP mapping table by means of dynamic ARP. Manual configuration of ARP mapping table is seldom needed. Besides, ARP mapping table is used for LAN only, implementation of

N E T W O R K P R O T O C O L

WAN address resolution is quite different from LAN ARP. The parameter VLANID in the command must be set to an ID of the VLAN that has already been established by users, and the following Ethernet port must be contained in this VLAN.

For the related command, see reset arp, display arp, debugging arp.

Example

# Establish a mapping between IP address 129.102.0.1 and MAC address 00e0.fc01.0000, and specifies sending frames to this address through VLAN 1 and Ethernet 1/0/1.

[SW7700] arp static 202.38.0.10 00e0.fc01.0000 1 Ethernet1/0/1

5.2.2. debugging arp

Syntax debugging arp { packet | status } undo debugging arp { packet | status }

View

User view

Parameter

packet: enable ARP packet debugging.

status: enable ARP status debugging. (Erase the description of status for S2000 Series.)

Description

Using the debugging arp command, you can enable ARP debugging. Using the undo debugging arp command, you can disable the corresponding ARP debugging.

By default, undo ARP debugging is enabled.

This command is used to enable ARP packet or status debugging. It facilitates the diagnosis and troubleshooting of ARP related faults.

For the related command, see arp static, display arp.

Example

# Enable ARP packet debugging.

<SW7700> debugging arp packet

5.2.3. display arp

Syntax

display arp [ dynamic | static | ip-address ]

View

All views

Parameter

dynamic: Display the dynamic ARP entries in ARP mapping table.

static: Display the static ARP entries in ARP mapping table.

ip-address: Display ARP mapping entries according to specified IP address.

N E T W O R K P R O T O C O L

Description

Using the display arp command, you can display the ARP mapping table.

By default, switch will display all the ARP entries.

This command is used to display the ARP mapping table. It helps users obtain ARP information so as to facilitate the diagnosis and troubleshooting of ARP related faults.

For the related command, see arp static, reset arp, debugging arp.

Example

# Display all the ARP entries.

<SW7700> display arp

IP Address

Type

MAC Address VLAN ID Port Name

202.38.0.11

00e0.fc01.0102

Ethernet1/0/1 Static

The above information shows that the MAC address of the Ethernet1/0/1 is 00e0.fc01.0102 and that the IP address of the Ethernet1/0/1 is set as 202.38.0.11. This ARP entry is a manually configured one.

5.2.4. reset arp

Syntax

reset arp [ dynamic | static | interface interface_name ]

View

User view

Parameter

dynamic: Clear the dynamic ARP mapping entries.

static: Clear the static ARP mapping entries

interface port_num: Clear the ARP mapping entries that are related to the specified. port. port_num is expressed as { port_type port_number | port_name }.

Description

Using the reset arp command clear the ARP mapping entries.

By default, switch will clear all the ARP mapping entries.

This command is used to clear all ARP mapping entries in ARP mapping table. In case of ARP debugging, you can use this command to remove redundant information in ARP mapping table.

For the related command, see arp static, display arp.

Example

# Show the command used to clear the static ARP entries.

<SW7700> reset arp static

5.3. DHCP Relay Configuration Commands

5.3.1. debugging dhcp-relay

Syntax debugging dhcp-relay

N E T W O R K P R O T O C O L

undo debugging dhcp-relay

View

User view

Parameter

None

Description

Using the debugging dhcp-relay command, you can enable DHCP relay debugging. Using the undo

debugging dhcp-relay command, you can disable the DHCP relay debugging.

By default, DHCP relay debugging is disabled.

This command is used to enable DHCP relay debugging. It facilitate the diagnosis and troubleshooting of DHCP relay related faults.

For the related command, see dhcp-server ip, dhcp-server, display dhcp-relay, display dhcp-server vlan.

Example

# Enable DHCP relay debugging.

<SW7700> debugging dhcp-relay

5.3.2. dhcp-security

Syntax

dhcp-security ip_address mac_address { dynamic | static }

undo dhcp-security ip_address

View

System view

Parameter

ip_address: User IP address.

mac_address: User MAC address.

dynamic: Dynamic address.

static: Static address.

Description

Using the dhcp-security command, you can configure a user IP address for DHCP Server group. Using the

undo dhcp-security command, you can remove a user IP address of DHCP Server group.

You can use the display dhcp-security command to view the user configuration of DHCP Server group before you change corresponding IP address of the DHCP Server group.

For the related command, see display dhcp-security.

Example

# Configure the user IP address and MAC address of DHCP Server group as 1.1.1.1 and 0005.5D02.F2B3 respectively.

[SW7700] dhcp-security 1.1.1.1 0005.5D02.F2B3 dynamic

N E T W O R K P R O T O C O L

5.3.3. dhcp-server

Syntax

dhcp-server groupNo

undo dhcp-server

View

VLAN interface view

Parameter

groupNo: DHCP Server group number.

Description

Using the dhcp-server command, you can configure the native DHCP Server group of VLAN interface. Using the undo dhcp-server command, you can remove the VLAN interface from its native DHCP Server group.

For the related command, see dhcp-server ip, display dhcp-relay, display dhcp-server vlan, debugging

dhcp-relay.

Example

# Add VLAN-Interface 1 to DHCP Server group1.

5.3.4. dhcp-server ip

Syntax

dhcp-server groupNo ip ipaddress1 [ ipaddress2 ]

undo dhcp-server groupNo

View

System view

Parameter

groupNo: DHCP server group number; the valid groupNo ranges from 0 to 19.

ipaddress1: IP address of the master Server in the group.

ipaddress2: IP address of the slave Server in the group.

Description

Using the dhcp-server ip command, you can configure the IP address of DHCP Server adopted by the DHCP

Server group. Using the undo dhcp-server ip command, you can delete the IP addresses all the DHCP Servers in DHCP Server group.

For the related command, see dhcp-server, display dhcp-relay, debugging dhcp-relay.

Example

# Configure IP addresses of the master/slave DHCP Server of DHCP Server group1 as 1.1.1.1 and 2.2.2.2 respectively.

[SW7700] dhcp-server 1 ip 1.1.1.1 2.2.2.2

# Delete the IP addresses of the master/slave Server in DHCP Server group1.

[SW7700] undo dhcp-server 1

N E T W O R K P R O T O C O L

5.3.5. disable address-check

Syntax

disable address-check

View

VLAN interface view

Parameter

None

Description

Using the disable address-check command, you can disable the security features of DHCP relay and disable the user address validity check on VLAN interface.

For the related command, see enable address-check.

Example

# Disable the security features of DHCP on VLAN2 interface.

[SW7700-vlan-interface2] disable address-check

5.3.6. display dhcp-relay

Syntax display dhcp-relay { server | statistics | group }

View

All views

Parameter

server: display information about DHCP server;

statistics: display statistical information used for troubleshooting;

group: display configuration information about all DHCP server group.

Description

Using the display dhcp-relay command, you can display the related information of DHCP Server group.

For the related command, see dhcp-server ip, dhcp-server, display dhcp-relay interface, debugging dhcp-

relay.

Example

# View the related information of DHCP Server group 0.

<SW7700> display dhcp-relay group

The first IP address of DHCP server group 0: 1.1.1.1

The second IP address of DHCP server group 0: 1.1.1.2

Messages from this server group: 0

Messages to this server group: 0

Messages from clients to this server group: 0

Messages from this server group to clients: 0

DHCP_OFFER messages: 0

DHCP_ACK messages: 0

DHCP_NAK messages: 0

N E T W O R K P R O T O C O L

DHCP_DECLINE messages: 0

DHCP_DISCOVER messages: 0

DHCP_REQUEST messages: 0

DHCP_INFORM messages: 0

DHCP_RELEASE messages: 0

Output description of the display dhcp-relay display

Field Description

The first IP address of DHCP server group 0 IP address of the master server in DHCP Server group 0

The second IP address of DHCP server group 0 IP address of the slave server in DHCP Server group0

Messages from this server group

Messages to this server group

Number of packets that DHCP relay received from this server group

Number of packets that DHCP relay sends to this server group

Messages from clients to this server group

Messages from this server group to clients

DHCP_OFFER messages

DHCP_ACK messages

Number of packets that DHCP relay receives from client.

Number of packets that DHCP relay sends to client

Number of OFFER packets received by DHCP relay

Number of ACK packets received by DHCP relay

DHCP_NAK messages

DHCP_DECLINE messages

DHCP_DISCOVER messages

DHCP_REQUEST messages

DHCP_INFORM messages

DHCP_RELEASE messages

Number of NAK packets received by DHCP relay

Number of DECLINE packets received by DHCP relay

Number of DISCOVER packets received by DHCP relay.

Number of REQUEST packets received by DHCP relay

Number of INFORM packets received by DHCP relay

Number of RELEASE packets received by DHCP relay

5.3.7. display dhcp-security

Syntax

display dhcp-security [ ip_address ]

View

All views

Parameter

ip_address: User IP address.

Description

Using the display dhcp-security command, you can display all the IP addresses in valid user address table of

DHCP Server group.

Example

# Display all the IP addresses in valid user address table of DHCP Server group.

<SW7700>display dhcp-security

2.2.2.2

3.3.3.3

Output description of the display dhcp-security display

Field

IP Address

MAC Address

Type

Description

IP address of the DHCP Server group

User MAC address of DHCP Server group

Type of user address table entry, including dynamic address entry and static address entry.

N E T W O R K P R O T O C O L

5.3.8. display dhcp-server interface

Syntax

display dhcp-server interface { interface-type interface-number | interface-name }

View

All views

Parameter

interface-type: Type of interface.

interface-number: Number of interface.

interface-name: Name of interface.

Description

Using the display dhcp-server vlan command, you can display the information of the DHCP Server group corresponding to VLAN interface.

For the related command, see dhcp-server, display dhcp-relay, debugging dhcp-relay.

Example

# View the information of the DHCP Server group corresponding to VLAN-Interface 2.

<SW7700> display dhcp-server interface vlan-interface 2

The DHCP server group of this interface is 0

The information shown above indicates that vlan-interface 2 is configured with a DHCP Server group with ID as

5.3.9. enable address-check

Syntax enable address-check

View

VLAN interface view

Parameter

None

Description

Using the enable address-check command, you can enable the security features of DHCP relay and enable the user address validity check on VLAN interface.

For the related command, see disable address-check.

Example

# Enable the security features of DHCP relay on VLAN2 interface.

[SW7700-vlan-interface2] enable address-check

5.4. IP Performance Configuration Commands

5.4.1. display tcp status

Syntax display tcp status

View

All views

Parameter

None

Description

Using the display tcp status command, you can display the TCP connection state.

This command is used to display the state of all the TCP connections so that users can monitor the TCP connection at any time.

Example

# Display the state of all TCP connections.

<SW7700> display tcp status

LocalAddress LocalPort ForeignPort State

129.102.100.142 23

0.0.0.0 23

129.102.001.092 1038 ESTABLISHED

0.0.0.0 0

LISTEN

5.4.2. tcp timer fin-timeout

Syntax

tcp timer fin-timeout time-value

undo tcp timer fin-timeout

View

System view

Parameter

time-value: TCP finwait timer value in second, with the value ranging from 76 to 3600; By default, 675 seconds.

Description

Using the tcp timer fin-timeout command, you can set the TCP finwait timer. Using the undo tcp timer fin-timeout command, you can restore the default value of the TCP finwait timer.

When the TCP connection state changes from FIN_WATI_1 to FIN_WAIT_2, the finwait timer is enabled. If the switch does not receive FIN packet before finwait timer timeouts, the TCP connection will be terminated.

For the related command, see tcp timer syn-timeout, tcp window.

N E T W O R K P R O T O C O L

Example

# Configure the TCP finwait timer value as 800 seconds.

[SW7700] tcp timer fin-timeout 800

5.4.3. tcp timer syn-timeout

Syntax

tcp timer syn-timeout time-value

undo tcp timer syn-timeout

View

System view

Parameter

time-value: TCP synwait timer value measured in second, whose value ranges from 2 to 600. the default time-value is 75 seconds.

Description

Using the tcp timer syn-timeout command, you can configure the TCP synwait timer. Using the undo tcp timer syn-timeout command, you can restore the default value of the timer.

TCP will enable the synwait timer, if a SYN packet is sent. the TCP connection will be terminated If the response packet is not received.

For the related command, see tcp timer fin-timeout, tcp window.

Example

# Configure the TCP synwait timer value as 80 seconds.

[SW7700] tcp timer syn-timeout 80

5.4.4. tcp window

Syntax

tcp window window-size

undo tcp window

View

System view

Parameter

window-size: The size of the transceiving buffer measured in kilobytes (KB), whose value ranges from 1 to 32. By default, the window-size is 4KB.

Description

Using the tcp window command, you can configure the size of the transceiving buffer of the connection-oriented Socket. Using the undo tcp window command, you can restore the default size of the buffer.

For the related command, see tcp timer fin-timeout, tcp timer syn-timeout.

Example

# Configure the size of the transceiving buffer as 3KB.

[SW7700] tcp window 3

Chapter 6 Routing Protocol

6.1. Display Commands of the Routing Table

Note: When an Ethernet switch runs a routing protocol, it can perform the router functions. Router that is referred to in the following and its icon represent a generalized router or an Ethernet switch running routing protocols. To improve readability, this will not be described in the other parts of the manual.

6.1.1. display ip routing-table

Syntax display ip routing-table

View

All views

Parameter

None

Description

Using the display ip routing-table command, you can view the routing table summary.

This command displays routing table information in summary form. Each line represents one route. The contents include destination address/mask length, protocol, preference, metric, next hop and output interface.

Only current used route, i.e., best route, is displayed using the display ip routing-table command.

Example

# View the summary of routing table.

<SW7700> display ip routing-table

Routing Table: public net

Destination/Mask Proto Pre Cost Nexthop Interface

1.1.1.0/24 DIRECT 0 0 1.1.1.1 Vlan-interface 1

1.1.1.1/32 DIRECT

2.2.2.0/24 DIRECT

0 0 127.0.0.1 InLoopBack0

0 0 2.2.2.1 Vlan-in terface2

3.3.3.0/24 DIRECT 0 0 terface3

0 0 ce4

127.0.0.0/8 DIRECT

127.0.0.1/32 DIRECT

0 0 127.0.0.1 InLoopBack0

R O U T I N G P R O T O C O L

6.1.2. display ip routing-table acl

Syn tax display ip

routing-table acl { acl-number | acl-name } [ verbose ]

View

All views

Par ameter

acl-number: the number of basic ACL, ranging from 1 to 99.

acl-name: the basic ACL name introduced via names.

verbose: With the parameter, this command displays the verbose information of both the active and inactive routes that passed filtering rules. Without the parameter, this command only displays the summary of the active routes that passed filtering rules.

Desc ription

Using

(ACL).

the display ip routing-table acl command, you can view the route filtered through specified basic access control list

This command is used in track display of route policy to display the route that passed the filtering rule according the input basic

ACL number or name.

The comm and is only applicable to display the route that pa ssed basic ACL filtering rules.

Example

# Display the summary of active routes that are filtered through basic acl 1.

<SW7700 > display ip routing-table acl 1

Routes matched by access-list 1:

Summary count: 4

Destination/Mask Proto

127.0.0.1/32 Direct

0 LoopBack1

# Display the verbose information of the active and inactive routes that are filtered throu gh basic acl1. r se

Routes matched by a ccess-l ist 1 :

Generate Default: no te, - = Last Act ive, # = Both * = Next hop in use

Summary count:5

Protocol: #Direct

*NextHop: 12

Mask:

7.0.0.1

Preference: 0

Interface: 127.0.0.1(InLoopBack0)

State: <N oAdv ise Int Acti veU Retain Multicast Unicast>

Age: 3:47 Metric: 0/0

**Destination: 127.0.0.1

Protocol: #Direct

*NextHop: 127.0.0

Vlinkindex: 0

Mask: 255. 255. 2 55. 25 5

Preference: 0

Interface: 127.0.0.1(InLoopBack0)

Age: 3:47 tal l NoAdvise In t Active U Retain Gateway Multicast Unicast>

Metric: 0/0

Mask:

Protocol: #Static

*NextHop:

Preference: -60

R O U T I N G P R O T O C O L

State: <Int Hi dden Static U nicast>

Age: 3:47 Metric: 0/0

Protocol: #Static

*NextHop: 2.1.1.1

Preference: 60

Interface: 2.1.1.1(LoopBack1)

State: <Int Ac tiveU Static Unicast>

Age: 3:47 Metric: 0/0

**Destination: 169.0.0.0 Mask:

Protocol: #Static Preference: 60

*NextHop: 2.1.1.1 Interface: 2.1.1.1(LoopBack1)

State: <Int ActiveU Static Unicast>

Age: 3:47 Metric: 0/0

6.1.3.

display ip routing-table ip_address

Syn tax display

ip routing-table ip_address [ mask ] [ longer-match ] [ verbose ]

View

All views

Par ameter

ip_address: Destination IP address.

mask: IP a ddress mask, length in dotted decimal notation or integer. It ranges from 0 to 32 when it is expressed with integer.

verbose: With the verbose parameter, this command displays the verbose information of both the active and inactive routes.

Without the parameter, this command only displays the summary of active routes.

longer-match: Addr ess route matching the destination address in natural mask range.

Des cription

Using display ip routing-table ip_address command, you can view the routing information of the specified destination add ress.

With different parameters, the ou tput of this command is different. The following is the output description for different forms of this command:

display ip routing-table ip_address — If destin range, this is disp ation address, ip_address, has corresponding route in natural mask command will display all subnet routes or only the route best matching the destination address, ip_address, layed. And only the active matching route is displayed.

display ip routing-table ip_address mask, — This command only display s the route fully matching with specified destination address and mask.

display ip routing-table ip_address longer- with desti nation address in natu

match — This command displays all destination address route matching ral mask range.

Example

# There is corresponding route in natural mask range. Display the summary.

<SW7700> display ip routing-table 169.0.0.0

Routing Tables:

Summary count:1

Destination/Mask Proto Pre Cost Interface

# There is no corresponding rou te (only the longest matching route is displayed) in natural mask range and summary is displayed.

<SW7700> display ip routing-table 169.253.0.0

R O U T I N G P R O T O C O L

Routing Tables:

Destination/Mask Proto

0 2.1.1.1

LoopBack1

# There a re corresponding routes in the natural mask range. Display the detailed inform ation.

.0. erbose

Routing Tables:

Generate Default: no ute, - = Last Ac tive, # = B oth * = Next hop in use

Summary count:2

Protocol: #Static

*NextHop: 2.1.1.1

Mask:

Preference: 60

Interface: 2.1.1.1(LoopBack1)

State: <In t Ac tiveU Static Unicast>

Age: 3:47 Metric: 0/0

Protocol: #Static

*NextHop: 2.1.1.1

Preference: 60

In terface: 2.1.1.1(LoopBack1)

State: <Int ActiveU Static Unicast>

Age: 3:47 Metric: 0/0

# There a informatio re no corresponding rout n. es in the natural mask range (only displaying the longest matched rou te). Display the detailed

<SW7700 > display ip routing-table 169.253.0.0 v erbo se

Routing Tables:

Generate Default: no ute, - = Last Ac tive, # = B oth * = Next hop in use

Summary count:1

**Destination: 169.0.0.0 255.0.

0.0

Protocol: #Static Preference: -60

State: <Int ActiveU Static Unicast>

Age: 3:47 Metric: 0/0

6.1.4.

display ip routing-table ip_address1 ip_address2

Syn tax display ip

routing-table ip_address1 mask1 ip_address2 mask2 [ verbose ]

View

All views

Para meter

ip_address1, ip_address2: Destination IP address in dotted decimal notation. ip_addres range toge ther to display the route in this address range. s1 and ip_address2 determine one address

mask1, mask2: IP address mask, length in dotted decimal notation or integer form. It ranges from 0 to 32 when it is presented in integer.

verbose

Withou

: With the verbose parameter, this command displays the verbose information of both the active and inactive routes. t the parameter, this command only displays the summary of active routes.

R O U T I N G P R O T O C O L

Des cription

Using dis range.

play ip routing-table ip_a

ddress1 ip_address2 command, you can view the route information in the specified address

Example

# Display the routing information of destination addresses ranging from 1.1.1.0 to 2.2.2.0.

<SW7700>display ip routing-table 1.1.1.0 24 2.2.2.0 24

Routing tables:

Summary count: 3

Destination/Mask Proto Pre Cost Nexthop Interface

1.1.1.0/24 DIRECT 0 0 1.1.1.1 Vlan-interface1

1.1.1.1/32 DIRECT 0 0 127.0.0.1 InLoopBack0

2.2.2.0/24 DIRECT 0 0 2.2.2.1 Vlan-interface2

6.1.

5. displa y ip routing-table ip-prefix

Syntax

display ip routing-table ip-prefix ip-prefix-name [ verbose ]

View

All views

Par ameter

ip-prefix-name: ip prefix list name.

verbose: With the parameter, this command displays the verbose information of both the active and inactiv e routes that passed filtering rules. Without the parameter, this command displays the summary of the active routes that passed filtering rules.

Description

Using the display ip routing-table ip-prefix comm and, you can view the route information that passed the filtering rule according the input ip prefix list name.

If there is no the param

s pecified address prefix list, thi s command will display the verbose information of all active and inactive routes with eter verbose and it will display the sum mary of all ac ive routes without the parameter verbose.

Example

# Display the summary of the active route that is filtered ip prefix list abc2.

<SW7700> display ip routing-table ip-prefix abc2

Routes matched by ip-prefix abc2:

Summary count: 4

Pre Cost Interface

# Display the verbose information of the activ e and in active routes that are filtered prefix list abc2.

<SW7700 d

Ro tes matched by ip-prefix ab c2:

Generate Default: no

+ = Active Route, = L ast A ctive, # = Both

Summary count:4

* = Next hop in use

R O U T I N G P R O T O C O L

Protocol: #Direct

*NextHop: 127.0.0.1

Preference: 0

Interface: 127.0.0.1(In LoopBack0)

State: <NoAdvise Int Act ive U Retain Multicast Unicast>

Age: 3:47 Metric: 0/0

**Destination: 127.0.0.1 255. 255

Protocol: #Direct

*NextHop: 127.0.0.1

Preference: 0

Interface: 127.0.0.1(In LoopBack0)

State: <NotInstall NoAdvise Int ActiveU Retain Gateway Multic ast Unicast>

Age: 3:47 Metric: 0/0

**Destination: 179.0.0.0

Preference:-60

State: <Int Hidden Static Unicast>

Age: 3:47 Metric: 0/0

*NextHop: 2.1.1.1

Vlinkindex: 0

State: <Int ActiveU Static Unicast>

*NextHop: 2.1.1.1

Vlinkindex: 0

2.1.1

State: <Int ActiveU Static Unicast>

.1(LoopBack1)

6.1.6. disp lay ip routing-table protocol

Syntax

display ip routing-table protocol protocol [ inactive | verbose ]

View

All views

Parame ter ina

ctive: With the parameter, this command display displ ays the active and inactive route information. s the inactive route information. Without the parameter, this command

verb

com

ose: With the verbose parameter, this command displays mand displays the route summary. the verbose route information. Without the parameter, this

protocol: the parameter has multiple selectable values:

d irect: Display direct connection route information

static: Display the static route information. ospf: Display OSPF route information. ospf-ase: Display OSPF ASE route information.

ospf-nssa: Display OSPF NSSA route in formation.

rip: Display RIP route information.

Description

Using the

display ip routing-table protocol

command, you can vie w the ro ute information of specified protocol.

R O U T I N G P R O T O C O L

Example

# Display all direct connection routes summary.

<SW7700 > display ip routing-table protocol direct

DIRECT Routing tables:

Summary count: 4

DIRECT Routing tab les status:<active>:

Summary count: 3

Destination/Mask

InLoopBack0

127.0.0.0/8 DIRECT

InLoopBack0

127.0.0.1/32 DIRECT

InLoopBack0

DIRECT Routing table s status:<inactive> :

Summary count: 1

Destination/Mask Proto Pre Cost

DIRECT 0 127.0

.0.1

# View th e static routing table.

<SW7700> display ip routing-table protocol static

STATIC Routing tables:

Summary count: 1

STATIC Routing tables status:<active>:

Summary count: 0

STATIC Routing tables status:<inactive>:

Summary count: 1

Destination/Mask Proto Pre Cost Nexthop Interface

1.2.3.0/24 STATIC 60 0 1.2.4.5 Vlan-interface2

InLoopBack0

The displayed information of this command can help the user to confirm whether the configuration of the static routing is correct.

6.1.7. display ip routing-table radix

Syntax display ip routing-table radix

View

All vie ws

Para meter

None

Description

Using the display ip routing-table radix command, you can view the r oute information in a tree structure.

Example

<SW7700> display ip routing-table radix

Radix tree for INET (2) inodes 7 routes 5:

+-32+--{210.0.0.1

+--0+

| | +--8+--{127.0.0.0

| | | +-32+--{127.0.0.1

+--8+--{20.0.0.0

R O U T I N G P R O T O C O L

+-32+--{20.1.1.1

6.1.

8. displa y ip routing-table statistics

Syntax display ip routing-table statistics

View

All views

Par ameter

None

Des cription

Using the display ip routing-table statistics command, you can view the integrated routing information.

The integr routes tha ated routin g in formation includes total route amount, the route amount added or deleted by protocol, amount of the t are labeled deleted but not deleted, the active route amount and inactive route amount.

Example

# Display the integrated route information.

<SW7700 > display ip routing-table statistics

Routing tables:

Proto route active ed deleted

DIRECT 5 0 0

OSPF 0 0 0 0 0

0 0 0 0

6.1.

9. displa y ip routing-table verbose

Syntax display ip routing-table verbose

View

All views

Par ameter

None

Description

Using the display ip routing-table verbose command, you can view the verbose routing table information.

With the verbose parameter, this command displa state will be displayed first, then the statistics o route will be output. ys the verbose routing table information. The descriptor describing the route f the entire routing table will be output and finally the verbose description of each

All curren t routes, including inactive route and invalid route, can be displayed using display ip routing-table verbose command.

R O U T I N G P R O T O C O L

Example

# Display the verbose routing table information.

<SW7700 > display ip routing-table verbose

Routing Tables:

Generate Default: no

+ = Active Route, - = Last Active, # = Both * = Ne xt hop in use

Destinations: 3 Routes: 3

Holddown: 0 Delete: 62 Hidden: 0

**Destination: 1.1.1.0 Mask: 255.255.255.0

Protocol: #DIRECT Preference: 0

*NextHop: 1.1.1.1 Interface: 1 .1.1.

1(Vlan-interface1)

State: <Int ActiveU Retain Unicast>

Age: 20:17:41 Metric: 0/0

**Destination: 1.1.1.1 Mask: 255.25

5.255.255

Protocol: #DIRECT Preferenc e: 0

*NextHop: 127.0.0.1 Interf ace: 127.0.0.1(InLoopBack0)

S tate: <NoAdvise Int ActiveU Retain Gateway Unicast>

A ge: 20:17:42 Metric: 0/0

**Destination: 2.2.2.0 Mask: 255.255.255.0

Pr otocol: #DIRECT Preferen ce: 0

*Next Hop: 2.2.2.1 Interface: 2.2.2.1(Vlan-interface2)

State : <Int ActiveU Retain Unicast>

Age: 20:08:05 Metric: 0/0

The meaning s of the par amete rs are explained in the following table:

Routing table in formati on

Descriptor Meaning

Holddown

Delete

Hidden

The Holddown route refers to a route advertising policy some distance vector routing protocols

(such as RIP) use in order to avoid e xpansion of error routes and improve fast and correct transmission of unreachable routes. It usually advertises a route fixedly at an interval no matter what changes have happened to the routes to the same de actually. For details, please refer to the specific routing pr display the number of the currently holddown routes. stination, which have been learned otocol. The routing table statistics

Number of routes that have been deleted currently.

Some routes are not available at present for some reason (e.g., the interface is Down) but do not want to be deleted. They can be hidden for future restoration. The routing table statistics displays the currently hidden number of routes.

6.2 . Static Route Configuration Command

6.2.1. i p route-static

Syntax

ip route-static ip-address { mask | mask-length } { interface-name | gateway-address } [ preference preference-value ] [ reject | blackhole ]

undo ip route-static ip-address { mask | mask-length } [ interface -name | gateway-address ] [ preference preference-value ]

View

system view

Par ameter

ip-address: Destination IP address in dotted decimal notation.

mask: Mask.

R O U T I N G P R O T O C O L

mask-length: Mask length. Since "1" s in the 32-bit mask are required to be consecutive, the mask in dotted decimal format can be replaced by mask-length, which is the number of the consecutive "1" s in the mask.

interface-nam

e: Specify the transmission interface name of the route.

gateway-address: Specify the next hop IP address of the route.

preference-value: Preference leve l of the route in the range from 1 to 255.

reject: Indicate an unreachable route.

blackhole: Indicate a blackhole route.

Description

Using th the e ip route-static command, you can configure a static route. Using the undo ip route-static comma configured static route. nd, you can delete

By default, the system can obtain the sub-net route directly preferen

connected with the router. When configuring a static route, the default ce is 60. If it is not specified as reject or blackhole, the route will be reachable by default.

Precaut ions when configuring static route:

In addition, when the destination IP address and the failed to detect the routing table, a packet will mask are both 0.0.0.0, it is the configured default route. If it is

be forwarded along the default route.

For different configuration of preference level, flexible routing management policy can be adopted.

Fo r the related commands, see display ip routing-table.

Example

# Conf igure the next hop of the default route as 129.102.0.2.

[SW770 0] ip route-static 0.0.0.0 0.0.0.0 129.102.0.2

6.3. RIP Configur ation Commands

Note: When an Ethernet switch runs a routing protocol, it can perform the router functions. A router that is referred to in the protocols. To impr following section represents a generalized router or an Ethernet switch running routing ove readability, this will not be described in the other parts of the manual.

6.3.1.

checkzero

Syn tax checkzero undo c heckzero

View

RIP view

Para meter

None

Des cription

Using the checkzero command, you can check the zero field of RIP-1 packet. U command, you can disable the checking of the zero fields. sing the undo checkzero

By default, RIP-1 performs the zero field checking.

R O U T I N G P R O T O C O L

According to the protocol (RFC1058) specifications, some fields in RIP-1 packets must be zero, called zero fields.

With the checkzero command, the zero check operation of RIP-1 can be enabled or disabled. During the zero check operation, if the RIP-1 packet in which the zero field s are not zeros is received, it will be rejected.

This command is ineffective to RIP-2 since RIP-2 packets have no zero fields.

Example

# Co nfigure not to perform zero check for RIP-1 packet.

[SW7700-rip] un do ch eckzero

6.3

.2. default cost

Syntax default co

st value

undo de fault cost

View

RIP view

Para meter

value: the default routing metric to be set, ranging from 1 to 16.Th

e default value is 1.

Des cription

Using the default cost command, you can set t

default cost command, you can restore the defa he default routing cost of an imported route. Using the undo ult value.

If no s pecific routing metric is specified when importing the route of another routing protocol with the import-

route command, the importing will be performed with the default routing metric specified with the default cost command.

For the related commands, se e import-route.

Example

# Se t the default routing metric of the imported route of another routing protocol to 3.

[SW7700-rip] default cost 3

6.3.3

. display rip

Syn tax display rip

View

All views

Para meter

None

Des cription

Using the display rip co mmand, you can view the current RIP running state and its configuration information.

Example

# Display the current running state and configuration information of the R IP.

R O U T I N G P R O T O C O L

<SW7700 > display rip

RIP is turne d on

public net V PN-Instance

Checkzero is on Default cost : 1

Summary is on Preference : 100

No peer router

Network :

202.38.168.0

The the in information shown above indicates that RIP is running, the default-metric is 1, no unicast address is specified, terface of the network segment 202.38.168.0 is enabled and the RIP preference is 100.

6.3

.4. filter-policy export

Syntax filter-polic

y { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]

View

RIP view

Par ameter

acl-number: Access control list number used for filtering the destination addresses of the routing information.

ip-prefix-na me: Name of address prefix list used for filtering the destination addresses of the routing information.

routing-protocol: Routing protocol whose routing information is to be filtered, including direct, bgp, ospf, ospf-ase ,

ospf-nssa and static at present.

Des cription

Using the filter-policy export command, you can configure to filter the advertised routing information by RIP.

Using the undo filter-policy export command, you can configure not to filter the advertised routing information.

By default, RIP does not filter the advertised routing information.

In som e cases, it may be required that only the routing information meeting some conditions can be advertised.

Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be advertised.

For the related commands, see acl, filter-policy import, ip ip-prefix.

Example

# Filt er the advertised route information according to acl 3.

[SW 7700-rip] filter-policy 3 export

6.3

.5. filter-policy import

Syn tax

filter-policy gateway ip-prefix-name import

do filter-policy gateway ip-prefix-name import

filter-polic y { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name [ gateway ip-prefix-name ] } import

View

RIP view

R O U T I N G P R O T O C O L

Para meter

acl-number: Access control list number used for filtering the destination addresses of the routing information.

ip-prefix-na me: Name of address prefix list used for filtering the destination addresses of the routing information.

gateway ip-prefix-name: Name of address prefix list used for filtering the addresses of the neighboring routers advertising the routing information.

Des cription

Using the filter-policy gateway import command, you can configure to filter the received routing informatio n distributed from the sp ecified address. Using the undo filter-policy gateway import command, you can configure not to filter the received routing information distributed from the specified address.

Using the filter-policy import command, you can configure the filt ering to the received global routing information. Using the undo filter-policy import command, you can disable filtering to the received global routing in formation

By default, RIP does not filter the received routing information.

For the related commands, see acl, f ilter-policy export, ip ip-prefix.

Example

# Co nfigure the filtering of the global routing information according to acl 3.

[SW7700rip] filter-policy 3 import

6.3

.6. host-ro ute

Syntax

host-route

undo host-route

View

RIP vi ew

Parameter

None

Des cription

Using the host-route command, you can control the RIP to accept the host route. Using the undo host-route

command, you can reject the host route.

By def ault, RIP accepts the host route.

In som e special cases, RIP receives a great number of host routes in the same network segment. These routes cannot help the path searching much bu can be used to reject a host rout e. t occupy a lot of resources. In this case, the undo host-route command

Example

# Co nfigure RIP to reject a host route.

[SW7700rip] undo host-route

6.3

.7. import-route

Syntax

import-ro ute protocol [ cost value ] [ route-policy route-policy-name ]

R O U T I N G P R O T O C O L

undo import-route protocol

View

RIP view

Par ameter

protoco

l: Source routing protocol to be imported. At present, the RIP can import the following routes: direct, bgp,

ospf, ospf -ase, ospf-nssa and static.

value: Cost value of the route to be imported.

route-policy route-policy-name: Configures to import the route matching the condition of the specified Route-poli cy only.

Des cription

Using the import-route command, you can import the routes of other protocols into RIP. Using the

undo

import-route command, you can cancel the routes imported from other protocols.

By default, RIP does not import any other route.

The impo rt-route command is used to import the route of another protocol by using a certain cost value. RIP regards the imported route as its own route an d transmits it with the specified cost value. This command can greatly enhance the RIP capability of obtaining routes, thus increases the RIP performance.

If the cost

If it is larger than or equal to 16, it in seconds.

value is not specified, routes will be imported according to the default cost. It is in the range of 1 to 16. dicates an unreachable route and the transmission will be stopped in 120

For the related commands, see default cost .

Exa mple

# Import a static route with cost 4.

[SW7700-rip] im port-route static cost 4

# Set the default cost and import an OSPF route with the default cost.

[SW 7700-rip] default cost 3

[SW7700-rip] import-route osp f

6.3

.8. network

Syntax

network n etwork-address

undo ne twork network-address

View

RIP view

Para meter

network-address: Address of the network enabl ed/disabled. It can be the IP network address of any interfa ce.

Des cription

Using the network command, you can enable Routing Information Protocol (RIP) for the specified network connected to the router. Using the undo network command, you can disable the RIP on the interface.

By default, RIP is disabled on any interface.

R O U T I N G P R O T O C O L

After enabling RIP, RIP at a certain interface must be enabled with the network command, since RIP works only on the interface of specified network segment. RIP won’t receive or forward route on interfaces of non-specified network segments.

The undo network command is similar to the undo rip work command in terms of function. But they are not identical. Their similarity is that the interface using either command will not receive/transmit RIP difference between them is that, in the case interface using the comman

routes. The

of undo rip work , other interfaces will still forward the routes of the routes

undo rip work

d. In the case of undo network, other interfaces will not forward the of the interface using this command and it seems that the interface disappeared.

When the network command is used on an address, the effect is that the inte address is enabled. For example, the results of viewing the network 129.102.1

configuration command and the d rface on the network segment at this

.1 with both the display current-

isplay rip command are shown as the network 129.102.0.0.

For the related commands, see rip work.

Exampl e

# Enable the RI P on the interface with the network address as 129.102.0.0.

[SW7700-rip] network 129.102.0.0

6.3.9

. peer

Syn tax

peer ip-a ddress

undo peer ip-address

View

RIP view

Para meter

ip-address: The IP address of the peer router, represented in the format of dotted decimal.

Des cription

Using the peer

peer c

command, you can configure the sending destination address of the peer device. Using the undo ommand, you can cancel the set destination address.

By default, do not send RIP packet to any destination.

RIP exchanges routing information with non -broadcasti sending destination address to fit so command. ng networks in unicast view. This command specifies the me non-broadcast networks. Usually, it is not recommended to use this

Exampl e

# Specify the sendin g destination address 202.38.165.1.

[SW7700-rip] peer 202.38.165.1

6.3.10

. preference

Syn tax preferen

ce value

undo preference

View

RIP view

R O U T I N G P R O T O C O L

Parameter

value: Preference level, ranging from 1 to 255. By default, the value is 100.

Des cription

Using the preference command, you can configure the route preference of RIP. Using the undo preference command, you can restore the default preference.

Every routing protocol has its own preference. Its default value is determined by the specific routing policy. The preference will finally determine the routing algorithm to obtain the optimal route in the IP routing table. This command can be used to modify the RIP preference manually.

Exa mple

# Specify the RIP preference as 20.

[SW 7700-rip] preference 20

6.3

.11. rip

Syn tax rip undo rip

View

system view

Parameter

None

Des cription

Using the rip command, you can enable the RIP and enter the RIP view. Using the undo rip command, you can disable RIP.

B y default, the system does not run RIP.

To ent er the RIP view to configure various RIP global parameters, RIP should be enabled first. Whereas the configuration of parameters related to the interfaces is not restricted by enabling/disabling RIP.

Note: Note that the interface parameters configured previously would be invalid when RIP is disabled.

Exa mple

# Enable the RIP and enter the RIP view .

[SW7700] rip

[SW 7700-rip]

6.3

.12. rip authentication-mode

Syn tax

rip authentication-mode simple password

rip authentication-mode md5 k ey-string string

rip

authentication-mode md5 key-id id

rip authentication-m ode md5 type { nonstandard | usual }

undo rip authentication -mode

100

R O U T I N G P R O T O C O L

View

VLAN interface view

Para meter

simple: Simple text authentication mode.

password: Simple text authentication key.

md5: MD5 cipher text authentication mode.

string: MD5 cip her text authentication key.

id: MD5 cipher text authentication identifier, ranging from 1 to 255.

nonstand

in RFC208

ard: Specifies the MD5 cipher text authentication packet to use a nonstandard packet format described

usual: Specifies the MD5 cipher text authentication packet to use the general packet format (RFC1723 standard format).

Des cription

Using the rip authentication-mode simple command, you can configure RIP-2 simple text authentication key.

Using the rip au thentication-mode md5 key-string, you can configure MD5 cipher text authentication key of

RIP-2.

Using the rip authentication-m ode md5 key-id command, you can configure MD5 cipher text authentication

ID of RIP-2.

Using the rip authentication-mode md5 type command, you can configure the format type of MD5 cipher te xt authentication packet of RIP-2.

Using the undo rip authentication-mode command, you can cancel the RIP-2 authentication.

By default, the nonstandard packet format will be used, and the key-id is 1 if the MD5 authentication key is set but MD5 cipher text authentication packet type is not specified.

RIP-1 does not support authentication. There are two RIP authentication modes: simple authentication and MD5 cipher text authentication for RIP-2. When M packet formats. One of them is that described is the o

D5 cipher text authentication mode is used, there are two types of in RFC 1723, which was brought forward earlier. The other format ne described specially in RFC 2082. The router supports both of the packet formats and the user can select either of them on demands.

For the related commands, see rip version.

Exa mple

# Specify Interface Vlan-interface 1 to use the simple authenti cation with the key as aaa.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interfac e1] rip version 2

[SW7700-Vlan-interface1] rip authen tication-mode simple aaa

# Specify the interface Vlan-interface 1 to use MD5 cipher text authentication with the key as aaa and the packet type as nonstandard.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] rip version 2

[SW7700-Vlan-interface1] rip authen tication-mode md5 key-string aaa

[SW7700-Vlan-interface1] rip authentica tion-mode md5 type nonstandard

# Set MD5 authentication at Vlan-interface 1 with the key string as aaa and the packet type as usual.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] rip version 2

[SW7700-Vlan-interface1] rip authentication-mode md5 key-string aaa

101

R O U T I N G P R O T O C O L

[SW7700-Vlan-interface1] rip authentication-mode md5 type usual

6.3.13. rip input

Syn tax

rip input

do rip input

View

VLAN i nterface view

Para meter

None

Des cription

Using the rip input command, you can allow an interface to receive RIP packets. Using the undo rip input command, you can disable an interface to receive RIP packets.

By default, all interfaces except loopback interfaces are enabled to receive RIP packets.

This command is used in cooperation with the other two commands: rip output and rip work . Functionally, ri p

work is equivalent to rip input & rip output. The latter two control the receipt and the transmission of RIP packets respectively on an interf e.

commands. er

For th e related commands, see rip output, rip work .

Exa mple

# Specify the interface Vlan-interface 1 no t to receive RIP packets.

[SW7700-Vlan-interfac e1] undo rip input

6.3.14. r ip metricin

Syn tax

rip metricin value

do rip metricin

View

VLAN i nterface view

Para meter

value: Addi tional route metric added when receiving a packet, ranging from 0 to 16. By default, the value is 0.

Des cription

Using the rip metricin command, you can configure the additional route metric added to the route when an interface receives RIP packets. Using t additional route metric. he undo rip metricin command, you can restore the default value of this

For th e related commands, see rip metricout.

Exa mple

# Specify the additional route metric to 2 when the interface Vlan-interface 1 receives RIP packets.

[SW7700] interface Vlan-interface 1

102

R O U T I N G P R O T O C O L

[SW7700-Vlan-interface1] rip metricin 2

6.3.15. rip metricout

Syn tax

rip metricout value

do rip metricout

View

VLAN i nterface view

Para meter

value: Addi tional route metric added when transmitting a packet, ranging from 1 to 16. By default, the value is 1.

Des cription

Using the rip metricout command, you can configure the additional route metric to the route when an int transmits RIP packets. Using th additional route metric. e undo rip metricout command, you can restore the default value of this erface

For th e related commands, see rip metricin.

Exa mple

# Set the additional route metric to 2 when the interface Vlan-interface 1 transmits RIP packets.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-inter face1] rip metricout 2

6.3.16. rip output

Syn tax

rip output

do rip output

View

VLAN i nterface view

Para meter

None

Des cription

Using the rip output command, you can allow an interface to transmit RIP packets to the external. Usin g the

undo rip output command, you can disable an interface to transmit RIP packets to the external.

By default, all interfaces except loopback interfaces are enabled to transmit RIP packets to the external.

This command is used in cooperation with the other two commands: rip input and rip work . Functionally, rip

work is equivalent to rip input and rip output. The latter two control the receipt and the transmission of RIP packets respectively on an interf e.

commands. for mm and equals the functional combination of the latter two

For th e related commands, see rip input, rip work .

Exa mple

# Disable the interface Vlan-interface 1 to transmit RIP packets.

103

R O U T I N G P R O T O C O L

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] undo rip output

6.3.17. rip split-horizon

Syntax

rip split-horizon

do rip split-horizon

View

VLAN i nterface view

Para meter

None

Desc ription

Using the rip split-horizon command, you can configure an interface to use split horizon when transmitting RI packets. Using the undo rip split when transmitting RIP packets.

-horizon command, you can configure an interface not to use split horizon

By default, an interface is enabled to use split horizon when transmitting RIP packets.

Normally, split horizon is necessary for reducing route disabled to ensure the correct execution of protocols.

loop. Only in some special cases, split horizon should be

Examp le

# Specify the interface Vlan-interface 1 not to use split horizon when processing RIP packets.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interf ace1] undo rip split-horizon

6.3.18. rip version

Syntax

rip version 1

rip version 2 [ broa dcast | multicast ]

do rip version

View

VLAN i nterface view

Para meter

1: Interface version is RIP-1.

2: Interface version is RIP-2.

broadcast: Transmission mode of RIP-2 packet is broadcast.

multicast

: Transmission mode of RIP-2 packet is multicast.

Des cription

Using the rip version command, you can configure the version of RIP packets on an interface. U sing the undo

rip version command, you can restore the default value of RIP packet version on the interface.

104

R O U T I N G P R O T O C O L

The interface RIP version is RIP-1. RIP-1 transmits packets in broadcast mode, while RIP-2 transmits packets in multicast mode.

When running RIP-1, the interface only receives and transmits RIP-1, and receives RIP-2 broadcast packets, but does not receive RIP-2 multicast packets. When running RIP-2 in broadcast mode, the interface only receives transmits RIP-2 broadcast packets, receives R

and

IP-1 packets and RIP-2 multicast packets. When running RIP-2 in multicas packet t mode, the interface only receives and transmits RIP-2 multicast packets, receives RIP-2 broadcast s, but does not receive RIP-1 packets.

Exa mple

# Configure the interface Vlan-interface 1 as RIP-2 bro adcast mode.

[SW7700] interface Vl an-interface 1

[SW7700-Vlan-in terface1] rip version 2 broadcast

6.3.19. rip work

Syn tax rip

work

undo

rip work

View

VLAN i nterface view

Para meter

None

Des cription

Using the rip work command, you can enabl e the running of RIP on an interface. Using the undo rip work command, you can disable the running of RIP on an interface.

By default, RIP is run on an interface.

This command is used in cooperation with the rip input, rip out guidelin e of the related commands.

put and network commands. Refer to the usage

For th e related commands, see network, rip input, rip output.

Exa mple

# Disable the interface Vlan-interface 1 to run the RIP.

[SW7700] interface Vl an-interface 1

[SW7700-Vlan-inte rface1] undo rip work

6.3.20. summa ry

Syn tax sum

mary

do summary

View

RIP view

Para meter

None

105

R O U T I N G P R O T O C O L

Description

Using the summary command, you can configure to activate RIP-2 automatic route summarization. Using the

undo summary command, you can disable RIP-2 automatic route summarization.

By default, RIP-2 route summarization is used.

Route aggregation can be performed to reduce the routing traffic on the network as well as to reduce the size of the routing table. RIP-1 does not support subnet mask. Forwarding subnet route may cause ambiguity. Therefore,

RIP-1 uses route summarization all the time. If RIP-2 is used, route summarization function can be disabled with the undo summary command, when it is necessary to broadcast the subnet route.

For the related commands, see rip version.

Example

# Set RIP version on the interface Vlan-interface 1 as RIP-2 and disable the route aggregation.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] rip version 2

[SW7700-Vlan-interface1] quit

[SW7700] rip

[SW7700-rip] undo summary

6.4. OSPF Configuration Commands

6.4.1. abr-summary

Syntax

abr-summary ip-address mask [ advertise | not-advertise ]

undo abr-summary ip-address mask

View

OSPF Area view

Parameter

ip-address: Network segment address.

mask: Network mask.

Description

Using the abr-summary command, you can configure the route aggregation on the area border router. Using the undo abr-

summary command, you can disable the function of route aggregation on the area border router.

By default, the area border router doesn’t aggregate routes.

This command is applicable only to the area border router (ABR) and is used for the route aggregation in an area. The ABR only transmits an aggregated route to other areas. Route aggregation refers to that the routing information is processed in the ABR and for each network segment configured with route aggregation, there is only one route transmitted to other areas.

Example

# Aggregate the two network segments, 66.48.10.0 and 66.48.120.0, in OSPF area 1 into one summary route 66.48.0.0 and transmit it to other areas.

106

R O U T I N G P R O T O C O L

[SW7700-ospf] area 1

[SW7700-ospf-area-0.0.0.1] network 66.48.10.0 0.0.0.255

[SW7700-ospf-area-0.0.0.1] network 66.48.120.0 0.0.0.255

[SW7700-ospf-area-0.0.0.1] abr-summary 66.48.0.0 255.255.0.0

6.4.2. area

Syntax

area area-id

undo area area-id

View

OSPF view

Parameter

area-id: ID of the OSPF area.

Description

Using the area command, you can enter OSPF Area view. Using the undo area command, you can cancel the designated area.

Example

# Enter OSPF Area view.

[SW7700-ospf] area 0

[SW7700-ospf-area-0.0.0.0]

6.4.3. asbr-summary

Syntax

asbr-summary ip-address mask [ not-advertise [ tag value ] | tag value ]

undo asbr-summary ip-address mask [ not-advertise [ tag value ] | tag value ]

View

OSPF view

Parameter

ip-address: Matched IP address.

mask: IP address mask in dotted decimal format.

not-advertise: Do not advertise routes matching the specified IP address and mask.

tag value: Tag value, which is mainly used to control advertisement of routes via route-policy. It is in the range from 0 to

4294967295. If it is not specified, it is 1 by default.

Description

Using the asbr-summary command, you can configure summarization of imported routes by OSPF. Using the undo asbr-

summary command, you can cancel the summarization.

By default, summarization of imported routes is disabled.

107

R O U T I N G P R O T O C O L

After the summarization of imported routes is configured, if the local router is an autonomous system border router (ASBR), this command summarizes the imported Type-5 LSAs in the summary address range. When NSSA is configured, this command will also summarize the imported Type-7 LSAs in the summary address range.

If the local router acts as both an ABR and a router in the NSSA, this command summarizes Type-5 LSAs transformed from

Type-7 LSAs. If the router is not the router in the NSSA, the summarization is disabled.

For the related commands, see display ospf asbr-summary.

Example

# Set summarization of SW7700 imported routes.

[SW7700-ospf] asbr-summary 10.2.0.0 255.255.0.0 not-advertise

6.4.4. authentication-mode

Syntax

authentication-mode [ simple | md5 ]

undo authentication-mode

View

OSPF Area view

Parameter

simple: Use simple text authentication mode.

md5: Use MD5 cipher text authentication mode.

Description

Using the authentication-mode command, you can configure one area of OSPF to support the authentication attribute. Using the undo authentication-mode command, you can cancel the authentication attribute of this area.

By default, an area does not support authentication attribute.

All the routers in one area must use the same authentication mode (no authentication, simple text authentication or MD5 cipher text authentication). If the mode of supporting authentication is configured, all routers on the same segment must use the same authentication key. To configure a simple text authentication key, use the ospf authentication-mode simple command. Also, use the ospf authentication-mode md5 command to configure the MD5 cipher text authentication key if the area is configured to support MD5 cipher text authentication mode

For the related commands, see ospf authentication-mode.

Example

# Specify the OSPF area 0 to support MD5 cipher text authentication:

[SW7700-ospf] area 0

[SW7700-ospf-area-0.0.0.0] authentication-mode md5

6.4.5. default cost

Syntax

default cost value

undo default cost

108

R O U T I N G P R O T O C O L

View

OSPF view

Parameter

value: Default routing metric of external route imported by OSPF, ranging from 0 to 16777215.

Description

Using the default cost command, you can configure the default cost for OSPF to import external routes. Using the undo default

cost command, you can restore the default value of the default routing cost configured for OSPF to import external routes.

By default, the default routing cost of external route imported by OSPF is 1.

Since OSPF can import external routing information and propagate it to the entire autonomous system, it is necessary to specify the default routing cost for the protocol to import external routes.

Example

# Specify the default routing cost for OSPF to import external routes as 10.

[SW7700-ospf] default cost 10

6.4.6. default interval

Syntax

default interval seconds

undo default interval

View

OSPF view

Parameter

seconds: Default interval for redistributing external routes. Its unit is second and the value ranges from 1 to 2147483647. By default, the interval for OSPF to import external routes is 1 second.

Description

Using the default interval command, you can configure the default interval for OSPF to import external routes. Using the undo

default interval command, you can restore the default value of the default interval of redistributing external routes.

Because OSPF can import the external routing information and broadcast it to the entire autonomous system, it is necessary to specify the default interval for the protocol to import external routes.

Example

# Specify the default interval for OSPF to import external routes as 10 seconds.

[SW7700-ospf] default interval 10

6.4.7. default limit

Syntax

default limit routes

undo default limit

109

R O U T I N G P R O T O C O L

View

OSPF view

Parameter

routes: Default value to the imported external routes in a unit time, ranging from 200 to 2147483647. By default, the value is 1000.

Description

Using the default limit command, you can configure the default value of maximum number of imported routes. Using the undo

default limit command, you can restore the default value.

OSPF can import external route information and broadcast them to the whole autonomous system, so it is necessary to regulate the default value of external route information imported in one process.

For the related commands, see default interval.

Example

# Specify the default value of OSPF imported external routes as 200.

[SW7700-ospf] default limit 200

6.4.8. default tag

Syntax

default tag tag

undo default tag

View

OSPF view

Parameter

tag: Default tag, ranging from 0 to 4294967295.

Description

Using the default tag command, you can configure the default tag of OSPF when it redistributes an external route. Using the

undo default tag command, you can restore the default tag of OSPF when it redistributes the external route.

When OSPF redistributes a route found by other routing protocols in the router and uses it as the external routing information of its own autonomous system, some additional parameters are required, including the default cost and the default tag of the route.

For the related commands, see default type.

Example

# Set the default tag of OSPF imported external route of the autonomous system as 10.

[SW7700-ospf] default tag 10

6.4.9. default type

Syntax

default type { 1 | 2 }

undo default type

110

R O U T I N G P R O T O C O L

View

OSPF view

Parameter

type 1: External routes of type 1.

type 2: External routes of type 2.

Description

Using the default type command, you can configure the default type when OSPF redistributes external routes. Using the undo

default type command, you can restore the default type when OSPF redistributes external routes.

By default, the external routes of type 2 are imported.

OSPF specifies the two types of external routing information. The command described in this section can be used to specify the default type when external routes are imported.

For the related commands, see default tag.

Example

# Specify the default type as type 1 when OSPF imports an external route.

[SW7700-ospf] default type 1

6.4.10. default-cost

Syntax

default-cost value

undo default-cost

View

OSPF Area view

Parameter

value: Cost value of the default route transmitted by OSPF to the STUB or NSSA area, ranging from 0 to 16777215. The default value is 1.

Description

Using the default-cost command, you can configure the cost of the default route transmitted by OSPF to the STUB or NSSA area. Using the undo default-cost command, you can restore the cost of the default route transmitted by OSPF to the STUB or

NSSA area to the default value.

For the related commands, see stub, nssa.

Example

# Set the area 1 as the STUB area and the cost of the default route transmitted to this STUB area to 60.

[SW7700-ospf] area 1

[SW7700-ospf-area-0.0.0.1] network 20.0.0.0 0.255.255.255

[SW7700-ospf-area-0.0.0.1] stub

[SW7700-ospf-area-0.0.0.1] default-cost 60

111

R O U T I N G P R O T O C O L

6.4.11. default-route-advertise

Syntax

default-route-advertise [ always ] [ cost value ] [ type type-value ] [ route-policy route-policy-name ]

undo default-route-advertise [ always ] [ cost ] [ type ] [ route-policy ]

View

OSPF view

Parameter

always: The parameter will generate an ase lsa which describes the default route and advertise it if the local router is not configured with the default route. If this parameter is not set, the local router cannot import the ase lsa, which generates the default route only when it is configured with the default route.

cost value: the cost value of this ase lsa. The metric-value ranges from 0 to 16777215. If the parameter is not configured, the default value is 1.

type type-value: cost type of this ase lsa. It ranges from 1 to 2. If the parameter is not configured, the default value is 2.

route-policy route-policy-name: if the default route match the route-policy specified by route-policy-name, route-policy will affect the value in ase lsa. The length of route-policy-name parameter ranges from 1 to 16 character string.

Description

Using the default-route-advertise command, you can import default route to OSPF route area. Using the undo default-route-

advertise command, you can cancel the import of default route.

By default, OSPF does not import default route.

The import-route command cannot import the default route. To import the default route to the route area, this command must be used. When local router is not configured with default route, the keyword always should be used by ase lsa to generate default route.

For the related commands, see import-route.

Example

# If local route has no default route, the ase lsa of default route will be generated, otherwise it won’t be generated.

[SW7700-ospf] default-route-advertise

# The ase lsa of default route will be generated and advertised to OSPF route area even the local router has no default route.

[SW7700-ospf] default-route-advertise always

6.4.12. display ospf abr-asbr

Syntax display ospf abr-asbr

View

All views

Parameter

None

112

R O U T I N G P R O T O C O L

Description

Using the display ospf abr-asbr command, you can view the information about the ABR and ASBR of OSPF.

Example

# Display the information of the OSPF area border routers and autonomous system border routers.

<SW7700> display ospf abr-asbr

Routing Table to ABR and ASBR

Destination Area Cost Type Nexthop Interface

Intra 0.0.0.2 0.0.0.0 1 ASBR 10.10.0.1 Vlan-Interface1

6.4.13. display ospf asbr-summary

Syntax

display ospf asbr-summary [ ip-address mask ]

View

All views

Parameter

ip-address: Matched IP address in dotted decimal format.

mask: IP address mask in dotted decimal format.

Description

Using the display ospf asbr-summary command, you can view the summary information of OSPF imported route.

If the parameters are not set, the summary information of all OSPF imported routes will be displayed.

For the related commands, see asbr-summary .

Example

# Display the summary information of all OSPF imported routes.

<SW7700> display ospf asbr-summary

Total summary address count: 2

Summary Address net : 168.10.0.0 mask : 255.254.0.0 tag : 1 status : Advertise

The Count of Route is 0

Summary Address net : 1.1.0.0 mask : 255.255.0.0 tag : 100 status : DoNotAdvertise

The Count of Route is 0

6.4.14. display ospf brief

Syntax display ospf brief

113

R O U T I N G P R O T O C O L

View

All views

Parameter

None

Description

Using the display ospf brief command, you can view the main summary of OSPF.

Example

# Display the OSPF summary.

<SW7700> display ospf brief

RouterID: 10.110.95.189 Border Router: AS

spf-schedule-interval: 5

Routing preference: Inter/Intra: 10 External: 150

Default ASE parameters: Metric: 1 Tag: 0.0.0.1 Type: 2

SPF computation count: 16

Area Count: 1 Nssa Area Count: 0

Area 0.0.0.0:

Authtype: none Flags: <>

SPF scheduled: <>

Interface: 201.1.1.4 (Vlan-interface1)

Cost: 1 State: DR Type: Broadcast

Priority: 1

Designated Router: 201.1.1.4

Backup Designated Router: 201.1.1.3

Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1

6.4.15. display ospf cumulative

Syntax display ospf cumulative

View

All views

Parameter

None

Description

Using the display ospf cumulative command, you can view the OSPF cumulative information.

Example

# Display the OSPF cumulative information.

<SW7700> display ospf cumulative

IO Statistics

Link-State 18

114

R O U T I N G P R O T O C O L

Link-State Update 48 53

Link-State 21

ASE: 1 Checksum Sum: FCAF

LSAs originated by this router

Router: 50 SumNet: 40 SumASB: 2

LSAs Originated: 92 LSAs Received: 33

Area 0.0.00.0:

Neighbors: 1 Interfaces: 1

Spf: 54 Checksum Sum F020 rtr: 2 net: 0 sumasb: 0 sumnet: 1

Area 0.0.0.1:

Neighbors: 0 Interfaces: 1

Spf: 19 Checksum Sum 14EAD rtr: 1 net: 0 sumasb: 1

Routing Table: sumnet: 1

Intra Area: 2 Inter Area: 0 ASE: 1

6.4.16. display ospf error

Syntax display ospf error

View

All views

Parameter

None

Description

Using the display ospf error command, you can view the OSPF error information.

Example

# Display the OSPF error information.

<SW7700> display ospf error

OSPF packet error statistics:

0: IP: received my own packet

0: OSPF: bad version

0: OSPF: bad area id

0: OSPF: bad virtual link

0: OSPF: bad authentication key

0: OSPF: packet size > ip length

0: OSPF: interface down

0: HELLO: netmask mismatch

0: HELLO: dead timer mismatch

0: HELLO: router id confusion

0: OSPF: bad packet type

0: OSPF: bad checksum

0: OSPF: area mismatch

0: OSPF: bad authentication type

0: OSPF: packet too small

0: OSPF: transmit error

0: OSPF: unknown neighbor

0: HELLO: hello timer mismatch

0: HELLO: extern option mismatch

0: HELLO: virtual neighbor unknown

0: DD: router id confusion

0: DD: unknown LSA type

0: LS ACK: bad ack

0: LS ACK: unknown LSA type

0: DD: extern option mismatch

0: LS ACK: neighbor state low

0: LS ACK: duplicate ack

0: LS REQ: neighbor state low

0: LS REQ: empty request

0: LS UPD: neighbor state low

0: LS UPD: LSA checksum bad

0: LS REQ: bad request

0: LS UPD: newer self-generate LSA

0: LS UPD:received less recent LSA

0: LS UPD: unknown LSA type 0: OSPF routing: next hop not exist

0: DD: MTU option mismatch

115

R O U T I N G P R O T O C O L

6.4.17. display ospf interface

Syntax

display ospf interface [ interface-type port-number ]

View

All views

Parameter

interface-type: Interface type

port-number: Interface number.

Description

Using the display ospf interface command, you can view the OSPF interface information.

With the information output by this command, the OSPF configuration and running state can be viewed.

Example

# Display the OSPF interface information.

<SW7700> display ospf interface

Interface: 10.110.10.2 (Vlan-interface1)

Cost: 1 State: BackupDR Type: Broadcast

Priority: 1

Designated Router: 10.110.10.1

Backup Designated Router: 10.110.10.2

Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1

6.4.18. display ospf lsdb

Syntax

address ] [ self-originate ]

View

All views

Parameter

area-id: ID of the OSPF area, which can be a decimal integer or in IP address format.

Description

Using the display ospf lsdb command, you can view the database information about OSPF connecting state.

Example

# Display the database information about OSPF connecting state.

<SW7700> display ospf lsdb

Link State Database

Area: 0.0.0.0

TypeLinkStateID AdvRouter Age Len Sequence Metric Where

116

R O U T I N G P R O T O C O L

SpfTree

Rtr 0.0.0.1

SpfTree

0.0.0.1

Rtr 0.0.0.2

SpfTree

0.0.0.2

SNet 10.110.0.0 0.0.0.1 193

362

389

8000002f

8000002e

28 80000003 10

Area: 0.0.0.1

TypeLinkStateID AdvRouter

Stub 10.110.0.0 0.0.0.1

Age Len Sequence

2074 24 0

SpfTree

Rtr 0.0.0.1 0.0.0.1 363

SNet 10.10.0.0 0.0.0.1

ASB 0.0.0.2

193

0.0.0.1

36 80000003

Metric Where

28 80000002

193 28

80000002 10

SpfTree

Inter List

AS External Database

TypeLinkStateID

ASE 2.2.0.0

initialized

0.0.0.2 278 36 80000001

<SW7700> display ospf lsdb ase type : ASE ls id : 2.2.0.0 adv rtr: 0.0.0.2 ls age: 349

len: 36

Link State Data Base chksum: 0xfcaf

Options: (DC)

Net mask:255.255.0.0

Tos 0 metric: 1

E type : 2

Forwarding Address: 0.0.0.0

6.4.19. display ospf nexthop

Syntax display ospf nexthop

View

All views

Parameter

None

Description

Using the display ospf nexthop command, you can view the information about the next-hop

Example

# Display the OSPF next-hop information.

<SW7700> display ospf nexthop

Address Type Refcount Intf Addr Intf Name

---------------------------------------------------------------------

202.38.160.1 Direct 3 202.38.160.1 Vlan-interface2

117

R O U T I N G P R O T O C O L

202.38.160.2 interface2

6.4.20. display ospf peer

Neighbor 1 202.38.160.1 Vlan-

Syntax

display ospf peer [ brief ]

View

All views

Parameter

None

Description

Using the display ospf peer command, you can view the information about OSPF peer.

Using the display ospf peer brief command, you can view the brief information of every peer in OSPF, mainly the peer number at all states in every area.

Example

# View the information of OSPF peer.

<SW7700> display ospf peer

Area 0.0.0.0 interface 1.1.1.1(Vlan-interface1)'s neighbor(s)

RouterID: 1.1.1.3 Address: 1.1.1.3

State: Full Mode: Nbr is Master Priority: 1

DR: 1.1.1.3 BDR: 1.1.1.1

Dead timer expires in 31s

Neighbor is comes for 8:24

# View the brief information of every peer.

<SW7700> display ospf peer brief

Neighbor Statistics

Area ID Down Attempt Init 2-Way ExStart Exchange Loading Full Total

0.0.0.0 0 0 0 0 0 0 0 1 1

0.0.0.1 0 0 0 0 0 0 0 1 1

Total 0 0 0 0 0 0 0 2 2

6.4.21. display ospf request-queue

Syntax

display ospf request-queue

View

All views

Parameter

None

Description

Using the display ospf request-queue command, you can view the information about the OSPF request-queue.

118

R O U T I N G P R O T O C O L

Example

# Display the information of OSPF request-queue.

<SW7700> display ospf request-queue

The Router's Neighbors is

RouterID: 1.1.1.1 Address: 1.1.1.1

Interface: 1.1.1.3 Area: 0.0.0.0

LSID:1.1.1.3 AdvRouter:1.1.1.3 Sequence:80000017 Age:35

6.4.22. display ospf retrans-queue

Syntax

display ospf retrans-queue

View

All views

Parameter

None

Description

Using the display ospf retrans-queue command, you can view the information about the OSPF retransmission queue.

Example

# Display the information of OSPF retransmission queue.

<SW7700> display ospf retrans-queue

The Router's Neighbors is

RouterID: 1.1.1.3 Address: 1.1.1.3

Interface: 1.1.1.1 Area: 0.0.0.0

Retrans list:

Type: Net LSID:1.1.1.1 AdvRouter:1.1.1.1

6.4.23. display ospf routing

Syntax

display ospf routing

View

All views

Parameter

None

Description

Using the display ospf routing command, you can view the information about OSPF routing table.

Example

# View the routing information related to OSPF.

119

R O U T I N G P R O T O C O L

<SW7700> display ospf routing

Routing for Network

Destination Cost Type

Routing for ASEs

Total Nets: 2

Intra Area: 2 Inter Area: 0 ASE: 1 NSSA: 0

6.4.24. display ospf vlink

Syntax

display ospf vlink

View

All views

Parameter

None

Description

Using the display ospf vlink command, you can view the information about OSPF virtual links.

Example

# View OSPF virtual links information.

<SW7700> display ospf vlink

Virtual-link Neighbor-id -> 10.10.10.2, State: Full

Interface: 10.10.10.1 (Vlan-interface10)

Cost: 10 State: P To P Type: Virtual

Transit Area: 0.0.0.1

Timers: Hello 10, Dead 40, Poll 0, Retransmit 5, Transmit Delay 1

6.4.25. filter-policy export

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ routing-protocol ]

undo filter-policy {acl-number | ip-prefix ip-prefix-name} export [ routing-protocol ]

View

OSPF view

Parameter

acl-number: Access control list number.

ip-prefix-name: Name of the address prefix list.

routing-protocol: Protocol advertising the routing information, including direct, bgp, rip and static at present.

120

R O U T I N G P R O T O C O L

Description

Using the filter-policy export command, you can configure the rule of OSPF filtering the advertised routing information. Using the undo filter-policy export command, you can cancel the filtering rules that have been set.

By default, no filtering of the distributed routing information is performed.

In some cases, it may be required that only the routing information meeting some conditions can be advertised. Then, the filter-

policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be advertised.

For the related commands, see acl, ip ip-prefix.

Example

# Configure ospf only advertises the routing information permitted by acl 1.

[SW7700] acl number 1

[SW7700-acl-basic-1] rule permit source 11.0.0.0 0.255.255.255

[SW7700-acl-basic-1] rule deny source any

[SW7700-ospf] filter-policy 1 export

6.4.26. filter-policy import

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name | gateway prefix-list- name } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name | gateway ip-prefix-name } import

View

OSPF view

Parameter

acl-number: Access control list number used for filtering the destination addresses of the routing information.

ip-prefix-name: Name of address prefix list used for filtering the destination addresses of the routing information.

gateway ip-prefix-name: Name of address prefix list used for filtering the addresses of the neighboring routers advertising the routing information.

Description

Using the filter-policy import command, you can configure the OSPF rules of filtering the routing information received. Using the undo filter-policy import command, you can cancel the filtering of the routing information received.

By default, no filtering of the received routing information is performed.

In some cases, it may be required that only the routing information meeting some conditions can be received. Then, the filter-

policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be received.

Example

# Filter the received routing information according to the rule defined by the access control list 2.

[SW7700] acl number 2

[SW7700-acl-basic-2] rule permit source 20.0.0.0 0.255.255.255

[SW7700-acl-basic-2] rule deny source any

[SW7700-ospf] filter-policy 2 import

121

R O U T I N G P R O T O C O L

6.4.27. import-route

Syntax

import-route protocol [ cost value ] [ type value ] [ tag value ] [ route-policy route-policy-name ]

undo import-route protocol

View

OSPF view

Parameter

protocol: Source routing protocol that can be imported. At present, it includes direct, rip, and static, etc.

route-policy route-policy-name: Configures only to import the routes matching the specified Route-policy.

cost value: Specify the cost of imported route.

type value: Specify the cost type of imported external routes. The value ranges from 1 to 2.

tag value: Specify the value of tag for imported external routes.

Description

Using the import-route command, you can import the information of another routing protocol. Using the undo import-route command, you can cancel the imported external routing information.

By default, the routing information of other protocols is not imported.

Example

# Specify an imported RIP route as the route of type 2, with the route tag as 33 and the route cost as 50.

[SW7700-ospf] import-route rip type 2 tag 33 cost 50

6.4.28. network

Syntax

network ip-address ip-mask

undo network ip-address ip-mask

View

OSPF Area view

Parameter

ip-address: Address of the network segment where the interface locates.

ip-mask: IP address wildcard mask, which is similar to the reversed form of the mask of IP address.

Description

Using the network command, you can configure the interface running OSPF protocol to which the interface belongs. Using the

undo network command, you can cancel the interface running OSPF.

By default, the interface does not belong to any area.

With the two parameters, ip-address and ip-mask, one or more interfaces can be configured as an area. To run the OSPF protocol on one interface, the master IP address of this interface must be in the range of the network segment specified by this command. If

122

R O U T I N G P R O T O C O L the slave IP address of the interface is in the range of the network segment specified by this command, this interface will not run

OSPF protocol.

For the related commands, see ospf.

Example

# Specify the interfaces whose master IP addresses are in the segment range of 10.110.36.0 to run the OSPF protocol and specify the number of the OSPF area (where these interfaces are located) as 6.

[SW7700-ospf] area 6

[SW7700-ospf-area-0.0.0.6] network 10.110.36.0.0 0.0.0.255

6.4.29. nssa

Syntax

nssa [ default-route-advertise ] [ no-import-route ] [ no-summary ]

undo nssa

View

OSPF Area view

Parameter

default-route-advertise: Import default route to NSSA area.

no-import-route: Configure not to import route to NSSA area.

no-summary: ABR is disabled to transmit summary_net LSAs to the NSSA area.

Description

Using the nssa command, you can configure the type of an OSPF area as an NSSA area. Using the undo nssa command, you can cancel the function.

By default, NSSA area is not configured.

For all the routers connected to the NSSA area, the command nssa must be used to configure the area as the NSSA attribute.

The default-route-advertise parameter is used to generate default type-7 LSA. No matter whether there is route 0.0.0.0 in routing table on ABR, type-7 LSA default route will be generated always. Only when there is route 0.0.0.0 in routing table on ASBR, will type-7

LSA default route be generated.

On ASBR, the no-import-route parameter enables the external route imported by OSPF through import-route command not to be advertised to NSSA area.

Example

# Configure area 1 as NSSA area.

[SW7700-ospf] area 1

[SW7700-ospf-area-0.0.0.1] network 36.0.0.0 0.255.255.255

[SW7700-ospf-area-0.0.0.1] nssa

6.4.30. ospf

Syntax ospf undo ospf

123

R O U T I N G P R O T O C O L

View

System view

Parameter

None

Description

Using the ospf command, you can enable the OSPF protocol. Using the undo ospf command, you can disable the OSPF protocol.

After starting OSPF protocol, the user can make the corresponding configuration under the OSPF protocol view.

By default, the system does not run the OSPF protocol.

For the related commands, see network.

Example

# Enable the running of the OSPF protocol.

[SW7700] ospf

6.4.31. ospf authentication-mode

Syntax

ospf authentication-mode { simple password | md5 key-id key }

undo ospf authentication-mode { simple | md5 }

View

VLAN interface view

Parameter

simple password: Character string not exceeding 8 characters using plain text authentication.

key-id: ID of the authentication key in MD5 authentication mode in the range from 1 to 255.

key: MD5 authentication key. If it is input in a plain text form, MD5 key is a character string not exceeding 16 characters. And it is displayed in a cipher text form in a length of 24 characters. Inputting the MD5 key in a cipher text form with 24 characters long is also supported.

Description

Using the ospf authentication-mode command, you can configure the authentication mode and key between adjacent routers.

Using the undo ospf authentication-mode command, you can cancel the authentication key that has been set.

By default, the interface does not authenticate the OSPF packets.

The passwords for authentication keys of the routers on the same network segment must be identical. In addition, using the

authentication-mode, you can set the authentication type of the area so as to validate the configuration.

For the related commands, see authentication-mode.

Example

# Set the area 1 where the network segment 131.119.0.0 of Interface Vlan-interface 1 is located to support MD5 cipher text authentication. The authentication key identifier is set to 15 and the authentication key is 3Com. [SW7700-ospf] area 1

[SW7700-ospf-area-0.0.0.1] network 131.119.0.0 0.0.255.255

124

R O U T I N G P R O T O C O L

[SW7700-ospf-area-0.0.0.1] authentication-mode md5

[SW7700-Vlan-interface1] ospf authentication-mode md5 15 3Com

6.4.32. ospf cost

Syntax

ospf cost value

undo ospf cost

View

VLAN interface view

Parameter

value: Cost for running OSPF protocol, ranging from 1 to 65535.

Description

Using the ospf cost command, you can configure different message sending costs so as to send messages from different interfaces. Using the undo ospf cost command, you can restore the default costs.

Example

# Specify the cost spent when an interface runs OSPF as 33.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] ospf cost 33

6.4.33. ospf dr-priority

Syntax

ospf dr-priority value

undo ospf dr-priority

View

VLAN interface view

Parameter

value: Interface priority for electing the "designated router", ranging from 0 to 255. The default value is 1.

Description

Using the ospf dr-priority command, you can configure the priority for electing the "designated router" on an interface. Using the

undo ospf dr-priority command, you can restore the default value.

The priority of the interface determines the qualification of the interface when the "designated router" is elected. The interface with higher priority will be considered first when the vote collision occurs.

Example

# Set the priority of the interface Vlan-interface 1 to 8, when electing the DR.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] ospf dr-priority 8

125

R O U T I N G P R O T O C O L

6.4.34. ospf mtu-enable

Syntax ospf mtu-enable undo ospf mtu-enable

View

VLAN interface view

Parameter

None.

Description

Using the ospf mtu-enable command, you can enable the interface to write MTU value when sending DD packets. Using the

undo ospf mtu-enable command, you can restore the default settings.

By default, The MTU value is 0 when sending DD packets, i.e. the actual MTU value of the interface is not written.

DD packets (Database Description Packet) are used to describe its own LSDB when the router running OSPF protocol is synchronizing the database.

The default MTU value of DD packet is 0. With this command, the specified interface can be set manually to write the MTU value area in DD packets when sending DD packets, i.e. the actual MTU value of the interface is written in.

Example

# Set interface Vlan-interface 3 to write MTU value area when sending DD packets.

[SW7700] interface Vlan-interface 3

[SW7700-Vlan-interface 3] ospf mtu-enable

6.4.35. ospf timer dead

Syntax

ospf timer dead seconds

undo ospf timer dead

View

VLAN interface view

Parameter

seconds: Dead interval of the OSPF neighbor. It is in second and ranges from 1 to 65535.

Description

Using the ospf timer dead command, you can configure the dead interval of the OSPF neighbor. Using the undo ospf timer

dead command, you can restore the default value of the dead interval of the neighbor.

By default, the dead interval for the OSPF neighbors are 40 seconds.

The dead of OSPF neighbors means that within this interval, if no Hello message is received from the neighbor, the neighbor will be considered to be invalid. The value of dead seconds should be at least 4 times of that of the Hello seconds. The dead seconds for the routers on the same network segment must be identical.

126

R O U T I N G P R O T O C O L

For the related commands, see ospf timer hello.

Example

# Set the neighbor dead on the interface Vlan-interface 1 to 80 seconds.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] ospf timer dead 80

6.4.36. ospf timer hello

Syntax

ospf timer hello seconds

undo ospf timer hello

View

VLAN interface view

Parameter

seconds: Interval in seconds for an interface to transmit hello packet. It ranges from 1 to 255.

Description

Using the ospf timer hello command, you can configure the interval for transmitting Hello messages on an interface. Using the

undo ospf timer hello command, you can restore the interval to the default value.

By default, the interval is 10 seconds for an interface of p2p or broadcast type to transmit Hello messages, and 30 seconds for an interface of nbma or p2mp type.

For the related commands, see ospf timer dead.

Example

# Configure the interval of transmitting Hello messages on the interface Vlan-interface 1 to 20 seconds.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] ospf timer hello 20

6.4.37. ospf timer poll

Syntax

ospf timer poll seconds

undo ospf timer poll

View

VLAN interface view

Parameter

seconds: Specifies the poll Hello interval, ranging from 1 to 65535 and measured in seconds. The default value is 120 seconds.

Description

Using the ospf timer poll command, you can configure the poll Hello packet interval. Using the undo ospf timer poll command, you can restore the default poll interval.

127

R O U T I N G P R O T O C O L

Poll seconds should be no less than 3 times Hello.

Example

# Configure to transmit poll Hello packet from interface Vlan-interface 2 every 130 seconds.

[SW7700-Vlan-interface2] ospf timer poll 130

6.4.38. ospf timer retransmit

Syntax

ospf timer retransmit interval

undo ospf timer retransmit

View

VLAN interface view

Parameter

interval: Interval in second for re-transmitting LSA on an interface. It ranges from 1 to 65535.The default value is 5 seconds.

Description

Using the ospf timer retransmit command, you can configure the interval for LSA re-transmitting on an interface. Using the

undo ospf timer retransmit command, you can restore the default interval value for LSA re-transmitting on the interface.

If a router transmits a "link state advertisement"(LSA) to the peer, it needs to wait for the acknowledgement packet from the neighbor. If no acknowledgement is received from the neighbor within the LSA retransmit, this LSA will be re-transmitted.

According to RFC2328, the LSA retransmit between adjacent routers should not be set too short. Otherwise, unexpected retransmission will be caused.

Example

# Specify the retransmit for LSA transmitting between the interface Vlan-interface 1 and the adjacent routers to 12 seconds.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] ospf timer retransmit 12

6.4.39. ospf trans-delay

Syntax

ospf trans-delay value

undo ospf trans-delay

View

VLAN interface view

Parameter

value: Transmitting delay of LSA on an interface. It ranges from 1 to 3600. By default, the value is 1 second.

Description

Using the ospf trans-delay command, you can configure the LSA transmitting delay on an interface. Using the undo ospf trans-

delay command, you can restore the default value of the LSA transmitting delay on an interface.

128

R O U T I N G P R O T O C O L

LSA will age in the "link state database" (LSDB) of the router as time goes by (add 1 for every second), but it will not age during network transmission. Therefore, it is necessary to add a period of time set by this command to the aging time of LSA before transmitting it.

Example

# Specify the trans-delay of transmitting LSA on the interface Vlan-interface 1 as 3 seconds.

[SW7700] interface Vlan-interface 1

[SW7700-Vlan-interface1] ospf trans-delay 3

6.4.40. peer

Syntax

peer ip-address [ dr-priority dr-priority-number ]

undo peer ip-address

View

OSPF view

Parameter

ip-address : IP address of the neighboring point.

dr-priority-number: Priority value represents the corresponding priority value of the network neighbor. The range is from 0 to 255.

The default value is 1.

Description

Using the peer command, you can configure the neighboring point if a router is connected to a network of NBMA type. Using the undo peer command, you can cancel the configured neighboring point.

Example

# Configure the IP address of the neighboring router to be 10.1.1.1.

[SW7700] peer 10.1.1.1.

6.4.41. preference

Syntax

preference [ ase ] value

undo preference [ ase ]

View

OSPF view

Parameter

value: OSPF protocol route preference, ranging from 1 to 255.

ase: Indicate the preference of an imported external route of the AS.

129

R O U T I N G P R O T O C O L

Description

Using the preference command, you can configure the preference of an OSPF protocol route. Using the undo preference command, you can restore the default value of the OSPF protocol route.

By default, the preference of an OSPF protocol internal route is 10 and the preference of an external route is 150.

Because multiple dynamic routing protocols could be running on a router, there is the problem of routing information sharing among routing protocols and selection. Therefore, a default preference is specified for each routing protocol. When a route is identified by different protocols, the protocol with a high preference will play a decisive role.

Example

# Specify the preference of an imported external route of the AS as 160.

[SW7700-ospf] preference ase 160

6.4.42. reset ospf all

Syntax reset ospf all

View

User view

Parameter

None

Description

Using the reset ospf all command, you can reset the OSPF process.

This command can be used to reset the OSPF process and the following results are expected:

Clear invalid LSA immediately without waiting for LSA timeout.

If the Router ID changes, a new Router ID will take effect by executing the command.

Re-elect DR and BDR conveniently.

OSPF configuration before the restart will not lose.

The system will require the user to confirm whether to re-enable the OSPF protocol after execution of the command.

Example

# Reset the OSPF process

<SW7700> reset ospf all

6.4.43. router id

Syntax

router id router-id

undo router id

View

System view

130

R O U T I N G P R O T O C O L

Parameter

router-id: Router ID that is a 32-bit unsigned integer.

Description

Using the router id command, you can configure the ID of a router running the OSPF protocol. Using the undo router id command, you can cancel the router ID that has been set.

By default, use the smallest IP address of addresses of all the router interfaces as the router ID.

Router ID is a 32-bit unsigned integer that uniquely identifies a router in an OSPF autonomous system. The user can specify the

ID for a router. If the user doesn’t specify router ID, the router will automatically select one from configured IP address as the ID of this router. If no IP address is configured for any interface of the router, the router ID must be configured in OSPF view.

Otherwise, OSPF protocol cannot be enabled.

When the router ID is configured manually, the ids of any two routers cannot be same in the autonomous system. So, the IP address of certain interface might as well be selected as the id of this router.

Note: The modified router ID will not be valid unless OSPF is re-enabled. For the related commands, see ospf.

Example

# Set the router ID to 10.1.1.3.

[SW7700] router id 10.1.1.3

6.4.44. silent-interface

Syntax

silent-interface silent-interface-type silent-interface-number

undo silent-interface silent-interface-type silent-interface-number

View

OSPF view

Parameter

silent-interface-type: Specifies the interface type

silent-interface-number: Specifies the interface number.

Description

Using the silent-interface command, you can disable an interface to transmit OSPF packet. Using the undo silent-interface command, you can restore the default setting.

By default, the interface is enabled to transmit OSPF packet.

You can use this command to disable an interface to transmit OSPF packet, so as to prevent the router on some network from receiving the OSPF routing information.

Example

# Disable interface Vlan-interface 2 to transmit OSPF packet.

[SW7700-ospf] silent-interface Vlan-interface 2

131

R O U T I N G P R O T O C O L

6.4.45. spf-schedule-interval

Syntax

spf-schedule-interval interval

undo spf-schedule-interval

View

OSPF view

Parameter

interval: SPF calculation interval of OSPF, which is in second in the range of 1 to 10.The default value is 5 seconds.

Description

Using the spf-schedule-interval command, you can configure the route calculation interval of OSPF. Using the undo spf-

schedule-interval command, you can restore the default setting.

According to the Link State Database (LSDB), the router running OSPF can calculate the shortest path tree taking itself as the root and determine the next hop to the destination network according to the shortest path tree. By adjusting SPF calculation interval, network frequently changing can be restrained, which may lead to that too many bandwidth resources and router resources will be used.

Example

# Set the OSPF route calculation interval of SW7700 to 6 seconds.

[SW7700-ospf] spf-schedule-interval 6

6.4.46. stub

Syntax stub [ no-summary ]

undo stub

View

OSPF Area view

Parameter

no-summary: ABR is disabled to transmit Summary LSAs to the STUB area.

Description

Using the stub command, you can configure the type of an OSPF area as “stub”. Using the undo stub command, you can cancel the settings.

By default, no area is set to be the STUB area.

If the router is an ABR, it will send a default route to the connected stub area . Using the default-cost command, you can configure the default route cost.

For the related commands, see default-cost.

132

R O U T I N G P R O T O C O L

Example

# Set the type of OSPF area 1 to the STUB area.

[SW7700-ospf] area 1

[SW7700-ospf-area-0.0.0.1] stub

6.4.47. vlink-peer

Syntax

vlink-peer router-id [ hello seconds] [ retransmit seconds ] [ trans-delay seconds ] [ dead seconds] [ simple password | md5 keyid key ]

undo vlink-peer router-id

View

OSPF Area view

Parameter

route-id: Router ID of virtual link neighbor.

hello seconds: Interval that router transmits hello packet. It ranges from 1 to 8192 seconds. This value must equal the hello seconds value of the router virtually linked to the interface. The default value is 10 seconds,

retransmit seconds: Specifies the interval for re-transmitting the LSA packets on an interface. It ranges from 1 to 8192 seconds. The default value is 5 seconds.

trans-delay seconds: Specifies the interval for delaying transmitting LSA packets on an interface. It ranges from 1 to 8192 seconds.

By default, the value is 1 second.

dead seconds: Specifies the interval of death timer. It ranges from 1 to 8192 seconds. This value must equal the dead seconds of the router virtually linked to it and must be at least 4 times of the hello seconds. The default value is 40 seconds.

simple password: Specifies the simple text authentication key, not exceeding 8 characters, of the interface. This value must equal the authentication key of the virtually linked neighbor.

md5 keyid: Specifies the MD5 authentication key ID Its value ranges from 1 to 255. It must be equal to the authentication key ID of the virtually linked peer.

key: Specifies the MD5 authentication key. It is a character string not exceeding 16 characters. It must be equal to the authentication key of the virtually linked peer. It is displayed in cipher text format whose length is 24 characters. Entering the key in cipher text format with 24 characters is also supported.

Description

Using the vlink-peer command, you can create and configure a virtual link. Using the undo vlink-peer command, you can cancel an existing virtual link.

According to RFC2328, the OSPF area should be connected with the backbone network. You can use vlink-peer command to keep the connectivity. Virtual link can be regarded as a common interface that uses ospf so that you can easily understand why to configure the parameters such as hello, retransmit, and trans-delay on it.

One thing should be mentioned. When configuring virtual link authentication, the authentication-mode command is used to set the authentication type as MD5 cipher text or plain text on the backbone network.

For the related commands, see authentication-mode, display ospf.

Example

# Create a virtual link to 10.110.0.3 and use the MD5 cipher authentication mode.

[SW7700-ospf] area 10.0.0.0

[SW7700-ospf-area-10.0.0.0] vlink-peer 10.110.0.3 md5 3 345

133

R O U T I N G P R O T O C O L

6.5. IP Routing Policy Configuration Commands

Note: When an Ethernet switch runs a routing protocol, it can perform the router functions. The router that is referred to in the following section and its icon represent a generalized router or an Ethernet switch running routing protocols. To improve readability, this will not be described in the other parts of the manual.

The above describes the configuration commands in the routing policy, which are independent of any specific routing protocol.

6.5.1. apply as-path

Syntax

apply as-path as-number-1 [ as-number-2 [ as-number-3 ... ] ]

undo apply as-path

View

Route policy view

Parameter

as-number-1... as-number-n: AS number to be added.

Description

Using the apply as-path command, you can configure AS number to be added in front of the original AS path in

Route-policy. Using the undo apply as-path command, you can cancel the AS sequence number added in front of the original AS path.

By default, no AS number is set.

If the match condition of Route-policy is matched, the AS attribute of the transmitting route will be changed.

Example

[SW7700-route-policy] apply as-path 200

6.5.2. apply community

Syntax

apply community { { { aa:nn | no-export-sunconfed | no-export | no-advertise} … [ additive ] } |

additive | none }

undo apply community

View

Route policy view

134

R O U T I N G P R O T O C O L

Parameter

aa:nn: Community number.

no-export-subconfed: Not sending matched route outside AS.

no-advertise: Not sending matched route to any peer.

no-export: Not passing route through AS but advertise to other sub Ass.

additive: Additional known community attribute.

none: Deleted route community attribute.

Description

Using the apply community command, you can configure the set BGP community attribute of Route-policy.

Using the undo apply community command, you can cancel the set BGP community attribute.

By default, BGP community attribute is not set.

For the related commands, see ip community-list, if-match community-list, route-policy, display bgp

routing-table community.

Example

# Configure one Route-policy applycommunity, whose node serial number is 16 and match mode is permit, and enter Route policy view to set match conditions and attribute modification actions to be executed.

[SW7700] route-policy applycommunity permit node 16

[SW7700-route-policy] if-match as-path 8

[SW7700-route-policy] apply community no-export

6.5.3. apply cost

Syntax

apply cost value

undo apply cost

View

Route policy view

Parameter

value: Specify the route cost value of route information.

Description

Using the apply cost command, you can configure the route cost value of route information. This command is one attribute apply sub-statements of Route-policy. Using the undo apply cost command, you can cancel the apply sub-statement.

135

R O U T I N G P R O T O C O L

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-

match cost, if-match tag, route-policy, apply ip next-hop, apply local-preference, apply origin and apply

tag.

Example

# Define one apply sub-statement. When it is used for setting route information attribute, it sets the route metric value of route information as 120.

[SW7700-route-policy] apply cost 120

6.5.4. apply cost-type

Syntax apply cost-type [ internal | external ] undo apply cost-type

View

Route policy View

Parameter

internal: Use the cost type of IGP as MED value of BGP to advertise route to EBGP peer.

external: external cost type of IS-IS.

Description

Using the apply cost-type command, you can configure the route cost type of route information. This command is one attribute apply sub-statements of Route-policy. Using the undo apply cost-type command, you can cancel the apply sub-statement.

By default, route cost type is not set.

Example

# Set the cost type of IGP as MED value of BGP to advertise route to EBGP peer.

[SW7700-route-policy] apply cost-type internal

6.5.5. apply ip next-hop

Syntax

apply ip next-hop ip-address

undo apply ip next-hop ip-address

View

Route policy view

136

R O U T I N G P R O T O C O L

Parameter

ip-address: The next-hop address. And two next-hop addresses can be specified at most.

Description

Using the apply ip next-hop command, you can configure the next hop address of route information. This command is one attribute apply sub-statements of Route-policy. Using the undo apply ip next-hop command, you can cancel the apply sub-statement.

By default, no apply sub-statement is defined.

When it is used for setting route information attribute, it sets the next hop address area of route information passing filtration.

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-

match cost, if-match tag, route-policy, apply local-preference, apply cost, apply origin and apply tag.

Example

# Set the next hop address of route information as 193.1.1.8 when it is used for setting route information attribute.

[SW7700-route-policy] apply ip next-hop 193.1.1.8

6.5.6. apply local-preference

Syntax

apply local-preference local-preference

undo apply local-preference

View

Route policy view

Parameter

local-preference: New set local preference.

Description

Using the apply local-preference command, you can configure to apply the local preference of route information.

This command is one apply sub-statements of Route-policy attribute set. Using the undo apply local-preference command, you can cancel the apply sub-statement.

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-

match cost, if-match tag, route-policy, apply ip next-hop, apply local-preference, apply origin and apply

tag.

Example

# Apply the local preference level of route information as 130 when this apply sub-statement is used for setting route information attribute. .

137

R O U T I N G P R O T O C O L

[SW7700-route-policy] apply local-preference 130

6.5.7. apply origin

Syntax

apply origin { igp | egp as-number | incomplete }

undo apply origin

View

Route policy view

Parameter

igp: Set the BGP route information source as internal route

egp: Set the BGP route information source as external route

as-number: Specifies AS number of external route.

incomplete: Setting the BGP route information source as unknown source.

Description

Using the apply origin command, which is one of attribute apply sub-statements of Route-policy, you can configure to apply the route source. Using the undo apply origin command, you can cancel the apply substatement.

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-

match cost, if-match tag, route-policy, apply ip next-hop, apply local-preference, apply cost and apply

tag.

Example

# Define one apply sub-statement. When it is used for setting route information attribute, it sets the route source of BGP route information as

igp.

[SW7700-route-policy] apply origin igp

6.5.8. apply tag

Syntax

apply tag value

undo apply tag

View

Route policy view

Parameter

value: Specifies the tag value of route information.

138

R O U T I N G P R O T O C O L

Description

Using the apply tag command, you can configure to set the tag area of OSPF route information. This command is one of attribute apply sub-statements of Route-policy. Using the undo apply tag command, you can cancel the apply sub-statement.

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-

match cost, if-match tag, route-policy, apply ip next-hop, apply local-preference, apply cost and apply

origin.

Example

# Define one apply sub-statement. When it is used for setting route information attribute, it sets the tag area of route information as 100.

[SW7700-route-policy] apply tag 100

6.5.9. display ip ip-prefix

Syntax

display ip ip-prefix [ ip-prefix-name ]

View

All views

Parameter

ip-prefix-name: Specifies displayed address prefix list name.

Description

Using the display ip ip-prefix command, you can view the address prefix list.

For the related commands, see ip ip-prefix.

Example

# Display the information of the address prefix list named as p1.

<SW7700> display ip ip-prefix p1 ip-prefix p1 index 10: permit 192.168.10.10/16 greater-equal 17 less-equal 18

6.5.10. display route-policy

Syntax

display route-policy [ route-policy-name ]

139

R O U T I N G P R O T O C O L

View

All views

Parameter

route-policy-name: Specifies displayed Route-policy name.

Description

Using the display route-policy command, you can view the configured Route-policy

For the related commands, see route-policy.

Example

# Display the information of Route-policy named as policy1.

<SW7700> display route-policy policy1

Route-policy : policy1

Permit 10 : if-match (prefixlist) p1

apply cost 100

matched : 0 denied : 0

6.5.11. filter-policy export

Syntax

filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

undo filter-policy { acl-number | ip-prefix ip-prefix-name } export [ protocol ]

View

Routing protocol view

Parameter

acl-number: Number of the access control list used for matching the destination address field of the routing information.

ip-prefix-name: Address prefix list used for matching the routing information destination address field.

protocol: The routing information of which kind of route protocol to be filtered.

Description

Using the filter-policy export command, you can configure to set the filtering conditions of the routing information advertised by a certain type of routing protocols. Using the undo filter-policy export command, you can cancel the filtering conditions set.

By default, the advertised routing information is not filtered.

140

R O U T I N G P R O T O C O L

In some cases, it may be required that only the routing information meeting some conditions can be advertised.

Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be advertised.

For the related commands, see filter-policy import.

Example

# Define the filtering rules for advertising the routing information of RIP. Only the routing information passing the filtering of address prefix list p1 will be advertised by RIP.

[SW7700-rip] filter-policy ip-prefix p1 export

6.5.12. filter-policy import

Syntax

filter-policy gateway ip-prefix-name import

undo filter-policy gateway ip-prefix-name import

filter-policy { acl-number | ip-prefix ip-prefix-name } import

undo filter-policy { acl-number | ip-prefix ip-prefix-name } import

View

Routing protocol view

Parameter

acl-number: The access control list number used for matching the destination address field of the routing information.

ip-prefix ip-prefix-name: The prefix address list name. Its matching object is the destination address field of the routing information.

gateway ip-prefix-name: The prefix address list name of the neighbor router address. Its matching object is the routing information advertised by the specified neighbor router.

Description

Using the filter-policy gateway import command, you can filter the received routing information advertised by a specified router. Using the undo filter-policy gateway import command, you can cancel the setting of the filtering condition.

Using the filter-policy import command, you can set the condition for filtering the routing information. Using the

undo filter-policy import command, you can cancel the setting of filter condition

By default, the received routing information is not filtered.

In some cases, it may be required that only the routing information meeting some conditions can be received.

Then, the filter-policy command can be used to set the filtering conditions for the routing information to be advertised. Only the routing information passing the filtration can be received.

For the related commands, see filter-policy export.

141

R O U T I N G P R O T O C O L

Example

# Define the filtering rule for receiving routing information of RIP. Only the routing information filtered through the address prefix list p1 can be received by RIP.

[SW7700-rip] filter-policy ip-prefix p1 import

6.5.13. if-match { acl | ip-prefix }

Syntax

if-match { acl acl-number | ip-prefix ip-prefix-name }

undo if-match [ acl acl-number | ip-prefix ip-prefix-name ]

View

Route policy view

Parameter

acl-number: Specify the number of the access control list used for filtration

ip-prefix-name: Specify the prefix address list used for filtration

Description

Using the if-match { acl | ip-prefix } command, you can configure the IP address range to match the Routepolicy. Using the undo if-match { acl | ip-prefix } command, you can cancel the setting of the match rule.

Filtration is performed by quoting an ACL or a prefix address list.

For the related commands, see if-match interface, if-match ip next-hop, if-match cost, if-match tag, route-

policy, apply ip next-hop, apply cost, apply local-preference, apply origin and apply tag.

Example

# Define one if-match sub-statement. When the sub-statement is used for filtering route information, the route information filtered by route destination address through address prefix list p1 is enable to pass the match substatement.

[SW7700-route-policy] if-match ip-prefix p1

6.5.14. if-match as-path

Syntax

if-match as-path acl-number

undo if-match as-path

View

Route policy view

142

R O U T I N G P R O T O C O L

Parameter

acl-number: AS path list number, ranging from 1 to 199.

Description

Using the if-match as-path command, you can configure the matched AS path list number of Route-policy.

Using the undo if-match as-path command, you can delete the matched path list number.

By default, AS path list number is not matched.

Example

# An as-path numbered as 2 is defined first, allowing the routing information of AS 100 and 200. Then the routepolicy named test is defined. The node No.10 of this route-policy defines a match sub-statement, which quotes the definition of as-path.

[SW7700] ip as-path acl 2 permit 100:200

[SW7700] route-policy test permit node 10

[SW7700-route-policy] if-match as-path 2

6.5.15. if-match community

Syntax

if-match community { { standard-community-number [ whole-match ] } | extended-community-number }

undo if-match community

View

Route policy view

Parameter

standard-community-list-number: Standard community list number, ranging from 1 to 99.

extended-community-list-number: Extended community list number, ranging from 100 to 199.

whole-match: Fully matching.

Description

Using the if-match community command, you can configure the community list number to be marched in

Route-policy. Using the undo if-match community command, you can cancel the configuration of the matched community list number.

One of the match sub-statements of route-policy is used to filter BGP routing information. The match condition is specified according to the community attributes of the routing information.

For the related commands, see route-policy, ip community-list.

143

R O U T I N G P R O T O C O L

Example

# A community-list numbered as 1 is defined first, allowing the autonomous system number to contain the routing information of 100 and 200. Then, the route-policy named test is defined. The node No.10 of the route-policy defines a match sub-statement, which quotes the definition of the community-list.

[SW7700] ip community-list 1 permit 100:200

[SW7700] route-policy test permit node 10

[SW7700-route-policy] if-match community 1

6.5.16. if-match cost

Syntax

if-match cost value

undo if-match cost

View

Route policy view

Parameter

value: Specifies the required route metric value, ranging from 0 to 4294967295.

Description

Using the if-match cost command, you can configure one of the match rules of route-policy to match the cost of the routing information. Using the undo if-match cost command, you can cancel the configuration of the match rule.

By default, no match sub-statement is defined.

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-

match tag, route-policy, apply ip next-hop, apply local-preference, apply cost, apply origin, apply tag.

Example

# A match sub-statement is defined, which allows the routing information with routing cost 8 to pass this match sub-statement.

[SW7700-route-policy] if-match cost 8

6.5.17. if-match interface

Syntax

if-match interface { interface-name | interface-type interface-number }

undo if-match interface

144

R O U T I N G P R O T O C O L

View

Route policy view

Parameter

interface-type: Specify interface type.

interface-number: Specify interface number.

interface-name: Specify interface name.

Description

Using the if-match interface command, you can configure to match the route whose next hop is designated interface. Using the undo if-match interface command, you can cancel the setting of matching condition.

By default, no match sub-statement is defined.

It matches the corresponding interface of route next hop when filtering route.

For the related commands, see if-match acl, if-match ip-prefix, if-match ip next-hop, if-match cost, if-match

tag, route-policy, apply ip next-hop, apply cost, apply local-preference, apply origin and apply tag.

Example

# Define one match sub-statement to match the route whose next hop interface is Vlan-interface 1

[SW7700-route-policy] if-match interface Vlan-interface 1

6.5.18. if-match ip next-hop

Syntax

if-match ip next-hop { acl acl-number | ip-prefix ip-prefix-name }

undo if-match ip next-hop [ ip-prefix ]

View

Route policy view

Parameter

acl-number: Specify the number of the access control list used for filtration. The range is 1 to 99.

ip-prefix-name: Specify the name of the prefix address list used for filtration.

Description

Using the if-match ip next-hop command, you can configure one of the match rules of route-policy on the next hop address of the routing information. Using the undo if-match ip next-hop command, you can cancel the setting of matching condition.

Filtration is performed by quoting an ACL or a address prefix list.

145

R O U T I N G P R O T O C O L

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match cost, if-match

tag, route-policy, apply ip next-hop, apply cost, apply local-preference, apply origin and apply tag.

Example

# Define a match sub-statement. It permits the routing information, whose route next hop address passes the filtration of the prefix address list p1, to pass this match sub-statement.

[SW7700-route-policy] if-match ip next-hop ip-prefix p1

6.5.19. if-match tag

Syntax

if-match tag value

undo if-match tag

View

Route policy view

Parameter

value: Specify the value in tag field of OSPF route information.

Description

Using the if-match tag command, you can configure to match the tag field of OSPF route information. Using the

undo if-match tag command, you can cancel the existing matching rules.

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-

match cost, route-policy, apply ip next-hop, apply cost, apply local-preference, apply origin and apply tag.

Example

# Define one match sub-statement and enable the OSPF route information whose value of tag is 8 to pass the match sub-statement.

[SW7700-route-policy] if-match tag 8

6.5.20. ip ip-prefix

Syntax

ip ip-prefix ip-prefix-name [ index index-number ] { permit | deny } network len [ greater-equal greater-equal | less-

equal less-equal ]

undo ip ip-prefix ip-prefix-name [ index index-number | permit | deny ]

View

System view

146

R O U T I N G P R O T O C O L

Parameter

ip-prefix-name: The specified address prefix list name. It identifies one address prefix list uniquely.

index-number: Identify an item in the prefix address list. The item with smaller index-number will be tested first.

permit: Specify the match mode of the defined address prefix list items as permit mode.

deny: Specify the match mode of the defined address prefix list items as deny mode.

network: The IP address prefix range (IP address). If it is 0.0.0.0 0, all the IP addresses are matched.

len: The IP address prefix range (mask length). If it is 0.0.0.0 0, all the IP addresses are matched.

greater-equal, less-equal: The address prefix range [greater-equal, less-equal] to be matched after the address prefix network len has been matched. The meaning of greater-equal is "larger than or equal to" , and the meaning of

less-equal is "less than or equal to". The range is len <= greater-equal <= less-equal <= 32. When only greater-

equal is used, it denotes the prefix range [greater-equal, 32]. When only less-equal is used, it denotes the prefix range [len, less-equal].

Description

Using the ip ip-prefix command, you can configure an address prefix list or one of its items, which can also be deleted with the undo ip ip-prefix command.

By default, there’s no address prefix list.

The address prefix list is used for IP address filtering. An address prefix list may contain several items, and each item specifies one address prefix range. The inter-item filtering relation is "OR", i.e. passing an item means passing the filtering of this address prefix list. Not passing the filtering of any item means not passing the filtration of this prefix address list.

The address prefix range may contain two parts, which are determined by len and [greater-equal, less-equal] respectively. If the prefix ranges of these two parts are both specified, the IP to be filtered must match the prefix ranges of these two parts.

If you specify network len as 0.0.0.0 0, it only matches the default route.

Example

# The prefix address list of this address indicates to match the bits 1 to 8 and the bits 17 to 18 for filtering the IP address with the bits 1 to 8 and the bits 17 to 18 of the specified IP network segment 10.0.192.0.

[SW7700] ip ip-prefix p1 permit 10.0.192.0 8 greater-equal 17 less-equal 18

6.5.21. route-policy

Syntax

route-policy route-policy-name { permit | deny } node { node-number }

undo route-policy route-policy-name [ permit | deny | node node-number ]

View

System view

147

R O U T I N G P R O T O C O L

Parameter

route-policy-name: Specifies the Route-policy name to identify one Route-policy uniquely.

permit: Specify the match mode of the defined Route-policy node as permit mode.

deny: Specifies the match mode of the defined Route-policy node as deny mode.

node: Node of the route policy.

node-number: Index of the node in the route-policy. When this route-policy is used for routing information filtration, the node with smaller node-number will be tested first.

Description

Using the route-policy command, you can create and enter the Route-policy view. Using the undo route-policy command, you can delete the established Route-policy.

By default, no Route-policy is defined.

The route-policy command is used for route information filtration or route policy. One Route-policy comprises some nodes and each node comprises some match and apply sub-statements. The match sub-statement defines the match rules of this node and the apply sub-statement defines the actions after passing the filtration of this node. The filtering relationship between the match sub-statements of the node is “and”, i.e., all match substatements that meet the node. The filtering relation between Route-policy nodes is "OR", i.e. passing the filtering of one node means passing the filtering of this Route-policy. If the information doesn’t pass the filtration of any nodes, it cannot pass the filtration of this Route-policy.

For the related commands, see if-match interface, if-match acl, if-match ip-prefix, if-match ip next-hop, if-

match cost, if-match tag, apply ip next-hop, apply local-preference, apply cost, apply origin and apply

tag.

Example

# Configured one Route-policy policy1, whose node number is 10 and if-match mode is permit, and enter Route policy view.

[SW7700] route-policy policy1 permit node 10

[SW7700-route-policy]

148

Chapter 7 Multicast Protocol

7.1. GMRP Configuration Commands

7.1.1. debugging gmrp event

Syntax debugging gmrp event undo debugging gmrp event

View

User view

Parameter

None

Description

Using the debugging gmrp event command, you can enable GMRP debugging. Using the undo debugging gmrp event you can disable GMRP debugging.

Example

# Enable GMRP debugging.

<SW7700> debugging gmrp debugging

7.1.2. display gmrp statistics

Syntax

display gmrp statistics [

interface interface-list ]

View

All views

Parameter

interface interface-list: Specifies Ethernet port list, expressed as interface-list = { { interface_type interface_num | interface_name } [ to {

interface_type interface_num | interface_name } ]}&<1-10>. For meanings and value ranges of interface-type, interface-number and interface-

name, refer to the syntax description in the Port Configuration of this manual.

Description

Using the display gmrp statistics command, you can display the statistics information about GMRP.

149

M U L T I C A S T P R O T O C O L

This command is used for displaying the statistics information about GMRP, including the list of ports with GMRP enabled,

GMRP status information, GMRP failed registrations and last origin of GMRP packet data unit (PDU).

Example

# Display the statistics information about GMRP on Ethernet 1/0/1.

<SW7700> display gmrp statistics interface Ethernet 1/0/1

GMRP statistics on port Ethernet1/0/1

Gmrp Status : Enabled

Gmrp Failed Registrations

Gmrp Last Pdu Origin

: 0

: 0000-0000-0000

7.1.3. display gmrp status

Syntax display gmrp status

View

All views

Parameter

None

Description

Using the display gmrp status command, you can display the status of global GMRP.

This command can be used for displaying the enabled/disabled status of global GMRP.

Example

# Display the status of global GMRP.

<SW7700> display gmrp status

GMRP is enabled

Global GMRP status information

Field

GMRP is enabled

7.1.4. gmrp

Description

GMRP is enabled globally.

Syntax gmrp undo gmrp

View

System view/Ethernet port view

Parameter

None

150

M U L T I C A S T P R O T O C O L

Description

Using the gmrp command, you can enable global GMRP or enable GMRP on a port. Using the undo gmrp command, you can set the GMRP back to the default setting, namely disabled.

By default, GMRP is disabled

Executed in system view, this command will enable the global GMRP. After performing this command in Ethernet port view,

GMRP will be enabled on a port.

Before enabling GMRP on a port, you shall enable GMRP globally.

For the related command, see display gmrp status, display gmrp statistics.

Example

# Enable GMRP globally.

[SW7700] gmrp

7.2. Multicast Common Configuration Commands

7.2.1. debugging multicast forwarding

Syntax debugging multicast forwarding undo debugging multicast forwarding

View

User view

Parameter

None

Description

Using the debugging multicast forwarding command, you can enable multicast packet forwarding debugging functions. Using the undo debugging multicast forwarding command, you can disable the debugging functions.

By default, the debugging function is disabled.

7.2.2. debugging multicast kernel-routing

Syntax debugging multicast kernel-routing undo debugging multicast kernel-routing

View

User view

Parameter

None

151

M U L T I C A S T P R O T O C O L

Description

Using the debugging multicast kernel-routing command, you can enable multicast kernel routing debugging functions. Using the undo debugging multicast kernel-routing command, you can disable the debugging functions.

7.2.3. debugging multicast status-forwarding

Syntax debugging multicast status-forwarding undo debugging multicast status-forwarding

View

User view

Parameter

None

Description

Using the debugging multicast status-forwarding command, you can enable multicast forwarding status debugging functions. Using the undo debugging multicast status-forwarding command, you can disable the debugging functions.

7.2.4. display multicast forwarding-table

Syntax

display multicast forwarding-table [ group-address [ mask { mask | mask-length } ] | source-address [ mask { mask

| mask-length } ] | incoming-interface { interface-type interface-number | register } ] *

View

All views

Parameter

group-address: Multicast group address, used to specify a multicast group, ranging from 224.0.0.0 to

239.255.255.255.

source-address: Unicast IP address of the multicast source.

incoming-interface: Incoming interface of the multicast forwarding table.

register: Register interface of PIM-SM.

Description

Using the display multicast forwarding-table command, you can view the information of IP multicast forwarding table.

For the related command, see display multicast routing-table.

Example

# View the multicast forwarding table information.

<SW7700> display multicast forwarding-table

152

M U L T I C A S T P R O T O C O L

7.2.5. display multicast routing-table

Syntax

display multicast routing-table [ group-address [ mask { mask | mask-length } ] | source-address [ mask { mask |

mask-length } ] | incoming-interface { interface-type interface-number | register } ]*

View

All views

Parameter

group-address: Multicast group address, used to specify a multicast group and display the corresponding routing table information of the group. The value ranges from 224.0.0.0 to 239.255.255.255.

source-address: Unicast IP address of the multicast source.

incoming-interface: Incoming interface of the multicast route entry.

register: Register interface of PIM-SM.

Description

Using the display multicast routing-table command, you can view the information of IP multicast routing table.

This command displays the multicast routing table information, while the display multicast forwarding-table command displays the multicast forwarding table information.

Example

# View the route entry information corresponding to multicast group 225.1.1.1 in the multicast routing table.

<SW7700> display multicast routing-table 225.1.1.1

7.2.6. display multicast rpf-info

Syntax

display multicast rpf-info source-address

View

All views

Parameter

source-address: IP address of multicast source.

Description

Using the display multicast rpf-info command, you can view the Reverse Path Forwarding (RPF) routing information for specified multicast source.

Example

# View RPF routing information for multicast source 1.1.1.1.

<SW7700> display multicast rpf-info 1.1.1.1

RPF information for 1.1.1.1

RPF interface: Ethernet1/0/1/

RPF neighbor: 8.8.8.8

Referenced route/mask: 0.0.0.0/0

Referenced route type: unicast (STATIC)

RPF route selecting rule: preference-preferred/longest-match

153

M U L T I C A S T P R O T O C O L

7.2.7. display multicast vif

Syntax display multicast vif

View

All views

Parameter

None

Description

Using the display multicast vif command, you can view the virtual interface information for multicast.

Example

# View virtual interface information for multicast.

<SW7700> display multicast vif

7.2.8. multicast minimum-ttl

Syntax

multicast minimum-ttl ttl-value

undo multicast minimum-ttl

View

Interface view

Parameter

ttl-value: Minimum TTL value to be set ranging from 0 to 255.

Description

Using the multicast minimum-ttl command, you can configure the minimum TTL value for multicast forwarding. Using the undo multicast minimum-ttl command, you can remove the minimum TTL value configured.

By default, no minimum TTL value for multicast forwarding is configured.

7.2.9. multicast packet-boundary

Syntax

multicast packet-boundary acl-number

undo multicast packet-boundary

View

Interface view

Parameter

acl-number: Number of the basic or advanced access control list ranging form 1 to 199.

154

M U L T I C A S T P R O T O C O L

Description

Using the multicast packet-boundary command, you can configure a multicast forwarding boundary. Using the

undo multicast packet-boundary command, you can disable the multicast forwarding boundary configured.

By default, no multicast forwarding boundary is configured.

You can set boundary conditions for multicast packets on an interface via basic or advanced Access Control List

(ACL). Packets denied by the ACL will be discarded. The source address of a multicast address can be filtered through the basic ACL. Both the source address and the destination address (source multicast address) of a multicast packet can be filtered through the advanced ACL.

7.2.10. multicast routing-enable

Syntax multicast routing-enable undo multicast routing-enable

View

System view

Parameter

None

Description

Using the multicast routing-enable command, you can enable IP multicast routing. Using the undo multicast

routing-enable command, you can disable IP multicast routing.

By default, IP multicast routing is disabled.

The system will not forward any multicast packet when IP multicast routing is disabled.

For the related commands, see pim dm and pim sm.

Example

# Enable IP multicast routing.

<SW7700> system-view

[SW7700] multicast routing-enable

7.3. IGMP Configuration Commands

7.3.1. debugging igmp

Syntax debugging igmp { all | event | host | packet | timer } undo debugging igmp { all | event | host | packet | timer }

View

User view

Parameter

all: all the debugging information of IGMP.

event: debugging information of IGMP event.

155

M U L T I C A S T P R O T O C O L

host: debugging information of IGMP host.

packet: debugging information of IGMP packets.

timer: debugging information of IGMP timers.

Description

Using the debugging igmp command, you can enable IGMP debugging functions. Using the undo debugging

igmp command, you can disable the debugging functions.

By default, IGMP debugging functions are disabled.

7.3.2. display igmp group

Syntax

display igmp group [ group-address | interface interface-type interface-number ]

View

All views

Parameter

group-address: Address of the multicast group.

interface-type interface-number: Interface type and interface number of the router, used to specify the specific interface.

Description

Using the display igmp group command, you can view the member information of the IGMP multicast group.

You can specify to show the information of a group or the member information of the multicast group on an interface. The information displayed contains the multicast groups, which are joined by the downstream hosts through IGMP or through command line.

For the related command, see igmp host-join.

Example

<SW7700> display igmp group

VLAN-interface1: Total 2 IGMP Groups reported:

Group Address Uptime Expires Last Reporter Port List

224.2.178.130 00:00:14 00:02:50 10.110.91.187 Ethernet1/0/4

224.2.181.90 00:00:46 00:02:50 10.110.91.187

Ethernet1/0/4

VLAN-interface2: No multicast-group joined

Output description of the display ip igrmp groups command

Field

Group address

Port list

Uptime

Expires

Last Reporter

7.3.3. display igmp interface

Description

Multicast group address

The port list of the group.

Time passed since multicast group is discovered (hh: mm: ss).

Specifies when the member will be removed from the multicast group (hh: mm: ss).

The last host reporting to join in the multicast group

Syntax

display igmp interface [ interface-type interface-number ]

156

M U L T I C A S T P R O T O C O L

View

All views

Parameter

interface-type: Specifies interface type.

interface-number: Specifies interface number.

Description

Using the display igmp interface command, you can display the configuration information about the multicast on the interface.

If the interface-type and interface-number are not specified, this command will display the configuration information of all the interfaces.

For the related command, see igmp group-policy, igmp timer query.

Example

<SW7700> display igmp interface

VLAN-interface1:

IGMP is enabled on interface

Current IGMP version is 2

IGMP query interval is 60 seconds

IGMP querier timeout is 120 seconds

IGMP max query response time is 10 seconds

IGMP querying router is 10.110.91.129

No IGMP group reported

7.3.4. display ip igmp port

Syntax

display ip igmp port port-number [ vlan vlan-id ]

View

All views

Parameter

port port-number: Specifies IGMP port number.

vlan vlan-id: Specifies the native VLAN ID of the port.

Description

Using the display ip igmp port command, you can display the configuration information about the multicast on the port.

If no parameter is specified, this command displays the information of all the ports. The IGMP configuration information of all the ports will be displayed.

For the related command, see igmp host-join, igmp group-policy.

Example

<SW7700> Display ip igmp port Ethernet 1/0/4

Ethernet1/0/4:

VLAN-interface1:

IGMP groups joined:

224.2.178.130,

157

M U L T I C A S T P R O T O C O L

7.3.5. igmp group-policy

Syntax

igmp group-policy acl-number [ 1 | 2 ] [ port port-list ]

undo igmp group-policy [ port portlist ]

View

VLAN interface view

Parameter

access-list-number: Specifies a standard IP ACL number, ranging from 1 to 99. Only the hosts in the range specified by this parameter can join the multicast groups. _

Configures to apply IGMP Version 1.

Configures to apply IGMP Version 2.

port ports-list: Specifies the Ethernet port list, expressed as ports-list = { port-num [ to port-num ] } & < 1-10 >. In which, port-num specifies a signal Ethernet port, which is expressed as port-num = { interface-type interfacenumber | interface-name }. For meanings and value ranges of interface-type, interface-number and interfacename, refer to the syntax description in the Port Configuration of this manual.

Description

Using the igmp group-policy command, you can permit the Ethernet switch to join a specified multicast group.

Using the undo igmp group-policy command, you can cancel the limit to the multicast groups which a switch can join.

By default, no limit is set to restrict the multicast groups which a host can join.

The Ethernet switch transmits host-query message to learn which host belongs to the multicast group connected to it. The subsequent packets arrived at the Ethernet switch will be transmitted to these multicast group members.

You can decide on each port which multicast group the host on the subnet connected to the interface can join.

For the related command, see igmp host-join.

Example

# Configure the access-list 5.

[SW7700] acl number 5

[SW7700-acl-basic-5] rule permit source 225.0.0.0 0.255.255.255

# Configure that only the hosts contained in the access-list 5 connected to the VLAN-interface10 can be added to the multicast group, which is configured to use IGMP version 2.

[SW7700-vlan-interface10] igmp group-policy 5 2

7.3.6. igmp host-join

Syntax

igmp host-join group-address port port-list

undo igmp host-join group-address port port-list

View

VLAN interface view

Parameter

group-address: Specifies the address of the multicast group to be joined.

158

M U L T I C A S T P R O T O C O L

port ports-list: Specifies the Ethernet port list, expressed in port-list = { port-num [ to port-num ] }. In which, port-num specifies a single Ethernet port, which is expressed as port-num = { port-type port -number | port -name }. For the meanings and value ranges of port-type, port-number and port-name, refer to the syntax description in the

Port Configuration of this manual.

Description

Using the igmp host-join command, you can add an Ethernet switch to a multicast group. Using the undo

igmp host-join command, you can remove the Ethernet switch from a multicast group.

After an Ethernet switch is configured as a member of a multicast group, it can respond to the multicast packets.

In the case that all the Ethernet switches the user manages belong to a multicast group, when you ping the group, all those switches will respond to the ping packet. Adding the Ethernet switches to a multicast group is an efficient way to manage and debug them.

For the related command, see igmp group-policy.

Example

# Add Ethernet 1/0/1 of VLAN-interface10 to the multicast group at 225.0.0.1.

[SW7700-vlan-interface10] ip igmp join 225.0.0.1

[SW7700-vlan-interface10] igmp host-join 225.0.0.1 port Ethernet 1/0/1

7.3.7. igmp max-response-time

Syntax

igmp max-response-time seconds

undo igmp max-response-time

View

VLAN interface view

Parameter

seconds: Specifies the maximum response time carried in host-query message, ranging from 1 to 25 seconds; By default, 10.

Description

Using the igmp max-response-time command, you can set the maximum response time carried in the hostquery message. Using the undo igmp max-response-time command, you can restore the default maximum response time.

This command can be used on condition that IGMP Version 2 is run.

This command sets how long a host has to respond to the host-query message. A shorter response time can help the Ethernet switch know the group members fast. If a host has not responded to the host-query message quickly enough, it may be removed from the multicast group, although the user does not expect so. Therefore you need to make sure that the maximum response time is longer than the period during which the host has to respond to the host-query message.

For the related command, see pim timer hello, display igmp group.

Example

# Set the maximum response time carried in host-query message to 8 seconds.

[SW7700-vlan-interface10] igmp max-response-time 8

159

M U L T I C A S T P R O T O C O L

7.3.8. igmp timer other-querier-present

Syntax

igmp timer other-querier-present seconds

undo igmp timer other-querier-present

View

VLAN interface view

Parameter

seconds: Specifies the subnet Querier timeout, ranging from 60 to 300 seconds; By default, 120.

Description

Using the igmp timer other-querier-present command, you can configure the subnet Querier timeout (the interval from a Querier stops transmitting IGMP query packet until the next Querier replaces it. Using the undo

igmp timer other-querier-present command, you can restore the default timeout setting.

This command takes effect in the network environment running IGMP Version 2 only.

By default, the subnet Querier timeouts is twice as long as the query-interval specified with the igmp timer query command. If the Ethernet switch has not received the IGMP query packet from the Querier after it times out, the switch will consider itself as the Querier.

For the related command, see igmp timer query.

Example

# Set querier to expire after 300 seconds.

[SW7700-vlan-interface10] igmp timer other-querier-present 300

7.3.9. igmp timer query

Syntax

igmp timer query seconds

undo igmp timer query

View

Interface view

Parameter

seconds: Interval at which a router transmits IGMP query messages in second in the range from 1 to 18000. By default, the value is 60 seconds.

Description

Using the igmp timer query command, you can configure the interval at which a router interface sends IGMP query messages. Using the undo igmp timer query command, you can restore the default interval value.

A multicast router periodically sends out IGMP query messages to attached segments to find hosts that belong to different multicast groups. The query interval can be modified according to the practical conditions of the network.

For the related command, see igmp timer other-querier-present.

160

M U L T I C A S T P R O T O C O L

Example

# Configure to transmit the host-query message every 60 seconds via VLAN-interface2.

[SW7700-vlan-interface2] igmp timer query 60

7.3.10. igmp version

Syntax igmp version { 1 | 2 } undo igmp version

View

VLAN interface view

Parameter

Configures to run IGMP Version 1.

Configures to run IGMP Version 2; .By default, IGMP Version 2 is run.

Description

Using the igmp version command, you can configure the IGMP version run on the switch. Using the undo

igmp version command, you can restore the default version.

All routers on a subnet must support the same version of IGMP. After detecting the presence of IGMP Version

1 system, a router cannot automatically switch to Version 1.

Example

# Run IGMP Version 1 on VLAN-interface10.

[SW7700-vlan-interface10] igmp version 1

7.4. PIM Configuration Commands

7.4.1. register-policy

Syntax

register-policy acl-number

undo register-policy

View

PIM view

Parameter

al-number: Number of IP advanced ACL, defining the rule of filtering the source and group addresses. The value ranges from 100 to 199.

Description

Using the register-policy command, you can configure a RP to filter the register messages sent by the DR in the PIM-SM network and to accept the specified messages only. Using the undo register-policy command, you can remove the configured message filtering.

161

M U L T I C A S T P R O T O C O L

Example

# If the local device is the RP in the network, using the following command can only accept multicast message register of the source sending multicast address in the range of 225.1.0.0/16 on network segment 10.10.0.0/16.

<SW7700> system-view

[SW7700] acl number 110

[SW7700-acl-adv-110] rule permit ip source 10.10.0.0 255.255.0.0 destination 225.1.0.0 255.255.0.0

[SW7700-acl-adv-110] quit

[SW7700] multicast routing-enable

[SW7700] pim

[SW7700-pim] register-policy 110

7.4.2. c-bsr

Syntax

c-bsr interface-type interface-number

hash-mask-len [ priority ]

undo c-bsr

View

PIM view

Parameter

interface-type interface-number: Interface type and interface number of a router. The candidate BSR is configured on the interface. PIM-

SM must be enabled on the interface first.

hash-mask-len: Length of the mask. The value ranges from 0 to 32.

priority: Priority of the candidate BSR. The larger the value of the priority, the higher the priority of the BSR. The value ranges from

0 to 255. The default value is 0.

Description

Using the c-bsr command, you can configure a candidate BSR. Using the undo c-bsr command, you can remove the candidate

BSR configured.

By default, no candidate BSR is set.

When using this command to configure the candidate BSR, the larger bandwidth should be guaranteed since a great amount of information will be exchanged between BSR and other devices in the PIM domain.

For the related command, see pim sm.

Example

# Configure the Ethernet switch as C-BSR with priority 2 (and the C-BSR address is designated as the IP address of VLANinterface10).

[SW7700] pim

[SW7700-pim] c-bsr vlan-interface 10 24 2

7.4.3. c-rp

Syntax

c-rp interface-type interface-number [ group-policy acl-number ]

162

M U L T I C A S T P R O T O C O L

undo c-rp interface-type interface-number

View

PIM view

Parameter

interface-type interface-number: Specified interface with the IP address advertised as a candidate RP address.

acl-number: Number of the basic ACL that defines a group range, which is the service range of the advertised RP. The value ranges from 1 to 99.

Description

Using the c-rp command, you can configure the router to advertise itself as a candidate RP. Using the undo c-rp command, you can remove the configuration.

By default, no candidate RP is configured.

When configuring the candidate RP, a relatively large bandwidth should be reserved for the router and other devices in the PIM domain.

For the related command, see c-bsr.

Example

# Configure the Ethernet switch to advertise the BSR that he is the C-RP in the PIM. The standard access list 5 defines the groups related to the RP. The address of C-RP is designated as the IP address of VLAN-interface10.

[SW7700] acl number 5

[SW7700-acl-basic-5] rule permit source 225.0.0.0 0.255.255.255

[SW7700] pim

[SW7700-pim] c-rp vlan-interface 10 group-list 5

7.4.4. debugging pim common

Syntax debugging pim common { all | event | packet | timer } undo debugging pim common { all | event | packet | timer }

View

User view

Parameter

all: all the common debugging information of PIM.

event: debugging information of common PIM event.

packet: debugging information of PIM hello packet.

timer: debugging information of common PIM timer.

Description

Using the debugging pim common command, you can enable common PIM debugging functions. Using the undo debugging

pim common command, you can disable the debugging functions.

By default, common PIM debugging functions are disabled.

163

M U L T I C A S T P R O T O C O L

7.4.5. debugging pim dm

Syntax debugging pim dm { all | mrt | timer | warning | { recv | send } { all | assert | graft | graft-ack | join | prune } } undo debugging pim dm { all | mrt | timer | warning | { recv | send } { all | assert | graft | graft-ack | join | prune }

}

View

User view

Parameter

all: all the debugging information of PIM-DM.

mrt: debugging information of PIM-DM multicast routing table.

timer: debugging information of PIM-DM timer.

warning: debugging information of PIM-DM warning message.

recv: debugging information of PIM-DM receiving packets.

send: debugging information of PIM-DM sending packets.

Description

Using the debugging pim dm command, you can enable PIM-DM debugging functions. Using the undo debugging pim dm command, you can disable the debugging functions.

By default, PIM-DM debugging functions are disabled.

7.4.6. debugging pim sm

Syntax debugging pim sm { all | mbr | register-proxy | mrt | timer | warning | { recv | send } { assert | graft | graft-ack | join | prune } } undo debugging pim sm { all | mbr | register-proxy | mrt | timer | warning | { recv | send } { assert | graft | graftack | join | prune } }

View

User view

Parameter

mbr: debugging information of PIM-SM multicast border router event.

register-proxy: debugging information of PIM-SM IO registry proxy.

mrt: debugging information of PIM-SM multicast routing table.

timer: debugging information of PIM-SM timer.

warning: debugging information of PIM-SM warning message.

recv: debugging information of PIM-SM receiving packets.

send: debugging information of PIM-SM sending packets.

assert | graft | graft-ack | join | prune: packets type.

164

M U L T I C A S T P R O T O C O L

Description

Using the debugging pim sm command, you can enable PIM-SM debugging functions. Using the undo debugging pim sm command, you can disable the debugging functions.

By default, PIM-SM debugging functions are disabled.

7.4.7. display pim bsr

Syntax display pim bsr

View

All views

Parameter

None

Description

Using the display pim bsr command, you can display the information about BSR.

This command is used for displaying the information about BSR, including the information about the elected BSR and the information advertised by the local RP candidates.

For related commands, see c-bsr and c-rp.

Example

<SW7700> display pim bsr

Current BSR Address: 192.168.1.1

Priority: 0

Expires: 1:52

7.4.8. display pim interface

Syntax

display pim interface [ interface-type interface-number ]

View

All views

Parameter

interface-type: Specifies the interface type.

interface-number: Specifies interface number.

Description

Using the display pim interface command, you can display the PIM configuration information about an interface.

If the interface type and number are not specified, the PIM configuration information about all the interfaces will be displayed, otherwise the information about the specified interface will be displayed.

165

M U L T I C A S T P R O T O C O L

Example

<SW7700> display pim interface

Address

8.8.8.8

Interface

VLAN-interface1

192.168.1.1 VLAN-interface2

Ver/Mode Nbr Cnt Query Intvl DR v2/S 1 30 8.8.8.8 v2/S 0 30 192.168.1.1

Output description of the display pim interface command

Field

Mode Interface mode (DM or PM)

Query Intvl Hello packet interval router

Nbr Cnt Number of adjacent routers

7.4.9. display pim neighbor

Description

Syntax

display pim neighbor [ interface interface-type interface-number ]

View

All views

Parameter

interface-type interface-number: Interface type and interface number, used to specify the interface.

Description

Using the display pim neighbor command, you can view the PIM neighbor information.

This command is used for displaying the information about the PIM neighbors discovered by the Ethernet switch interface. When the parameters are configured, only the PIM neighbors of the specified interface will be displayed.

Example

<SW7700> display pim neighbor

Neighbor Address

8.8.8.6

Output description about PIM neighbors

Field

Neighbor Address

Interface

Uptime

Expires

7.4.10. display pim routing-table

Interface Uptime

VLAN-interface1 1637

Description

Neighbor address

Interface where the neighbor has been discovered

Time passed since the multicast group has been discovered

Specifies when the member will be removed from the group

Expires

Syntax

display pim routing-table [ { { *g [ group-address [ mask { mask-length | mask } ] ] | **rp [ rp-address [ mask { mask-length | mask }

] ] } | { group-address [ mask { mask-length | mask } ] | source-address [ mask { mask-length | mask } ] } * } | incoming-interface {

interface-type interface-num | interface-name | null } | { dense-mode | sparse-mode } ] *

166

M U L T I C A S T P R O T O C O L

View

All views

Parameter

**rp: (*, *, RP) route entry.

*g: (*, G) route entry.

group-address: Address of the multicast group.

source-address: IP address of the multicast source.

incoming-interface: Router entry with the specified incoming interface.

Description

Using the display pim routing-table command, you can view the contents of the PIM multicast routing table.

For the related command, see display multicast routing-table.

Example

# View the contents of the PIM multicast routing table on the router.

<SW7700> display pim routing-table

PIMSM Routing Table

Total 0 (*,*,RP), 0 (*,G), 2 (S,G)

(192.168.1.2, 224.2.178.130),

Protocol 0x20: PIMSM, Flag 0x4: SPT

UpTime: 23:59, Timeout after 196 seconds

Upstream interface: VLAN-interface2, RPF neighbor: NULL

Downstream interface list: NULL

(192.168.1.2, 224.2.181.90),

Protocol 0x20: PIMSM, Flag 0x4: SPT

UpTime: 23:59, Timeout after 196 seconds

Upstream interface: VLAN-interface2, RPF neighbor: NULL

Downstream interface list: NULL

Total 2 entries listed

7.4.11. display pim rp-info

Syntax

display pim rp-info [ group-address ]

View

All views

Parameter

group-address: Specify the group address to be showed. If no multicast group is specified, the RP information about all multicast groups will be displayed.

Description

Using the display pim rp-info command, you can view the RP information of multicast group.

In addition, this command can also show the BSR and static RP information.

167

M U L T I C A S T P R O T O C O L

Example

<SW7700> display pim rp-info

PIM-SM RP-SET information:

BSR is: 192.168.1.1

Group/MaskLen: 224.0.0.0/4

RP 192.168.1.1, Version 2 priority: 0 uptime(from last update): 29:11, to expire in: 2:02

7.4.12. pim

Syntax pim undo pim

View

System view

Parameter

None

Description

Using the pim command, you can enter the PIM view. Using the undo pim command, you can clear the configurations in PIM view.

The global parameters of PIM can only be configured in PIM view.

Example

# Enable multicast and enter the PIM view.

<SW7700> system-view

[SW7700] multicast routing-enable

[SW7700] pim

[SW7700-pim]

7.4.13. pim bsr-boundary

Syntax pim bsr-boundary undo pim bsr-boundary

View

Interface view

Parameter

None

168

M U L T I C A S T P R O T O C O L

Description

Using the pim bsr-boundary command, you can configure an interface to be the PIM domain border. Using the undo pim bsr-

boundary command, you can remove the border.

By default, no domain border is set.

You can use this command to set border of bootstraps messages, that is to say, bootstrap messages cannot pass interfaces that are configured with pim bsr-boundary command while other PIM messages can. In this way, the network is divided into different

BSR domains.

It should be noted that this command cannot set up multicast boundaries. It only sets up a PIM domain bootstrap message border.

For the related command, see c-bsr.

Example

# Configure domain border on VLAN-interface10.

[SW7700-vlan-interface10] pim bsr-boundary

7.4.14. pim dm

Syntax pim dm undo pim dm

View

Interface view

Parameter

None

Description

Using the pim dm command, you can enable PIM-DM. Using the undo pim dm command, you can disable PIM-DM.

By default, PIM-DM is disabled.

Once enabled PIM-DM on an interface, PIM-SM cannot be enabled on the same interface and vice versa.

Example

# Enable PIM DM on VLAN-interface10 of the Ethernet switch.

[SW7700] multicast routing-enable

[SW7700-vlan-interface10] pim dm

7.4.15. pim sm

Syntax pim sm undo pim sm

View

Interface view

169

M U L T I C A S T P R O T O C O L

Parameter

None

Description

Using the pim sm command, you can enable the PIM-SM protocol on an interface. Using the undo pim sm command, you can disable the PIM-SM protocol.

By default, PIM-SM is disabled.

Once enabled PIM-SM on an interface, PIM-DM cannot be enabled on the same interface and vice versa.

Example

# Enable PIM-SM on VLAN-interface10.

[SW7700-vlan-interface10] pim sm

7.4.16. pim timer hello

Syntax

pim timer hello seconds

undo pim timer hello

View

Interface view

Parameter

seconds: Interval of sending Hello messages in second ranging from 1 to 18000. By default, the interval value is 30 seconds.

Description

Using the pim timer hello command, you can configure the interval of sending PIM router Hello messages. Using the undo pim

timer hello command, you can restore the default interval value.

Example

# Configure to transmit Hello packet via VLAN-interface10 every 40 seconds.

[SW7700-vlan-interface10] pim timer hello 40

7.4.17. spt-switch-threshold

Syntax

spt-switch-threshold { traffic-rate | infinity } [ group-policy acl-number ]

undo spt-switch-threshold { traffic-rate | infinity } [ group-policy acl-number ]

View

PIM view

Parameter

traffic-rate: Indicate switch rate threshold from RPT to SPT in Kbps. By default, the switch threshold value is 0, i.e., switching starts when the RPT receives the first data packet.

170

M U L T I C A S T P R O T O C O L

infinity: Indicate never to switch to SPT.

acl-number: Number of the IP basic ACL, defining a group of multicast ranges. The value ranges from 1 to 99.

Description

Using the spt-switch-threshold command, you can set the packet rate threshold when the PIM leaf router switches from the

RPT to the SPT. Using the undo spt-switch-threshold command, you can restore the default setting.

Example

# Configure the threshold for switching from RPT to source SPT as 4kbps.

[SW7700] pim

[SW7700-pim] spt-switch-threshold 4

171

Chapter 8 QoS/ACL

8.1. ACL Configuration Command List

8.1.1. acl

Syntax

acl { number acl-number | name acl-name [advanced | basic | interface | link ] } [ match-order { config | auto } ]

undo acl { number acl-number | name acl-name | all }

View

System view

Parameter

number acl-number: Access list number, ranging from:

1 to 99: Basic ACL..

100 to 199: Advanced ACL..

1000 to 1999: Interface-based ACL..

200 to 299: L2 ACL..

name acl-name: Specifies an access list with a character string, beginning with English letters [a-z, A-Z] only, excluding space and quotation marks, and not case sensitive. The all and any keywords are not allowed.

advanced: Advanced ACL..

basic: Basic ACL..

Interface: Interface-based ACL..

link: L2 ACL..

config: Follow the user configuration order to match ACL rules.

auto: Follow the depth-first order to match ACL rules.

all ( for the undo command): Configures to delete all the ACLs (including numbered and named ACLs).

Description

Using the acl command, you can configure a numbered or named ACL, and enter the corresponding ACL view. Using the undo

acl command, you can cancel all the rules of a numbered or named ACL or all the ACLs.

By default, the ACLs are matched in config order.

You can use the acl command to create an ACL and specify its name with “acl-name” and its type with the keywords “advanced”,

”basic”, ”interface”, or ”link”. For both numbered and named ACL, you can use the rule command to add rules for them after entering ACL view. (Use the quit command to exit ACL view.) An ACL may contain multiple rules and the traffic classification rules concern different ranges, which brings forward the issue of match order when a data packet matches more than one rule.

Using the match-order command, you can configure to follow the user configuration order (as defaulted) or depth-first order

(matching the rule with smaller range first) to match the rules. After specified the match order of an ACL, you cannot change it,

173

Q O S / A C L unless delete all its rules and specify the order again. Note that, the match order user defined can only be effective to the data treated by the software of the switch.

For related configurations, refer to the command rule.

Example

# Configure to follow depth-first order to match the rules of ACL 1.

[SW7700] acl number 1 match-order auto

8.1.2. acl mode

Syntax acl mode { ip-based | link-based } undo acl mode

View

System view

Parameter

ip-based: Configures to use L3 traffic classification rules. In this case only L3 rules take effect.

link-based: Configures to use L2 traffic classification rules. In this case only L2 rules take effect.

Description

Using the acl mode command, you can select the acl mode used by the switch between L2 and L3 traffic rules. Using the undo

acl mode command, you can restore the acl mode used by the switch.

For the L2 and L3 traffic classification rules configured globally, there is an issue about discriminate usage. You can use this command to select between the L2 and L3 traffic classification rules.

Example

# configures to run L2 traffic classification rule..

[SW7700] acl mode link-based

8.1.3. display acl config

Syntax

display acl config { all | acl-number | acl-name }

View

All views

Parameter

all: Configures to display all the ACLs (including numbered and named ACLs).

acl-number: Specifies the sequence number of the ACL to be displayed with a number between 1 and 399 and between 1000 and

1999 inclusive.

acl-name: Specifies the name of the ACL to be displayed with a character string starting with English letters ([a-z, A-Z]) only and excluding space or quotation mark.

174

Q O S / A C L

Description

Using the display acl config command, you can view the detail configuration information about the ACL, including all the statements and sequence numbers and how many packets and bytes matched these statements. The matched information is the information treated by switch’s CPU. The matched information of transmitted data can be displayed by the display qos-info

traffic-statistic command.

Example

# Display the content of all the ACLs.

<SW7700> display acl config all

Basic acl 10, 1 rule,

rule 1 permit 10.0.0.1 0 (0 times matched)

Basic acl 20, 1 rule,

rule 2 permit 20.0.0.1 0 (0 times matched)

Basic acl std1, 2 rules,

rule 1 permit 20.0.0.1 0 (0 times matched) rule 2 permit 30.0.0.1 0 (0 times matched)

8.1.4. display acl mode

Syntax display acl mode

View

All views

Parameter

None

Description

Using the display acl mode command, you can view the ACL mode chosen by the switch

Example

# Display the ACL mode chosen by the switch.

<SW7700> display acl mode

ACL mode: ip-based

8.1.5. display acl runtime all

Syntax

display acl runtime { all | interface { interface-name | interface-type interface-num } }

}View

All views

175

Q O S / A C L

Parameter

interface { interface-name | interface-type interface-num }: Specifies a port of the switch. For more information, refer to the port command

manual.

Description

Using the display acl runtime all command, you can view the information about the running state of the ACL. The displayed information includes ACL name, rule name and running state.

Example

# Display the ACL running state on all the interfaces.

<SW7700> display acl runtime all acl std1 rule 0 running acl std1 rule 1 running

8.1.6. display time-range

Syntax

display time-range { all | name }

View

All views

Parameter

name: Specifies the name of the time range.

Description

Using the display time-range command, you can view the configuration and status of the current time range. You will see the active or inactive state outputs respectively.

Note that the system has a delay of about 1 minute when updating the ACL state, while the display time-range command applies the current time. Therefore when display time-range displays that a time range is active, the ACL using it may not have been activated. This is a kind of normal case.

Example

# Display the configuration of all the time ranges.

<SW7700> display time-range all

Current time is 14:36:36 4-3-2003 Thursday

Time-range : hhy ( Inactive )

from 08:30 2-5-2005 to 18:00 2-19-2005

Time-range : hhy1 ( Inactive )

from 08:30 2-5-2003 to 18:00 2-19-2003

# Display the time range named tm1.

<SW7700> display time-range tm1

Current time is 14:37:31 4-3-2003 Thursday

Time-range : tm1 ( Inactive )

from 08:30 2-5-2005 to 18:00 2-19-2005

176

Q O S / A C L

8.1.7. packet-filter

Syntax

packet-filter inbound { [ ip-group { acl-number | acl-name } [ rule rule ] ] | [ link-group { acl-number | acl-name } [ rule rule ] ] }

undo packet-filter inbound { [ ip-group { acl-number | acl-name } [ rule rule ] ] | [ link-group { acl-number | acl-name } [ rule rule ] ]

}

View

Ethernet port view

Parameter

inbound: specify the traffic received by the Ethernet port.

ip-group { acl-number | acl-name }:activate the IP ACLs. IP ACLs include basic, advanced and interface-based ACLs. acl-number:

Specifies the ACL number, ranging from 100 to 199 and from 1000 to 1999. acl-name: Specifies the ACL name with a character string started with English letters (that is [a to z, A to Z]), excluding space and quotation marks.

link-group { acl-number | acl-name }: activate the L2 ACL. acl-number: Specifies the ACL number, ranging from 200 to 299. acl-name:

Specifies the ACL name with a character string started with English letters (that is [a to z, A to Z]), excluding space and quotation marks.

rule rule: Specifies the rule in the ACL to be activated, ranging from 0 to 127. If it is not specified, all the rules in the ACL will be activated.

Description

Using the packet-filter command, you can activate the ACL. Using the undo packet-filter command, you can disable the ACL.

Example

# Activate ACL 1 and ACL 200 at the same time.

[SW7700-Ethernet3/0/1] packet-filter inbound ip-group 1 link-group 200

8.1.8. reset acl counter

Syntax

reset acl counter { all | acl-number | acl-name }

View

User view

Parameter

all: All the access lists (including numbered and named access lists).

acl-number: Specifies an access list with a number in the range of 1 to 399 and 1000 to 1999.

acl-name: Specifies an access list with a character string, beginning with English letters [a-z, A-Z] only, excluding space and quotation marks, and not case sensitive. The all and any keywords are not allowed.

Description

Using the reset acl counters command, you can reset the statistics information of the ACL and reset the counters of packet and byte matching the ACL.

177

Q O S / A C L

Example

# Clear the statistics information of ACL 1.

<SW7700> reset acl counters 1

8.1.9. rule

Syntax

Define/delete a rule for basic acl

rule [ rule-id ] { permit | deny } [source source-addr source-wildcard | any ] [ fragment ] [ time-range name ]

undo rule rule-id [ source ] [ fragment ] [ time-range ]

define/delete a rule for advanced acl

rule [ rule-id ] { permit | deny } protocol [ source source-addr source-wildcard | any ] [ destination dest-addr dest-mask | any ] [ source-

port operator port1 [ port2 ] ] [ destination-port operator port1 [ port2 ] ] [ icmp-type icmp-type icmp-code ] [ established ] [ precedence

precedence ] [ tos tos ] [ dscp dscp ] [ fragment ] [ time-range name ]

undo rule rule-id [ source ] [ destination ] [ source-port ] [ destination-port ] [ precedence ] [ tos ] [ dscp ] [ fragment ] [

time-range ]

define/delete a rule for interface acl

rule [ rule-id ] { permit | deny } [ interface { interface-name | interface-type interface-num | any } ] [ time-range name ]

undo rule rule-id

define/delete a rule for link acl

rule [ rule-id ] { permit | deny } [ protocol-type ] [ format-type ] ingress { { [ source-vlan-id ] [ source-mac-addr ] | any } egress { [ dest-mac-

addr ] [ destination-vlan-id ] | any } [ time-range name ]

undo rule rule-id

View

ACL view

Parameter

rule-id: Specifies a rule of an ACL with a number in the range of 0 to 127.

permit: Indicates to let the matched packets through.

deny: Indicates to reject the matched packets to pass through.

time-range name: Name of a time range, during which a rule takes effect.

Note: The following parameters are attributes carried by the data packets. The ACL rules are defined according to the values of these parameters.

The parameter for define a basic ACL

source-addr source-wildcard | any: source-addr source-wildcard is the source IP address and source address wildcard, expressed in dotted decimal notation. any represents any source address.

fragment: Indicates that the rule takes effect on fragmented packets only and will be ignored for other packets.

The parameter of advanced ACL

protocol: This parameter is to define protocol type, which can be indicated by name, or digit. This parameter can be icmp, igmp, tcp, udp, ip, gre, ospf or ipinip. If this parameter takes ip, it means all the IP protocols. This parameter can be 1 ~ 255 if indicated by digit.

178

Q O S / A C L

dest-addr dest-wildcard | any: dest-addr dest-wildcard is the destination IP address and destination address wildcard, expressed in dotted decimal notation. any represents any destination address.

source-port operator port1 [ port2 ]: This parameter is to define the source TCP or UDP port number. Here, operator represents port operation character, including eq (equal to), gt (greater than), lt (less than), neq (not equal to), and range (in certain range). Note:

This parameter is available only when protocol parameter takes TCP or UDP. port1 [ port2 ]: TCP or UDP port number of packets, expressed with characters or numbers. The numbers are in the range of 0 to 65535 and refer to mnemonic symbol table for character values.

destination-port operator port1 [ port2 ]: This parameter is to define the destination TCP or UDP port number. The meaning of

operator port1 [ port2 ] is same as upper parameter.

icmp-type icmp-type icmp-code: Used when protocol is specified as icmp. icmp-type icmp-code specifies an ICMP packet. icmp-type specifies the ICMP packet type with a number in the range of 0 to 255 or characters. icmp-code, ranging from 0 to 255, is used for icmp when the ICMP packet type is not specified with characters.

established: Used when protocol is tcp to indicate that the rule takes effect on the first SYN packet to establish TCP connection.

precedence precedence: Specifies IP precedence with a number in the range of 0 to 7 or a name.

dscp dscp: Classifies the data packets with a number in the range of 0 to 63 or a name.

tos tos: Classifies the data packets with a number in the range of 0 to 15 or a name.

fragment: Indicates that the rule takes effect on fragmented packets only and will be ignored for other packets.

The parameter of interface ACL

interface { interface-name | interface-type interface-num | any }: Specifies L3 interface name. interface-name is the interface name, expressed as interface-type plus interface-num to represent an interface. In a switch, the L3 interface can only be a VLAN interface, that is, interface-type can be specified as VLAN Interface only. any represents all the L3 interfaces.

The parameter of link ACL

protocol-type: Protocol carried by an Ethernet frame, which can be ip, arp, or rarp.

format-type: encapsulation format, which can be

802.3/802.2, 802.3, ether_ii, snap.

ingress { [ source-vlan-id ] [ source-mac-addr ] | any }: Source information of a data packet. [ source-vlan-id ] specifies the source VLAN of the packet, and [ source-mac-addr ] specifies the source MAC address of the data packets. any represents all the packets received from all the ports.

egress { [ dest-vlan-id ] [ dest-mac-addr ] | any }: Specifies the destination information of data packets. dest-vlan-id specifies the destination VLAN of the packet, dest-mac-addr specifies the destination MAC address of the data packets. any represents all the packets forwarded by all the ports.

Description

Using the rule command, you can add a rule to an ACL. Using the undo rule command, you can cancel a rule from an ACL.

You can add a lot of rules to an ACL. If you input the parameter when use the undo rule command, the system will delete the corresponding content of the rule according to the parameter input.

For related configurations, refer to command acl.

Example

# Add a rule to an advanced ACL.

[SW7700-acl-adv-100] rule 1 permit tcp established source 1.1.1.1 0 destination 2.2.2.2 0

# Add a rule to a basic ACL.

[SW7700-acl- basic-1] rule 1 permit source 1.1.1.1 0 fragment

# Add a rule to an interface-based ACL.

[SW7700-acl-if-1000] rule 1 permit interface Vlan-interface 1

# Add a rule to an L2 ACL.

[SW7700-acl-link-200] rule 1 permit ingress 1 egress any

179

Q O S / A C L

8.1.10. time-range

Syntax

time-range time-name [ start-time to end-time ] [ days-of-the-week ] [ from start- date] [ to end-date ]

undo time-range time-name [ start-time to end-time ] [ days-of-the-week ] [ from start- date] [ to end-date ]

View

System view

Parameter

time-name: Name of a special time range to be referenced.

start-time: Start time of the special time range, format as hh:mm.

end-time: End time of the special time range, format as hh:mm.

days-of-the-week: Determines in which day(s) of a week in the special time range a command takes effect. The command takes effect everyday within the time range, if this parameter is omitted. You can specify this parameter with any of the following values:

Numbers (ranging from 0 to 6);

Monday, Tuesday, Wednesday, Thursday, Friday, Saturday or Sunday;

working-day, representing 5 working days, from Monday to Friday;

off-day, representing Saturday and Sunday;

from start-date: Start date of the special time range, determining effective days of the time range with the end-date, format as hh:mm MM-DD-YYYY.

to end-date: End date of the special time range, determining effective days of the time range with the start-date, format as hh:mm

MM-DD-YYYY.

If the above two parameters are omitted, there is no limit to the effective date.

Description

Using the time-range command, you can configure a time range. Using the undo time-range command, you can delete a time range.

If you input the parameter when use the undo time-range command, the system will delete the corresponding content of the time range according to the parameter input.

Example

# Configure a time range being effective since zero hour on January 1, 2000 and forever.

[SW7700] time-range test from 0:0 1-1-2000

8.2. QoS Configuration Commands List

8.2.1. display priority-trust

Syntax display priority-trust

View

All views

180

Q O S / A C L

Parameter

None

Description

Using the display priority-trust command, you can view the settings of priority used for putting the packet to the sending queue.

For the related command, see priority-trust.

Example

# Display the settings of priority used for putting the packet to the sending queue.

<SW7700> display priority-trust

8.2.2. display qos-info queue-scheduler

Syntax

display qos-interface [ interface-name | interface-type interface-num ] queue-scheduler

View

All views

Parameter

interface-name | interface-type interface-num: Specifies a port of the switch. For more information, refer to the port

command manual.

Description

Using the display qos-interface queue-scheduler command, you can view the queue scheduling mode and parameters.

For the related command, see queue-scheduler.

Example

# Display the queue scheduling mode and parameters.

<SW7700> display qos-interface queue-scheduler

Queue scheduling mode: strict-priority

8.2.3. display qos-interface all

Syntax

display qos-interface [ interface-name | interface-type interface-num ] all

View

All views

Parameter

interface-name | interface-type interface-num: Specifies a port of the switch. For more information, refer to the port

command manual.

Description

Using the display qos-interface all command, you can view the QoS setting of all the ports.

181

Q O S / A C L

If you do not input the port parameters, the command will display all the QoS settings on the switch, including rate limit and line will be displayed. rate etc. If you set the port parameters, the configuration information about the specified port

Example

# Display the QoS settings of all the ports.

<SW7700> display qos-interface all

Ethernet1/0/2: traffic-limit

Input:

Matches: access-list 1 rule 0 running

Target rate: 4 Mbps

8.2.4. display qos-interface traffic-bandwidth

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-bandwidth

View

All views

Parameter

interface-name | interface-type interface-num: Specifies a port of the switch. For more information, refer to the port

command manual.

Description

Using the display qos-interface traffic-bandwidth command, you can view the settings of bandwidth.

For the related command, see traffic-bandwidth.

Example

# Display the settings of traffic bandwidth assurance.

<SW7700> display qos-interface traffic-bandwidth

8.2.5. display qos-interface traffic-limit

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-limit

View

All views

Parameter

interface-name | interface-type interface-num: Specifies a port of the switch. For more information, refer to the port

command manual.

Description

Using the display qos-interface traffic-limit command, you can view the settings of rate limit. The information displayed includes the ACL of the traffic to be limited, the limited average rate and the settings of some related policing action.

For the related command, see traffic-limit.

182

Q O S / A C L

Example

# Display the settings of traffic limit.

<SW7700> display qos-interface traffic-limit

Ethernet1/0/1: traffic-limit

Input:

Matches: access-list 1 rule 0 running

Target rate: 10 Mbps

Ethernet1/0/2: traffic-limit

Input:

Matches: access-list 10 rule 0 running

Target rate: 100 Mbps

8.2.6. display qos-interface traffic-priority

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-priority

View

All views

Parameter

interface-name | interface-type interface-num: Specifies a port of the switch.

Description

Using the display qos-interface traffic-priority command, you can view the settings of traffic priority.

This command is used for displaying the settings of traffic priority. The information displayed includes the ACL corresponding to the traffic tagged with priority, priority type and value.

For the related command, see traffic-priority.

Example

# Display the settings of traffic priority.

<SW7700> display qos-interface traffic-priority

traffic-priority

Matches: access-list std1 rule 0 running

Priority action: dscp ef

Matches: access-list std1 rule 1 running

Priority action: dscp ef

8.2.7. display qos-interface traffic-red

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-red

View

All views

Parameter

interface-name | interface-type interface-num: Specifies a port of the switch.

Description

Using the display qos-interface traffic-red command, you can view the settings of RED operation.

183

Q O S / A C L

For the related command, see traffic-red.

Example

# Display the settings of RED.

<SW7700> display qos-interface traffic-red

8.2.8. display qos-interface traffic-statistic

Syntax

display qos-interface [ interface-name | interface-type interface-num ] traffic-statistic

View

All views

Parameter

interface-name | interface-type interface-num: Specifies a port of the switch.

Description

Using the display qos-interface traffic-statistic command, you can view the traffic statistics information.

This command is used for displaying the traffic statistics information. The information displayed includes the

ACL corresponding to the traffic to be counted and the number of packets counted.

For the related command, see traffic-statistic.

Example

# Display the traffic statistics information.

<SW7700> display qos-interface traffic-statistic

traffic-statistic

Matches: access-list std1 rule 0 running

0 packets

Matches: access-list std1 rule 1 running

0 packets

8.2.9. priority-trust

Syntax

priority-trust { dscp | ip-precedence | cos | local-precedence }

View

System view

Parameter

dscp: Sets the queue scheduling based on dscp priority.

ip-precedence: Sets the queue scheduling based on ip-precedence.

cos: Sets the queue scheduling based on cos priority.

local-precedence: Sets the queue scheduling based on local-precedence.

Description

Using the priority-trust command, you can choose putting the packet to corresponding sending queue based on which priority.

184

Q O S / A C L

By default, switch chooses the local preference as the based priority.

Switch supports 8 output queues with different priorities. The packets in the higher-priority queue will be transmitted first. The switch puts the packets into the corresponding output queues according to their priorities as follows:

Based on dscp priority: The dscp priorities cover the range from 0 to 63. The packets with priorities ranging from 0 to 7 will be put into the queue 0, the packets with priorities ranging from 8 to 15 will be put into the queue 1, so on and so forth.

Based on ip-precedence: The ip-precedence cover the range from 0 to 15. The packets with priorities ranging from 0 to 1 will be put into the queue 0, the packets with priorities ranging from 2 to 3 will be put into the queue 1, so on and so forth.

Based on cos priority: The cos priorities cover the range from 0 to 7. The packets with priority 0 will be put into the queue 0, so on and so forth.

Based on local-precedence: The local-precedence priorities cover the range from 0 to 7. The packets with priority 0 will be put in the queue 0, so on and so forth.

You can configure the packet priority basis for the queue scheduling in accordance with the actual situation.

Example

# Configure the queue scheduling based on dscp priority.

[SW7700] priority-trust dscp

8.2.10. queue-scheduler

Syntax

queue-scheduler { 0 | 1 | 2 }

undo queue-scheduler

View

Ethernet Port view

Parameter

Keywords 0, 1 and 2 specify the different modes, as described below:

0: Mode 0 (defaulted): the true strict priority mode.

1: Mode 1: The scheduler may select a packet with lower priority even if there are packets with higher priority waiting in external memory, if the bandwidth to the external memory is currently over-subscribed.

2: Mode 2: The scheduler will select packet from internal memory regardless of any packets waiting in external memory, as long as there are packet waiting in internal memory. This will lower the bandwidth on the external memory bus.

Description

Using the queue-scheduler command, you can configure the queue scheduler and the related parameters. Using

undo queue-scheduler command, you can restore the default queue scheduler.

By default, switch chooses the mode 0.

For the related command, see display queue-scheduler.

Example

# Configure to perform mode 1 on port 1.

[SW7700-Ethernet3/0/1] queue-scheduler 1

185

Q O S / A C L

1.1.1.

traffic-bandwidth

Syntax

traffic-bandwidth outbound { ip-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } [ rule rule ] } min-guaranteed-bandwidth max-guaranteed-bandwidth weight

undo traffic-bandwidth outbound { ip-group { acl-number | acl-name } [ rule rule ] | link-group { aclnumber | acl-name } [ rule rule ] }

View

Ethernet port view

Parameter

outbound: specify the traffic sent by the Ethernet port.

ip-group { acl-number | acl-name } [ rule rule ]: Specifies a basic or advanced ACL. acl-number: Specifies the ACL sequence number, ranging from 1 to 199. acl-name: Specifies the ACL name with a character string starting with

English letters ([a-z, A-Z]) and excluding space and quotation mark. rule rule: Specifies a rule of an ACL, ranging from 0 to 127. If you do not set this parameter, all the rules will be considered.

link-group { acl-number | acl-name } [ rule rule ]: Specifies a Layer-2 ACL. acl-number: Specifies the ACL sequence number, ranging from 200 to 299, acl-name: Specifies the ACL name with a character string starting with English letters ([a-z, A-Z]) and excluding space and quotation mark. rule rule: Specifies a rule of an ACL, ranging from 0 to 127. If you do not set this parameter, all the rules will be considered.

min-guaranteed-bandwidth: Reserves the minimum bandwidth in the unit of Kbit/s, ranging from 0 to 8388608. The value must be multiple of 64kbit/s.

max-guaranteed-bandwidth: Sets the maximum bandwidth in the unit of Kbit/s, ranging from 0 to 8388608. The value must be multiple of 64kbit/s.

weight: Bandwidth weight, ranging from 1 to 100. The value indicates the percent.

Description

Using the traffic-bandwidth command, you can reserve QoS bandwidth. Using the undo traffic-bandwidth command, you can cancel the reserved QoS bandwidth.

This command assures the specified traffic the minimum bandwidth and maximum bandwidth, meanwhile configures a weight parameter. The weight parameter is used for the case there are many traffics on one port. For example, if there are two traffic on one port, the minimum bandwidths are both set to 2M, the maximum bandwidths are both set to 8M, one traffic weight is set to 40%, other is set to 80%, and the port bandwidth is

10M. so the port can’t satisfy the requirement of the total maximum bandwidth. And it remains 6M bandwidth.

The 6M bandwidth will distribute to the two traffics according the radio of weight (40%:80%=1:2).

Example

# Set reserve minimum bandwidth 64k and maximum bandwidth 128k, weight is 20.

[SW7700-Ethernet3/0/1] traffic-bandwidth outbound ip-group 1 64 128 20

8.2.11. traffic-limit

Syntax

traffic-limit { inbound | outbound } { ip-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number

| acl-name } [ rule rule ] } target-rate

undo traffic-limit { inbound | outbound } { ip-group { acl-number | acl-name } [ rule rule ] | link-group { acl-

number | acl-name } [ rule rule ] }

186

Q O S / A C L

View

Ethernet port view

Parameter

inbound: specify the traffic received by the Ethernet port.

outbound: specify the traffic sent by the Ethernet port.

target-rate: Specifies the normal rate, range from 64 to 8388608, measured in kbps, and the value should be multiple of 64k.

Description

Using the traffic-limit command, you can enable ACL traffic identification and perform limiting the rate of the traffic matching the specified ACL (whose action is permit). Using the undo traffic-limit command, you can cancel the rate limit.

Example

# Limit the rate of the traffic matching the ACL 1 rules, whose action is permit. The normal traffic rate is set to

128kbps.

[SW7700-Ethernet3/0/1] traffic-limit inbound ip-group 1 128

8.2.12. traffic-priority

Syntax

traffic-priority outbound { ip-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } [

rule rule ] } { [ dscp dscp-value | ip-precedence pre-value ] [ local-precedence pre-value ] }

undo traffic-priority outbound { ip-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-

name } [ rule rule ] }

View

Ethernet port view

Parameter

outbound: specify the traffic sent by the Ethernet port.

dscp dscp-value: Specifies DSCP preference, ranging from 0 to 63.

187

Q O S / A C L

ip-precedence pre-value: Specifies IP preference. pre-value specifies the IP preference, ranging from 0 to 7.

local-precedence pre-value: Specifies the local preference, ranging from 0 to 7.

Description

Using the traffic-priority command, you can activate ACL and tag the traffic priority (whose action is permit).

Using the undo traffic-priority command, you can cancel the traffic priority settings.

It can mark three priorities (dscp/IP preference, and cos) for the packets. The switch can put the packets into egress queue according to the cos value (namely the 802.1p preference) or local preference. If both 802.1p preference and local preference are set, the switch will use the 802.1p preference first.

For the related command, see display traffic-priority.

Example

# Marks the priority for the packets matching the permit rules of ACL1. It sets the local preference to 0:

[SW7700-Ethernet3/0/1] traffic-priority outbound ip-group 1 local-precedence 0

8.2.13. traffic-red

Syntax

traffic-red outbound { ip-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name } [ rule

rule ] } qstart qstop probability

undo traffic-red outbound { ip-group { acl-number | acl-name } [ rule rule ] | link-group { acl-number | acl-name }

[ rule rule ] }

View

Ethernet port view

Parameter

outbound: specify the traffic sent by the Ethernet port.

qstart: Start random discarding queue length, if the queue shorter than the value, no packet will be dropped, ranging from 0 to 262128. The value must be multiple of 16kbit/s.

qstop: Specifies the upper limit to random dropping action. If the queue longer than the value, all the packets arrived later will be dropped, ranging from 0 to 262128. The value must be multiple of 16kbit/s.

probability: Specifies the dropping probability between the above mentioned two values, ranging from 0 to 100

(percent).

Description

Using the traffic-red command, you can configure RED parameters. Using the undo traffic-red command, you can cancel the RED configuration.

Example

# Set Start random discarding queue length 64k and Stop random discarding queue length 128k, Probability of discarding is 20.

188

Q O S / A C L

[SW7700-Ethernet3/0/1] traffic-red outbound ip-group 1 64 128 20

8.2.14. traffic-statistic

Syntax

traffic-statistic { inbound | outbound } { ip-group { acl-number | acl-name } [ rule rule ] | link-group { acl-

number | acl-name } [ rule rule ] }

undo traffic-statistic { inbound | outbound } { ip-group { acl-number | acl-name } [ rule rule ] | link-group {

acl-number | acl-name } [ rule rule ] }

View

Ethernet port view

Parameter

inbound: specify the traffic received by the Ethernet port.

outbound: specify the traffic sent by the Ethernet port.

Description

Using the traffic-statistic command, you can activate the ACL to recognize and count the traffic(whose action is

permit). Using the undo traffic-statistic command, you can cancel the traffic statistics.

The statistics information of traffic-statistic command includes the matched times of the transmitted data by switch. User can use display traffic-statistic command to display the statistics information.

For the related command, see display traffic-statistic.

Example

# Count the packets matching the ACL1 rules with action permit.

[SW7700-Ethernet3/0/1] traffic-statistic inbound ip-group 1

8.3. Logon user’s ACL Control Command

8.3.1. acl

Syntax

acl acl-number { inbound | outbound }

View

User-interface view

Parameter

acl-number: Specifies a basic ACL with a number in the range of 1 to 99.

189

Q O S / A C L

inbound: Perform ACL control over the users that telnet to the local switch.

outbound: Perform ACL control over the users that telnet to other switches from the local switch.

Description

Using the acl command, you can call an ACL and perform ACL control over the TELNET users.

This command calls numbered basic ACL only.

Example

# Performs ACL control over the users that telnet to the local switch. (Suppose ACL 20 has been defined.)

[SW7700] user-interface vty 0 4

[SW7700-user-interface-vty0-4] acl 20 inbound

8.3.2. snmp-agent community

Syntax

snmp-agent community { read | write } community-name [ [ mib-view view-name ] | [ acl acl-number ] ]*

undo snmp-agent community community-name

View

System view

Parameter

community-name: Community name character string.

mib-view view-name: MIB view name.

read: Indicate that MIB object can only be read.

write: Indicate that MIB object can be read and written.

acl acl-number: the number of basic ACL, ranging from 1 to 99.

Description

Using the snmp-agent community command, you can configure the community name, and perform the ACL control over the network management user through the parameter acl acl-number. Using the undo snmp-agent community command, you can cancel the configuration of community name.

Example

# Configures MyCompany as the community name, allows read-only access to the switch by the name, meanwhile, performs the

ACL control to the network management user by ACL 20. (Suppose ACL 20 has been defined.)

[SW7700] snmp-agent read community MyCompany acl 20

8.3.3. snmp-agent group

Syntax

snmp-agent group { v1 | v2c } group-name [ read-view read-view ] [ write-view write-view ] [ notify-view notify-view ] [ acl acl-number ]

undo snmp-agent group { v1 | v2c } group-name

snmp-agent group v3 group-name [ authentication | privacy ] [ read-view read-view ] [ write-view write-view ] [ notify-view notify-

view ] [ acl acl-number ]

190

undo snmp-agent group v3 group-name [ authentication | privacy ]

View

System view

Parameter

v1: Configure to use V1 safe mode.

v2c: Configure to use V2c safe mode.

v3: Configure to use V3 safe mode.

groupname: Group name, ranging from 1 to 32 bytes.

auth: If this parameter is added to configuration command, the system will authenticate but not encrypt SNMP data packets..

privacy: Configure to authenticate and encrypt the packet.

read-view: Configures to allow read-only view settings.

readview: Read-only view name, ranging from 1 to 32 bytes.

write-view: Configure to allow read-write view settings.

writeview: Name of read-write view, ranging from 1 to 32 bytes.

notify-view: Configure to allow notify view settings.

notifyview: Specify the notify view name, ranging from 1 to 32 bytes.

acl acl-number: the number of basic ACL, ranging from 1 to 99

Description

Using the snmp-agent group command, you can configure a new SNMP group, and perform the ACL control to the group through the parameter acl acl-number. Using the undo snmp-agent group command, you can cancel the SNMP group.

Example

# Creates a new SNMP group: MyCompany, and perform the ACL control to the group through ACL 21. (Suppose ACL 21 has been defined.)

[SW7700] snmp-agent group v1 MyCompany acl 21

8.3.4. snmp-agent usm-user

Syntax

snmp-agent usm-user { v1 | v2c } user-name group-name [ acl acl-number ]

undo snmp-agent usm-user { v1 | v2c } user-name group-name

snmp-agent usm-user v3 user-name group-name [ authentication-mode { md5 | sha } auth-password ] [ acl acl-number ]

undo snmp-agent usm-user v3 user-name group-name { local | engineid engineid-string }

View

System view

Parameter

username: Specify the user name, ranging from 1 to 32 bytes.

groupname: Specify the group name corresponding to that user, a character string at the length ranging from 1 to 32 bytes.

v1: Configure to use V1 safe mode.

v2c: Configure to use V2c safe mode.

191

Q O S / A C L

v3: Configure to use V3 safe mode.

authentication-mode: Specify the safety level as authentication required.

md5: Specify the authentication protocol as HMAC-MD5-96.

sha: Specify the authentication protocol as HMAC-SHA-96.

authpassword: Specify the authentication password with a character string, ranging from 1 to 64 bytes.

local: Local entity user.

engineid: Specify the related engine ID of the user.

acl acl-number: the number of basic ACL, ranging from 1 to 99.

Description

Using the snmp-agent usm-user command, you can add a new user to a SNMP group, and perform the ACL control to the user through the parameter acl acl-number. Using the undo snmp-agent usm-user command, you can cancel a user from corresponding SNMP group,meanwhile delete the configuration of the user’s ACL control.

Example

# Adds a user John for MyGroup (an SNMP group), configures to authenticate with HMAC-MD5-96 and sets authentication password as hello, meanwhile perform the ACL control to the user through ACL 20. (Suppose ACL 20 has been defined.)

[SW7700] snmp-agent usm-user v3 John MyGroup authentication-mode md5 SW7700 acl 20

192

Chapter 9 STP

9.1. RSTP Configuration Commands

9.1.1. display stp

Syntax

display stp [ interface interface_list ]

View

All views

Parameter

interface_list: Specifies the Ethernet port list, including multiple Ethernet ports. Expressed as interface _list={ {

interface_type interface_num | interface_name } [ to { interface_type interface_num | interface_name } ] }&<1-10>. For details about interface_type, interface_num and interface_name, refer to the Port Command Manual. &<1-10> indicates the preceding parameter can be input up to 10 times.

Description

Using the display stp command, you can view the status information of the current RSTP.

The output information of this command can help you verify the RSTP configuration and troubleshoot RSTP.

For the related command, see reset stp.

Example

# Display the status information about RSTP of Ethernet1/0/2.

<SW7700> display stp interface Ethernet1/0/2

The bridge is executing the IEEE Rapid Spanning Tree protocol

The bridge has priority 32768, MAC address: 1020.3040.5060

Configured Hello Time 2, Max Age 20, Forward Delay 15

Root Bridge has priority 32768, MAC address 1020.3040.5060

Path cost to root bridge is 0

Port 2 (Ethernet1/0/2) of bridge is Forwarding

Spanning tree protocol is enabled

The port is a DesignatedPort

Port path cost 20

Port priority 128

Designated bridge has priority 32768, MAC address 1020.3040.5060

193

S T P

Configured as an edge port

Connected to a non-point-to-point LAN segment

Maximum transmission limit is 3 BPDUs per hello time

Times: Hello Time 2, Max Age 20

Forward Delay 15, Message Age 0

sent BPDU: 4

TCN: 0, RST: 4, Config BPDU: 0

received BPDU: 0

TCN: 0, RST: 0, Config BPDU: 0

9.1.2. reset stp

Syntax

reset stp [ interface interface_list ]

View

User view

Parameter

interface_list: Specifies the Ethernet port list, including multiple Ethernet ports. Expressed as interface _list = { {

Description

Using the reset stp command, you can reset the statistics information about Rapid Spanning Tree Protocol

(RSTP).

This command can be used to clear the statistics information about a specified port. If no port is specified, the statistics information of all the ports of the device will be cleared.

For the related command, see display stp.

Example

# Clear the statistics information about Ethernet1/0/1 through Ethernet1/0/3.

<SW7700> reset stp interface Ethernet1/0/1 to Ethernet1/0/3

9.1.3. stp

Syntax stp { enable | disable } undo stp

194

S T P

View

System view/Ethernet port view

Parameter

enable: Enables RSTP on a device or a port.

disable: Disables RSTP on a device or a port.

Description

Using the stp enable command, you can enable RSTP on a device or port. Using the stp disable command, you can disable RSTP on a device or port. Using the undo stp command, you can disable RSTP on a device. The

undo form of this command is not available in Ethernet port view.

By default, RSTP is not enabled on the Switch. However, after RSTP is enabled on the device, it is enabled on all the ports by default.

If the parameters of RSTP have not been set for the device or the ports before RSTP is enabled on the device, they will take the default values. Before or after RSTP is enabled, you can use the configuration command to set RSTP parameters for the device and ports. This command enables/disables RSTP on a device in system view and enables/disables RSTP on a port in Ethernet port view.

The undo stp command can only be used to disable RSTP on the whole switch in system view.

For the related command, see stp mode.

Example

# Enable RSTP on a switch.

[SW7700] stp enable

# Disable RSTP on Ethernet1/0/1.

[SW7700-Ethernet1/0/1] stp disable

9.1.4. stp bpdu-protection

Syntax

stp bpdu-protection undo stp bpdu-protection

View

System view

Parameter

None

195

S T P

Description

Using the stp bpdu-protection command, you can enable BPDU protection on a switch. Using the undo stp

bpdu-protection command, you can resume the default status of BPDU protection function.

By default, BPDU protection is not enabled.

For an access layer device, the access port is generally connected to the user terminal (such as a PC) or file server directly and configured as an edge port to implement the fast transition. When such port receives BPDU packet, the system will set it to non-edge port and recalculate the spanning tree, which will cause network topology flapping. In normal cases, these ports will not receive any BPDU packets. However, someone may forge BPDU to maliciously attack the switch and cause network flapping.

RSTP provides BPDU protection function against such attack. After BPDU protection function is enabled on a switch, the system will disable an edge port that has received BPDU and notify the network manager about it. The disabled port can only be resumed by network manager.

Example

# Enable BPDU protection function on a switch.

[SW7700] stp bpdu-protection

9.1.5. stp bridge-diameter

Syntax

stp bridge-diameter bridgenum

undo stp bridge-diameter

View

System view

Parameter

bridgenum: Specifies the network diameter, ranging from 1 to 7. By default, the value is 7.

Description

Using the stp bridge-diameter command, you can configure the network diameter of a switching network. Using the undo stp bridge-diameter command, you can restore the default network diameter of the switching network.

The network diameter influences the packet forward delay on the switching network directly. The longer the diameter is, the longer the forward delay will be and the less stable the network will be. 7 or less is recommended.

Example

# Set the network diameter to 5.

[SW7700] stp bridge-diameter 5

196

S T P

9.1.6. stp cost

Syntax

stp cost cost

undo stp cost

View

Ethernet port view

Parameter

cost: Specifies the path cost, ranging from 1 to 200000.

Description

Using the stp cost command, you can configure the path cost on a spanning tree for the current Ethernet port.

Using the undo stp cost command, you can restore the default cost.

By default, the bridge gets the path cost directly through the speed of the link connected to the port.

The path cost of an Ethernet port is related to the link speed. You can refer to the following table. RSTP will check the link speed of the port and get the path cost directly. It is recommended to set the cost to the default value and let RSTP query the path cost of the port.

Path cost for ports at different link speeds

Link speed

10Mbps

100Mbps

1Gbps

10Gbps

Recommended value

2000

200

Recommended range

200 to 20000

20 to 2000

2 to 200

2 to 20

Range

1 to 200000

Example

# Configure the path cost of Ethernet1/0/1 to 200.

[SW7700-Ethernet1/0/1] stp cost 200

9.1.7. stp edged-port

Syntax stp edged-port { enable | disable } undo stp edged-port

View

Ethernet port view

Parameter

enable: Sets the current Ethernet port as an edge port.

197

S T P

disable: Sets the current Ethernet port as a non-edge port.

Description

Using the stp edged-port enable command, you can configure the current port as an edge port. Using the stp

edged-port disable command, you can configure the current port as a non-edge port. Using the undo stp

edged-port command, you can restore the default setting.

By default, all the Ethernet ports of the bridge are configured as non-edge ports.

If the current Ethernet port is connected to other switch, you can use the stp edged-port disable or undo stp

edged-port command to specify it as a non-edge port. The stp edged-port enable command can be used to configure the current Ethernet port as an edge port. All the Ethernet ports have been set to non-edge ports by initialization. You can configure the Ethernet ports directly connected to the user terminals as edge ports, so that they can transition to forwarding state quickly.

For the related command, see stp point-to-point.

Example

# Set Ethernet1/0/1 as a non-edge port.

[SW7700-Ethernet1/0/1] stp edged-port disable

9.1.8. stp loop-protection

Syntax stp loop-protection undo stp loop-protection

View

Ethernet port view

Parameter

None

Description

Using the stp loop-protection command, you can enable loop protection function. Using the undo stp loop-

protection command, you can restore the setting.

By default, the loop protection function is not enabled.

Example

# Enable loop protection function in Ethernet1/0/1.

[SW7700-Ethernet1/0/1] stp loop-protection

198

S T P

9.1.9. stp mcheck

Syntax stp mcheck

View

Ethernet port view

Parameter

None

Description

If the network is rather stable, even when the bridge running STP on the segment is removed, the corresponding port will still work in the STP compatible mode. Using the stp mcheck command, you can force the port to work in RSTP mode.

If there is any bridge running STP on the segment connected to the current Ethernet port, the port will switch to run RSTP in STP compatible mode. If the network is rather stable, even when the bridge running STP on the segment is removed, the corresponding port will still work in the STP compatible mode. In this case, you can use this command to force the port to work in RSTP mode. In RSTP mode, when the port receives an STP packet, it will transition to the STP compatible mode.

The configuration can only be performed when the bridge runs in RSTP mode. If the bridge is configured to work in STP compatible mode, the command will not make any sense.

For the related command, see stp mode.

Example

# Set the RSTP of Ethernet1/0/1 to work in RSTP mode.

[SW7700-Ethernet1/0/1] stp mcheck

9.1.10. stp mode

Syntax stp mode { stp | rstp } undo stp mode

View

System view

Parameter

stp: Specifies to run RSTP in STP compatible mode.

rstp: Specifies to run RSTP in RSTP mode.

199

S T P

Description

Using the stp mode command, you can configure the RSTP running mode. Using the undo stp mode command, you can restore the default RSTP running mode.

By default, the value is rstp.

This command can be used for specifying the current Ethernet switch to run the RSTP in RSTP mode or in STP compatible mode.

For the related command, see stp, stp mcheck.

Example

# Set RSTP to work in STP compatible mode.

[SW7700] stp mode stp

9.1.11. stp point-to-point

Syntax stp point-to-point { force-true | force-false | auto } undo stp point-to-point

View

Ethernet port view

Parameter

force-true: Indicates that the link to the current Ethernet port is point-to-point link.

force-false: Indicates that the link to the current Ethernet port is not point-to-point link.

auto: Specifies to check if the link to the Ethernet port is point-to-point link or not automatically.

Description

Using the stp point-to-point command, you can configure the link to the current Ethernet port as point-to-point link or not point-to-point link. Using the undo stp point-to-point command, you can restore the default status of the link, that is, RSTP is responsible for checking whether the link to the Ethernet port is point-to-point link or not.

By default, the value is auto.

The requirements of current port connects to point-to-point link are current port is the master of an aggregated port or it works in full-duplex mode. The default setting, that is, checking by RSTP automatically is recommended.

Example

# Indicate that the link to Ethernet1/0/1 is point-to-point link.

[SW7700-Ethernet1/0/1] stp point-to-point force-true

200

S T P

9.1.12. stp port priority

Syntax

stp port priority port-priority

undo stp port priority

View

Ethernet port view

Parameter

port-priority: Specifies the priority of the port, ranging from 0 to 240. The values are not consecutive integers. Step length is 16. By default, the value is 128.

Description

Using the stp port priority command, you can configure the priority of the current Ethernet port. Using the undo

stp port priority command, you can restore the default priority.

The priority value shall be a multiple of 16, such as 0, 16, 32, 48 etc. The smaller value represents the higher priority. A port with higher priority is more likely to be a root port.

Example

# Set the priority of Ethernet1/0/1 to 64.

[SW7700-Ethernet1/0/1] stp port priority 64

9.1.13. stp priority

Syntax

stp priority bridge-priority

undo stp priority

View

System view

Parameter

bridge-priority: Specifies the priority of a switch, ranging from 0 to 61440. The values are not consecutive integers.

The step length is 4096. By default, the value is 32768.

Description

Using the stp priority command, you can configure the bridge priority of the switch. Using the undo stp priority command, you can restore the default bridge priority of the switch.

201

S T P

The priority value shall be a multiple of 4096, such as 0, 4096, 8192 etc. The smaller value represents the higher priority. A switch with higher priority is more likely to be a root bridge.

Example

# Set the priority of the current Ethernet switch to 4096.

[SW7700] stp priority 4096

9.1.14. stp root primary

Syntax

stp root primary undo stp root

View

System view

Parameter

None

Description

Using the stp root primary command, you can configure the current switch as the primary root of a spanning tree.

Using the undo stp root primary command, you can cancel the current switch for primary root of a spanning tree.

By default, a switch is not a primary root.

You can designate a primary tree for the spanning tree without caring about the priority configuration of the switch.

Caution: In a switching network, you can configure no more than one primary root for a spanning tree but you can configure one or more secondary roots for it. Remember not to designate more than one primary root in a spanning tree; otherwise, the calculation result will be unpredictable. After a switch is configured as primary root switch or secondary root switch, user can’t modify the bridge priority of the switch.

Example

# Designate the current switch as the primary root of a spanning tree.

[SW7700] stp root primary

9.1.15. stp root secondary

Syntax

stp root secondary undo stp root

202

S T P

View

System view

Parameter

None

Description

Using the stp root secondary command, you can configure the current switch as a secondary root of a specified spanning tree. Using the undo stp root secondary command, you can cancel the designation of the current switch for a secondary root of a specified spanning tree.

By default, a switch is not a secondary root.

You can designate one or more secondary root for a spanning tree. When the primary root fails or is powered off, a secondary root can take its place. Of more than one secondary roots, the one with the smallest MAC address will become the primary root of the specified spanning tree.

You can configure no more than one primary root for a spanning tree but you can configure one or more secondary roots for it. You cannot change the bridge priority of a switch if you configure it as secondary root of a spanning tree.

After a switch is configured as primary root switch or secondary root switch, user can’t modify the bridge priority of the switch.

Example

# Designate the current switch as a secondary root of the STP.

[SW7700] stp root secondary

9.1.16. stp root-protection

Syntax

stp root-protection undo stp root-protection

View

Ethernet port view

Parameter

None

Description

Using the stp root-protection command, you can enable Root protection function on a switch. Using the undo

stp root-protection command, you can restore the default status of Root protection function.

By default, Root protection is not enabled.

203

S T P

Due to configuration error of the maintenance personnel or malicious user attack, a legal root of the network may receive a BPDU with higher priority and lose its status as a root, which causes unpleasant changes of network topology. Such illegal changes may pull the higher-speed traffic to lower-speed links and cause network congestion.

To avoid such problem, RSTP provides Root protection function. After being configured with Root protection, a port always stays as a designated port. Once such port receives a BPDU with higher priority, it turns to listening status and will not forward any packets (as if the link to it is disconnected). It will resume normal status if it receives no BPDU with higher-priority for a period of time.

Example

# Enable Root protection function on Ethernet1/0/1 of the switch.

[SW7700-Ethernet1/0/1] stp root-protection

9.1.17. stp timer forward-delay

Syntax

stp timer forward-delay centiseconds

undo stp timer forward-delay

View

System view

Parameter

centiseconds: Specifies the time of forward delay in centisecond, ranging from 400 to 3000. By default, the value is

1500 centiseconds.

Description

Using the stp timer forward-delay command, you can configure the time of forward delay for the switch. Using the undo stp timer forward-delay command, you can restore the default forward delay time.

The value of forward delay is related to the diameter of the switching network. The longer the diameter is, the longer the forward delay should be set. You can use this command to modify the value of forward delay. The default value, 1500, is recommended.

For the related commands, see stp timer hello, stp timer max-age.

Example

# Set the forward delay of the device to 2000 centiseconds.

[SW7700] stp timer forward-delay 2000

9.1.18. stp timer hello

Syntax

stp timer hello centiseconds

204

S T P

undo stp timer hello

View

System view

Parameter

centiseconds: Specifies the value of hello time in centisecond, ranging from 100 to 1000. By default, the value is 200 centiseconds.

Description

Using the stp timer hello command, you can configure hello time of the switch. Using the undo stp timer hello command, you can restore the default hello time.

The Ethernet switch transmits RSTP packets every hello time. The longer hello time can ease the load of the switch, but it will also affect the performances of RSTP. The stp timer hello command can be used to modify the value of hello time. The default value is recommended.

For the related commands, see stp timer forward-delay, stp timer max-age, stp transit-limit.

Example

# Set the hello time of the switch to 300 centiseconds.

[SW7700] stp timer hello 300

9.1.19. stp timer max-age

Syntax

stp timer max-age centiseconds

undo stp timer max-age

View

System view

Parameter

centiseconds: Specifies the maximum age in centiseconds, ranging from 600 to 4000. By default, the value is 2000 centiseconds.

Description

Using the stp timer max-age command, you can configure the Max Age of the switch. Using the undo stp timer

max-age command, you can restore the default Max Age.

Maximum age is used for judging if an RSTP packet is outdated. If the value is set too small, the spanning tree will be computed too frequently because the network congestion may be considered as link failure. However, if the value is set too large, the link failure may not be discovered in time. Maximum age is related to the network

205

S T P diameter. You can use this command to modify the maximum age in accordance with the real cases. The default value, 2000, is recommended.

For the related commands, see stp timer forward-delay, stp timer hello.

Example

# Set the Max Age of the switch to 1000 centiseconds.

[SW7700] stp timer max-age 1000

9.1.20. stp transit-limit

Syntax

stp transit-limit packetnum

undo stp transit-limit

View

Ethernet port view

Parameter

packetnum: Specifies the maximum transmission speed of the port, ranging from 1 to 255. (It is a counter without unit.) By default, the value is 3.

Description

Using the stp transit-limit command, you can configure a limit to the transmission speed of the current Ethernet port. Using the undo stp transit-limit command, you can restore the default speed limit.

You can use this command to set a limit to the transmission speed of the current Ethernet port. The greater the speed is, the more the packets can be transmitted in the unit time. However, if the value is set too large, it will occupy excessive switch resources.

Example

# Set a limit of 5 to the transmission speed of Ethernet1/0/1.

[SW7700-Ethernet1/0/1] stp transit-limit 5

206

Chapter 10 AAA and RADIUS

10.1. 802.1x Configuration Commands

10.1.1. display dot1x

Syntax

display dot1x [ interface interface-list ] | [ sessions [ interface interface-list ] ] | [ statistics [ interface interface-list ]

View

All views

Parameter

interface: Configures to display the 802.1x information on the specified interface.

sessions: Configures to display the session connection information of 802.1x.

statistics: Configures to display the relevant statistics information of 802.1x.

interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-num [ to

interface-num ] } & < 1-10 >. interface-num specifies a single Ethernet interface in the format interface-num = { interface-type interface-num |

interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-name specifies the interface name. For the respective meanings and value ranges, read the Parameter of the Port Command Manual section.

Description

Using the display dot1x command, you can view the relevant information of 802.1x, including configuration information, running state (session connection information) and relevant statistics information.

By default, all the relevant 802.1x information about each interface will be displayed.

This command can be used to display the following information on the specified interface: 802.1x configuration, state or statistics.

If no port is specified when executing this command, the system will display all 802.1x related information. For example, 802.1x configuration of all ports, 802.1x session connection information, and 802.1x data statistical information. The output information of this command can help the user to verify the current 802.1x configurations so as to troubleshoot 802.1x.

For the related commands, see reset dot1x statistics, dot1x, dot1x retry, dot1x max-user, dot1x port-control, dot1x port-

method, dot1x timer.

Example

# Display the configuration information of 802.1x.

<SW7700> display dot1x

Equipment 802.1X protocol is enabled

DHCP-launch is disabled

EAP-relay is enabled

Proxy trap checker is disabled

Proxy logoff checker is disabled

Configure: Transmit Period 000030 s, Commit Period 000015 s

Quiet Period 000060 s, Quiet Period Timer is disabled

207

A A A A N D R A D I U S

Supp Timeout 000030 s, Server Timeout 000100 s

The Max-Req 000003

Total maximum on-line user number is 4096

Total current on-line user number is 0

Ethernet1/0/1 is link-down

802.1X protocol is disabled

Proxy trap checker is disabled

Proxy logoff checker is disabled

The port is a(n) authenticator

Authenticate Mode is auto

Port Control Type is Mac-based

Max on-line user number is 1024

… (Omitted)

10.1.2. dot1x

Syntax

dot1x [ interface interface-list ]

undo dot1x [ interface interface-list ]

View

System view

Ethernet port view

Parameter

interface interface-list: Ethernet port list including several Ethernet ports. interface-list = { interface-num [ to interface-num ] } & < 1-10 >.

interface-num specifies a single Ethernet port in the format interface-num = { interface-type interface-num | interface-name }, where interface-

type specifies the port type, interface-num specifies the port number and interface-name specifies the port name. For the respective meanings and value ranges, read the Parameter of the Port Configuration section.

Description

Using the dot1x command, you can enable 802.1x on the specified port or globally (i.e., on the current device). Using the undo

dot1x command, you can disable the 802.1x on the specified port or globally.

By default, 802.1x is disabled on all the ports and globally on the device.

This command is used to enable the 802.1x on the current device or on the specified port. When it is used in system view, if the parameter ports-list is not specified, 802.1x will be globally enabled. If the parameter ports-list is specified, 802.1x will be enabled on the specified port. When this command is used in Ethernet port view, the parameter interface-list cannot be input and 802.1x can only be enabled on the current port.

The configuration command can be used to configure the global or port 802.1x performance parameters before or after 802.1x is enabled. Before 802.1x is enabled globally, if the parameters are not configured globally or for a specified port, they will maintain the default values.

After the global 802.1x performance is enabled, only when port 802.1x performance is enabled will the configuration of 802.1x become effective on the port.

For the related commands, see display dot1x.

Example

# Enable 802.1x on Ethernet 1/0/1.

[SW7700] dot1x interface ethernet 1/0/1

208

A A A A N D R E L I A B I L I T Y

# Enable the 802.1x globally.

[SW7700] dot1x

10.1.3. dot1x dhcp-launch

Syntax dot1x dhcp-launch undo dot1x dhcp-launch

View

System view

Parameter

None

Description

Using the dot1x dhcp-launch command, you can configure whether 802.1x enables the Ethernet switch to launch the user ID authentication when the supplicant runs DHCP and applies for dynamic IP addresses. Using the undo dot1x dhcp-launch command, you can disable DHCP to launch ID authentication on the supplicant.

By default, DHCP is not allowed launching user ID authentication.

Note that if the supplicant is a Windows XP user, you should enable this command before performing 802.1x authentication.

For the related command, see dot1x.

Example

# Enable to launch ID authentication for the supplicant when he runs DHCP and applies for dynamic IP addresses.

[SW7700] dot1x dhcp-launch

10.1.4. dot1x eap-relay

Syntax dot1x eap-relay undo dot1x eap-relay

View

System view

Parameter

None

Description

Using the dot1x eap-relay command, you can enable the EAP-relay function. Using the undo dot1x eap-relay command, you can disable EAP-relay function.

By default, EAP relay is disabled.

EAP relay directly send authentication information to RADIUS server in the format of EAP packet. (the device must support

EAP authentication). With this function enabled, it is not necessary to finish authentication by RADIUS server after exchanging the EAP packet to standard RADIUS packet.

209

A A A A N D R A D I U S

For the related command, see display dot1x.

Example

# Enable EAP relay

[SW7700] dot1x eap-relay

EAP-relay is enabled

10.1.5. dot1x max-user

Syntax

dot1x max-user user-number [ interface interface-list ]

undo dot1x max-user [ interface interface-list ]

View

System view

Ethernet port view

Parameter

user-number: Specifies the limit to the amount of supplicants on the port, ranging from 1 to 1024.

By default, the maximum user number is 1024.

interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-

num [ to interface-num ] } & < 1-10 >. interface-num specifies a single Ethernet interface in the format interface-num = { interface-type

interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-

name specifies the interface name. For the respective meanings and value ranges, see the parameters in the Port Command chapter.

Description

Using the dot1x max-user command, you can configure a limit to the amount of supplicants on the specified interface of 802.1x.

Using the undo dot1x max-user command, you can restore the default value.

This command is used for setting a limit to the amount of supplicants that 802.1x can hold on the specified interface. This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet interface view and it has effect only on the current interface.

For the related commands, see display dot1x.

Example

# Configure the interface Ethernet 1/0/2 to hold no more than 32 users.

[SW7700] dot1x max-user 32 interface ethernet 1/0/2

10.1.6. dot1x port-control

Syntax

dot1x port-control { auto | authorized-force | unauthorized-force-} [ interface interface-list ]

undo dot1x port-control [ interface interface-list

]

View

System view

210

A A A A N D R E L I A B I L I T Y

Ethernet interface view

Parameter

auto: Automatic identification mode, configuring the initial state of the interface as unauthorized. The user is only allowed to receive or transmit EAPoL packets but not to access the network resources. If the user passes the authentication flow, the interface will switch over to the authorized state and then the user is allowed to access the network resources. This is the most common case.

authorized-force: Forced authorized mode, configuring the interface to always stay in authorized state and the user is allowed to access the network resources without authentication/authorization.

unauthorized-force: Forced unauthorized mode, configuring the interface to always stay in non-authorized mode and the user is not allowed to access the network resources.

interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-

num [ to interface-num ] } & < 1-10 >. interface-num specifies a single Ethernet interface in the format interface-num = { interface-type

interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-

name specifies the interface name. For the respective meanings and value ranges, see the parameters of the Port Command chapter.

Description

Using the dot1x port-control command, you can configure the mode for 802.1x to perform access control on the specified interface. Using the undo dot1x port-control command, you can restore the default access control mode.

By default, the value is auto.

This command is used to set the mode, or the interface state, for 802.1x to perform access control on the specified interface. This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet port view and it has effect only on the current interface.

For the related commands, see display dot1x.

Example

# Configure the interface Ethernet 1/0/2 to be in force-unauthorized state.

[SW7700] dot1x port-control force-unauthorized interface ethernet 1/0/2

10.1.7. dot1x port-method

Syntax

dot1x port-method { macbased | portbased } [ interface interface-list ]

undo dot1x port-method [ interface interface-list

]

View

System view

Ethernet interface view

Parameter

macbased: Configures the 802.1x authentication system to perform authentication on the supplicant based on MAC address.

portbased: Configures the 802.1x authentication system to perform authentication on the supplicant based on interface number.

interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-

num [ to interface-num ] } & < 1-10 >. interface-num specifies a single Ethernet interface in the format interface-num = { interface-type

interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-

name specifies the interface name. For the respective meanings and value ranges, see the parameters in the Port Command chapter.

211

A A A A N D R A D I U S

Description

Using the dot1x port-method command, you can configure the base for 802.1x to perform access control on the specified interface. Using the undo dot1x port-method command, you can restore the default access control base.

By default, the value is macbased.

This command is used to set the base for 802.1x to perform access control, namely authenticate the users, on the specified interface. When macbased is adopted, the user access this interface must be authenticated independently, and if one successful authentication user is to finish network service, the other accessed users can still use network service. When portbased is adopted, if only the first access user by this interface can be authenticated successfully, the other access users followed can be considered authenticated successfully automatically, but if the first one finish the network service , the other accessed users’ network service will be rejected . .

This command has effect on the interface specified by the parameter interface-list when executed in system view. It has effect on all the interfaces when no interface is specified. The parameter interface-list cannot be input when the command is executed in Ethernet interface view and it has effect only on the current interface.

For the related commands, see display dot1x.

Example

# Authenticate the supplicant based on the interface number on Ethernet 1/0/3.

[SW7700] dot1x port-method portbased interface ethernet 1/0/3

10.1.8. dot1x quiet-period

Command dot1x quiet-period undo dot1x quiet-period

View

System view

Parameter

None

Description

Using the dot1x quiet-period command, you can enable the quiet-period timer. Using the undo dot1x quiet-period command, you can disable this timer.

If an 802.1x user has not passed the authentication, the Authenticator will keep quiet for a while (which is specified by quiet-period timer) before launching the authentication again. During the quiet period, the Authenticator does not do anything related to 802.1x authentication.

For the related commands, see display dot1x, dot1x timer.

Example

# Enable quiet-period timer.

[SW7700] dot1x quiet-period

212

A A A A N D R E L I A B I L I T Y

10.1.9. dot1x retry

Syntax

dot1x retry max-retry-value

undo dot1x retry

View

System view

Parameter

max-retry-value: Specifies the maximum times an Ethernet switch can retransmit the authentication request frame to the supplicant, ranging from 1 to 10.

By default, the value is 3, that is, the switch can retransmit the authentication request frame to the supplicant for 3 times.

Description

Using the dot1x retry command, you can configure the maximum times an Ethernet switch can retransmit the authentication request frame to the supplicant. Using the undo dot1x retry command, you can restore the default maximum retransmission time.

After the switch has transmitted authentication request frame to the user for the first time, if no user response is received during the specified time-range, the switch will re-transmit authentication request to the user. This command is used for specifying how many times the switch can re-transmit the authentication request frame to the supplicant. When the time is 1, the switch is configured to transmit authentication request frame only once. 2 indicates that the switch is configured to transmit authentication request frame once again when no response is received for the first time and so on. This command has effect on all the port after configuration.

For the related commands, see display dot1x.

Example

# Configure the current device to transmit authentication request frame to the user for no more than 9 times.

[SW7700] dot1x retry 9

10.1.10. dot1x supp-proxy-check

Syntax

dot1x supp-proxy-check { logoff | trap } [ interface interface-list ]

undo dot1x supp-proxy-check { logoff | trap } [ interface interface-list ]

View

System view

Ethernet interface view

Parameter

logoff: Deny the logon of the access user via proxy.

trap: Allow logon of the user via proxy, but the switch will send trap message.

interface interface-list: Ethernet interface list including several Ethernet interfaces, expressed in the format interface-list = { interface-

num [ to interface-num ] } & < 1-10 >. interface-num specifies a single Ethernet interface in the format interface-num = { interface-type

interface-num | interface-name }, where interface-type specifies the interface type, interface-num specifies the interface number and interface-

name specifies the interface name. For the respective meanings and value ranges, see the parameters in the Port Command chapter.

213

A A A A N D R A D I U S

Description

Using the dot1x supp-proxy-check command, you can configure the control method for 802.1x access users via proxy logon the specified interface. Using the undo dot1x supp-proxy-check command, you can cancel the control method set for the 802.1x access users via proxy.

Note that when performing this function, the user logging on via proxy need to run 3Com 802.1x client program,( 3Com 802.1x client program version V1.29 or above is needed).

This command is used to set on the specified interface when executed in system view. The parameter interface-list cannot be input when the command is executed in Ethernet interface view and it has effect only on the current interface.

For the related command, see display dot1x.

Example

# Configure a switch not to allow the users using proxy to login to Ethernet 1/0/3.

[SW7700] dot1x supp-proxy-check logoff interface ethernet 1/0/3

# Configure a switch to allow the users using proxy to login to Ethernet 1/0/3.

[SW7700] dot1x supp-proxy-check trap

[SW7700] dot1x supp-proxy-check trap interface ethernet 1/0/3 or

[SW7700] dot1x supp-proxy-check trap

[SW7700] interface Ethernet 1/0/3

[SW7700-interface-ethernet1/0/3] dot1x supp-proxy-check trap

10.1.11. dot1x timer

Syntax

dot1x timer { quiet-period quiet-period-value | server-timeout server-timeout-value | supp-timeout supp-timeout-value | tx-period tx-

period-value }

undo dot1x timer { quiet-period | server-timeout | supp-timeout | tx-period }

View

System view

Parameter

quiet-period: Specify the quiet timer. If an 802.1x user has not passed the authentication, the Authenticator will keep quiet for a while (which is specified by quiet-period timer) before launching the authentication again. During the quiet period, the

Authenticator does not do anything related to 802.1x authentication.

quiet-period-value: Specify how long the quiet period is. The value ranges from 10 to 120 in units of second and defaults to 60.

server-timeout: Specify the timeout timer of an Authentication Server. If an Authentication Server has not responded before the specified period expires, the Authenticator will resend the authentication request.

server-timeout-value: Specify how long the duration of a timeout timer of an Authentication Server is. The value ranges from 100 to

300 in units of second and defaults to 100 seconds.

supp-timeout: Specify the authentication timeout timer of a Supplicant. If a Supplicant has not responded before the specified period expires, Authenticator will resend the authentication request.

supp-timeout-value: Specify how long the duration of an authentication timeout timer of a Supplicant is. The value ranges from 10 to

120 in units of second and defaults to 30.

tx-period: Specify the transmission timeout timer. If a Supplicant has not responded before the specified period expires,

Authenticator will resend the authentication request.

214

A A A A N D R E L I A B I L I T Y

tx-period-value: Specify how long the duration of the transmission timeout timer is. The value ranges from 10 to 120 in units of second and defaults to 30.

Description

Using the dot1x timer command, you can configure the 802.1x timers. Using the undo dot1x timer command, you can restore the default values.

When it is run, 802.1x enables many timers to control the rational and orderly interacting of the Supplicant, the Authenticator and the Authenticator Server. This command can set some of the timers (while other timers cannot be set) to adapt the interaction process. It could be necessary for some special and hard network environment. Generally, the user should keep the default values of the timers.

For the related commands, see display dot1x.

Example

# Set the Authentication Server timeout timer is 150s.

[SW7700] dot1x timer server-timeout 150

10.1.12. reset dot1x statistics

Syntax reset dot1x

statistics [ interface interface-list ]

View

User view

Parameter

interface interface-list: Ethernet port list including several Ethernet ports. interface-list = { interface-num [ to interface-num ] } & < 1-

10 >. interface-num specifies a single Ethernet port in the format port-num = { interface-type interface-num | interface-name }, where

interface-type specifies the port type, interface-num specifies the port number and interface-name specifies the port name. For the respective meanings and value ranges, read the Parameter of the Port Configuration section.

Description

Using the reset dot1x statistics command, you can reset the statistics information of 802.1x.

This command can be used to re-perform information statistics if the user wants to delete the former statistics information of

802.1x.

When the original statistics information is cleared, if no port type or port number is specified, the global 802.1x statistics information of the switch and 802.1x statistics information on all the ports will be cleared. If the port type and port number are specified, the 802.1x statistics information on the specified port will be cleared.

For the related commands, see display dot1x.

Example

# Clear the 802.1x statistics information on Ethernet 1/0/2.

<SW7700> reset dot1x statistics interface ethernet 1/0/2

215

A A A A N D R A D I U S

10.2. AAA Configuration Commands

10.2.1. access-limit

Syntax

access-limit { disable | enable max-user-number }

View

ISP domain view

Parameter

disable: No limit to the supplicant number in the current ISP domain.

enable max-user-number: Specifies the maximum supplicant number in the current ISP domain, ranging from 1 to 4096

Description

Using the access-limit command, you can configure a limit to the amount of supplicants in the current ISP domain.

By default, there is no limit to the amount of supplicants in the current ISP domain.

This command limits the amount of supplicants contained in the current ISP domain. The supplicants may contend with each other for the network resources. So setting a suitable limit to the amount will guarantee the reliable performance for the existing supplicants.

Example

# Sets a limit of 500 supplicants for the ISP domain, marlboro.net.

[SW7700isp-marlboro.net] access-limit enable 500

10.2.2. attribute

Syntax

attribute { ip ip-address | mac mac-address | idle-cut second | access-limit max-user-number | vlan vlanid | location [ nas-ip ip-

address ] port portnum }

undo attribute { ip | mac | idle-cut | access-limit | vlan | location }

View

Local user view

Parameter

idle-cut second: Allows/Disallows the local users to enable the idle-cut function. (The specific data for this function depends on the configuration of the ISP domain where the users locate.) The argument minute defines the idle-cut time, which is in the range of

60 to 7200 seconds.

access-limit max-user-number: Defines the maximum number of users that the current ISP domain can accommodate. The argument max-user-number is in the range of 1 to 4096.

ip: Specifies the IP address of a user.

mac mac-address: Specifies the MAC address of a user. Where, mac-address takes on the hexadecimal format of X-X-X.

vlan vlanid: Sets the VLAN attribute of user, in other words, the VLAN to which a user belong. The argument vlanid is an integer in the range of 1 to 4094.

216

A A A A N D R E L I A B I L I T Y

location: Sets the port binding attribute of user.

nas-ip ip-address: The IP address of the access server in the event of binding a remote port with a user. The argument ip-address is an

IP address in dotted decimal format and defaults to 127.0.0.1.

port portnum: Sets the port with which a user is bound. The argument portnum is represented by “SlotNumber SubSlotNumber

PortNumber”. If any of these three items is absent, the value 0 will be used to replace it.

Description

Using the attribute command, you can configure some attributes for specified local user. Using the undo attribute command, you can cancel the attributes that have been defined for this local user.

It should be noted that the argument nas-ip must be defined for a user bound with a remote port, which is unnecessary, however, in the event of a user bound with a local port.

For the related command, see display local-user.

Example

# Configure the IP address 10.110.50.1 to the user JohnQ.

[ SW7700-user-JohnQ] ip 10.110.50.1

10.2.3. cut connection

Syntax

cut connection { all | access-type { dot1x | gcm } | domain domain-name | interface portnum | ip ip-address | mac mac-address

| radius-scheme radius-scheme-name | vlan vlanid | ucibindex ucib-index | user-name user-name }

View

System view

Parameter

all : Configures to disconnect all connection.

access-type { dot1x | gcm }: Configures to cut a category of connections according to logon type. dot1x means the 802.1x users. gcm means gcm user.

domain domain-name: Configures to cut the connection according to ISP domain. domain-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.

mac mac-address: Configures to cut the connection of the supplicant whose MAC address is mac-address. The argument mac-address is in the hexadecimal format (x-x-x).

radius-scheme radius-server-name: Configures to cut the connection according to RADIUS server name. radius-server-name specifies the RADIUS server name with a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”.

interface portnum Configures to cut the connection according to the port.

ip ip-address: Configures to cut the connection according to IP address. The argument ip-address is in the hexadecimal format (ipaddress).

vlan vlanid: Configures to cut the connection according to VLAN ID. Here, vlanid ranges from 1 to 4094.

ucibindex ucib-index: Configures to cut the connection according to ucib-index. Here, ucib-index ranges from 0 to 4095.

user-name user-name : Configures to cut the connection according to user name . user-name is the argument specifying the username. It is a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.

217

A A A A N D R A D I U S

Description

Using the cut connection command, you can disconnect a user or a category of users by force.

By default, no online user will be disconnected by force.

In some occasions, it is necessary to disconnect a user or a category of users by force.

For the related command, see display connection.

Example

# Cut all the connections in the ISP domain, marlboro.net.

[SW7700] cut connection domain marlboro.net

10.2.4. display connection

Syntax

display connection [ access-type { dot1x | gcm } | domain domain-name | interface portnum | ip ip-address | mac mac-address |

radius-scheme radius-scheme-name | vlan vlanid | ucibindex ucib-index | user-name user-name ]

View

All views

Parameter

access-type { dot1x | gcm }: Configures to display the supplicants according to their logon type. dot1x means the 802.1x users.

gcm means gcm user.

domain domain-name: Configures to display all the users in an ISP domain. domain-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.

mac mac-address: Configures to display the supplicant whose MAC address is mac-address. The argument mac-address is in the hexadecimal format (x-x-x).

radius-scheme radius-server-name: Configures to display the supplicant according to RADIUS server name. radius-server-name specifies the RADIUS server name with a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”.

interface portnum Configures to display the supplicant according the port.

ip ip-address: Configures to display the user specified with IP address. The argument ipt-address is in the hexadecimal format (ipaddress).

vlan vlanid: Configures to display the user specified with VLAN ID. Here, vlanid ranges from 1 to 4094.

ucibindex ucib-index: Configures to display the user specified with ucib-index. Here, ucib-index ranges from 0 to 4095.

user-name user-name : Configures to display a user specifies with user-name . user-name is the argument specifying the username. It is a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.

Description

Using the display connection command, you can view the relevant information of all the supplicants or the specified one(s).

This command displays the information about a specified or all the users. The output can help you with the user connection diagnosis and troubleshooting.

For the related command, see cut connection.

Example

# Display the relevant information of all the users.

218

A A A A N D R E L I A B I L I T Y

<SW7700> display connection

Total 0 connections matched ,0 listed.

10.2.5. display domain

Syntax

display domain [ isp-name ]

View

All views

Parameter

isp-name: Specifies the ISP domain name, with a character string not exceeding 24 characters. The specified ISP domain shall have been created.

Description

Using the display domain command, you can view the configuration of a specified ISP domain or display the summary information of all ISP domains.

This command is used to output the configuration of a specified ISP domain or display the summary information of all ISP domains. If an ISP domain is specified, the configuration information will be displayed exactly the same, concerning the content and format, as the displayed information of the display domain command. The output information can help with ISP domain diagnosis and troubleshooting. Note that the accounting scheme to be displayed should have been created.

For the related commands, see access-limit, domain, radius scheme, state, display domain.

Example

# Display the summary information of all ISP domains of the system.

<SW7700> display domain

0 Domain=123 State=Active Accessed=0

1 Domain=3Com163.net State=Block Accessed=0

Default Domain Name: 123 Auto-Append=Yes

Total 2 domain(s) listed.

10.2.6. display local-user

Syntax

display local-user [ domain isp-name | idle-cut { enable | disable } | service-type { telnet | ftp | lan-access } | state {

active | block } | user-name user-name | vlan vlanid ]

View

All views

Parameter

domain isp-name: Configures to display all the local users in the specified ISP domain. isp-name specifies the ISP domain name with a character string not exceeding 24 characters. The specified ISP domain shall have been created.

idle-cut: Configures to display the local users according to the state of idle-cut function. disable means that the user disables the idle-cut function and enable means the user enables the function.

219

A A A A N D R A D I U S

service-type: Configures to display local user of a specified type. telnet means that: the specified user type is telnet. ftp means that: the specified user type is ftp. lan-access means that the specified user type is lan-access which mainly refers to Ethernet accessing users, 802.1x supplicants for example.

state { active | block } Configures to display the local users in the specified state. active means that the system allows the user requesting network service and block means the system does not allow the user requesting network service.

user-name user-name: Configures to display a user specified with user-name . user-name is the argument specifying the username. It is a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.

vlan vlanid: Configures to display the users belonged to specified VLAN. vlanid is the integer, ranging from 1 to 4094.

Description

Using the display local-user command, you can view the relevant information of all the local users or the specified one(s).

This command displays the relevant information about a specified or all the local users. The output can help you with the fault diagnosis and troubleshooting related to local user.

For the related command, see local-user.

Example

# Display the relevant information of all the local users.

<SW7700> display local-user

The contents of local user xxx:

State: Active ServiceType Mask:

Idle Cut: Disable

AccessLimit: Disable Current AccessNum: 0

Bind location: Disable

Vlan ID: Disable

Total 1 local user(s) Matched,1 listed.

10.2.7. domain

Syntax

domain [ isp-name | default { disable | enable isp-name }]

undo domain isp-name

View

System view

Parameter

isp-name: Specifies an ISP domain name. The name is expressed with a character string not exceeding 24 characters, excluding “/”,

“: ”, “*”, “? ”, “<”, and “>”.

default: configure default ISP.

disable: Disable default ISP configuration.

enable: Enable default ISP configuration.

Description

Using the domain command, you can configure an ISP domain or enter the view of an existing ISP domain. Using the undo

domain command, you can cancel a specified ISP domain.

By default, there is no ISP domain in the system.

220

A A A A N D R E L I A B I L I T Y

ISP domain is a group of users belonging to the same ISP. Generally, for a username in the userid@isp-name format, taking [email protected] as an example, the isp-name (i.e.3Com163.net) following the @ is the ISP domain name. When

3Com SW7700 Series Ethernet Switches control user access, as for an ISP user whose username is in userid@isp-name format, the system will take userid part as username for identification and take isp-name part as domain name.

The purpose of introducing ISP domain settings is to support the application environment with several ISP domains. In this case, an access device may have supplicants from different ISP domains. Because the attributes of ISP users, such as username and password structures, service types, may be different, it is necessary to separate them by setting ISP domains. In ISP domain view, you can configure a complete set of exclusive ISP domain attributes for each ISP domain, which includes AAA schemes (

RADIUS server group applied and so forth.)

For a switch, each supplicant belongs to an ISP domain. The system supports to configure up to 16 ISP domains. If a user has not reported its ISP domain name, the system will put it into the default domain.

When this command is used, if the specified ISP domain does not exist, the system will create a new ISP domain. All the ISP domains are in the active state when they are created.

For the related commands, see access-limit, radius scheme, state, display domain.

Example

# Create a new ISP domain, marlboro.net, and enters its view.

[SW7700] domain marlboro.net

New Domain added.

[SW7700-isp-3Com163.net]

10.2.8. idle-cut

Syntax

idle-cut { disable | enable minute flow }

View

ISP domain view

Parameter

disable: means disabling the user to use idle-cut function .

enable: means enabling the user to use the function.

minute: Specifies the maximum idle time, ranging from 1 to 120 and measured in minutes.

flow: The minimum data traffic, ranging from 1 to 10,240,000 and measured in bytes.

Description

Using the idle-cut command, you can configure the user template in the current ISP domain.

By default, after an ISP domain is created, this attribute in user template is disable, that is, the user idle-cut is disabled.

The user template is a set of default user attributes. If a user requesting for the network service does not have some required attributes, the corresponding attributes in the template will be endeavored to him as default ones. The user template of the switch you are using may only provide user idle-cut settings. After a user is authenticated, if the idle-cut is configured to enable or disable by neither the user nor the RADIUS server, the user will adopt the idle-cut state in the template.

Because a user template only works in one ISP domain, it is necessary to configure user template attributes for users from different

ISP domain respectively.

For the related command, see domain

221

A A A A N D R A D I U S

Example

# Enable the user in the current ISP domain, 3Com163.net, to use the idle-cut attribute specified in the user template (that is, enabling the user to use the idle-cut function). The maximum idle time is 50 minutes and the minimum data traffic is 500 bytes.

[SW7700-isp-3Com163.net] idle-cut enable 50 500

10.2.9. local-user

Syntax

local-user user-name

undo local-user { user-name | all [ service-type { telnet | ftp | lan-access } ] }

View

System view

Parameter

user-name : Specifies a local username with a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”.

The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.

service-type: Specifies the service type. telnet means that: the specified user type is telnet. ftp means that: the specified user type is ftp. lan-access means that the specified user type is lan-access which mainly refers to Ethernet accessing users, 802.1x supplicants for example.

all: All the users.

Description

Using the local-user command, you can configure a local user and enter the local user view. Using the undo local-user command, you can cancel a specified local user.

By default, no local user.

For the related commands, see display local-user, server-type.

Example

# Add a local user named 3Com1.

[SW7700] local-user JohnQ

[SW7700-user-JohnQ]

10.2.10. local-user password-display-mode

Syntax local-user password-display-mode { cipher-force | auto } undo local-user password-display-mode

View

System view

Parameter

cipher-force: Forced cipher mode specifies that the passwords of all the accessed users must be displayed in cipher text.

222

A A A A N D R E L I A B I L I T Y

auto: The auto mode specifies that a user is allowed to use the password command to set a password display mode.

Description

Using the local-user password-display-mode command, you can configure the password display mode of all the accessing users. Using the undo local-user password-display-mode command, you can cancel the password display mode that has been set for all the accessing users.

If cipher-force has been adopted, the user efforts of specifying to display passwords in simple text will render useless.

The password display mode of all the accessing users defaults to auto.

For the related commands, see display local-user, password.

Example

# Force all the accessing users to display passwords in cipher text.

[SW7700] local-user password-display-mode cipher-force

10.2.11. password

Syntax

password { simple | cipher } password

undo password

View

Local user view

Parameter

simple: Specifies to display passwords in simple text.

cipher: Specifies to display passwords in cipher text.

password: Defines a password, which is a character string of up to 16 characters if it is in simple text and of up to 24 characters if it is in cipher text.

Description

Using the password command, you can configure a password display mode for local users. Using the undo password command, you can cancel the specified password display mode.

If local-user password-display-mode cipher-force has been adopted, the user efforts of using the password command to set the password display mode to simple text (simple) will render useless.

For the related command, see display local-user.

Example

# Set the user 3Com1 to display the password in simple text, given the password is 20030422.

[SW7700-user-3Com1] password simple 20030422

10.2.12. radius-scheme

Syntax

radius-scheme radius-scheme-name

223

A A A A N D R A D I U S

View

ISP domain view

Parameter

radius-scheme-name: Specifies a RADIUS server group, with a character string not exceeding 32 characters.

Description

Using the radius-scheme command, you can configure the RADIUS server group used by the current ISP domain.

After an ISP domain is created, it uses the default RADIUS server group (named “default”. For configuration of relevant parameters, read the RADIUS Configuration section of this chapter ) of the system.

This command is used to specify the RADIUS server group for the current ISP domain. The specified RADIUS server group shall have been created.

For the related commands, see radius scheme, display radius.

Example

! The following example designates the current ISP domain, marlboro.net, to use the RADIUS server, Radserver.

[SW7700-isp-marlboro.net] radius-scheme Radserver

10.2.13. service-type

Syntax

service-type { telnet [ level level ] | ftp [ ftp-directory directory ] | lan-access }

undo service-type { telnet [ level ] | ftp [ ftp-directory ] | lan-access }

View

Local user view

Parameter

telent: Specifies user type as Telnet.

level level: Specifies the level of Telnet users. The argument level is an integer in the range of 0 to 3 and defaults to 3.

ftp: Specifies user type as ftp.

ftp-directory directory: Specifies the directory of ftp users, directory is a character string of up to 64 characters.

lan-access: Specifies user type to lan-access, which mainly refers to Ethernet accessing users, 802.1x supplicants for example.

Description

Using the service-type command, you can configure a service type for a particular user. Using the undo service-type command, you can cancel the specified service type for the user.

Example

# Set to provide the lan-access service for the user JohnQ.

[SW7700-user-JohnQ] service-type lan-access

224

A A A A N D R E L I A B I L I T Y

10.2.14. state

Syntax state { active | block }

View

ISP domain view

Local user view

Parameter

active: Configures the current ISP domain (ISP domain view)/current user (local user view) as being in active state, that is, the system allows the users in the domain (ISP domain view) or the current user (local user view) to request network service.

block: Configures the current ISP domain (ISP domain view)/current user (local user view) as being in block state, that is, the system does not allow the users in the domain (ISP domain view) or the current user (local user view) to request network service.

Description

Using the state command, you can configure the state of the current ISP domain/ current user.

By default, after an ISP domain is created, it is in the active state (in ISP domain view).

A local user will be active (in local user view) upon its creation.

In ISP domain view, every ISP can either be in active or block state. If an ISP domain is configured to be active, the users in it can request for network service, while in block state, its users cannot request for any network service, which will not affect the users currently online.

For the related command, see domain.

Example

# Set the current ISP domain marlboro.net to be in the block state. The supplicants in this domain cannot request for the network service.

[SW7700 -isp-marlboro.net] state block

# Set the user 3Com1 to be in the block state.

[SW7700 -user-3Com1] state block

10.3. RADIUS Protocol Configuration Commands

10.3.1. data-flow-format

View

RADIUS server group view

Parameter

data: Set data unit.

225

A A A A N D R A D I U S

byte: Set 'byte' as the unit of data flow.

giga-byte: Set 'giga-byte' as the unit of data flow.

kilo-byte: Set 'kilo-byte' as the unit of data flow.

mega-byte: Set 'mega-byte' as the unit of data flow.

packet: Set data packet unit.

giga-packet: Set 'giga-packet' as the unit of packet flow.

kilo-packet: Set 'kilo-packet' as the unit of packet flow.

mega-packet: Set 'mega-packet' as the unit of packet flow.

one-packet: Set 'one-packet' as the unit of packet flow.

Description

Using the data-flow-format command, you can configure the unit of data flow that send to RADIUS Server.

By default, the data unit is byte and the data packet unit is one-packet.

For the related command, see display radius.

Example

# Set the unit of data flow that send to kilo-byte and the data packet to kilo-packet

[SW7700-radius-3Com] data-flow-format data kilo-byte packet kilo-packet

10.3.2. display local-server statistics

Syntax display local-server statistics

View

All views

Parameter

None

Description

Using the display local-server statistics command, you can view the configuration information of local RADIUS server group.

For the related command, see local-server.

Example

# Display local RADIUS server group information.

<SW7700> display local-server statistics

The localserver packet statistics:

Receive: 0 Send: 0

Discard: 0 Receive Packet Error: 0

Auth Reveive: 0 Auth Send: 0

Acct Receive: 0 Acct Send: 0

226

A A A A N D R E L I A B I L I T Y

10.3.3. display radius

Syntax

display radius [ radius-server-name ]

View

All views

Parameter

radius-server-name: Specifies the RADIUS server group name with a character string not exceeding 32 characters, excluding “/”, “:”,

“*”, “?”, “<” and “>”. Display all RADIUS server groups when the parameter is not set.

Description

Using the display radius command, you can view the configuration information of all RADIUS server groups or a specified one.

By default, this command outputs the configuration information about the specified or all the RADIUS server groups. The output can help with RADIUS diagnosis and troubleshooting.

For the related command, see radius scheme.

Example

# Display the configuration information of all the RADIUS server groups.

<SW7700> display radius

------------------------------------------------------------------

ServerName =default Index=0 Type=standard

Primary Auth IP =0.0.0.0 Port=1812 State=Down

Primary Acct IP =0.0.0.0 Port=1813 State=Down

Second Auth IP =0.0.0.0 Port=1812 State=Down

Second Acct IP =0.0.0.0 Port=1813 State=Down

Auth Server Encryption Key= 3Com

Acct Server Encryption Key= 3Com

TimeOutValue (seconds)=3 RetryTimes=3 RealtimeACCT (minutes)=12

Permitted send realtime PKT failed counts =5

Retry sending times of noresponse acct-stop-PKT =500

Username format =with-domain

Data flow unit =Byte

Packet unit =1

------------------------------------------------------------------

ServerName =3Com Index=1 Type=standard

Primary Auth IP =10.11.1.1 Port=1812 State=Up

Primary Acct IP =10.11.1.2 Port=1813 State=Up

Second Auth IP =10.11.1.2 Port=1812 State=Up

Second Acct IP =10.11.1.1 Port=1813 State=Up

Auth Server Encryption Key= 3Com

Acct Server Encryption Key= 3Com

TimeOutValue (seconds)=3 RetryTimes=3 RealtimeACCT (minutes)=12

Permitted send realtime PKT failed counts =5

Retry sending times of noresponse acct-stop-PKT =500

Username format =without-domain

Data flow unit =Byte

Packet unit =1

------------------------------------------------------------------

Printed [2] items

227

A A A A N D R A D I U S

10.3.4. display radius statistics

Syntax display radius statistics

View

All views

Parameter

None

Description

Using the display radius statistics command, you can view the statistics information of RADIUS packet.

This command outputs the statistics information about the RADIUS packets. The displayed packet information can help with

RADIUS diagnosis and troubleshooting.

For the related command, see radius scheme.

Example

# Display the statistics information of RADIUS packets.

<SW7700> display radius statistics state statistic(total=1528):

DEAD=1528 AuthProc=0 AuthSucc=0

AcctStart=0 RLTSend=0 RLTWait=0

AcctStop=0 OnLine=0 Stop=0

StateErr=0

Receive and Send packets statistic:

Send PKT total :0 Receive PKT total:0

RADIUS received packets statistic:

Code= 2,Num=0 ,Err=0

Code= 3,Num=0 ,Err=0

Code= 5,Num=0 ,Err=0

Code=11,Num=0 ,Err=0

Code=22,Num=0 ,Err=0

Running statistic:

RADIUS received messages statistic:

Normal auth request ,Num=0 ,Err=0 ,Succ=0

EAP auth request ,Num=0 ,Err=0 ,Succ=0

Account request ,Num=0 ,Err=0 ,Succ=0

Account off request ,Num=0 ,Err=0 ,Succ=0

Leaving request ,Num=0 ,Err=0 ,Succ=0

PKT auth timeout ,Num=0 ,Err=0 ,Succ=0

PKT acct_timeout ,Num=0 ,Err=0 ,Succ=0

Realtime Account ,Num=2317 ,Err=0 ,Succ=2317

PKT response ,Num=0 ,Err=0 ,Succ=0

EAP reauth_request ,Num=0 ,Err=0 ,Succ=0

PORTAL access ,Num=0 ,Err=0 ,Succ=0

Update ack ,Num=0 ,Err=0 ,Succ=0

PORTAL access ack ,Num=0 ,Err=0 ,Succ=0

Session ctrl pkt ,Num=0 ,Err=0 ,Succ=0

RADIUS send messages statistic:

Normal auth accept ,Num=0

Normal auth reject ,Num=0

228

A A A A N D R E L I A B I L I T Y

EAP auth accept ,Num=0

EAP auth reject ,Num=0

EAP auth replying ,Num=0

EAP reauth accept ,Num=0

EAP_reauth_reject ,Num=0

Account success ,Num=0

Account failure ,Num=0

Account off ack ,Num=0

Update request ,Num=0

Leaving ack ,Num=0

Cut req ,Num=0

RecError_MSG_sum:0 SndMSG_Fail_sum :0

Timer_Err :0 Alloc_Mem_Err :0

State Mismatch :0 Other_Error :0

No-response-acct-stop packet=0

Discarded No-response-acct-stop packet=0

10.3.5. display stop-accounting-buffer

Syntax

display stop-accounting-buffer { radius-scheme radius-scheme-name | session-id session-id | time-range start-time stop-time |

user-name user-name }

View

All views

Parameter

radius-scheme radius-server-name: Configures to display the saved stopping accounting requests according to RADIUS server name. radius-server-name specifies the RADIUS server name with a character string not exceeding 32 characters, excluding “/”, “:”,

“*”, “?”, “<” and “>”.

session-id session-id: Configures to display the saved stopping accounting requests according to the session ID. session-id specifies the session ID with a character string not exceeding 50 characters.

time-range start-time stop-time: Configures to display the saved stopping accounting requests according to the saving time. Start-time specifies the start time of the saving time range and stop-time specifies the stop time of the saving time range. The time is expressed in the format hh:mm:ss-yyyy/mm/dd. When this parameter is specified, all the stopping accounting requests saved in the time range since start-time to stop-time will be displayed.

user-name user-name : Configures to display the saved stopping accounting requests according to the username. User-name specifies the username, a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.

Description

Using the display stop-accounting-buffer command, you can view the stopping accounting requests, which have not been responded and saved in the buffer.

After transmitting the stopping accounting requests, if there is no response from the RADIUS server, the switch will save the packet in the buffer and retransmit it for several times, which is set through the retry realtime-accounting .

This command is used to display the stopping accounting requests saved in the switch buffer. You can select to display the packets sent to a certain RADIUS server, or display the packets according to user session ID or username. You may also display the request packets saved during a specified time range. The displayed packet information can help with diagnosis and troubleshooting.

For the related commands, see reset stop-accounting-buffer, stop-accounting-buffer enable, retry stop-accounting.

229

A A A A N D R A D I U S

Example

# Display the stopping accounting requests saved in the system buffer since 0:0:0 to 23:59:59 on August 31, 2002.

<SW7700> display stop-accounting-buffer time-range 0:0:0-2002/08/31 23:59:59-2002/08/31

Total find 0 record

10.3.6. key

Syntax

key { accounting | authentication } string

undo key { accounting | authentication }

View

RADIUS server group view

Parameter

accounting: Configures to set/delete the authentication key for the RADIUS accounting packet.

authentication: Configures to set/delete the encryption key for RADIUS authentication/authorization packet.

string: Specifies the key with a character string not exceeding 16 characters, excluding “/”, “: ”, “*”, “? ”, “<” and “>”. By default, the key is “3Com”.

Description

Using the key command, you can configure encryption key for RADIUS authentication/authorization or accounting packet.

Using the undo key command, you can restore the default key.

RADIUS client (switch system) and RADIUS server use MD5 algorithm to hash the exchanged packets. The two ends verify the packet through setting the key. Only when the keys are identical can both ends accept the packets from each other and give responses. So it is necessary to ensure that the keys set on the switch and the RADIUS server are identical. If the authentication/authorization and accounting are performed on two different servers with different keys, you should set two keys respectively.

For the related commands, see primary accounting, primary authentication, radius scheme

Example

Example 1:

# Set the authentication/authorization key of the RADIUS server group to “hello”.

[SW7700-radius] key authentication hello

Example 2:

# Set the accounting packet key of the RADIUS server group to “ok”.

[SW7700-radius] key accounting ok

10.3.7. local-server

Syntax

local-server nas-ip ip-address key password

undo local-server nas-ip ip-address

View

System view

230

A A A A N D R E L I A B I L I T Y

Parameter

nas-ip ip-address: set IP address of access server. ip-address is expressed in the format of dotted decimal.

key password: Set password of logon user. password is a character string containing up to 16 characters.

Description

Using the local-server command, you can configure the parameters of local RADIUS server. Using the undo local-server command, you can cancel a local RADIUS server.

RADIUS service, which adopts authentication/authorization/accounting servers to manage users, is widely used in SW7700 switches. Besides, local authentication/authorization/accounting service is also used in these products and it is called local

RADIUS function, i.e. realize basic RADIUS function on the switch. Note that when using local RADIUS server function, remember the number of UDP port used for authentication is 1645 and that for accounting is 1646.

SW7700 switches support up to 16 local RADIUS server groups.

For the related commands, see radius scheme, state.

Example

# Set the IP address of local RADIUS server group to 10.110.1.2 and the password to 3Com.

[SW7700] local-server nas-ip 10.110.1.2 key 3Com

10.3.8. primary accounting

Syntax

primary accounting ip-address [ port-number ]

undo primary accounting

View

RADIUS server group view

Parameter

ip-address: IP address, in dotted decimal format. By default, the IP addresses of the primary accounting servers is at 0.0.0.0.

port-number: Specifies UDP port number. ranging from 1 to 65535. By default, the UDP port for accounting service is 1813.

Description

Using the primary accounting command, you can configure the IP address and port number for the primary accounting server.

Using the undo primary accounting command, you can restore the default IP address and port number of the primary RADIUS accounting server.

After creating a RADIUS server group, you are supposed to set IP addresses and UDP port numbers for the RADIUS servers, including primary/second authentication/authorization servers and accounting servers. In real networking environments, the above parameters shall be set according to the specific requirements. However, at least you have to set one authentication/authorization server and an accounting server. Besides, ensure that the RADIUS service port settings on the

Ethernet switch is consistent with the port settings on the RADIUS server.

For the related commands, see key, radius scheme, state.

Example

# Set the IP address of the primary accounting server of RADIUS server group, “3Com”, to 10.110.1.2 and the UDP port 1813 to provide RADIUS accounting service.

[SW7700-radius-3Com] primary accounting 10.110.1.2 1813

231

A A A A N D R A D I U S

10.3.9. primary authentication

Syntax

primary authentication ip-address [ port-number ]

undo primary authentication

View

RADIUS server group view

Parameter

ip-address: IP address, in dotted decimal format. By default, the IP addresses of the primary authentication/authorization is at

0.0.0.0.

port-number: Specifies UDP port number. ranging from 1 to 65535. By default, the UDP port for authentication/authorization service is 1812 .

Description

Using the primary authentication command, you can configure the IP address and port number for the primary RADIUS authentication/authorization. Using the undo primary authentication command, you can restore the default IP address and port number of the primary RADIUS authentication/authorization.

Ethernet switch is consistent with the port settings on the RADIUS server.

For the related commands, see key, radius scheme, state.

Example

# Set the IP address of the primary authentication/authorization server of RADIUS server group, “3Com”, to 10.110.1.1 and the

UDP port 1812 to provide RADIUS authentication/authorization service.

[SW7700-radius-3Com] primary authentication auth 10.110.1.1 1812

10.3.10. radius scheme

Syntax

radius scheme radius-server-name

undo radius scheme radius-server-name

View

System view

Parameter

radius-server-name: Specifies the Radius server name with a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”,

“<” and “>”.

232

A A A A N D R E L I A B I L I T Y

Description

Using the radius scheme command, you can configure a RADIUS server group and enter its view. Using the undo radius

scheme command, you can cancel the specified RADIUS server group.

By default, there is RADIUS server group named “default” has been created in the system. The attributes of “default” are all default values.

RADIUS protocol configuration is performed on a per-RADIUS-server-group basis. Every RADIUS server group shall at least have the specified IP address and UDP port number of the RADIUS authentication/authorization/accounting server and some necessary parameters exchanged with the RADIUS client end (switch system). So it is necessary to create the RADIUS server group and enter its view before performing other RADIUS protocol configurations.

A RADIUS server group can be used by several ISP domains at the same time.

Although undo radius scheme can remove a specified RADIUS server group. However, the default one cannot be removed.

Note that a serer group currently in use by the online user cannot be removed.

For the related commands, see key, retry realtime-accounting, radius-scheme, timer realtime-accounting, stop-

accounting-buffer enable, retry stop-accounting, server-type, state, user-name-format, retry, display radius, display

radius statistics.

Example

# Create a RADIUS server group named “3Com” and enters its view.

[SW7700] radius scheme 3Com

[SW7700-radius-3Com]

10.3.11. reset stop-accounting-buffer

Syntax

reset stop-accounting-buffer { radius-scheme radius-scheme-name | session-id session-id | time-range start-time stop-time | user-

name user-name }

View

User view

Parameter

radius-scheme radius-server-name: Configures to delete the stopping accounting requests from the buffer according to the specified

RADIUS server name. radius-server-name specifies the RADIUS server name with a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”.

session-id session-id: Configures to delete the stopping accounting requests from the buffer according to the specified session ID.

session-id specifies the session ID with a character string not exceeding 50 characters.

time-range start-time stop-time: Configures to delete the stopping accounting requests from the buffer according to the saving time.

Start-time specifies the start time of the saving time range and stop-time specifies the stop time of the saving time range. The time is expressed in the format hh:mm:ss-yyyy/mm/dd. When this parameter is set, all the stopping accounting requests saved since start-

time to stop-time will be deleted.

user-name user-name : Configures to delete the stopping accounting requests from the buffer according to the username. User-name specifies the username, a character string not exceeding 32 characters, excluding “/”, “:”, “*”, “?”, “<” and “>”. The @ character can only be used once in one username. The pure username (the part before @, namely the user ID) cannot exceed 24 characters.

Description

Using the reset stop-accounting-buffer command, you can reset the stopping accounting requests, which are saved in the buffer and have not been responded.

233

A A A A N D R A D I U S

By default, after transmitting the stopping accounting requests, if there is no response from the RADIUS server, the switch will save the packet in the buffer and retransmit it for several times, which is set through the retry realtime-accounting command.

This command is used to delete the stopping accounting requests from the switch buffer. You can select to delete the packets transmitted to a specified RADIUS server, or according to the session-id or username, or delete the packets transmitted during the specified time-range.

For the related commands, see stop-accounting-buffer enable, retry stop-accounting, display stop-accounting-buffer.

Example

# Delete the stopping accounting requests saved in the system buffer by the user, [email protected].

[SW7700] reset stop-accounting-buffer user-name [email protected]

# Delete the stopping accounting requests saved in the system buffer since 0:0:0 to 23:59:59 on August 31, 2002.

[SW7700] reset stop-accounting-buffer time-range 0:0:0-2002/08/31 23:59:59-2002/08/31

10.3.12. retry

Syntax

retry retry-times

undo retry

View

RADIUS server group view

Parameter

retry-times: Specifies the maximum times of retransmission, ranging from 1 to 20. By default, the value is 3.

Description

Using the retry command, you can configure the RADIUS request retransmission times. Using the undo retry command, you can restore the retry-times to default value.

Because RADIUS protocol uses UDP packets to carry the data, its communication process is not reliable. If the RADIUS server has not responded NAS until timeout, NAS has to retransmit RADIUS request packet. If it transmits more than the specified retry-time, NAS considers the communication with the current RADIUS server has been disconnected and it will transmit request packet to other RADIUS servers.

Setting a suitable retry-time according to the network situation can speed up the system response.

For the related command, see radius scheme

Example

# Set to retransmit the RADIUS request packet no more than 5 times via the server 3Com in the RADIUS server group.

[SW7700-radius-3Com] retry 5

10.3.13. retry realtime-accounting

Syntax

retry realtime-accounting retry-times

View

RADIUS server group view

234

A A A A N D R E L I A B I L I T Y

Parameter

retry-times: Specifies the maximum times of real-time accounting request failing to be responded, ranging from 1 to 255. By default, the accounting request can fail to be responded up to 5 times.

Description

Using the retry realtime-accounting command, you can configure the maximum times of real-time accounting request failing to be responded.

RADIUS server usually checks if a user is online with timeout timer. If the RADIUS server has not received the real-time accounting packet from NAS, it will consider that there is line or device failure and stop accounting. Accordingly, it is necessary to disconnect the user at NAS end and on RADIUS server synchronously when some unexpected failure occurs. 3Com SW7700

Series Ethernet Switches support to set maximum times of real-time accounting request failing to be responded. NAS will disconnect the user if it has not received real-time accounting response from RADIUS server for some specified times.

How to calculate the value of count? Suppose RADIUS server connection will timeout in T and the real-time accounting interval of

NAS is t, then the integer part of the result from dividing T by t is the value of count. Therefore, when applied, T is suggested the numbers which can be divided exactly by t.

For the related command, see radius scheme

Example

# Allow the real-time accounting request failing to be responded for up to 10 times.

[SW7700-radius-3Com] retry realtime-accounting 10

10.3.14. retry stop-accounting

Syntax

retry stop-accounting retry-times

undo retry stop-accounting

View

RADIUS server group view

Parameter

retry-times: Specifies the maximal retransmission times after stopping accounting request,. ranging from 10 to 65535. By default, the value is 500.

Description

Using the retry stop-accounting command, you can configure the maximal retransmission times after stopping accounting request. Using the undo retry stop-accounting command, you can cancel the function of retransmission after stopping accounting request.

Because the stopping accounting request concerns account balance and will affect the amount of charge, which is very important for both the user and ISP, NAS shall make its best effort to send the message to RADIUS accounting server. Accordingly, if the message from the switch to RADIUS accounting server has not been responded, the switch shall save it in the local buffer and retransmit it until the server responds or discard the messages after transmitting for specified times.

For the related commands, see reset stop-accounting-buffer, radius scheme, display stop-accounting-buffer.

Example

# Indicate that, when stopping accounting request for the server “3Com” in the RADIUS server group, the switch system will retransmit the packets for up to 1000 times.

235

A A A A N D R A D I U S

[SW7700-radius-3Com] retry stop-accounting 1000

10.3.15. secondary accounting

Syntax

secondary accounting ip-address [ port-number ]

undo secondary accounting

View

RADIUS server group view

Parameter

ip-address: IP address, in dotted decimal format. By default, the IP addresses of second accounting server is at 0.0.0.0.

port-number: Specifies the UDP port number, ranging from 1 to 65535. By default, the accounting service is provided via UDP

1813.

Description

Using the secondary accounting command, you can configure the IP address and port number for the second RADIUS accounting server. Using the undo secondary accounting command, you can restore the IP address and port number to default values.

For detailed information, read the Description of the primary accounting command.

For the related commands, see key, radius scheme, state.

Example

# Set the IP address of the second accounting server of RADIUS server group, 3Com, to 10.110.1.1 and the UDP port 1813 to provide RADIUS accounting service.

[SW7700-radius-3Com] secondary accounting 10.110.1.1 1813

10.3.16. secondary authentication

Syntax

secondary authentication ip-address [ port-number ]

undo secondary authentication

View

RADIUS server group view

Parameter

ip-address: IP address, in dotted decimal format. By default, the IP addresses of second authentication/authorization is at 0.0.0.0.

port-number: Specifies the UDP port number, ranging from 1 to 65535. By default, the authentication/authorization service is provided via UDP 1812

Description

Using the secondary authentication command, you can configure the IP address and port number for the second RADIUS authentication/authorization. Using the undo secondary authentication command, you can restore the IP address and port number to default values.

236

A A A A N D R E L I A B I L I T Y

For detailed information, read the Description of the primary authentication command.

For the related commands, see key, radius scheme, state.

Example

# Set the IP address of the second authentication/authorization server of RADIUS server group, “3Com”, to 10.110.1.2 and the

UDP port 1812 to provide RADIUS authentication/authorization service.

[SW7700-radius-3Com] secondary authentication 10.110.1.2 1812

10.3.17. state

Syntax state { primary | secondary } { accounting | authentication } { block | active }

View

RADIUS server group view

Parameter

primary: Configures to set the state of the primary RADIUS server.

secondary: Configures to set the state of the second RADIUS server.

accounting: Configures to set the state of RADIUS accounting server.

authentication: Configures to set the state of RADIUS authentication/authorization.

block: Configures the RADIUS server to be in the state of block.

active: Configures the RADIUS server to be active, namely the normal operation state.

Description

Using the state command, you can configure the state of RADIUS server.

By default, all the RADIUS servers in every RADIUS server group are in the state of active.

For the primary and second servers (no matter an authentication/authorization or an accounting server), if the primary server is disconnected to NAS for some fault, NAS will automatically turn to exchange packets with the second server. However, after the primary one recovers, NAS will not resume the communication with it at once, instead, it continues communicating with the second one. When the second one fails to communicate, NAS will turn to the primary one again. This command is used to set the primary server to be active manually, in order that NAS can communicate with it right after the troubleshooting.

When the primary and second servers are all active or block, NAS will send the packets to the primary server only.

For the related commands, see radius scheme, primary authentication, secondary authentication, primary accounting,

secondary accounting.

Example

# Set the second authentication server of RADIUS server group, “3Com”, to be active.

[SW7700-radius-3Com] state secondary authentication active

10.3.18. stop-accounting-buffer enable

Syntax stop-accounting-buffer enable undo stop-accounting-buffer enable

237

A A A A N D R A D I U S

View

RADIUS server group view

Parameter

None

Description

Using the stop-accounting-buffer enable command, you can configure to save the stopping accounting requests without response in the switch system buffer. Using the undo stop-accounting-buffer enable command, you can cancel the function of saving the stopping accounting requests without response in the switch system buffer.

By default, enable to save the stopping accounting requests in the buffer.

For the related commands, see reset stop-accounting-buffer, radius scheme, display stop-accounting-buffer.

Example

# Indicate that, for the server “3Com” in the RADIUS server group, the switch system will save the stopping accounting request packets in the buffer

[SW7700-radius-3Com] stop-accounting-buffer enable

10.3.19. timer

Syntax

timer second

undo timer

View

RADIUS server group view

Parameter

second: RADIUS server response timeout timer, ranging from 1 to 10 and measured in seconds. By default, the value is 3.

Description

Using the timer command, you can configure RADIUS server response timer. Using the undo timer command, you can restore the default value of the timer.

After RADIUS (authentication/authorization or accounting) request packet has been transmitted for a period of time, if NAS has not received the response from RADIUS server, it has to retransmit the message to guarantee RADIUS service for the user. The period taken is called RADIUS server response timeout time, which is controlled by the RADIUS server response timeout timer in the switch system. This command is used to set this timer.

Setting a suitable timer according to the network situation will enhance the system performance.

For the related commands, see radius scheme, retry.

Example

# Set the response timeout timer of RADIUS server group, 3Com, to 5 seconds.

238

A A A A N D R E L I A B I L I T Y

[SW7700-radius-3Com] timer 5

10.3.20. timer realtime-accounting

Syntax

timer realtime-accounting minute

undo timer realtime-accounting

View

RADIUS server group view

Parameter

minute: Real-time accounting interval, ranging from 3 to 60 and measured in minutes. By default, the value is 12.

Description

Using the timer realtime-accounting command, you can configure the real-time accounting interval. Using the undo timer

realtime-accounting command, you can restore the default interval.

To implement real-time accounting, it is necessary to set a real-time accounting interval. After the attribute is set, NAS will transmit the accounting information of online users to the RADIUS server regularly.

The value of minute is related to the performance of NAS and RADIUS server. The smaller the value is, the higher the requirement for NAS and RADIUS server is. When there are a large amount of users (more than 1000, inclusive), we suggest a larger value.

The following table recommends the ratio of minute value to number of users.

Recommended ratio of minute to number of users

Number of users Real-time accounting interval (minute)

1 to 99

100 to 499

500 to 999

≥1000

≥15

For the related commands, see retry realtime-accounting, radius scheme.

Example

# Set the real-time accounting interval of RADIUS server group, “3Com”, to 51 minutes.

[SW7700-radius-3Com] timer realtime-accounting 51

10.3.21. user-name-format

Syntax user-name-format { with-domain | without-domain }

View

RADIUS server group view

Parameter

with-domain: Specifies to send the username with domain name to RADIUS server.

without-domain: Specifies to send the username without domain name to RADIUS server.

239

A A A A N D R A D I U S

Description

Using the user-name-format command, you can configure the username format sent to RADIUS server.

By default, RADIUS server acknowledges that the username sent to it includes ISP domain name.

The supplicants are generally named in userid@isp-name format. The part following “@” is the ISP domain name. The switch will put the users into certain ISP domains according to the domain names. However, some earlier RADIUS servers reject the username including ISP domain name. In this case, the username will be sent to the RADIUS server after its domain name is removed. Accordingly, the switch provides this command to decide whether the username to be sent to RADIUS server carries

ISP domain name or not.

Note: If a RADIUS server group is configured to reject usernames including ISP domain names, the RADIUS server group shall not be simultaneously used in more than one ISP domains. Otherwise, the RADIUS server will regard two users in different

ISP domains as the same user by mistake, if they have the same username (excluding their respective domain names.)

For the related command, see radius scheme.

Example

# Specify to send the username without domain name to RADIUS server.

[SW7700-radius-3Com] user-name-format without-domain

240

Chapter 11 Reliability

11.1. VRRP Configuration Commands

11.1.1. debugging vrrp

Syntax debugging vrrp { state | packet } undo debugging vrrp { state | packet }

View

User view.

Parameter

state: debugging VRRP state

packet: debugging VRRP packets

Description

Using the debugging vrrp command, you can enable VRRP debugging. Using the undo debugging vrrp command, you can disable VRRP debugging. By default, VRRP debugging is disabled.

Example

# Enable VRRP state debugging.

<SW7700> debugging vrrp state

11.1.2. display vrrp

Syntax display vrrp

[{ interface | statistics } vlan-interface interface-num ] [ virtual-router-ID ]

View

All views.

Parameter

interface-name: Interface name, the interface form is VLAN-interface interface-num.

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

Description

Using the display vrrp command, you can display information about the VRRP state.

241

R E L I A B I L I T Y

This command is used to view the information about the VRRP state and configuration parameters. If the interface name and virtual router ID are not specified, the state information about all the virtual routers on the switch will be displayed. If only the interface name is specified, the state information about all the virtual routers on the interface will be displayed. If the interface name and virtual router ID are specified, the state information about the specified virtual router on the interface will be displayed.

Example

# Display the information about the virtual routers on VLAN-interface 20 of the switch.

[SW7700] display vrrp interface vlan 20

Vlan-interface20 |

State

Virtual IP

Virtual Router 10

: Initialize

: 10.10.10.2

Priority

Preempt

Timer

Auth Type

: 100

: YES Delay Time : 0

: 3

: NONE

11.1.3. vrrp authentication-mode

Syntax

vrrp authentication-mode type [ key ]

undo vrrp authentication-mode

View

VLAN interface view.

Parameter

type: Authentication type. There are following types:

simple: Indicates to perform simple character authentication.

md5: Indicates to perform the AH authentication with MD5 algorithm.

key: Authentication key. When simple authentication is configured, the key cannot exceed 8 characters. When md5 authentication is configured, the key cannot exceed 16 characters.

Description

Using the vrrp authentication-mode command, you can configure the authentication type and key of a specified VRRP virtual router. Using the undo vrrp authentication-mode command, you can clear the authentication type and key of a specified VRRP virtual router.

If the simple or md5 authentication is configured, it is required to set the authentication key.

This command is used to configure the authentication type and key for all the VRRP virtual routers on an interface. As defined in the protocol, all the virtual routers on an interface use the same authentication type and key. In addition, all the members joining the same virtual router also use the same authentication type and key.

When the authentication type and key are set, the upper/lower cases are not necessary to be matched.

Example

# Specify the authentication type and key for a VRRP virtual router.

[SW7700-vlan-interface2] vrrp authentication-mode simple 3com

242

R E L I A B I L I T Y

11.1.4. vrrp vrid preempt-mode

Syntax

vrrp vrid virtual-router-ID preempt-mode [ timer delay delay-value ]

undo vrrp vrid virtual-router-ID preempt-mode

View

VLAN interface view.

Parameter

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

delay-value: Delay in seconds, ranging from 0 to 255.

Description

Using the vrrp vrid preempt-mode command, you can configure the preemption and delay of the virtual router. Using the undo

vrrp vrid preempt-mode command, you can cancel the preemption.

By default, the virtual router is in preempt mode and delay-value is 0 second.

If a higher-priority switch is required to preempt the Master, you must configure it as preemption. You can also set a delay for the preemption. If you configure it not to preempt, the delay will be set to 0 automatically.

Example

# Configure the switch to preempt.

[SW7700-vlan-interface2] vrrp vrid 1 preempt-mode

# Set a delay.

[SW7700-vlan-interface2] vrrp vrid 1 preempt-mode timer delay 5

# Configure the switch not to preempt.

[SW7700-vlan-interface2] undo vrrp vrid 1 preempt-mode

11.1.5. vrrp vrid priority

Syntax

vrrp vrid virtual-router-ID priority priority

undo vrrp vrid virtual-router-ID priority

View

VLAN interface view.

Parameter

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

priority: Priority value, ranging from 1 to 254; By default, the priority value is 100.

Description

Using the vrrp vrid priority command, you can set the virtual router priority. Using the undo vrrp vrid priority command, you can clear the virtual router priority.

243

R E L I A B I L I T Y

The priority decides the status of a switch in the virtual router. A higher-priority switch is more likely to be a Master. Priority 0 is reserved for a special purpose. 255 is reserved for the IP address owner. The priority of the IP address owner is always 255 and cannot be modified.

Example

# Set the virtual router priority on VLAN-interface2.

[SW7700-vlan-interface2] vrrp vrid 1 priority 150

11.1.6. vrrp vrid timer

Syntax

vrrp vrid virtual-router-ID timer advertise adver-interval

undo vrrp vrid virtual-router-ID timer advertise

View

VLAN interface view.

Parameter

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

adver-interval: VRRP packet interval of the Master in the virtual router in seconds, ranging from 1 to 255; By default, the value is 3s.

Description

Using the vrrp vrid timer command, you can set the virtual router timer. Using the undo vrrp vrid timer command, you can clear the virtual router timer.

This command is used to set the VRRP packet interval of the Master in the virtual router. You should set the identical timer value for the switches in the same virtual router to avoid improper configuration.

Example

# Configure the Master to transmit VRRP packets every 15 seconds.

[SW7700-vlan-interface2] vrrp vrid 1 timer advertise 15

11.1.7. vrrp vrid track

Syntax

vrrp vrid virtual-router-ID track vlan-interface interface-num [ reduced value-reduced ]

undo vrrp vrid virtual-router-ID track [ interface-name ]

View

VLAN interface view.

Parameter

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

interface-name: Interface which is to be tracked, the interface form is VLAN-interface interface-num.

value-reduced: Reduced value of priority, ranging from 1 to 255; By default, the reduced value of the priority is 10.

244

R E L I A B I L I T Y

Description

Using the vrrp vrid track command, you can configure tracking of the interface. Using the undo vrrp vrid track command, you can stop tracking the interface.

The VRRP interface track expends the backup function, which thereby can be implemented not only when the switch fails, but also when a network interface is down. The user can use this command to track or stop tracking an interface or all the interfaces.

After the configuration of the interface tracking, the priority of the switch will be reduced, if the tracked interface turns down.

Accordingly, some other switch in the virtual router will have the comparatively highest priority and become the new Master, thereby implementing the backup function. The IP address owner does not allow the configuration of interface tracking.

A single virtual router supports up to 8 tracks.

Example

# Configure to track the interface.

[SW7700-vlan-interface2] vrrp vrid 1 track vlan-interface 1 reduced 50

11.1.8. vrrp vrid virtual-ip

Syntax

vrrp vrid virtual-router-ID virtual-ip ip-address

undo vrrp vrid virtual-router-ID [ virtual-ip virtual-address ]

View

VLAN interface view.

Parameter

virtual-router-ID: VRRP virtual router ID, ranging from 1 to 255.

ip-address: Virtual IP address.

Description

Using the vrrp vrid virtual-ip command, you can create a virtual router or add a virtual IP address to an existing virtual router.

Using the undo vrrp vrid virtual-ip command, you can delete an existing virtual router or an address from the virtual router.

Example

# Create a virtual router

[SW7700-vlan-interface2] vrrp vrid 1 virtual-ip 10.10.10.10

# Add a virtual IP address to an existing virtual router.

[SW7700-vlan-interface2] vrrp vrid 1 virtual-ip 10.10.10.11

# Delete a virtual IP address.

[SW7700-vlan-interface2] undo vrrp vrid 1 virtual-ip 10.10.10.10

# Delete a virtual router.

[SW7700-vlan-interface2] undo vrrp vrid 1 virtual-ip

245

Chapter 12 System Management

12.1. File System Management Commands

12.1.1. cd

Syntax

cd directory

View

User view

Parameter

directory: Destination directory; The default directory is the working path configured by the user when the system starts.

Description

Using the cd command, you can change the current user configuration path on the Ethernet Switch.

Example

# Change the current working directory of the switch to flash.

<SW7700>cd flash:

<SW7700>pwd flash:

12.1.2. copy

Syntax

copy fileurl-source fileurl-dest

View

User view

Parameter

fileurl-source: Source file name.

fileurl-dest: Destination file name.

Description

Using the copy command, you can copy a file.

When the destination filename is the same as that of an existing file, the system will ask whether to overwrite it.

247

S Y S T E M M A N A G E M E N T

Example

# Display current directory information.

<SW7700> dir

Directory of *

0 -rw- 595 Jul 12 2001 19:41:50 test.txt

16125952 bytes total (13975552 bytes free)

# Copy the file test.txt and saves it as test.bak.

<SW7700> copy test.txt test.bak

Copy flash:/test/test.txt to flash:/test/test.bak ?[confirm]:y

% Copyed file flash:/test/test.txt flash:/test/test.bak

# Display current directory information.

<SW7700> dir

Directory of *

0 -rw- 595 Jul 12 2001 19:41:50 test.txt

1 -rw- 595 Jul 12 2001 19:46:50 test.bak

16125952 bytes total (13974528 bytes free)

12.1.3. delete

Syntax

delete file-url

View

User view

Parameter

file-url: Path and name of the file you want to delete.

Description

Using the delete command, you can delete a specified file from the storage device of the Ethernet Switch.

The deleted files are kept in the recycle bin and will not be displayed when you use the dir command. However they will be displayed, using the dir /all command. The files deleted by the delete command can be recovered with the undelete command or deleted permanently from the recycle bin, using the reset recycle-bin command.

Note that, if two files with the same name in a directory are deleted, only the latest deleted file will be kept in the recycle bin.

Example

# Delete the file flash:/test/test.txt

<SW7700> delete flash:/test/test.txt

Delete flash:/test/test.txt?[confirm]

12.1.4. dir

Syntax

dir [ /all ] [ file-url ]

View

User view

248

S Y S T E M M A N A G E M E N T

Parameter

/all: Display all the files (including the deleted ones).

file-url: File or directory name to be displayed. The file-url parameter supports “*” matching. For example, using dir *.txt will display all the files with the extension txt in the current directory; By default, display the file information in current path.

Description

Using the dir command, you can display the information about the specified file or directory in storage device of Ethernet Switch.

Example

# Display the information about the file flash:/test/test.txt

<SW7700> dir flash:/test/test.txt

Directory of flash:/test/test.txt

1 -rw- 248 Aug 29 2000 17:49:36 text.txt

20578304 bytes total (3104544 bytes free)

# Display information of directory flash:/test/

<SW7700> dir flash:/test/

Directory of flash:/test/

1 -rw-

248 Aug 29 2000 17:49:36 text.txt

2 -drw-

0 Oct 01 2000 18:42:53 3Com

3 -rw- 639

Oct 02 1997 12:09:32 foo

20578304 bytes total (3104544 bytes free)

# Display all files with the names starting with "t" in the directory flash:/test/

<SW7700> dir flash:/test/t*

Directory of flash:/test/t*

1 -rw- 248 Aug 29 2000 17:49:36 text.txt

20578304 bytes total (3104544 bytes free)

# Display information about all the files (including the deleted files) in the directory flash:/test/

<SW7700> dir /all flash:/test/

Directory of flash:/test/

1 -rw-

248

2 -drw-

Aug 29 2000 17:49:36 text.txt

Oct 01 2000 18:42:53 3Com

3 -rw- 639

Oct 02 1997 12:09:32 foo

4 -rw-

1988

Oct 01 2000 18:48:14 [text]

5 -rw- 639

Oct 02 1997 12:09:17 [the_time]

20578304 bytes total (3104544 bytes free)

# Display information of all the files (including the deleted files) with the names starting with "t" in flash:/test/

<SW7700> dir /all flash:/test/t*

Directory of flash:/test/

1 -rw-

248

Aug 29 2000 17:49:36 text.txt

2 -rw-

1988

3 -rw- 639

Oct 01 2000 18:48:14 [text]

Oct 02 1997 12:09:17 [the_time]

20578304 bytes total (3104544 bytes free)

12.1.5. file prompt

Syntax file prompt { alert | quiet }

View

System view

249

S Y S T E M M A N A G E M E N T

Parameter

alert: Perform interactive confirmation on dangerous file operations; The default value is alert, which configures to perform interactive confirmation on dangerous file operations.

quiet: Do not prompt for the file operations.

Description

Using the file prompt command, you can modify prompt modes of the file operation on the Ethernet switch.

If the prompt mode is set as quiet, that is, no prompt for file operations, some non-recoverable operations may lead to system damage.

Example

# Configure the prompt mode of file operation as quiet.

[SW7700] file prompt quiet

12.1.6. format

Syntax

format filesystem

View

User view

Parameter

filesystem: Device name.

Description

Using the format command, you can format the storage device.

Format operation will cause non-recoverable loss of all the files on the device. Specially, configuration files will be lost after formatting the flash memory.

Example

# Format flash:

<SW7700> format flash:

All sectors will be erased, proceed? [confirm]y

Format winc: completed

12.1.7. mkdir

Syntax

mkdir directory

View

User view

Parameter

directory: Directory name.

250

S Y S T E M M A N A G E M E N T

Description

Using the mkdir command, you can create directory in the specified directory on the storage device.

The directory to be created cannot have the same name as that of other directory or file in the specified directory.

Example

# Create the directory dd.

<SW7700> mkdir dd

Created dir dd

12.1.8. more

Syntax

more file-url

View

User view

Parameter

file-url: File name.

Description

Using the more command, you can display content of specified file.

At present, file system can display files in the text format.

Example

# Display contents of file test.txt.

<SW7700> more test.txt

AppWizard has created this test application for you.

This file contains a summary of what you will find in each of the files that make up your test application.

Test.dsp

This file (the project file) contains information at the project level and is used to build a single project or subproject. Other users can share the project (.dsp) file, but they should export the makefiles locally.

12.1.9. move

Syntax

move fileurl-source fileurl-dest

View

User view

Parameter

fileurl-source: Source file name.

fileurl-dest: Destination file name.

251

S Y S T E M M A N A G E M E N T

Description

Using the move command, you can move files.

When the destination filename is the same as that of an existing file, the system will ask whether to overwrite it.

Example

# Display the current directory information.

<SW7700> dir

Directory of *

0 -rw- 2145718 Jul 12 2001 12:28:08 ne80.bin

1 drw- 0 Jul 12 2001 19:41:20 test

16125952 bytes total (13970432 bytes free)

<SW7700> dir flash:/test/

Directory of flash:/test/

0 drw- 0 Jul 12 2001 20:23:37 subdir

1 -rw- 50 Jul 12 2001 20:08:32 sample.txt

16125952 bytes total (13970432 bytes free)

# Move flash:/test/sample.txt to flash:/sample.txt.

<SW7700> move flash:/test/sample.txt flash:/sample.txt

Move flash:/test/sample.txt to flash:/sample.txt ?[confirm]:y

% Moveded file flash:/test/sample.txt flash:/sample.txt

# Display the directory after moving a file.

<SW7700> dir

Directory of *

0 -rw- 2145718 Jul 12 2001 12:28:08 vrp.bin

1 drw- 0 Jul 12 2001 19:41:20 test

2 -rw- 50 Jul 12 2001 20:26:48 sample.txt

16125952 bytes total (13970432 bytes free)

<SW7700> dir flash:/test/

Directory of flash:/test/

0 drw- 0 Jul 12 2001 20:23:37 subdir

16125952 bytes total (13970432 bytes free)

12.1.10. pwd

Syntax

pwd

View

User view

Parameter

None

Description

Using the pwd command, you can display the current path.

Error may occur without setting the current path.

Example

# Display the current path.

252

S Y S T E M M A N A G E M E N T

<SW7700> pwd flash:

12.1.11. rename

Syntax

rename fileurl-source fileurl-dest

View

User view

Parameter

fileurl-source: Source file name.

fileurl-dest: Destination file name.

Description

Using the rename command, you can rename a file.

If the destination file name is the same as an existing directory name, operation fails. If the destination file name is the same as an existing file name, prompt whether to overwrite.

Example

# Display the current directory information.

<SW7700> dir

Directory of *

0 -rw- 2145718 Jul 12 2001 12:28:08 vrp.bin

1 drw- 0 Jul 12 2001 19:41:20 test

2 -rw- 50 Jul 12 2001 20:26:48 sample.txt

16125952 bytes total (13970432 bytes free)

# Rename the file sample.txt with sample.bak.

<SW7700> rename sample.txt sample.bak

Rename flash:/sample.txt to flash:/sample.bak ?[confirm]:y

% Renamed file flash:/sample.txt flash:/sample.bak

# Display the directory after renaming sample.txt with sample.bak.

<SW7700>dir

Directory of *

0 -rw- 2145718 Jul 12 2001 12:28:08 ne80.bin

1 drw- 0 Jul 12 2001 19:41:20 test

2 -rw- 50 Jul 12 2001 20:29:55 sample.bak

16125952 bytes total (13970432 bytes free)

12.1.12. reset recycle-bin

Syntax

reset recycle-bin file-url

View

User view

253

S Y S T E M M A N A G E M E N T

Parameter

file-url: Name of the file to be deleted.

Description

Using the reset recycle-bin command, you can permanently delete files from the recycle bin.

The delete command only puts the file into the recycle bin, but the reset recycle-bin command will delete this file permanently.

Example

# Delete the file from the recycle bin.

<SW7700> reset recycle-binflash:/p1h_logic.out

Reset recycle-binflash:/plh_logic.out?[confirm]

12.1.13. rmdir

Syntax

rmdir directory

View

User view

Parameter

directory: Directory name.

Description

Using the rmdir command, you can delete a directory.

The directory to be deleted must be empty.

Example

# Delete the directory altdir.

<SW7700> rmdir altdir

Rmdir dd?[confirm]

Removed dir flash:/test/text.txt flash:/test/altdir

12.1.14. undelete

Syntax

undelete file-url

View

User view

Parameter

file-url: Name of the file to be recovered.

Description

Using the undelete command, you can recover deleted file.

254

S Y S T E M M A N A G E M E N T

The file name to be recovered cannot be the same as an existing directory name. If the destination file name is the same as an existing file name, prompt whether to overwrite.

Example

# Display the information of all the files (including the deleted ones) in the current directory.

<SW7700> dir /all

Directory of *

0 -rw- 595 Jul 12 2001 20:13:19 test.txt

1 -rw- 50 Jul 12 2001 20:09:23 [sample.bak]

16125952 bytes total (13972480 bytes free)

# Recover the deleted file sample.bak.

<SW7700> undelete sample.bak

Undelete flash:/test/sample.bak ?[confirm]:y

% Undeleted file flash:/test/sample.bak

# Display the information of all the files (including the deleted ones) in the current directory.

<SW7700> dir /all

Directory of *

0 -rw- 50 Jul 12 2001 20:34:19 sample.bak

1 -rw- 595 Jul 12 2001 20:13:19 test.txt

16125952 bytes total (13972480 bytes free)

12.2. Configuration File Management Commands

12.2.1. reset saved-configuration

Syntax reset saved-configuration

View

User view

Parameter

None

Description

Using the reset saved-configuration command, you can erase configuration files from the flash memory of the Ethernet Switch.

Perform this command with cautious. It is suggested to consult technical support personnel first.

Generally, this command is used in the following situations:

After upgrade of software, configuration files in flash memory may not match the new version's software. Perform

reset saved-configuration command to erase the old configuration files.

If a used Ethernet Switch is applied to the new circumstance and the original configuration files cannot meet the new requirements, the Ethernet Switch should be configured again. Erase the original configuration files for reconfiguration.

If the configuration files do not exist in the flash memory when Ethernet Switch is electrified and initialized, it will enter setup switch view automatically.

For the related commands, see save, display current-configuration, display saved-configuration.

255

S Y S T E M M A N A G E M E N T

Example

# Erase the configuration files from the flash memory of Ethernet Switch.

<SW7700> reset saved-configuration

This will erase the configuration in the flash memory.

The router configurations will be erased to reconfigure.

Are you sure?[Y/N]y

12.2.2. save

Syntax save

View

User view

Parameter

None

Description

Using the save command, you can save the current configuration files to Flash memory.

After finishing a group of configurations and achieving corresponding functions, user should remember to get the current configuration files stored in the flash memory.

For the related commands, see reset saved-configuration, display current-configuration, display saved-configuration.

Example

# Get the current configuration files stored in the flash memory.

<SW7700> save

Now writing the running config to flash memory.

Please wait for a while... save the running config to flash memory successfully

12.3. FTP Server Configuration Commands

12.3.1. display ftp-server

Syntax display ftp-server

View

All views

Parameter

None

256

S Y S T E M M A N A G E M E N T

Description

Using the display ftp-server command, you can display the parameters of the current FTP Server. You can Perform this command to verify the configuration after setting FTP parameters.

Example

# Display the configuration of FTP Server parameters.

<SW7700> display ftp-server

Ftp server is running

Max user number

User

Timeout(minute)

12.3.2. display ftp-user

Syntax display ftp-user

View

All views

Parameter

None

Description

Using the display ftp-user command, you can display the parameters of current FTP user. You can perform this command to examine the configuration after setting FTP parameters.

Example

# Show the configuration of FTP user parameters.

<SW7700> display ftp-user

% No ftp user

12.3.3. ftp server

Syntax ftp sever enable undo ftp sever

View

System view

Parameter

enable: Start FTP Server.

Description

Using the ftp server command, you can start FTP Server and enable FTP user logon. Using the undo ftp server command, you can close FTP Server and disable FTP user logon.

257

S Y S T E M M A N A G E M E N T

By default, FTP Server is shut down.

Perform this command to easily start or shut down FTP Server, preventing Ethernet Switch from being attacked by some unknown user.

Example

# Shut down FTP Server.

[SW7700] undo ftp server

12.3.4. ftp timeout

Syntax

ftp timeout minute

undo ftp timeout

View

System view

Parameter

minute: Connection timeouts (measured in minutes), ranging from 1 to 35791; The default connection timeout time is 30 minutes.

Description

Using the ftp timeout command, you can configure connection timeout interval. Using the undo ftp timeout command, you can restore the default connection timeout interval.

After a user logs on to an FTP Server and has established connection, if the connection is interrupted or cut abnormally by the user, FTP Server will still hold the connection. The connection timeout can avoid this problem. If the FTP server has no command interaction with a client for a specific period of time, it considers the connection to be failed and disconnect to the client.

Example

# Set the connection timeout to 36 minutes.

[SW7700] ftp timeout 36

12.3.5. local-user ftp-directory

Syntax

local-user user service-type ftp ftp-directory directory password [ simple | cipher ] password

undo local-user user

View

System view

Parameter

user: Logon username.

directory: Accessible directory

simple: Plain text.

cipher: Cipher text.

258

S Y S T E M M A N A G E M E N T password: Logon password.

Description

Using the user ftp-directory command, you can set the username, directory to be accessed, user priority, and password at FTP client end. Using the undo user ftp-directory command, you can delete the user.

By default, the user database of the system is empty.

This configuration is indispensable before the client can access the FTP Server with FTP.

Example

# Add an FTP user and configure its username as SW7700, password as access and configure it to access the directory flash:/altdir/lst/.

[SW7700] local-user SW7700 service-type ftp ftp-directory flash:/altdir/lst/ password cipher access

12.4. FTP Client Commands

12.4.1. ascii

Syntax ascii

View

FTP Client view

Parameter

None

Description

Using the ascii command, you can configure data transmission mode as ASCII mode.

By default, the file transmission mode is ASCII mode.

Perform this command if the user needs to change the file transmission mode to default mode.

Example

# Configure to transmit data in the ASCII mode.

[ftp] ascii

200 Type set to A.

12.4.2. binary

Syntax binary

View

FTP Client view

259

S Y S T E M M A N A G E M E N T

Parameter

None

Description

Using the binary command, you can configure file transmission type as binary mode.

Example

# Configure to transmit data in the binary mode.

[ftp] binary

200 Type set to B.

12.4.3. bye

Syntax bye

View

FTP Client view

Parameter

None

Description

Using the bye command, you can disconnect with the remote FTP Server and return to user view.

After performing this command, you can terminate the control connection and data connection with the remote FTP Server.

Example

# Terminate connection with the remote FTP Server and return to user view.

[ftp] bye

12.4.4. cd

Syntax

cd pathname

View

FTP Client view

Parameter

pathname: Path name.

Description

Using the cd command, you can change the working path on the remote FTP Server.

This command is used to access another directory on FTP Server. Note that the user can only access the directories authorized by the FTP server.

260

S Y S T E M M A N A G E M E N T

Example

# Change the working path to flash:/temp

[ftp] cd flash:/temp

12.4.5. cdup

Syntax cdup

View

FTP Client view

Parameter

None

Description

Using the cdup command, you can change working path to the upper level directory.

This command is used to exit the current directory and return to the upper level directory.

Example

# Change working path to the upper level directory.

[ftp] cdup

12.4.6. close

Syntax close

View

FTP Client view

Parameter

None

Description

Using the close command, user can disconnect FTP client side from FTP server side without exiting FTP client side view. That is to say, you can terminate the control connection and data connection with the remote FTP Server at the same time.

Example

# Terminate connection with the remote FTP Server and stays in FTP Client view.

[ftp] close

261

S Y S T E M M A N A G E M E N T

12.4.7. delete

Syntax

delete remotefile

View

FTP Client view

Parameter

remotefile: File name.

Description

Using the delete command, you can delete the specified file.

This command is used to delete a file.

Example

# Delete the file temp.c

[ftp] delete temp.c

12.4.8. dir

Syntax

dir [ filename ] [ localfile ]

View

FTP Client view

Parameter

filename: File name to be queried.

localfile: Saved local file name.

Description

Using the dir command, you can query a specified file.

If no parameter of this command is specified, then all the files in the directory will be displayed.

Example

# Query the file temp.c and saves the results in the file temp1.

[ftp] dir temp.c temp1

12.4.9. disconnect

Syntax disconnect

262

S Y S T E M M A N A G E M E N T

View

FTP Client view

Parameter

None

Description

Using the disconnect command, subscribers can disconnect FTP client side from FTP server side without exiting FTP client side view.

This command terminates the control connection and data connection with the remote FTP Server at the same time.

Example

# Terminate connection with the remote FTP Server and stays in FTP Client view.

[ftp] disconnect

12.4.10. ftp

Syntax

ftp [ ipaddress [ port ] ]

View

User view

Parameter

ipaddress: IP address of the remote FTP Server.

port: Port number of remote FTP Server.

Description

Using the ftp command, you can establish control connection with the remote FTP Server and enter FTP Client view.

Example

# Connect to FTP Server at the IP address 1.1.1.1

<SW7700> ftp 1.1.1.1

12.4.11. get

Syntax

get remotefile [ localfile ]

View

FTP Client view

Parameter

localfile: Local file name.

remotefile: Name of a file on the remote FTP Server.

263

S Y S T E M M A N A G E M E N T

Description

Using the get command, you can download a remote file and save it locally.

If no local file name is specified, it will be considered the same as that on the remote FTP Server.

Example

# Download the file temp1.c and saves it as temp.c

[ftp] get temp1.c temp.c

12.4.12. lcd

Syntax lcd

View

FTP Client view

Parameter

None

Description

Using the lcd command, you can display local working path of FTP Client.

Example

# Show local working path.

[ftp] lcd

% Local directory now flash:/temp

12.4.13. ls

Syntax

ls [ remotefile ] [ localfile ]

View

FTP Client view

Parameter

remotefile: Remote file to be queried.

localfile: Saved local file name.

Description

Using the ls command, you can query a specified file.

If no parameter is specified, all the files will be shown.

Example

# Query file temp.c

264

S Y S T E M M A N A G E M E N T

[ftp] ls temp.c

12.4.14. mkdir

Syntax

mkdir pathname

View

FTP Client view

Parameter

pathname: Directory name.

Description

Using the mkdir command, you can create a directory on the remote FTP Server.

User can perform this operation as long as the remote FTP server has authorized.

Example

# Create the directory flash:/lanswitch on the remote FTP Server.

[ftp] mkdir flash:/lanswitch

12.4.15. passive

Syntax passive undo passive

View

FTP Client view

Parameter

None

Description

Using the passive command, you can set the data transmission mode to be passive mode. Using the undo passive command, you can set the data transmission mode to be active mode.

By default, the data transmission mode is passive mode

Example

# Set the data transmission to passive mode.

[ftp] passive

12.4.16. put

Syntax

put localfile [ remotefile ]

265

S Y S T E M M A N A G E M E N T

View

FTP Client view

Parameter

localfile: Local file name.

remotefile: File name on the remote FTP Server.

Description

Using the put command, you can upload a local file to the remote FTP Server.

If the user does not specify the filename on the remote server, the system will consider it the same as the local file name by default.

Example

# Upload the local file temp.c to the remote FTP Server and saves it as temp1.c.

[ftp] put temp.c temp1.c

12.4.17. pwd

Syntax pwd

View

FTP Client view

Parameter

None

Description

Using the pwd command, you can display the current directory on the remote FTP Server.

Example

# Show the current directory on the remote FTP Server.

[ftp] pwd

"flash:/temp" is current directory.

12.4.18. quit

Syntax quit

View

FTP Client view

Parameter

None

266

S Y S T E M M A N A G E M E N T

Description

Using the quit command, you can terminate the connection with the remote FTP Server and return to user view.

Example

# Terminate connection with the remote FTP Server and returns to user view.

[ftp] quit

12.4.19. remotehelp

Syntax

remotehelp [ protocol-command ]

View

FTP Client view

Parameter

protocol-command: FTP protocol command.

Description

Using the remotehelp command, you can display help information about the FTP protocol command.

Example

# Show the syntax of the protocol command user.

[ftp] remotehelp user

214 Syntax: USER <sp> <username>

12.4.20. rmdir

Syntax

rmdir pathname

View

FTP Client view

Parameter

pathname: Directory name of remote FTP Server.

Description

Using the rmdir command, you can delete the specified directory from FTP Server.

Example

# Delete the directory flash:/temp1 from FTP Server.

[ftp] rmdir flash:/temp1

267

S Y S T E M M A N A G E M E N T

12.4.21. user

Syntax

user username [ password ]

View

FTP Client view

Parameter

username: Logon username.

password: Logon password.

Description

Using the user command, you can register an FTP user.

Example

# Log in the FTP Server with username tom and password bjhw.

[ftp] user tom bjhw

12.4.22. verbose

Syntax verbose undo verbose

View

FTP Client view

Parameter

None

Description

Using the verbose command, you can enable verbose. Using the undo verbose command, you can disable verbose.

By default, verbose is disabled.

Example

# Enable verbose.

[ftp]verbose

268

S Y S T E M M A N A G E M E N T

12.5. TFTP Configuration Commands

12.5.1. tftp

Syntax

tftp { ascii | binary }

View

System view

Parameter

ascii: Text format.

binary: Binary format; By default, the transmission mode is binary.

Description

Using the tftp command, you can configure the transmission mode of the TFTP files.

TFTP transmits files in two modes, binary mode for program files and ASCII mode for text files. You can Perform this command to configure the file transmission mode. By default, TFTP transmits files in binary mode. Before resetting the mode and restarting the switch, the set mode will not change.

For the related commands, see tftp get, tftp put.

Example

# Transmit the files in text format.

[SW7700] tftp ascii

12.5.2. tftp get

Syntax

tftp get //A.A.A.A/xxx.yyy mmm.nnn

View

System view

Parameter

//A.A.A.A/xxx.yyy: Information about the file to be downloaded from the TFTP server. A.A.A.A: IP address of the TFTP server.

mmm.nnn: Specify the filename saved as after downloaded to the switch, which can be different from xxx.yyy.

Description

Using the tftp get command, you can download a file xxx.yyy from the specified directory of the TFTP server (at A.A.A.A) and saving it as mmm.nnn on the switch.

For the related commands, see tftp, tftp put.

Example

# Download the file LANSwitch.app from the TFTP server at 1.1.3.214 and save it as vxWorks.app on the local switch.

269

S Y S T E M M A N A G E M E N T

[SW7700] tftp binary

[SW7700] tftp get //1.1.3.214/ LANSwitch.app vxWorks.app

12.5.3. tftp put

Syntax

tftp put mmm.nnn //A.A.A.A/xxx.yyy

View

System view

Parameter

mmm.nnn: The file to be uploaded.

//A.A.A.A/xxx.yyy: IP address of the TFTP server and the filename to be saved as.

Description

Using the tftp put command, you can upload a file from the switch to the specified directory on the TFTP server (at A.A.A.A) and saving it as mmm.nnn.

For the related commands, see tftp, tftp get.

Example

# Upload the vrpcfg.txt to the TFTP server at 1.1.3.214 and save it as Temp.txt.

[SW7700] tftp ascii

[SW7700] tftp put vrpcfg.txt //1.1.3.214/temp.txt

12.6. MAC Address Table Management Commands

12.6.1. display mac-address learning

Syntax

display mac-address learning [ interface-type interface-num | interface-name ]

View

All views

Parameter

interface-type: Specify the interface type.

interface-num: Specify the interface number.

interface-name: Specify the interface name.

For details about the interface-type, interface-num and interface-name parameters, refer to the Port Configuration in this manual.

Description

Using the display mac-address learning command, you can display if the switch or a port can learn the MAC address.

270

S Y S T E M M A N A G E M E N T

Example

# Show the state of address learning on Ethernet1/0/1.

[SW7700-Ethernet1/0/1] display mac-address learning mac-address learning status of the switch: enable

PortName Learning Status

Ethernet1/0/1 enable

12.6.2. display mac-address aging-time

Syntax display mac-address aging-time

View

All views

Parameter

None

Description

Using the display mac-address aging-time command, you can display the aging time of the dynamic entry in the MAC address table.

For the related commands, see mac-address, mac-address timer, display mac-address.

Example

# Display the aging time of the dynamic entry in the MAC address table.

[SW7700] display mac-address aging-time mac-address timer: 300s

The above information indicates that the aging time of the dynamic entry in the MAC address is 300s.

12.6.3. display mac-address

Syntax

display mac-address [ static | dynamic ] [ [ interface { interface-name | interface-type interface-num } ] [ vlan vlan-id ] ]

View

All views

Parameter

static: Static table entry, lost after resetting switch.

dynamic: Dynamic table entry, which will be aged.

interface-type: Specify the interface type.

interface-num: Specify the interface number.

interface-name: Specify the interface name.

For details about the interface-type, interface-num and interface-name parameters, refer to the Port Configuration in this manual.

vlan-id: Specify the VLAN ID.

mac-addr: Specify the MAC address.

271

S Y S T E M M A N A G E M E N T

Description

Using the display mac-address command, you can display MAC address table information.

When managing the Layer-2 addresses of the switch, the administrator can perform this command to view such information as the

Layer-2 address table, address status (static or dynamic), Ethernet port of the MAC address, VLAN of the address, and system address aging time.

For the related commands, see mac-address, mac-address timer:.

Example

# Show the information of the entry with MAC address at 00e0-fc01-0101

[SW7700] display mac-address 00e0-fc01-0101

MAC ID

00e0-fc01-0101 N/A

12.6.4. mac-address

PORT INDEX AGING TIME(s)

Syntax

mac-address { static | dynamic } mac-addr interface { interface-name | interface-type interface-num } vlan vlan-id

undo mac-address [ static | dynamic ] [ [ mac-addr ] interface [interface-name | interface-type interface-num ] vlan vlan-id ]

View

System view

Parameter

static: Static table entry, lost after resetting switch.

dynamic: Dynamic table entry, which will be aged.

mac-addr: Specify the MAC address.

interface-type: interface type;

interface-num: interface number;

interface-name: interface name;

vlan-id: Specify the VLAN ID.

Description

Using the mac-address command, you can add/modify the MAC address table entry. Using the undo mac-address command, you can delete MAC address table entry

If the input address has been existing in the address table, the original entry will be modified. That is, replace the interface pointed by this address with the new interface and the entry attribute with the new attribute (dynamic entry and static entry).

All the (MAC unicast) addresses on a certain interface can be deleted. User can choose to delete any of the following addresses: address learned by system automatically, dynamic address configured by user, static address configured by user.

Because the address table is shared in the VLAN domain, you need specify the VLAN of the multicast address and the port of the unicast address, when adding entries to the address table.

For the related commands, see display mac-address.

Example

# Configure the port number corresponding to the MAC address 00e0-fc01-0101 as Ethernet1/0/1 in the address table, and sets this entry as static entry.

[SW7700] mac-address static 00e0-fc01-0101 interface Ethernet 1/0/1 vlan 2

272

S Y S T E M M A N A G E M E N T

12.6.5. mac-address mac-learning disable

Syntax mac-address mac-learning disable undo mac-address mac-learning disable

View

System view, Ethernet port view

Parameter

disable: Disable the address learning.

Description

Using the mac-address mac-learning disable command, you can disable the MAC address learning function of the switch or one of its port. Using the undo mac-address mac-learning disable command, you can enable the MAC address learning function.

By default, Address learning is enabled.

To disable the address learning feature can guarantee the security of the Ethernet switch, so that the attackers cannot attack and exhaust the switch with the frames from different addresses. However, after the function is disable, the switch cannot learn any new addresses or update the MAC address table timely. Normally, the user can disable the function on some ports. Disabling address learning will not affect flooding the unicast packets whose destination cannot be found, and therefore the broadcast suppression function is also necessary in this case.

For the related commands, see display mac-address learning.

Example

# Disables the address learning function of all the ports.

[SW7700] mac-address mac-learning disable

12.6.6. mac-address timer

Syntax

mac-address timer { aging age | no-aging }

undo mac-address timer aging

View

System view

Parameter

aging age: Specifies the aging time (measured in seconds) of the Layer-2 dynamic address table entry, ranging from 10 to 1000000; by default, the aging time is 300 seconds.

no-aging : No aging time.

Description

Using the mac-address timer command, you can configure the aging time of the Layer-2 dynamic address table entry. Using the

undo mac-address timer command, you can restore the default value.

273

S Y S T E M M A N A G E M E N T

Too long or too short aging time set by subscribers will cause the problem that the Ethernet switch broadcasts a great mount of data packets without MAC addresses, which will affect the switch operation performance.

If aging time is set too long, the Ethernet switch will store a great number of out-of-date MAC address tables. This will consume

MAC address table resources and the switch will not be able to update MAC address table according to the network change.

If aging time is set too short, the Ethernet switch may delete valid MAC address table.

Example

# Configure the entry aging time of Layer-2 dynamic address table to be 500 seconds.

[SW7700] mac-address timer aging 500

12.7. Device Management Commands

12.7.1. boot bootloader

Syntax

boot bootloader file-url

View

User view

Parameter

file-url: Path and name of APP file.

Description

Using the boot bootloader command, you can specify the app file used for boot of the next time.

Example

# Specify the APP application used for boot of next time.

<SW7700> boot bootloader PLATV100R002B09D002.APP

12.7.2. boot bootrom

Syntax

boot bootrom file-url

View

User view

Parameter

file-ulr: Path and name of Bootrom file.

Description

Using the boot bootrom command, you can upgrade the Bootrom file.

274

S Y S T E M M A N A G E M E N T

Example

# Upgrade bootrom.

<SW7700> boot bootrom PLATV100R002B09D002.btm

12.7.3. boot bootrom

Syntax

boot bootrom file-url slot slot-num-list

View

User view

Parameter

file-ulr: File path and file name of Bootrom.

slot-num-list: slot-num-list = [ slot-num1 [ to slot-num2 ] ]&<1-10>, slot need to be upgraded, the range of slot-num is from 0 to 6. &<1-

10> indicates that parameter in front of this mark can be input up to 10 times.

Description

Using the boot bootrom command, you can upgrade bootrom.

Example

! Upgrade bootrom of No. 0 slot.

<SW7700> boot bootrom PLATV100R002B09D002.btm slot 0

12.7.4. display backboard view

Syntax display backboard view

View

All views

Parameter

None

Description

Using the display backboard view command, you can display system backplane configuration.

Example

# Show backboard view.

[SW7700] display backboard view

The backboard view is 0

Current Back Board Configuration is described as following:

|Slot No. lBrd Type |Slot Band Width |Brd Available

275

S Y S T E M M A N A G E M E N T

4 |LS81FT48 |YES

12.7.5. display bootloader

Syntax display bootloader

View

All views

Parameter

None

Description

Using the display bootloader command, you can display APP file used next time.

Example

<SW7700> display bootloader

The app to boot at the next time is: PLATV100R002B09D002.APP

12.7.6. display device

Syntax

display device [ shelf shelf-no | frame frame-no | slot slot-no ]

View

All views

Parameter

shelf-no: Cabinet number.

frame-no: Chassis number.

slot-no: Slot number.

Description

Using the display device command, you can display the module type and working status information of a card, including physical card number, physical daughter card number, number of ports, hardware version number, FPGA version number, version number of BOOTROM software, application version number, address learning mode, interface card type and interface card type description, etc.

Example

# Show device information.

<SW7700> display device

Slot No Brd Type

0 FAB64

Brd Status

Normal

Subslot Num

276

S Y S T E M M A N A G E M E N T

Output description of the display device command

Field

SlotNo

Subslot Num

Brd Type

Brd Status

12.7.7. display environment

Physical card number

Sub-slot number

Board type

Board status

Description

Syntax display environment

View

All views

Parameter

None

Description

Using the display environment command, you can display environment information.

Example

# Display the environment information.

<SW7700> display environment

System temperature information:

----------------------------------------------------

Board Temperature Downlimit Uplimit

12.7.8. display fan

Syntax

display fan [ fan-id ]

View

All views

Parameter

None

Description

Using the display fan command, you can display the working state of the built-in fans.

277

S Y S T E M M A N A G E M E N T

Example

# Display the working state of the fans.

<SW7700> display fan

Fan 0 State: OK

Fan 1 State: OK

Fan 2 State: OK

Fan 3 State: OK

The above information indicates that all of the four fans work normally.

12.7.9. display power

Syntax

display power [ powe-ID ]

View

All views

Parameter

power-ID: Power ID.

Description

Using the display power command, you can display the working state of the built-in power supply.

Example

# Show power state.

<SW7700> display power 1 power 1 State: Normal

12.7.10. reboot

syntax reboot

View

User view

Parameter

None

Description

Using the reboot command, you can reset the Ethernet Switch when failure occurs.

Example

# Reboots the Switch.

<SW7700> reboot

278

S Y S T E M M A N A G E M E N T

12.7.11. reboot slot

Syntax

reboot [ slot slot-num ]

View

User view

Parameter

slot-num: Specifies the physical card number, generally taken 0.

Description

Using the reboot slot command, you can reset the whole system.

If no parameter is specified with the reboot command, it will reset the Ethernet switch. You can use the reboot command to reset the card, when the Ethernet switch fails.

Example

# Reset the card in Slot 1.

<SW7700> reboot slot1

12.7.12. set backboard view

Syntax

set backboard view value

View

System view

Parameter

value: 0-5 indicates value of backplane configuration.

Description

Using the set backboard view value command, you can set backplane configuration.

Example

# Set backboard view.

[SW7700] set backboard view 1

Configuration of System Back Board Mode

Default settings are in square brackets '[]'.

The new configuration will be as following:

|Slot No. lBrd Type |Slot Band Width |Brd Available

4 |LS81FT48 |YES

Are you sure the configuration is correct, continue?[Y/N]

279

S Y S T E M M A N A G E M E N T

Backboard mode

0 1 2 3 4 5

8G 8G 8G 8G 8G 8G

8G 4G 8G 8G 6G 6G

8G 4G 4G 6G 6G 4G slot5

12.7.13. temperature-limit

Syntax

temperature-limit slot down-value up-value

View

User view

Parameter

slot: Physical card number.

down-value: Lower temperature limit (0-70 centigrade).

up-value: Upper temperature limit (20-90 centigrade).

Description

Using the temperature-limit command, you can set temperature limit.

Example

# Set the lower and upper temperature limit of card 0.

<SW7700> temperature-limit 0 10 75

Success temperature limit set

12.8. Basic System Configuration and Management Commands

12.8.1. clock

Syntax

clock HH:MM:SS YYYY/MM/DD

View

User view

Parameter

HH:MM:SS: Current clock. HH ranges from 0 to 23. MM and SS range from 0 to 59.

YYYY/MM/DD: Specify the current year, month and date. YYYY ranges from 2000 to 2099. MM ranges from 1 to 12 and DD ranges from 1 to 31.

280

S Y S T E M M A N A G E M E N T

Description

Using the clock command, you can set the current date and clock of Ethernet Switch.

By default, the date and clock of Ethernet Switch is set as 0:0:0, 2000/1/1.

The current date and clock of Ethernet Switch must be set in the circumstance that absolute time is strictly required.

For the related commands, see display clock.

Example

# Set the current date of Ethernet Switch to 0:0:0, 2001/01/1.

<SW7700> clock 0:0:0 2001/01/01

12.8.2. sysname

Syntax

sysname sysname

View

System view

Parameter

sysname: Specify the hostname with a character string with the length ranging from1 to 30 characters.

Description

Using the sysname command, you can set the hostname of Ethernet Switch.

By default, the hostname of Ethernet Switch is SW7700.

Changing the hostname name of Ethernet Switch will affect the prompt of command line interface. E.g. the host name of

Ethernet Switch is SW7700, and the prompt in user view is <SW7700>.

Example

# Set the hostname of the Ethernet Switch to be LANSwitch.

[SW7700] sysname LANSwitch

[LANSwitch]

12.9. System Status and System Information Display Commands

12.9.1. display clock

Syntax display clock

View

All views

Parameter

None

281

S Y S T E M M A N A G E M E N T

Description

Using the display clock command, subscribers can obtain information about system data and time from the terminal display..

For the related commands, see clock.

Example

# View the current system date and clock.

<SW7700> display clock

15:50:45 UTC Mon 2001/2/12

12.9.2. display current-configuration

Syntax display current-configuration

View

All views

Parameter

None

Description

Using the display current-configuration command, you can display the current effective configuration parameters of Ethernet

Switch and verify the current effective parameters.

If some effective configuration parameters are the same as the default working parameters, there is no display.

For the related commands, see save, reset saved-configuration, display saved-configuration.

Example

# Display current effective configuration parameters of Ethernet Switch.

<SW7700> display current-configuration

hostname SW7700

no hdp run

no htp run

radius-server host default

aaa authentication Default radius next local

aaa accounting Default enable offline

user user1 state active service-type ftp ftp-directory flash:

ip multicast-routing

# vlan 1

# vlan 2

# vlan 3

282

# vlan 5

# vlan 6

# interface Vlan-interface1

# interface Vlan-interface2

ip address 1.1.2.1 255.255.255.0

# interface Vlan-interface3

ip address 1.1.3.1 255.255.255.0

# interface Vlan-interface5

ip address 10.110.65.1 255.255.255.0

vrrp ip 1 10.110.65.2

vrrp ip 2 10.110.65.10

ip pim sparse-mode

# interface Vlan-interface6

ip address 10.110.66.1 255.255.255.0

ip pim sparse-mode

# interface Aux0/0/0

# interface GigabitEthernet1/0/1

port access vlan 2

# interface GigabitEthernet1/0/2

port access vlan 3

# interface GigabitEthernet1/0/3

port access vlan 6

# interface GigabitEthernet1/0/4

port access vlan 5

# interface GigabitEthernet1/0/5

# interface GigabitEthernet1/0/6

# interface GigabitEthernet1/0/7

# interface GigabitEthernet1/0/8

# interface NULL0

device name SW7700

ip pim bsr-candidate Vlan-interface5 0

ip pim rp-candidate Vlan-interface5

# line aux 0

no login

exec-timeout 0 0 line vty 0 4

# end

S Y S T E M M A N A G E M E N T

283

S Y S T E M M A N A G E M E N T

12.9.3. display debugging

Syntax

display debugging [ module-name ] [ interface { interface-name | interface-type interface-num } ]

View

All views

Parameter

module-name: Specify the module name.

interface-name: Specify the Ethernet port name.

interface-type: Specify the Ethernet port type.

interface-num: Specify the Ethernet port number.

Description

Using the display debugging command, you can display the enabled debugging process.

Show all the enabled debugging when there is no parameter.

For the related commands, see debugging.

Example

# Show all the enabled debugging.

<SW7700> display debugging

IP packet debugging switch is on.

12.9.4. display saved-configuration

Syntax display saved-configuration

View

All views

Parameter

None

Description

Using the display saved-configuration command, you can display the configuration files in the flash memory of Ethernet

Switch.

If the Ethernet Switch works abnormally after electrified, execute the display saved-configuration command to view the startup configuration of the Ethernet Switch.

For the related commands, see save, reset saved-configuration, display current-configuration.

Example

# Display configuration files in flash memory of Ethernet Switch.

<SW7700> display saved-configuration

284

S Y S T E M M A N A G E M E N T

hostname SW7700

no hdp run

no htp run

radius-server host default

aaa authentication Default radius next local

aaa accounting Default enable offline

user user1 state active service-type ftp ftp-directory flash:

ip multicast-routing

# vlan 1

# vlan 2

# vlan 3

# vlan 5

# vlan 6

# interface Vlan-interface1

# interface Vlan-interface2

ip address 1.1.2.1 255.255.255.0

# interface Vlan-interface3

ip address 1.1.3.1 255.255.255.0

# interface Vlan-interface5

ip address 10.110.65.1 255.255.255.0

vrrp ip 1 10.110.65.2

vrrp ip 2 10.110.65.10

ip pim sparse-mode

# interface Vlan-interface6

ip address 10.110.66.1 255.255.255.0

ip pim sparse-mode

# interface Aux0/0/0

# interface GigabitEthernet1/0/1

port access vlan 2

# interface GigabitEthernet1/0/2

port access vlan 3

# interface GigabitEthernet1/0/3

port access vlan 6

# interface GigabitEthernet1/0/4

port access vlan 5

# interface GigabitEthernet1/0/5

# interface GigabitEthernet1/0/6

285

S Y S T E M M A N A G E M E N T interface GigabitEthernet1/0/7

# interface GigabitEthernet1/0/8

# interface NULL0

device name SW7700

ip pim bsr-candidate Vlan-interface5 0

ip pim rp-candidate Vlan-interface5

# line aux 0

no login

exec-timeout 0 0 line vty 0 4

# end

12.9.5. display users

Syntax display users [ all ]

View

All views

Parameter

all: display all users connected to the switch.

Description

Using the display users command, you can know users connected to the switch.

Example

# Display the status of the current users.

<SW7700> display users

Line User Host(s) Idle Location

I 0 AUX 0 idle 0

12.9.6. display version

Syntax display version

View

All views

Parameter

None

286

S Y S T E M M A N A G E M E N T

Description

Using the display version command, you can know such information as software version, issue date and the basic hardware configurations.

Example

# Display the information about the system version.

<SW7700> display version

3Com Corporation

Switch 7700 Software, Version 1.0

SW7700

FAB64: uptime is 1 week, 1 day, 17 hours, 33 minutes.

SW7700 with 1 MPC8260 Processor

128M bytes SDRAM

16384K bytes Flash Memory

0K bytes NVRAM Memory

Pcb Version:

REV.0

BootROM Version: 300

CPLD Version: 001

MOD1: uptime is 1 week, 1 day, 17 hours, 33 minutes.

SW7700 MOD1 with 1 MPC850 Processor

64M bytes SDRAM

0K bytes Flash Memory

0K bytes NVRAM Memory

Pcb Version: REV.1

BootROM Version: 300

CPLD Version: 001

MOD2: uptime is 1 week, 1 day, 17 hours, 33 minutes.

SW7700 MOD2 with 1 MPC850 Processor

64M bytes SDRAM

0K bytes Flash Memory

0K bytes NVRAM Memory

Pcb Version:

REV.0

BootROM Version: 300

CPLD Version: 001

12.10. System Debug Commands

12.10.1. debugging

Syntax

debugging { all | module-name [ debugging-option ] }

undo debugging { all | module-name [ debugging-option ] }

View

User view

Parameter

all: Enable or disable all the debugging.

287

S Y S T E M M A N A G E M E N T

module-name: Specify the module name.

debugging-option: Debugging option.

Description

Using the debugging command, you can enable the system debugging. Using the undo debugging command, you can disable the system debugging.

By default, all the debugging processes are disabled.

Ethernet Switch provides various kinds of debugging functions for technical support personnel and experienced maintenance staff to troubleshoot the network.

Enabling the debugging will generate a large amount of debugging information and decrease the system efficiency. Specially, network system may collapse after all the debugging is enabled by the debugging all command. So it is not suggested to use the

debugging all command. It is convenient for the user to disable all the debugging with the undo debugging all command.

For the related commands, see display debugging.

Example

# Enable IP Packet debugging.

<SW7700> debugging ip packet

IP packet debugging switch is on.

12.11. Network Connection Test Commands

12.11.1. ping

Syntax

ping [ -a ip-address ] [-c count ] [ -d ] [ -i {interface-type interface-num | interface-name } ][ ip ] [ -n ] [ - p pattern ] [ -q ] [ -r ] [ -s packetsize ] [ -

t timeout ] [ -v ] host

View

User view

Parameter

-a ip-address: Specify the source IP address to transmit ICMP ECHO-REQUEST.

-c: count specify how many times the ICMP ECHO-REQUEST packet will be transmitted, ranging from 1 to 4294967295.

-d: Configure the socket to be in DEBUGGING mode.

interface-type: Specify the interface type.

interface-num: Specify the interface number.

interface-name: Specify the interface name.

-i: Configure to choose packet sent on the interface.

-n: Configure to take the host parameter as IP address without domain name resolution.

-p: pattern is the hexadecimal padding of ICMP ECHO-REQUEST, e.g. -p ff pads the packet completely with ff.

-q: Configure not to display any other detailed information except statistics.

-r: Record route.

-s packetsize: Specify the length of ECHO-REQUEST (excluding IP and ICMP packet header) in bytes.

-t timeout: Maximum waiting time after sending the ECHO-REQUEST (measured in ms).

288

S Y S T E M M A N A G E M E N T

-v: Show other received ICMP packets (non ECHO-RESPONSE).

host: Destination host domain name or IP address.

ip: Choose IP ICMP packet.

Description

Using the ping command, you can check the IP network connection and the reachability of the host.

By default, when the parameters are not specified:

The ECHO-REQUEST message will be sent for 5 times.

socket is not in DEBUGGING mode.

host will be treated as IP address first. If it is not an IP address, perform domain name resolution.

The default padding operation starts from 0x01 and ends on 0x09 (progressively), then performs again.

Show all the information including statistics.

Routes are not recorded.

Send ECHO-REQUEST according to route selection.

Default length of ECHO-REQUEST is 56 bytes.

Default timeout of ECHO-RESPONSE is 2000ms.

Do not display other ICMP packets (non ECHO-RESPONSE).

The ping command sends ICMP ECHO-REQUEST message to the destination. If the network to the destination works well, then the destination host will send ICMP ECHO-REPLY to the source host after receiving ICMP ECHO-REQUEST.

Perform the ping command to troubleshoot the network connection and line quality. The output information includes:

Responses to each of the ECHO-REQUEST messages. If the response message is not received until timeout, output "Request time out". Or display response message bytes, packet sequence number, TTL and response time.

The final statistics, including number of sent packets, number of response packets received, percentage of nonresponse packets and minimal/maximum/average value of response time.

If the network transmission rate is too low, you can increase the response message timeout.

For the related commands, see tracert.

Example

# Check whether the host 202.38.160.244 is reachable.

<SW7700> ping 202.38.160.244 ping 202.38.160.244 : 56 data bytes

Reply from 202.38.160.244 : bytes=56 sequence=1 ttl=255 time = 1ms

Reply from 202.38.160.244 : bytes=56 sequence=2 ttl=255 time = 2ms

Reply from 202.38.160.244 : bytes=56 sequence=3 ttl=255 time = 1ms

Reply from 202.38.160.244 : bytes=56 sequence=4 ttl=255 time = 3ms

Reply from 202.38.160.244 : bytes=56 sequence=5 ttl=255 time = 2ms

--202.38.160.244 ping statistics--

5 packets transmitted

5 packets received

0% packet loss round-trip min/avg/max = 1/2/3 ms

12.11.2. tracert

Syntax

tracert [ -f first-TTL ] [ -m max-TTL ] [ -p port ] [ -q nqueries ] [ -w timeout ] host

289

S Y S T E M M A N A G E M E N T

View

User view

Parameter

-f: Configure to verify the -f switch, first-TTL specifies an initial TTL, ranging from 0 to the maximum TTL.

-m: Configure to verify the -m switch, max-TTL specifies a maximum TTL larger than the initial TTL.

-p: Configure to verify the -p switch, port is an integer host port number. Generally, user need not modify this option.

-q: Configure to verify the -q switch, nqueries is an integer specifying the number of query packets sent, larger than 0.

-w: Configure to verify the -wf switch, timeout is an integer specifying IP packet timeout in seconds, larger than 0.

host: IP address of the destination host or the hostname of the remote system.

Description

Using the tracert command, you can check the reachability of network connection and troubleshoot the network. User can test gateways passed by the packets transmitted from the host to the destination.

By default, when the parameters are not specified,

first-TTL is 1,

max-TTL is 30,

port is 33434,

nqueries is 3 and

timeout is 5s.

The tracert command sends a packet with TTL 1, and the first hop will send an ICMP error message back to indicate this packet cannot be transmitted (because of TTL timeout). Then this packet will be sent again with TTL 2, and the second hop will indicate a TTL timeout error. Perform this operation repeatedly till reaching the destination. These processes are operated to record the source address of each ICMP TTL timeout so as to provide a path to the destination for an IP packet.

After the ping command finds some error on the network, perform tracert to locate the error.

The output of the tracert command includes IP address of all the gateways to the destination. If a certain gateway times out, output "***".

Example

# Test the gateways passed by the packets to the destination host at 18.26.0.115.

<SW7700> tracert 18.26.0.115 tracert to allspice.lcs.mit.edu (18.26.0.115), 30 hops max

1 helios.ee.lbl.gov (128.3.112.1) 0 ms 0 ms 0 ms

2 lilac-dmc.Berkeley.EDU (128.32.216.1) 19 ms 19 ms 19 ms

3 lilac-dmc.Berkeley.EDU (128.32.216.1) 39 ms 19 ms 19 ms

4 ccngw-ner-cc.Berkeley.EDU (128.32.136.23) 19 ms 39 ms 39 ms

5 ccn-nerif22.Berkeley.EDU (128.32.168.22) 20 ms 39 ms 39 ms

6 128.32.197.4 (128.32.197.4) 59 ms 119 ms 39 ms

7 131.119.2.5 (131.119.2.5) 59 ms 59 ms 39 ms

8 129.140.70.13 (129.140.70.13) 80 ms 79 ms 99 ms

9 129.140.71.6 (129.140.71.6) 139 ms 139 ms 159 ms

10 129.140.81.7 (129.140.81.7) 199 ms 180 ms 300 ms

11 129.140.72.17 (129.140.72.17) 300 ms 239 ms 239 ms

12 * * *

13 128.121.54.72 (128.121.54.72) 259 ms 499 ms 279 ms

14 * * *

15 * * *

16 * * *

17 * * *

18 ALLSPICE.LCS.MIT.EDU (18.26.0.115) 339 ms 279 ms 279 ms

290

S Y S T E M M A N A G E M E N T

12.12. Log Commands

display channel

Syntax

display channel [ channel-number | channel-name ]

View

All views

Parameter

channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.

channel-name: Specify the channel name.

Description

Using the display channel command, you can display the details about the information channel.

Without a parameter, the display channel command shows the configurations of all the channels.

Example

# Show details about the information channel 0.

<SW7700> display channel 0 channel number:0, channel name:console

MODU_ID NAME ENABLE

LEVEL ffff0000 all

LOG LEVEL ENABLE

warning Y

TRAP LEVEL

debugging Y

ENABLE

DEBUGGING debugging

12.12.1. display info-center

Syntax

display info-center [ { buffered | history } [ sizeval ] ]

View

All views

Parameter

sizeval: Configure how many pieces of information will be displayed.

buffered: Log buffer

history: Trap buffer

Description

Using the display info-center command, you can display the configuration of system log and the information recorded in the memory buffer.

If the information in the current log/trap buffer is less than the specified sizeval, display the actual log/trap information.

For the related commands, see info-center enable, info-center loghost, info-center logbuffer, info-center console channel,

info-center monitor channel.

291

S Y S T E M M A N A G E M E N T

Example

# Show the system log information.

<SW7700> display info-center

Information Center: enabled

Info-center loghost:

Console: channel number : 0 , channel name : console

Monitor: channel number : 1 , channel name : monitor

SNMP Agent: channel number : 5 , channel name : snmpagent

Logging buffer: enabled,max buffer size 1024, current buffer size 256, current messages 3, channel no : 4 , channel name : logbuf dropped messages 0, overwrote messages 0

Trapping buffer: enabled,max buffer size 1024, current buffer size 256, current messages 1, channel number:3, channel name:trapbuf dropped messages 0, overwrote messages 0

Information timestamp setting: log - datetime, trap - datetime, debugging - uptime

Sent messages = 5, Received messages = 5

12.12.2. info-center console channel

Syntax

info-center console channel { channel-number | channel-name }

View

System view

Parameter

channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.

channel-name: Specify the channel name.

Description

Using the info-center console channel command, you can configure the channel through which the log information is output to the console.

By default, Ethernet switches do not output log information to the console.

This command takes effect only after system logging is started.

For the related commands, see info-center enable, display info-center.

Example

# Configure to output log information to the console through channel 0.

[SW7700] info-center console channel 0

12.12.3. info-center enable

Syntax info-center enable

292

S Y S T E M M A N A G E M E N T

undo info-center enable

View

System view

Parameter

None

Description

Using the info-center enable command, you can enable the system log function. Using the undo info-center enable command, you can disable system log function.

By default, system log function is enabled.

Only after the system log function is enabled can the system output the log information to the info-center loghost and console, etc.

For the related commands, see info-center loghost, info-center logbuffer, info-center console channel, info-center monitor

channel, display info-center.

Example

# Enable the system log function.

[SW7700] info-center enable

12.12.4. info-center logbuffer

Syntax

info-center logbuffer [ max-size buffersize ] [ channel { channel-number | channel-name } ]

undo info-center logbuffer [ channel | max-size ]

View

System view

Parameter

size: Configure the size of buffer.

buffersize: Size of buffer (number of messages which can be kept); The default size of the buffer is 20.

channel: Configure the channel to output information to buffer.

channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.

channel-name: Specify the channel name.

Description

Using the info-center logbuffer command, you can configure to output information to the memory buffer. Using the undo info-

center logbuffer command, you can cancel the information output to buffer

This command takes effect only after the system logging is enabled.

For the related commands, see info-center enable, display info-center.

Example

# Send log information to buffer and sets the size of buffer as 50.

[SW7700] info-center logbuffer 50

293

S Y S T E M M A N A G E M E N T

12.12.5. info-center loghost

Syntax

info-center loghost host-ip-addr [ channel { channel-number | channel-name } ] [ facility local-number ] [ language { chinese | english

} ]

undo info-center loghost host-ip-addr

View

System view

Parameter

host-ip-addr: IP address of info-center loghost.

channel: Configure information channel of the info-center loghost.

channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels.

channel-name: Specify the channel name.

facility: Configure the recording tool of info-center loghost.

local-number: Record tool of info-center loghost, ranging from local0 to local7.

language: Set the logging language.

chinese, english: Language used in log file.

Description

Using the info-center loghost command, you can set the IP address of the info-center loghost to send information to it. Using the undo info-center loghost command, you can cancel output to info-center loghost.

By default, Ethernet switches do not output information to info-center loghost.

This command takes effect only after the system logging is enabled.

For the related commands, see info-center enable, display info-center.

Example

# Configure to send log information to the UNIX workstation at 202.38.160.1.

[SW7700] info-center loghost 202.38.160.1

12.12.6. info-center monitor channel

Syntax

info-center monitor channel { channel-number | channel-name }

View

System view

Parameter

channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.

channel-name: Specify the channel name.

294

S Y S T E M M A N A G E M E N T

Description

Using the info-center monitor channel command, you can set the channel to output the log information to the user terminal.

By default, Ethernet switches do not output log information to user terminal.

This command takes effect only after system logging is started.

For the related commands, see info-center enable, display info-center.

Example

# Configure channel 0 to output log information to user terminal.

[SW7700] info-center monitor channel 0

12.12.7. info-center snmp channel

Syntax

info-center snmp channel { channel-number | channel-name }

View

System view

Parameter

channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels. By default, channel 5 is used.

channel-name: Specify the channel name.

Description

Using the info-center snmp channel command, you can specify new channel for transmitting the SNMP information.

For the related commands, see display snmp.

Example

# Configure channel 6 as the SNMP information channel.

[SW7700] info-center snmp channel 6

12.12.8. info-center source

Syntax

info-center source { modu-name | default } channel { channel-number | channel-name } [ { log | trap | debug } * { level severity |

state state ] } *

undo info-center source { modu-name | default } channel { channel-number | channel-name }

View

System view

Parameter

modu-name: Module name.

default: All the modules.

log: Log information.

295

S Y S T E M M A N A G E M E N T

trap: Trap information.

debugging: Debugging information.

level: Level.

severity: Information level, do not output information below this level.

Information at different levels is as follows:

emergencies: Level 0 information, which cannot be used by the system.

alerts: Level 1 information, to be reacted immediately.

critical: Level 2 information, critical information.

errors: Level 3 information, error information.

warnings: level 4 information, warning information.

notifications: Level 5 information, showed normally and important.

informational: Level 6 information, notice to be recorded.

debugging: Level 7 information, generated during the debugging progress.

channel-number: Channel number to be set.

channel-name: Channel name to be set.

state: Set the state of the information.

state: Specify the state as on or off.

Description

Using the info-center source command, you can add/delete a record to the information channel. Using the undo info-center

source command, you can delete the contents of the information channel.

For example, for the filter of IP module log output, you can configure to output the logs at a level higher than warnings to the log host and output those higher than informational to the log buffer. You can also configure to output the trap information on the IP module to a specified trap host, etc.

The channels for filtering in all the directions are specified by this configuration command. All the information will be sent to the corresponding directions through the specified channels. You can configure the channels in the output direction, channel filter information, filtering and redirecting of all kinds of information.

At present, the system distributes an information channel in each output direction by default, shown as follows:

Output Direction and Information Channel Names

Output direction Information channel name

Console

Monitor

Info-center loghost console monitor loghost

Log buffer

Trap buffer logbuf trapbuf snmp snmpagent

In addition, each information channel has a default record with the module name “all” and module number as 0xffff0000.

However, for different information channel, the default log, trap and debugging settings in the records may be different with one another. Use default configuration record if a module does not have any specific configuration record in the channel.

Example

# Configure to enable the log information of VLAN module in SNMP channel and allows the output of the information with a level no higher than emergencies.

[SW7700] info-center source vlan channel snmp log level emergencies

296

S Y S T E M M A N A G E M E N T

12.12.9. info-center timestamp

Syntax info-center timestamp { log | trap | debugging } { boot | date | none } undo info-center timestamp { log | trap | debugging }

View

System view

Parameter

trap: Log information.

trap: Trap information.

debugging: Debugging information.

boot: Time elapsing after system starts. Format: xxxxxx.yyyyyy, xxxxxx is the high 32 bits of the elapsed time (in milliseconds) after system starts, and yyyyyy is the low 32 bits.

date: Current system date and time. It shows as yyyy/mm/dd-hh:mm:ss in Chinese environment and mm/dd/yyyy-hh:mm:ss in

Western language environment.

None: No timestamp format.

Description

Using the info-center timestamp command, you can configure the timestamp output format in debugging/trap information.

Using the undo info-center timestamp command, you can disable the output of timestamp field.

By default, datetime stamp is used.

Example

# Configure the debugging information timestamp format as boot.

[SW7700] info-center timestamp debugging boot

12.12.10. info-center trapbuffer

Syntax

info-center trapbuffer [ max-size buffersize ] [ channel { channel-number | channel-name } ]

undo info-center trapbuffer

View

System view

Parameter

size: Configure the size of the trap buffer.

buffersize: Size of trap buffer (numbers of messages).

channel: Configure the channel to output information to trap buffer.

channel-number: Channel number, ranging from 0 to 9, that is, the system has ten channels.

channel-name: Specify the channel name.

297

S Y S T E M M A N A G E M E N T

Description

Using the info-center trapbuffer command, you can output information to the trap buffer. Using the undo info-center

trapbuffer command, you can cancel output information to trap buffer.

By default, output information is transmitted to trap buffer and size of trap buffer is 20.

This command takes effect only after the system logging is enabled.

For the related commands, see info-center enable, display info-center.

Example

# Send information to the trap buffer and sets the size of buffer as 30.

[SW7700] info-center logbuffer max-size 30

12.12.11. rename channel

Syntax

rename channel channel-number channel-name

View

System view

Parameter

channel-number: Channel number, ranging from 0 to 9, that is, system has ten channels. channel-name: Specify the channel name with a character string not exceeding 30 characters, excluding "-", "/" or "\". .

Description

Using the rename channel command, you can rename a channel specified by the channel-number as channel-name.

Note that the channel name cannot be duplicated.

Example

# Rename the channel 0 as execconsole.

[SW7700] rename channel 0 execconsole

12.12.12. reset logbuffer

Syntax reset logbuffer

View

User view

Parameter

None

Description

Using the reset logbuffer command, you can clear information in log buffer.

298

S Y S T E M M A N A G E M E N T

Example

# Clear information in log buffer.

<SW7700> reset logbuffer

<SW7700> display info-center history 20

Trapping Buffer Confiuration & Information: enabled allowed max buffer size : 1024 actual buffer size : 256 channel number : 3 , channel name : trapbuf dropped messages : 0 overwrote messages : 0 current messages : 1

#9/5/2001 7:15:47-IFNET-5-TRAP:1.3.6.1.6.3.1.1.5.4

Interface 514 Changes to Up

12.12.13. reset trapbuffer

Syntax reset trapbuffer

View

User view

Parameter

None

Description

Using the reset trapbuffer command, you can clear information in trap buffer.

Example

# Clear information in trap buffer.

<SW7700> reset trapbuffer

12.12.14. terminal debugging

Syntax terminal debugging undo terminal debugging

View

User view

Parameter

None

Description

Using the terminal debugging command, you can configure to display the debugging information on the terminal. Using the

undo terminal debugging command, you can configure not to display the debugging information on the terminal.

299

S Y S T E M M A N A G E M E N T

By default, the displaying function is disabled.

For the related commands, see debugging.

Example

# Enable the terminal display debugging.

<SW7700> terminal debugging

12.12.15. terminal logging

Syntax terminal logging undo terminal logging

View

User view

Parameter

None

Description

Using the terminal logging command, you can start terminal log information display. Using the undo terminal logging command, you can disable terminal log information display.

By default, this function is enabled.

Example

# Disable the terminal log display.

<SW7700> undo terminal logging

12.12.16. terminal monitor

Syntax terminal monitor undo terminal monitor

View

User view

Parameter

None

Description

Using the terminal monitor command, you can enable the log debugging/log/trap on the terminal monitor. Using the undo

terminal monitor command, you can disable these functions.

By default, enable these functions for the console user and disable them for the terminal user.

This command only takes effect on the current terminal where the commands are input. The debugging/log/trap information can be output to the current terminal, beginning in user view. When the terminal monitor is shut down, no debugging/log/trap

300

S Y S T E M M A N A G E M E N T information will be displayed in local terminal, which is equals to having performed the undo terminal debugging, undo

terminal logging, undo terminal trapping commands. When the terminal monitor is enabled, you can use terminal

debugging / undo terminal debugging, terminal logging / terminal logging and terminal trapping / undo terminal

trapping respectively to enable or disable the corresponding functions.

Example

# Disable the terminal monitor.

<SW7700> undo terminal monitor

12.12.17. terminal trapping

Syntax terminal trapping undo terminal trapping

View

User view

Parameter

None

Description

Using the terminal trapping command, you can enable terminal trap information display. Using the undo terminal trapping command, you can disable this function.

By default, this function is enabled.

Example

# Enable trap information display.

<SW7700> terminal trapping

12.13. SNMP Configuration Commands

12.13.1. display snmp-agent community

Syntax

display snmp-agent community [ read | write ]

View

All views

Parameter

read: display read-only community information.

write: display read-write community information.

301

S Y S T E M M A N A G E M E N T

Description

Using the display snmp-agent community command, you can display the currently configured community names.

Example

# Display the currently configured community names.

<SW7700> display snmp-agent community community name:public group name:public storage-type: nonVolatile community name:tom group name:3Com storage-type: nonVolatile

12.13.2. display snmp-agent engineid

Syntax

display snmp-agent { local-engineid | remote-engineid }

View

All views

Parameter

local-engineid: local engine ID.

remote-engineid: remote engine ID.

Description

Using the display snmp-agent engineid command, you can displays the engine ID of current device.

SNMP engine is the core of SNMP entity. It performs the function of sending, receiving and authenticating SNMP message, extracting PDU, packet encapsulation and the communication with SNMP application, etc.

Example

# Display the engine ID of current device.

<SW7700> display snmp-agent engineid

Local SNMP engineID: 00000009020000000C025808

12.13.3. display snmp-agent group

Syntax

display snmp-agent group

View

All views

Parameter

None

302

S Y S T E M M A N A G E M E N T

Description

Using the display snmp-agent group command, you can display group name, safe mode, state of various views and storage modes.

Example

# Display SNMP group name and safe mode.

<SW7700> display snmp-agent group groupname: public readview:v1default writeview: no writeview specified notifyview: *tv.FFFFFFFF storage-type: volatile

The following table describes the output fields.

Output description of the display snmp-agent group command

Field

groupname readview writeview notifyview

Description

SNMP Group name of the user

Read-only MIB view name corresponding to that group

Writable MIB view corresponding to that group

The name of the notify MIB view corresponding to that group

12.13.4. display snmp-agent mib-view

Syntax

display snmp-agent mib-view [ exclude | include | { viewname mib-view } ]

View

All views

Parameter

exclude: Display the SNMP mib view excluded.

Include: Display the SNMP mib view included.

viewname: Display the SNMP mib view according to the mib view name.

mib-view: Specify the mib view name.

Description

The display snmp-agent mib-view command is used to view the MIB view configuration information of the Ethernet switch.

Example

# Display the information about the currently configured MIB view.

<SW7700> display snmp-agent mib-view storage-type: nonVolatile

View name:ViewDefault storage-type: nonVolatile

The following table describes the output fields.

-included active

MIB Subtree system.0

-excluded active

303

S Y S T E M M A N A G E M E N T

Output description of the display snmp-agent mib-view command

View name

MIB Subtree storage-type included/excluded active

Field Description

View name

MIB subtree

Storage type

Permit or forbid access to an MIB object

Indicate the line state in the table

Caution: If the SNMP Agent is disabled, "Snmp Agent disabled" will be displayed after you execute the above display commands.

12.13.5. display snmp-agent statistics

Syntax

display snmp-agent statistics

View

All views

Parameter

None

Description

Using the display snmp-agent statistics command, you can display the current state of SNMP communication.

This command provides a counter for SNMP operations.

Example

# Display the current state of SNMP communication.

<SW7700> display snmp-agent statistics

32 SNMP packets input

0 Bad SNMP version errors

4 Unknown community name

0 Illegal operation for community name supplied

0 Encoding errors

24 Number of requested variables

0 Number of altered variables

0 Get-request PDUs

28 Get-next PDUs

0 Set-request PDUs

41 SNMP packets output

0 Too big errors (Maximum packet size 1500)

0 No such name errors

0 Bad values errors

0 General errors

24 Response PDUs

13 Trap PDUs

The following table describes the output fields.

304

S Y S T E M M A N A G E M E N T

Output description of the display snmp-agent statistics command

Field

SNMP packets input

Bad SNMP version errors

Unknown community name

Illegal operation for community name supplied

Encoding errors

Number of requested variables

Number of altered variables

Get-request PDUs

Get-next PDUs

Set-request PDUs

SNMP packets output

Too big errors

Maximum packet size

No such name errors

Bad values errors

General errors

Response PDUs

Trap PDUs

12.13.6. display snmp-agent sys-info contact

Description

Total number of the input SNMP packets

Number of packets with version information error

Number of packets with community name error

Number of packets with authority error corresponding to the community name

Number of SNMP packets with encoding error

Number of variables requested by NMS

The number of variables set by NMS

Number of the received packets requested by get

Number of the received packets requested by get-next

Number of the received packets requested by set

Total number of the output SNMP packets

Number SNMP packet with too_big error

Maximum length of SNMP packet

Number of the packets requesting nonexistent MIB objects

Number of SNMP packets with Bad_values error

Number of SNMP packets with General_errors

Number of the response packets sent

Number of the sent Trap packets

Syntax

display snmp-agent sys-info contact

View

All views

Parameter

None

Description

Using the display snmp-agent sys-info contact command, you can display the character string sysContact (system contact).

Example

# Display the character string sysContact (system contact).

<SW7700> display snmp-agent sys-info contact

The contact person for this managed node: 3Com Corporation, Inc.

12.13.7. display snmp-agent sys-info location

Syntax

display snmp-agent sys-info location

View

All views

305

S Y S T E M M A N A G E M E N T

Parameter

None

Description

Using the display snmp-agent sys-info location command, you can display the character string describing the system location.

Example

# Display the system location.

<SW7700> display snmp-agent sys-info location

The physical location of this node: BeiJing China

12.13.8. display snmp-agent sys-info version

Syntax

display snmp-agent sys-info version

View

All views

Parameter

None

Description

Using the display snmp-agent sys-info version command, you can display the version information about the running SMNMP in the system.

Example

# Display the version information of running SNMP

<SW7700> display snmp-agent sys-info version

SNMP version running in the system:

SNMPv3

12.13.9. display snmp-agent usm-user

Syntax

display snmp-agent usm-user [ engineid engineid | group groupname | username username ]

View

All views

Parameter

engineid: display user information with specified engine ID.

username: display user information with specified user name.

groupname: display user information of specified group.

306

S Y S T E M M A N A G E M E N T

Description

Using the display snmp-agent usm-user command, you can display information of all the SNMP usernames in the group username list.

Example

# Display the information of all the current users.

<SW7700> display snmp-agent usm-user

User name: authuser

Engine ID: 00000009020000000C025808 storage-type: nonvolatile

The following table describes the output fields.

Output description of the display snmp-agent usm-user command

Field

User name

Engine ID storage-type

12.13.10. snmp-agent local-engineid

Description

Name of SNMP user

Character string identifying SNMP device

Storage type

Syntax

snmp-agent local-engineid engineid undo snmp-agent local-engineid engineid

View

System view

Parameter

local-engineid: Specify an engineID for the local SNMPv3 entity

engineid: Specify the engine ID with a character string, only composed of hexadecimal numbers between 5 and 32 including; The default value is "Enterprise Number + device information".

Description

Using the snmp-agent local-engineid command, you can configure a name for a local or remote SNMP engine on the Ethernet

Switch. Using the undo snmp-agent local-engineid command, you can restore the default setting of engine ID.

Device information is determined according to different products. It can be IP address, MAC address or user defined text.

However, you must use numbers in hexadecimal form.

Example

# Configure the ID of a local or remote device as 12345.

<SW7700> display snmp-agent local-engineid

12.13.11. snmp-agent community

Syntax

snmp-agent community { read | write } community-name [ [ mib-view view-name ] [ acl acl-list ] ] undo snmp-agent community community-name

307

S Y S T E M M A N A G E M E N T

View

System view

Parameter

community-name: Community name character string.

view-name: MIB view name.

ro: Indicate that MIB object can only be read.

rw: Indicate that MIB object can be read and written.

acl acl-list: set access control list for specified community.

Description

Using the snmp-agent community command, you can set community access name and enable the access to SNMP. Using the

undo snmp-agent community command, you can cancel the settings of community access name.

Example

# Configure community name as comaccess and permits read-only access by this community name.

[SW7700] snmp-agent community comaccess ro

# Configure community name as mgr and permits read-write access.

[SW7700] snmp-agent community mgr rw

# Delete the community name comaccess.

[SW7700] undo snmp-agent community comaccess

12.13.12. snmp-agent group

Syntax

snmp-agent group { v1 | v2c } group-name [ read-view read-view ] [ write-view write-view ] [ notify notify-view ] [ acl acl-list ] undo snmp-agent group { v1 | v2c } group-name

snmp-agent group v3 group-name [ authentication | privacy ] [ read-view read-view ] [ write-view write-view ] [ notify notify-view ] [

acl acl-list ] undo snmp-agent group v3 group-name [ authentication | privacy ]

View

System view

Parameter

groupname: Group name, ranging from 1 to 32 bytes.

auth: Configure to authenticate the packet.

noauth: Configure not to authenticate the packet.

read-view: Configures to allow read-only view settings.

readview: Read-only view name, ranging from 1 to 32 bytes.

write-view: Configure to allow read-write view settings.

writeview: Name of read-write view, ranging from 1 to 32 bytes.

notify: Configure to allow notify view settings.

notifyview: Specify the notify view name, ranging from 1 to 32 bytes.

308

S Y S T E M M A N A G E M E N T

acl acl-list: Set access control list for this group name.

Description

Using the snmp-agent group command, you can configure a new SNMP group, that is, to map SNMP user to SNMP view.

Using the undo snmp-agent group command, you can delete a specified SNMP group.

For the following reasons:

The snmp-agent target-host command automatically generates a notifyview for user and adds it to the corresponding group.

Any change of the SNMP group notify view will affect all the users related to this group.

Please do not specify the notify view when configuring SNMP group.

Example

# Create an SNMP group named group3.

[SW7700] snmp-agent group v3 group3.

12.13.13. snmp-agent mib-view

Syntax

snmp-agent mib-view { included | excluded } view-name oid-tree undo snmp-agent mib-view view-name

View

System view

Parameter

view-name: Specify the view name, with a character string, ranging from 1 to 32 characters.

oid-tree: MIB object subtree. It can be a character string of the variable OID, or a variable name, ranging from 1 to 255 characters.

included: Include this MIB subtree.

excluded: Exclude this MIB subtree.

Description

Using the snmp-agent mib-view command, you can create or update the view information. Using the undo snmp-agent mib-

view command, you can delete the view information

By default, the view name is v1default. OID is 1.3.6.1.

Both the character string of OID and the node name can be input as parameter.

Example

# Create a view that consists of all the objects of MIB-II.

[SW7700] snmp-agent mib-view mib2 5.6.1.3 included

12.13.14. snmp-agent packet max-size

Syntax

snmp-agent packet max-size byte-count undo snmp-agent packet max-size

309

S Y S T E M M A N A G E M E N T

View

System view

Parameter

byte-count: Specify the size of SNMP packet (measured in bytes), ranging from 484 to 17940; the default size is 1500 bytes.

Description

Using the snmp-agent packet max-size command, you can configure the size of SNMP packet that the Agent can send/receive.

Using the undo snmp-agent packet max-size command, you can restore the default size of SNMP packet.

The sizes of the SNMP packets received/sent by the Agent are different in different network environment.

Example

# Set the size of SNMP packet to 1042 bytes.

[SW7700] snmp-agent packet max-size 1042

12.13.15. snmp-agent sys-info

Syntax

snmp-agent sys-info { contact sysContact | location sysLocation | version { { v1 | v2c | v3 } * | all } }

undo snmp-agent sys-info { contact | location | version { { v1 | v2c | v3 } * | all } }

View

System view

Parameter

sysContact: Specify a character string describing the system maintaining contact (in bytes), with a length ranging from 1 to 255; The default contact information is "3Com Beijing China".

sysLocation: Specify a character string to describe the system location; By default, the character string is "Beijing China".

version: version of running SNMP.

v1: SNMP V1.

v2c: SNMP V2C.

v3: SNMP V3.

all: all SNMP version (includsSNMP V1, SNMP V2C, SNMP V3).

Description

Using the snmp-agent sys-info command, you can set system information such as geographical location of the device, contact information for system maintenance and version information of running SNMP. Using the undo snmp-agent sys-info location command, you can restore the default value.

Example

# Set system location as Building 3/Room 214.

[SW7700] snmp-agent sys-info location Building 3/Room 214

310

S Y S T E M M A N A G E M E N T

12.13.16. snmp-agent target-host

Syntax

snmp-agent target-host { trap } { { address { udp-domain host-addr [ port udp-port-number ] } } { parameters [ v1 | v2c | v3 [

authentication | privacy ] ] { securityname community-string } } undo snmp-agent target-host host-addr securityname community-string

View

System view

Parameter

trap: Specify the host to receive traps or notifications

1: Represent the version of SNMPV1.

2c: Represent the version of SNMPV2C.

3: Represent the version of SNMPV3.

authentication: Configure to authenticate the packet without encryption.

udp-domain: Specify transport domain over UDP for the target address

host-addr: IP address of destination host.

port udp-port-number: Specify the UDP port number of the host to receive the SNMP notification.

address: Specify the transport addresses to be used in the generation of SNMP messages

parameters: Specify SNMP target information to be used in the generation of SNMP messages

community-string: Specify the community name. The character string can range from 1 to 32 bytes.

Description

Using the snmp-agent target-host command, you can configure destination of SNMP notification. Using the undo snmp-

agent target-host command, you can cancel the host that receives SNMP notification.

The snmp-agent target-host command and the snmp-agent trap enable command should be used at the same time. Use the

snmp-agent trap enable command to enable the device to transmit Trap packets. The snmp-agent trap enable and snmp-

agent target-host commands should be used at the same time on the host to enable notify message sending.

Example

# Enable sending Trap message to myhost.3Com.com with community name comaccess.

[SW7700] snmp-agent trap enable

[SW7700] snmp-agent target-host myhost. 3Com.com comaccess

# Enable sending Trap packets to myhost. 3Com.com with the community name public

[SW7700] snmp-agent trap enable

[SW7700] snmp-agent target-host myhost. 3Com.com public

12.13.17. snmp-agent trap enable

Syntax

snmp-agent trap enable [ standard [ authentication ] [ coldstart ] [ linkdown ] [ linkup ] [ warmstart ] ] undo snmp-agent trap enable [ standard [ authentication ] [ coldstart ] [ linkdown ] [ linkup ] [ warmstart ] ]

311

S Y S T E M M A N A G E M E N T

View

System view

Parameter

snmp: Configure to send SNMP Trap packets.

authentication: Configure to send SNMP authentication Trap packets.

coldstart: Configure to send SNMP cold start Trap packets.

linkdown: Configure to send SNMP link down Trap packets.

linkup: Configure to send SNMP link up Trap packets.

warmstart: Configure to send SNMP warm start Trap packets.

Description

Using the snmp-agent trap enable command, you can enable the device to send Trap message. Using the undo snmp-agent

trap enable command, you can disable Trap message sending.

By default, Trap message sending is disabled.

The snmp-agent trap enable command and the snmp-agent target-host command should be used at the same time. The

snmp-agent target-host command specifies which hosts can receive Trap message. However, to send Trap message, at least one

snmp-agent target-host command should be configured.

Example

# Enable to send the trap packet of SNMP authentication failure to 10.1.1.1. The packet is in the V2C format and the community name is 3Com.

[SW7700] snmp-agent trap enable standard authentication

[SW7700] snmp-agent target-host 10.1.1.1 version 2c 3Com

12.13.18. snmp-agent trap life

Syntax

snmp-agent trap life seconds undo snmp-agent trap life

View

System view

Parameter

seconds: Specify the timeouts, ranging from 1 to 2592000 seconds. By default, the timeout interval is 120 seconds.

Description

Using the snmp-agent trap life command, you can set the timeout of Trap packets. Using the undo snmp-agent trap life command, you can restore the default value.

The set timeout of Trap packet is represented by seconds. If time exceeds seconds, this Trap packet will be discarded.

For the related commands, see snmp-agent trap enable, snmp-agent target-host.

Example

# Configure the timeout interval of Trap packet as 60 seconds.

312

S Y S T E M M A N A G E M E N T

[SW7700] snmp-agent trap life 60

12.13.19. snmp-agent trap queue-size

Syntax

snmp-agent trap queue-size length undo snmp-agent trap queue-size

View

System view

Parameter

length: Length of queue, ranging from 1 to 1000; the default length is 100.

Description

Using the snmp-agent trap queue-size command, you can configure the information queue length of Trap packet sent to destination host. Using the undo snmp-agent trap queue-size command, you can restore the default value.

For the related commands, see snmp-agent trap enable, snmp-agent target-host, snmp-agent trap life.

Example

# Configure the queue length to 200.

[SW7700] queue-length 200

12.13.20. snmp-agent trap source

Syntax

snmp-agent trap source vlan-interface vlan-id undo snmp-agent trap source

View

System view

Parameter

vlan-id: Specify the VLAN interface ID, ranging from 1 to 4000.

Description

Using the snmp-agent trap source command, you can specify the source address for sending Trap. Using the undo snmp-

agent trap source command, you can cancel the source address for sending Trap.

Example

# Configure the IP address of the VLAN interface 1 as the source address for transmitting the Trap packets.

[SW7700] snmp-agent trap source vlan-interface 1

313

S Y S T E M M A N A G E M E N T

12.13.21. snmp-agent usm-user

Syntax

snmp-agent usm-user { v1 | v2c } username groupname [ acl acl-list ] undo snmp-agent usm-user { v1 | v2c } username groupname

snmp-agent usm-user v3 username groupname [ authentication-mod { md5 | sha } authpassstring] acl acl-list undo snmp-agent usm-user v3 username groupname { local | engineid engine-id }

View

System view

Parameter

username: Specify the user name, ranging from 1 to 32 bytes.

groupname: Specify the group name corresponding to that user, a character string at the length ranging from 1 to 32 bytes.

v1: Configure to use V1 safe mode.

v2c: Configure to use V2c safe mode.

v3: Configure to use V3 safe mode.

authentication-mode: Specify the safety level as authentication required.

md5: MD5 algorithm is adopted in authentication. MD5 authentication uses the 128-digit password. Computation speed of MD5 is faster than that of SHA

sha: SHA algorithm is adopted in authentication. SHA authentication uses the 160-digit password. Computation speed of SHA is slower than that of MD5, but with higher security.

authpassword: Specify the authentication password with a character string, ranging from 1 to 64 bytes.

acl acl-list: Set access control list for this user based on USM name

Description

Using the snmp-agent usm-user command, you can add a new user to an SNMP group. Using the undo snmp-agent usm-

user command, you can delete a user from SNMP group.

SNMP engineID (for authentication) is required when configuring remote user for an agent. This command will not be effective without engineID configured.

For V1 and V2C, this command will add a new community name. For V3, it will add a new user for an SNMP group.

Example

# Add a user JohnQ for 3Com (an SNMP group), configures to authenticate with MD5 and sets authentication password as pass.

[SW7700] snmp-agent usm-user JohnQ 3Com v3 auth md5 pass

12.13.22. undo snmp-agent

Syntax

undo snmp-agent

View

System view

314

S Y S T E M M A N A G E M E N T

Parameter

None

Description

Using undo snmp-agent command, you can disable all versions of SNMP running on the server.

Any command of snmp-agent will enable SNMP Agent.

Example

# Disable the running SNMP agents of all SNMP versions.

[SW7700] undo snmp-agent

12.14. RMON Configuration Commands

12.14.1. display rmon alarm

Syntax

display rmon alarm [ alarm-table-entry ]

View

All views

Parameter

alarm-table-entry: Alarm table entry index.

Description

Using the display rmon alarm command, you can display RMON alarm information.

For the related commands, see rmon alarm.

Example

# Display the RMON alarm information.

<SW7700> display rmon alarm

Alarm table 1 is UNDERCREATION, and owned by Configer, every 1 second(s) monitoring Ethernet1/0/1 ebcastpkts.

Rising threshold is 1, linked with event 5.

Falling threshold is 2, linked with event 5.

On startup enables risingOrFallingAlarm.

It's latest absolute sampled values was 0.

Output description of the display rmon alarm command

Field Description

Alarm table 1

UNDERCREATION

Index 1 in the alarm table

The entry corresponding to the index is under creation.

Configer Owner

Rising threshold is 1 The rising threshold is 1

Falling threshold is 2 startup

The falling threshold is 2

The first trigger

315

S Y S T E M M A N A G E M E N T risingOrFallingAlarm absolute sampled values

12.14.2. display rmon event

Field Description

The type of the first alarm: Specifies to alarm when exceeding the rising threshold or the falling threshold

Absolute sampled values

Syntax

display rmon event [ event-table-entry ]

View

All views

Parameter

event-table-entry: Entry index of event table.

Description

Using the display rmon event command, you can display RMON events.

The display includes event index in event table, owner of the event, description to the event, action caused by event (log or alarm information), and occurrence time of the latest event (counted on system initiate/boot time in centiseconds).

For the related commands, see rmon event.

Example

# Show the RMON event.

<SW7700> display rmon event

Event table 1 is VALID, and owned by 3COM.

Event firing causes log ,last fired at 0.

Output description of the display rmon event command

Field Description

Event table 1

VALID

Index 1 in event table

The entry corresponding to the index is valid

3COM Owner description

Event firing causes log last fired at 0

Log triggered by event

Occurrence time of the latest event (counted since system initiate/boot time in centisecond)

12.14.3. display rmon eventlog

Syntax

display rmon eventlog [ event-number ]

View

All views

316

S Y S T E M M A N A G E M E N T

Parameter

event-number: Entry index of event table.

Description

Using the display rmon eventlog command, you can display RMON event log.

The display includes description about event index in event table, description to the event, and occurrence time of the latest event

(counted on system initiate/boot time in centisecond).

Example

# Show event log of RMON.

<SW7700> display rmon eventlog 1

Event table 1 is VALID, and owned by 3Com.

Event firing causes log-and-trap ,last fired at 102300.

Event 1 generates eventLog 1.

Description: The 1.3.6.1.2.1.16.1.1.1.4.8 defined in alarm table 2, less than 200 with alarm value 0. Alarm sample type is delta. loged at 21300.

Event 1 generates eventLog 2.

Description: The 1.3.6.1.2.1.16.1.1.1.4.8 defined in alarm table 2, uprise 1000 with alarm value 10443. Alarm sample type is delta. loged at 102300.

Output description of the display rmon eventlog command

Field Description

Event table

VALID

Index 1 in event table

The entry corresponding to the index is valid

3Com Owner

Description Event

Event firing causes log-and-trap Log and trap triggered by event last fired at 102300

Occurrence time of the latest event (counted since system initiate/boot time in centisecond)

12.14.4. display rmon history

Syntax

display rmon history [ port-num ]

View

All views

Parameter

port-num: Ethernet port name.

Description

Using the display rmon history command, you can display latest RMON history sampling information (including utility, error number and total packet number).

For the related commands, see rmon history.

317

S Y S T E M M A N A G E M E N T

Example

# Show the RMON history information.

<SW7700> display rmon history Ethernet 2/0/1

History control entry 1 owned by 3Com is VALID, samples interface

Ethernet2/0/1 every 10 second with 10 buckets max.

Latest sampled values:

Dropevents :0 , octets :0

packets :0 ,

multicast packets :0 ,

undersize packets :0 ,

fragments :0 ,

collisions :0 , broadcast packets :0

CRC alignment errors :0 oversize packets :0 jabbers :0 utilization :0

Output description of the display rmon history command

Field Description

Interface Port history control table Index number in history control table

VALID Valid

3COM Owner buckets sampling interval

Records in history control table

Sampling interval dropevents octets packets broadcastpackets multicastpackets

CRC alignment errors undersized oversized packets

Dropping packet events

Sent/Transmitted octets in sampling time

Packets sent/transmitted in sampling time

Number of broadcast packets

Number of multicast packets

Number of CRC error packets

Number of undersized packets

Number of oversized packets fragments jabbers collisions

Number of undersized and CRC error packets

Number of oversized and CRC error packets

Number of collision packets utilization Utilization

12.14.5. display rmon prialarm

Syntax

display rmon prialarm [ prialarm-table-entry ]

View

All views

Parameter

prialarm-table-entry: entry of extended alarm table.

Description

Using the display rmon prialarm command, you can display information about extended alarm table.

For the related commands, see rmon prialarm.

Example

# display alarm information about extended RMON.

318

S Y S T E M M A N A G E M E N T

<SW7700> display rmon prialarm

12.14.6. display rmon statistics

Syntax

display rmon statistics [ port-num ]

View

All views

Parameter

port-num: Ethernet port number.

Description

Using the display rmon statistics command, you can display RMON statistics.

The displayed information includes collision, CRC (Cyclic Redundancy Check) and queue, undersized or oversized packet, timeout, fragment, broadcast, multicast, unicast, and bandwidth utility.

For the related commands, see rmon statistics.

Example

# Show RMON statistics.

<SW7700> display rmon statistics Ethernet 2/0/1

Statistics entry 1 owned by 3Com-rmon is VALID.

Gathers statistics of interface Ethernet2/0/1. Received:

Dropped packet events (due to lack of resources):0

Packets received according to length (in octets):

64 :644 , 65-127 :518 , 128-255 :688

256-511:101 , 512-1023:3 , 1024-1518:0

64: 120, 65-127: 88, 128-255: 8,

256-511: 12, 512-1023: 5, 1024-1518: 0.

Output description of the display rmon statistics command

Field Description

Interface Port table

VALID Valid

Configer Owner broadcast multicast packets

Number of broadcast packets

Number of multicast packets undersized oversized packets fragments jabbers

Number of undersized packets

Number of oversized packets

Number of undersized and CRC error packets

Number of oversized and CRC error packets

CRC alignment errors collisions

Number of CRC error packets

Number of collision packets utilization Utilization

Dropped packet events Dropping packet events

319

S Y S T E M M A N A G E M E N T

12.14.7. rmon alarm

Syntax

rmon alarm entry-number alarm-variable sampling-time { delta | absolute } rising-threshold threshold-value1 event-entry1 falling-

threshold threshold-value2 event-entry2 [ owner text ]

undo rmon alarm entry-number

View

System view

Parameter

entry-number: Number of the entry to be added/deleted, ranging from 1 to 65535.

alarm-variable: Specifies the alarm variable with a character string, ranging from 1 to 256, in the OID dotted format, like

1.3.6.1.2.1.2.1.10.1 (or ifInOctets.1).

sampling-time: Specifies the sampling interval, ranging from 5 to 65535 (measured in seconds).

delta: Sampling type is delta.

absolute: Sampling type is absolute.

rising-threshold threshold-value1: Rising threshold, ranging from 0 to 2147483647.

event-entry1: Event number corresponding to the upper limit of threshold, ranging from 0 to 65535.

falling-threshold threshold-value2: Falling threshold, ranging from 0 to 2147483647.

event-entry2: Event number corresponding to the falling threshold, ranging from 0 to 65535.

owner text: Specifies the creator of the alarm. Length of the character string ranges from 1 to 127.

Description

Using the rmon alarm command, you can add an entry to the alarm table. Using the undo rmon alarm command, you can delete an entry from this table.

In this way, the alarm event can be triggered in the abnormal situations and then decides to log and send trap to the NM station.

Example

# Delete the information of entry 15 from the alarm table.

[SW7700] undo rmon alarm 15

12.14.8. rmon event

Syntax

rmon event event-entry [ description string ] { log | trap trap-community | log-trap log-trapcommunity | none } [ owner rmon-station ]

undo rmon event event-entry

View

System view

Parameter

event-entry: Number of the entry to be added/deleted, ranging from 1 to 65535.

description string: Event description. Length of the character string ranges from 1 to 255.

320

S Y S T E M M A N A G E M E N T

log: Log event.

trap: Trap event.

trap-community: Name of the community that trap message is sent to.

log-trap: Log and trap event.

log-trapcommunity: Name of the community that trap message is sent to.

none: neither log nor trap event.

owner rmon-station: Name of the network management station that creates this entry. The length of the character string ranges from 1 to 127.

Description

Using the rmon event command, you can add an entry to the event table. Using the undo rmon event command, you can delete an entry from this table.

Event management of RMON defines the way to deal with event number and event-log, send trap message or log while sending trap message. In this way, alarm events may obtain corresponding treatment

Example

# Add the entry 10 to the event table and marks it as log event.

[SW7700] rmon event 10 log

12.14.9. rmon history

Syntax

rmon history entry-number buckets number interval sampling-interval [ owner text-string ]

undo rmon history entry-number

View

Ethernet port view

Parameter

entry-number: Number of the entry to be added/deleted, ranging from 1 to 65535.

buckets number: Capacity of the history table corresponding to the control line.

interval sampling-interval: Sampling interval, ranging from 5 to 3600 (measured in seconds).

owner text-string: Creator of the line. Length of the character string ranges from 1 to127.

Description

Using the rmon history command, you can add an entry to the history control table. Using the undo rmon history command, you can delete an entry from history control table.

Perform this command to sample, set sample parameter (sample time interval) and storage amounts for a port. RMON will periodically perform data collection and save for query on this port. Sample information includes utility, error number and total packet number.

Example

# Delete the entry 15 from the history control table.

[SW7700-Ethernet1/0/1] undo rmon history 15

321

S Y S T E M M A N A G E M E N T

12.14.10. rmon prialarm

Syntax

rmon prialarm entry-number alarm-var [ alarm-des ] sampling-timer { delta | absolute | changeratio } rising-threshold threshold-value1

event-entry1 falling-threshold threshold-value2 event-entry2 entrytype { forever | cycle cycle-period } [ owner text ] undo rmon prialarm entry-number

View

System view

Parameter

entry-number: Specifies the entry number, ranging from 1 to 65535.

alarm-var: Specifies the alarm variable, which can be an arithmetic expression of several integer MIB node instances. The node can be OID in dotted notation.

alarm-des: Specifies the alarm description with a length ranging from 0 to 0-127;

sampling-timer: Sets the sampling interval, ranging from 10 to 65535 and measured in seconds.

delta | absolute | changeratio: Specifies the sampling type as delta ratio or absolute ratio.

threshold-value1: Rising threshold value, specified with a number greater than 0.

event-entry1: Corresponding event number to the upper limit threshold value, ranging from 0 to 65535.

threshold-value2: Falling threshold value, specified with a number greater than 0.

event-entry2: Event number corresponding to the falling threshold, ranging from 0 to 65535.

forever | cycle cycle-period: Specifies the type of the alarm instance line.

cycle-period specifies the functional cycle of the instance.

owner text: Specifies the creator of the line. Length of the character string ranges from 1 to 127.

Description

Using the rmon prialarm command, you can add an entry to the extended RMON alarm table. Using the undo rmon prialarm command, you can delete an entry from the extended RMON alarm table.

The number of instances can be created in the table depends on the hardware resource of the product.

Example

# Delete line 10 from the extended RMON alarm table.

[SW7700] undo rmon prialarm 10

12.14.11. rmon statistics

Syntax

rmon statistics entry-number [ owner text-string ]

undo rmon statistics entry-number

View

Ethernet port view

322

S Y S T E M M A N A G E M E N T

Parameter

entry-number: Number of the entry to be added/deleted, ranging from 1 to 65535.

owner text-string: Creator of the entry. Length of the character string ranges from 1 to127.

Description

Using the rmon statistics command, you can add an entry to the statistic table. Using the undo rmon statistics command, you can delete an entry from statistic table.

RMON statistic management concerns the statistics and monitoring of the usage and error on a port. Statistics includes collision,

CRC (Cyclic Redundancy Check) and queue, undersized or oversized packet, timeout, fragment, broadcast, multicast, unicast, and bandwidth utility.

Example

# Add the entry 20 to the statistics table of Ethernet1/0/1.

[SW7700-ethernet1/0/1] rmon statistics 20

323

Key features

System Access Control
Port Configuration
VLAN Management
Network Protocols
Routing Protocols
Security Features
Command Reference

Frequently asked questions

The switch supports a variety of Ethernet ports, including 10/100/1000 Mbps and Gigabit Ethernet ports. Specific port configurations may vary depending on the model.

You can configure VLANs using the 'vlan' command followed by the VLAN ID. You can then assign ports to specific VLANs using the 'port' command.

The switch supports a variety of routing protocols, including RIP, OSPF, and static routing.

You can access the command-line interface by using a telnet or SSH client connected to the switch's IP address.

The switch supports a variety of security features, including port security, VLAN access control, and authentication.

Switch 7700

Command Reference

Contents

Chapter 1 About This Manual

1.1. Version

1.2. Related Manuals

1.3. Organization of the Manual

1.4. Intended Readers

Conventions

Chapter 2 System Access

2.1. Logging in Commands

Chapter 3 Port

3.1. Ethernet Port Configuration Commands

3.2. Ethernet Port Link Aggregation Commands

Chapter 4 VLAN

4.1. VLAN Configuration Commands

4.2. GARP Configuration Commands

4.3. GVRP Configuration Command

Chapter 5 Network Protocol

5.1. IP Address Configuration Commands

5.2. ARP Configuration Commands

5.3. DHCP Relay Configuration Commands

5.4. IP Performance Configuration Commands

Chapter 6 Routing Protocol

6.1. Display Commands of the Routing Table

6.2

. Static Route Configuration Command

6.3. RIP Configur ation Commands

6.4. OSPF Configuration Commands

6.5. IP Routing Policy Configuration Commands

# Define one apply sub-statement. When it is used for setting route information attribute, it sets the route source of BGP route information as

Chapter 7 Multicast Protocol

7.1. GMRP Configuration Commands

7.2. Multicast Common Configuration Commands

7.3. IGMP Configuration Commands

7.4. PIM Configuration Commands

Chapter 8 QoS/ACL

8.1. ACL Configuration Command List

8.2. QoS Configuration Commands List

8.3. Logon user’s ACL Control Command

Chapter 9 STP

9.1. RSTP Configuration Commands

Chapter 10 AAA and RADIUS

10.1. 802.1x Configuration Commands

10.2. AAA Configuration Commands

10.3. RADIUS Protocol Configuration Commands

Chapter 11 Reliability

11.1. VRRP Configuration Commands

Chapter 12 System Management

12.1. File System Management Commands

12.2. Configuration File Management Commands

12.3. FTP Server Configuration Commands

12.4. FTP Client Commands

12.5. TFTP Configuration Commands

12.6. MAC Address Table Management Commands

12.7. Device Management Commands

12.8. Basic System Configuration and Management Commands

12.9. System Status and System Information Display Commands

12.10. System Debug Commands

12.11. Network Connection Test Commands

12.12. Log Commands

12.13. SNMP Configuration Commands

12.14. RMON Configuration Commands

What types of ports does the 3Com Switch 7700 support?

How can I configure VLANs on the 3Com Switch 7700?

What types of routing protocols are supported by the 3Com Switch 7700?

How can I access the command-line interface of the 3Com Switch 7700?

What security features are available on the 3Com Switch 7700?

Related

3Com Switch 7700 Configuration Guide + AI Chat & PDF Access

3Com Switch 3.01.01 User manual

3Com Switch 7700 Configuration Manual

3com Switch 7700 Configuration Guide

3com Switch 5500G-EI PWR 48-Port Quick Reference Manual

3Com Switch 5500 Family Command Reference Guide

3Com Switch 8800 Command Reference Guide

3Com 7750 Series Switch User manual

HUAWEI Ethernet switch S3500 S3526-0025, S3526EF-S3526C-0035, S3528-S3552-0017 Operation Manual

3Com 3C16894, 3C16895, 3C16896, 3C16897 Quick Reference Manual

3Com Switch 8800 Command Guide + AI Chat & PDF Access