HPE FlexFabric 7900 Switch Series

HPE FlexFabric 7900 Switch Series
Layer 2—LAN Switching
Command Reference
Part number: 5998-8239R
Software version: Release 231x
Document version: 6W101-20151113
© Copyright 2015 Hewlett Packard Enterprise Development LP
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard
Enterprise products and services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett
Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or
copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s
standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise
website.
Acknowledgments
Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the
United States and other countries.
Microsoft® and Windows® are trademarks of the Microsoft group of companies.
Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.
Java and Oracle are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
HPE FlexFabric 7900 Switch Series
Layer 2—LAN Switching
Command Reference
Part number: 5998-8239R
Software version: Release 231x
Document version: 6W101-20151113
© Copyright 2015 Hewlett Packard Enterprise Development LP
The information contained herein is subject to change without notice. The only warranties for Hewlett Packard
Enterprise products and services are set forth in the express warranty statements accompanying such
products and services. Nothing herein should be construed as constituting an additional warranty. Hewlett
Packard Enterprise shall not be liable for technical or editorial errors or omissions contained herein.
Confidential computer software. Valid license from Hewlett Packard Enterprise required for possession, use, or
copying. Consistent with FAR 12.211 and 12.212, Commercial Computer Software, Computer Software
Documentation, and Technical Data for Commercial Items are licensed to the U.S. Government under vendor’s
standard commercial license.
Links to third-party websites take you outside the Hewlett Packard Enterprise website. Hewlett Packard
Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise
website.
Acknowledgments
Intel®, Itanium®, Pentium®, Intel Inside®, and the Intel Inside logo are trademarks of Intel Corporation in the
United States and other countries.
Microsoft® and Windows® are trademarks of the Microsoft group of companies.
Adobe® and Acrobat® are trademarks of Adobe Systems Incorporated.
Java and Oracle are registered trademarks of Oracle and/or its affiliates.
UNIX® is a registered trademark of The Open Group.
Contents
Ethernet interface commands ········································································· 1 Common Ethernet interface commands ············································································································ 1 bandwidth ··················································································································································· 1 default ························································································································································ 1 description ·················································································································································· 2 display counters ········································································································································· 3 display counters rate ·································································································································· 4 display ethernet statistics ··························································································································· 5 display interface ········································································································································· 8 display packet-drop ·································································································································· 19 duplex······················································································································································· 20 flow-control ··············································································································································· 20 flow-control receive enable ······················································································································ 21 interface ··················································································································································· 22 jumboframe enable ·································································································································· 23 link-delay ·················································································································································· 23 port link-mode ·········································································································································· 24 priority-flow-control ··································································································································· 25 priority-flow-control no-drop dot1p ··········································································································· 26 reset counters interface···························································································································· 28 reset ethernet statistics ···························································································································· 29 reset packet-drop interface ······················································································································ 29 shutdown ·················································································································································· 30 speed ······················································································································································· 31 using fortygige ·········································································································································· 32 using tengige ············································································································································ 33 Layer 2 Ethernet interface commands ············································································································· 34 broadcast-suppression ····························································································································· 34 display storm-constrain ···························································································································· 35 multicast-suppression ······························································································································ 36 port up-mode ············································································································································ 38 storm-constrain ········································································································································ 38 storm-constrain control····························································································································· 40 storm-constrain enable log ······················································································································· 41 storm-constrain enable trap ····················································································································· 41 storm-constrain interval ···························································································································· 42 unicast-suppression ································································································································· 42 Layer 3 Ethernet interface or subinterface commands ···················································································· 44 mtu ··························································································································································· 44 Loopback, null, and inloopback interface commands ··································· 45 bandwidth ················································································································································· 45 default ······················································································································································ 45 description ················································································································································ 46 display interface inloopback ····················································································································· 47 display interface loopback ························································································································ 49 display interface null································································································································· 52 interface loopback ···································································································································· 53 interface null ············································································································································· 54 reset counters interface loopback ············································································································ 55 reset counters interface null ····················································································································· 55 shutdown ·················································································································································· 56 Bulk interface configuration commands ························································ 57 display interface range ····························································································································· 57 interface range ········································································································································· 57 interface range name ······························································································································· 59 i
MAC address table commands ····································································· 61 display mac-address ································································································································ 61 display mac-address aging-time ·············································································································· 62 display mac-address mac-learning ·········································································································· 63 display mac-address statistics ················································································································· 64 mac-address (interface view) ··················································································································· 65 mac-address (system view) ····················································································································· 66 mac-address mac-learning enable ··········································································································· 68 mac-address mac-learning ingress ·········································································································· 69 mac-address mac-roaming enable··········································································································· 70 mac-address timer ··································································································································· 70 MAC Information commands ········································································ 72 mac-address information enable (interface view) ···················································································· 72 mac-address information enable (system view) ······················································································· 72 mac-address information interval ············································································································· 73 mac-address information mode················································································································ 74 mac-address information queue-length···································································································· 74 Ethernet link aggregation commands ··························································· 76 bandwidth ················································································································································· 76 default ······················································································································································ 76 description ················································································································································ 77 display interface ······································································································································· 77 display lacp system-id ······························································································································ 81 display link-aggregation capability ··········································································································· 82 display link-aggregation load-sharing mode····························································································· 83 display link-aggregation load-sharing path······························································································· 84 display link-aggregation member-port ······································································································ 86 display link-aggregation summary············································································································ 88 display link-aggregation verbose·············································································································· 89 interface bridge-aggregation ···················································································································· 92 interface route-aggregation ······················································································································ 93 lacp edge-port ·········································································································································· 94 lacp period short······································································································································· 95 lacp system-priority ·································································································································· 95 link-aggregation bfd ipv4 ·························································································································· 96 link-aggregation capability························································································································ 97 link-aggregation global load-sharing mode ······························································································ 98 link-aggregation ignore vlan ····················································································································· 99 link-aggregation lacp traffic-redirect-notification enable ··········································································· 99 link-aggregation load-sharing mode ······································································································· 100 link-aggregation load-sharing mode local-first ······················································································· 101 link-aggregation mode···························································································································· 102 link-aggregation port-priority ·················································································································· 102 link-aggregation selected-port maximum ······························································································· 103 link-aggregation selected-port minimum ································································································ 104 mtu ························································································································································· 104 port link-aggregation group ···················································································································· 105 reset counters interface·························································································································· 106 reset lacp statistics ································································································································· 106 shutdown ················································································································································ 107 Port isolation commands ············································································· 108 display port-isolate group ······················································································································· 108 port-isolate enable·································································································································· 108 port-isolate group ··································································································································· 109 Spanning tree commands ··········································································· 111 active region-configuration ····················································································································· 111 check region-configuration ····················································································································· 111 ii
display stp ·············································································································································· 112 display stp abnormal-port ······················································································································· 118 display stp bpdu-statistics ······················································································································ 118 display stp down-port ····························································································································· 120 display stp history··································································································································· 121 display stp region-configuration ············································································································· 123 display stp root ······································································································································· 124 display stp tc ·········································································································································· 124 instance ·················································································································································· 126 region-name ··········································································································································· 127 reset stp ················································································································································· 128 revision-level ·········································································································································· 128 stp bpdu-protection ································································································································ 129 stp bridge-diameter ································································································································ 129 stp compliance ······································································································································· 130 stp config-digest-snooping ····················································································································· 131 stp cost ··················································································································································· 132 stp edged-port ········································································································································ 133 stp enable··············································································································································· 134 stp global config-digest-snooping··········································································································· 135 stp global enable ···································································································································· 135 stp global mcheck ·································································································································· 136 stp loop-protection·································································································································· 137 stp max-hops·········································································································································· 137 stp mcheck ············································································································································· 138 stp mode ················································································································································ 139 stp no-agreement-check ························································································································ 140 stp pathcost-standard····························································································································· 140 stp point-to-point ···································································································································· 141 stp port priority ······································································································································· 142 stp port-log ············································································································································· 143 stp priority··············································································································································· 144 stp region-configuration·························································································································· 144 stp role-restriction··································································································································· 145 stp root primary ······································································································································ 145 stp root secondary·································································································································· 146 stp root-protection ·································································································································· 147 stp tc-protection······································································································································ 148 stp tc-protection threshold ······················································································································ 148 stp tc-restriction ······································································································································ 149 stp timer forward-delay··························································································································· 150 stp timer hello ········································································································································· 150 stp timer max-age ·································································································································· 151 stp timer-factor ······································································································································· 152 stp transmit-limit ····································································································································· 153 vlan-mapping modulo ····························································································································· 154 Loop detection commands ·········································································· 155 display loopback-detection ····················································································································· 155 loopback-detection action ······················································································································ 156 loopback-detection enable ····················································································································· 157 loopback-detection global action ············································································································ 157 loopback-detection global enable··········································································································· 158 loopback-detection interval-time ············································································································ 159 VLAN commands ························································································ 161 Basic VLAN commands ································································································································· 161 bandwidth ··············································································································································· 161 default ···················································································································································· 161 description ·············································································································································· 162 display interface vlan-interface··············································································································· 163 display reserve-vlan-interface ················································································································ 166 iii
display vlan ············································································································································ 166 display vlan brief ···································································································································· 168 interface vlan-interface ··························································································································· 169 mtu ························································································································································· 169 name ······················································································································································ 170 reserve-vlan-interface ···························································································································· 171 service ···················································································································································· 172 shutdown ················································································································································ 173 vlan························································································································································· 174 Port-based VLAN commands ························································································································ 175 display port ············································································································································· 175 port ························································································································································· 176 port access vlan ····································································································································· 177 port hybrid pvid······································································································································· 177 port hybrid vlan······································································································································· 178 port link-type··········································································································································· 179 port trunk permit vlan ····························································································································· 180 port trunk pvid ········································································································································ 181 VLAN mapping commands ········································································· 183 display vlan mapping······························································································································ 183 vlan mapping ·········································································································································· 184 vlan mapping double-tagged ·················································································································· 185 vlan mapping untagged ·························································································································· 186 LLDP commands ························································································ 188 dcbx version ··········································································································································· 188 display lldp local-information ·················································································································· 188 display lldp neighbor-information ··········································································································· 193 display lldp statistics······························································································································· 198 display lldp status ··································································································································· 200 display lldp tlv-config ······························································································································ 203 lldp admin-status ···································································································································· 206 lldp check-change-interval ····················································································································· 207 lldp compliance admin-status cdp ·········································································································· 208 lldp compliance cdp································································································································ 208 lldp enable ·············································································································································· 209 lldp encapsulation snap·························································································································· 210 lldp fast-count ········································································································································· 211 lldp global enable ··································································································································· 211 lldp hold-multiplier ·································································································································· 212 lldp management-address-format string ································································································ 212 lldp max-credit ········································································································································ 213 lldp mode················································································································································ 214 lldp notification med-topology-change enable ························································································ 215 lldp notification remote-change enable ·································································································· 215 lldp timer fast-interval ····························································································································· 216 lldp timer notification-interval·················································································································· 216 lldp timer reinit-delay ······························································································································ 217 lldp timer tx-interval ································································································································ 218 lldp tlv-enable ········································································································································· 218 Document conventions and icons ······························································· 223 Conventions ··················································································································································· 223 Network topology icons ·································································································································· 224 Support and other resources ······································································ 225 Accessing Hewlett Packard Enterprise Support ···························································································· 225 Accessing updates ········································································································································· 225 Websites ················································································································································ 226 Customer self repair ······························································································································· 226 Remote support······································································································································ 226 iv
Documentation feedback ······················································································································· 226 Index ··········································································································· 227 v
Ethernet interface commands
Common Ethernet interface commands
bandwidth
Use bandwidth to configure the expected bandwidth of an interface.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth-value
undo bandwidth
Default
The expected bandwidth (in kbps) is the interface baud rate divided by 1000.
Views
Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.
Usage guidelines
The expected bandwidth of an interface affects the following items:
•
Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration
Guide.
•
Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration
Guide.
Examples
# Set the expected bandwidth of interface FortyGigE 1/0/1 to 1000 kbps.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] bandwidth 1000
# Set the expected bandwidth of subinterface FortyGigE 1/0/1.1 to 1000 kbps.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1] bandwidth 1000
Related commands
speed
default
Use default to restore the default settings for an Ethernet interface.
1
Syntax
default
Views
Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
CAUTION:
The default command might interrupt ongoing network services. Make sure you are fully aware of
the impacts of this command when you use it in a live network.
This command might fail to restore the default settings for some commands for reasons such as
command dependencies or system restrictions. Use the display this command in interface view to
identify these commands, and then use their undo forms or follow the command reference to
individually restore their default settings. If your restoration attempt still fails, follow the error
message instructions to resolve the problem.
Examples
# Restore the default settings for interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] default
# Restore the default settings for subinterface FortyGigE 1/0/1.1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1] default
description
Use description to change the description of an interface.
Use undo description to restore the default.
Syntax
description text
undo description
Default
The description of an interface is the interface name plus Interface (for example, FortyGigE1/0/1
Interface).
Views
Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
2
Parameters
text: Specifies the interface description, a case-sensitive string of 1 to 255 characters.
Examples
# Change the description of interface FortyGigE 1/0/1 to lanswitch-interface.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] description lanswitch-interface
# Change the description of subinterface FortyGigE 1/0/1.1 to l3-subinterface1/0/1.1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1] description l3-subinterface1/0/1.1
display counters
Use display counters to display interface traffic statistics.
Syntax
display counters { inbound | outbound } interface [ interface-type [ interface-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
inbound: Displays inbound traffic statistics.
outbound: Displays outbound traffic statistics.
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
Usage guidelines
This command displays traffic statistics within a statistics polling interval specified by the
flow-interval command.
To clear the Ethernet interface traffic statistics, use the reset counters interface command. For
more information, see "reset counters interface."
If no interface type is specified, this command displays traffic statistics for all interfaces that have
traffic counters.
If an interface type is specified but no interface number is specified, this command displays traffic
statistics for all interfaces of the specified type.
If an interface type and an interface number are specified, this command displays traffic statistics of
the specified interface.
Examples
# Display inbound traffic statistics for all FortyGigE interfaces.
<Sysname> display counters inbound interface fortygige
3
Interface
Total (pkts)
FGE1/0/1
Broadcast (pkts)
100
Multicast (pkts)
100
Err (pkts)
0
0
FGE1/0/2
0
0
0
0
FGE1/0/3
Overflow
Overflow
Overflow
Overflow
FGE1/0/4
0
0
0
0
Overflow: More than 14 digits (7 digits for column "Err").
--: Not supported.
Table 1 Command output
Field
Description
Interface
Abbreviated interface name.
Total (pkts)
Total number of packets received or sent through the interface.
Broadcast (pkts)
Total number of broadcast packets received or sent through the interface.
Multicast (pkts)
Total number of multicast packets received or sent through the interface.
Err (pkts)
Total number of error packets received or sent through the interface.
Overflow: More than 14
digits (7 digits for column
"Err")
The command displays Overflow if any of the following cases applies:
• The data length of an Err field value is greater than 7 decimal digits.
• The data length of a non-Err field value is greater than 14 decimal digits.
--: Not supported
The statistical item is not supported.
Related commands
•
flow-interval
•
reset counters interface
display counters rate
Use display counters rate to display traffic rate statistics of interfaces in up state over the last
statistics polling interval.
Syntax
display counters rate { inbound | outbound } interface [ interface-type [ interface-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
inbound: Displays inbound traffic rate statistics.
outbound: Displays outbound traffic rate statistics.
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
4
Usage guidelines
The statistics cover only interfaces in up state.
If an interface type is specified, the command displays traffic rate statistics for all up interfaces of the
specified type over the last statistics polling interval.
If no interface type is specified, the command displays traffic rate statistics for all up interfaces that
have traffic counters over the last statistics polling interval.
If an interface which is always down over the last statistics polling interval is specified, the system
prompts that the interface does not support the command.
You can use the flow-interval command to set the statistics polling interval.
Examples
# Display the inbound traffic rate statistics for all FortyGigE interfaces.
<Sysname> display counters rate inbound interface fortygige
Interface
Total (pps)
Broadcast (pps)
Multicast (pps)
FGE1/0/1
200
--
--
FGE1/0/2
300
--
--
FGE1/0/3
300
--
--
Overflow: More than 14 digits.
--: Not supported.
Table 2 Command output
Field
Description
Interface
Abbreviated interface name.
Total (pkts/sec)
Average rate (in pps) of receiving or sending packets during the statistics
polling interval.
Broadcast (pkts/sec)
Average rate (in pps) of receiving or sending broadcast packets during the
statistics polling interval.
Multicast (pkts/sec)
Average rate (in pps) of receiving or sending multicast packets during the
statistics polling interval.
Overflow: more than 14
decimal digits
The command displays Overflow if the data length of a statistical item is
greater than 14 decimal digits.
--: not supported
The statistical item is not supported.
Related commands
•
flow-interval
•
reset counters interface
display ethernet statistics
IMPORTANT:
• The HPE 7904 (JG682A) or HPE 7904 TAA (JH122A) switch uses one built-in MPU (slot 0) for
switching and control. The HPE 7910 (JG841A) or HPE 7910 TAA (JH123A) switch uses two
removable switching fabric modules (slots 10 and 11) for switching and control.
• Unless otherwise stated, the term "card" collectively refers to LPUs, switching fabric modules,
and MPUs.
5
Use display ethernet statistics to display the Ethernet module statistics.
Syntax
In standalone mode:
display ethernet statistics slot slot-number
In IRF mode:
display ethernet statistics chassis chassis-number slot slot-number
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Displays the Ethernet module statistics on the specified card. The slot-number
argument represents the number of the slot that houses the card. (In standalone mode.)
chassis chassis-number slot slot-number: Displays the Ethernet module statistics on the specified
card of the specified IRF member device. The chassis-number argument represents the ID of the
IRF member device. The slot-number argument represents the number of the slot that houses the
card. (In IRF mode.)
Examples
# (In standalone mode.) Display the Ethernet module statistics on slot 2.
<Sysname> display ethernet statistics slot 2
ETH receive packet statistics:
Totalnum
: 10447
ETHIINum
: 4459
SNAPNum
: 0
RAWNum
: 0
LLCNum
: 0
UnknownNum
: 0
ForwardNum
: 4459
ARP
: 0
MPLS
: 0
ISIS
: 0
ISIS2
: 0
IP
: 0
IPV6
: 0
ETH receive error statistics:
NullPoint
: 0
ErrIfindex
: 0
ErrIfcb
: 0
IfShut
: 0
ErrAnalyse
: 5988
ErrSrcMAC
: 5988
ErrHdrLen
: 0
ETH send packet statistics:
L3OutNum
: 211
VLANOutNum
: 0
FastOutNum
: 155
L2OutNum
: 0
ETH send error statistics:
MbufRelayNum
: 0
NullMbuf
: 0
ErrAdjFwd
: 0
ErrPrepend
: 0
ErrHdrLen
: 0
ErrPad
: 0
ErrQoSTrs
: 0
ErrVLANTrs
: 0
6
ErrEncap
: 0
ErrTagVLAN
: 0
IfShut
: 0
IfErr
: 0
# (In IRF mode.) Display the Ethernet module statistics on the card in slot 1 of IRF member device 1.
<Sysname> display ethernet statistics chassis 1 slot 1
ETH receive packet statistics:
Totalnum
: 10447
ETHIINum
: 4459
SNAPNum
: 0
RAWNum
: 0
LLCNum
: 0
UnknownNum
: 0
ForwardNum
: 4459
ARP
: 0
MPLS
: 0
ISIS
: 0
ISIS2
: 0
IP
: 0
IPV6
: 0
ETH receive error statistics:
NullPoint
: 0
ErrIfindex
: 0
ErrIfcb
: 0
IfShut
: 0
ErrAnalyse
: 5988
ErrSrcMAC
: 5988
ErrHdrLen
: 0
ETH send packet statistics:
L3OutNum
: 211
VLANOutNum
: 0
FastOutNum
: 155
L2OutNum
: 0
ETH send error statistics:
MbufRelayNum
: 0
NullMbuf
: 0
ErrAdjFwd
: 0
ErrPrepend
: 0
ErrHdrLen
: 0
ErrPad
: 0
ErrQoSTrs
: 0
ErrVLANTrs
: 0
ErrEncap
: 0
ErrTagVLAN
: 0
IfShut
: 0
IfErr
: 0
Table 3 Output description
Field
Description
ETH receive packet
statistics
Statistics about the Ethernet packets received on the Ethernet module.
Totalnum
Total number of received packets:
• ETHIINum—Number of packets encapsulated by using Ethernet-II.
• SNAPNum—Number of packets encapsulated by using SNAP.
• RAWNum—Number of packets encapsulated by using RAW.
• ISIS—Number of packets encapsulated by using IS-IS.
• LLCNum—Number of packets encapsulated by using LLC.
• UnknownNum—Number of packets encapsulated by using unknown
methods.
• ForwardNum—Number of packets forwarded at Layer 2 or sent to the
CPU.
• ARP—Number of ARP packets.
• MPLS—Number of MPLS packets.
• ISIS—Number of IS-IS packets.
• ISIS2—Number of large 802.3/802.2 frames encapsulated by using IS-IS.
• IP—Number of IP packets.
7
Field
Description
ETH receive error statistics
Statistics about the error Ethernet packets in the outbound direction on the
Ethernet module. Errors might be included in packets or occur during the
receiving process. The items include:
• NullPoint—Number of packets that include null pointers.
• ErrIfindex—Number of packets that include incorrect interface indexes.
• ErrIfcb—Number of packets that include incorrect interface control blocks.
• IfShut—Number of packets that are being received when the interface is
shut down.
• ErrAnalyse—Number of packets that include packet parsing errors.
• ErrSrcMAC—Number of packets that include incorrect source MAC
addresses.
• ErrHdrLen—Number of packets that include header length errors.
ETH send packet statistics
Statistics about the Ethernet packets sent by the Ethernet module:
• L3OutNum—Number of packets sent out of Layer 3 Ethernet interfaces.
• VLANOutNum—Number of packets sent out of VLAN interfaces.
• FastOutNum—Number of packets fast forwarded.
• L2OutNum—Number of packets sent out of Layer 2 Ethernet interfaces.
• MbufRelayNum—Number of packets transparently sent.
ETH send error statistics
Statistics about the error Ethernet packets in the outbound direction on the
Ethernet module:
• NullMbuf—Number of packets with null pointers.
• ErrAdjFwd—Number of packets with adjacency table errors.
• ErrPrepend—Number of packets with extension errors.
• ErrHdrLen—Number of packets with header length errors.
• ErrPad—Number of packets with padding errors.
• ErrQoSTrs—Number of packets that failed to be sent by QoS.
• ErrVLANTrs—Number of packets that failed to be sent in VLANs.
• ErrEncap—Number of packets that failed to be sent due to link header
encapsulation failures.
• ErrTagVLAN—Number of packets that failed to be sent due to VLAN tag
encapsulation failures.
• IfShut—Number of packets that are being sent when the interface is shut
down.
• IfErr—Number of packets with incorrect outgoing interfaces.
display interface
Use display interface to display Ethernet interface information.
Syntax
display interface [ interface-type ] [ brief [ down ] ]
display interface [ interface-type [ interface-number | interface-number.subnumber ] ] [ brief
[ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
8
mdc-admin
mdc-operator
Parameters
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
interface-number.subnumber: Specifies a subinterface number. The interface-number argument
represents the number of the interface. The subnumber argument represents the number of the
subinterface, in the range of 1 to 4094.
brief: Displays brief interface information. If you do not specify this keyword, the command displays
detailed interface information.
down: Displays information about interfaces in the down state and the causes. If you do not specify
this keyword, this command displays information about interfaces in all states.
description: Displays complete interface descriptions. If you do not specify this keyword, the
command displays only the first 27 characters of each interface description.
Usage guidelines
If no interface type is specified, this command displays information about all interfaces.
If an interface type is specified but no interface number is specified, this command displays
information about all interfaces of that type.
If both the interface type and interface number are specified, this command displays information
about the specified interface.
Examples
# Display information about Layer 3 interface FortyGigE 1/0/1.
<Sysname> display interface fortygige 1/0/1
FortyGigE1/0/1
Current state: DOWN
Line protocol state: DOWN
Description: FortyGigE1/0/1 Interface
Bandwidth: 40000000kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
IP packet frame type: Ethernet II, hardware address: 000c-2963-b75d
IPv6 packet frame type: Ethernet II, hardware address: 000c-2963-b75d
Media type is not sure,Port hardware type is No connector
Port priority: 0
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Flow-control is not enabled
Maximum frame length is 12288
Last link flapping: Never
Last clearing of counters: Never
Peak input rate: 0 bytes/sec, at 2015-01-05 13:51:00
Peak output rate: 0 bytes/sec, at 2015-01-05 13:51:00
Last 300 second input:
Last 300 second output:
Input (total):
0 packets/sec 0 bytes/sec -%
0 packets/sec 0 bytes/sec -%
0 packets, 0 bytes
0 unicasts, 0 broadcasts,
0 multicasts, 0 pauses
9
Input (normal):
0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input:
0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC,
0 frame, - overruns, 0 aborts
- ignored, - parity errors
Output (total):
0 packets, 0 bytes
0 unicasts, 0 broadcasts,
Output (normal):
0 multicasts, 0 pauses
0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output:
0 output errors,
0 aborts,
- underruns, - buffer failures
0 deferred, 0 collisions, 0 late collisions
0 lost carrier, - no carrier
Table 4 Command output
Field
Description
Current state
State of the interface:
• Administratively DOWN—The Ethernet interface was shut
down with the shutdown command. The interface is
administratively down.
• DOWN—The Ethernet interface is administratively up but
physically down (possibly because no physical link is present or
the link has failed).
• UP—The Ethernet interface is both administratively and
physically up.
Line protocol state
Link layer state of the interface. The state is determined through
parameter negotiation on the link layer.
• UP—The interface is up at the data link layer.
• UP (spoofing)—The link layer protocol of an interface is UP,
but its link is an on-demand link or not present at all. This
attribute is typical of Null interfaces and loopback interfaces.
• DOWN—The interface is down at the data link layer.
• DOWN (DLDP DOWN)—The link layer protocol of the interface
is down because DLDP detected that the link was
unidirectional.
• DOWN (LAGG DOWN)—The link layer protocol of the interface
is down because the aggregate interface does not have
Selected ports.
• DOWN (OAM DOWN)—The link layer of the interface is down
because OAM detected remote link failures.
• DOWN (DLDP and LAGG DOWN)—The link layer of the
interface is shut down by DLDP and LAGG.
• DOWN (DLDP and OAM DOWN)—The link layer of the
interface is shut down by DLDP and OAM.
• DOWN (OAM and LAGG DOWN)—The link layer of the
interface is shut down by OAM and LAGG.
• DOWN (DLDP, OAM and LAGG DOWN)—The link layer of the
interface is shut down by DLDP, OAM, and LAGG.
Hold timer is
Link-up or link-down event suppression interval.
Bandwidth
Expected bandwidth of the interface.
Internet protocol processing: Disabled
Indicates that the interface cannot process IP packets.
Last link flapping
Duration since the most recent interface state change. Never
indicates the interface state has never changed.
10
Field
Description
Last clearing of counters
Time when the reset counters interface command was last used
to clear the interface statistics. Never indicates the reset counters
interface command has never been used on the interface since the
device's startup.
Peak input rate
Peak rate of inbound traffic in Bps, and the time when the peak
inbound traffic rate occurred.
Peak output rate
Peak rate of outbound traffic in Bps, and the time when the peak
outbound traffic rate occurred.
Last 300 second input
Average input rate over the last 300 seconds in Bps, bps, and pps.
Last 300 second output
Average output rate over the last 300 seconds in Bps, bps, and pps.
# Display detailed information about Layer 2 interface FortyGigE 1/0/1.
<Sysname> display interface fortygige 1/0/1
FortyGigE1/0/1
Current state: DOWN
Line protocol state: DOWN
IP packet frame type: Ethernet II, hardware address: 000c-2963-b767
Description: FortyGigE1/0/1 Interface
Bandwidth: 40000000kbps
Loopback is not set
Media type is not sure,port hardware type is No connector
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Maximum frame length is 12288
Allow jumbo frame to pass
Broadcast max-ratio: 100%
Multicast max-ratio: 100%
Unicast max-ratio: 100%
PVID: 1
MDI type: automdix
Port link-type: access
Tagged VLANs:
none
UnTagged VLANs: 1
Port priority: 2
Last link flapping: Never
Last clearing of counters: Never
Peak input rate: 0 bytes/sec, at 2015-01-05 13:51:00
Peak output rate: 0 bytes/sec, at 2015-01-05 13:51:00
Last 300 second input:
Last 300 second output:
Input (total):
0 packets/sec 0 bytes/sec -%
0 packets/sec 0 bytes/sec -%
0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input (normal):
0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input:
0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 frame, - overruns, 0 aborts
- ignored, - parity errors
11
Output (total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output (normal): 0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output: 0 output errors, - underruns, - buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
0 lost carrier, - no carrier
Table 5 Command output
Field
Description
Current state
State of the Ethernet interface:
• Administratively DOWN—The Ethernet interface was shut
down with the shutdown command. The interface is
administratively down.
• DOWN—The Ethernet interface is administratively up but
physically down (possibly because no physical link is present
or the link has failed).
• UP—The Ethernet interface is both administratively and
physically up.
Line protocol current state
Link layer state of the interface. The state is determined through
parameter negotiation on the link layer.
• UP—The interface is up at the data link layer.
• UP (spoofing)—The link layer protocol of an interface is UP,
but its link is an on-demand link or not present at all. This
attribute is typical of Null interfaces and loopback interfaces.
• DOWN—The interface is down at the data link layer.
• DOWN (DLDP DOWN)—The link layer protocol of the
interface is down because DLDP detects that the link is
unidirectional.
• DOWN (LAGG DOWN)—The link layer protocol of the
interface is down because the aggregate interface does not
have Selected ports.
• DOWN (OAM DOWN)—The link layer of the interface is down
because OAM detects remote link failures.
• DOWN (DLDP and LAGG DOWN)—The link layer of the
interface is shut down by DLDP and LAGG.
• DOWN (DLDP and OAM DOWN)—The link layer of the
interface is shut down by DLDP and OAM.
• DOWN (OAM and LAGG DOWN)—The link layer of the
interface is shut down by OAM and LAGG.
• DOWN (DLDP, OAM and LAGG DOWN)—The link layer of
the interface is shut down by DLDP, OAM, and LAGG.
IP packet frame type
Ethernet framing format. PKTFMT_ETHNT_2 indicates that the
frames are encapsulated in Ethernet II framing format.
hardware address
MAC address of the interface.
Bandwidth
Expected bandwidth of the interface.
Loopback is set internal
An internal loopback test is running on the Ethernet interface.
Loopback is set external
An external loopback test is running on the Ethernet interface. .
Loopback is not set
No loopback test is running on the Ethernet interface.
10Mbps-speed mode
The interface is operating at 10 Mbps.
100Mbps-speed mode
The interface is operating at 100 Mbps.
12
Field
Description
1000Mbps-speed mode
The interface is operating at 1000 Mbps.
10Gbps-speed mode
The interface is operating at 10 Gbps.
40Gbps-speed mode
The interface is operating at 40 Gbps.
Unknown-speed mode
The speed of the interface is unknown because the speed
negotiation fails or the interface is physically disconnected.
full-duplex mode
The interface is operating in full duplex mode.
unknown-duplex mode
The duplex mode of the interface is unknown because the duplex
mode negotiation fails or the interface is physically disconnected.
Link speed type is autonegotiation
The interface is configured with the speed auto command.
Link speed type is force link
The interface is configured with a specific speed, for example, 10
Mbps or 100 Mbps, by using the speed command.
link duplex type is autonegotiation
The interface is configured with the duplex auto command.
link duplex type is force link
The interface is configured with a specific duplex mode, for
example, half or full, by using the duplex command.
Maximum frame length
Maximum Ethernet frame length allowed on the interface.
Allow jumbo frames to pass
The interface allows jumbo frames to pass through.
Broadcast max-
Broadcast storm suppression threshold in ratio, pps, or kbps. The
unit of the threshold depends on your configuration.
Multicast max-
Multicast storm suppression threshold in ratio, pps, or kbps. The
unit of the threshold depends on your configuration.
Unicast max-
Unicast storm suppression threshold in ratio, pps, or kbps. The
unit of the threshold depends on your configuration.
PVID
Port VLAN ID (PVID) of the Ethernet interface.
MDI type
Cable type (depending on your configuration):
• automdix.
• mdi.
• mdix.
Port link-type
Link type of the interface (depending on your configuration):
• access.
• trunk.
• hybrid.
Tagged VLANs
VLANs for which the interface sends packets without removing
VLAN tags.
Untagged VLANs
VLANs for which the interface sends packets after removing
VLAN tags.
Port priority
Priority of the interface.
Last link flapping
Duration since the most recent interface state change. Never
indicates the interface state has never changed.
Last clearing of counters: Never
Time when the reset counters interface command was last
used to clear statistics on the interface. Never indicates that the
reset counters interface command was never used since the
device was started.
Peak input rate
Peak rate of inbound traffic in Bps, and the time when the peak
inbound traffic rate occurred.
13
Field
Description
Peak output rate
Peak rate of outbound traffic in Bps, and the time when the peak
outbound traffic rate occurred.
Last 300 second input:
Average rate of inbound traffic in the last 300 seconds, in pps and
Bps, and the ratio of the actual rate to the maximum interface
rate.
A hyphen (-) indicates that the statistical item is not supported.
Last 300 second output:
Average rate of outbound traffic in the last 300 seconds, in pps
and Bps, and the ratio of the actual rate to the maximum interface
rate.
A hyphen (-) indicates that the statistical item is not supported.
Input(total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0
multicasts, 0 pauses
Inbound traffic statistics (in packets and bytes) for the interface.
All inbound normal and abnormal packets and normal pause
frames were counted.
Number of inbound unicast packets, number of inbound
broadcasts, number of inbound multicasts, and number of
inbound pause frames.
A hyphen (-) indicates that the statistical item is not supported.
Input(normal): 0 packets, - bytes
0 unicasts, 0 broadcasts, 0
multicasts, 0 pauses
Inbound normal traffic and pause frame statistics (in packets and
bytes) for the interface.
Number of inbound normal unicast packets, number of inbound
normal broadcasts, number of inbound normal multicasts, and
number of inbound normal pause frames.
A hyphen (-) indicates that the statistical item is not supported.
input errors
Statistics of incoming error packets.
runts
Number of inbound frames shorter than 64 bytes, in correct
format, and containing valid CRCs.
giants
Number of inbound frames larger than the maximum frame length
supported on the interface.
• For an Ethernet interface that does not permit jumbo frames,
giants refer to frames larger than 1518 bytes (without VLAN
tags) or 1522 bytes (with VLAN tags).
• For an Ethernet interface that permits jumbo frames, giants
refer to frames larger than the maximum length of Ethernet
frames that are allowed to pass through, which is configured
when you configure jumbo frame support on the interface.
throttles
Number of times the port is shut down due to buffer or CPU
overload.
CRC
Total number of inbound frames that had a normal length, but
contained CRC errors.
frame
Total number of inbound frames that contained CRC errors and a
non-integer number of bytes.
overruns
Number of packets dropped because the input rate of the port
exceeded the queuing capability.
14
Field
Description
aborts
Total number of illegal inbound packets:
• Fragment frames—CRC error frames shorter than 64 bytes.
The length can be an integral or non-integral value.
• Jabber frames—CRC error frames greater than the
maximum frame length supported on the Ethernet interface
(with an integral or non-integral length). For an Ethernet
interface that does not permit jumbo frames, jabber frames
refer to CRC error frames greater than 1518 bytes (without
VLAN tags) or 1522 bytes (with VLAN tags). For an Ethernet
interface that permits jumbo frames, jabber frames refer to
CRC error frames greater than the maximum length of
Ethernet frames that are allowed to pass through the interface
(which is configured when you configure jumbo frame support
on the interface).
• Symbol error frames—Frames that contained at least one
undefined symbol.
• Unknown operation code frames—Non-pause MAC control
frames.
• Length error frames—Frames whose 802.3 length fields did
not match the actual frame length (46 to 1500 bytes).
ignored
Number of inbound frames dropped because the receiving buffer
of the port ran low.
parity errors
Total number of frames with parity errors.
Output(total): 0 packets, 0 bytes
Outbound traffic statistics (in packets and bytes) for the interface.
All outbound normal and abnormal packets and normal pause
frames were counted.
0 unicasts, 0 broadcasts, 0
multicasts, 0 pauses
Number of outbound unicast packets, number of outbound
broadcasts, number of outbound multicasts, and number of
outbound pause frames.
A hyphen (-) indicates that the statistical item is not supported.
Output(normal): 0 packets, - bytes
0 unicasts, 0 broadcasts, 0
multicasts, 0 pauses
Outbound normal traffic and pause frame statistics (in packets
and bytes) for the interface.
Number of outbound normal unicast packets, number of
outbound normal broadcasts, number of outbound normal
multicasts, and number of outbound normal pause frames.
A hyphen (-) indicates that the statistical item is not supported.
output errors
Number of outbound packets with errors.
underruns
Number of packets dropped because the output rate of the
interface exceeded the output queuing capability. This is a
low-probability hardware anomaly.
buffer failures
Number of packets dropped because the transmit buffer of the
interface ran low.
aborts
Number of packets that failed to be transmitted, for example,
because of Ethernet collisions.
deferred
Number of frames that the interface deferred to transmit because
of detected collisions.
collisions
Number of frames that the interface stopped transmitting because
Ethernet collisions were detected during transmission.
late collisions
Number of frames that the interface deferred to transmit after
transmitting their first 512 bits because of detected collisions.
15
Field
Description
lost carrier
Number of carrier losses during transmission. This counter
increases by one when a carrier is lost, and applies to serial WAN
interfaces.
no carrier
Number of times that the port failed to detect the carrier when
attempting to send frames. This counter increases by one when a
port failed to detect the carrier, and applies to serial WAN
interfaces.
# Display brief information about all interfaces.
<Sysname> display interface brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) – spoofing
Interface
Link Protocol Primary IP
Description
FGE1/0/11
DOWN DOWN
--
InLoop0
UP
UP(s)
--
M-GE0/0/0
UP
UP
192.168.0.98
NULL0
UP
UP(s)
--
REG0
DOWN --
--
Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Speed: (a) - auto
Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface
Link Speed
Duplex Type PVID Description
FGE1/0/1
DOWN auto
A
A
1
FGE1/0/2
DOWN auto
A
A
10
FGE1/0/3
DOWN auto
A
A
1
FGE1/0/4
DOWN auto
A
A
1
FGE1/0/5
DOWN auto
A
A
1
FGE1/0/6
DOWN auto
A
A
1
FGE1/0/7
DOWN auto
A
A
1
FGE1/0/8
DOWN auto
A
A
1
FGE1/0/9
DOWN auto
A
A
1
aaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display brief information about interface FortyGigE 1/0/3, including the complete description of the
interface.
<Sysname> display interface fortygige 1/0/3 brief description
Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Speed: (a) - auto
Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface
Link Speed
Duplex Type PVID Description
FGE1/0/3
DOWN auto
A
A
1
aaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display information about interfaces in DOWN state and the causes.
16
<Sysname> display interface brief down
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Interface
Link Cause
FGE1/0/11
DOWN Not connected
REG0
DOWN Not connected
Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Interface
Link Cause
FGE1/0/1
DOWN Not connected
FGE1/0/2
DOWN Not connected
FGE1/0/3
DOWN Not connected
Table 6 Command output
Field
Description
Brief information on interfaces in
route mode:
Brief information about Layer 3 interfaces.
•
Link: ADM - administratively down;
Stby - standby
•
ADM—The interface has been shut down by the network
administrator. To recover its physical layer state, run the undo
shutdown command.
Stby—The interface is a standby interface.
Protocol: (s) – spoofing
If the link layer protocol of an interface is UP, but its link is an
on-demand link or not present at all, this field displays UP (s), where s
represents the spoofing flag. This attribute is typical of interface Null 0
and loopback interfaces.
Interface
Interface name.
Link
Physical link state of the interface:
• UP—The link is up.
• DOWN—The link is physically down.
• ADM—The link has been administratively shut down. To recover its
physical state, run the undo shutdown command.
• Stby—The interface is a standby interface.
Protocol
Link layer protocol state of the interface:
• UP.
• DOWN.
• UP(s)—The link of the interface is an on-demand link or not present
at all.
Description
Partial or complete interface description configured by using the
description command:
• If the description keyword is not specified in the display interface
brief command, the Description field displays only the first 27
characters.
• If the description keyword is specified in the display interface
brief command, the field displays the complete interface
description.
Brief information on interfaces in
bridge mode:
Brief information about Layer 2 interfaces.
17
Field
Speed: (a) - auto
Duplex: (a)/A - auto; H - half; F –
full
Description
If the speed of an interface is automatically negotiated, the speed
attribute of the interface includes the autonegotiation flag (the letter a in
parentheses).
If an interface is configured to autonegotiate its speed but the
autonegotiation has not started, its speed attribute is displayed as
auto.
If the duplex mode of an interface is automatically negotiated, the
duplex mode attribute of the interface includes the letter a in
parentheses. H indicates the half duplex mode. F indicates the full
duplex mode.
If an interface is configured to autonegotiate its duplex mode but the
autonegotiation has not started, its duplex mode attribute is displayed
as A.
Type: A - access; T - trunk; H –
hybrid
Link type options for Ethernet interfaces.
Speed
Interface rate, in bps.
Duplex
Duplex mode of the interface:
• A—Autonegotiation.
• F—Full duplex.
• F(a)—Autonegotiated full duplex.
• H—Half duplex.
• H(a)—Autonegotiated half duplex.
Type
Link type of the interface:
• A—Access.
• H—Hybrid.
• T—Trunk.
PVID
Port VLAN ID.
Cause
Cause for the physical link state of an interface to be DOWN:
• Administratively—The port is manually shut down with the
shutdown command. To restore the physical state of the interface,
use the undo shutdown command.
• DOWN ( Link-Aggregation interface down )—When an
aggregate interface is shut down, the physical state of all member
ports of the aggregate interface becomes DOWN, and the Cause
field displays DOWN ( Link-Aggregation interface down ).
• DOWN (Loopback detection down)—The port is shut down
because the loopback detection module has detected loops.
• IRF-link-down—When the link detection function of IRF detects
that the IRF link is down on an MDC of a member device, the state
of all physical interfaces except the excluded ports on the MDC of
the member device is set to DOWN, and the Cause field displays
IRF-link-down.
• MAD ShutDown—After an IRF split, the state of all interfaces
except the excluded ports in the IRF in recovery state is set to
DOWN, and the Cause field displays MAD ShutDown.
• Not connected—No physical connection exists (possibly because
the network cable is disconnected or faulty).
• Storm-Constrain—The port is shut down because the unknown
unicast traffic, multicast traffic, or broadcast traffic exceeds the
upper limit.
• STP DOWN—The port is shut down by the STP BPDU guard
function.
• Standby—The interface is in the Standby state.
18
Related commands
reset counters interface
display packet-drop
Use display packet-drop to display information about packets dropped on an interface or multiple
interfaces.
Syntax
display packet-drop { interface [ interface-type [ interface-number ] ] | summary }
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface-type: Specifies an interface type. If you do not specify an interface type, this command
displays information about dropped packets on all the interfaces on the device.
interface-number: Specifies an interface number. If you specify an interface type only, this command
displays information about dropped packets on the specified type of interfaces.
summary: Displays the summary of dropped packets on all interfaces.
Examples
# Display information about dropped packets on FortyGigE 1/0/1.
<Sysname> display packet-drop interface fortygige 1/0/1
FortyGigE1/0/1:
Packets dropped due to STP non-forwarding state: 321
Packets dropped due to TM: 0
Packets dropped due to insufficient data buffer. Input dropped: 0 Output dropped:0
# Display the summary of dropped packets on all interfaces.
<Sysname> display packet-drop summary
All interfaces:
Packets dropped due to STP non-forwarding state: 321
Packets dropped due to TM: 0
Table 7 Command output
Field
Description
Packets dropped due to STP non-forwarding state
Packets that are dropped because STP is in the
non-forwarding state.
Packets dropped due to TM
Packets that are dropped because of insufficient
TM bandwidth.
Packets dropped due to insufficient data buffer. Input
dropped: 0 Output dropped:0
Inbound and outbound packets that are dropped
because of insufficient data buffer.
19
duplex
IMPORTANT:
100-GE CXP interfaces do not support this command.
Use duplex to set the duplex mode for an Ethernet interface.
Use undo duplex to restore the default duplex mode of the Ethernet interface.
Syntax
duplex { auto | full }
undo duplex
Default
100-GE CXP interfaces operate in full duplex mode and other Ethernet interfaces autonegotiate the
duplex mode.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
auto: Configures the interface to autonegotiate the duplex mode with the peer.
full: Configures the interface to operate in full duplex mode. In this mode, the interface can receive
and transmit packets at the same time.
Examples
# Configure interface FortyGigE 1/0/1 to operate in full duplex mode.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] duplex full
flow-control
Use flow-control to enable TxRx mode generic flow control on an Ethernet interface.
Use undo flow-control to disable generic flow control on the Ethernet interface.
Syntax
flow-control
undo flow-control
Default
Generic flow control is disabled on an Ethernet interface.
Views
Ethernet interface view
Predefined user roles
network-admin
20
mdc-admin
Usage guidelines
To implement flow control on a link, enable the generic flow control function at both ends of the link.
TxRx mode generic flow control enables an Ethernet interface to receive common pause frames
from its peer, and send common pause frames to notify its peer of congestions.
With the flow-control command configured, an interface can both send and receive flow control
frames:
•
When congested, the interface sends a flow control frame to its peer.
•
Upon receiving a flow control frame from the peer, the interface suspends sending packets.
Examples
# Enable TxRx mode generic flow control on the interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] flow-control
flow-control receive enable
Use flow-control receive enable to enable Rx mode generic flow control on an Ethernet port.
Use undo flow-control to disable generic flow control on an Ethernet interface.
Syntax
flow-control receive enable
undo flow-control
Default
Rx flow control is disabled on Ethernet interfaces.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
With the flow-control receive enable command configured, an interface can receive, but not send,
flow control frames. When the interface receives a flow control frame from its peer, it suspends
sending packets to the peer. When traffic congestion occurs on the interface, it cannot send flow
control frames to the peer.
To handle unidirectional traffic congestion on a link, configure the flow-control receive enable
command at one end, and the flow-control command at the other. To enable both ends of the link to
handle traffic congestion, configure the flow-control command at both ends.
Examples
# Enable Rx mode generic flow control on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] flow-control receive enable
21
Related commands
flow-control
interface
Use interface to enter interface or subinterface view. If the specified subinterface does not exist, the
command creates the subinterface and enters its view.
Syntax
interface interface-type { interface-number | interface-number.subnumber }
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
interface-number.subnumber: Specifies a subinterface number. The interface-number argument
represents the number of the interface. The subnumber argument represents the number of the
subinterface, in the range of 1 to 4094.
Usage guidelines
Each of the Layer 3 interfaces and subinterfaces use one VLAN interface resource. Use the
reserve-vlan-interface command to reserve VLAN interface resources for Layer 3 interfaces and
subinterfaces before you create them. Otherwise, the Layer 3 interfaces and subinterfaces might not
be created. For example, before creating four Layer 3 subinterfaces on a Layer 3 interface, you must
reserve five VLAN interface resources by using the reserve-vlan-interface command.
To reserve global VLAN interface resources, specify the global keyword in the
reserve-vlan-interface command. To reserve local VLAN interface resources, do not specify the
global keyword. Reserved VLAN interface resources are local in this chapter.
Before creating a Layer 3 Ethernet subinterface, do not reserve a resource for the VLAN interface
whose interface number matches the subinterface number. After you reserve a VLAN interface
resource, do not create a Layer 3 Ethernet subinterface whose subinterface number is the VLAN
interface number. A Layer 3 Ethernet subinterface uses the VLAN interface resource in processing
tagged packets whose VLAN ID matches the subinterface number.
For more information about reserving VLAN interface resources, see Layer 2—LAN Switching
Configuration Guide.
Examples
# Enter FortyGigE 1/0/1 interface view.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1]
# Create Ethernet subinterface FortyGigE 1/0/1.1 and enter its view.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1]
22
jumboframe enable
Use jumboframe enable to allow jumbo frames within the specified length to pass through.
Use undo jumboframe enable to prevent jumbo frames from passing through.
Syntax
jumboframe enable [ value ]
undo jumboframe enable
Default
The device allows jumbo frames within 12288 bytes to pass through.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
value: Sets the maximum length of Ethernet frames that are allowed to pass through. The value
range is 1536 to 12288 bytes.
Usage guidelines
If you set the value argument multiple times, the most recent configuration takes effect.
Examples
# Enable jumbo frames to pass through FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] jumboframe enable
link-delay
Use link-delay to set the physical state change suppression interval on an Ethernet interface.
Use undo link-delay to restore the default.
Syntax
link-delay [ msec ] delay-time [ mode { up | updown } ]
undo link-delay [ [ msec ] delay-time [ mode { up | updown } ] ]
Default
Each time the physical link of a port goes up or comes down, the interface immediately reports the
change to the CPU.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
23
Parameters
msec: Enables the physical state change suppression interval to be accurate to milliseconds. If you
do not specify this keyword, the suppression interval is accurate to seconds.
delay-time: Sets the physical state change suppression interval on the Ethernet interface. A value of
0 indicates that physical state changes are immediately reported to the CPU and are not
suppressed.
•
If you do not specify the msec keyword, the value range for this argument is 0 to 30 seconds.
•
If you specify the msec keyword, the value range for this argument is 0 to 10000 milliseconds,
and the value must be an integer multiple of 100.
mode up: Suppresses the link-up events.
mode updown: Suppresses both the link-up and link-down events.
Usage guidelines
You can configure this feature to suppress only link-down events, only link-up events, or both. If an
event of the specified type still exists when the suppression interval expires, the system reports the
event.
When you configure this feature, follow these guidelines:
•
To suppress only link-down events, configure the link-delay [ msec ] delay-time command.
•
To suppress only link-up events, configure the link-delay [ msec ] delay-time mode up
command.
•
To suppress both link-down and link-up events, configure the link-delay [ msec ] delay-time
mode updown command.
When you separately enable state change suppression for link-up and link-down events, both
configurations take effect. For example, if you configure the link-delay [ msec ] delay-time mode up
command and then the link-delay [ msec ] delay-time command, both commands take effect.
If you configure the link-delay command multiple times for link-up or link-down events, the most
recent configuration takes effect.
You can disable suppression for only link-up events, only link-down events, or both. For example,
when both link-up and link-down events are suppressed on an interface, you can use the undo
link-delay delay-time mode up command to disable suppression only for link-up events.
Do not configure this command on a port with MSTP enabled.
Examples
# Set the link-down event suppression interval to 8 seconds on interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] link-delay 8
# Set the link-up event suppression interval to 8 milliseconds on interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] link-delay msec 8 mode up
port link-mode
Use port link-mode to change the link mode of an Ethernet interface.
Use undo port link-mode to restore the default.
Syntax
port link-mode { bridge | route }
24
undo port link-mode
Default
Ethernet interfaces operate in bridge mode.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
bridge: Specifies the Layer 2 mode.
route: Specifies the Layer 3 mode.
Usage guidelines
On the switch, Ethernet interfaces can operate either as Layer 2 or Layer 3 Ethernet interfaces (you
can use commands to set the link mode to bridge or route).
Each of the Layer 3 interfaces and subinterfaces use one VLAN interface resource. Before
configuring an Ethernet interface to operate in route mode, use the reserve-vlan-interface
command to reserve a VLAN interface resource for the interface. Otherwise, the operation might fail.
For example, before configuring four Layer 2 interfaces to operate in route mode, you must reserve
four VLAN interface resources by using the reserve-vlan-interface command.
To reserve global VLAN interface resources, specify the global keyword in the
reserve-vlan-interface command. To reserve local VLAN interface resources, do not specify the
global keyword. Reserved VLAN interface resources are local in this chapter.
For more information about reserving VLAN interface resources, see Layer 2—LAN Switching
Configuration Guide.
After you change the link mode of an Ethernet interface, all the commands (except the shutdown
command) on the Ethernet interface are restored to their defaults in the new link mode.
Examples
# Configure FortyGigE 1/0/1 to operate in bridge mode.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-mode bridge
# Configure FortyGigE 1/0/1 to operate in route mode.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-mode route
priority-flow-control
IMPORTANT:
This command is available only when the system operates in advanced mode. For more information
about system operating modes, see Fundamentals Configuration Guide.
Use priority-flow-control to enable PFC on an Ethernet interface through automatic negotiation or
forcibly.
25
Use undo priority-flow-control to disable PFC on the interface.
Syntax
priority-flow-control { auto | enable }
undo priority-flow-control
Default
PFC is disabled on Ethernet interfaces.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
auto: Specifies the Ethernet interface to automatically negotiate with its peer to enable PFC.
enable: Forcibly enables PFC.
Usage guidelines
The state of the PFC function is co-determined by the PFC configurations on the local port and on
the peer. In Table 8, the first line lists the PFC configuration on the local port, the first column lists the
PFC configuration on the peer, and enabled and disabled are the two possible negotiation results.
Table 8 PFC configurations and negotiation results
Local (right)
enable
auto
Default
enable
Enabled
Enabled.
Disabled
auto
Enabled
•
•
Disabled
Default
Disabled
Disabled.
Peer (below)
Enabled if negotiation succeeds.
Disabled if negotiation fails.
Disabled
Examples
# Configure FortyGigE 1/0/1 to automatically negotiate with its peer to enable PFC.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] priority-flow-control auto
Related commands
priority-flow-control no-drop dot1p
priority-flow-control no-drop dot1p
Use priority-flow-control no-drop dot1p to enable PFC for specific 802.1p priorities on an
Ethernet interface.
Use undo priority-flow-control no-drop dot1p to restore the default.
Syntax
priority-flow-control no-drop dot1p dot1p-list
26
undo priority-flow-control no-drop dot1p
Default
PFC is disabled for all 802.1p priorities.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
dot1p-list: Specifies an 802.1p priority (or dot1p priority) list to identify flows that are subject to
PFC(for example: 1,3-5). A hyphen (-) connects two numeric values, which together indicate a
continuous value range. Different values or value ranges are separated with commas (,). You can
configure up to 16 characters for this argument.
Usage guidelines
You can enable PFC for certain 802.1p priorities at the two ends of a link. When network congestion
occurs, the local device checks the PFC status for the 802.1p priority carried in each arriving packet.
The device processes the packet depending on the PFC status as follows:
•
If PFC is enabled for the 802.1p priority, the local device accepts the packet and sends a PFC
pause frame to the peer. The peer stops sending packets carrying this 802.1p priority for an
interval as specified in the PFC pause frame. This process is repeated until the congestion is
removed.
•
If PFC is disabled for the 802.1p priority, the local port drops the packet.
The relationship between the PFC function and the generic flow control function is shown in Table 9.
Table 9 The relationship between the PFC function and the generic flow control function
flow-control
Unconfigurable
priority-flow
-control
enable
Configured
priority-flow-co
ntrol no-drop
dot1p
Remarks
Configured
You cannot enable flow control by using the
flow-control command on a port where PFC is
enabled and PFC is enabled for the specified
802.1p priority values.
•
Configured
Configurable
Unconfigurable
•
On a port configured with the flow-control
command, you can enable PFC, but you
cannot enable PFC for specific 802.1p
priorities.
Enabling both generic flow control and PFC
on a port disables the port from sending
common or PFC pause frames to inform the
peer of congestion conditions. However, the
port can still handle common and PFC pause
frames from the peer.
When you configure PFC, follow these guidelines:
•
As a best practice to ensure correct operations of IRF and other protocols, do not enable PFC
for 802.1p priorities 0, 6, and 7.
•
Perform the same PFC configuration on all ports that traffic travels through.
For more information about the 802.1p priority, priority trust mode, and port priority, see ACL and
QoS Configuration Guide.
27
Examples
# Configure FortyGigE 1/0/1 to automatically negotiate with the peer port to enable PFC, and enable
PFC for 802.1p priority 5.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] priority-flow-control auto
[Sysname-FortyGigE1/0/1] priority-flow-control no-drop dot1p 5
Related commands
•
priority-flow-control
•
flow-control
•
flow-control receive enable
reset counters interface
Use reset counters interface to clear the Ethernet interface statistics.
Syntax
reset counters interface [ interface-type [ interface-number ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-type: Specifies an interface type.
interface-number: Specifies an interface number.
Usage guidelines
Before collecting traffic statistics for a specific period of time on an interface, clear the old statistics
first.
If no interface type is specified, this command clears statistics for all interfaces.
If only the interface type is specified, this command clears statistics for all interfaces of that type.
If both the interface type and the interface number are specified, this command clears statistics for
the specified interface.
Examples
# Clear the statistics of FortyGigE 1/0/1.
<Sysname> reset counters interface fortygige 1/0/1
Related commands
•
display interface
•
display counters interface
•
display counters rate interface
28
reset ethernet statistics
IMPORTANT:
• The HPE 7904 (JG682A) or HPE 7904 TAA (JH122A) switch uses one built-in MPU (slot 0) for
switching and control. The HPE 7910 (JG841A) or HPE 7910 TAA (JH123A) switch uses two
removable switching fabric modules (slots 10 and 11) for switching and control.
• Unless otherwise stated, the term "card" collectively refers to LPUs, switching fabric modules,
and MPUs.
Use reset ethernet statistics to clear the Ethernet module statistics.
Syntax
In standalone mode:
reset ethernet statistics slot slot-number
In IRF mode:
reset ethernet statistics chassis chassis-number slot slot-number
Views
User view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
slot slot-number: Clears the Ethernet module statistics on the specified card. The slot-number
argument represents the number of the slot that houses the card. (In standalone mode.)
chassis chassis-number slot slot-number: Clears the Ethernet module statistics on the specified
card of the specified IRF member device. The chassis-number argument represents the ID of the
IRF member device. The slot-number argument represents the number of the slot that houses the
card. (In IRF mode.)
Examples
# (In standalone mode.) Clear the Ethernet module statistics on slot 6.
<Sysname> reset ethernet statistics slot 6
# (In IRF mode.) Clear the Ethernet module statistics on the card in slot 1 of IRF member device 1.
<Sysname> reset ethernet statistics chassis 1 slot 1
Related commands
display ethernet statistics
reset packet-drop interface
Use reset packet-drop interface to clear the dropped packet statistics on an interface or multiple
interfaces.
Syntax
reset packet-drop interface [ interface-type [ interface-number ] ]
29
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-type: Specify an interface type. If you do not specify an interface type, this command clears
dropped packet statistics on all the interfaces on the device.
interface-number: Specify an interface number. If you do not specify this argument, this command
clears dropped packet statistics on all interfaces of the specified type.
Examples
# Clear dropped packet statistics on FortyGigE 1/0/1.
<Sysname> reset packet-drop interface fortygige1/0/1
# Clear dropped packet statistics on all interfaces.
<Sysname> reset packet-drop interface
Related commands
display packet-drop
shutdown
Use shutdown to shut down an Ethernet interface or subinterface.
Use undo shutdown to bring up an Ethernet interface or subinterface.
Syntax
shutdown
undo shutdown
Default
Ethernet interfaces are in up state.
Views
Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You might need to shut down and then bring up an Ethernet interface to make some interface
configurations take effect.
Examples
# Shut down and then bring up FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] shutdown
[Sysname-FortyGigE1/0/1] undo shutdown
# Shut down and then bring up FortyGigE 1/0/1.1.
30
<Sysname> system-view
[Sysname] interface fortygige 1/0/1.1
[Sysname-FortyGigE1/0/1.1] shutdown
[Sysname-FortyGigE1/0/1.1] undo shutdown
speed
Use speed to set the speed of an Ethernet interface.
Use undo speed to restore the default.
Syntax
speed { 10 | 100 | 1000 | 10000 | 40000 | 100000 |auto }
undo speed
Default
100-GE CXP interfaces operate at 100 Gbps and other Ethernet interfaces autonegotiate the speed.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
10: Sets the interface speed to 10 Mbps.
100: Sets the interface speed to 100 Mbps.
1000: Sets the interface speed to 1000 Mbps.
10000: Sets the interface speed to 10000 Mbps.
40000: Sets the interface speed to 40000 Mbps.
100000: Sets the interface speed to 100000 Mbps.
auto: Enables the interface to negotiate a speed with its peer.
Usage guidelines
For a fiber port, use the speed command to set its speed to match the rate of a transceiver module.
40-GE QSFP+ interfaces support only the 40000 and auto keywords.
10-GE SFP+ interfaces support only the 1000, 10000, and auto keywords.
100-GE CXP interfaces support only the 100000 keyword.
Support for the keywords varies by interface type. For more information, execute the speed ?
command in interface view.
Examples
# Configure FortyGigE 1/0/1 to autonegotiate the speed.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] speed auto
Related commands
speed auto
31
using fortygige
IMPORTANT:
Before you restart a switch configured with the using fortygige command, save the combining
configuration on the switch even if the switch is an IRF member switch. Otherwise, the combining
configuration cannot take effect.
Use using fortygige to combine four 10-GE breakout interfaces that are split from a 40-GE QSFP+
interface into a 40-GE interface.
Use undo using fortygige to cancel the configuration.
Syntax
using fortygige
undo using fortygige
Default
A 40-GE interface is not split and operates as a single interface.
Views
10-GE breakout interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If you need higher bandwidth, you can combine four 10-GE breakout interfaces that are split from a
40-GE interface into a 40-GE interface. To make this command take effect on the four 10-GE
breakout interfaces, execute this command on only one of the 10-GE breakout interfaces.
After this command is successfully configured, the system prompts you to reboot the card that
houses the four 10-GE breakout interfaces. You must reboot the card and then the system deletes
the four 10-GE breakout interface and creates the combined 40-GE interface.
Examples
# Combine 10-GE breakout interfaces Ten-GigabitEthernet 1/0/16:1 through Ten-GigabitEthernet
1/0/16:4 into a 40-GE interface.
<System> system-view
[System] interface ten-gigabitethernet1/0/16:1
[System-Ten-GigabitEthernet1/0/16:1] using fortygige
The interfaces Ten-GigabitEthernet1/0/16:1 through Ten-GigabitEthernet1/0/16:4 will be
deleted. Continue? [Y/N]:y
Reboot line card to make the configuration take effect.
Related commands
using tengige
32
using tengige
IMPORTANT:
Before you restart a switch configured with the using tengige command, save the splitting
configuration on the switch even if the switch is an IRF member switch. Otherwise, the splitting
configuration cannot take effect.
Use using tengige to split a 40-GE interface into four 10-GE breakout interfaces.
Use undo using tengige to cancel the configuration.
Syntax
using tengige
undo using tengige
Default
A 40-GE interface is not split and operates as a single interface.
Views
40-GE interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
To improve port density, reduce costs, and improve network flexibility, you can split a 40-GE interface
into four 10-GE breakout interfaces.
For example, you can split a 40-GE interface FortyGigE 1/0/1 into four 10-GE breakout interfaces
Ten-GigabitEthernet 1/0/1:1 through Ten-GigabitEthernet 1/0/1:4.
The 10-GE breakout interfaces that are split from a 40-GE interface support the same configuration
and attributes as common 10-GE interfaces, except that they are numbered differently.
After this command is successfully configured, the system prompts you to reboot the card that
houses the 40-GE interface. You must reboot the card and then the system deletes the 40-GE
interface and creates the four 10-GE breakout interfaces.
Examples
# Split 40-GE interface FortyGigE 1/0/1 into four 10-GE breakout interfaces.
<System> system-view
[System] interface fortygige 1/0/1
[System-FortyGigE1/0/1] using tengige
The interface FortyGigE1/0/1 will be deleted. Continue? [Y/N]:y
Reboot line card to make the configuration take effect.
Related commands
using fortygige
33
Layer 2 Ethernet interface commands
broadcast-suppression
Use broadcast-suppression to enable broadcast suppression and set the broadcast suppression
threshold.
Use undo broadcast-suppression to restore the default.
Syntax
broadcast-suppression { ratio | pps max-pps | kbps max-kbps }
undo broadcast-suppression
Default
Ethernet interfaces do not suppress broadcast traffic.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ratio: Sets the broadcast suppression threshold as a percentage of the maximum interface rate. The
value range for this argument is 0 to 100. The smaller the percentage, the less broadcast traffic is
allowed to pass through.
pps max-pps: Specifies the maximum number of broadcast packets that the interface can forward
per second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum
interface rate. For example, the value range for this argument is 0 to 59524000 on a 40-GE interface.
kbps max-kbps: Specifies the maximum number of kilobits of broadcast traffic that the Ethernet
interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum
interface rate.
Usage guidelines
You can use the broadcast storm suppression function to limit the size of broadcast traffic on an
interface. When the broadcast traffic on the interface exceeds this threshold, the system drops
packets until the traffic drops below this threshold.
Both storm-constrain and broadcast-suppression can suppress broadcast storm on a port. The
storm-constrain command uses software to suppress broadcast traffic, and it affects the device
performance to a certain extent. The broadcast-suppression command uses the chip to physically
suppress broadcast traffic, and it has less influence on the device performance than the
storm-constrain command. Do not configure the storm constrain command and the
broadcast-suppression command at the same time. Otherwise, the traffic suppression result is not
determined.
When you configure the suppression threshold in kbps, the actual suppression threshold might be
different from the configured one as follows:
•
If the configured value is smaller than 64, the value of 64 takes effect.
•
If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of
64 that is greater than and closest to the configured value takes effect.
To determine the suppression threshold that takes effect, see the prompts on the device.
34
Examples
# Set the broadcast suppression threshold to 10000 kbps on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] broadcast-suppression kbps 10000
The actual value is 10048 on port FortyGigE1/0/1 currently.
The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048
kbps (157 times of 64), because the chip only supports step 64.
Related commands
•
multicast-suppression
•
unicast-suppression
display storm-constrain
Use display storm-constrain to display storm control settings and statistics.
Syntax
display storm-constrain [ broadcast | multicast | unicast ] [ interface interface-type
interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
broadcast: Displays broadcast storm control settings and statistics.
multicast: Displays multicast storm control settings and statistics.
unicast: Displays unknown unicast storm control settings and statistics.
interface interface-type interface-number: Specifies an interface by its type and number.
Usage guidelines
If you specify no argument or keyword, this command displays all storm control settings on all storm
control-enabled interfaces.
Examples
# Display the storm control settings on all storm control-enabled ports.
<Sysname> display storm-constrain
Abbreviation: BC - broadcast; MC - multicast; UC - unicast
FW – forwarding
Flow Statistic Interval: 5 (in seconds)
Port
Type
Lower
Upper
Unit
CtrlMode
Status
Trap
Log
SwitchNum
-------------------------------------------------------------------------------------FGE1/0/1
BC
12345
23456
pps
35
block
FW
on
off
0
FGE1/0/2
MC
43
100
ratio
block
block
on
off
1
FGE1/0/4
UC
200
300
kbps
shutdown
normal
off
on
33
FGE1/0/5
BC
500
1500
pps
N/A
normal
on
on
0
Table 10 Command output
Field
Description
Flow Statistic Interval
Traffic polling interval (in seconds) of the storm control module.
Port
Abbreviated port name.
Type
Type of traffic subjected to storm control:
• BC—Broadcast packets.
• MC—Multicast packets.
• UC—Unknown unicast packets.
Lower
Lower storm control threshold, in pps, kbps, or percentage.
Upper
Upper storm control threshold, in pps, kbps, or percentage.
Unit
Storm control threshold unit:
• pps.
• kbps.
• percentage.
CtrlMode
Protective action (block or shutdown) taken on the port when the upper
threshold is reached. N/A indicates that no protective action is configured.
Status
Packet forwarding status:
• FW—The port is forwarding traffic correctly.
• shutdown—The port has been shut down.
• block—The port drops the type of traffic.
Trap
Status of the storm control threshold event trap switch:
• on—The port sends threshold event traps.
• off—The port does not send threshold event traps.
Log
Status of the storm control threshold event log switch:
• on—The port sends threshold event log messages.
• off—The port does not send threshold event log messages.
SwitchNum
Number of forwarding state changes of the interface.
When the SwitchNum count reaches 65535, it resets automatically.
multicast-suppression
Use multicast-suppression to enable multicast storm suppression and set the multicast storm
suppression threshold.
Use undo multicast-suppression to restore the default.
Syntax
multicast-suppression { ratio | pps max-pps | kbps max-kbps }
undo multicast-suppression
Default
Ethernet interfaces do not suppress multicast traffic.
36
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ratio: Sets the multicast suppression threshold as a percentage of the maximum interface rate. The
value range for this argument (in percentage) is 0 to 100. The smaller the percentage, the less
multicast traffic is allowed to pass through.
pps max-pps: Specifies the maximum number of multicast packets that the interface can forward per
second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum interface
rate. For example, the value range for this argument is 0 to 59524000 on a 40-GE interface.
kbps max-kbps: Specifies the maximum number of kilobits of multicast traffic that the Ethernet
interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum
interface rate.
Usage guidelines
You can use the multicast storm suppression function to limit the size of multicast traffic on an
interface. When the multicast traffic on the interface exceeds this threshold, the system drops
packets until the traffic drops below this threshold.
Both the storm-constrain and multicast-suppression can suppress multicast storm on a port. The
storm-constrain command uses software to suppress traffic, and it affects the device performance
to a certain extent. The multicast-suppression command uses the chip to physically suppress
multicast traffic, and it has less influence on the device performance than the storm-constrain
command. Do not configure the storm constrain command and the multicast-suppression
command at the same time. Otherwise, the traffic suppression result is not determined.
When you configure the suppression threshold in kbps, the actual suppression threshold might be
different from the configured one as follows:
•
If the configured value is smaller than 64, the value of 64 takes effect.
•
If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of
64 that is greater than and closest to the configured value takes effect.
To determine the suppression threshold that takes effect, see the prompts on the device.
Examples
# Set the multicast storm suppression threshold to 10000 kbps on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] multicast-suppression kbps 10000
The actual value is 10048 on port FortyGigE1/0/1 currently.
The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048
kbps (157 times of 64), because the chip only supports step 64.
Related commands
•
broadcast-suppression
•
unicast-suppression
37
port up-mode
CAUTION:
The following operations on a fiber port will cause link updown events before the port finally stays up:
• Configure both the port up-mode command and the speed or duplex command.
• Install or remove fiber links or transceiver modules after you forcibly bring up the fiber port.
IMPORTANT:
Copper ports do not support this command.
Use port up-mode to forcibly bring up a fiber port.
Use undo port up-mode to restore the default.
Syntax
port up-mode
undo port up-mode
Default
A fiber port is not forcibly brought up, and the physical state of a fiber port depends on the physical
state of the fibers.
Views
Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command forcibly brings up a fiber port and enables the port to forward packets unidirectionally
over a single link. In this way, transmission links are well utilized.
This command is applicable only to fiber port that operates in bridge mode.
The port up-mode, shutdown, and loopback commands are exclusive with each other.
A GE fiber port forcibly brought up cannot correctly forward traffic if it is installed with a
fiber-to-copper converter, 100/1000-Mbps transceiver module, or 100-Mbps transceiver module. To
solve the problem, use the undo port up-mode command on the fiber port.
Examples
# Forcibly bring up the fiber port FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port up-mode
storm-constrain
Use storm-constrain to enable broadcast, multicast, or unknown unicast storm control on an
Ethernet port.
Use undo storm-constrain to disable storm control.
38
Syntax
storm-constrain { broadcast | multicast | unicast } { pps | kbps | ratio } upperlimit lowerlimit
undo storm-constrain { all | broadcast | multicast | unicast }
Default
Traffic storm control is disabled.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
all: Disables storm control for all types of packets: broadcast, multicast, and unknown unicast.
broadcast: Enables or disables broadcast storm control.
multicast: Enables or disables multicast storm control.
unicast: Enables or disables unknown unicast storm control.
pps: Sets storm control thresholds in pps.
kbps: Sets storm control thresholds in kbps.
ratio: Sets storm control thresholds as a percentage of the transmission capacity of the interface.
upperlimit: Sets the upper threshold, in pps, kbps, or percentage.
lowerlimit: Sets the lower threshold, in pps, kbps, or percentage.
Usage guidelines
After you configure this command, the device collects the statistics of a particular type of traffic at the
specified interval, which can be configured by using the storm-constrain interval command. When
a particular type of traffic exceeds its upper threshold, the interface takes a certain action, which can
be configured by using the storm-constrain control command.
Either of the storm-constrain, broadcast-suppression, multicast-suppression, and
unicast-suppression commands can suppress storm on a port. The storm-constrain command
uses software to suppress traffic, and affects the device performance to a certain extent. The
broadcast-suppression, multicast-suppression, and unicast-suppression commands use the
chip to physically suppress traffic, and have less influence on the device performance compared with
the storm-constrain command. On the same type of traffic, do not configure the storm constrain
command and either of the broadcast-suppression, multicast-suppression, and
unicast-suppression commands at the same time. Otherwise, the traffic suppression result is not
determined.
When configuring this command, make sure upperlimit is greater than lowerlimit.
Examples
# Enable unknown unicast storm control on FortyGigE 1/0/1, setting the upper and lower thresholds
to 200 pps and 150 pps.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] storm-constrain unicast pps 200 150
# Enable broadcast storm control on FortyGigE 1/0/2, setting the upper and lower thresholds to 2000
kbps and 1500 kbps.
<Sysname> system-view
39
[Sysname] interface fortygige 1/0/2
[Sysname-FortyGigE1/0/2] storm-constrain broadcast kbps 2000 1500
# Enable multicast storm control on FortyGigE 1/0/3, setting the upper and lower thresholds to 80%
and 15%.
<Sysname> system-view
[Sysname] interface fortygige 1/0/3
[Sysname-FortyGigE1/0/3] storm-constrain multicast ratio 80 15
Related commands
•
storm-constrain control
•
storm-constrain interval
storm-constrain control
Use storm-constrain control to set the protective action to take on an Ethernet interface when a
type of traffic (unknown unicast, multicast, or broadcast) exceeds the upper storm control threshold.
Use undo storm-constrain control to restore the default.
Syntax
storm-constrain control { block | shutdown }
undo storm-constrain control
Default
No action is taken on an Ethernet interface when a type of traffic exceeds the upper storm control
threshold.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
block: Blocks this type of traffic, while forwarding other types of traffic. Even though the interface
does not forward the blocked traffic, it still counts the traffic. When the blocked traffic is detected
dropping below the lower threshold, the port begins to forward the traffic.
shutdown: Shuts down automatically. The interface shuts down automatically and stops forwarding
any traffic. When the blocked traffic is detected dropping below the lower threshold, the port does not
forward the traffic. To bring up the interface, use the undo shutdown command or disable the storm
control function.
Examples
# Configure FortyGigE 1/0/1 to block the traffic detected crossing the upper storm control threshold.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] storm-constrain control block
Related commands
•
storm-constrain
•
storm-constrain control
40
storm-constrain enable log
Use storm-constrain enable log to enable an Ethernet interface to log storm control threshold
events.
Use undo storm-constrain enable log to disable log sending.
Syntax
storm-constrain enable log
undo storm-constrain enable log
Default
An interface generates logs when monitored traffic exceeds the upper threshold or falls below the
lower threshold.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable FortyGigE 1/0/1 to generate logs when it detects storm control threshold events.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] storm-constrain enable log
storm-constrain enable trap
Use storm-constrain enable trap to enable an Ethernet interface to send storm control threshold
event traps.
Use undo storm-constrain enable trap to disable trap sending.
Syntax
storm-constrain enable trap
undo storm-constrain enable trap
Default
An interface sends out traps when monitored traffic exceeds the upper threshold or falls below the
lower threshold.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable FortyGigE 1/0/1 to send traps when it detects storm control threshold events.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
41
[Sysname-FortyGigE1/0/1] storm-constrain enable trap
storm-constrain interval
Use storm-constrain interval to set the traffic polling interval of the storm control module.
Use undo storm-constrain interval to restore the default.
Syntax
storm-constrain interval seconds
undo storm-constrain interval
Default
The storm control module polls traffic statistics every 10 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
seconds: Sets the traffic polling interval of the storm control module. The value range is 1 to 300
seconds.
Usage guidelines
The interval set by the storm-constrain interval command is specific to storm control. To set the
statistics polling interval of an interface, use the flow-interval command.
For network stability, use the default or a higher polling interval.
Examples
# Set the traffic statistics polling interval of the storm control module to 60 seconds.
<Sysname> system-view
[Sysname] storm-constrain interval 60
Related commands
•
storm-constrain
•
storm-constrain control
unicast-suppression
Use unicast-suppression to enable unicast storm suppression and set the unicast storm
suppression threshold.
Use undo unicast-suppression to restore the default.
Syntax
unicast-suppression { ratio | pps max-pps | kbps max-kbps }
undo unicast-suppression
Default
Ethernet interfaces do not suppress unicast traffic.
42
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
ratio: Sets the unicast suppression threshold as a percentage of the maximum interface rate. The
value range for this argument (in percentage) is 0 to 100. The smaller the percentage, the less
unicast traffic is allowed to pass through.
pps max-pps: Specifies the maximum number of unicast packets that the interface can forward per
second. The value range for the max-pps argument (in pps) is 0 to 1.4881 × the maximum interface
rate. For example, the value range for the argument is 0 to 59524000 on a 40-GE interface.
kbps max-kbps: Specifies the maximum number of kilobits of unicast traffic that the Ethernet
interface can forward per second. The value range for this argument (in kbps) is 0 to the maximum
interface rate.
Usage guidelines
You can use the unicast storm suppression function to limit the size of unicast traffic on an interface.
When the unicast traffic on the interface exceeds this threshold, the system discards packets until
the unicast traffic drops below this threshold.
Both the storm-constrain and unicast-suppression can suppress unicast storm on a port. The
storm-constrain command uses software to suppress unicast traffic, and it affects the device
performance to a certain extent. The unicast-suppression command use the chip to physically
suppress unicast traffic, and it has less influence on the device performance than the
storm-constrain command. Do not configure the storm constrain command and the
unicast-suppression command at the same time. Otherwise, the unicast traffic suppression result
is not determined.
When you configure the suppression threshold in kbps, the actual suppression threshold might be
different from the configured one as follows:
•
If the configured value is smaller than 64, the value of 64 takes effect.
•
If the configured value is greater than 64 but not an integer multiple of 64, the integer multiple of
64 that is greater than and closest to the configured value takes effect.
To determine the suppression threshold that takes effect, see the prompts on the device.
Examples
# Set the unicast storm suppression threshold to 10000 kbps on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] unicast-suppression kbps 10000
The actual value is 10048 on port FortyGigE1/0/1 currently.
The output shows the configured threshold is 10000 kbps, but the value that takes effect is 10048
kbps (157 times of 64), because the chip only supports step 64.
Related commands
•
broadcast-suppression
•
multicast-suppression
43
Layer 3 Ethernet interface or subinterface
commands
mtu
Use mtu to set the MTU for an Ethernet interface or subinterface.
Use undo mtu to restore the default.
Syntax
mtu size
undo mtu
Default
The MTU for an Ethernet interface or subinterface is 1500 bytes.
Views
Layer 3 Ethernet interface view, Layer 3 Ethernet subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
size: Sets the MTU in bytes. For versions earlier than Release 2138, the value range for this
argument is 46 to 1560 bytes. For Release 2138 and later versions, the value range for this
argument is 46 to 9008 bytes.
Usage guidelines
The ip mtu or mtu command takes effect only on packets sent to the CPU for software forwarding,
including packets destined to or sourced from the interface.
If both the mtu and ip mtu commands are configured on an interface, the MTU set by the ip mtu
command is used for fragmentation. Configure an appropriate MTU to avoid packet fragmentation.
For more information about the ip mtu command, see Layer 3—IP Services Command Reference.
Examples
# Set the MTU to 1492 bytes for the Layer 3 Ethernet interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] mtu 1492
44
Loopback, null, and inloopback interface
commands
bandwidth
Use bandwidth to configure the expected bandwidth of an interface.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth-value
undo bandwidth
Default
The expected bandwidth of a loopback interface is 0 kbps.
Views
Loopback interface view
Predefined user roles
network-admin
mdc-admin
Parameters
bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.
Usage guidelines
The expected bandwidth of an interface affects the following items:
•
Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration
Guide.
•
Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration
Guide.
Examples
# Set the expected bandwidth of Loopback 1 to 1000 kbps.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1] bandwidth 1000
default
Use default to restore the default settings for a loopback or null interface.
Syntax
default
Views
Loopback interface view, null interface view
Predefined user roles
network-admin
45
mdc-admin
Usage guidelines
CAUTION:
The default command might interrupt ongoing network services. Make sure you are fully aware of
the impacts of this command before using it on a live network.
This command might fail to restore the default settings for some commands for reasons such as
command dependencies and system restrictions. Use the display this command in interface view to
identify these commands, and then use their undo forms or follow the command reference to
individually restore their default settings. If your restoration attempt still fails, follow the error
message instructions to resolve the problem.
Examples
# Restore the default settings for interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1] default
description
Use description to set a description for an interface.
Use undo description to restore the default.
Syntax
description text
undo description
Default
The description of a loopback or null interface is the interface name plus Interface (for example,
LoopBack1 Interface).
Views
Loopback interface view, null interface view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies an interface description, a string of 1 to 255 characters.
Usage guidelines
Configure a description for an interface for easy identification and management purposes.
You can use the display interface command to view the configured description.
Examples
# Set the description to for RouterID for interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1] description for RouterID
46
display interface inloopback
Use display interface inloopback to display information about the inloopback interface.
Syntax
display interface [ inloopback [ 0 ] ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
0: Specifies interface Inloopback 0.
brief: Displays brief interface information. If you do not specify this keyword, the command displays
detailed interface information.
description: Displays complete interface descriptions. If you do not specify this keyword, the
command displays only the first 27 characters of interface descriptions. The description of an
inloopback interface is always InLoopBack0 Interface and cannot be configured.
Usage guidelines
If the inloopback keyword is not specified, the command displays information about all interfaces of
the device.
If the inloopback keyword is specified but the 0 keyword is not specified, the command displays
information about interface Inloopback 0. This is because the device has only one inloopback
interface Inloopback 0.
Examples
# Display detailed information about interface Inloopback 0.
<Sysname> display interface inloopback 0
InLoopBack0
Current state: UP
Line protocol state: UP (spoofing)
Description: InLoopBack0 Interface
Bandwidth: 0kbps
Maximum transmission unit: 1536
Physical: InLoopBack
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
Table 11 Command output
Field
Description
Current state
Physical layer state of the interface, which is always UP, meaning
that the inloopback interface can receive and transmit packets.
47
Field
Description
Line protocol state
Data link layer protocol state of the interface, which is always UP
(spoofing). UP (spoofing) means that the data link layer protocol
state of the interface is up, but the link is an on-demand link or is not
present.
Description
Description string of the interface, which is always InLoopBack0
Interface and cannot be configured.
Bandwidth
Expected bandwidth of the interface.
Maximum transmission unit
MTU of the interface, which is always 1536 and cannot be configured
Physical: InLoopBack
The physical type of the interface is inloopback.
Last 300 seconds input rate: 0
bytes/sec, 0 bits/sec, 0 packets/sec
Average input rate during the last 300 seconds:
• bytes/sec—Average number of bytes received per
second.
• bits/sec—Average number of bits received per second.
• packets/sec—Average number of packets received per
second.
Last 300 seconds output rate: 0
bytes/sec, 0 bits/sec, 0 packets/sec
Average output rate over the last 300 seconds:
• bytes/sec—Average number of bytes sent per second.
• bits/sec—Average number of bits sent per second.
• packets/sec—Average number of packets sent per
second.
Input: 0 packets, 0 bytes, 0 drops
Total number and size (in bytes) of incoming packets of the interface
and the number of dropped packets.
Output: 0 packets, 0 bytes, 0 drops
Total number and size (in bytes) of outgoing packets of the interface
and the number of dropped packets.
# Display brief information about interface Inloopback 0.
<Sysname> display interface inloopback 0 brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Primary IP
InLoop0
UP
UP(s)
Description
--
# Display brief information about interface Inloopback 0, including the full description of the
inloopback interface.
<Sysname> display interface inloopback 0 brief description
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Primary IP
InLoop0
UP
UP(s)
Description
--
Table 12 Command output
Field
Description
Brief information on interfaces in
route mode
Brief information about the inloopback interface.
48
Field
Description
Link: ADM - administratively down;
Stby - standby
Explains the Link field values:
• ADM—The interface has been shut down by the network
administrator. To recover its physical layer state, run the undo
shutdown command.
• Stby—The interface is a standby interface.
Explains the Protocol field value.
Protocol: (s) - spoofing
(s) represents spoofing. If the data link layer protocol of an interface is
up, but its link is an on-demand link or is not present, the Protocol field
displays UP(s). This attribute is typical of interface Null 0, Inloopback 0,
and loopback interfaces.
Interface
Interface name.
Link
Physical layer state of the interface, which is always UP.
Protocol
Data link layer protocol state of the interface, which is always UP(s).
IP address of the interface.
Primary IP
Because inloopback interfaces do not support CLI configuration, this
field does not display a value.
Interface description configured by using the description command.
Description
Because inloopback interfaces do not support CLI configuration, this
field does not display a value.
display interface loopback
Use display interface loopback to display information about the specified or all existing loopback
interfaces.
Syntax
display interface [ loopback ] [ brief [ down ] ]
display interface [ loopback [ interface-number ] ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface-number: Specifies a loopback interface by its number, which can be the number of any
existing loopback interface. If you do not specify this argument, the command displays information
about all existing loopback interfaces on the device.
brief: Displays brief interface information. If you do not specify this keyword, the command displays
detailed interface information.
down: Displays information about interfaces in down state and the causes. Without this keyword, the
command displays information about interfaces in all states.
49
description: Displays complete interface descriptions. If you do not specify this keyword, the
command displays only the first 27 characters of interface descriptions.
Usage guidelines
This command is supported only after a loopback interface is created.
If the loopback keyword is not specified, the command displays information about all interfaces of
the device.
If the loopback keyword is specified but the interface-number argument is not specified, the
command displays information about all existing loopback interfaces.
Examples
# Display detailed information about interface loopback 0.
<Sysname> display interface loopback 0
LoopBack0
Current state: UP
Line protocol state: UP (spoofing)
Description: LoopBack0 Interface
Bandwidth: 0kbps
Maximum transmission unit: 1536
Internet protocol processing: Disabled
Physical: Loopback
Last clearing of counters:
Never
Last 300 seconds input rate:
Last 300 seconds output rate:
0 bytes/sec, 0 bits/sec, 0 packets/sec
0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
Table 13 Command output
Field
Description
Current state
Physical layer state of the loopback interface:
• UP—The loopback interface can receive and transmit packets.
• Administratively DOWN—The interface was manually shut
down by using the shutdown command.
Line protocol state
Data link layer protocol state of the interface. UP (spoofing) means
that the data link layer protocol state of the interface is up, but the link
is an on-demand link or is not present.
Description
Description string of the interface.
Bandwidth
Expected bandwidth of the interface.
Maximum transmission unit
MTU of the interface.
Internet protocol processing:
Disabled
Indicates that the interface cannot process Layer 3 packets
(displayed when the interface is not configured with an IP address).
Internet address
Primary IP address of the interface (displayed when the interface is
configured with a primary IP address).
Physical: Loopback
The physical type of the interface is loopback.
Time when statistics on the logical interface were last cleared by
using the reset counters interface command.
Last clearing of counters
If the statistics of the interface have never been cleared by using the
reset counters interface command since the device started, this
field displays Never.
50
Field
Description
Last 300 seconds input rate: 0
bytes/sec, 0 bits/sec, 0 packets/sec
Average input rate during the last 300 seconds:
• bytes/sec—Average number of bytes received per second.
• bits/sec—Average number of bits received per second.
• packets/sec—Average number of packets received per second.
Last 300 seconds output rate: 0
bytes/sec, 0 bits/sec, 0 packets/sec
Average output rate over the last 300 seconds:
• bytes/sec—Average number of bytes sent per second.
• bits/sec—Average number of bits sent per second.
• packets/sec—Average number of packets sent per second.
Input: 0 packets, 0 bytes, 0 drops
Total number and size (in bytes) of incoming packets of the interface
and the number of dropped packets.
Output: 0 packets, 0 bytes, 0 drops
Total number and size (in bytes) of outgoing packets of the interface
and the number of dropped packets.
# Display brief information about all loopback interfaces.
<Sysname> display interface loopback brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Primary IP
Loop1
UP
UP(s)
--
Description
aaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display brief information about all existing loopback interfaces, including the full description of each
loopback interface.
<Sysname> display interface loopback brief description
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Primary IP
Loop1
UP
UP(s)
--
Description
aaaaaaaaaaaaaaaaaaaaaaaaaaaaa
Aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display information about all loopback interfaces in down state and the causes.
<Sysname> display interface loopback brief down
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Interface
Link Cause
Loop1
ADM
Administratively
Table 14 Command output
Field
Description
Brief information on interfaces in
route mode:
Brief information about loopback interfaces.
Link: ADM - administratively down;
Stby - standby
Explains the Link field values:
• ADM—Represents administratively down. The interface has been
shut down by the network administrator. To recover its physical
layer state, run the undo shutdown command.
• Stby—Represents standby. The interface is a standby interface. To
view the primary interface information, use the display standby
state command in High Availability Command Reference.
51
Field
Description
Explains the Protocol field value.
Protocol: (s) - spoofing
(s) represents spoofing. If the data link layer protocol of an interface is
up, but its link is an on-demand link or is not present, the Protocol field
displays UP(s). This attribute is typical of interface Null 0, Inloopback 0,
and loopback interfaces.
Interface
Interface name.
Link
Physical layer state of the interface:
• UP—The interface is up.
• DOWN—The interface is physically down.
• ADM—The interface has been administratively shut down. To
recover its physical state, run the undo shutdown command.
• Stby—The interface is a standby interface.
Protocol
Data link layer protocol state of the interface.
Description
Interface description configured by using the description command. If
the description keyword is not specified in the display interface brief
command, the Description field allows a maximum of 27 characters. If
the description keyword is specified in the display interface brief
command, the field displays the full interface description.
Cause
Cause of the interface down event. If the interface has been shut down
by using the shutdown command, this field displays
Administratively. To restore the physical state of the interface,
execute the undo shutdown command.
Related commands
•
interface loopback
•
reset counters interface loopback
display interface null
Use display interface null to display information about the null interface.
Syntax
display interface [ null [ 0 ] ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
0: Specifies interface Null 0.
brief: Displays brief interface information. If you do not specify this keyword, the command displays
detailed interface information.
description: Displays complete interface descriptions. If you do not specify this keyword, the
command displays only the first 27 characters of interface descriptions.
52
Usage guidelines
If the null keyword is not specified, the command displays information about all interfaces of the
device.
If the null keyword is specified but the 0 keyword is not specified, the command displays information
about interface Null 0. This is because the device has only one null interface Null 0.
Examples
# Display detailed information about interface Null 0.
<Sysname> display interface null 0
NULL0
Current state: UP
Line protocol state: UP (spoofing)
Description: NULL0 Interface
Bandwidth: 0kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
Physical: NULL DEV
Last clearing of counters: Never
Last 300 seconds input rate:
0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate:
0 bytes/sec, 0 bits/sec, 0 packets/sec
Input: 0 packets, 0 bytes, 0 drops
Output: 0 packets, 0 bytes, 0 drops
# Display brief information about interface Null 0.
<Sysname> display interface null 0 brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Primary IP
NULL0
UP
UP(s)
--
Description
aaaaaaaaaaaaaaaaaaaaaaaaaaa
# Display brief information about interface Null 0, including the full description of the null interface.
<Sysname> display interface null 0 brief description
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Primary IP
NULL0
UP
UP(s)
--
Description
aaaaaaaaaaaaaaaaaaaaaaaaaaaaa
aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
For the command output, see Table 13 and Table 14.
Related commands
•
interface null
•
reset counters interface null
interface loopback
Use interface loopback to create a loopback interface and enter loopback interface view.
Use undo interface loopback to remove a loopback interface.
53
Syntax
interface loopback interface-number
undo interface loopback interface-number
Default
No loopback interface exists.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-number: Specifies a loopback interface by its number in the range of 0 to 1023.
Usage guidelines
The physical layer state and link layer protocols of a loopback interface are always up unless the
loopback interface is manually shut down. You can establish a connection to a loopback interface to
do the following:
•
Prevent the connection from being affected by the physical state of the interface.
•
Improve the reliability of the connection.
For example, you can:
•
Configure a loopback interface as the source interface for establishing an FTP connection.
•
Use the loopback interface address as the Router ID in BGP.
Examples
# Create interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1]
interface null
Use interface null to enter null interface view.
Syntax
interface null 0
Default
A device has only one null interface (Null 0), which cannot be created or deleted.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
0: Specifies interface Null 0. The null interface number is always 0.
54
Examples
# Enter Null 0 interface view.
<Sysname> system-view
[Sysname] interface null 0
[Sysname-NULL0]
reset counters interface loopback
Use reset counters interface loopback to clear the statistics on the specified or all loopback
interfaces.
Syntax
reset counters interface loopback [ interface-number ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-number: Specifies a loopback interface by its number, which can be the number of any
existing loopback interface. If you do not specify the interface-number argument, the command
clears the statistics on all loopback interfaces.
Usage guidelines
To determine whether a loopback interface works correctly within a period by collecting the traffic
statistics within that period, first use the reset counters interface [ loopback [ interface-number ] ]
command to clear the statistics. Then have the interface automatically collect the statistics.
This command is available only if at least one loopback interface has been created.
Examples
# Clear the statistics on loopback interface Loopback 1.
<Sysname> reset counters interface loopback 1
Related commands
display interface loopback
reset counters interface null
Use reset counters interface null to clear the statistics on the null interface.
Syntax
reset counters interface [ null [ 0 ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
55
Parameters
0: Specifies the number of the null interface, which is always 0.
Usage guidelines
To determine whether the null interface works correctly within a period by collecting the traffic
statistics within that period, first use the reset counters interface [ null [ 0 ] ] command to clear the
statistics. Then have the interface automatically collect the statistics.
Examples
# Clear the statistics on interface Null 0.
<Sysname> reset counters interface null 0
Related commands
display interface null
shutdown
Use shutdown to shut down a loopback interface.
Use undo shutdown to bring up a loopback interface.
Syntax
shutdown
undo shutdown
Default
A loopback interface is up.
Views
Loopback interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Use the shutdown command with caution, because the command disconnects the connection of the
interface and disables the interface from communicating.
Examples
# Shut down interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-LoopBack1] shutdown
56
Bulk interface configuration commands
display interface range
Use display interface range to display information about interface ranges configured through the
interface range name command.
Syntax
display interface range [ name name ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
name name: Specifies an interface range by its name, a case-sensitive string of 1 to 32 characters.
If you do not specify an interface range name, this command displays information about all existing
interface ranges.
Examples
# Display information about all existing interface ranges configured through the interface range
name command.
<Sysname> display interface range
Interface range name t2 FortyGigE1/0/1 FortyGigE1/0/2
Interface range name test FortyGigE1/0/11 FortyGigE1/0/12
The output shows that interfaces FortyGigE 1/0/1 and FortyGigE 1/0/2 are added to interface range
named t2, and interfaces FortyGigE 1/0/11 and FortyGigE 1/0/12 are added to interface range
named test.
Related commands
interface range name
interface range
Use interface range to create an interface range and enter the interface range view.
Syntax
interface range interface-list
Views
System view
Predefined user roles
network-admin
mdc-admin
57
Parameters
interface-list: Specifies an interface list in the format of interface-list = { interface-type
interface-number [ to interface-type interface-number ] }&<1-24>. The interface-type
interface-number argument specifies an interface by its type and number. &<1-24> indicates that you
can specify up to 24 interfaces or interface lists. When you specify the to keyword in interface-type
interface-number1 to interface-type interface-number2, the interfaces before and after the to
keyword must be on the same interface card. The last-tier value of the interface number before to
must not be greater than the one after to, and the values of the other tiers of the interface number
before to must be the same as the one after to.
Usage guidelines
Use this command to enter interface range view to bulk configure multiple interfaces with the same
feature instead of configuring them one by one. For example, run the shutdown command in
interface range view to shut down a range of interfaces.
In interface range view, only the commands supported by the first interface are available. The first
interface is specified with the interface range command. To view these commands in the interface
range, enter the interface range view, and then enter ? at the prompt.
After a command is executed in interface range view, one of the following situations might occur:
•
The system stays in interface range view and displays no error messages. It means that the
execution succeeded on all member interfaces in the interface range.
•
The system displays an error message and stays in interface range view. It means that the
execution failed on member interfaces in the interface range.
•
{
If the execution failed on the first member interface in the interface range, the command is
not executed on any member interfaces.
{
If the execution failed on non-first member interfaces, the command takes effect on the
other member interfaces.
The system returns to system view. It means that:
{
The command is supported in both system view and interface view.
{
The execution failed on a member interface in interface range view and succeeded in
system view.
{
The command is not executed on the subsequent member interfaces.
You can use the display this command to verify the configuration in interface view of each
member interface. In addition, if the configuration in system view is not needed, use the undo
form of the command to remove the configuration.
To verify the configuration of the first interface in the interface range, execute the display this
command in interface range view.
When you bulk configure interfaces, follow these restrictions and guidelines:
•
If you cannot enter the view of an interface by using the interface interface-type
interface-number command, do not configure the interface as the first interface in the interface
range.
•
Do not assign an aggregate interface together with any of its member interfaces to an interface
range at the same time. Some commands, after being executed on both an aggregate interface
and its member interfaces, can break up the aggregation.
•
No limit is set on the maximum number of interfaces in an interface range. The more interfaces
in an interface range, the longer the command execution time.
Examples
# Shut down interfaces FortyGigE 1/0/1 through FortyGigE 1/0/24, VLAN interface 2.
<Sysname> system-view
[Sysname] interface range fortygige 1/0/1 to fortygige 1/0/24 vlan-interface 2
[Sysname-if-range] shutdown
58
interface range name
Use interface range name name interface interface-list to create an interface range, configure a
name for the interface range, and enter the interface range view.
Use interface range name name without the interface keyword to enter the view of an interface
range with the specified name.
Use undo interface range name to delete the interface range with the specified name.
Syntax
interface range name name [ interface interface-list ]
undo interface range name name
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
name: Specifies an interface range name, a case-sensitive string of 1 to 32 characters.
interface-list: Specifies an interface list in the format of interface-list = { interface-type
interface-number [ to interface-type interface-number ] }&<1-24>. The interface-type
interface-number argument specifies an interface by its type and number. &<1-24> indicates that you
can specify up to 24 interfaces or interface lists. When you specify the to keyword in interface-type
interface-number1 to interface-type interface-number2, the interfaces before and after the to
keyword must be on the same interface card. The last-tier value of the interface number before to
must not be greater than the one after to, and the values of the other tiers of the interface number
before to must be the same as the one after to.
Usage guidelines
You can use this command to assign a name to an interface range and can specify this name rather
than the interface range to enter the interface range view.
In interface range view, only the commands supported by the first interface are available. The first
interface is specified with the interface range command. To view the commands supported by the
first interface in the interface range, enter the interface range view and enter a question mark (?) at
the command line interface prompt.
After a command is executed in interface range view, one of the following situations might occur:
•
The system stays in interface range view and displays no error messages. It means that the
execution succeeded on all member interfaces in the interface range.
•
The system displays an error message and stays in interface range view. It means that the
execution failed on member interfaces in the interface range.
•
{
If the execution failed on the first member interface in the interface range, the command is
not executed on any member interfaces.
{
If the execution failed on non-first member interfaces, the command takes effect on the
other member interfaces.
The system returns to system view. It means that:
{
The command is supported in both system view and interface view.
{
The execution failed on a member interface in interface range view and succeeded in
system view.
{
The command is not executed on the subsequent member interfaces.
59
You can use the display this command to verify the configuration in interface view of each
member interface. In addition, if the configuration in system view is not needed, use the undo
form of the command to remove the configuration.
To verify the configuration of the first interface in the interface range, execute the display this
command in interface range view.
To view the member interfaces of an interface range, use the display interface range command.
When you bulk configure interfaces, follow these restrictions and guidelines:
•
If you cannot enter the view of an interface by using the interface interface-type
interface-number command, do not configure the interface as the first interface in the interface
range.
•
Do not assign an aggregate interface and any of its member interfaces to an interface range at
the same time. Some commands, after being executed on both an aggregate interface and its
member interfaces, can break up the aggregation.
•
No limit is set on the maximum number of interfaces in an interface range. The more interfaces
in an interface range, the longer the command execution time.
•
The maximum number of interface range names is only limited by the system resources. As a
best practice to guarantee bulk interface configuration performance, configure fewer than 1000
interface range names.
Examples
# Add FortyGigE 1/0/1 through FortyGigE 1/0/12 to interface range named myEthPort, and enter the
interface range view.
<Sysname> system-view
[Sysname] interface range name myEthPort interface fortygige 1/0/1 to fortygige 1/0/12
[Sysname-if-range-myEthPort]
# Enter the view of interface range named myEthPort.
<Sysname> system-view
[Sysname] interface range name myEthPort
[Sysname-if-range-myEthPort]
Related commands
display interface range
60
MAC address table commands
This document covers the configuration of unicast MAC address entries, including static, dynamic,
blackhole, and multiport unicast MAC address entries. For more information about configuring static
multicast MAC address entries, see IP Multicast Configuration Guide.
display mac-address
Use display mac-address to display MAC address entries.
Syntax
display mac-address [ mac-address [ vlan vlan-id ] | [ [ dynamic | static ] [ interface interface-type
interface-number ] | blackhole | multiport ] [ vlan vlan-id ] [ count ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
mac-address: Specifies a MAC address in the format of H-H-H. When entering a MAC address, you
can omit the leading zeros in each H section. For example, enter f-e2-1 for 000f-00e2-0001.
vlan vlan-id: Specifies a VLAN. The value range for the vlan-id argument is 1 to 4094.
dynamic: Displays dynamic MAC address entries.
static: Displays static MAC address entries.
interface interface-type interface-number: Specifies an interface by its type and number.
blackhole: Displays blackhole MAC address entries.
multiport: Displays multiport unicast MAC address entries.
count: Displays only the number of MAC address entries that match all entry attributes you specify in
the command. Detailed information about MAC address entries is not displayed. For example, you
can use the display mac-address vlan 20 dynamic count command to display the number of
dynamic entries for VLAN 20. If no entry attribute is specified, the command displays the total
number of entries in the MAC address table. If this keyword is not specified, the command displays
detailed information about specified MAC address entries.
Usage guidelines
A MAC address entry includes a destination MAC address, an outgoing interface, and a VLAN ID.
If you execute this command without specifying any parameters, it displays all MAC address entries.
This command displays dynamic MAC address entries for an aggregate interface only when the
aggregate interface has at least one Selected member port.
Examples
# Display MAC address entries for VLAN 100.
<Sysname> display mac-address vlan 100
61
MAC Address
VLAN ID
State
Port/NickName
0001-0101-0101
100
Multiport
FGE1/0/1
Aging
0033-0033-0033
100
Blackhole
N/A
N
0000-0000-0002
100
Static
FGE1/0/3
N
00e0-fc00-5829
100
Learned
FGE1/0/4
Y
N
FGE1/0/2
# Display the total number of MAC address entries.
<Sysname> display mac-address count
1 mac address(es) found.
Table 15 Command output
Field
Description
VLAN ID
ID of the VLAN to which the outgoing interface of the MAC address entry
belongs.
State
MAC address entry state:
• Static—Static MAC address entry.
• Learned—Dynamic MAC address entry. Dynamic entries can be
manually configured, or learned.
• Blackhole—Blackhole MAC address entry.
• Multiport—Multiport unicast MAC address entry.
When the field displays an interface name, the field indicates the outgoing
interface for packets that are destined for the MAC address. This field
displays N/A for a blackhole MAC address entry.
Port/NickName
When the field displays a 16-bit number in hexadecimal format (for example,
0x12ab), the field indicates the RB through which the packets destined for the
MAC address leaves the TRILL network.
Switches of this series do not support the TRILL function in the current
software version.
Aging
Aging time:
• Y—The entry is aging.
• N—The entry does not age.
mac address(es) found
Number of matching MAC address entries.
Related commands
•
mac-address
•
mac-address timer
display mac-address aging-time
Use display mac-address aging-time to display the aging timer for dynamic MAC address entries.
Syntax
display mac-address aging-time
Views
Any view
Predefined user roles
network-admin
62
network-operator
mdc-admin
mdc-operator
Examples
# Display the aging timer for dynamic MAC address entries.
<Sysname> display mac-address aging-time
MAC address aging time: 300s.
Related commands
mac-address timer
display mac-address mac-learning
Use display mac-address mac-learning to display the global MAC address learning status and the
MAC learning status of the specified interface or all interfaces.
Syntax
display mac-address mac-learning [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do
not specify an interface, the command displays the global MAC address learning status and the MAC
address learning status of all interfaces.
Examples
# Display the global MAC address learning status and the MAC learning status of all interfaces.
<Sysname> display mac-address mac-learning
Global MAC address learning status: Enabled.
Port
Learning Status
FGE1/0/1
Enabled
FGE1/0/2
Enabled
FGE1/0/3
Enabled
FGE1/0/4
Enabled
Table 16 Command output
Field
Description
Global MAC address learning status
Global MAC address learning status:
• Enabled.
• Disabled.
63
Field
Description
Learning Status
MAC address learning status of an interface:
• Enabled.
• Disabled.
Related commands
mac-address mac-learning enable
display mac-address statistics
Use display mac-address statistics to display MAC address table statistics.
Syntax
display mac-address statistics
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
This command displays the number of MAC address entries per type and the maximum number of
MAC address entries allowed for each type.
Examples
# Display the statistics of the MAC address table.
<Sysname> display mac-address statistics
MAC Address Count:
Dynamic Unicast Address (Learned) Count:
0
Dynamic Unicast Address (Security-service-defined) Count:
0
Static Unicast Address (User-defined) Count:
0
Static Unicast Address (System-defined) Count:
0
Total Unicast MAC Addresses In Use:
0
Total Unicast MAC Addresses Available:
262143
Multicast and Multiport MAC Address Count:
1
Static Multicast and Multiport MAC Address (User-defined) Count: 1
Total Multicast and Multiport MAC Addresses Available:
256
Table 17 Command output
Field
Description
Dynamic Unicast Address (Learned) Count
Number of dynamic unicast MAC address entries
triggered by packets.
Dynamic Unicast Address (Security-service-defined)
Count
Number of dynamic unicast MAC address entries
triggered by the security service.
64
Field
Description
Static Unicast Address (User-defined) Count
Number of static unicast MAC address entries added
by users.
Static Unicast Address (System-defined) Count
Number of static unicast MAC address entries added
by the system.
Total Unicast MAC Addresses In Use
Total number of unicast MAC address entries.
Total Unicast MAC Addresses Available
Maximum number of unicast MAC address entries
allowed.
Multicast and Multiport MAC Address Count
Number of multicast and multiport unicast MAC
address entries.
Static Multicast and Multiport MAC Address
(User-defined) Count
Number of static multicast and multiport unicast
MAC address entries added by users.
Total Multicast and Multiport MAC Addresses
Available
Maximum number of multicast and multiport unicast
MAC address entries allowed.
mac-address (interface view)
Use mac-address to add or modify a MAC address entry on an interface.
Use undo mac-address to delete a MAC address entry on an interface.
Syntax
mac-address { dynamic | multiport | static } mac-address vlan vlan-id
undo mac-address { dynamic | multiport | static } mac-address vlan vlan-id
Default
An interface is not configured with any MAC address entry.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
dynamic: Specifies dynamic MAC address entries.
static: Specifies static MAC address entries.
multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC
address matches a multiport unicast MAC address entry is sent out of multiple ports.
mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast and all-zero
MAC addresses. When entering a MAC address, you can omit the leading zeros in each H section.
For example, enter f-e2-1 for 000f-00e2-0001.
vlan vlan-id: Specifies an existing VLAN to which the specified interface belongs. The value range
for the vlan-id argument is 1 to 4094.
Usage guidelines
Typically, the device automatically builds the MAC address table by learning the source MAC
addresses of incoming frames on each interface. However, you can manually configure static MAC
address entries. For a MAC address, a manually configured static entry takes precedence over a
65
dynamically learned entry. To improve the security for the user device connected to an interface,
manually configure a static entry to bind the user device to the interface. Then, the frames destined
for the user device (for example, Host A) are always sent out of the interface. Other hosts using the
forged MAC address of Host A cannot obtain the frames destined for Host A.
The MAC address entries configuration cannot survive a reboot unless you save it. The dynamic
MAC address entries, however, are lost upon reboot regardless of whether you save the
configuration.
This command displays manually configured dynamic MAC address entries for an aggregate
interface only when the aggregate interface has at least one Selected member port.
Examples
# Add a static entry for MAC address 000f-e201-0101 on interface FortyGigE 1/0/1 that belongs to
VLAN 2.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] mac-address static 000f-e201-0101 vlan 2
# Add a static entry for MAC address 000f-e201-0101 on Layer 2 aggregate interface
Bridge-Aggregation 1 that belongs to VLAN 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] mac-address static 000f-e201-0102 vlan 1
# Add a multiport unicast MAC address entry for MAC address 0001-0001-0101 on FortyGigE 1/0/1
and FortyGigE 1/0/2 that belong to VLAN 2.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] mac-address multiport 0001-0001-0101 vlan 2
[Sysname-FortyGigE1/0/1] quit
[Sysname] interface fortygige 1/0/2
[Sysname-FortyGigE1/0/2] mac-address multiport 0001-0001-0101 vlan 2
Related commands
•
display mac-address
•
mac-address (system view)
mac-address (system view)
Use mac-address to add or modify a MAC address entry.
Use undo mac-address to delete one or all MAC address entries.
Syntax
mac-address { dynamic | static } mac-address interface interface-type interface-number vlan
vlan-id
mac-address blackhole mac-address vlan vlan-id
mac-address multiport mac-address interface interface-list vlan vlan-id
undo mac-address [ [ dynamic | static ] mac-address interface interface-type interface-number
vlan vlan-id ]
undo mac-address [ blackhole | dynamic | static ] [ mac-address ] vlan vlan-id
undo mac-address [ dynamic | static ] interface interface-type interface-number
undo mac-address multiport mac-address interface interface-list vlan vlan-id
66
undo mac-address [ multiport ] [ [ mac-address ] vlan vlan-id ]
Default
The system is not configured with any MAC address entry.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
dynamic: Specifies dynamic MAC address entries.
static: Specifies static MAC address entries.
blackhole: Specifies blackhole MAC address entries. The packets whose destination MAC
addresses match blackhole MAC address entries are dropped.
multiport: Specifies multiport unicast MAC address entries. A frame whose destination MAC
address matches a multiport unicast MAC address entry is sent out of multiple ports.
mac-address: Specifies a MAC address in the format of H-H-H, excluding multicast and all-zero
MAC addresses. When entering a MAC address, you can omit the leading zeros in each H section.
For example, enter f-e2-1 for 000f-00e2-0001.
vlan vlan-id: Specifies an existing VLAN to which the interface belongs. The value range for the
vlan-id argument is 1 to 4094.
interface interface-type interface-number: Specifies an outgoing interface by its type and number.
interface interface-list: Specifies interfaces in the format of { interface-type interface-number [ to
interface-type interface-number ] } &<1-4>. The interface type can be the Layer 2 Ethernet interface
or Layer 2 aggregate interface. &<1-4> specifies that you can configure up to four interfaces or
interface ranges.
Usage guidelines
Typically, the device automatically builds the MAC address table by learning the source MAC
addresses of incoming frames on each interface. However, you can manually configure static MAC
address entries. For a MAC address, a manually configured static entry takes precedence over a
dynamically learned entry. To improve the security for the user device connected to an interface,
manually configure a static entry to bind the user device to the interface. Then, the frames destined
for the user device (for example, Host A) are always sent out of the interface. Other hosts using the
forged MAC address of Host A cannot obtain the frames destined for Host A.
To drop the packets with the specified source MAC addresses or destination MAC addresses, you
can configure blackhole MAC address entries.
A multiport unicast MAC address entry is used to send frames with a specific destination MAC
address out of multiple ports. When you execute this command for the first time, the command adds
a MAC address entry. When you execute the command again with the same MAC address and
VLAN but with different interfaces, this command adds the specified interfaces for this entry.
A static or blackhole MAC address entry can overwrite a dynamic MAC address entry, but not vice
versa.
If you execute the undo mac-address command without specifying any parameters, this command
deletes all unicast MAC address entries and static multicast MAC address entries.
You can delete all the MAC address entries (including unicast MAC address entries and static
multicast MAC address entries) of the specified VLAN. You can also delete only one type (dynamic,
static, blackhole, or multiport unicast) of MAC address entries. You can single out an interface and
67
delete the corresponding unicast MAC address entries, but not the corresponding static multicast
MAC address entries.
The MAC address entries configuration cannot survive a reboot unless you save it. The dynamic
MAC address entries, however, are lost upon reboot regardless of whether you save the
configuration.
Examples
# Add a static entry for MAC address 000f-e201-0101. All frames that are destined for this MAC
address are sent out of interface FortyGigE 1/0/1, which belongs to VLAN 2.
<Sysname> system-view
[Sysname] mac-address static 000f-e201-0101 interface fortygige 1/0/1 vlan 2
# Add a multiport unicast MAC address entry for MAC address 000f-e201-0101 to send all frames
destined for this MAC address out of FortyGigE 1/0/1 through FortyGigE 1/0/3 that belong to VLAN
2.
<Sysname> system-view
[Sysname] mac-address multiport 000f-e201-0101 interface fortygige 1/0/1 to fortygige
1/0/3 vlan 2
Related commands
•
display mac-address
•
mac-address (interface view)
mac-address mac-learning enable
Use mac-address mac-learning enable to enable MAC address learning.
Use undo mac-address mac-learning enable to disable MAC address learning.
Syntax
mac-address mac-learning enable
undo mac-address mac-learning enable
Default
MAC address learning is enabled.
Views
System view, Layer 2 Ethernet interface, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
To prevent the MAC address table from becoming saturated, you can disable MAC address learning.
For example, a number of packets with different source MAC addresses reaching a device can affect
the MAC address table update. You can disable MAC address learning to avoid such attacks, but the
following guidelines apply:
•
You can disable MAC address learning on a per-interface basis. If you disable MAC address
learning globally, MAC address learning is disabled for all interfaces, and the device stops
learning MAC addresses and cannot dynamically update the MAC address table.
•
Because disabling MAC address learning can result in broadcast storms, enable broadcast
storm suppression after you disable MAC address learning on an interface. For more
68
information about broadcast storm suppression, see Layer 2—LAN Switching Configuration
Guide.
•
With MAC address learning enabled globally, you can disable MAC address learning for the
specific interface.
When MAC address learning is disabled, the learned dynamic MAC addresses remain valid until
they age out.
Examples
# Disable MAC address learning globally.
<Sysname> system-view
[Sysname] undo mac-address mac-learning enable
# Disable MAC address learning on interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] undo mac-address mac-learning enable
# Disable MAC address learning on interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] undo mac-address mac-learning enable
Related commands
display mac-address mac-learning
mac-address mac-learning ingress
Use mac-address mac-learning ingress to configure the device to learn MAC addresses at
ingress.
Use undo mac-address mac-learning ingress to restore the default.
Syntax
mac-address mac-learning ingress
undo mac-address mac-learning ingress
Default
The device learns MAC addresses at egress.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command is available in Release 11xx.
The device can learn the source MAC address of a packet when it receives the packet or when it
sends out the packet.
For the device to correctly learn the source MAC address of Layer 3 forwarded packets, you must
enable MAC address learning at ingress. At egress, the source MAC address of Layer 3 forwarded
packets is replaced by the outgoing interface's MAC address. The device cannot learn the original
source MAC address.
69
Examples
# Enable MAC address learning at ingress.
<Sysname> system-view
[Sysname] mac-address mac-learning ingress
mac-address mac-roaming enable
Use mac-address mac-roaming enable to enable MAC address synchronization.
Use undo mac-address mac-roaming enable to restore the default.
Syntax
mac-address mac-roaming enable
undo mac-address mac-roaming enable
Default
MAC address synchronization is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If ports on different cards of the same device or of different IRF member devices are selected ports
from the same aggregation group, MAC address entries are synchronized among these cards
regardless of whether MAC address synchronization is enabled. For more information about
aggregation groups, see Layer 2—LAN Switching Configuration Guide.
The MAC address table size might vary with different cards. With MAC address synchronization
enabled, MAC address table entries exceeding the table size of a card cannot be synchronized to the
MAC address table.
Examples
# Enable MAC address synchronization.
<Sysname> system-view
[Sysname] mac-address mac-roaming enable
mac-address timer
Use mac-address timer to configure the aging timer for dynamic MAC address entries.
Use undo mac-address timer to restore the default.
Syntax
mac-address timer { aging seconds | no-aging }
undo mac-address timer
Default
The aging timer for dynamic MAC address entries is 300 seconds.
Views
System view
70
Predefined user roles
network-admin
mdc-admin
Parameters
aging seconds: Sets an aging timer for dynamic MAC address entries, in the range of 10 to 2400
seconds.
no-aging: Sets dynamic MAC address entries not to age.
Usage guidelines
To set the aging timer appropriately, follow these guidelines:
•
A long aging interval causes the MAC address table to retain outdated entries and fail to
accommodate the most recent network changes.
•
A short aging interval results in removal of valid entries and unnecessary broadcasts that affect
device performance.
Examples
# Set the aging time to 500 seconds for dynamic MAC address entries.
<Sysname> system-view
[Sysname] mac-address timer aging 500
Related commands
display mac-address aging-time
71
MAC Information commands
mac-address information enable (interface view)
Use mac-address information enable to enable MAC Information on an interface.
Use undo mac-address information enable to disable MAC Information on an interface.
Syntax
mac-address information enable { added | deleted }
undo mac-address information enable { added | deleted }
Default
MAC Information is disabled on an interface.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
added: Enables the device to record MAC address change information when a new MAC address is
learned on an interface.
deleted: Enables the device to record MAC address change information when an existing MAC
address is deleted.
Usage guidelines
Before you enable MAC Information on an interface, enable MAC Information globally.
Examples
# Enable MAC Information on FortyGigE 1/0/1 to enable FortyGigE 1/0/1 to record MAC address
change information when learning a new MAC address.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] mac-address information enable added
Related commands
mac-address information enable (system view)
mac-address information enable (system view)
Use mac-address information enable to enable MAC Information globally.
Use undo mac-address information enable to disable MAC Information globally.
Syntax
mac-address information enable
undo mac-address information enable
72
Default
MAC Information is disabled globally.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Before you enable MAC Information on an interface, enable MAC Information globally.
Examples
# Enable MAC Information globally.
<Sysname> system-view
[Sysname] mac-address information enable
Related commands
mac-address information enable (interface view)
mac-address information interval
Use mac-address information interval to set the MAC change notification interval.
Use undo mac-address information interval to restore the default.
Syntax
mac-address information interval interval-time
undo mac-address information interval
Default
The MAC change notification interval is 1 second.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval-time: Specifies the MAC change notification interval in the range of 1 to 20000 seconds.
Usage guidelines
To prevent syslog messages or SNMP notifications from being sent too frequently, set the MAC
change notification interval to a larger value.
Examples
# Set the MAC change notification interval to 200 seconds.
<Sysname> system-view
[Sysname] mac-address information interval 200
73
mac-address information mode
Use mac-address information mode to set the MAC Information mode. The MAC Information
mode specifies the type of messages (syslog messages or SNMP notifications) used to notify MAC
changes.
Use undo mac-address information mode to restore the default.
Syntax
mac-address information mode { syslog | trap }
undo mac-address information mode
Default
SNMP notifications are sent to notify MAC changes.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
syslog: Specifies that the device sends syslog messages to notify MAC address changes.
trap: Specifies that the device sends SNMP notifications to notify MAC address changes.
Examples
# Configure the MAC Information mode as trap.
<Sysname> system-view
[Sysname] mac-address information mode trap
mac-address information queue-length
Use mac-address information queue-length to set the MAC Information queue length.
Use undo mac-address information queue-length to restore the default.
Syntax
mac-address information queue-length value
undo mac-address information queue-length
Default
The MAC Information queue length is 50.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
value: Specifies the MAC Information queue length in the range of 0 to 1000. The MAC Information
queue length indicates the number of MAC change messages.
74
Usage guidelines
If the MAC Information queue length is 0, the device sends a syslog message or SNMP notification
immediately after learning or deleting a MAC address.
If the MAC Information queue length is not 0, the device stores MAC address changes in the queue:
•
•
The device overwrites the oldest MAC change written into the queue with the most recent MAC
change when the following conditions exist:
{
The MAC change notification interval does not expire.
{
The queue has been exhausted.
The device sends syslog messages or SNMP notifications only if the MAC change notification
interval expires.
Examples
# Set the MAC Information queue length to 600.
<Sysname> system-view
[Sysname] mac-address information queue-length 600
75
Ethernet link aggregation commands
bandwidth
Use bandwidth to set the expected bandwidth for an interface.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth-value
undo bandwidth
Default
The expected bandwidth (in kbps) is the interface baud rate divided by 1000.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface
view
Predefined user roles
network-admin
mdc-admin
Parameters
bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.
Usage guidelines
The expected bandwidth of an interface affects the following items:
•
Bandwidth assignment with CBQ. For more information, see ACL and QoS Configuration
Guide.
•
Link costs in OSPF and IS-IS. For more information, see Layer 3—IP Routing Configuration
Guide.
Examples
# Set the expected bandwidth to 10000 kbps for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] bandwidth 10000
default
Use default to restore the default settings for an aggregate interface.
Syntax
default
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface
view
Predefined user roles
network-admin
76
mdc-admin
Usage guidelines
CAUTION:
The default command might interrupt ongoing network services. Make sure you are fully aware of
the impacts of this command when you execute it on a live network.
This command might fail to restore the default settings for some commands for reasons such as
command dependencies and system restrictions. Use the display this command in interface view to
identify these commands, and then use their undo forms or follow the command reference to restore
their default settings. If your restoration attempt still fails, follow the error message instructions to
resolve the problem.
Examples
# Restore the default settings for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] default
description
Use description to set a description for an interface.
Use undo description to restore the default.
Syntax
description text
undo description
Default
The description of an interface is the interface-name plus Interface. For example, the default
description of Bridge-Aggregation 1 is Bridge-Aggregation1 Interface.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface
view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies the interface description, a string of 1 to 255 characters.
Examples
# Set the description to connect to the lab for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] description connect to the lab
display interface
Use display interface to display aggregate interface information.
77
Syntax
display interface [ bridge-aggregation | route-aggregation ] [ brief [ down | description ] ]
display interface { bridge-aggregation | route-aggregation } interface-number [ brief
[ description ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
bridge-aggregation: Specifies Layer 2 aggregate interfaces.
route-aggregation: Specifies Layer 3 aggregate interfaces.
interface-number: Specifies an existing aggregate interface number. The value range for the
interface-number argument is the set of all existing aggregate interface numbers.
brief: Displays brief interface information. If you do not specify this keyword, the command displays
detailed interface information.
down: Displays information about interfaces in the down state and the causes for the down state. If
you do not specify this keyword, the command displays information about interfaces in all states.
description: Displays complete interface descriptions. If you do not specify this keyword, the
command displays only the first 27 characters of interface descriptions.
Usage guidelines
If you do not specify the bridge-aggregation and route-aggregation keywords, the command
displays information about all interfaces.
If you specify the bridge-aggregation or route-aggregation keyword and do not specify any
interface number, the command displays information about all aggregate interfaces of that type.
If you specify the bridge-aggregation interface-number or route-aggregation interface-number
option, the command displays information about the specified aggregate interface.
Examples
# Display detailed information about Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> display interface bridge-aggregation 1
Bridge-Aggregation1
Current state: UP
IP packet frame type: Ethernet II, hardware address: 000f-e207-f2e0
Description: Bridge-Aggregation1 Interface
Bandwidth: 0kbps
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
PVID: 1
Port link-type: Access
Tagged VLANs:
None
UnTagged VLANs: 1
Last clearing of counters:
Never
78
Last 300 seconds input:
Last 300 seconds output:
Input (total):
6900 packets/sec 885160 bytes/sec
-%
3150 packets/sec 404430 bytes/sec
-%
5364747 packets, 686688416 bytes
2682273 unicasts, 1341137 broadcasts, 1341337 multicasts, 0 pauses
Input (normal):
5364747 packets, 686688416 bytes
2682273 unicasts, 1341137 broadcasts, 1341337 multicasts, 0 pauses
Input:
0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 frame, 0 overruns, 0 aborts
0 ignored, 0 parity errors
Output (total): 1042508 packets, 133441832 bytes
1042306 unicasts, 0 broadcasts, 202 multicasts, 0 pauses
Output (normal): 1042508 packets, 133441832 bytes
1042306 unicasts, 0 broadcasts, 202 multicasts, 0 pauses
Output: 0 output errors, 0 underruns, 0 buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
0 lost carrier, 0 no carrier
# Display detailed information about Layer 3 aggregate interface Route-Aggregation 1.
<Sysname> display interface route-aggregation 1
Route-Aggregation1
Current state: UP
Line protocol state: UP
Description: Route-Aggregation1 Interface
Bandwidth: 0kbps
Maximum transmission unit: 1500
Internet protocol processing: Disabled
IP packet frame type: Ethernet II, hardware address: 0000-fc00-2670
IPv6 packet frame type: Ethernet II, hardware address: 0000-fc00-2670
Last clearing of counters: Never
Last 300 seconds input rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
Last 300 seconds output rate: 0 bytes/sec, 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 drops
0 packets output, 0 bytes, 0 drops
# Display brief information about Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> display interface bridge-aggregation 1 brief
Brief information on interfaces in bridge mode:
Link: ADM - administratively down; Stby - standby
Speed: (a) – auto
Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface
Link Speed
Duplex Type PVID Description
BAGG1
UP
A
auto
A
1
# Display brief information about Layer 3 aggregate interface Route-Aggregation 1.
<Sysname> display interface route-aggregation 1 brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Primary IP
RAGG1
UP
UP
--
79
Description
Table 18 Command output
Field
Description
Bridge-Aggregation1
Layer 2 aggregate interface name.
Route-Aggregation1
Layer 3 aggregate interface name.
Current state
Aggregate interface status:
• DOWN (Administratively down)—The interface
is administratively shut down with the shutdown
command.
• DOWN—The interface is administratively up but
physically down (possibly because no physical
link is present or the link is faulty).
• UP—The Ethernet interface is both
administratively and physically up.
IPv4 packet frame format.
IP packet frame type
The value PKTFMT_ETHNT_2 indicates that
packets are encapsulated in Ethernet II format.
Bandwidth
Expected bandwidth of the interface.
Unknown-speed mode, unknown-duplex mode
The interface speed and duplex mode are unknown.
PVID
Port VLAN ID (PVID).
Port link-type
Port link type: access, trunk, or hybrid.
Packets from the specified VLANs are sent out of
this interface with a VLAN tag:
• Tagged Vlan: none—All packets are sent out of
this interface without a VLAN tag.
• Tagged Vlan: 1—Packets from VLAN 1 are sent
out of this interface with a VLAN tag.
Tagged VLANs
This field is displayed when the port link type is
access or hybrid.
Packets from the specified VLANs are sent out of
this interface without a VLAN tag:
• Untagged Vlan: none—All packets are sent
out of this interface with a VLAN tag.
• Untagged Vlan: 1—Packets from VLAN 1 are
sent out of this interface without a VLAN tag.
Untagged VLANs
This field is displayed when the port link type is
access or hybrid.
Time when the reset counters interface command
was last used to clear the interface statistics.
Last clearing of counters
If the reset counters interface command has never
been used on the interface since the device startup,
this field displays Never.
Last 300 seconds input/output rate
Average input or output rate over the last 300
seconds.
Input/Output (total)
Statistics of all packets received or sent on the
interface.
Input/Output (normal)
Statistics of all normal packets received or sent on
the interface.
Line protocol state
Link layer state of the interface.
80
Field
Description
IP packet processing.
Disabled indicates that IP packets cannot be
processed.
Internet protocol processing
For an interface configured with an IP address, this
field changes to Internet Address is.
Brief information on interfaces in bridge mode
Brief information about Layer 2 interfaces.
Brief information on interfaces in route mode
Brief information about Layer 3 interfaces.
Link: ADM - administratively down; Stby - standby
Link status:
• ADM—The interface has been administratively
shut down. To recover its physical layer state, run
the undo shutdown command.
• Stby—The interface is operating as a backup
interface.
If the speed of an interface is automatically
negotiated, the speed attribute of the interface
includes the autonegotiation flag (the letter a in
parentheses).
Speed: (a) - auto
If an interface is configured to autonegotiate its
speed but the autonegotiation has not started, its
speed attribute is displayed as auto.
If the duplex mode of an interface is automatically
negotiated, the duplex mode attribute of the interface
includes the letter a in parentheses. H indicates the
half duplex mode. F indicates the full duplex mode.
Duplex: (a)/A - auto; H - half; F - full
If an interface is configured to autonegotiate its
duplex mode but the autonegotiation has not started,
its duplex mode attribute is displayed as A.
Type: A - access; T - trunk; H - hybrid
Link type options for Ethernet interfaces.
Protocol: (s) - spoofing
If the data link layer protocol state of an interface is
shown as UP, but its link is an on-demand link or not
present, its protocol attribute includes the spoofing
flag (an s in parentheses).
Interface
Abbreviated interface name.
Link
Physical link state of the interface.
Speed
Interface speed, in bps.
Protocol
Data link layer protocol state of an interface.
Cause
Cause of a DOWN physical link.
display lacp system-id
Use display lacp system-id to display the system ID of the local system.
Syntax
display lacp system-id
Views
Any view
81
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
You can use the lacp system-priority command to change the LACP priority of the local system.
You specify the LACP priority value in decimal format in the lacp system-priority command, but it is
displayed as a hexadecimal value by the display lacp system-id command.
Examples
# Display the local system ID.
<Sysname> display lacp system-id
Actor System ID: 0x8000, 0000-fc00-6504
Table 19 Command output
Field
Description
Actor System ID: 0x8000, 0000-fc00-6504
Local system ID, which contains the system LACP priority
(0x8000 in this sample output) and the system MAC address
(0000-FC00-6504 in this sample output).
Related commands
lacp system-priority
display link-aggregation capability
Use display link-aggregation capability to display the link aggregation capability for the device.
Syntax
display link-aggregation capability
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
This command is available in Release 2137 and later versions.
Examples
# Display the link aggregation capability for the device.
<Sysname> display link-aggregation capability
Default link aggregation capability:
Maximum groups: 1024
Maximum Selected ports per group: 16
82
Current link aggregation capability:
Maximum groups: 1024
Maximum Selected ports per group: 16
Link aggregation capability at the next reboot:
Maximum groups: 1024
Maximum Selected ports per group: 16
Supported link aggregation capability list:
1024*16
512*32
256*64
Table 20 Command output
Field
Description
Supported link aggregation capability list
Link aggregation capabilities supported by the device.
Each item in the list is in the format of maximum number
of aggregation groups*maximum number of Selected
ports per aggregation group.
display link-aggregation load-sharing mode
Use display link-aggregation load-sharing mode to display global or group-specific
link-aggregation load sharing modes.
Syntax
display link-aggregation load-sharing
route-aggregation } interface-number ] ]
mode
[
interface
[
{
bridge-aggregation
|
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
bridge-aggregation: Specifies Layer 2 aggregation interfaces.
route-aggregation: Specifies Layer 3 aggregation interfaces.
interface-number: Specifies an existing aggregate interface number.
Usage guidelines
If you do not specify the interface keyword, the command displays the global link-aggregation load
sharing modes.
If you specify the interface keyword, but do not specify any interface, the command displays all
group-specific load sharing modes.
If you specify the bridge-aggregation interface-number or route-aggregation interface-number
option, the command displays the load sharing mode of the specified aggregation group.
The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3
aggregate interfaces exist on the switch.
83
Examples
# Display the global link-aggregation load sharing modes.
<Sysname> display link-aggregation load-sharing mode
Link-Aggregation Load-Sharing Algorithm:
Default
Link-Aggregation Load-Sharing Mode:
Layer 2 traffic: destination-mac address
source-mac address
Layer 3 traffic: destination-ip address
source-ip address
# Display the link-aggregation load sharing modes of Layer 2 aggregation group 10.
<Sysname> display link-aggregation load-sharing mode interface bridge-aggregation 10
Bridge-Aggregation10 Load-Sharing Mode:
Layer 2 traffic: destination-mac address
source-mac address
Layer 3 traffic: destination-ip address
source-ip address
Table 21 Command output
Field
Description
Per-flow load sharing algorithm for Ethernet link aggregation.
Link-Aggregation Load-Sharing
Algorithm
By default, this field displays Default. If you have configured the
load sharing algorithm, this field displays the configured
algorithm.
Link-Aggregation Load-Sharing Mode
Global link-aggregation load sharing mode.
• By default, this field displays the packet type-based
link-aggregation load sharing mode.
• If you have configured the global link-aggregation load
sharing mode, this field displays the configured mode.
Bridge-Aggregation10 Load-Sharing
Mode
Link-aggregation load sharing mode of Layer 2 aggregation group
10.
Route-Aggregation10 Load-Sharing
Mode
Link-aggregation load sharing mode of Layer 3 aggregation group
10.
Layer 2 traffic: destination-mac
address, source-mac address
Default link-aggregation load sharing mode for Layer 2 traffic. In
this sample output, Layer 2 traffic is load shared based on source
and destination MAC addresses.
Layer 3 traffic: destination-ip address,
source-ip address
Default link-aggregation load sharing mode for Layer 3 traffic. In
this sample output, Layer 3 traffic is load shared based on source
and destination IP addresses.
display link-aggregation load-sharing path
Use display link-aggregation load-sharing path to display forwarding information for the specified
traffic flow.
Syntax
display
link-aggregation
load-sharing
path
interface { bridge-aggregation |
route-aggregation } interface-number ingress-port interface-type interface-number [ route ]
{ destination-ip ip-address | source-ip ip-address | destination-mac mac-address |
destination-port port-id | ethernet-type type-number | ip-protocol protocol-id | source-mac
mac-address | source-port port-id | vlan vlan-id }*
Views
Any view
84
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
bridge-aggregation: Specifies Layer 2 aggregate interfaces.
route-aggregation: Specifies Layer 3 aggregate interfaces.
interface-number: Specifies an existing aggregate interface by its number.
ingress-port interface-type interface-number: Specifies an ingress port by its type and number.
route: Displays forwarding information for Layer 3 traffic.
destination-ip ip-address: Specifies a destination IPv4 address.
source-ip ip-address: Specifies a source IPv4 address.
destination-mac mac-address: Specifies a destination MAC address in H-H-H format.
destination-port port-id: Specifies a destination port number in the range of 1 to 65535.
ethernet-type type-number: Specifies an Ethernet type code in the range of 1 to 65535.
ip-protocol protocol-id: Specifies an IP protocol by its ID in the range of 0 to 255.
source-mac mac-address: Specifies a source MAC address in H-H-H format.
source-port port-id: Specifies a source port number in the range of 1 to 65535.
vlan vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.
Usage guidelines
A parameter specified in the command might not be used for selecting the egress port. The Load
sharing parameters field displays the parameters that are used in egress port selection.
If an unspecified parameter is required for selecting the egress port, the default value of the
parameter is used. If the parameter does not have any default values, the parameter is set to 0.
Examples
# Display forwarding information for the specified traffic flow to be sent out of Layer 2 aggregate
interface Bridge-Aggregation 1.
<Sysname> display link-aggregation load-sharing path interface bridge-aggregation 1
ingress-port fortygige 1/0/1 destination-mac 0000-fc00-0001 source-mac 0000-fc00-0002
source-ip 10.100.0.2 destination-ip 10.100.0.1
Load sharing mode: destination-mac, source-mac, source-ip, destination-ip
Unspecified parameters are set to 0.
Load sharing parameters:
Ingress port: FortyGigE1/0/1
Destination MAC: 0000-fc00-0001
Source MAC: 0000-fc00-0002
Destination IP: 10.100.0.1
Source IP: 10.100.0.2
Egress port: FortyGigE1/0/3
85
Table 22 Command output
Field
Description
Load sharing mode:
Load sharing mode set for the aggregation group:
• destination-mac—Traffic is load shared based on destination
MAC addresses.
• source-mac—Traffic is load shared based on source MAC
addresses.
• destination-ip—Traffic is load shared based on destination IP
addresses.
• source-ip—Traffic is load shared based on source IP addresses.
• ip-protocol—Traffic is load shared based on IP protocol types.
• destination-port—Traffic is load shared based on destination
ports.
• source-port—Traffic is load shared based on source ports.
• ingress-port—Traffic is load shared based on ingress ports.
Load sharing parameters
Parameters that are used in egress port selection.
Egress port
Egress port of the specified traffic flow. If no egress port is found, this
field displays N/A.
display link-aggregation member-port
Use display link-aggregation member-port to display detailed link aggregation information for the
specified member ports.
Syntax
display link-aggregation member-port [ interface-list ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface-list: Specifies a list of link aggregation member ports, in the format interface-type
interface-number [ to interface-type interface-number ], where interface-type interface-number
specifies an interface by its type and number.
Usage guidelines
A member port in a static aggregation group cannot obtain information about the peer group. For
such member ports, the command displays the port number, port priority, and operational key of the
local end only.
Examples
# Display detailed link aggregation information for FortyGigE 1/0/1, which is a member port of a static
aggregation group.
<Sysname> display link-aggregation member-port fortygige 1/0/1
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
86
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
FortyGigE1/0/1:
Aggregate Interface: Bridge-Aggregation1
Port Number: 1
Port Priority: 32768
Oper-Key: 1
# Display detailed link aggregation information for FortyGigE 1/0/2, which is a member port of a
dynamic aggregation group.
<Sysname> display link-aggregation member-port fortygige 1/0/2
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
FortyGigE1/0/2:
Aggregate Interface: Bridge-Aggregation10
Local:
Port Number: 2
Port Priority: 32768
Oper-Key: 2
Flag: {ACDEF}
Remote:
System ID: 0x8000, 000f-e267-6c6a
Port Number: 26
Port Priority: 32768
Oper-Key: 2
Flag: {ACDEF}
Received LACP Packets: 5 packet(s)
Illegal: 0 packet(s)
Sent LACP Packets: 7 packet(s)
87
Table 23 Command output
Field
Description
Flags
LACP state flags. This field is one byte long, represented by ABCDEFGH from
the least significant bit to the most significant bit. The letter is present when its bit
is 1 and absent when its bit is 0.
• A—Indicates whether LACP is enabled. 1 indicates enabled, and 0 indicates
disabled.
• B—Indicates the LACP short or long timeout. 1 indicates short timeout, and 0
indicates long timeout.
• C—Indicates whether the sending system considers that the link is
aggregatable. 1 indicates yes, and 0 indicates no.
• D—Indicates whether the sending system considers that the link is
synchronized. 1 indicates yes, and 0 indicates no.
• E—Indicates whether the sending system considers that the incoming frames
are collected. 1 indicates yes, and 0 indicates no.
• F—Indicates whether the sending system considers that the outgoing frames
are distributed. 1 indicates yes, and 0 indicates no.
• G—Indicates whether the sending system receives frames in the default
state. 1 indicates yes, and 0 indicates no.
• H—Indicates whether the sending system receives frames in the expired
state. 1 indicates yes, and 0 indicates no.
Aggregate Interface
Aggregate interface to which the member port belongs.
Local
Information about the local end.
Oper-key
Operational key.
Flag
LACP protocol state flag.
Remote
Information about the remote end.
System ID
Remote end system ID, containing the system LACP priority and the system MAC
address.
Received LACP
Packets
Total number of LACP packets received.
Illegal
Total number of illegal packets.
Sent LACP Packets
Total number of LACP packets sent.
display link-aggregation summary
Use display link-aggregation summary to display the summary information for all aggregation
groups.
Syntax
display link-aggregation summary
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
88
Usage guidelines
Static link aggregation groups cannot obtain information about the peer groups. As a result, the
Partner ID field displays none for a static link aggregation group.
Examples
# Display the summary information for all aggregation groups.
<Sysname> display link-aggregation summary
Aggregate Interface Type:
BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 000f-e267-6c6a
AGG
AGG
Interface
Mode
Partner ID
Selected
Unselected
Individual
Share
Ports
Ports
Ports
Type
------------------------------------------------------------------------------BAGG1
S
none
1
0
0
Shar
BAGG10
D
0x8000, 000f-e267-57ad
2
0
0
Shar
Table 24 Command output
Field
Description
Aggregate Interface Type
BAGG indicates Layer 2 aggregate interface.
Aggregation Mode
Aggregation group type:
• S—Static link aggregation.
• D—Dynamic aggregation.
Loadsharing Type
Load-sharing type:
• Shar—Load sharing.
• NonS—Non-load sharing.
Actor System ID
Local system ID, which contains the system LACP priority and the system
MAC address.
AGG Interface
Type and number of the aggregate interface.
AGG Mode
Aggregation group type.
Partner ID
System ID of the partner, which contains the system LACP priority and the
system MAC address.
Selected Ports
Total number of Selected ports.
Unselected Ports
Total number of Unselected ports.
Individual Ports
Total number of Individual ports.
Share Type
Load-sharing type.
display link-aggregation verbose
Use display link-aggregation verbose to display detailed information about the aggregation
groups that correspond to the aggregate interfaces.
Syntax
display link-aggregation
[ interface-number ] ]
verbose
[
{
89
bridge-aggregation
|
route-aggregation
}
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
bridge-aggregation: Specifies Layer 2 aggregate interfaces.
route-aggregation: Specifies Layer 3 aggregate interfaces.
interface-number: Specifies an existing aggregate interface by its number.
Usage guidelines
If you specify only the bridge-aggregation or route-aggregation keyword, the command displays
information about all Layer 2 or Layer 3 aggregation groups.
If you do not specify the bridge-aggregation and route-aggregation keywords, the command
displays information about all aggregation groups.
The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3
aggregate interfaces exist on the switch.
Examples
# Display detailed information about Layer 2 aggregation group 10, which is a dynamic aggregation
group.
<Sysname> display link-aggregation verbose bridge-aggregation 10
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected, I -- Individual
Flags:
A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Aggregate Interface: Bridge-Aggregation10
Aggregation Mode: Dynamic
Loadsharing Type: Shar
System ID: 0x8000, 000f-e267-6c6a
Local:
Port
Status
Priority Oper-Key
Flag
-------------------------------------------------------------------------------FGE1/0/1
S
32768
2
{ACDEF}
FGE1/0/2
S
32768
2
{ACDEF}
Remote:
Actor
Partner Priority Oper-Key
SystemID
Flag
-------------------------------------------------------------------------------FGE1/0/1
1
32768
2
0x8000, 000f-e267-57ad {ACDEF}
FGE1/0/2
2
32768
2
0x8000, 000f-e267-57ad {ACDEF}
# Display detailed information about Layer 2 aggregation group 20, which is a static aggregation
group.
<Sysname> display link-aggregation verbose bridge-aggregation 20
90
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected, I -- Individual
Flags:
A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Aggregate Interface: Bridge-Aggregation20
Aggregation Mode: Static
Loadsharing Type: Shar
Port
Status
Priority Oper-Key
-------------------------------------------------------------------------------FGE1/0/1
U
32768
1
FGE1/0/2
U
32768
1
FGE1/0/3
U
32768
1
Table 25 Command output
Field
Description
Loadsharing Type
Load-sharing type:
• Shar—Load sharing.
• NonS—Non-load sharing.
Port Status
Port state: Selected, Unselected, or Individual.
Flags
LACP state flags. This field is one byte long, represented by ABCDEFGH from
the least significant bit to the most significant bit. The letter is present when its bit
is 1 and absent when its bit is 0.
• A—Indicates whether LACP is enabled. 1 indicates enabled, and 0 indicates
disabled.
• B—Indicates the LACP short or long timeout. 1 indicates short timeout, and 0
indicates long timeout.
• C—Indicates whether the sending system considers that the link is
aggregatable. 1 indicates yes, and 0 indicates no.
• D—Indicates whether the sending system considers that the link is
synchronized. 1 indicates yes, and 0 indicates no.
• E—Indicates whether the sending system considers that the incoming frames
are collected. 1 indicates yes, and 0 indicates no.
• F—Indicates whether the sending system considers that the outgoing frames
are distributed. 1 indicates yes, and 0 indicates no.
• G—Indicates whether the sending system receives frames in the default
state. 1 indicates yes, and 0 indicates no.
• H—Indicates whether the sending system receives frames in the expired
state. 1 indicates yes, and 0 indicates no.
Aggregate Interface
Name of the aggregate interface.
Aggregation Mode
Mode of the aggregation group:
• Static for static aggregation.
• Dynamic for dynamic aggregation.
System ID
Local system ID, containing the system LACP priority and the system MAC
address.
91
Field
Local
Description
Information about the local end:
• Port—Port type and number.
• Status—Selected or Unselected state of the port.
• Priority—Port priority.
• Oper-Key—Operational key.
• Flag—LACP state flag.
NOTE:
For static aggregation groups, only local information (without the Flag field) is
displayed.
Remote
Information about the remote end:
• Actor—Port type and number of the local end.
• Partner—Port index of the remote end.
• Priority—Port priority of the remote end.
• Oper-Key—Operational key of the remote port.
• System ID—System ID of the remote end.
• Flag—LACP state flag of the remote end.
interface bridge-aggregation
Use interface bridge-aggregation to create a Layer 2 aggregate interface and enter the Layer 2
aggregate interface view.
Use undo interface bridge-aggregation to remove a Layer 2 aggregate interface.
Syntax
interface bridge-aggregation interface-number
undo interface bridge-aggregation interface-number
Default
No Layer 2 aggregate interface is created.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-number: Specifies a Layer 2 aggregate interface number in the range of 1 to 1024.
Usage guidelines
When you create a Layer 2 aggregate interface, the system automatically creates a Layer 2
aggregation group with the same number. The aggregation group operates in static aggregation
mode by default.
Deleting a Layer 2 aggregate interface also deletes the Layer 2 aggregation group. At the same time,
the member ports of the aggregation group, if any, leave the aggregation group.
Examples
# Create Layer 2 aggregate interface Bridge-Aggregation 1, and enter its view.
<Sysname> system-view
92
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1]
interface route-aggregation
Use interface route-aggregation to create a Layer 3 aggregate interface or subinterface and enter
the Layer 3 aggregate interface or subinterface view.
Use undo interface route-aggregation to delete a Layer 3 aggregate interface or subinterface.
Syntax
interface route-aggregation { interface-number | interface-number.subnumber }
undo interface route-aggregation { interface-number | interface-number.subnumber }
Default
No Layer 3 aggregate interface or subinterface is created.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-number: Specifies a Layer 3 aggregate interface by its number in the range of 1 to 1024.
interface-number.subnumber: Specifies a subinterface of a Layer 3 aggregate interface. The
interface-number argument specifies the main interface number. The subnumber argument specifies
the subinterface number and is separated from the main interface number by a dot (.). The value
range for the subnumber argument is 1 to 4094.
Usage guidelines
•
Before creating a Layer 3 aggregate interface or subinterface, use the reserve-vlan-interface
command to reserve enough VLAN interface resources. If not enough VLAN interface
resources are reserved, the system fails to create the Layer 3 aggregate interface or
subinterface.
Before creating a Layer 3 aggregate interface, reserve a VLAN interface resource for each of
the following interfaces:
{
Layer 3 aggregate interface.
{
Member ports in the corresponding Layer 3 aggregation group.
For example, before creating a Layer 3 aggregation group containing three member ports,
reserve four VLAN interface resources. The Layer 3 aggregate interface uses one VLAN
interface resource and each of the member ports uses one VLAN interface resource.
Before creating Layer 3 aggregate subinterfaces on a Layer 3 aggregate interface, reserve a
VLAN interface resource for each of the following interface:
{
Layer 3 aggregate interface.
{
Member ports in the corresponding Layer 3 aggregation group.
{
Layer 3 aggregate subinterfaces.
For example, before creating four Layer 3 aggregate subinterfaces on a Layer 3 aggregate
interface whose corresponding aggregation group has two member ports, reserve seven VLAN
interface resources. The aggregate interface uses one VLAN interface resource. Each of the
member ports and aggregate subinterfaces uses one VLAN interface resource.
93
Before creating a Layer 3 aggregate subinterface, do not reserve a resource for the VLAN
interface whose interface number matches the subinterface number. After you reserve a VLAN
interface resource, do not create a Layer 3 aggregate subinterface whose subinterface number
is the VLAN interface number. A Layer 3 aggregate subinterface uses the VLAN interface
resource in processing tagged packets whose VLAN ID matches the subinterface number.
To reserve global-type VLAN interface resources, specify the global keyword in the
reserve-vlan-interface command. To reserve local-type VLAN interface resources, do not
specify the global keyword. Reserved VLAN interface resources are of the local type in this
chapter.
For more information about reserving VLAN interface resources, see VLAN configuration in
Layer 2—LAN Switching Configuration Guide.
•
When you create a Layer 3 aggregate interface, the system automatically creates a Layer 3
static aggregation group numbered the same.
•
Deleting an aggregate interface also deletes its aggregation group. At the same time, the
member ports of the aggregation group, if any, leave the aggregation group.
•
Deleting a Layer 3 aggregate subinterface does not affect its main interface and the
corresponding Layer 3 aggregation group.
Examples
# Create Layer 3 aggregate interface Route-Aggregation 1 and enter its view.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000
[Sysname]interface route-aggregation 1
[Sysname-Route-Aggregation1]
# Create Layer 3 aggregate subinterface Route-Aggregation 1.1 and enter its view.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3001
[Sysname] interface route-aggregation 1.1
[Sysname-Route-Aggregation1.1]
lacp edge-port
Use lacp edge-port to configure an aggregate interface as an edge aggregate interface.
Use undo lacp edge-port to restore the default.
Syntax
lacp edge-port
undo lacp edge-port
Default
An aggregate interface does not operate as an edge aggregate interface.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
94
Usage guidelines
Use this command on the aggregate interface that connects the device to a server if dynamic link
aggregation is configured only on the device. This feature enables all member ports of the
aggregation group to forward traffic to improve link reliability.
This command takes effect only on an aggregate interface corresponding to a dynamic aggregation
group.
Examples
# Configure Layer 2 aggregate interface Bridge-aggregation 1 as an edge aggregate interface.
<Sysname> System-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] lacp edge-port
lacp period short
Use lacp period short to set the short LACP timeout interval (3 seconds) on an interface.
Use undo lacp period to restore the default.
Syntax
lacp period short
undo lacp period
Default
The LACP timeout interval is the long timeout interval (90 seconds) on an interface.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Set the short LACP timeout interval (3 seconds) on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lacp period short
lacp system-priority
Use lacp system-priority to set the system LACP priority.
Use undo lacp system-priority to restore the default.
Syntax
lacp system-priority system-priority
undo lacp system-priority
Default
The system LACP priority is 32768.
95
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
system-priority: Specifies the system LACP priority in the range of 0 to 65535. The smaller the value,
the higher the system LACP priority.
Examples
# Set the system LACP priority to 64.
<Sysname> system-view
[Sysname] lacp system-priority 64
Related commands
link-aggregation port-priority
link-aggregation bfd ipv4
Use link-aggregation bfd ipv4 to enable BFD for an aggregation group.
Use undo link-aggregation bfd to restore the default.
Syntax
link-aggregation bfd ipv4 source ip-address destination ip-address
undo link-aggregation bfd
Default
BFD is disabled for an aggregation group.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
source ip-address: Specifies the source IP address of BFD sessions.
destination ip-address: Specifies the destination IP address of BFD sessions.
Usage guidelines
For BFD to take effect on an aggregation group, configure BFD on both ends of the aggregate link.
Make sure the source and destination IP addresses are consistent at the two ends of an aggregate
link. For example, if you execute link-aggregation bfd ipv4 source 1.1.1.1 destination 2.2.2.2 on
the local end, execute link-aggregation bfd ipv4 source 2.2.2.2 destination 1.1.1.1 on the peer
end.
The BFD parameters configured on an aggregate interface take effect on all BFD sessions in the
aggregation group. For more information about configuring BFD parameters, see High Availability
Configuration Guide.
96
As a best practice, do not configure other protocols to collaborate with BFD on a BFD-enabled
aggregate interface.
Examples
# Enable BFD for Layer 2 aggregation group 1, and specify the source and destination IP addresses
as 1.1.1.1 and 2.2.2.2 for BFD sessions.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation bfd ipv4 source 1.1.1.1 destination
2.2.2.2
link-aggregation capability
Use link-aggregation capability to configure the link aggregation capability for the device.
Use undo link-aggregation capability to restore the default.
Syntax
link-aggregation
capability
max-selected-port-number
max-group
max-group-number
max-selected-port
undo link-aggregation capability
Default
The device supports a maximum of 1024 aggregation groups, and an aggregation group can have a
maximum of 16 Selected ports.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
max-group max-group-number: Specifies the maximum number of aggregation groups that the
device supports. The value for the max-group-number argument must be 256, 512, or 1024.
max-selected-port max-selected-port-number: Specifies the maximum number of Selected ports
per aggregation group. The value for the max-selected-port-number argument must be 16, 32, or 64.
Usage guidelines
This command is available in Release 2137 and later versions.
After you execute this command, save the configuration and reboot the device for the configuration
to take effect. Before rebooting the device, make sure you know the possible impact on the network.
This command fails if the number of existing aggregation groups exceeds the configured maximum
number.
If you create aggregation groups after executing the link-aggregation capability command and the
number of aggregation groups exceeds the configured number, some aggregation groups are
deleted at the next reboot.
The maximum number of Selected ports allowed in an aggregation group is limited by one of the
following values, whichever value is smaller:
•
Maximum number set by using the link-aggregation selected-port maximum command.
•
Maximum number of Selected ports allowed by the link aggregation capability.
97
If you execute this command multiple times, the most recent configuration takes effect at the next
reboot.
Examples
# Configure the device to support a maximum of 1024 aggregation groups and a maximum of 16
Selected ports per aggregation group.
<Sysname> system-view
[Sysname] link-aggregation capability max-group 1024 max-selected-port 16
The configuration will take effect at the next reboot. Continue? [Y/N]:y
Please save the configuration, and reboot the device.
link-aggregation global load-sharing mode
Use link-aggregation global load-sharing mode to set the global link-aggregation load sharing
mode.
Use undo link-aggregation global load-sharing mode to restore the default.
Syntax
link-aggregation global load-sharing mode
{ destination-ip | destination-mac
destination-port | ingress-port | ip-protocol | source-ip | source-mac | source-port } *
|
undo link-aggregation global load-sharing mode
Default
The system automatically chooses link-aggregation load sharing mode based on packet types.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
destination-ip: Load shares traffic based on destination IP addresses.
destination-mac: Load shares traffic based on destination MAC addresses.
destination-port: Load shares traffic based on destination ports.
ingress-port: Load shares traffic based on ingress ports.
ip-protocol: Load shares traffic based on IP protocol types.
source-ip: Load shares traffic based on source IP addresses.
source-mac: Load shares traffic based on source MAC addresses.
source-port: Load shares traffic based on source ports.
Usage guidelines
The load sharing mode that you configure overwrites the previous mode.
If you configure both link aggregation load sharing and per-flow load sharing over equal-cost routes,
the latest configuration takes effect. Per-flow load sharing over equal-cost routes identifies a flow
based on five tuples (source IP address, destination IP address, source port number, destination port
number, and IP protocol number). For information about configuring per-flow load sharing over
equal-cost routes, see Layer 3—IP Services Configuration Guide.
If an unsupported load sharing mode is configured, an error prompt appears.
98
NOTE:
If you set the global load-sharing mode to source MAC address, the setting takes effect only on
Layer 2 aggregation groups. A Layer 3 aggregation group forwards traffic by using one of its
Selected ports rather than load shares traffic. When the Selected port fails, traffic is switched to
another Selected port in the aggregation group.
Examples
# Set the global load sharing mode to load share packets based on destination MAC addresses.
<Sysname> system-view
[Sysname] link-aggregation global load-sharing mode destination-mac
link-aggregation ignore vlan
Use link-aggregation ignore vlan to configure a Layer 2 aggregate interface to ignore the specified
VLANs.
Use undo link-aggregation ignore vlan to restore the default.
Syntax
link-aggregation ignore vlan vlan-id-list
undo link-aggregation ignore vlan vlan-id-list
Default
A Layer 2 aggregate interface does not ignore any VLANs.
Views
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id-list: Specifies a list of VLANs to be ignored in the format of vlan-id-list = { vlan-id1 [ to
vlan-id2 ] }&<1-10>, where vlan-id1 and vlan-id2 are both in the range of 1 to 4094, vlan-id2 cannot
be smaller than vlan-id1, and &<1-10> indicates that you can specify up to 10 vlan-id1 [ to vlan-id2 ]
parameters.
Usage guidelines
With this command configured, a Layer 2 aggregate interface ignores the permitted VLAN and VLAN
tagging mode configuration of the specified VLANs when determining Selected ports. Inconsistent
configuration about these VLANs does not affect the member ports that will become Selected ports.
Examples
# Configure Layer 2 aggregate interface bridge-aggregation 1 to ignore VLAN 50.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation ignore vlan 50
link-aggregation lacp traffic-redirect-notification enable
Use link-aggregation lacp traffic-redirect-notification enable to enable link-aggregation traffic
redirection.
99
Use undo link-aggregation lacp traffic-redirect-notification enable to disable link-aggregation
traffic redirection.
Syntax
link-aggregation lacp traffic-redirect-notification enable
undo link-aggregation lacp traffic-redirect-notification enable
Default
Link-aggregation traffic redirection is disabled.
Views
System view, Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command is available in Release 2137 and later versions.
When you restart a card that contains Selected ports, this feature redirects traffic of the card to other
cards. Zero packet loss is guaranteed for known unicast traffic, but not for unknown unicast traffic. (In
standalone mode.)
When you restart an IRF member device that contains Selected ports, this feature redirects traffic of
the IRF member device to other IRF member devices. When you restart a card that contains
Selected ports, this feature redirects traffic of the card to other cards. Zero packet loss is guaranteed
for known unicast traffic, but not for unknown unicast traffic. (In IRF mode.)
Link-aggregation traffic redirection applies only to dynamic link aggregation groups.
To prevent traffic interruption, enable link-aggregation traffic redirection on devices at both ends of
the aggregate link.
Do not enable both spanning tree and link-aggregation traffic redirection on a device. Otherwise,
light packet loss might occur when a card or the device reboots.
Link-aggregation traffic redirection cannot operate correctly on an edge aggregate interface.
Global link-aggregation traffic redirection settings take effect on all aggregation groups. A link
aggregation group preferentially uses the group-specific link-aggregation traffic redirection settings.
If group-specific link-aggregation traffic redirection is not configured, the group uses the global
link-aggregation traffic redirection settings.
As a best practice, enable link-aggregation traffic redirection on aggregate interfaces. If you enable
this feature globally, communication with a third-party peer device might be affected if the peer is not
compatible with this feature.
Examples
# Enable link-aggregation traffic redirection.
<Sysname> system-view
[Sysname] link-aggregation lacp traffic-redirect-notification enable
link-aggregation load-sharing mode
Use link-aggregation load-sharing mode to configure an aggregation group to load share traffic
on a per-packet basis.
Use undo link-aggregation load-sharing mode to restore the default.
100
Syntax
link-aggregation load-sharing mode flexible
undo link-aggregation load-sharing mode
Default
The load sharing mode of a group is the same as the global load sharing mode.
Views
Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
flexible: Load shares traffic on a per-packet basis.
Examples
# Configure Layer 2 aggregation group 1 to load share traffic on a per-packet basis.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation load-sharing mode flexible
Related commands
link-aggregation global load-sharing mode
link-aggregation load-sharing mode local-first
Use link-aggregation load-sharing mode local-first to enable local-first load sharing for link
aggregation.
Use undo link-aggregation load-sharing mode local-first to disable local-first load sharing for link
aggregation.
Syntax
link-aggregation load-sharing mode local-first
undo link-aggregation load-sharing mode local-first
Default
Local-first load sharing is enabled for link aggregation.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
You can configure this feature only when the system operates in the IRF mode.
When you disable local-first load sharing for link aggregation, the packets will be load-shared among
all Selected ports of the aggregate interface on all IRF member devices.
Local-first load sharing for link aggregation takes effect on only known unicast packets.
101
Examples
# Disable local-first load sharing for link aggregation.
<Sysname> system-view
[Sysname] undo link-aggregation load-sharing mode local-first
link-aggregation mode
Use link-aggregation mode dynamic to configure an aggregation group to operate in dynamic
aggregation mode and enable LACP.
Use undo link-aggregation mode to restore the default.
Syntax
link-aggregation mode dynamic
undo link-aggregation mode
Default
An aggregation group operates in static aggregation mode.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Configure Layer 2 aggregation group 1 to operate in dynamic aggregation mode.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation mode dynamic
link-aggregation port-priority
Use link-aggregation port-priority to set the port priority of an interface.
Use undo link-aggregation port-priority to restore the default.
Syntax
link-aggregation port-priority port-priority
undo link-aggregation port-priority
Default
The port priority of an interface is 32768.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
102
Parameters
port-priority: Specifies the port priority in the range of 0 to 65535. The smaller the value, the higher
the port priority.
Examples
# Set the port priority to 64 for Layer 2 Ethernet interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] link-aggregation port-priority 64
Related commands
lacp system-priority
link-aggregation selected-port maximum
Use link-aggregation selected-port maximum to set the maximum number of Selected ports
allowed in an aggregation group.
Use undo link-aggregation selected-port maximum to restore the default.
Syntax
link-aggregation selected-port maximum number
undo link-aggregation selected-port maximum
Default
The maximum number of Selected ports allowed in an aggregation group is 16.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
number: Specifies the maximum number of Selected ports allowed in an aggregation group. The
value range is 1 to 64.
Usage guidelines
Executing this command might cause some of the Selected ports in an aggregation group to become
unselected.
The maximum numbers of Selected ports allowed in the aggregation groups of the local and peer
ends must be consistent.
The maximum number of Selected ports allowed in an aggregation group is limited by either the
configured maximum number or hardware capability, whichever value is smaller.
You can configure backup between two ports by assigning two ports to an aggregation group and
configuring the maximum number of Selected ports allowed in the aggregation group as 1. In this
way, only one Selected port is allowed in the aggregation group at any point in time, while the
Unselected port serves as a backup port.
Examples
# Set the maximum number of Selected ports to 5 for Layer 2 aggregation group 1.
<Sysname> system-view
103
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation selected-port maximum 5
Related commands
•
link-aggregation irf-enhanced
•
link-aggregation selected-port minimum
link-aggregation selected-port minimum
Use link-aggregation selected-port minimum to set the minimum number of Selected ports in the
aggregation group.
Use undo link-aggregation selected-port minimum to restore the default.
Syntax
link-aggregation selected-port minimum number
undo link-aggregation selected-port minimum
Default
The minimum number of Selected ports in an aggregation group is not specified.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
number: Specifies the minimum number of Selected ports in an aggregation group required to bring
up the aggregate interface. The value range is 1 to 64.
Usage guidelines
Executing this command might cause all member ports in the aggregation group to become
unselected.
The minimum number of Selected ports allowed in the aggregation groups of the local and peer ends
must be consistent.
Examples
# Set the minimum number of Selected ports to 3 for Layer 2 aggregation group 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation selected-port minimum 3
Related commands
link-aggregation selected-port maximum
mtu
Use mtu to set the MTU for a Layer 3 aggregate interface or subinterface.
Use undo mtu to restore the default.
104
Syntax
mtu size
undo mtu
Default
The MTU for Layer 3 aggregate interfaces and subinterfaces is 1500 bytes.
Views
Layer 3 aggregate interface view, Layer 3 aggregate subinterface view
Predefined user roles
network-admin
mdc-admin
Parameters
size: Specifies the MTU in bytes. In versions earlier than Release 2138, the value range for the size
argument is 46 to 1560. In Release 2138 and later versions, the value range for the size argument is
46 to 9008.
Usage guidelines
The MTU configured for an interface takes effect only on packets that are sent to the CPU for
software forwarding, including packets sent from or destined for this interface.
If an interface is configured with both the mtu and ip mtu commands, the device fragments a packet
based on the MTU set by using the ip mtu command. To avoid fragmentation, set an appropriate
MTU for an interface. For information about the ip mtu command, see Layer 3—IP Services
Command Reference.
Examples
# Set the MTU to 1492 bytes for Layer 3 aggregate interface Route-Aggregation 1.
<Sysname> system-view
[Sysname] interface route-aggregation 1
[Sysname-Route-Aggregation1] mtu 1492
port link-aggregation group
Use port link-aggregation group to assign an Ethernet interface to an aggregation group.
Use undo port link-aggregation group to remove an Ethernet interface from the aggregation
group to which it belongs.
Syntax
port link-aggregation group number
undo port link-aggregation group
Default
An Ethernet interface does not belong to any aggregation group.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
105
Parameters
number: Specifies an aggregation group by its aggregate interface number. The value range is 1 to
1024.
Usage guidelines
A Layer 2 Ethernet interface can be assigned to a Layer 2 aggregation group only. A Layer 3 Ethernet
interface can be assigned to a Layer 3 aggregation group only.
An Ethernet interface can belong to only one aggregation group.
Examples
# Assign Layer 2 Ethernet interface FortyGigE 1/0/1 to Layer 2 aggregation group 1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-aggregation group 1
reset counters interface
Use reset counters interface to clear statistics for the specified aggregate interfaces.
Syntax
reset counters interface [ { bridge-aggregation | route-aggregation } [ interface-number ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
bridge-aggregation: Specifies Layer 2 aggregate interfaces.
route-aggregation: Specifies Layer 3 aggregate interfaces.
interface-number: Specifies an existing aggregate interface number.
Usage guidelines
Use this command to clear history statistics before you collect traffic statistics for a time period.
If you do not specify any option, the command clears statistics for all interfaces in the system.
If you specify only the bridge-aggregation or route-aggregation keyword, the command clears
statistics for all Layer 2 or Layer 3 aggregate interfaces.
If you specify the bridge-aggregation interface-number or route-aggregation interface-number
option, the command clears statistics for the specified Layer 2 or Layer 3 aggregate interface.
The bridge-aggregation or route-aggregation keyword is available only when Layer 2 or Layer 3
aggregate interfaces exist on the switch.
Examples
# Clear the statistics for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> reset counters interface bridge-aggregation 1
reset lacp statistics
Use reset lacp statistics to clear LACP statistics for the specified link aggregation member ports.
106
Syntax
reset lacp statistics [ interface interface-list ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-list: Specifies a list of link aggregation member ports, in the format interface-type
interface-number [ to interface-type interface-number ]. interface-type interface-number specifies an
interface by its type and number. If you do not specify any member ports, the command clears LACP
statistics for all member ports.
Examples
# Clear LACP statistics for all link aggregation member ports.
<Sysname> reset lacp statistics
Related commands
display link-aggregation member-port
shutdown
Use shutdown to shut down an aggregate interface.
Use undo shutdown to bring up an aggregate interface.
Syntax
shutdown
undo shutdown
Default
Aggregate interfaces are up.
Views
Layer 2 aggregate interface view, Layer 3 aggregate interface view, Layer 3 aggregate subinterface
view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Shutting down or bringing up a Layer 3 aggregate interface shuts down or brings up its subinterfaces.
Shutting down or bringing up a Layer 3 aggregate subinterface does not affect its main interface.
Examples
# Bring up Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] undo shutdown
107
Port isolation commands
display port-isolate group
Use display port-isolate group to display port isolation group information.
Syntax
display port-isolate group [ group-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
group-number: Specifies an isolation group by its number in the range of 1 to 8.
Examples
# Display all isolation groups.
<Sysname> display port-isolate group
Port isolation group information:
Group ID: 1
Group members:
FortyGigE1/0/1
# Display information about isolation group 1.
<Sysname> display port-isolate group 1
Port isolation group information:
Group ID: 1
Group members:
FortyGigE1/0/1
Table 26 Command output
Field
Description
Group ID
Isolation group number.
Group members
Isolated ports in the isolation group.
Related commands
port-isolate enable
port-isolate enable
Use port-isolate enable to assign a port to an isolation group.
108
Use undo port-isolate enable to remove a port from an isolation group.
Syntax
port-isolate enable group group-number
undo port-isolate enable
Default
No ports are assigned to an isolation group.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
group group-number: Specifies an isolation group by its number in the range of 1 to 8. For this
switch series, you can assign ports to only isolation group 1.
Usage guidelines
The configuration in Layer 2 Ethernet interface view applies only to the interface.
The configuration in Layer 2 aggregate interface view applies to the Layer 2 aggregate interface and
its aggregation member ports. If the device fails to apply the configuration to the aggregate interface,
it does not assign any aggregation member port to the isolation group. If the failure occurs on an
aggregation member port, the device skips the port and continues to assign other aggregation
member ports to the isolation group.
To assign ports to the specified isolation group, make sure the isolation group already exists.
Examples
# Assign ports FortyGigE 1/0/1 and FortyGigE 1/0/2 to isolation group 1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port-isolate enable group 1
[Sysname-FortyGigE1/0/1] quit
[Sysname] interface fortygige 1/0/2
[Sysname-FortyGigE1/0/2] port-isolate enable group 1
Related commands
display port-isolate group
port-isolate group
Use port-isolate group to create an isolation group.
Use undo port-isolate group to delete isolation groups.
Syntax
port-isolate group group-number
undo port-isolate group { group-number | all }
Default
No isolation group exists.
109
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
group-number: Specifies an isolation group by its number in the range of 1 to 8. For this switch series,
only the isolation group numbered 1 is valid.
all: Deletes all isolation groups.
Usage guidelines
If you execute this command multiple times, the most recent configuration takes effect.
Examples
# Create isolation group 1.
<Sysname> system-view
[Sysname] port-isolate group 1
110
Spanning tree commands
active region-configuration
Use active region-configuration to activate your MST region configuration.
Syntax
active region-configuration
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you configure MST region parameters, MSTP launches a new spanning tree calculation
process that might cause network topology instability. This is most likely to occur when you configure
the VLAN-to-instance mapping table. The launch occurs after the MST region parameters are
activated with the active region-configuration command or you enable the spanning tree feature
with the stp global enable command.
As a best practice, use the check region-configuration command to determine whether the MST
region configurations to be activated are correct. Run this command only when they are correct.
Examples
# Map VLAN 2 to MSTI 1 and manually activate the MST region configuration.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] instance 1 vlan 2
[Sysname-mst-region] active region-configuration
Related commands
•
check region-configuration
•
instance
•
region-name
•
revision-level
•
stp global enable
•
vlan-mapping modulo
check region-configuration
Use check region-configuration to display MST region pre-configuration information, including the
region name, revision level, and VLAN-to-instance mapping settings.
Syntax
check region-configuration
Views
MST region view
111
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Two or more spanning tree devices belong to the same MST region only if they are configured with
the same format selector (0 by default and not configurable), MST region name, and MST region
revision level, have the same VLAN-to-instance mapping entries in the MST region, and are
connected through a physical link.
As a best practice, use this command to determine whether the MST region configurations to be
activated are correct. Activate them only when they are correct.
Examples
# Display MST region pre-configurations.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] check region-configuration
Admin Configuration
Format selector
: 0
Region name
: 001122334400
Revision level
: 0
Configuration digest : 0x3ab68794d602fdf43b21c0b37ac3bca8
Instance
VLANs Mapped
0
1, 3 to 4094
15
2
Table 27 Command output
Field
Description
Format selector
Format selector of the MST region, which is 0 (not configurable).
Region name
MST region name.
Revision level
Revision level of the MST region.
Instance VLANs Mapped
VLAN-to-instance mappings in the MST region.
Related commands
•
active region-configuration
•
instance
•
region-name
•
revision-level
•
vlan-mapping modulo
display stp
Use display stp to display the spanning tree status and statistics information. Based on the
information, you can analyze and maintain the network topology or determine whether the spanning
tree is working correctly.
112
Syntax
In standalone mode:
display stp [ instance instance-list ] [ interface interface-list | slot slot-number ] [ brief ]
In IRF mode:
display stp [ instance instance-list ] [ interface interface-list | chassis chassis-number slot
slot-number ] [ brief ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
instance instance-list: Displays the status and statistics information of the MSTIs that are specified
by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where
&<1-10> indicates that you can specify up to 10 instances or instance ranges. The value range for
the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
interface interface-list: Displays the spanning tree status and statistics on the ports that are
specified by a port list, in the format of interface-list = { interface-type interface-number [ to
interface-type interface-number ] }&<1-10>, where &<1-10> indicates that you can specify up to 10
ports or port ranges.
brief: Displays brief spanning tree status and statistics. If this keyword is not specified, the command
displays the detailed spanning tree status and statistics.
slot slot-number: Displays the spanning tree status and statistics on the specified card. slot-number
represents the number of the slot that houses the card. If this option is not specified, this command
displays the spanning tree status and statistics on all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Displays the spanning tree status and statistics on the
specified card of the specified IRF member device. The chassis-number argument represents the ID
of the IRF member device. The slot-number argument represents the number of the slot that houses
the card. If this option is not specified, this command displays the spanning tree status and statistics
on all cards of all member devices in the IRF fabric. (In IRF mode.)
Usage guidelines
In STP or RSTP mode:
•
If you do not specify any port, this command displays the spanning tree information for all ports.
The displayed information is sorted by port name.
•
If you specify a port list, this command displays the spanning tree information for the specified
ports. The displayed information is sorted by port name.
In MSTP mode:
•
If you do not specify any MSTI or port, this command displays the spanning tree information of
all MSTIs on all ports. The displayed information is sorted by MSTI ID and by port name in each
MSTI.
•
If you specify an MSTI but not a port, this command displays the spanning tree information on
all ports in that MSTI. The displayed information is sorted by port name.
113
•
If you specify some ports but not an MSTI, this command displays the spanning tree information
of all MSTIs on the specified ports. The displayed information is sorted by MSTI ID and by port
name in each MSTI.
•
If you specify both an MSTI ID and a port list, this command displays the spanning tree
information on the specified ports in the specified MSTI. The displayed information is sorted by
port name.
Examples
# In MSTP mode, display the brief spanning tree status and statistics of MSTI 0 on ports FortyGigE
1/0/1 through FortyGigE 1/0/4.
<Sysname> display stp instance 0 interface fortygige 1/0/1 to fortygige 1/0/4 brief
MSTID
Port
Role
STP State
Protection
0
FortyGigE1/0/1
ALTE
DISCARDING
LOOP
0
FortyGigE1/0/2
DESI
FORWARDING
NONE
0
FortyGigE1/0/3
DESI
FORWARDING
NONE
0
FortyGigE1/0/4
DESI
FORWARDING
NONE
Table 28 Command output
Field
Description
MSTID
MSTI ID in the MST region.
Port
Port name, corresponding to each MSTI.
Role
Port role:
• ALTE—The port is an alternate port.
• BACK—The port is a backup port.
• ROOT—The port is a root port.
• DESI—The port is a designated port.
• MAST—The port is a master port.
• DISA—The port is disabled.
STP State
Spanning tree status on the port:
• FORWARDING—The port can receive and send BPDUs and also forward user
traffic.
• DISCARDING—The port can receive and send BPDUs but cannot forward user
traffic.
• LEARNING—The port is in a transitional state. It can receive and send BPDUs
but cannot forward user traffic.
Protection
Protection type on the port:
• ROOT—Root guard.
• LOOP—Loop guard.
• BPDU—BPDU guard.
• NONE—No protection.
# In MSTP mode, display the detailed spanning tree status and statistics of all MSTIs on all ports.
<Sysname> display stp
-------[CIST Global Info][Mode MSTP]------Bridge ID
: 32768.000f-e200-2200
Bridge times
: Hello 2s MaxAge 20s FwdDelay 15s MaxHops 20
Root ID/ERPC
: 0.00e0-fc0e-6554, 200200
RegRoot ID/IRPC
: 32768.000f-e200-2200, 0
RootPort ID
: 128.48
BPDU-Protection
: Disabled
114
Bridge ConfigDigest-Snooping
: Disabled
TC or TCN received
: 2
Time since last TC
: 0 days 0h:5m:42s
----[Port153(FortyGigE1/0/1)][FORWARDING]---Port protocol
: Enabled
Port role
: Designated Port (Boundary)
Port ID
: 128.153
Port cost(Legacy)
: Config=auto, Active=200
Desg.bridge/port
: 32768.000f-e200-2200, 128.2
Port edged
: Config=disabled, Active=disabled
Point-to-Point
: Config=auto, Active=true
Transmit limit
: 10 packets/hello-time
TC-Restriction
: Disabled
Role-Restriction
: Disabled
Protection type
: None
MST BPDU format
: Config=auto, Active=legacy
Port ConfigDigest-Snooping
: Disabled
Rapid transition
: False
Num of VLANs mapped : 1
Port times
: Hello 2s MaxAge 20s FwdDelay 15s MsgAge 2s RemHops 20
BPDU sent
: 186
TCN: 0, Config: 0, RST: 0, MST: 186
BPDU received
: 0
TCN: 0, Config: 0, RST: 0, MST: 0
-------[MSTI 1 Global Info]------Bridge ID
: 0.000f-e23e-9ca4
RegRoot ID/IRPC
: 0.000f-e23e-9ca4, 0
RootPort ID
: 0.0
Root type
: Primary root
Master bridge
: 32768.000f-e23e-9ca4
Cost to master
: 0
TC received
: 0
# Display the spanning tree status and statistics when the spanning tree feature is disabled.
<Sysname> display stp
Protocol status
: Disabled
Protocol Std.
: IEEE 802.1s
Version
: 3
CIST Bridge-Prio.
: 32768
MAC address
: 000f-e200-8048
Max age(s)
: 20
Forward delay(s)
: 15
Hello time(s)
: 2
Max hops
: 20
115
Table 29 Command output
Field
Description
Bridge ID
Bridge ID, which comprises the device's priority in the MSTI and its MAC address.
For example, in output "32768.000f-e200-2200," the value preceding the dot is the
device's priority in the MSTI, and the value following the dot is the device's MAC
address.
Bridge times
Major parameters for the bridge:
• Hello—Hello timer.
• MaxAge—Maximum age timer.
• FwdDelay—Forward delay timer.
• MaxHops—Maximum hops within the MST region.
Root ID/ERPC
CIST root ID and external path cost (the path cost from the device to the CIST root).
RegRoot ID/IRPC
CIST regional root ID and internal path cost (the path cost from the device to the
CIST regional root).
RootPort ID
Root port ID. "0.0" indicates that the device is the root and there is no root port.
BPDU-Protection
Global status of the BPDU guard function.
Bridge ConfigDigest-Snooping
Global status of Digest Snooping.
TC or TCN received
Number of TC/TCN BPDUs received in the MSTI.
Time since last TC
Time since the latest topology change in the MSTI.
[FORWARDING]
The port is in forwarding state.
[DISCARDING]
The port is in discarding state.
[LEARNING]
The port is in learning state.
Port protocol
Status of the spanning tree feature on the port.
Port role
Port role:
• Alternate.
• Backup.
• Root.
• Designated.
• Master.
• Disabled.
(Boundary)
The port is a regional boundary port.
Port cost(Legacy)
Path cost of the port. The field in parentheses indicates the standard (legacy,
dot1d-1998, or dot1t) used for port path cost calculation.
• Config—Configured value.
• Active—Actual value.
Desg.bridge/port
Designated bridge ID and port ID of the port.
The port ID displayed is insignificant for a port which does not support port priority.
Port edged
The port is an edge port or non-edge port.
• Config—Configured value.
• Active—Actual value.
Point-to-Point
The port is connected to a point-to-point link or not.
• Config—Configured value.
• Active—Actual value.
Transmit limit
Number of BPDUs sent within each hello time.
116
Field
Description
Protection type
Protection type on the port:
• Root—Root guard.
• Loop—Loop guard.
• BPDU—BPDU guard.
• None—No protection.
TC-Restriction
Status of TC transmission restriction on the port.
Role-Restriction
Status of port role restriction on the port.
MST BPDU format
Format of the MST BPDUs that the port can send:
• Config—Configured value (legacy or 802.1s).
• Active—Actual value (legacy or 802.1s).
Port ConfigDigest-Snooping
Status of Digest Snooping on the port.
Rapid transition
Indicates whether the port rapidly transits to the forwarding state in the MSTI.
Num of VLANs
mapped
Number of VLANs that are mapped to the MSTI.
Port times
Major parameters for the port:
• Hello—Hello timer.
• MaxAge—Maximum age timer.
• FwdDelay—Forward delay timer.
• MsgAge—Message age timer.
• RemHops—Remaining hops.
BPDU sent
Statistics on sent BPDUs.
BPDU received
Statistics on received BPDUs.
RegRoot ID/IRPC
MSTI regional root/internal path cost.
Root Type
MSTI root type:
• Primary root.
• Secondary root.
Master bridge
MSTI root bridge ID.
Cost to master
Path cost from the MSTI to the master bridge.
TC received
Number of received TC BPDUs.
Protocol status
Spanning tree protocol status.
Protocol Std.
Spanning tree protocol standard.
Version
Spanning tree protocol version.
CIST Bridge-Prio.
Device's priority in the CIST.
Max age(s)
Aging timer (in seconds) for BPDUs.
Forward delay(s)
Port state transition delay (in seconds).
Hello time(s)
Interval (in seconds) for the root bridge to send BPDUs.
Max hops
Maximum hops in the MSTI.
Related commands
reset stp
117
display stp abnormal-port
Use display stp abnormal-port to display information about ports that are blocked by spanning tree
protection functions.
Syntax
display stp abnormal-port
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# In MSTP mode, display information about ports that are blocked by spanning tree protection
functions.
<Sysname> display stp abnormal-port
MSTID
Blocked Port
Reason
1
FortyGigE1/0/1
Root-Protected
2
FortyGigE1/0/2
Loop-Protected
12
FortyGigE1/0/3
Loopback-Protected
Table 30 Command output
Field
Description
MSTID
MSTI of the blocked port.
Blocked Port
Name of a blocked port.
Reason
Reason that the port was blocked:
• Root-Protected—Root guard function.
• Loop-Protected—Loop guard function.
• Loopback-Protected—Self-loop protection. A port in the MSTI receives a
BPDU that it sends.
• Disputed—Dispute protection. A port receives a low-priority BPDU from a
non-blocked designated port.
display stp bpdu-statistics
Use display stp bpdu-statistics to display the BPDU statistics on ports.
Syntax
display stp bpdu-statistics [ interface interface-type interface-number [ instance instance-list ] ]
Views
Any view
Predefined user roles
network-admin
118
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Displays the BPDU statistics on a specified port, where
interface-type interface-number indicates the port type and number.
instance instance-list: Displays the BPDU statistics of the MSTIs that are specified by an instance
list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates
that you can specify up to 10 instances or instance ranges. The value range for the instance-id
argument is 0 to 4094, and the value 0 represents the CIST.
Usage guidelines
In MSTP mode:
•
If you do not specify any MSTI or port, this command displays the BPDU statistics of all MSTIs
on all ports. The displayed information is sorted by port name and by MSTI ID on each port.
•
If you specify a port but not an MSTI, this command displays the BPDU statistics of all MSTIs on
the port. The displayed information is sorted by MSTI ID.
•
If you specify both an MSTI ID and a port, this command displays the BPDU statistics of the
specified MSTI on the port.
In STP or RSTP mode:
•
If you do not specify any port, this command displays the BPDU statistics of on all ports. The
displayed information is sorted by port name.
•
If you specify a port, this command displays the BPDU statistics on the port.
Examples
# In MSTP mode, display the BPDU statistics of all MSTIs on FortyGigE 1/0/1.
<Sysname> display stp bpdu-statistics interface fortygige 1/0/1
Port: FortyGigE1/0/1
Instance-Independent:
Type
Count
Last Updated
--------------------------- ---------- ----------------Invalid BPDUs
0
Looped-back BPDUs
0
MAX-aged BPDUs
0
TCN sent
0
TCN received
0
TCA sent
0
TCA received
2
Config sent
0
Config received
0
RST sent
0
RST received
0
MST sent
4
10:33:11 01/13/2011
MST received
151
10:37:43 01/13/2011
Count
Last Updated
10:33:12 01/13/2011
Instance 0:
Type
119
--------------------------- ---------- ----------------Timeout BPDUs
0
MAX-hoped BPDUs
0
TC detected
1
10:32:40 01/13/2011
TC sent
3
10:33:11 01/13/2011
TC received
0
Table 31 Command output
Field
Description
Port
Port name.
Instance-Independent
Statistics not related to any particular MSTI.
Type
Statistical item.
Looped-back BPDUs
BPDUs sent and then received by the same port.
MAX-aged BPDUs
BPDUs whose max age was exceeded.
TCN sent
TCN BPDUs sent.
TCN received
TCN BPDUs received.
TCA sent
TCA BPDUs sent.
TCA received
TCA BPDUs received.
Config sent
Configuration BPDUs sent.
Config received
Configuration BPDUs sent.
RST sent
Configuration BPDUs received.
RST received
RSTP BPDUs sent.
MST sent
RSTP BPDUs received.
MST received
MSTP BPDUs sent.
Instance
Statistical information for a particular MSTI.
Timeout BPDUs
Expired BPDUs.
MAX-hoped BPDUs
BPDUs whose maximum hops were exceeded.
TC detected
TC BPDUs detected.
TC sent
TC BPDUs sent.
TC received
TC BPDUs received.
display stp down-port
Use display stp down-port to display information about ports that were shut down by spanning tree
protection functions.
Syntax
display stp down-port
Views
Any view
Predefined user roles
network-admin
120
network-operator
mdc-admin
mdc-operator
Examples
# Display information about ports that were shut down by spanning tree protection functions.
<Sysname> display stp down-port
Down Port
Reason
FortyGigE1/0/1
BPDU-Protected
Table 32 Command output
Field
Description
Down Port
Name of a port that was shut down by the spanning tree protection functions.
Reason
Reason that the port was shut down. BPDU-Protected indicates the BPDU guard
function.
display stp history
Use display stp history to display historical port role calculation information.
Syntax
In standalone mode:
display stp [ instance instance-list ] history [ slot slot-number ]
In IRF mode:
display stp [ instance instance-list ] history [ chassis chassis-number slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
instance instance-list: Displays the historical port role calculation information for the MSTIs that are
specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>,
where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value
range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST.
slot slot-number: Displays the historical port role calculation information on the specified card.
slot-number represents the number of the slot that houses the card. If this option is not specified, this
command displays the historical port role calculation information on all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Displays the historical port role calculation information on
the specified card of the specified IRF member device. The chassis-number argument represents
the ID of the IRF member device. The slot-number argument represents the number of the slot that
houses the card. If this option is not specified, this command displays the historical port role
calculation information on all cards of all member devices in the IRF fabric. (In IRF mode.)
121
Usage guidelines
In STP or RSTP mode, the displayed information is sorted by port role calculation time.
In MSTP mode:
•
If you do not specify any MSTI, this command displays the historical port role calculation
information for all MSTIs. The displayed information is sorted by MSTI ID and by port role
calculation time in each MSTI.
•
If you specify an MSTI, this command displays the historical port role calculation information for
the specified MSTI by the sequence of port role calculation time.
Examples
In standalone mode:
# In MSTP mode, display the historical port role calculation information for the card on slot 1 in MSTI
2.
<Sysname> display stp instance 2 history slot 1
--------------- STP slot 1 history trace ---------------------------------
Instance 2
---------------------
Port FortyGigE1/0/1
Role change
: ROOT->DESI (Aged)
Time
: 2009/02/08 00:22:56
Port priority
: 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Port FortyGigE1/0/2
Role change
: ALTER->ROOT
Time
: 2009/02/08 00:22:56
Port priority
: 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
128.153
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
128.153
In IRF mode:
# In MSTP mode, display the historical port role calculation information for the card on slot 1 of IRF
member device 1 in MSTI 2.
<Sysname> display stp instance 2 history chassis 1 slot 1
---------- STP chassis 1 slot 1 history trace --------------------------
Instance 2
---------------------
Port FortyGigE1/1/0/1
Role change
: ROOT->DESI (Aged)
Time
: 2009/02/08 00:22:56
Port priority
: 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Port FortyGigE1/1/0/2
Role change
: ALTER->ROOT
Time
: 2009/02/08 00:22:56
Port priority
: 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
128.153
Designated priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
128.153
122
Table 33 Command output
Field
Description
Port
Port name.
Role change
Role change of the port ("Aged" means that the change was caused by expiration
of the received configuration BPDU).
Time
Time of port role calculation.
Port priority
Port priority.
display stp region-configuration
Use display stp region-configuration to display effective MST region configuration information,
including the region name, revision level, and user-configured VLAN-to-instance mappings.
Syntax
display stp region-configuration
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# In MSTP mode, display effective MST region configuration information.
<Sysname> display stp region-configuration
Oper Configuration
Format selector
: 0
Region name
: hello
Revision level
: 0
Configuration digest : 0x5f762d9a46311effb7a488a3267fca9f
Instance
VLANs Mapped
0
21 to 4094
1
1 to 10
2
11 to 20
Table 34 Command output
Field
Description
Format selector
Format selector that is defined by the spanning tree protocol. The default
value is 0, and the selector cannot be configured.
Region name
MST region name.
Revision level
Revision level of the MST region. The default value is 0, and the level can be
configured by using the revision-level command.
VLANs Mapped
VLANs mapped to the MSTI.
123
Related commands
•
instance
•
region-name
•
revision-level
•
vlan-mapping modulo
display stp root
Use display stp root to display the root bridge information of spanning trees.
Syntax
display stp root
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# In MSTP mode, display the root bridge information of all spanning trees.
<Sysname> display stp root
MSTID
Root Bridge ID
ExtPathCost IntPathCost Root Port
0
0.00e0-fc0e-6554
200200
0
FortyGigE1/0/1
Table 35 Command output
Field
Description
ExtPathCost
External path cost. The device automatically calculates the default path cost of a
port. Or, you can use the stp cost command to configure the path cost of a port.
IntPathCost
Internal path cost. The device automatically calculates the default path cost of a
port. Or, you can use the stp cost command to configure the path cost of a port.
Root Port
Root port name (displayed only if a port of the device is the root port of MSTIs).
display stp tc
Use display stp tc to display the statistics of TC/TCN BPDUs received and sent by ports.
Syntax
In standalone mode:
display stp [ instance instance-list ] tc [ slot slot-number ]
In IRF mode:
display stp [ instance instance-list ] tc [ chassis chassis-number slot slot-number ]
Views
Any view
124
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
instance instance-list: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the
MSTIs that are specified by an instance list, in the format of instance-list = { instance-id [ to
instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 instances or instance
ranges. The value range for the instance-id argument is 0 to 4094, and the value 0 represents the
CIST.
slot slot-number: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the
specified MSTI on the specified card. slot-number represents the number of the slot that houses the
card. If this option is not specified, this command displays the statistics of TC/TCN BPDUs received
and sent by all ports in the specified MSTI on all cards. (In standalone mode.)
chassis chassis-number slot slot-number: Displays the statistics of TC/TCN BPDUs received and
sent by all ports in the specified MSTI on the specified card of the specified IRF member device. The
chassis-number argument represents the ID of the IRF member device. The slot-number argument
represents the number of the slot that houses the card. If this option is not specified, this command
displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified MSTI on all
cards of all member devices in the IRF fabric. (In IRF mode.)
Usage guidelines
In STP or RSTP mode, the displayed information is sorted by port name.
In MSTP mode:
•
If you do not specify any MSTI, this command displays the statistics of TC/TCN BPDUs that are
received and sent by all ports in all MSTIs. The displayed information is sorted by instance ID
and by port name in each MSTI.
•
If you specify an MSTI, this command displays the statistics of TC/TCN BPDUs that are
received and sent by all ports in the specified MSTI, in port name order.
Examples
In standalone mode:
# In MSTP mode, display the statistics of TC/TCN BPDUs received and sent by all ports on the card
on slot 1 in MSTI 0.
<Sysname> display stp instance 0 tc slot 1
-------------- STP slot 1 TC or TCN count ------------MSTID
Port
Receive
Send
0
FortyGigE1/0/1
6
4
0
FortyGigE1/0/2
0
2
In IRF mode:
# In MSTP mode, display the statistics of TC/TCN BPDUs received and sent by all ports on slot 1 of
IRF member device 1 in MSTI 0.
<Sysname> display stp instance 0 tc chassis 1 slot 1
--------- STP chassis 1 slot 1 TC or TCN count -------MSTID
Port
0
FortyGigE1/1/0/1
Receive
6
4
0
FortyGigE1/1/0/2
0
2
125
Send
Table 36 Command output
Field
Description
Port
Port name.
Receive
Number of TC/TCN BPDUs received on each port.
Send
Number of TC/TCN BPDUs sent by each port.
instance
Use instance to map a list of VLANs to an MSTI.
Use undo instance to remap the specified VLAN or all VLANs to the CIST (MSTI 0).
Syntax
instance instance-id vlan vlan-id-list
undo instance instance-id [ vlan vlan-id-list ]
Default
All VLANs are mapped to the CIST.
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Parameters
instance-id: Specifies an MSTI ID. The minimum value is 0, representing the CIST, and the maximum
value is 4094. The value range for the instance-id argument is 1 to 4094 for the undo instance
command.
vlan vlan-id-list: Specifies a VLAN list in the format of vlan-id-list = { vlan-id [ to vlan-id ] }&<1-10>,
where the vlan-id argument represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates
that you can specify up to 10 VLAN IDs or VLAN ID ranges.
Usage guidelines
If you specify no VLAN in the undo instance command, all VLANs mapped to the specified MSTI
are remapped to the CIST.
You cannot map the same VLAN to different MSTIs. If you map a VLAN that has been mapped to an
MSTI to a new MSTI, the old mapping is automatically removed.
You can configure VLAN-to-instance mapping for up to 63 MSTIs.
After configuring this command, run the active region-configuration command to activate the
VLAN-to-instance mapping.
With Digest Snooping enabled globally, modify the VLAN-to-instance mappings or execute the undo
stp region-configuration command to restore the default MST region configuration with caution.
Such operations might cause loops or traffic disruption because the VLAN-to-instance mappings are
inconsistent with those on the neighboring devices.
Examples
# Map VLAN 2 to MSTI 1.
<Sysname> system-view
126
[Sysname] stp region-configuration
[Sysname-mst-region] instance 1 vlan 2
Related commands
•
active region-configuration
•
check region-configuration
•
display stp region-configuration
region-name
Use region-name to configure the MST region name.
Use undo region-name to restore the default MST region name.
Syntax
region-name name
undo region-name
Default
The MST region name of a device is its MAC address.
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Parameters
name: Specifies the MST region name, a string of 1 to 32 characters.
Usage guidelines
The MST region name, the VLAN-to-instance mapping table, and the MSTP revision level of a
device determine the device's MST region.
After configuring this command, run the active region-configuration command to activate the
configured MST region name.
Examples
# Set the MST region name of the device to hello.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] region-name hello
Related commands
•
active region-configuration
•
check region-configuration
•
display stp region-configuration
•
instance
•
revision-level
•
vlan-mapping modulo
127
reset stp
Use reset stp to clear spanning tree statistics. The spanning tree statistics include the numbers of
TCN BPDUs, configuration BPDUs, RST BPDUs, and MST BPDUs that are sent and received
through the specified ports.
Syntax
reset stp [ interface interface-list ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
interface interface-list: Clears the spanning tree statistics of the ports that are specified in the format
of interface-list = { interface-type interface-number [ to interface-type interface-number ] }&<1-10>,
where &<1-10> indicates that you can specify up to 10 ports or port ranges. If you don't specify this
option, this command clears the spanning tree-related statistics information on all ports.
Examples
# Clear the spanning tree-related statistics on ports FortyGigE 1/0/1 through FortyGigE 1/0/3.
<Sysname> reset stp interface fortygige 1/0/1 to fortygige 1/0/3
Related commands
display stp
revision-level
Use revision-level to configure the MSTP revision level.
Use undo revision-level to restore the default MSTP revision level.
Syntax
revision-level level
undo revision-level
Default
The MSTP revision level is 0.
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Parameters
level: Specifies an MSTP revision level in the range of 0 to 65535.
Usage guidelines
The MSTP revision level, the MST region name, and the VLAN-to-instance mapping table of a
device determine the device's MST region. When the MST region name and VLAN-to-instance
128
mapping table are both the same for two MST regions, they can still be differentiated by their MSTP
revision levels.
After configuring this command, run the active region-configuration command to activate the
configured MST region level.
Examples
# Set the MSTP revision level of the MST region to 5.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] revision-level 5
Related commands
•
active region-configuration
•
check region-configuration
•
display stp region-configuration
•
instance
•
region-name
•
vlan-mapping modulo
stp bpdu-protection
Use stp bpdu-protection to enable BPDU guard.
Use undo stp bpdu-protection to disable BPDU guard.
Syntax
stp bpdu-protection
undo stp bpdu-protection
Default
BPDU guard is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable the BPDU guard function.
<Sysname> system-view
[Sysname] stp bpdu-protection
stp bridge-diameter
Use stp bridge-diameter to specify the network diameter, which is the maximum possible number of
stations between any two terminal devices on the switched network.
Use undo stp bridge-diameter to restore the default.
Syntax
stp bridge-diameter diameter
129
undo stp bridge-diameter
Default
The network diameter of the switched network is 7.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
diameter: Specifies the switched network diameter in the range of 2 to 7.
Usage guidelines
An appropriate setting of hello time, forward delay, and max age can speed up network convergence.
The values of these timers are related to the network size, and you can set the timers by setting the
network diameter. With the network diameter set to 7 (the default), the three timers are also set to
their defaults.
Each MST region is considered a device, and the configured network diameter of the switched
network is effective only on MSTI 0 (or the common root bridge).
Examples
# In MSTP mode, set the network diameter of the switched network to 5.
<Sysname> system-view
[Sysname] stp bridge-diameter 5
Related commands
•
stp timer forward-delay
•
stp timer hello
•
stp timer max-age
stp compliance
Use stp compliance to configure the mode that a port uses to recognize and send MSTP BPDUs.
Use undo stp compliance to restore the default.
Syntax
stp compliance { auto | dot1s | legacy }
undo stp compliance
Default
A port automatically recognizes the formats of received MSTP packets and determines the formats
of MSTP packets to be sent based on the recognized formats.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
130
Parameters
auto: Configures the port to recognize the MSTP BPDU format automatically and determine the
format of MSTP BPDUs to send.
dot1s: Configures the port to receive and send only standard-format (802.1s-compliant) MSTP
BPDUs.
legacy: Configures the port to receive and send only compatible-format MSTP BPDUs.
Usage guidelines
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Configure FortyGigE 1/0/1 to send only standard-format (802.1s) MSTP packets.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp compliance dot1s
stp config-digest-snooping
Use stp config-digest-snooping to enable Digest Snooping.
Use undo stp config-digest-snooping to disable Digest Snooping.
Syntax
stp config-digest-snooping
undo stp config-digest-snooping
Default
Digest Snooping is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Enable this feature both globally and on ports connected to other vendors' devices. To minimize
impact, enable the feature on all associated ports before you enable it globally.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Enable Digest Snooping on FortyGigE 1/0/1 and then globally.
<Sysname> system-view
131
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp config-digest-snooping
[Sysname-FortyGigE1/0/1] quit
[Sysname] stp global config-digest-snooping
Related commands
•
display stp
•
stp global config-digest-snooping
stp cost
Use stp cost to set the path cost of a port.
Use undo stp cost to restore the default.
Syntax
stp [ instance instance-list ] cost cost
undo stp [ instance instance-list ] cost
Default
The device automatically calculates the path costs of ports in each spanning tree based on the
corresponding standard.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Sets the path cost of the port in the MSTIs that are specified by an instance
list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates
that you can specify up to 10 instances or instance ranges. The value range for the instance-id
argument is 0 to 4094, and the value 0 represents the CIST.
cost: Specifies the path cost of the port, with an effective range that depends on the path cost
calculation standard that is adopted.
•
When the IEEE 802.1d-1998 standard is selected for path cost calculation, the value range for
the cost argument is 1 to 65535.
•
When the IEEE 802.1t standard is selected for path cost calculation, the value range for the
cost argument is 1 to 200000000.
•
When the private standard is selected for path cost calculation, the value range for the cost
argument is 1 to 200000.
Usage guidelines
Path cost is an important factor in spanning tree calculation. Setting different path costs for a port in
MSTIs allows VLAN traffic flows to be forwarded along different physical links, which results in
VLAN-based load balancing.
The path cost setting of a port can affect the role selection of the port. When the path cost of a port is
changed, the system calculates the role of the port and initiates a state transition.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
132
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, is takes effect only after
the port leaves the aggregation group.
Examples
# In MSTP mode, set the path cost of port FortyGigE 1/0/3 in MSTI 2 to 200.
<Sysname> system-view
[Sysname] interface fortygige 1/0/3
[Sysname-FortyGigE1/0/3] stp instance 2 cost 200
Related commands
•
display stp
•
stp pathcost-standard
stp edged-port
Use stp edged-port to configure a port as an edge port.
Use undo stp edged-port to configure a port as a non-edge port.
Syntax
stp edged-port
undo stp edged-port
Default
All ports are non-edge ports.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If a port directly connects to a user terminal rather than to another device or a shared LAN segment,
this port is regarded as an edge port. In case the network topology changes, an edge port does not
cause a temporary loop. You can enable the port to transit to the forwarding state rapidly by
configuring it as an edge port. As a best practice, configure ports that directly connect to user
terminals as edge ports.
Typically, configuration BPDUs from other devices cannot reach an edge port, because the edge port
does not connect to any other device. If a port receives a configuration BPDU when the BPDU guard
function is disabled, the port functions as a non-edge port, even if you configure it as an edge port.
On a port, the loop guard function and the edge port setting are mutually exclusive.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Configure FortyGigE 1/0/1 as an edge port.
133
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp edged-port
Related commands
•
stp bpdu-protection
•
stp loop-protection
•
stp root-protection
stp enable
Use stp enable to enable the spanning tree feature.
Use undo stp enable to disable the spanning tree feature.
Syntax
stp enable
undo stp enable
Default
The spanning tree feature is enabled on all ports.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you enable the spanning tree feature, the device operates in STP, RSTP, or MSTP mode,
depending on the spanning tree mode setting.
When you enable the spanning tree feature, the device dynamically maintains the spanning tree
status of VLANs, based on received configuration BPDUs.
When you disable the spanning tree feature, the device stops maintaining the spanning tree status.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# In MSTP mode, disable the spanning tree feature on port FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] undo stp enable
Related commands
•
stp global enable
•
stp mode
134
stp global config-digest-snooping
Use stp global config-digest-snooping to enable Digest Snooping globally.
Use undo stp global config-digest-snooping to disable Digest Snooping globally.
Syntax
stp global config-digest-snooping
undo stp global config-digest-snooping
Default
Digest Snooping is disabled globally.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Enable this feature both globally and on ports connected to other vendors' devices. To minimize
impact, enable the feature on all associated ports before you enable it globally.
Examples
# Enable Digest Snooping on FortyGigE 1/0/1 and then globally.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp config-digest-snooping
[Sysname-FortyGigE1/0/1] quit
[Sysname] stp global config-digest-snooping
Related commands
•
display stp
•
stp config-digest-snooping
stp global enable
Use stp global enable to enable the spanning tree feature globally.
Use undo stp global enable to disable the spanning tree feature globally.
Syntax
stp global enable
undo stp global enable
Default
If the device starts up with the initial settings, the spanning tree feature is disabled globally.
If the device starts up with the factory defaults, the spanning tree feature is enabled globally.
For more information about the startup configuration, see Fundamentals Configuration Guide.
Views
System view
135
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When you enable the spanning tree feature, the device operates in STP, RSTP, or MSTP mode,
depending on the spanning tree mode setting.
When the spanning tree feature is enabled, the device dynamically maintains the spanning tree
status of VLANs based on received configuration BPDUs. When the spanning tree feature is
disabled, the device stops maintaining the spanning tree status.
Examples
# Enable the spanning tree feature globally.
<Sysname> system-view
[Sysname] stp global enable
Related commands
•
stp enable
•
stp mode
stp global mcheck
Use stp global mcheck to perform the mCheck operation globally.
Syntax
stp global mcheck
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If a port on a device running MSTP or RSTP connects to an STP device, this port automatically
transits to the STP mode when the port receives STP BPDUs. However, if the peer STP device is
shut down or removed and the local device cannot detect the change, the local device cannot
automatically transit back to the original mode. In this case, you can perform an mCheck operation to
forcibly transit the port to operate in the original mode.
The device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.
The stp global mcheck command is effective only when the device operates in MSTP or RSTP
mode.
Examples
# Perform mCheck globally.
<Sysname> system-view
[Sysname] stp global mcheck
Related commands
•
stp mcheck
•
stp mode
136
stp loop-protection
Use stp loop-protection to enable loop guard on a port.
Use undo stp loop-protection to disable loop guard on a port.
Syntax
stp loop-protection
undo stp loop-protection
Default
Loop guard is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
On a port, the loop guard feature is mutually exclusive with the root guard feature or the edge port
setting.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Enable loop guard on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp loop-protection
Related commands
•
stp edged-port
•
stp root-protection
stp max-hops
Use stp max-hops to set the maximum number of hops for an MST region.
Use undo stp max-hops to restore the default.
Syntax
stp max-hops hops
undo stp max-hops
Default
The maximum number of hops for an MST region is 20.
137
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
hops: Sets the maximum hops in the range of 1 to 40.
Examples
# Set the maximum hops to 35 for an MST region.
<Sysname> system-view
[Sysname] stp max-hops 35
Related commands
display stp
stp mcheck
Use stp mcheck to perform the mCheck operation on a port.
Syntax
stp mcheck
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If a port on a device that is running MSTP or RSTP connects to an STP device, the port automatically
transits to the STP mode when the port receives STP BPDUs. If the peer STP device is shut down or
removed and the local device cannot detect the change, the local device cannot automatically transit
back to the original mode. In this case, you can perform an mCheck operation to forcibly transit the
port to operation in the original mode.
Suppose a scenario where Device A, Device B, and Device C are connected in sequence. Device A
runs STP, Device B does not run any spanning tree protocol, and Device C runs RSTP or MSTP. In
this case, when Device C receives an STP BPDU transparently transmitted by Device B, the
receiving port transits to the STP mode. If you configure Device B to run RSTP or MSTP with Device
C, perform mCheck operations on the ports that connect Device B and Device C.
The device operates in STP, RSTP, or MSTP mode, depending on the spanning tree mode setting.
The stp mcheck command is effective only when the device operates in MSTP or RSTP mode.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
138
Examples
# Perform mCheck on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp mcheck
Related commands
•
stp global mcheck
•
stp mode
stp mode
Use stp mode to configure the spanning tree operating mode.
Use undo stp mode to restore the default.
Syntax
stp mode { mstp | rstp | stp }
undo stp mode
Default
A spanning tree device operates in MSTP mode.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
mstp: Configures the spanning tree device to operate in MSTP mode.
rstp: Configures the spanning tree device to operate in RSTP mode.
stp: Configures the spanning tree device to operate in STP mode.
Usage guidelines
MSTP mode is compatible with RSTP mode, and RSTP mode is compatible with STP mode.
Examples
# Configure the spanning tree device to operate in STP mode.
<Sysname> system-view
[Sysname] stp mode stp
Related commands
•
stp enable
•
stp global enable
•
stp global mcheck
•
stp mcheck
139
stp no-agreement-check
Use stp no-agreement-check to enable No Agreement Check on a port.
Use undo stp no-agreement-check to disable No Agreement Check on a port.
Syntax
stp no-agreement-check
undo stp no-agreement-check
Default
No Agreement Check is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command takes effect only after you enable it on the root port.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Enable No Agreement Check on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp no-agreement-check
stp pathcost-standard
Use stp pathcost-standard to specify a standard for the device to use when calculating the default
path costs for ports.
Use undo stp pathcost-standard to restore the default.
Syntax
stp pathcost-standard { dot1d-1998 | dot1t | legacy }
undo stp pathcost-standard
Default
The devices uses the legacy standard to calculate the default path costs for ports.
Views
System view
Predefined user roles
network-admin
140
mdc-admin
Parameters
dot1d-1998: Configures the device to calculate the default path cost for ports based on IEEE
802.1d-1998.
dot1t: Configures the device to calculate the default path cost for ports based on IEEE 802.1t.
legacy: Configures the device to calculate the default path cost for ports based on a private
standard.
Usage guidelines
If you change the standard that the device uses in calculating the default path costs, you restore the
path costs to the default.
Examples
# Configure the device to calculate the default path cost for ports based on IEEE 802.1d-1998.
<Sysname> system-view
[Sysname] stp pathcost-standard dot1d-1998
Related commands
•
display stp
•
stp cost
stp point-to-point
Use stp point-to-point to configure the link type of a port.
Use undo stp point-to-point to restore the default.
Syntax
stp point-to-point { auto | force-false | force-true }
undo stp point-to-point
Default
The default setting is auto, and the spanning tree device automatically detects whether a port
connects to a point-to-point link.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
auto: Specifies automatic detection of the link type.
force-false: Specifies the non-point-to-point link type.
force-true: Specifies the point-to-point link type.
Usage guidelines
When connecting to a non-point-to-point link, a port is incapable of rapid state transition.
You can configure the link type as point-to-point for a Layer 2 aggregate interface or a port that
operates in full duplex mode. As a best practice, use the default setting for the device to
automatically detect the port link type.
141
The stp point-to-point force-false or stp point-to-point force-true command configured on a port
in MSTP mode is effective on all MSTIs or VLANs.
If the physical link to which the port connects is not a point-to-point link but you set it to be one, the
configuration might cause a temporary loop.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Configure the link that connects FortyGigE 1/0/3 as a point-to-point link.
<Sysname> system-view
[Sysname] interface fortygige 1/0/3
[Sysname-FortyGigE1/0/3] stp point-to-point force-true
Related commands
display stp
stp port priority
Use stp port priority to set the priority of a port. The port priority affects the role of a port in a
spanning tree.
Use undo stp port priority to restore the default.
Syntax
stp [ instance instance-list ] port priority priority
undo stp [ instance instance-list ] port priority
Default
The port priority is 128.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Sets the priority of the port in the MSTIs that are specified by an instance list,
in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that
you can specify up to 10 instances or instance ranges. The value range for the instance-id argument
is 0 to 4094, and the value 0 represents the CIST.
priority: Specifies the port priority in the range of 0 to 240 in increments of 16 (as in 0, 16, 32).
Usage guidelines
The smaller the value, the higher the port priority. If all ports on your device use the same priority
value, the port priority depends on the port index. The smaller the index, the higher the priority.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
142
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# In MSTP mode, set the priority of port FortyGigE 1/0/3 to 16 in MSTI 2.
<Sysname> system-view
[Sysname] interface fortygige 1/0/3
[Sysname-FortyGigE1/0/3] stp instance 2 port priority 16
Related commands
display stp
stp port-log
Use stp port-log to enable outputting port state transition information.
Use undo stp port-log to disable outputting port state transition information.
Syntax
stp port-log { all | instance instance-list }
undo stp port-log { all | instance instance-list }
Default
This feature is disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
all: Specifies all MSTIs.
instance instance-list: Specifies the MSTIs by an instance list, in the format of instance-list =
{ instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates that you can specify up to 10
instances or instance ranges. The value range for the instance-id argument is 0 to 4094, and the
value 0 represents the CIST.
Examples
# In MSTP mode, enable outputting port state transition information for MSTI 2.
<Sysname> system-view
[Sysname] stp port-log instance 2
%Aug 16 00:49:41:856 2011 Sysname MSTP/3/MSTP_DISCARDING: Instance 2's port FortyGigE1/0/1
has been set to discarding state.
%Aug 16 00:49:41:856 2011 Sysname MSTP/3/MSTP_FORWARDING: Instance 2's port FortyGigE1/0/2
has been set to forwarding state.
The output shows that FortyGigE 1/0/1 in MSTI 2 transited to the discarding state and FortyGigE
1/0/2 in MSTI 2 transited to the forwarding state.
143
stp priority
Use stp priority to set the priority of the device.
Use undo stp priority to restore the default priority.
Syntax
stp [ instance instance-list ] priority priority
undo stp [ instance instance-list ] priority
Default
The device priority is 32768.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Sets the priority of the device in the MSTIs that are specified by an instance
list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10> indicates
that you can specify up to 10 instances or instance ranges. The value range for the instance-id
argument is 0 to 4094, and the value 0 represents the CIST.
priority: Specifies the device priority in the range of 0 to 61440 in increments of 4096 (as in 0, 4096,
8192). You can set up to 16 priority values on the device. The smaller the value, the higher the device
priority.
Examples
# In MSTP mode, set the device priority to 4096 in MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 priority 4096
stp region-configuration
Use stp region-configuration to enter MST region view.
Use undo stp region-configuration to restore the default MST region configurations.
Syntax
stp region-configuration
undo stp region-configuration
Default
The default settings for the MST region are as follows:
•
The MST region name of the device is the MAC address of the device.
•
All VLANs are mapped to the CIST.
•
The MSTP revision level is 0.
Views
System view
144
Predefined user roles
network-admin
mdc-admin
Usage guidelines
After you enter MST region view, you can configure the MST region parameters, including the region
name, VLAN-to-instance mappings, and revision level.
Examples
# Enter MST region view.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region]
stp role-restriction
Use stp role-restriction to enable port role restriction.
Use undo stp role-restriction to disable port role restriction.
Syntax
stp role-restriction
undo stp role-restriction
Default
Port role restriction is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When port role restriction is enabled on a port, the port cannot become a root port.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Enable port role restriction on interface FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp role-restriction
stp root primary
Use stp root primary to configure the device as the root bridge.
145
Use undo stp root to restore the default.
Syntax
stp [ instance instance-list ] root primary
undo stp [ instance instance-list ] root
Default
A device is not a root bridge.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
instance instance-list: Configures the device as the root bridge in the MSTIs that are specified by an
instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>, where &<1-10>
indicates that you can specify up to 10 instances or instance ranges. The value range for the
instance-id argument is 0 to 4094, and the value 0 represents the CIST. If you do not specify this
option, the command configures the device as the primary root bridge in the MSTP CIST or as the
primary root bridge of STP or RSTP.
Usage guidelines
Once you specify the device as the root bridge, you cannot change the priority of the device.
Examples
# In MSTP mode, specify the device as the root bridge of MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 root primary
Related commands
•
stp priority
•
stp root secondary
stp root secondary
Use stp root secondary to configure the device as a secondary root bridge.
Use undo stp root to restore the default.
Syntax
stp [ instance instance-list ] root secondary
undo stp [ instance instance-list ] root
Default
A device is not a secondary root bridge.
Views
System view
Predefined user roles
network-admin
146
mdc-admin
Parameters
instance instance-list: Configures the device as a secondary root bridge in the MSTIs that are
specified by an instance list, in the format of instance-list = { instance-id [ to instance-id ] }&<1-10>,
where &<1-10> indicates that you can specify up to 10 instances or instance ranges. The value
range for the instance-id argument is 0 to 4094, and the value 0 represents the CIST. If you do not
specify this option, the command configures the device as the secondary root bridge in the MSTP
CIST or as the primary root bridge of STP or RSTP.
Usage guidelines
Once you specify the device as a secondary root bridge, you cannot change the priority of the
device.
Examples
# In MSTP mode, specify the device as a secondary root bridge in MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 root secondary
Related commands
•
stp priority
•
stp root primary
stp root-protection
Use stp root-protection to enable root guard on a port.
Use undo stp root-protection to disable root guard on a port.
Syntax
stp root-protection
undo stp root-protection
Default
Root guard is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
On a port, the loop guard feature and the root guard feature are mutually exclusive.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Enable root guard for FortyGigE 1/0/1.
<Sysname> system-view
147
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp root-protection
Related commands
•
stp edged-port
•
stp loop-protection
stp tc-protection
Use stp tc-protection to enable TC-BPDU attack guard for the device.
Use undo stp tc-protection to disable TC-BPDU attack guard for the device.
Syntax
stp tc-protection
undo stp tc-protection
Default
TC-BPDU attack guard is enabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
With the TC-BPDU guard function, you can set the maximum number of immediate forwarding
address entry flushes that the device can perform within a certain interval (every 10 seconds). For
TC-BPDUs received that exceed the limit, the device performs a forwarding address entry flush
when the interval elapses. This prevents frequent flushing of forwarding address entries.
Examples
# Disable TC-BPDU attack guard for the device.
<Sysname> system-view
[Sysname] undo stp tc-protection
Related commands
stp tc-protection threshold
stp tc-protection threshold
Use stp tc-protection threshold to configure the maximum number of forwarding address entry
flushes that the device can perform within a certain interval (every 10 seconds).
Use undo stp tc-protection threshold to restore the default.
Syntax
stp tc-protection threshold number
undo stp tc-protection threshold
148
Default
By default, the device can perform a maximum of 6 forwarding address entry flushes every 10
seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
number: Sets the maximum number of immediate forwarding address entry flushes that the device
can perform within a certain interval (10 seconds). The value is in the range of 1 to 255.
Examples
# Configure the device to perform up to 10 forwarding address entry flushes every 10 seconds.
<Sysname> system-view
[Sysname] stp tc-protection threshold 10
Related commands
stp tc-protection
stp tc-restriction
Use stp tc-restriction to enable TC-BPDU transmission restriction.
Use undo stp tc-restriction to disable TC-BPDU transmission restriction.
Syntax
stp tc-restriction
undo stp tc-restriction
Default
TC-BPDU transmission restriction is disabled.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When TC-BPDU transmission restriction is enabled on a port, the port does not send TC-BPDUs to
the other ports, and it does not delete the MAC address entries.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
149
Examples
# Enable TC-BPDU transmission restriction on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp tc-restriction
stp timer forward-delay
Use stp timer forward-delay to set the forward delay timer of the device.
Use undo stp timer forward-delay to restore the default.
Syntax
stp timer forward-delay time
undo stp timer forward-delay
Default
The forward delay timer is 1500 centiseconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Sets the forward delay in centiseconds in the range of 400 to 3000 in increments of 100 (as in
400, 500, 600).
Usage guidelines
The forward delay timer determines the time interval of state transition. To prevent temporary loops,
a spanning tree port goes through the learning (intermediate) state before it transits from the
discarding state to the forwarding state. To stay synchronized with the remote device, the port has a
wait period between transition states that is determined by the forward delay timer.
As a best practice, specify the network diameter of the switched network by using the stp
bridge-diameter command instead of setting the forward delay with this command. The spanning
tree protocols will automatically calculate the optimal settings for the forward delay timer. If the
network diameter uses the default value, the forward delay timer also uses the default value.
Examples
# In MSTP mode, set the forward delay timer to 2000 centiseconds.
<Sysname> system-view
[Sysname] stp timer forward-delay 2000
Related commands
•
stp bridge-diameter
•
stp timer hello
•
stp timer max-age
stp timer hello
Use stp timer hello to set the hello time of the device.
150
Use undo stp timer hello to restore the default.
Syntax
stp timer hello time
undo stp timer hello
Default
The hello time is 200 centiseconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
time: Sets the hello time in centiseconds in the range of 100 to 1000 in increments of 100 (as in 100,
200, 300).
Usage guidelines
Hello time is the time interval at which spanning tree devices send configuration BPDUs to maintain
the spanning tree. If a device fails to receive configuration BPDUs within the set period of time, a new
spanning tree calculation process is triggered due to timeout.
As a best practice, specify the network diameter of the switched network by using the stp
bridge-diameter command instead of setting the hello time with this command. The spanning tree
protocols will automatically calculate the optimal settings for the hello timer. If the network diameter
uses the default value, the hello timer also uses the default value.
Examples
# In MSTP mode, set the hello time to 400 centiseconds.
<Sysname> system-view
[Sysname] stp timer hello 400
Related commands
•
stp bridge-diameter
•
stp timer forward-delay
•
stp timer max-age
stp timer max-age
Use stp timer max-age to set the max age timer of the device.
Use undo stp timer max-age to restore the default.
Syntax
stp timer max-age time
undo stp timer max-age
Default
The max age is 2000 centiseconds.
Views
System view
151
Predefined user roles
network-admin
mdc-admin
Parameters
time: Sets the max age in centiseconds in the range of 600 to 4000 in increments of 100 (as in 600,
700, 800).
Usage guidelines
In the CIST of an MSTP network, the device determines whether a configuration BPDU received on
a port has expired based on the max age timer. If the configuration BPDU has expired, a new
spanning tree calculation process starts. The max age timer takes effect only on the CIST (or MSTI
0).
As a best practice, specify the network diameter of the switched network by using the stp
bridge-diameter command instead of setting the max age timer with this command. The spanning
tree protocols will automatically calculate the optimal settings for the max age timer. If the network
diameter uses the default value, the max age timer also uses the default value.
Examples
# In MSTP mode, set the max age timer to 1000 centiseconds.
<Sysname> system-view
[Sysname] stp timer max-age 1000
Related commands
•
stp bridge-diameter
•
stp timer forward-delay
•
stp timer hello
stp timer-factor
Use stp timer-factor to configure the timeout interval by setting the timeout factor.
Timeout interval = timeout factor × 3 × hello time.
Use undo stp timer-factor to restore the default.
Syntax
stp timer-factor factor
undo stp timer-factor
Default
The timeout factor of a device is set to 3.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
factor: Sets the timeout factor in the range of 1 to 20.
152
Usage guidelines
After the network topology is stabilized, each non-root-bridge device forwards configuration BPDUs
to the surrounding devices at the interval of hello time to determine whether any link is faulty. If a
device does not receive a BPDU from the upstream device within nine times of the hello time, it
assumes that the upstream device has failed and will start a new spanning tree calculation process.
An upstream device might be too busy to forward configuration BPDUs in time, for example, many
Layer 2 interfaces are configured on the upstream device. As a result, the downstream device fails to
receive a BPDU within the timeout period and then starts an undesired spanning tree calculation.
The calculation might fail, and it also wastes network resources. To prevent undesired spanning tree
calculation and save network resources on a stable network, you can set the timeout factor to 5, 6, or
7.
Examples
# Set the timeout factor of the device to 7.
<Sysname> system-view
[Sysname] stp timer-factor 7
Related commands
stp timer hello
stp transmit-limit
Use stp transmit-limit to set the BPDU transmission rate of a port.
Use undo stp transmit-limit to restore the default.
Syntax
stp transmit-limit limit
undo stp transmit-limit
Default
The BPDU transmission rate of all ports is 10. Each port can send 10 BPDUs within each hello time.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
limit: Sets the BPDU transmission rate in the range of 1 to 255.
Usage guidelines
The maximum number of BPDUs a port can send within each hello time equals the BPDU
transmission rate plus the hello timer value.
A larger BPDU transmission rate value requires more system resources. An appropriate BPDU
transmission rate setting can prevent spanning tree protocols from using excessive bandwidth
resources during network topology changes. As a best practice, use the default value.
When the setting is configured in Layer 2 Ethernet interface view, it takes effect on only the interface.
When the setting is configured in Layer 2 aggregate interface view, it takes effect on only the
aggregate interface.
153
When the setting is configured on a member port in an aggregation group, it takes effect only after
the port leaves the aggregation group.
Examples
# Set the BPDU transmission rate of port FortyGigE 1/0/1 to 5.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] stp transmit-limit 5
vlan-mapping modulo
Use vlan-mapping modulo to map VLANs in the MST region to MSTIs according to the specified
modulo value and quickly create a VLAN-to-instance mapping table.
Syntax
vlan-mapping modulo modulo
Default
All VLANs are mapped to the CIST (MSTI 0).
Views
MST region view
Predefined user roles
network-admin
mdc-admin
Parameters
modulo: Sets the modulo value in the range of 1 to 62.
Usage guidelines
You cannot map a VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to
a new MSTI, the old mapping is automatically removed.
This command maps each VLAN to the MSTI whose ID is (VLAN ID – 1) % modulo + 1, where (VLAN
ID – 1) % modulo is the modulo operation for (VLAN ID – 1). If the modulo value is 15, then VLAN 1
is mapped to MSTI 1, VLAN 2 to MSTI 2, …, VLAN 15 to MSTI 15, VLAN 16 to MSTI 1, and so on.
Examples
# Map VLANs to MSTIs as per modulo 8.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] vlan-mapping modulo 8
Related commands
•
active region-configuration
•
check region-configuration
•
display stp region-configuration
•
region-name
•
revision-level
154
Loop detection commands
display loopback-detection
Use display loopback-detection to display the loop detection configuration and status.
Syntax
display loopback-detection
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Example
# Display the loop detection configuration and status.
<Sysname> display loopback-detection
Loopback detection is enabled.
Loopback detection interval is 30 second(s).
Loopback is detected on following interfaces:
Interface
Action mode
FortyGigE1/0/1
Block
FortyGigE1/0/2
Shutdown
FortyGigE1/0/3
None
FortyGigE1/0/4
No-learning
Table 37 Command output
Field
Description
Action mode
Loop protection action:
•
Block—When a loop is detected on a port, the device generates a log,
disables the port from learning MAC addresses, and blocks inbound traffic
on the port.
•
None—When a loop is detected on a port, the device generates a log but
performs no action on the port.
•
No-learning—When a loop is detected on a port, the device generates a
log and disables the port from learning MAC addresses.
•
Shutdown—When a loop is detected on a port, the device performs the
following tasks:
{
Generates a log.
{
Shuts down the port to disable the port from receiving or sending
frames. The device automatically sets the port to the forwarding state
after a time interval configured by using the shutdown-interval
command (see Fundamentals Command Reference).
155
loopback-detection action
Use loopback-detection action to configure the loop protection action on a port.
Use undo loopback-detection action to restore the default.
Syntax
In Layer 2 Ethernet interface view:
loopback-detection action { block | no-learning | shutdown }
undo loopback-detection action
In Layer 2 aggregate interface view:
loopback-detection action shutdown
undo loopback-detection action
Default
When the device detects a loop on a port, it generates a log but performs no action on the port.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
block: Enables the block mode. If a loop is detected, the device disables MAC address learning and
blocks inbound traffic on the port, in addition to generating a log. Layer 2 aggregate interfaces do not
support this keyword.
no-learning: Enables the no-learning mode. If a loop is detected, the device generates a log and
disables MAC address learning on the port. Layer 2 aggregate interfaces do not support this
keyword.
shutdown: Enables the shutdown mode. If a loop is detected, the device generates a log and shuts
down the port. The device automatically sets the port to the forwarding state after the time interval
configured by using the shutdown-interval command (see Fundamentals Command Reference).
Usage guidelines
Use this command to configure the loop protection action on a per-port basis.
To configure the loop protection action globally, use the loopback-detection global action
command.
The global configuration applies to all ports. The per-port configuration applies to the individual ports.
The per-port configuration takes precedence over the global configuration.
Example
# Set the loop protection action to shutdown on port FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[System-FortyGigE1/0/1] loopback-detection action shutdown
Related commands
•
display loopback-detection
•
loopback-detection global action
156
loopback-detection enable
Use loopback-detection enable to enable loop detection on a port.
Use undo loopback-detection enable to disable loop detection on a port.
Syntax
loopback-detection enable vlan { vlan-list | all }
undo loopback-detection enable vlan { vlan-list | all }
Default
The loop detection function is disabled on ports.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-list: Specifies a VLAN list, in the format of { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id
represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates that you can specify up to
10 vlan-id [ to vlan-id ] parameters.
all: Specifies all existing VLANs.
Usage guidelines
Use this command to enable loop detection on specific ports. The port-specific loop detection
configuration takes effect only after you enable loop detection globally. To enable loop detection
globally, use the loopback-detection global enable command.
The global configuration applies to all ports in the specified VLAN. The per-port configuration applies
to the individual port only when the port belongs to the specified VLAN. The per-port configuration
takes precedence over the global configuration.
Example
# Enable loop detection on port FortyGigE 1/0/1 for VLAN 10 through VLAN 20.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[System-FortyGigE1/0/1] loopback-detection enable vlan 10 to 20
Related commands
•
display loopback-detection
•
loopback-detection global enable
loopback-detection global action
Use loopback-detection global action to configure the global loop protection action.
Use undo loopback-detection global action to restore the default.
Syntax
loopback-detection global action shutdown
undo loopback-detection global action
157
Default
When the device detects a loop on a port, it generates a log but performs no action on the port.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
shutdown: Enables the shutdown mode. If a loop is detected, the device generates a log and shuts
down the port. The device automatically sets the port to the forwarding state after the time interval
configured by using the shutdown-interval command (see Fundamentals Command Reference).
Usage guidelines
Use this command to configure the loop protection action globally.
To configure the loop protection action on specific ports, use the loopback-detection action
command in interface view.
The global configuration applies to all ports. The per-port configuration applies to the individual ports.
The per-port configuration takes precedence over the global configuration.
Example
# Set the global loop protection action to shutdown.
<Sysname> system-view
[System] loopback-detection global action shutdown
Related commands
•
display loopback-detection
•
loopback-detection action
loopback-detection global enable
Use loopback-detection global enable to enable loop detection globally.
Use undo loopback-detection global enable to disable loop detection globally.
Syntax
loopback-detection global enable vlan { vlan-list | all }
undo loopback-detection global enable vlan { vlan-list | all }
Default
The loop detection function is globally disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
158
Parameters
vlan-list: Specifies a VLAN list, in the format of { vlan-id [ to vlan-id ] }&<1-10>, where vlan-id
represents the VLAN ID in the range of 1 to 4094, and &<1-10> indicates that you can specify up to
10 vlan-id [ to vlan-id ] parameters.
all: Specifies all existing VLANs.
Usage guidelines
Use this command to enable loop detection globally.
To enable loop detection on specific ports, use the loopback-detection enable command in
interface view.
The global configuration applies to all ports in the specified VLAN. The per-port configuration applies
to the individual port only when the port belongs to the specified VLAN. The per-port configuration
takes precedence over the global configuration.
Example
# Globally enable loop detection for VLAN 10 through VLAN 20.
<Sysname> system-view
[System] loopback-detection global enable vlan 10 to 20
Related commands
•
display loopback-detection
•
loopback-detection enable
loopback-detection interval-time
Use loopback-detection interval-time to set the loop detection interval.
Use undo loopback-detection interval-time to restore the default.
Syntax
loopback-detection interval-time interval
undo loopback-detection interval-time
Default
The loop detection interval is 30 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval: Sets the loop detection interval in the range of 1 to 300 seconds.
Usage guidelines
With loop detection enabled, the device sends loop detection frames at the specified interval. A
shorter interval offers more sensitive detection but consumes more resources. Consider the system
performance and loop detection speed when you set the loop detection interval.
Example
# Set the loop detection interval to 10 seconds.
159
<Sysname> system-view
[Sysname] loopback-detection interval-time 10
Related commands
display loopback-detection
160
VLAN commands
Basic VLAN commands
bandwidth
Use bandwidth to configure the expected bandwidth of an interface.
Use undo bandwidth to restore the default.
Syntax
bandwidth bandwidth-value
undo bandwidth
Default
The expected bandwidth (in kbps) is the interface baud rate divided by 1000.
Views
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
bandwidth-value: Specifies the expected bandwidth in the range of 1 to 400000000 kbps.
Usage guidelines
The expected bandwidth of an interface affects link costs in OSPF and IS-IS. For more information,
see Layer 3—IP Routing Configuration Guide.
Examples
# Set the expected bandwidth of VLAN-interface 1 to 10000 kbps.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] bandwidth 10000
default
Use default to restore the default settings for a VLAN interface.
Syntax
default
Views
VLAN interface view
Predefined user roles
network-admin
mdc-admin
161
Usage guidelines
CAUTION:
The default command might interrupt ongoing network services. Make sure you are fully aware of
the impacts of this command when you use it on a live network.
This command might fail to restore the default settings for some commands for reasons such as
command dependencies or system restrictions. Use the display this command in interface view to
identify these commands, and then use their undo forms or follow the command reference to restore
their default settings. If your restoration attempt still fails, follow the error message instructions to
resolve the problem.
Examples
# Restore the default settings for VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] default
description
Use description to configure the description for a VLAN or VLAN interface.
Use undo description to restore the default.
Syntax
description text
undo description
Default
For a VLAN, the description is VLAN vlan-id. The vlan-id argument specifies the VLAN ID in the
four-digit form. If the VLAN ID has less than four digits, leading zeros are added. For example, the
default description of VLAN 100 is VLAN 0100.
For a VLAN interface, the description is the name of the interface. For example, Vlan-interface1
Interface.
Views
VLAN view, VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies a description for a VLAN or VLAN interface, a string of 1 to 255 characters. The string
can include case-sensitive letters, digits, special symbols (see Table 38), spaces, and other Unicode
characters and symbols.
Table 38 Special symbols
Name
Symbol
Name
Symbol
Tilde
~
Left angle bracket
<
Exclamation point
!
Right angle bracket
>
At sign
@
Hyphen
-
162
Name
Symbol
Name
Symbol
Pound sign
#
Underscore
_
Dollar sign
$
Plus sign
+
Percent sign
%
Equal sign
=
Caret
^
Vertical bar
|
Ampersand sign
&
Back slash
\
Asterisk
*
Colon
:
Left brace
{
Semi-colon
;
Right brace
}
Quotation marks
"
Left parenthesis
(
Apostrophe
'
Right parenthesis
)
Comma
,
Left bracket
[
Dot
.
Right bracket
]
Slash
/
Usage guidelines
You can configure a description to describe the function or connection of a VLAN or VLAN interface.
The descriptions are helpful when a large number of VLANs and VLAN interfaces are created on the
device.
Examples
# Configure the description of VLAN 2 as sales-private.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] description sales-private
# Configure the description of VLAN-interface 2 as linktoPC56.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] quit
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] description linktoPC56
Related commands
•
display interface vlan-interface
•
display vlan
display interface vlan-interface
Use display interface vlan-interface to display VLAN interface information.
Syntax
display interface vlan-interface [ vlan-interface-id ] [ brief [ description ] ]
Views
Any view
Predefined user roles
network-admin
163
network-operator
mdc-admin
mdc-operator
Parameters
vlan-interface-id: Specifies a VLAN interface number. If you do not specify this argument, the
command displays information about all VLAN interfaces.
brief: Displays brief interface information. If you do not specify this keyword, the command displays
detailed interface information.
description: Displays complete interface descriptions. If you do not specify this keyword, the
command displays only the first 27 characters of each interface description.
Examples
# Display information about VLAN-interface 10.
<Sysname> display interface vlan-interface 10
Vlan-interface10
Current state: UP
Line protocol state: UP
Description: Vlan-interface10 Interface
Bandwidth: 100000 kbps
Maximum transmission unit: 1500
Internet address: 192.168.1.54/24 (primary)
IP packet frame type: Ethernet II, hardware address: 1231-2312-3134
IPv6 packet frame type: Ethernet II, hardware address: 1231-2312-3134
Last clearing of counters: Never
# Display brief information about VLAN-interface 2.
<Sysname> display interface vlan-interface 2 brief
Brief information on interfaces in route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Primary IP
Vlan2
DOWN DOWN
Description
--
Table 39 Command output
Field
Description
Vlan-interface2
VLAN interface name.
Current state
Physical state of the VLAN interface:
•
DOWN ( Administratively )—The administrative state of
the VLAN interface is down, because it has been shut down
with the shutdown command.
•
DOWN—The administrative state of the VLAN interface is
up, but its physical state is down. The VLAN of this interface
does not contain any physical port in up state. The ports
might not be connected correctly or the lines might have
failed.
•
UP—Both the administrative state and the physical state of
the VLAN interface are up.
164
Field
Description
Line protocol state
Link layer protocol state of the VLAN interface:
•
DOWN—The link layer protocol state of the VLAN interface
is down.
•
UP—The link layer protocol state of the VLAN interface is
up.
Description
Description string of the VLAN interface.
Bandwidth
Expected bandwidth of the VLAN interface.
Maximum transmission unit
MTU of the VLAN interface.
Internet protocol processing : Disabled
The interface cannot process IP packets. This field is displayed
when the interface is not configured with an IP address.
Internet address: 192.168.1.54/24
(primary)
The primary IP address of the interface is 192.168.1.54/24. This
field is displayed only when the primary IP address is configured
for the interface.
IP Packet frame type
Framing format of sent IPv4 packets.
hardware address
MAC address of the VLAN interface.
IPv6 packet frame type
Framing format of sent IPv6 packets.
Brief information on interfaces in route
mode
Brief information about Layer 3 interfaces.
Link: ADM - administratively down; Stby
– standby
Link layer state of the interface:
•
ADM—The interface has been administratively shut down.
To bring up the interface, use the undo shutdown
command.
•
Stby—The interface is operating as a backup interface.
Protocol: (s) - spoofing
The protocol attribute of an interface includes the spoofing flag
(the letter s in parentheses) when the following conditions exist:
•
The data link layer protocol state of an interface is shown as
UP.
•
Its link is an on-demand link or is not present.
Interface
Abbreviated interface name.
Link
Physical link state of the interface:
•
UP—The link is up.
•
ADM—The link has been administratively shut down. To
bring up the interface, use the undo shutdown command.
Protocol
Data link protocol connection state of the interface:
•
UP—The data link layer protocol state of the interface is up.
•
DOWN—The data link layer protocol state of the interface is
down.
UP(s)—The data link layer protocol state of an interface is
•
shown as UP, but its link is an on-demand link or not present
at all.
Primary IP
Primary IP address of the interface.
165
Field
Description
Description
Partial or complete interface description configured by using the
description command:
•
If you do not specify the description keyword in the display
interface brief command, this field displays only the first 27
characters of the interface description.
•
If you specify the description keyword in the display
interface brief command, this field displays the complete
interface description.
display reserve-vlan-interface
Use display reserve-vlan-interface to display VLANs whose VLAN interface resources have been
reserved.
Syntax
display reserve-vlan-interface [ global ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
global: Specifies VLANs whose reserved VLAN interface resources are of the global type. If you do
not specify this keyword, the command displays VLANs whose reserved VLAN interface resources
are of the local type.
Examples
# Display VLANs whose reserved VLAN interface resources are of the local type.
<Sysname> display reserve-vlan-interface
3000-3400
# Display VLANs whose reserved VLAN interface resources are of the global type.
<Sysname> display reserve-vlan-interface global
3401
Related commands
reserve-vlan-interface
display vlan
Use display vlan to display VLAN information.
Syntax
display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | reserved | static ]
Views
Any view
166
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
vlan-id1: Specifies a VLAN by its ID in the range of 1 to 4094.
vlan-id1 to vlan-id2: Specifies a VLAN ID range. Both the vlan-id1 and the vlan-id2 arguments are in
the range of 1 to 4094. The ID for vlan-id2 must be equal to or greater than the ID for vlan-id1.
all: Specifies all VLANs except the reserved VLANs.
dynamic: Specifies dynamic VLANs. If you specify this keyword, the command displays the number
of dynamic VLANs and the ID for each dynamic VLAN.
reserved: Specifies reserved VLANs. Protocol modules determine which VLANs are reserved
according to function implementation. The reserved VLANs provide services for protocol modules.
You cannot configure reserved VLANs.
static: Specifies static VLANs. If you specify this keyword, the command displays the number of
static VLANs and the ID for each static VLAN. The static VLANs are manually created.
Examples
# Display VLAN 2 information.
<Sysname> display vlan 2
VLAN ID: 2
VLAN type: Static
Route interface: Not configured
Description: VLAN 0002
Name: VLAN 0002
Tagged ports:
None
Untagged ports:
FortyGigE1/0/1
FortyGigE1/0/2
FortyGigE1/0/3
# Display VLAN 3 information.
<Sysname> display vlan 3
VLAN ID: 3
VLAN type: static
Route interface: Configured
IPv4 address: 1.1.1.1
IPv4 subnet mask: 255.255.255.0
Description: VLAN 0003
Name: VLAN 0003
Tagged ports:
None
Untagged ports: None
Table 40 Command output
Field
Description
VLAN type
VLAN type, static or dynamic.
167
Field
Description
Route interface
Whether a VLAN interface is configured for the VLAN.
•
Not configured.
•
Configured.
Description
Description of the VLAN.
Name
Name configured for the VLAN.
Primary IP address of the VLAN interface. This field is displayed
only when an IPv4 address is configured for the VLAN interface.
When the VLAN interface is also configured with secondary IPv4
addresses, you can view them by using one of the following
commands:
•
display interface vlan-interface.
•
display this (VLAN interface view).
IP address
Subnet mask
Subnet mask of the primary IP address. This field is available only
when an IP address is configured for the VLAN interface.
Tagged ports
Tagged members of the VLAN.
Untagged ports
Untagged members of the VLAN.
Related commands
vlan
display vlan brief
Use display vlan brief to display brief VLAN information.
Syntax
display vlan brief
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display brief VLAN information.
<Sysname> display vlan brief
Brief information about all VLANs:
Supported Minimum VLAN ID: 1
Supported Maximum VLAN ID: 4094
Default VLAN ID: 1
VLAN ID
Name
Port
1
VLAN 0001
FGE1/0/1
FGE1/0/2
FGE1/0/3
FGE1/0/4
FGE1/0/5
FGE1/0/6
FGE1/0/7
FGE1/0/8
FGE1/0/9
168
FGE1/0/10
2
FGE1/0/11
FGE1/0/12
VLAN 0002
Table 41 Command output
Field
Description
Default VLAN ID
System default VLAN ID.
Name
VLAN name.
Port
Ports that are assigned to the VLAN.
interface vlan-interface
Use interface vlan-interface to create a VLAN interface and enter its view or to enter the view of an
existing VLAN interface.
Use undo interface vlan-interface to delete a VLAN interface.
Syntax
interface vlan-interface vlan-interface-id
undo interface vlan-interface vlan-interface-id
Default
No VLAN interface is created.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-interface-id: Specifies a VLAN interface number in the range of 1 to 4094.
Usage guidelines
Create the VLAN before you create the VLAN interface for the VLAN.
Examples
# Create VLAN-interface 2, and enter its view.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] quit
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2]
Related commands
display interface vlan-interface
mtu
Use mtu to set the MTU for a VLAN interface.
169
Use undo mtu to restore the default.
Syntax
mtu size
undo mtu
Default
The MTU of a VLAN interface is 1500 bytes.
Views
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
size: Sets the MTU in bytes. In versions earlier than Release 2138, the value range for this argument
is 46 to 1500. In Release 2138 and later versions, the value range for this argument is 46 to 9008.
Usage guidelines
The mtu or ip mtu command configured on a VLAN interface takes effect only on packets that the
interface delivers to the CPU for software forwarding. For example, packets originated from or
destined for the VLAN interface.
If both the mtu and ip mtu commands are configured on a VLAN interface, the MTU set by the ip
mtu command is used for fragmentation. Set an appropriate MTU to avoid packet fragmentation.
For more information about the ip mtu command, see Layer 3—IP Services Command Reference.
Examples
# Set the MTU to 1492 bytes for VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] mtu 1492
Related commands
display interface vlan-interface
name
Use name to configure a name for a VLAN.
Use undo name to restore the default name of a VLAN.
Syntax
name text
undo name
Default
The name of a VLAN is VLAN vlan-id. The vlan-id argument specifies the VLAN ID in the four-digit
form. If the VLAN ID has less than four digits, leading zeros are added. For example, the name of
VLAN 100 is VLAN 0100.
Views
VLAN view
170
Predefined user roles
network-admin
mdc-admin
Parameters
text: Specifies a VLAN name, a string of 1 to 32 characters. The string can include case-sensitive
letters, digits, special symbols (see Table 38), spaces, and other Unicode characters and symbols.
Usage guidelines
You can use VLAN names to distinguish a large number of VLANs.
Examples
# Configure the name of VLAN 2 as test vlan.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] name test vlan
Related commands
display vlan
reserve-vlan-interface
Use reserve-vlan-interface to reserve the specified VLAN interface resources.
Use undo reserve-vlan-interface to remove the reservation of the specified VLAN interface
resources.
Syntax
reserve-vlan-interface { vlan-interface-id1 [ to vlan-interface-id2 ] [ global ] }
undo reserve-vlan-interface { vlan-interface-id1 [ to vlan-interface-id2 ] [ global ] }
Default
No VLAN interface resources are reserved.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-interface-id1: Specifies a VLAN by its ID in the range of 1 to 4094.
vlan-interface-id1 to vlan-interface-id2: Specifies a range of VLAN IDs. The value ranges for the
vlan-interface-id1 and vlan-interface-id2 arguments are both 1 to 4094. The value for the
vlan-interface-id2 argument must be greater or equal to the value for the vlan-interface-id1
argument.
global: Specifies global-type VLAN interface resources. If you do not specify this keyword, the
command reserves local-type VLAN interface resources.
Usage guidelines
As a best practice to simplify management and configuration, reserve VLAN interface resources as
follows:
171
•
Bulk reserve resources of VLAN interfaces that are numbered in consecutive order.
•
Preferentially reserve resources of VLAN interfaces whose VLAN IDs are in the range of 3000
to 3500.
Select the VLAN interfaces of unused VLANs rather than used VLANs for resource reservation. As a
best practice, do not create or use a VLAN if the VLAN interface resource of this VLAN is reserved.
The VLAN interface resource reservation of a VLAN conflicts with the VLAN interface creation of this
VLAN.
Before creating a Layer 3 Ethernet subinterface or aggregate subinterface, do not reserve a
resource for the VLAN interface whose interface number matches the subinterface number. After
you reserve a VLAN interface resource, do not create a Layer 3 Ethernet subinterface or aggregate
subinterface whose subinterface number is the VLAN interface number. A Layer 3 Ethernet
subinterface or aggregate subinterface uses the VLAN interface resource in processing tagged
packets whose VLAN ID matches the subinterface number.
A reserved VLAN interface resource can be of the local or global type. To change the type of a
reserved VLAN interface resource, first remove the reservation.
You cannot remove the reservation of a VLAN interface resource if this resource has been used.
This command is available in Release 2117 and later versions. After the software upgrades to
support this feature, first reserve VLAN interface resources for existing configurations that require
the reservation.
Examples
# Reserve the local-type resource of VLAN-interface 3000.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000
# Reserve local-type resources of VLAN-interfaces 3000 through 3400.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3000 to 3400
# Reserve global-type resources of VLAN-interfaces 3400 through 3500.
<Sysname> system-view
[Sysname] reserve-vlan-interface 3400 to 3500 global
Related commands
display reserve-vlan-interface
service
Use service to specify an LPU for forwarding the traffic on a VLAN interface.
Use undo service to restore the default.
Syntax
In standalone mode:
service slot slot-number
undo service slot
In IRF mode:
service chassis chassis-number slot slot-number
undo service chassis
Default
No LPU is specified for forwarding the traffic on the VLAN interface.
172
Views
VLAN interface view
Predefined user roles
network-admin
mdc-admin
Parameters
slot slot-number: Specifies an LPU. The slot-number argument represents the number of the slot
that holds the LPU. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies an LPU of an IRF member device. The
chassis-number argument represents the ID of the IRF member device. The slot-number argument
represents the number of the slot that holds the LPU. (In IRF mode.)
Usage guidelines
If no LPU is specified for forwarding the traffic on the current VLAN interface, the traffic is processed
on the card or member device that receives the traffic.
Some functions, such as IPsec anti-replay, require that traffic for the same VLAN interface be
processed on the same card or member device. If such a function is configured, you must use this
command to specify an LPU for forwarding the traffic on a VLAN interface.
If the specified LPU is removed, traffic on the VLAN interface cannot be forwarded even if the VLAN
interface is up. After the specified slot is installed with an LPU, traffic forwarding recovers.
Examples
# (In standalone mode.) Specify the LPU in slot 2 for forwarding traffic on VLAN-interface 200.
<Sysname> system-view
[Sysname] interface vlan-interface200
[Sysname-Vlan-interface200] service slot 2
# (In IRF mode.) Specify the LPU in slot 2 of IRF member device 2 for forwarding traffic on
VLAN-interface 200.
<Sysname> system-view
[Sysname] interface vlan-interface200
[Sysname-Vlan-interface200] service chassis 2 slot 2
shutdown
Use shutdown to shut down a VLAN interface.
Use undo shutdown to bring up a VLAN interface.
Syntax
shutdown
undo shutdown
Default
A VLAN interface is not manually shut down. The VLAN interface is up if one or more ports in the
VLAN is up, and it goes down if all ports in the VLAN go down.
Views
VLAN interface view
Predefined user roles
network-admin
173
mdc-admin
Usage guidelines
When you use this command to shut down a VLAN interface, the VLAN interface remains in DOWN
(Administratively) state. In this case, the VLAN interface state is not affected by the state of the ports
in the VLAN.
Before you configure parameters for a VLAN interface, use this command to shut it down to prevent
the configurations from affecting the network. After you complete the VLAN interface configuration,
use the undo shutdown command to make the settings take effect.
To troubleshoot a failed interface, you can use the shutdown command and then the undo
shutdown command on the interface to see whether it recovers.
In a VLAN, the state of any Ethernet port is independent of the state of the VLAN interface.
Examples
# Shut down VLAN-interface 2, and then bring it up.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] shutdown
[Sysname-Vlan-interface2] undo shutdown
vlan
Use vlan vlan-id to create a VLAN and enter its view or to enter the view of an existing VLAN.
Use vlan vlan-id1 to vlan-id2 to create VLANs from vlan-id1 through vlan-id2, except reserved
VLANs.
Use vlan all to create VLANs 1 through 4094.
Use undo vlan to delete the specified VLANs.
Syntax
vlan { vlan-id1 [ to vlan-id2 ] | all }
undo vlan { vlan-id1 [ to vlan-id2 ] | all }
Default
VLAN 1 (system default VLAN) exists.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id1, vlan-id2: Specifies a VLAN ID. The value range is 1 to 4094.
vlan-id1 to vlan-id2: Specifies a VLAN ID range. The vlan-id1 and vlan-id2 arguments specify VLAN
IDs. The value ranges for the two arguments are both 1 to 4094. The value for the vlan-id2 argument
must be equal to or greater than the value for the vlan-id1 argument.
all: Creates or removes all VLANs except reserved VLANs.
Usage guidelines
You cannot create or delete the system default VLAN (VLAN 1) or reserved VLANs.
174
Before you delete a dynamic VLAN, a VLAN configured with a QoS policy, or a VLAN locked by an
application, you must first remove the configuration from the VLAN.
Examples
# Create VLAN 2 and enter its view.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2]
# Create VLAN 4 through VLAN 100.
<Sysname> system-view
[Sysname] vlan 4 to 100
Related commands
display vlan
Port-based VLAN commands
display port
Use display port to display information about hybrid or trunk ports.
Syntax
display port { hybrid | trunk }
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
hybrid: Specifies hybrid ports.
trunk: Specifies trunk ports.
Examples
# Display information about hybrid ports.
<Sysname> display port hybrid
Interface
PVID
VLAN Passing
FGE1/0/4
100
Tagged:
1000, 1002, 1500, 1600-1611, 2000,
2555-2558, 3000, 4000
Untagged:1, 10, 15, 18, 20-30, 44, 55, 67, 100,
150-160, 200, 255, 286, 300-302
# Display information about trunk ports.
<Sysname> display port trunk
Interface
PVID
VLAN Passing
FGE1/0/8
2
1-4, 6-100, 145, 177, 189-200, 244, 289, 400,
555, 600-611, 1000, 2006-2008
175
Table 42 Command output
Field
Description
Interface
Interface name.
PVID
Port VLAN ID.
VLAN Passing
Existing VLANs allowed on the port.
Tagged
VLANs for which the port sends packets without removing VLAN tags.
Untagged
VLANs for which the port sends packets after removing VLAN tags.
port
Use port to assign the specified access ports to a VLAN.
Use undo port to remove the specified access ports from a VLAN.
Syntax
port interface-list
undo port interface-list
Default
All ports are in VLAN 1.
Views
VLAN view
Predefined user roles
network-admin
mdc-admin
Parameters
interface-list: Specifies a space-separated list of up to 10 Ethernet interface items. Each item
specifies an Ethernet interface or a range of Ethernet interfaces in the form of interface-type
interface-number1 to interface-type interface-number2. The value for the interface-number2
argument must be equal to or greater than the value for the interface-number1 argument.
Usage guidelines
This command is applicable only to access ports.
By default, all ports are access ports. You can manually configure the port type. For more information,
see "port link-type."
Examples
# Assign FortyGigE 1/0/1 through FortyGigE 1/0/3 to VLAN 2.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] port fortygige 1/0/1 to fortygige 1/0/3
Related commands
display vlan
176
port access vlan
Use port access vlan to assign an access port to the specified VLAN.
Use undo port access vlan to restore the default.
Syntax
port access vlan vlan-id
undo port access vlan
Default
All access ports belong to VLAN 1.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.
Usage guidelines
Before assigning an access port to a VLAN, make sure the VLAN has been created.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and
its aggregation member ports.
•
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
•
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Examples
# Assign FortyGigE 1/0/1 to VLAN 3.
<Sysname> system-view
[Sysname] vlan 3
[Sysname-vlan3] quit
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port access vlan 3
port hybrid pvid
Use port hybrid pvid to configure the PVID of a hybrid port.
Use undo port hybrid pvid to configure the PVID of a hybrid port as 1.
Syntax
port hybrid pvid vlan vlan-id
undo port hybrid pvid
177
Default
The PVID of a hybrid port is the ID of the VLAN to which the port belongs when its link type is
access.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.
Usage guidelines
You can configure a nonexistent VLAN as the PVID of a hybrid port. When you delete the PVID of a
hybrid port by using the undo vlan command, the PVID setting of the port does not change.
To correctly transmit packets, configure the same PVID for the local hybrid port and its peer port.
To enable a hybrid port to transmit packets from its PVID, you must assign the hybrid port to the PVID
by using the port hybrid vlan command.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and
its aggregation member ports.
•
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
•
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Examples
# Configure VLAN 100 as the PVID of the hybrid port FortyGigE 1/0/1, and assign FortyGigE 1/0/1 to
VLAN 100 as an untagged VLAN member.
<Sysname> system-view
[Sysname] vlan 100
[Sysname-vlan100] quit
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type hybrid
[Sysname-FortyGigE1/0/1] port hybrid pvid vlan 100
[Sysname-FortyGigE1/0/1] port hybrid vlan 100 untagged
Related commands
•
port hybrid vlan
•
port link-type
port hybrid vlan
Use port hybrid vlan to assign a hybrid port to the specified VLANs.
Use undo port hybrid vlan to remove a hybrid port from the specified VLANs.
Syntax
port hybrid vlan vlan-id-list { tagged | untagged }
178
undo port hybrid vlan vlan-id-list
Default
A hybrid port is an untagged member of the VLAN to which the port was assigned as an access port.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID
or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094.
The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1
argument.
tagged: Configures the port as a tagged VLAN member of the specified VLANs. A tagged member of
a VLAN sends packets from the VLAN without removing VLAN tags.
untagged: Configures the port as an untagged VLAN member of the specified VLANs. An untagged
member of a VLAN sends packets from the VLAN after removing VLAN tags.
Usage guidelines
A hybrid port supports multiple VLANs. If you execute the command multiple times on a hybrid port,
the hybrid port allows the VLANs specified by the vlan-id-list argument in each execution.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and
its aggregation member ports.
•
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
•
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Examples
# Configure FortyGigE 1/0/1 as a hybrid port, and assign it to VLAN 2, VLAN 4, and VLAN 50 through
VLAN 100 as a tagged member.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type hybrid
[Sysname-FortyGigE1/0/1] port hybrid vlan 2 4 50 to 100 tagged
Related commands
port link-type
port link-type
Use port link-type to configure the link type of a port.
Use undo port link-type to restore the default link type of a port.
Syntax
port link-type { access | hybrid | trunk }
undo port link-type
179
Default
Any port is an access port.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
access: Configures the link type of a port as access.
hybrid: Configures the link type of a port as hybrid.
trunk: Configures the link type of a port as trunk.
Usage guidelines
To change the link type of a port from trunk to hybrid or vice versa, first set the link type to access.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and
its aggregation member ports.
•
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
•
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Examples
# Configure FortyGigE 1/0/1 as a trunk port.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type trunk
port trunk permit vlan
Use port trunk permit vlan to assign a trunk port to the specified VLANs.
Use undo port trunk permit vlan to remove a trunk port from the specified VLANs.
Syntax
port trunk permit vlan { vlan-id-list | all }
undo port trunk permit vlan { vlan-id-list | all }
Default
A trunk port allows only packets from VLAN 1 to pass through.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
180
Parameters
vlan-id-list: Specifies a space-separated list of up to 10 VLAN items. Each item specifies a VLAN ID
or a range of VLAN IDs in the form of vlan-id1 to vlan-id2. The value range for VLAN IDs is 1 to 4094.
The value for the vlan-id2 argument must be equal to or greater than the value for the vlan-id1
argument.
all: Specifies all VLANs. To prevent unauthorized VLAN users from accessing restricted resources
through a port, use the port trunk permit vlan all command with caution.
Usage guidelines
A trunk port supports multiple VLANs. If you execute the command multiple times on a trunk port, the
trunk port allows the union of the VLANs specified by the vlan-id-list argument in each execution.
On a trunk port, only packets from the PVID can pass through untagged.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and
its aggregation member ports.
•
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
•
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Examples
# Assign the trunk port FortyGigE 1/0/1 to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type trunk
[Sysname-FortyGigE1/0/1] port trunk permit vlan 2 4 50 to 100
Related commands
port link-type
port trunk pvid
Use port trunk pvid to configure the PVID for a trunk port.
Use undo port trunk pvid to restore the default.
Syntax
port trunk pvid vlan vlan-id
undo port trunk pvid
Default
The PVID of a trunk port is VLAN 1.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id: Specifies a VLAN by its ID in the range of 1 to 4094.
181
Usage guidelines
You can configure a nonexistent VLAN as the PVID for a trunk port. When you delete the PVID of a
trunk port by using the undo vlan command, the PVID setting of the port does not change.
To correctly transmit packets, configure the same PVID for the local trunk port and its peer port.
To enable a trunk port to transmit packets from its PVID, you must assign the trunk port to the PVID
by using the port trunk permit vlan command.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and
its aggregation member ports.
•
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
•
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Examples
# Configure VLAN 100 as the PVID of the trunk port FortyGigE 1/0/1, and assign FortyGigE 1/0/1 to
VLAN 100.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] port link-type trunk
[Sysname-FortyGigE1/0/1] port trunk pvid vlan 100
[Sysname-FortyGigE1/0/1] port trunk permit vlan 100
Related commands
•
port link-type
•
port trunk permit vlan
182
VLAN mapping commands
display vlan mapping
Use display vlan mapping to display VLAN mapping information.
Syntax
display vlan mapping [ interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies an interface by its type and number. If you do
not specify an interface, the command displays VLAN mapping information on all interfaces.
Examples
# Display VLAN mapping information on all interfaces.
<Sysname> display vlan mapping
Interface Ten-GigabitEthernet1/0/1:
Outer VLAN
Inner VLAN
Translated Outer VLAN
Translated Inner VLAN
N/A
N/A
20
10
10
N/A
120
N/A
Outer VLAN
Inner VLAN
Nested VLAN
200
100
300
Interface Ten-GigabitEthernet1/0/3:
Outer VLAN
Inner VLAN
Translated Outer VLAN
Translated Inner VLAN
12
N/A
110
12
Interface Ten-GigabitEthernet1/0/4:
Outer VLAN
Inner VLAN
Translated Outer VLAN
Translated Inner VLAN
11
30
130
40
Table 43 Command output
Field
Description
Interface
Interface information.
Original outer VLAN for two-to-two and two-to-three mappings.
Outer VLAN
This field indicates the original VLAN for one-to-one and one-to-two
VLAN mappings.
This field displays N/A for zero-to-two VLAN mappings.
183
Field
Inner VLAN
Description
Original inner VLAN for two-to-two and two-to-three mappings.
This field displays N/A for other types of VLAN mappings.
Translated outer VLAN.
Translated Outer VLAN
Translated Inner VLAN
Nested VLAN
This field indicates the translated VLAN for one-to-one VLAN
mappings.
Translated inner VLAN.
This field displays N/A for one-to-one VLAN mappings.
Outermost VLAN for two-to-three VLAN mappings.
Related commands
•
vlan mapping
•
vlan mapping double-tagged
•
vlan mapping untagged
vlan mapping
Use vlan mapping to configure one-to-one, one-to-two, or two-to-two VLAN mapping on an
interface.
Use undo vlan mapping to cancel the VLAN mapping configuration.
Syntax
vlan mapping { vlan-id translated-vlan vlan-id | nest { range vlan-range-list | single vlan-id-list }
nested-vlan vlan-id | tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id }
undo vlan mapping { vlan-id translated-vlan vlan-id | all | nest { range vlan-range-list | single
vlan-id-list } nested-vlan vlan-id | tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id
inner-vlan-id }
Default
One-to-one, one-to-two, or two-to-two VLAN mapping is not configured on an interface.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
vlan-id translated-vlan vlan-id: Specifies the original VLAN and translated VLAN for a one-to-one
VLAN mapping. The value range for the vlan-id argument is 1 to 4094. The original VLAN and the
translated VLAN cannot be the same.
nest range vlan-range-list nested-vlan vlan-id: Specifies the CVLAN ranges and the SVLAN for a
one-to-two VLAN mapping. The vlan-range-list argument specifies a space-separated list of up to 10
CVLAN items. Each item specifies a CVLAN ID or a range of VLAN IDs in the format of vlan-id1 to
vlan-id2. The value range for CVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be
equal to or greater than the value for the vlan-id1 argument. Different CVLAN ranges cannot overlap.
The vlan-id argument specifies the SVLAN ID in the range of 1 to 4094.
nest single vlan-id-list nested-vlan vlan-id: Specifies the CVLANs and the SVLAN for a one-to-two
VLAN mapping. The vlan-id-list argument specifies a space-separated list of up to 10 CVLAN IDs,
184
each of which is in the range of 1 to 4094. The vlan-id argument specifies the SVLAN ID in the range
of 1 to 4094.
tunnel outer-vlan-id inner-vlan-id translated-vlan outer-vlan-id inner-vlan-id: Specifies the original
SVLAN ID and CVLAN ID and the translated SVLAN ID and CVLAN ID for a two-to-two VLAN
mapping. The value ranges for the outer-vlan-id argument and the inner-vlan-id argument are both 1
to 4094.
all: Deletes all VLAN mapping configurations from the interface.
Usage guidelines
For different types of VLAN mapping entries on an interface, both the original VLANs and the
translated VLANs cannot overlap. For one-to-one VLAN mapping entries or two-to-two VLAN
mapping entries, the translated VLANs cannot overlap. When the original VLANs of one-to-one or
two-to-two VLAN mapping entries overlap, the most recent configuration takes effect.
A two-to-two VLAN mapping cannot have the same original SVLAN and CVLAN as those of an
existing two-to-three VLAN mapping.
The MTU of an interface is 1500 bytes by default. After a VLAN tag is added to a packet through
one-to-two VLAN mapping, the packet length is added by 4 bytes. As a best practice, set the MTU to
a minimum of 1504 bytes for ports on the forwarding path of the packet in the service provider
network.
One-to-one, one-to-two, and two-to-two VLAN mappings take effect only on VLAN-tagged packets.
Examples
# Configure a one-to-one VLAN mapping on Ten-GigabitEthernet 1/0/1 to map VLAN 1 to VLAN 101.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping 1 translated-vlan 101
# Configure one-to-two VLAN mappings on Ten-GigabitEthernet 1/0/4 to add outer VLAN tag 101 to
packets carrying VLAN tags 1 through 10 and VLAN tag 80.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/4
[Sysname-Ten-GigabitEthernet1/0/4] vlan mapping nest range 1 to 10 nested-vlan 101
[Sysname-Ten-GigabitEthernet1/0/4] vlan mapping nest single 80 nested-vlan 101
# Configure a two-to-two VLAN mapping on Ten-GigabitEthernet 1/0/5 to map outer VLAN 101 and
inner VLAN 1 to outer VLAN 201 and inner VLAN 10.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/5
[Sysname-Ten-GigabitEthernet1/0/5] vlan mapping tunnel 101 1 translated-vlan 201 10
Related commands
display vlan mapping
vlan mapping double-tagged
Use vlan mapping double-tagged to configure two-to-three VLAN mapping on an interface.
Use undo vlan mapping double-tagged to remove the two-to-three VLAN mapping configuration.
Syntax
vlan mapping double-tagged { outer-vlan outer-vlan-id inner-vlan inner-vlan-id |
outer-vlan-range vlan-id-list inner-vlan inner-vlan-id | outer-vlan outer-vlan-id inner-vlan-range
vlan-id-list } nested-vlan nested-vlan
185
undo vlan mapping double-tagged { outer-vlan outer-vlan-id inner-vlan inner-vlan-id |
outer-vlan-range vlan-id-list inner-vlan inner-vlan-id | outer-vlan outer-vlan-id inner-vlan-range
vlan-id-list } nested-vlan nested-vlan
Default
Two-to-three VLAN mapping is not configured on an interface.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
outer-vlan outer-vlan-id: Specifies the original SVLAN ID in the range of 1 to 4094.
outer-vlan-range vlan-id-list: Specifies a range of original SVLAN IDs in the format of vlan-id1 to
vlan-id2. The value range for SVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be
equal to or greater than the value for the vlan-id1 argument.
inner-vlan inner-vlan-id: Specifies the original CVLAN ID in the range of 1 to 4094.
inner-vlan-range vlan-id-list: Specifies a range of original CVLAN IDs in the format of vlan-id1 to
vlan-id2. The value range for CVLAN IDs is 1 to 4094. The value for the vlan-id2 argument must be
equal to or greater than the value for the vlan-id1 argument.
nested-vlan nested-vlan: Specifies the outermost VLAN ID in the range of 1 to 4094.
Usage guidelines
A two-to-three VLAN mapping cannot have the same original SVLAN and CVLAN as those of an
existing two-to-two VLAN mapping.
Before you modify a two-to-three VLAN mapping, first execute the undo vlan mapping
double-tagged command to remove the existing configuration.
As a best practice, set the MTU to a minimum of 1508 bytes for ports on the forwarding path of the
triple-tagged packet in the service provider network.
Examples
# Configure a two-to-three VLAN mapping on Ten-GigabitEthernet 1/0/1 to add the outermost VLAN
300 to double-tagged packets with the SVLAN 200 and CVLAN 100.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping double-tagged outer-vlan 200 inner-vlan
100 nested-vlan 300
Related commands
display vlan mapping
vlan mapping untagged
Use vlan mapping untagged to configure zero-to-two VLAN mapping on an interface.
Use undo vlan mapping untagged to remove the zero-to-two VLAN mapping configuration.
Syntax
vlan mapping untagged nested-outer-vlan outer-vlan-id nested-inner-vlan inner-vlan-id
undo vlan mapping untagged
186
Default
Zero-to-two VLAN mapping is not configured on an interface.
Views
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
nested-outer-vlan outer-vlan-id: Specifies the SVLAN ID in the range of 1 to 4094.
nested-inner-vlan inner-vlan-id: Specifies the CVLAN ID in the range of 1 to 4094.
Usage guidelines
The command takes effect only when the PVID of the port is VLAN 1.
Before you modify a zero-to-two VLAN mapping, first execute the undo vlan mapping untagged
command to remove the previous configuration.
As a best practice, set the MTU to a minimum of 1504 bytes for ports on the forwarding path of the
double-tagged packet in the service provider network.
Examples
# Configure a zero-to-two VLAN mapping on Ten-GigabitEthernet 1/0/1 to add CVLAN 100 and
SVLAN 200 to untagged packets.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet 1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] vlan mapping untagged nested-outer-vlan 200
nested-inner-vlan 100
Related commands
display vlan mapping
187
LLDP commands
You can set an Ethernet port as a Layer 3 interface by using the port link-mode route command
(see Layer 2—LAN Switching Configuration Guide).
dcbx version
Use dcbx version to configure the DCBX version.
Use undo dcbx version to restore the default.
Syntax
dcbx version { rev100 | rev101 | standard }
undo dcbx version
Default
The DCBX version is autonegotiated by two interfaces, with the standard version as the initial
version for negotiation at the local end.
Views
Layer 2 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
rev100: Specifies DCBX Rev 1.00.
rev101: Specifies DCBX Rev 1.01.
standard: Specifies the IEEE Std 802.1Qaz-2011.
Usage guidelines
For DCBX to work correctly, configure the same DCBX version that is supported on both ends. As a
best practice, configure the highest version supported on both ends. IEEE Std 802.1Qaz-2011,
DCBX Rev 1.01, and DCBX Rev 1.00 are in descending order.
After this command is configured, an interface includes the configured DCBX version in its outgoing
LLDP frames and does not negotiate the DCBX version with the peer interface.
Examples
# Configure the DCBX version as DCBX Rev 1.01 on interface Ten-GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface ten-gigabitethernet1/0/1
[Sysname-Ten-GigabitEthernet1/0/1] dcbx version rev101
Related commands
lldp tlv-enable
display lldp local-information
Use display lldp local-information to display local LLDP information, which will be contained in the
advertisable LLDP TLVs and sent to neighboring devices.
188
Syntax
display lldp local-information [ global | interface interface-type interface-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
global: Displays the global local LLDP information.
interface interface-type interface-number: Specifies a port by its type and number.
Usage guidelines
If you do not specify any keywords or arguments, the command displays all local LLDP information,
which includes the following:
•
The global LLDP information.
•
The LLDP information about the LLDP-enabled ports in the up state.
Examples
# Display all local LLDP information.
<Sysname> display lldp local-information
Global LLDP local-information:
Chassis ID
: 0000-fc00-4331
System name
: System
System description
: HPE Comware Platform Software, Software Version 7.1.045,
Release 2138
HPE FF 7910
Copyright (c) 2010-2015 Hewlett Packard Enterprise Develo
pment LP
System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge
System capabilities enabled
: Bridge, Router, Customer Bridge
MED information:
Device class
: Connectivity device
MED inventory information of master board:
HardwareRev
: VER.A
FirmwareRev
: 137
SoftwareRev
: 210231S9800LSV1SRPC1
SerialNum
: Unknown
Manufacturer name
: Unknown
Model name
: HP FF 7910
Asset tracking identifier
: Unknown
LLDP local-information of port 156[FortyGigE1/0/1]:
Port ID type
: Interface name
189
Port ID
: FortyGigE1/0/1
Port description
: FortyGigE1/0/1 Interface
LLDP agent nearest-bridge management address:
Management address type
: All802
Management address
: 000f-e207-f2e0
Management address interface type : IfIndex
Management address interface ID
: Unknown
Management address OID
: 0
LLDP agent nearest-nontpmr management address:
Management address type
: All802
Management address
: 000f-e207-f2e0
Management address interface type : IfIndex
Management address interface ID
: Unknown
Management address OID
: 0
LLDP agent nearest-customer management address:
Management address type
: All802
Management address
: 000f-e207-f2e0
Management address interface type : IfIndex
Management address interface ID
: Unknown
Management address OID
: 0
DCBX Control info:
Oper version
: Standard
DCBX PFC info:
P0-0
P1-0
P2-0
P3-0
P4-0
P5-0
Number of traffic classes supported: 8
Value of MBC: 0
Port VLAN ID(PVID)
: 1
Port and protocol VLAN ID(PPVID)
: 0
Port and protocol VLAN supported
: Yes
Port and protocol VLAN enabled
: No
VLAN name of VLAN 1
Management VLAN ID
: VLAN 0001
: 0
Link aggregation supported : Yes
Link aggregation enabled
: No
Aggregation port ID
: 0
Auto-negotiation supported : Yes
Auto-negotiation enabled
: Yes
OperMau
: Speed(40000)/Duplex(Full)
Power port class
: PD
PSE power supported
: No
PSE power enabled
: No
PSE pairs control ability
: No
Power pairs
: Signal
Port power classification
: Class 0
Maximum frame size
: 12288
190
P6-0
P7-0
Table 44 Command output
Field
Description
Chassis ID
Bridge MAC address of the device.
System capabilities supported
Supported capabilities:
• Bridge—Switching is supported.
• Router—Routing is supported.
• DocsisCableDevice—The local device can serve as a
DOCSIS-compliant cable device.
• StationOnly—The local device can serve as a station only.
• Customer Bridge—The customer bridge function is supported.
• Service Bridge—The service bridge function is supported.
• TPMR—The TPMR function is supported.
• Other—Functions other than those listed above are supported.
System capabilities enabled
Enabled capabilities:
• Bridge—Switching is enabled.
• Router—Routing is enabled.
• DocsisCableDevice—The local device is serving as a
DOCSIS-compliant cable device.
• StationOnly—The local device is serving as a station only.
• Customer Bridge—The customer bridge function is enabled.
• Service Bridge—The service bridge function is enabled.
• TPMR—The TPMR function is enabled.
• Other—Functions other than those listed above are enabled.
Device class
MED device class:
• Connectivity device—Network device.
• Class I—Normal terminal device. It requires the basic LLDP
discovery services.
• Class II—Media terminal device. It supports media streams, and can
also function as a normal terminal device.
• Class III—Communication terminal device. It supports the IP
communication systems of end users, and can also function as a
normal terminal device or media terminal device.
HardwareRev
Hardware version.
FirmwareRev
Firmware version.
SoftwareRev
Software version.
SerialNum
Serial number.
Manufacturer name
Device manufacturer.
Model name
Device model.
Port ID type
Port ID type:
• MAC address.
• Interface name.
Port ID
Port ID, the value of which depends on the port ID type.
Management address interface
type
Numbering type of the interface identified by the management address.
Management address interface
ID
Index of the interface identified by the management address.
Management address OID
Management address object ID.
191
Field
Description
DCBX control info
Displayed as version information in IEEE Std 802.1Qaz-2011.
Oper version
DCBX version number.
Sequence number
Number of DCBX TLV content changes.
Acknowledge number
Times of synchronizing configurations by the peer device.
DCBX ETS info
CoS-to-local priority mapping and bandwidth allocation.
Percentage
Percentage of bandwidth allocated.
P0- P1- P2- P3- P4- P5P6- P7-
Number of supported priorities configured by using the
priority-flow-control no-drop dot1p dot1p-list command at the local
end.
Number of traffic classes
supported
Capability set supported by PFC (displayed only in Rev 1.01).
Priority
802.1p priority.
Protocol ID
Application protocol number.
CoS map
Application protocol-to-CoS mapping.
CBS
Indicates whether the token bucket mechanism is supported on the port:
• False—The token bucket mechanism is not supported.
• True—The token bucket mechanism is supported.
Max TCs
Maximum number of priorities supported.
TSA
Transmission selection algorithm.
DCBX PFC info
PFC TLV information.
Value of MBC
MBC indicates the ability of packets to bypass MACsec. It is 1-bit long.
• 0—Packets can bypass MACsec when MACsec is disabled.
• 1—Packets cannot bypass MACsec when MACsec is disabled.
Auto-negotiation supported
Indicates whether autonegotiation is supported on the port.
Auto-negotiation enabled
Indicates whether autonegotiation is enabled on the port.
OperMau
Speed and duplex state of the port.
Power port class
PoE port class:
• PSE—Power sourcing equipment.
• PD—Powered device.
PSE power supported
Indicates whether the device can operate as a PSE.
PSE power enabled
Indicates whether the device is operating as a PSE.
PSE pairs control ability
Indicates whether the pair selection ability is available.
Power pairs
Power supply mode:
• Signal—Uses data pairs to supply power.
• Spare—Uses spare pairs to supply power.
Port power classification
Power class of the PD:
• Class 0.
• Class 1.
• Class 2.
• Class 3.
• Class 4.
192
Field
Description
Link aggregation supported
Indicates whether link aggregation is supported on the port.
Link aggregation enabled
Indicates whether link aggregation is enabled on the port.
Aggregation port ID
Member port ID, which is 0 when link aggregation is disabled.
display lldp neighbor-information
Use display lldp neighbor-information to display the LLDP information carried in LLDP TLVs that
the local device receives from the neighboring devices.
Syntax
display lldp neighbor-information [ [ [ interface interface-type interface-number ] [ agent
{ nearest-bridge | nearest-customer | nearest-nontpmr } ] [ verbose ] ] | list [ system-name
system-name ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies a port by its type and number. If you do not
specify this option, the command displays the LLDP information that all ports receive from the
neighboring devices.
agent: Specifies an agent type. If you do not specify an agent type, the command displays the LLDP
information that all LLDP agents receive from the neighboring devices.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
verbose: Displays the detailed LLDP information that the local device receives from the neighboring
devices. If you do not specify this keyword, the command displays the brief LLDP information that the
local device receives from the neighboring devices.
list: Displays the LLDP information that the local device receives from the neighboring devices in the
form of a list.
system-name system-name: Displays the LLDP information that the local device receives from a
neighboring device specified by its system name. The system-name argument is a string of 1 to 255
characters. If you do not specify this option, the command displays the LLDP information that the
local device receives from all neighboring devices in a list.
Examples
# Display the detailed LLDP information that the nearest bridge agents on all ports receive from the
neighboring devices.
<Sysname> display lldp neighbor-information agent nearest-bridge verbose
LLDP neighbor-information of port 1[FortyGigE1/0/1]:
LLDP agent nearest-bridge:
193
LLDP Neighbor index : 1
Update time
: 0 days, 0 hours, 1 minutes, 1 seconds
Chassis type
: MAC address
Chassis ID
: 000f-0055-0002
Port ID type
: Interface name
Port ID
: FortyGigE1/0/1
Time to live
: 120
Port description
: FortyGigE1/0/1 Interface
System name
: Sysname
System description
: HPE Comware Platform Software, Software Version 7.1.045,
Release 2138
HPE FF 7910
Copyright (c) 2010-2015 Hewlett Packard Enterprise Develo
pment LP
System capabilities supported : Bridge, Router, Customer Bridge, Service Bridge
System capabilities enabled
: Bridge, Router, Customer Bridge
Management address type
: IPv4
Management address
: 192.168.1.55
Management address interface type : IfIndex
Management address interface ID
: Unknown
Management address OID
: 0
Port VLAN ID(PVID): 1
VLAN name of VLAN 12: VLAN 0012
Management VLAN ID
: 5
Link aggregation supported : Yes
Link aggregation enabled
: No
Aggregation port ID
: 0
Auto-negotiation supported : Yes
Auto-negotiation enabled
: Yes
OperMau
: Speed(40000)/Duplex(Full)
Power port class
: PSE
PSE power supported
: No
PSE power enabled
: No
PSE pairs control ability
: No
Power pairs
: Signal
Port power classification
: Class 0
Maximum frame size
: 12288
CDP neighbor-information of port 1[FortyGigE1/0/1]:
CDP neighbor index : 2
Chassis ID
: Switch
Address
: 2.0.0.2
Port ID
: GigabitEthernet1/0/3
Software version
: Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9
-M), Version 12.2(25)SED1, RELEASE SOFTWARE
Copyright (c) 1986-2005 by Cisco Systems, Inc.
Compiled Tue 22-Nov-05 23:37 by yenanh
Platform
: cisco WS-C3750G-48TS
194
Duplex
: Full
# Display the brief LLDP information that all LLDP agents on all ports receive from the neighboring
devices.
<Sysname> display lldp neighbor-information
LLDP neighbor-information of port 52[FortyGigE1/0/3]:
LLDP agent nearest-bridge:
LLDP neighbor index : 3
ChassisID/subtype
: 0011-2233-4400/MAC address
PortID/subtype
: 000c-29f5-c71f/MAC address
Capabilities
: Bridge, Router, Customer Bridge
LLDP neighbor index : 6
ChassisID/subtype
: 0011-2233-4400/MAC address
PortID/subtype
: 000c-29f5-c715/MAC address
Capabilities
: None
CDP neighbor-information of port 52[FortyGigE1/0/3]:
LLDP agent nearest-bridge:
CDP neighbor index
: 4
Chassis ID
: SEP00260B5C0548
Port ID
: Port 1
CDP neighbor index
: 5
Chassis ID
: 0011-2233-4400
Port ID
: FortyGigE1/0/4
LLDP neighbor-information of port 52[FortyGigE1/0/3]:
LLDP agent nearest-nontpmr:
LLDP neighbor index : 6
ChassisID/subtype
: 0011-2233-4400/MAC address
PortID/subtype
: 000c-29f5-c715/MAC address
Capabilities
: None
# Display the brief LLDP information that all LLDP agents receive from all neighboring devices in a
list.
<Sysname> display lldp neighbor-information list
Chassis ID : * -- --Nearest nontpmr bridge neighbor
# -- --Nearest customer bridge neighbor
Default -- -- Nearest bridge neighbor
System Name
Local Interface
Chassis ID
Port ID
System1
FGE1/0/1
000f-e25d-ee91
FortyGigE1/0/5
System2
FGE1/0/2
000f-e25d-ee92*
FortyGigE1/0/6
System3
FGE1/0/3
000f-e25d-ee93#
FortyGigE1/0/7
Table 45 Command output
Field
Description
LLDP neighbor-information of port 1
LLDP information received through port 1.
Update time
Time when LLDP information about a neighboring device was last
updated.
195
Field
Description
Chassis type
Chassis ID type:
• Chassis component.
• Interface alias.
• Port component.
• MAC address.
• Network address (ipv4).
• Interface name.
• Locally assigned—Locally-defined chassis type other than
those listed above.
Chassis ID
ID that identifies the LLDP sending device, which can be a MAC
address, a network address, an interface or some other value,
depending on the chassis type of the neighboring device.
Port ID type
Port ID type:
• Interface alias.
• Port component.
• MAC address.
• Network address (ipv4).
• Interface name.
• Agent circuit ID.
• Locally assigned—Locally-defined port ID type other than
those listed above.
Port ID
Value of the type of the port ID.
System name
System name of the neighboring device.
System description
System description of the neighboring device.
System capabilities supported
Capabilities supported on the neighboring device:
• Repeater—Signal repeating is supported.
• Bridge—Switching is supported.
• WlanAccessPoint—The neighboring device can serve as a
wireless AP.
• Router—Routing is supported.
• Telephone—The neighboring device can serve as a telephone.
• DocsisCableDevice—The neighboring device can serve as a
DOCSIS-compliant cable device.
• StationOnly—The neighboring device can serve as a station
only.
• Customer Bridge—The customer bridge function is enabled.
• Service Bridge—The service bridge function is enabled.
• TPMR—The TPMR function is enabled.
• Other—Functions other than those listed above are supported.
196
Field
Description
System capabilities enabled
Capabilities enabled on the neighboring device:
• Repeater—Signal repeating is enabled.
• Bridge—Switching is enabled.
• WlanAccessPoint—The neighboring device is serving as a
wireless AP.
• Router—Routing is enabled.
• Telephone—The neighboring device is serving as a telephone.
• DocsisCableDevice—The neighboring device is serving as a
DOCSIS-compliant cable device.
• StationOnly—The neighboring device is serving as a station
only.
• Customer Bridge—The customer bridge function is enabled.
• Service Bridge—The service bridge function is enabled.
• TPMR—The TPMR function is enabled.
• Other—Functions other than those listed above are supported.
Management address OID
Management address object ID.
DCBX control info
Displayed as version information in IEEE Std 802.1Qaz-2011.
Oper version
DCBX version number.
Sequence number
Number of DCBX TLV content changes.
Acknowledge number
Times of synchronizing configurations by the peer device.
DCBX ETS info
CoS-to-local priority mapping and bandwidth allocation.
Percentage
Percentage of bandwidth allocated.
P0- P1- P2- P3- P4- P5- P6P7-
Number of supported priorities configured by using the
priority-flow-control no-drop dot1p dot1p-list command on the
neighbor.
Number of traffic classes supported
Capability set supported by PFC (displayed only in Rev 1.01 and
IEEE Std 802.1Qaz-2011).
CoS map
Application protocol-to-CoS mapping.
CBS
Indicates whether the token bucket mechanism is supported on the
port:
• False—The token bucket mechanism is not supported.
• True—The token bucket mechanism is supported.
Max TCs
Maximum number of priorities supported.
TSA
Transmission selection algorithm.
Value of MBC
MBC indicates the ability of packets to bypass MACsec. It is 1-bit
long.
• 0—Packets can bypass MACsec when MACsec is disabled.
• 1—Packets cannot bypass MACsec when MACsec is disabled.
VLAN name of VLAN 12
Name of VLAN 12.
Auto-negotiation supported
Indicates whether autonegotiation is supported on the port.
Auto-negotiation enabled
Indicates whether autonegotiation is enabled on the port.
OperMau
Speed and duplex state on the port.
Power port class
PoE device class:
• PSE—Power sourcing equipment.
• PD—Powered device.
197
Field
Description
PSE power supported
Indicates whether the device can operate as a PSE.
PSE power enabled
Indicates whether the device is operating as a PSE.
PSE pairs control ability
Indicates whether the pair selection ability is available.
Power pairs
Power supply mode:
• Signal—Uses data pairs to supply power.
• Spare—Uses spare pairs to supply power.
Port power classification
Power class of the PD:
• Class 0.
• Class 1.
• Class 2.
• Class 3.
• Class 4.
Link aggregation supported
Indicates whether link aggregation is supported.
Link aggregation enabled
Indicates whether link aggregation is enabled.
Local Interface
Local port that receives the LLDP information.
Chassis ID : * -- -- Nearest nontpmr
bridge neighbor
#-- -- Nearest customer
bridge neighbor
Chassis ID flag:
• An asterisk (*) indicates the nearest non-TPMR bridge
neighbor.
• A pound sign (#) indicates the nearest customer bridge
neighbor.
display lldp statistics
Use display lldp statistics to display the global LLDP statistics or the LLDP statistics of a port.
Syntax
display lldp statistics [ global | [ interface interface-type interface-number ] [ agent
{ nearest-bridge | nearest-customer | nearest-nontpmr } ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
global: Displays the global LLDP statistics.
interface interface-type interface-number: Specifies a port by its type and number.
agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the
statistics for all LLDP agents.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
198
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
If you do not specify any keywords or arguments, the command displays the global LLDP statistics
and the LLDP statistics of all ports.
Examples
# Display the global LLDP statistics and the LLDP statistics of all ports.
<Sysname> display lldp statistics
LLDP statistics global information:
LLDP neighbor information last change time:0 days, 0 hours, 4 minutes, 40 seconds
The number of LLDP neighbor information inserted : 1
The number of LLDP neighbor information deleted
: 1
The number of LLDP neighbor information dropped
: 0
The number of LLDP neighbor information aged out : 1
LLDP statistics information of port 1 [FortyGigE1/0/1]:
LLDP agent nearest-bridge:
The number of LLDP frames transmitted
: 0
The number of LLDP frames received
: 0
The number of LLDP frames discarded
: 0
The number of LLDP error frames
: 0
The number of LLDP TLVs discarded
: 0
The number of LLDP TLVs unrecognized
: 0
The number of LLDP neighbor information aged out : 0
The number of CDP frames transmitted
: 0
The number of CDP frames received
: 0
The number of CDP frames discarded
: 0
The number of CDP error frames
: 0
LLDP agent nearest-nontpmr:
The number of LLDP frames transmitted
: 0
The number of LLDP frames received
: 0
The number of LLDP frames discarded
: 0
The number of LLDP error frames
: 0
The number of LLDP TLVs discarded
: 0
The number of LLDP TLVs unrecognized
: 0
The number of LLDP neighbor information aged out : 0
The number of CDP frames transmitted
: 0
The number of CDP frames received
: 0
The number of CDP frames discarded
: 0
The number of CDP error frames
: 0
LLDP agent nearest-customer:
The number of LLDP frames transmitted
: 0
The number of LLDP frames received
: 0
The number of LLDP frames discarded
: 0
The number of LLDP error frames
: 0
The number of LLDP TLVs discarded
: 0
The number of LLDP TLVs unrecognized
: 0
199
The number of LLDP neighbor information aged out : 0
The number of CDP frames transmitted
: 0
The number of CDP frames received
: 0
The number of CDP frames discarded
: 0
The number of CDP error frames
: 0
# Display the LLDP statistics for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> display lldp statistics interface FortyGigE1/0/1 agent nearest-customer
LLDP statistics information of port 1 [FortyGigE1/0/1]:
LLDP agent nearest-customer:
The number of LLDP frames transmitted
: 0
The number of LLDP frames received
: 0
The number of LLDP frames discarded
: 0
The number of LLDP error frames
: 0
The number of LLDP TLVs discarded
: 0
The number of LLDP TLVs unrecognized
: 0
The number of LLDP neighbor information aged out : 0
The number of CDP frames transmitted
: 0
The number of CDP frames received
: 0
The number of CDP frames discarded
: 0
The number of CDP error frames
: 0
Table 46 Command output
Field
Description
LLDP statistics global information
Global LLDP statistics.
LLDP neighbor information last change time
Time when the neighbor information was last
updated.
The number of LLDP neighbor information inserted
Number of times neighbor information was added.
The number of LLDP neighbor information deleted
Number of times neighbor information was removed.
The number of LLDP neighbor information dropped
Number of times neighbor information was dropped
due to lack of available memory space.
display lldp status
Use display lldp status to display LLDP status.
Syntax
display lldp status [ interface interface-type interface-number ] [ agent { nearest-bridge |
nearest-customer | nearest-nontpmr } ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
200
Parameters
interface interface-type interface-number: Specifies a port by its type and number.
agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the
status information for all LLDP agents.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
If you do not specify a port, the command displays the global LLDP status and the LLDP status of
each port.
Examples
# Display the global LLDP status and the LLDP status of each port.
<Sysname> display lldp status
Global status of LLDP: Enable
Bridge mode of LLDP: customer-bridge
The current number of LLDP neighbors: 0
The current number of CDP neighbors: 0
LLDP neighbor information last changed time: 0 days, 0 hours, 4 minutes, 40 seconds
Transmit interval
: 30s
Fast transmit interval
: 1s
Transmit max credit
: 5
Hold multiplier
: 4
Reinit delay
: 2s
Trap interval
: 5s
Fast start times
: 3
LLDP status information of port 1 [FortyGigE1/0/1]:
LLDP agent
nearest-bridge:
Port status of LLDP
: Enable
Admin status
: Tx_Rx
Trap flag
: No
MED trap flag
: No
Polling interval
: 0s
Number of LLDP neighbors
: 5
Number of MED neighbors
: 2
Number of CDP neighbors
: 0
Number of sent optional TLV
: 12
Number of received unknown TLV : 5
LLDP agent nearest-nontpmr:
Port status of LLDP
: Enable
Admin status
: Tx_Rx
Trap flag
: No
Polling interval
: 0s
Number of LLDP neighbors
: 5
Number of MED neighbors
: 2
Number of CDP neighbors
: 0
201
Number of sent optional TLV
: 12
Number of received unknown TLV : 5
LLDP agent nearest-customer:
Port status of LLDP
: Enable
Admin status
: Tx_Rx
Trap flag
: No
Polling interval
: 0s
Number of LLDP neighbors
: 5
Number of MED neighbors
: 2
Number of CDP neighbors
: 0
Number of sent optional TLV
: 12
Number of received unknown TLV : 5
Table 47 Command output
Field
Description
Bridge mode of LLDP
LLDP bridge mode: service-bridge or customer-bridge.
Global status of LLDP
Indicates whether LLDP is globally enabled.
LLDP neighbor information last
changed time
Time when the neighbor information was last updated.
Transmit interval
LLDP frame transmission interval.
Hold multiplier
TTL multiplier.
Reinit delay
LLDP reinitialization delay.
Transmit max credit
Token bucket size for sending LLDP frames.
Trap interval
Trap transmission interval.
Fast start times
Number of LLDP frames sent each time fast LLDP frame transmission
is triggered.
Port 1
LLDP status of port 1.
Port status of LLDP
Indicates whether LLDP is enabled on the port.
Admin status
LLDP operating mode of the port:
• Tx_Rx—The port can send and receive LLDP frames.
• Rx_Only—The port can only receive LLDP frames.
• Tx_Only—The port can only send LLDP frames.
• Disable—The port cannot send or receive LLDP frames.
Trap Flag
Indicates whether trapping is enabled.
Polling interval
LLDP polling interval, which is 0 when LLDP polling is disabled.
Number of neighbors
Number of LLDP neighbors connecting to the port.
Number of MED neighbors
Number of MED neighbors connecting to the port.
Number of CDP neighbors
Number of CDP neighbors connecting to the port.
Number of sent optional TLV
Number of optional TLVs contained in an LLDP frame sent through the
port.
Number of received unknown TLV
Number of unknown TLVs contained in a received LLDP frame.
202
display lldp tlv-config
Use display lldp tlv-config to display the types of advertisable optional LLDP TLVs of a port.
Syntax
display lldp tlv-config [ interface interface-type interface-number ] [ agent { nearest-bridge |
nearest-customer | nearest-nontpmr } ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
interface interface-type interface-number: Specifies a port by its type and number.
agent: Specifies an LLDP agent type. If you do not specify an agent type, the command displays the
types of advertisable optional LLDP TLVs for all LLDP agents.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
If you do not specify a port, the command displays the types of advertisable optional TLVs of all
ports.
Examples
# Display the types of advertisable optional LLDP TLVs of interface FortyGigE 1/0/1.
<Sysname> display lldp tlv-config interface fortygige 1/0/1
LLDP tlv-config of port 1[FortyGigE1/0/1]:
LLDP agent nearest-bridge:
NAME
STATUS
DEFAULT
Port Description TLV
YES
YES
System Name TLV
YES
YES
System Description TLV
YES
YES
System Capabilities TLV
YES
YES
Management Address TLV
YES
YES
Port VLAN ID TLV
YES
YES
Port And Protocol VLAN ID TLV
YES
YES
VLAN Name TLV
YES
YES
DCBX TLV
NO
NO
EVB TLV
NO
NO
Link Aggregation TLV
YES
YES
Management VID TLV
YES
YES
Basic optional TLV:
IEEE 802.1 extend TLV:
IEEE 802.3 extend TLV:
203
MAC-Physic TLV
YES
YES
Power via MDI TLV
YES
YES
Maximum Frame Size TLV
YES
YES
LLDP-MED extend TLV:
Capabilities TLV
YES
YES
Network Policy TLV
YES
YES
Location Identification TLV
NO
NO
Extended Power via MDI TLV
YES
YES
Inventory TLV
YES
YES
LLDP agent nearest-nontpmr:
NAME
STATUS
DEFAULT
Port Description TLV
YES
NO
System Name TLV
YES
NO
System Description TLV
YES
NO
System Capabilities TLV
YES
NO
Management Address TLV
YES
NO
Port VLAN ID TLV
YES
NO
Port And Protocol VLAN ID TLV
YES
NO
VLAN Name TLV
YES
NO
DCBX TLV
NO
NO
EVB TLV
YES
YES
Link Aggregation TLV
YES
NO
Management VID TLV
NO
NO
MAC-Physic TLV
YES
NO
Power via MDI TLV
YES
NO
Maximum Frame Size TLV
YES
NO
Basic optional TLV:
IEEE 802.1 extend TLV:
IEEE 802.3 extend TLV:
LLDP-MED extend TLV:
Capabilities TLV
YES
NO
Network Policy TLV
YES
NO
Location Identification TLV
NO
NO
Extended Power via MDI TLV
YES
NO
Inventory TLV
YES
NO
LLDP agent nearest-customer:
NAME
STATUS
DEFAULT
Port Description TLV
YES
YES
System Name TLV
YES
YES
System Description TLV
YES
YES
System Capabilities TLV
YES
YES
Management Address TLV
YES
YES
Port VLAN ID TLV
YES
YES
Port And Protocol VLAN ID TLV
YES
YES
VLAN Name TLV
YES
YES
Basic optional TLV:
IEEE 802.1 extend TLV:
204
DCBX TLV
NO
NO
EVB TLV
NO
NO
Link Aggregation TLV
YES
NO
Management VID TLV
YES
YES
MAC-Physic TLV
YES
NO
Power via MDI TLV
YES
NO
Maximum Frame Size TLV
YES
NO
IEEE 802.3 extend TLV:
LLDP-MED extend TLV:
Capabilities TLV
YES
YES
Network Policy TLV
YES
YES
Location Identification TLV
NO
NO
Extended Power via MDI TLV
YES
NO
Inventory TLV
YES
YES
Table 48 Command output
Field
Description
LLDP tlv-config of port 1
Advertisable optional TLVs of port 1.
NAME
TLV type.
STATUS
Indicates whether the type of TLV is sent through a port.
DEFAULT
Indicates whether the type of TLV is sent through a port by default.
Basic optional TLV
Basic optional TLVs:
• Port Description TLV.
• System Name TLV.
• System Description TLV.
• System Capabilities TLV.
• Management Address TLV.
IEEE 802.1 extended TLV
IEEE 802.1 organizationally specific TLVs:
• Port VLAN ID TLV.
• Port and protocol VLAN ID TLV.
• VLAN name TLV.
• DCBX TLV.
• EVB TLV.
• Management VID TLV.
NOTE:
The switch does not support EVB TLV in the current software version.
IEEE 802.3 extended TLV
IEEE 802.3 organizationally specific TLVs:
• MAC-Physic TLV.
• Power via MDI TLV.
• Link aggregation TLV.
• Maximum frame size TLV.
LLDP-MED extend TLV
LLDP-MED TLVs:
• Capabilities TLV.
• Network Policy TLV.
• Extended Power-via-MDI TLV.
• Location Identification TLV.
• Inventory TLV.
205
Field
Description
Inventory TLV
Inventory TLVs:
• Hardware Revision TLV.
• Firmware Revision TLV.
• Software Revision TLV.
• Serial Number TLV.
• Manufacturer Name TLV.
• Model name TLV.
• Asset ID TLV.
lldp admin-status
Use lldp admin-status to specify the LLDP operating mode.
Use undo lldp admin-status to restore the default.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] admin-status { disable | rx | tx | txrx }
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] admin-status
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } admin-status { disable | rx | tx | txrx }
undo lldp agent { nearest-customer | nearest-nontpmr } admin-status
In IRF physical interface view:
lldp admin-status { disable | rx | tx | txrx }
undo lldp admin-status
Default
The nearest bridge agent operates in txrx mode, and the nearest customer bridge agent and nearest
non-TPMR bridge agent operate in disable mode.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view,
the command configures the operating mode for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
disable: Specifies the Disable mode. A port in this mode cannot send or receive LLDP frames.
rx: Specifies the Rx mode. A port in this mode can only receive LLDP frames.
206
tx: Specifies the Tx mode. A port in this mode can only send LLDP frames.
txrx: Specifies the TxRx mode. A port in this mode can send and receive LLDP frames.
Examples
# Configure the LLDP operating mode as Rx for the nearest customer bridge agents on FortyGigE
1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer admin-status rx
lldp check-change-interval
Use lldp check-change-interval to enable LLDP polling and set the polling interval.
Use undo lldp check-change-interval to restore the default.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] check-change-interval interval
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] check-change-interval
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } check-change-interval interval
undo lldp agent { nearest-customer | nearest-nontpmr } check-change-interval
In IRF physical interface view:
lldp check-change-interval interval
undo lldp check-change-interval
Default
LLDP polling is disabled.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view,
the command enables LLDP polling and sets the polling interval for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
interval: Sets the LLDP polling interval in the range of 1 to 30 seconds.
Examples
# Enable LLDP polling and set the polling interval to 30 seconds for the nearest customer bridge
agents on FortyGigE 1/0/1.
207
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer check-change-interval 30
lldp compliance admin-status cdp
Use lldp compliance admin-status cdp to configure the operating mode of CDP-compatible LLDP.
Use undo lldp compliance admin-status cdp to restore the default.
Syntax
lldp compliance admin-status cdp { disable | txrx }
undo lldp compliance admin-status cdp
Default
CDP-compatible LLDP operates in disable mode.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Parameters
disable: Specifies the disable mode. CDP-compatible LLDP in this mode cannot receive or transmit
CDP packets.
txrx: Specifies the TxRx mode. CDP-compatible LLDP in this mode can send and receive CDP
packets.
Usage guidelines
For your device to work with Cisco IP phones, you must perform the following tasks:
•
Enable CDP-compatible LLDP globally.
•
Configure CDP-compatible LLDP to operate in TxRx mode on the specified ports.
Examples
# Enable CDP-compatible LLDP globally and configure CDP-compatible LLDP to operate in TxRx
mode on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] lldp compliance cdp
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp compliance admin-status cdp txrx
Related commands
lldp compliance cdp
lldp compliance cdp
Use lldp compliance cdp to enable CDP compatibility globally.
Use undo lldp compliance cdp to restore the default.
Syntax
lldp compliance cdp
208
undo lldp compliance cdp
Default
CDP compatibility is globally disabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
The maximum TTL that CDP allows is 255 seconds. To make CDP-compatible LLDP work correctly
with Cisco IP phones, configure the LLDP frame transmission interval to be no more than 1/3 of the
TTL value.
Examples
# Enable CDP compatibility globally.
<Sysname> system-view
[Sysname] lldp compliance cdp
Related commands
•
lldp hold-multiplier
•
lldp timer tx-interval
lldp enable
Use lldp enable to enable LLDP on a port.
Use undo lldp enable to disable LLDP on a port.
Syntax
lldp enable
undo lldp enable
Default
LLDP is enabled on a port.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
LLDP takes effect on a port only when LLDP is enabled both globally and on the port.
Examples
# Disable LLDP on FortyGigE 1/0/1.
<Sysname> system-view
209
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] undo lldp enable
Related commands
lldp global enable
lldp encapsulation snap
Use lldp encapsulation snap to configure the encapsulation format for LLDP frames as SNAP.
Use undo lldp encapsulation to restore the default.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] encapsulation snap
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] encapsulation
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } encapsulation snap
undo lldp agent { nearest-customer | nearest-nontpmr } encapsulation
In IRF physical interface view:
lldp encapsulation snap
undo lldp encapsulation
Default
The encapsulation format for LLDP frames is Ethernet II.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view,
the command configures the LLDP frame encapsulation format for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
LLDP-CDP packets use only SNAP encapsulation.
Examples
# Configure the encapsulation format for LLDP frames as SNAP on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp encapsulation snap
210
lldp fast-count
Use lldp fast-count to set the number of LLDP frames sent each time fast LLDP frame transmission
is triggered.
Use undo lldp fast-count to restore the default.
Syntax
lldp fast-count count
undo lldp fast-count
Default
The number is 4.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
count: Sets the number of LLDP frames sent each time fast LLDP frame transmission is triggered.
The value range is 1 to 8.
Examples
# Configure the device to send five LLDP frames each time fast LLDP frame transmission is
triggered.
<Sysname> system-view
[Sysname] lldp fast-count 5
lldp global enable
Use lldp global enable to enable LLDP globally.
Use undo lldp global enable to disable LLDP globally.
Syntax
lldp global enable
undo lldp global enable
Default
LLDP is disabled globally.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
LLDP takes effect only when LLDP is enabled both globally and on the port.
211
Examples
# Disable LLDP globally.
<Sysname> system-view
[Sysname] undo lldp global enable
Related commands
lldp enable
lldp hold-multiplier
Use lldp hold-multiplier to set the TTL multiplier.
Use undo lldp hold-multiplier to restore the default.
Syntax
lldp hold-multiplier value
undo lldp hold-multiplier
Default
The TTL multiplier is 4.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
value: Sets the TTL multiplier in the range of 2 to 10.
Usage guidelines
The TTL TLV carried in an LLDPDU determines how long the device information carried in the
LLDPDU can be saved on a recipient device.
By setting the TTL multiplier, you can configure the TTL of locally sent LLDP frames, which
determines how long information about the local device can be saved on a neighboring device. The
TTL is expressed by using the following formula:
TTL = Min (65535, (TTL multiplier × LLDP frame transmission interval))
As the expression shows, the TTL can be up to 65535 seconds.
Examples
# Set the TTL multiplier to 6.
<Sysname> system-view
[Sysname] lldp hold-multiplier 6
Related commands
lldp timer tx-interval
lldp management-address-format string
Use lldp management-address-format string to configure the encoding format of the
management address as string.
212
Use undo lldp management-address-format to restore the default.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] management-address-format string
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] management-address-format
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } management-address-format string
undo lldp agent { nearest-customer | nearest-nontpmr } management-address-format
Default
The encoding format of the management address is numeric.
Views
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view,
the command configures the encoding format of the management address for nearest bridge agents.
nearest-bridge: Specifies nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Usage guidelines
LLDP neighbors must use the same encoding format for the management address.
Examples
# Configure the encoding format of the management address as string for the nearest customer
bridge agents on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer management-address-format string
lldp max-credit
Use lldp max-credit to set the token bucket size for sending LLDP frames.
Use undo lldp max-credit to restore the default.
Syntax
lldp max-credit credit-value
undo lldp max-credit
Default
The token bucket size for sending LLDP frames is 5.
213
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
credit-value: Specifies the token bucket size for sending LLDP frames, in the range of 1 to 100.
Examples
# Set the token bucket size for sending LLDP frames to 10.
<Sysname> system-view
[Sysname] lldp max-credit 10
lldp mode
Use lldp mode to configure LLDP to operate in service bridge mode.
Use undo lldp mode to restore the default.
Syntax
lldp mode service-bridge
undo lldp mode
Default
LLDP operates in customer bridge mode.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
service-bridge: Specifies the service bridge mode.
Usage guidelines
The LLDP agent types supported by LLDP depend on the LLDP bridge mode:
•
Service bridge mode—LLDP supports nearest bridge agents and nearest non-TPMR bridge
agents. LLDP processes the LLDP frames with destination MAC addresses for these agents
and transparently transmits the LLDP frames with other destination MAC addresses in the
VLAN.
•
Customer bridge mode—LLDP supports nearest bridge agents, nearest non-TPMR bridge
agents, and nearest customer bridge agents. LLDP processes the LLDP frames with
destination MAC addresses for these agents and transparently transmits the LLDP frames with
other destination MAC addresses in the VLAN.
The bridge mode configuration takes effect only when LLDP is enabled globally. If LLDP is disabled
globally, LLDP can only operate in customer bridge mode.
Examples
# Configure LLDP to operate in service bridge mode.
<Sysname> system-view
214
[Sysname] lldp mode service-bridge
Related commands
lldp global enable
lldp notification med-topology-change enable
Use lldp notification med-topology-change enable to enable LLDP-MED trapping.
Use undo lldp notification med-topology-change enable to disable LLDP-MED trapping.
Syntax
lldp notification med-topology-change enable
undo lldp notification med-topology-change enable
Default
LLDP-MED trapping is disabled on ports.
Views
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view
Predefined user roles
network-admin
mdc-admin
Examples
# Enable LLDP-MED trapping for FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp notification med-topology-change enable
lldp notification remote-change enable
Use lldp notification remote-change enable to enable LLDP trapping.
Use undo lldp notification remote-change enable to disable LLDP trapping.
Syntax
In Layer 2/Layer 3 Ethernet interface view:
lldp [ agent { nearest-customer | nearest-nontpmr } ] notification remote-change enable
undo lldp [ agent { nearest-customer | nearest-nontpmr } ] notification remote-change enable
In Layer 2/Layer 3 aggregate interface view:
lldp agent { nearest-customer | nearest-nontpmr } notification remote-change enable
undo lldp agent { nearest-customer | nearest-nontpmr } notification remote-change enable
In IRF physical interface view:
lldp notification remote-change enable
undo lldp notification remote-change enable
Default
LLDP trapping is disabled on ports.
215
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view,
the command enables LLDP trapping for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
Examples
# Enable LLDP trapping for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer notification remote-change enable
lldp timer fast-interval
Use lldp timer fast-interval to set an interval for fast LLDP frame transmission.
Use undo lldp timer fast-interval to restore the default.
Syntax
lldp timer fast-interval interval
undo lldp timer fast-interval
Default
The interval for fast LLDP frame transmission is 1 second.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval: Sets an interval for fast LLDP frame transmission, in the range of 1 to 3600 seconds.
Examples
# Set the interval for fast LLDP frame transmission to 2 seconds.
<Sysname> system-view
[Sysname] lldp timer fast-interval 2
lldp timer notification-interval
Use lldp timer notification-interval to set the LLDP trap and LLDP-MED trap transmission interval.
216
Use undo lldp timer notification-interval to restore the default.
Syntax
lldp timer notification-interval interval
undo lldp timer notification-interval
Default
The LLDP trap and LLDP-MED trap transmission interval is 30 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval: Sets the LLDP trap and LLDP-MED trap transmission interval in the range of 5 to 3600
seconds.
Examples
# Set the LLDP trap and LLDP-MED trap transmission interval to 8 seconds.
<Sysname> system-view
[Sysname] lldp timer notification-interval 8
lldp timer reinit-delay
Use lldp timer reinit-delay to set the LLDP reinitialization delay.
Use undo lldp timer reinit-delay to restore the default.
Syntax
lldp timer reinit-delay delay
undo lldp timer reinit-delay
Default
The LLDP reinitialization delay is 2 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
delay: Sets the LLDP reinitialization delay in the range of 1 to 10 seconds.
Examples
# Set the LLDP reinitialization delay to 4 seconds.
<Sysname> system-view
[Sysname] lldp timer reinit-delay 4
217
lldp timer tx-interval
Use lldp timer tx-interval to set the LLDP frame transmission interval.
Use undo lldp timer tx-interval to restore the default.
Syntax
lldp timer tx-interval interval
undo lldp timer tx-interval
Default
The LLDP frame transmission interval is 30 seconds.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
interval: Sets the LLDP frame transmission interval in the range of 5 to 32768 seconds.
Examples
# Set the LLDP frame transmission interval to 20 seconds.
<Sysname> system-view
[Sysname] lldp timer tx-interval 20
lldp tlv-enable
Use lldp tlv-enable to configure the types of advertisable TLVs.
Use undo lldp tlv-enable to disable the advertising of specific types of TLVs.
Syntax
In Layer 2 Ethernet interface view:
•
For nearest bridge agents:
lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description |
system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | port-vlan-id |
link-aggregation | dcbx | protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] |
management-vid [ mvlan-id ] } | dot3-tlv { all | mac-physic | max-frame-size | power } |
med-tlv { all | capability | inventory | network-policy | power-over-ethernet | location-id
{ civic-address device-type country-code { ca-type ca-value }&<1-10> | elin-address
tel-number } } }
undo lldp tlv-enable { basic-tlv { all | port-description | system-capability |
system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all
| port-vlan-id | link-aggregation | dcbx | protocol-vlan-id | vlan-name | management-vid } |
dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory |
network-policy | power-over-ethernet | location-id } }
•
For nearest non-TPMR bridge agents:
lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | port-description |
system-capability | system-description | system-name | management-address-tlv
[ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }
218
undo lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | port-description |
system-capability | system-description | system-name | management-address-tlv
[ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }
•
For nearest customer bridge agents:
lldp agent nearest-customer tlv-enable { basic-tlv { all | port-description |
system-capability | system-description | system-name | management-address-tlv
[ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }
undo lldp agent nearest-customer tlv-enable { basic-tlv { all | port-description |
system-capability | system-description | system-name | management-address-tlv
[ ip-address ] } | dot1-tlv { all | port-vlan-id | link-aggregation } }
In Layer 3 Ethernet interface view:
•
lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description |
system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } |
dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory |
power-over-ethernet | location-id { civic-address device-type country-code { ca-type
ca-value }&<1-10> | elin-address tel-number } } }
•
lldp agent { nearest-nontpmr | nearest-customer } tlv-enable { basic-tlv { all |
port-description | system-capability | system-description | system-name |
management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } }
•
undo lldp tlv-enable { basic-tlv { all | port-description | system-capability |
system-description | system-name | management-address-tlv [ ip-address ] } | dot1-tlv { all
| link-aggregation } | dot3-tlv { all | mac-physic | max-frame-size | power } | med-tlv { all |
capability | inventory | power-over-ethernet | location-id } }
•
undo lldp agent { nearest-nontpmr | nearest-customer } tlv-enable { basic-tlv { all |
port-description | system-capability | system-description | system-name |
management-address-tlv [ ip-address ] } | dot1-tlv { all | link-aggregation } }
In Layer 2 aggregate interface view:
•
lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | management-address-tlv
[ ip-address ] | port-description | system-capability | system-description | system-name } |
dot1-tlv { all | port-vlan-id } }
•
lldp agent nearest-customer tlv-enable { basic-tlv { all | management-address-tlv
[ ip-address ] | port-description | system-capability | system-description | system-name } |
dot1-tlv { all | port-vlan-id } }
•
lldp tlv-enable dot1-tlv { protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] | management-vid
[ mvlan-id ] }
•
undo lldp agent nearest-nontpmr tlv-enable { basic-tlv { all | management-address-tlv
[ ip-address ] | port-description | system-capability | system-description | system-name } |
dot1-tlv { all | port-vlan-id } }
•
undo lldp agent nearest-customer tlv-enable { basic-tlv { all | management-address-tlv
[ ip-address ] | port-description | system-capability | system-description | system-name } |
dot1-tlv { all | port-vlan-id } }
•
undo lldp tlv-enable dot1-tlv { protocol-vlan-id | vlan-name | management-vid }
In Layer 3 aggregate interface view:
•
lldp agent { nearest-customer | nearest-nontpmr } tlv-enable basic-tlv { all |
management-address-tlv [ ip-address ] | port-description | system-capability |
system-description | system-name }
•
undo lldp agent { nearest-customer | nearest-nontpmr } tlv-enable basic-tlv { all |
management-address-tlv [ ip-address ] | port-description | system-capability |
system-description | system-name }
In IRF physical interface view:
219
•
lldp tlv-enable basic-tlv { port-description | system-capability | system-description |
system-name }
•
undo lldp tlv-enable basic-tlv { port-description | system-capability | system-description
| system-name }
Default
On Layer 2 Ethernet interfaces:
•
Nearest bridge agents can advertise all types of LLDP TLVs except the following types:
{
DCBX TLVs.
{
Location identification TLVs.
{
Port and protocol VLAN ID TLVs.
{
VLAN name TLVs.
{
Management VLAN ID TLVs.
•
Nearest non-TPMR bridge agents advertise no TLVs.
•
Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally
specific TLVs.
On Layer 3 Ethernet interfaces:
•
Nearest bridge agents can advertise all types of LLDP TLVs (only link aggregation TLV in 802.1
organizationally specific TLVs) except network policy TLVs.
•
Nearest non-TPMR bridge agents advertise no TLVs.
•
Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally
specific TLVs (only link aggregation TLV).
On Layer 2 aggregate interfaces:
•
Nearest bridge agents are not supported on Layer 2 aggregate interfaces.
•
Nearest non-TPMR bridge agents advertise no TLVs.
•
Nearest customer bridge agents can advertise basic TLVs and IEEE 802.1 organizationally
specific TLVs (only port and protocol VLAN ID TLV, VLAN name TLV, and management VLAN
ID TLV).
On Layer 3 aggregate interfaces:
•
Nearest bridge agents are not supported on Layer 3 aggregate interfaces.
•
Nearest non-TPMR bridge agents advertise no TLVs.
•
Nearest customer bridge agents can advertise basic TLVs.
On IRF physical interfaces, an agent can advertise all supported TLVs.
Views
IRF physical interface view
Layer 2/Layer 3 Ethernet interface view
Layer 2/Layer 3 aggregate interface view
Predefined user roles
network-admin
mdc-admin
Parameters
agent: Specifies an LLDP agent type. If you do not specify an agent type in Ethernet interface view,
the command configures the types of advertisable TLVs for nearest bridge agents.
nearest-customer: Specifies nearest customer bridge agents.
220
nearest-nontpmr: Specifies nearest non-TPMR bridge agents.
all: Advertises all TLVs of a specific type.
•
•
Enables the interface to advertise the following TLVs:
{
All basic LLDP TLVs if the all keyword is specified for basic-tlv.
{
All IEEE 802.1 organizationally specific LLDP TLVs if the all keyword is specified for
dot1-tlv.
{
All IEEE 802.3 organizationally specific LLDP TLVs if the all keyword is specified for
dot3-tlv.
Enables the interface to advertise all LLDP-MED TLVs except location identification TLVs if the
all keyword is specified for med-tlv.
basic-tlv: Advertises basic LLDP TLVs.
management-address-tlv [ ip-address ]: Advertises management address TLVs. ip-address
specifies the management address to be advertised. By default, the following rules apply:
•
When you execute the lldp tlv-enable command:
{
For a Layer 2 Ethernet or aggregate interface, the management address is the primary IP
address of the VLAN interface meeting the following requirements:
−
In up state.
−
The corresponding VLAN ID is the lowest among the VLANs permitted on the port.
If none of the VLAN interfaces of the permitted VLANs is assigned an IP address or all
VLAN interfaces are down, the MAC address of the port will be advertised.
{
•
For a Layer 3 Ethernet or aggregate interface, the management address is its own IP
address. If no IP address is configured for the Layer 3 Ethernet interface, the MAC address
of the port will be advertised.
When you execute the undo lldp tlv-enable command:
{
If you do not specify ip-address, the port does not advertise any management address TLV.
{
If you specify ip-address, the port advertise the default management address TLVs.
port-description: Advertises port description TLVs.
system-capability: Advertises system capabilities TLVs.
system-description: Advertises system description TLVs.
system-name: Advertises system name TLVs.
dot1-tlv: Advertises IEEE 802.1 organizationally specific LLDP TLVs.
dcbx: Advertises Data Center Bridging Exchange Protocol TLVs.
port-vlan-id: Advertises port VLAN ID TLVs.
protocol-vlan-id [ vlan-id ]: Advertises port and protocol VLAN ID TLVs. The vlan-id argument
specifies a VLAN ID in the TLVs to be advertised. The VLAN ID is in the range of 1 to 4094, and the
default is the lowest VLAN ID on the port.
vlan-name [ vlan-id ]: Advertises VLAN name TLVs. The vlan-id argument specifies a VLAN ID in the
TLVs to be advertised. The VLAN ID is in the range of 1 to 4094, and the default is the lowest VLAN
ID on the port.
management-vid [ mvlan-id ]: Advertises the management VLAN ID TLV. The mvlan-id argument
specifies a management VLAN ID in the TLVs to be advertised. The management VLAN ID is in the
range of 1 to 4094. If you do not specify a management VLAN ID, the value 0 is advertised, which
means that the LLDP agent is not configured with a management VLAN ID.
dot3-tlv: Advertises IEEE 802.3 organizationally specific LLDP TLVs.
link-aggregation: Advertises link aggregation TLVs.
221
mac-physic: Advertises MAC/PHY configuration/status TLVs.
max-frame-size: Advertises maximum frame size TLVs.
power: Advertises power in MDI TLVs and power stateful control TLVs.
med-tlv: Advertises LLDP-MED TLVs.
capability: Advertises LLDP-MED capabilities TLVs.
inventory: Advertises the following TLVs: hardware revision, firmware revision, software revision,
serial number, manufacturer name, model name, and asset ID.
location-id: Advertises location identification TLVs.
civic-address: Inserts the normal address information about the network device in location
identification TLVs .
device-type: Sets a device type value in the range of 0 to 2:
•
Value 0 specifies a DHCP server.
•
Value 1 specifies a switch.
•
Value 2 specifies an LLDP-MED endpoint.
country-code: Sets a country code, corresponding to ISO 3166.
{ ca-type ca-value }&<1-10>: Configures address information. ca-type represents the address
information type in the range of 0 to 255, ca-value represents address information, a string of 1 to
250 characters, and &<1-10> indicates that you can specify up to 10 ca-type ca-value pairs.
elin-address: Inserts telephone numbers for emergencies in location identification TLVs.
tel-number: Sets the telephone number for emergencies, a string of 10 to 25 characters.
network-policy: Advertises network policy TLVs.
power-over-ethernet: Advertises extended power-via-MDI TLVs.
Usage guidelines
Nearest bridge agents are not supported on Layer 2 aggregate interfaces.
You can enable the device to advertise multiple types of TLVs by using this command without the all
keyword specified.
If the MAC/PHY configuration/status TLV is not advertisable, none of the LLDP-MED TLVs will be
advertised whether or not they are advertisable. If the LLDP-MED capabilities TLV is not advertisable,
the other LLDP-MED TLVs will not be advertised whether or not they are advertisable.
The port and protocol VLAN ID TLV, VLAN name TLV, and management VLAN ID TLV in IEEE 802.1
organizationally specific LLDP TLVs can be configured only for nearest bridge agents. The
configuration can be inherited by nearest customer bridge agents and nearest non-TPMR bridge
agents.
Examples
# Enable the device to advertise link aggregation TLVs of the IEEE 802.1 organizationally specific
TLVs for the nearest customer bridge agents on FortyGigE 1/0/1.
<Sysname> system-view
[Sysname] interface fortygige 1/0/1
[Sysname-FortyGigE1/0/1] lldp agent nearest-customer tlv-enable dot1-tlv
link-aggregation
222
Document conventions and icons
Conventions
This section describes the conventions used in the documentation.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.
Command conventions
Convention
Description
Boldface
Bold text represents commands and keywords that you enter literally as shown.
Italic
Italic text represents arguments that you replace with actual values.
[]
Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n>
The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
#
A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface
Window names, button names, field names, and menu items are in Boldface. For
example, the New User window appears; click OK.
>
Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.
Convention
Description
Symbols
WARNING!
An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION:
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT:
An alert that calls attention to essential information.
NOTE:
TIP:
An alert that contains additional or supplementary information.
An alert that provides helpful information.
223
Network topology icons
Convention
Description
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Represents an access controller, a unified wired-WLAN module, or the access
controller engine on a unified wired-WLAN switch.
Represents an access point.
T
Represents a wireless terminator unit.
T
Represents a wireless terminator.
Represents a mesh access point.
Represents omnidirectional signals.
Represents directional signals.
Represents a security product, such as a firewall, UTM, multiservice security
gateway, or load balancing device.
Represents a security card, such as a firewall, load balancing, NetStream, SSL VPN,
IPS, or ACG card.
224
Support and other resources
Accessing Hewlett Packard Enterprise Support
•
For live assistance, go to the Contact Hewlett Packard Enterprise Worldwide website:
www.hpe.com/assistance
•
To access documentation and support services, go to the Hewlett Packard Enterprise Support
Center website:
www.hpe.com/support/hpesc
Information to collect
•
Technical support registration number (if applicable)
•
Product name, model or version, and serial number
•
Operating system name and version
•
Firmware version
•
Error messages
•
Product-specific reports and logs
•
Add-on products or components
•
Third-party products or components
Accessing updates
•
Some software products provide a mechanism for accessing software updates through the
product interface. Review your product documentation to identify the recommended software
update method.
•
To download product updates, go to either of the following:
{
Hewlett Packard Enterprise Support Center Get connected with updates page:
www.hpe.com/support/e-updates
{
Software Depot website:
www.hpe.com/support/softwaredepot
•
To view and update your entitlements, and to link your contracts, Care Packs, and warranties
with your profile, go to the Hewlett Packard Enterprise Support Center More Information on
Access to Support Materials page:
www.hpe.com/support/AccessToSupportMaterials
IMPORTANT:
Access to some updates might require product entitlement when accessed through the Hewlett
Packard Enterprise Support Center. You must have an HP Passport set up with relevant
entitlements.
225
Websites
Website
Link
Networking websites
Hewlett Packard Enterprise Networking Information Library
www.hpe.com/networking/resourcefinder
Hewlett Packard Enterprise Networking website
www.hpe.com/info/networking
Hewlett Packard Enterprise Networking My Support
www.hpe.com/networking/support
General websites
Hewlett Packard Enterprise Information Library
www.hpe.com/info/enterprise/docs
Hewlett Packard Enterprise Support Center
www.hpe.com/support/hpesc
Contact Hewlett Packard Enterprise Worldwide
www.hpe.com/assistance
Subscription Service/Support Alerts
www.hpe.com/support/e-updates
Software Depot
www.hpe.com/support/softwaredepot
Customer Self Repair (not applicable to all devices)
www.hpe.com/support/selfrepair
Insight Remote Support (not applicable to all devices)
www.hpe.com/info/insightremotesupport/docs
Customer self repair
Hewlett Packard Enterprise customer self repair (CSR) programs allow you to repair your product. If a
CSR part needs to be replaced, it will be shipped directly to you so that you can install it at your
convenience. Some parts do not qualify for CSR. Your Hewlett Packard Enterprise authorized service
provider will determine whether a repair can be accomplished by CSR.
For more information about CSR, contact your local service provider or go to the CSR website:
www.hpe.com/support/selfrepair
Remote support
Remote support is available with supported devices as part of your warranty, Care Pack Service, or
contractual support agreement. It provides intelligent event diagnosis, and automatic, secure
submission of hardware event notifications to Hewlett Packard Enterprise, which will initiate a fast
and accurate resolution based on your product’s service level. Hewlett Packard Enterprise strongly
recommends that you register your device for remote support.
For more information and device support details, go to the following website:
www.hpe.com/info/insightremotesupport/docs
Documentation feedback
Hewlett Packard Enterprise is committed to providing documentation that meets your needs. To help
us improve the documentation, send any errors, suggestions, or comments to Documentation
Feedback (docsfeedback@hpe.com). When submitting your feedback, include the document title,
part number, edition, and publication date located on the front cover of the document. For online help
content, include the product name, product version, help edition, and publication date located on the
legal notices page.
226
Index
ABCDFIJLMNPRSUV
A
active region-configuration,111
B
bandwidth,1
bandwidth,161
bandwidth,76
bandwidth,45
broadcast-suppression,34
C
check region-configuration,111
D
dcbx version,188
default,161
default,45
default,1
default,76
description,46
description,162
description,77
description,2
display counters,3
display counters rate,4
display ethernet statistics,5
display interface,77
display interface,8
display interface inloopback,47
display interface loopback,49
display interface null,52
display interface range,57
display interface vlan-interface,163
display lacp system-id,81
display link-aggregation capability,82
display link-aggregation load-sharing mode,83
display link-aggregation load-sharing path,84
display link-aggregation member-port,86
display link-aggregation summary,88
display link-aggregation verbose,89
display lldp local-information,188
display lldp neighbor-information,193
display lldp statistics,198
display lldp status,200
display lldp tlv-config,203
display loopback-detection,155
display mac-address,61
display mac-address aging-time,62
display mac-address mac-learning,63
display mac-address statistics,64
display packet-drop,19
display port,175
display port-isolate group,108
display reserve-vlan-interface,166
display storm-constrain,35
display stp,112
display stp abnormal-port,118
display stp bpdu-statistics,118
display stp down-port,120
display stp history,121
display stp region-configuration,123
display stp root,124
display stp tc,124
display vlan,166
display vlan brief,168
display vlan mapping,183
duplex,20
F
flow-control,20
flow-control receive enable,21
I
instance,126
interface,22
interface bridge-aggregation,92
interface loopback,53
interface null,54
interface range,57
interface range name,59
interface route-aggregation,93
interface vlan-interface,169
J
jumboframe enable,23
L
lacp edge-port,94
lacp period short,95
lacp system-priority,95
link-aggregation bfd ipv4,96
link-aggregation capability,97
link-aggregation global load-sharing mode,98
link-aggregation ignore vlan,99
link-aggregation lacp traffic-redirect-notification
enable,99
link-aggregation load-sharing mode,100
227
port access vlan,177
port hybrid pvid,177
port hybrid vlan,178
port link-aggregation group,105
port link-mode,24
port link-type,179
port trunk permit vlan,180
port trunk pvid,181
port up-mode,38
port-isolate enable,108
port-isolate group,109
priority-flow-control,25
priority-flow-control no-drop dot1p,26
R
region-name,127
reserve-vlan-interface,171
reset counters interface,106
reset counters interface,28
reset counters interface loopback,55
reset counters interface null,55
reset ethernet statistics,29
reset lacp statistics,106
reset packet-drop interface,29
reset stp,128
revision-level,128
S
service,172
shutdown,56
shutdown,173
shutdown,107
shutdown,30
speed,31
storm-constrain,38
storm-constrain control,40
storm-constrain enable log,41
storm-constrain enable trap,41
storm-constrain interval,42
stp bpdu-protection,129
stp bridge-diameter,129
stp compliance,130
stp config-digest-snooping,131
stp cost,132
stp edged-port,133
stp enable,134
stp global config-digest-snooping,135
stp global enable,135
stp global mcheck,136
stp loop-protection,137
stp max-hops,137
stp mcheck,138
link-aggregation load-sharing mode local-first,101
link-aggregation mode,102
link-aggregation port-priority,102
link-aggregation selected-port maximum,103
link-aggregation selected-port minimum,104
link-delay,23
lldp admin-status,206
lldp check-change-interval,207
lldp compliance admin-status cdp,208
lldp compliance cdp,208
lldp enable,209
lldp encapsulation snap,210
lldp fast-count,211
lldp global enable,211
lldp hold-multiplier,212
lldp management-address-format string,212
lldp max-credit,213
lldp mode,214
lldp notification med-topology-change enable,215
lldp notification remote-change enable,215
lldp timer fast-interval,216
lldp timer notification-interval,216
lldp timer reinit-delay,217
lldp timer tx-interval,218
lldp tlv-enable,218
loopback-detection action,156
loopback-detection enable,157
loopback-detection global action,157
loopback-detection global enable,158
loopback-detection interval-time,159
M
mac-address (interface view),65
mac-address (system view),66
mac-address information enable (interface view),72
mac-address information enable (system view),72
mac-address information interval,73
mac-address information mode,74
mac-address information queue-length,74
mac-address mac-learning enable,68
mac-address mac-learning ingress,69
mac-address mac-roaming enable,70
mac-address timer,70
mtu,104
mtu,169
mtu,44
multicast-suppression,36
N
name,170
P
port,176
228
stp timer forward-delay,150
stp timer hello,150
stp timer max-age,151
stp timer-factor,152
stp transmit-limit,153
U
unicast-suppression,42
using fortygige,32
using tengige,33
V
vlan,174
vlan mapping,184
vlan mapping double-tagged,185
vlan mapping untagged,186
vlan-mapping modulo,154
stp mode,139
stp no-agreement-check,140
stp pathcost-standard,140
stp point-to-point,141
stp port priority,142
stp port-log,143
stp priority,144
stp region-configuration,144
stp role-restriction,145
stp root primary,145
stp root secondary,146
stp root-protection,147
stp tc-protection,148
stp tc-protection threshold,148
stp tc-restriction,149
229