HP A5830 Switch Series Layer 2 - LAN

HP A5830 Switch Series
Layer 2 - LAN Switching
Command Reference
Abstract
This document describes the commands and command syntax options available for the HP A Series
products.
This document is intended for network planners, field technical support and servicing engineers, and
network administrators who work with HP A Series products.
Part number: 5998-2073
Software version: Release 1109
Document version: 6W100-20110715
Legal and notice information
© Copyright 2011 Hewlett-Packard Development Company, L.P.
No part of this documentation may be reproduced or transmitted in any form or by any means without
prior written consent of Hewlett-Packard Development Company, L.P.
The information contained herein is subject to change without notice.
HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS
MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained
herein or for incidental or consequential damages in connection with the furnishing, performance, or use
of this material.
The only warranties for HP products and services are set forth in the express warranty statements
accompanying such products and services. Nothing herein should be construed as constituting an
additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein.
Contents
Ethernet interface configuration commands ·················································································································· 1
General Ethernet interface configuration commands ···································································································· 1
default ········································································································································································ 1
description································································································································································· 1
display counters ························································································································································ 2
display counters rate ················································································································································ 3
display interface ······················································································································································· 5
display packet-drop interface······························································································································· 14
display packet-drop summary ······························································································································ 15
display port combo ··············································································································································· 16
duplex ····································································································································································· 16
flow-interval ···························································································································································· 17
interface·································································································································································· 18
jumboframe enable ··············································································································································· 18
link-delay ································································································································································ 19
loopback ································································································································································ 20
port link-mode ························································································································································ 20
port link-mode interface-list ··································································································································· 21
reset counters interface ········································································································································· 22
reset packet-drop interface ··································································································································· 23
shutdown ································································································································································ 23
speed ······································································································································································ 24
Layer 2 Ethernet interface configuration commands ·································································································· 25
broadcast-suppression ·········································································································································· 25
display loopback-detection ·································································································································· 26
display port-group manual ··································································································································· 27
group-member························································································································································ 28
loopback-detection action ···································································································································· 29
loopback-detection control enable ······················································································································ 30
loopback-detection enable ··································································································································· 30
loopback-detection interval-time ·························································································································· 31
loopback-detection per-vlan enable ···················································································································· 32
mdi ·········································································································································································· 33
multicast-suppression ············································································································································· 33
port auto-power-down ··········································································································································· 35
port-group manual ················································································································································· 35
speed auto ····························································································································································· 36
unicast-suppression················································································································································ 37
virtual-cable-test ····················································································································································· 38
Layer 3 Ethernet interface configuration commands ·································································································· 39
mtu ·········································································································································································· 39
Loopback and null interface configuration commands ······························································································ 40
default ····································································································································································· 40
description······························································································································································ 40
display interface loopback ··································································································································· 41
display interface null ············································································································································· 44
interface loopback ················································································································································ 46
interface null ·························································································································································· 46
reset counters interface loopback ························································································································ 47
i
reset counters interface null ·································································································································· 47
shutdown ································································································································································ 48
MAC address table configuration commands ············································································································ 49
display mac-address ············································································································································· 49
display mac-address aging-time ·························································································································· 50
display mac-address statistics ······························································································································ 51
mac-address (interface view) ······························································································································· 52
mac-address (system view) ··································································································································· 53
mac-address mac-learning disable ······················································································································ 54
mac-address max-mac-count ································································································································ 55
mac-address timer ················································································································································· 56
MAC Information configuration commands ················································································································ 58
mac-address information enable (Ethernet interface view) ··············································································· 58
mac-address information enable (system view)·································································································· 58
mac-address information interval························································································································· 59
mac-address information mode ··························································································································· 60
mac-address information queue-length ··············································································································· 60
Ethernet link aggregation configuration commands ·································································································· 62
default ····································································································································································· 62
description······························································································································································ 62
display interface ···················································································································································· 63
display lacp system-id ··········································································································································· 66
display link-aggregation load-sharing mode ······································································································ 67
display link-aggregation member-port ················································································································ 69
display link-aggregation summary ······················································································································ 71
display link-aggregation verbose ························································································································ 73
enable snmp trap updown ··································································································································· 75
interface bridge-aggregation ······························································································································· 76
lacp period short ··················································································································································· 77
lacp system-priority················································································································································ 77
link-aggregation lacp traffic-redirect-notification enable ··················································································· 78
link-aggregation load-sharing mode ··················································································································· 78
link-aggregation load-sharing mode local-first ··································································································· 80
link-aggregation mode ·········································································································································· 81
link-aggregation port-priority ······························································································································· 81
port link-aggregation group ································································································································· 82
reset counters interface ········································································································································· 82
reset lacp statistics ················································································································································· 83
shutdown ································································································································································ 84
Port isolation configuration commands ······················································································································· 85
display port-isolate group ····································································································································· 85
port-isolate enable ················································································································································· 86
Spanning tree configuration commands ····················································································································· 88
active region-configuration ··································································································································· 88
bpdu-drop any ······················································································································································· 88
check region-configuration ··································································································································· 89
display stp ······························································································································································ 90
display stp abnormal-port ····································································································································· 99
display stp bpdu-statistics ··································································································································· 100
display stp down-port·········································································································································· 103
display stp history················································································································································ 104
display stp ignored-vlan ····································································································································· 106
ii
display stp region-configuration ························································································································ 107
display stp root ···················································································································································· 108
display stp tc ························································································································································ 109
instance ································································································································································ 111
region-name ························································································································································· 112
reset stp ································································································································································ 112
revision-level························································································································································· 113
stp bpdu-protection·············································································································································· 114
stp bridge-diameter ············································································································································· 114
stp compliance····················································································································································· 115
stp config-digest-snooping ·································································································································· 116
stp cost·································································································································································· 117
stp edged-port ······················································································································································ 118
stp enable····························································································································································· 119
stp ignored vlan ··················································································································································· 121
stp loop-protection ··············································································································································· 121
stp max-hops ························································································································································ 122
stp mcheck ··························································································································································· 123
stp mode ······························································································································································· 124
stp no-agreement-check ······································································································································ 124
stp pathcost-standard ·········································································································································· 125
stp point-to-point ·················································································································································· 126
stp port priority ···················································································································································· 127
stp port-log ··························································································································································· 128
stp priority ···························································································································································· 129
stp region-configuration ······································································································································ 130
stp root primary ··················································································································································· 130
stp root secondary ··············································································································································· 131
stp root-protection ················································································································································ 132
stp tc-protection ···················································································································································· 133
stp tc-protection threshold ··································································································································· 134
stp timer forward-delay ······································································································································· 134
stp timer hello ······················································································································································ 135
stp timer max-age ················································································································································ 136
stp timer-factor ····················································································································································· 137
stp transmit-limit ··················································································································································· 138
vlan-mapping modulo ········································································································································· 139
BPDU tunneling configuration commands ················································································································ 140
bpdu-tunnel dot1q ··············································································································································· 140
bpdu-tunnel tunnel-dmac ····································································································································· 141
VLAN configuration commands ································································································································ 143
VLAN configuration commands·································································································································· 143
default ··································································································································································· 143
description···························································································································································· 143
display interface vlan-interface ·························································································································· 144
display vlan ·························································································································································· 147
interface vlan-interface········································································································································ 149
ip address ···························································································································································· 150
mtu ········································································································································································ 151
name ····································································································································································· 151
reset counters interface vlan-interface ··············································································································· 152
shutdown ······························································································································································ 153
vlan ······································································································································································· 153
Port-based VLAN configuration commands··············································································································· 154
iii
display port ·························································································································································· 154
port········································································································································································ 155
port access vlan ··················································································································································· 156
port hybrid pvid ··················································································································································· 157
port hybrid vlan ··················································································································································· 158
port link-type ························································································································································ 160
port trunk permit vlan ·········································································································································· 161
port trunk pvid ····················································································································································· 162
MAC-based VLAN configuration commands ············································································································ 163
display mac-vlan·················································································································································· 163
display mac-vlan interface·································································································································· 165
mac-vlan enable ·················································································································································· 166
mac-vlan mac-address········································································································································· 166
mac-vlan trigger enable ······································································································································ 167
port pvid disable ················································································································································· 168
vlan precedence ·················································································································································· 169
Protocol-based VLAN configuration commands ······································································································· 169
display protocol-vlan interface ··························································································································· 169
display protocol-vlan vlan ·································································································································· 170
port hybrid protocol-vlan ···································································································································· 171
protocol-vlan ························································································································································ 173
IP subnet-based VLAN configuration commands ······································································································ 175
display ip-subnet-vlan interface ·························································································································· 175
display ip-subnet-vlan vlan ································································································································· 176
ip-subnet-vlan ······················································································································································· 177
port hybrid ip-subnet-vlan ··································································································································· 177
Isolate-user-VLAN configuration commands ············································································································· 180
display isolate-user-vlan ······································································································································ 180
isolate-user-vlan···················································································································································· 182
isolate-user-vlan enable ······································································································································· 183
isolated-vlan enable ············································································································································ 183
port isolate-user-vlan promiscuous ····················································································································· 184
port isolate-user-vlan host ··································································································································· 187
GVRP configuration commands ································································································································· 189
display garp statistics·········································································································································· 189
display garp timer ··············································································································································· 190
display gvrp local-vlan ········································································································································ 191
display gvrp state ················································································································································ 191
display gvrp statistics ·········································································································································· 193
display gvrp status ·············································································································································· 194
display gvrp vlan-operation ······························································································································· 195
garp timer hold ···················································································································································· 195
garp timer join ····················································································································································· 196
garp timer leave ·················································································································································· 197
garp timer leaveall ·············································································································································· 197
gvrp······································································································································································· 198
gvrp registration ·················································································································································· 199
reset garp statistics ·············································································································································· 200
QinQ configuration commands ································································································································ 201
nest········································································································································································ 201
qinq enable ·························································································································································· 202
qinq ethernet-type customer-tag ························································································································· 202
qinq ethernet-type service-tag ···························································································································· 203
iv
qinq transparent-vlan ·········································································································································· 204
VLAN mapping configuration commands ················································································································ 206
nest········································································································································································ 206
qinq enable downlink ········································································································································· 206
qinq enable uplink ·············································································································································· 207
remark customer-vlan-id ······································································································································ 208
remark service-vlan-id ········································································································································· 208
LLDP configuration commands ··································································································································· 210
display lldp local-information ····························································································································· 210
display lldp neighbor-information······················································································································ 213
display lldp statistics ··········································································································································· 218
display lldp status ················································································································································ 219
display lldp tlv-config ·········································································································································· 221
lldp admin-status ·················································································································································· 223
lldp check-change-interval ·································································································································· 224
lldp enable ··························································································································································· 224
lldp encapsulation snap······································································································································ 225
lldp fast-count ······················································································································································· 225
lldp hold-multiplier ··············································································································································· 226
lldp management-address-format string ············································································································ 227
lldp management-address-tlv ······························································································································ 227
lldp notification remote-change enable············································································································· 228
lldp timer notification-interval ····························································································································· 229
lldp timer reinit-delay ·········································································································································· 229
lldp timer tx-delay ················································································································································ 230
lldp timer tx-interval ············································································································································· 230
lldp tlv-enable······················································································································································· 231
Service loopback group configuration commands ································································································· 234
display service-loopback group ························································································································· 234
port service-loopback group ······························································································································ 235
service-loopback group ······································································································································ 236
Support and other resources ····································································································································· 237
Contacting HP ······························································································································································ 237
Subscription service ············································································································································ 237
Related information ······················································································································································ 237
Documents ···························································································································································· 237
Websites ······························································································································································ 237
Conventions ·································································································································································· 238
Index············································································································································································· 240
v
Ethernet interface configuration commands
General Ethernet interface configuration commands
default
Description
Use the default command to restore the default settings for an Ethernet interface.
This command might fail to restore the default settings for some commands for reasons such as command
dependencies and system restrictions. You can use the display this command in interface view to check
for these commands, and perform their undo forms or follow the command reference to individually
restore their default settings. If your restoration attempt still fails, follow the error message to resolve the
problem.
CAUTION:
The default command might interrupt ongoing network services. Make sure you are fully
aware of the impacts of this command when you perform it on a live network.
Syntax
default
View
Ethernet interface view
Default level
2: System level
Parameters
None
Example
# Restore the default settings for interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] default
This command will restore the default settings. Continue? [Y/N]:y
description
Description
Use the description command to change the description of the interface.
Use the undo description command to restore the default.
1
The default description of an interface is the interface name plus Interface. For example,
GigabitEthernet1/0/1 Interface.
Related commands: display interface.
Syntax
description text
undo description
View
Ethernet interface view
Default level
2: System level
Parameter
text: Specifies the interface description, a string of 1 to 80 characters. The string can include casesensitive letters, digits, special characters (including ~ ! @ # $ % ^ & * ( ) - _ + = { } [ ] | \ : ; " ' < > , .
/), spaces, and other Unicode characters and symbols.
Each Unicode character takes the space of two regular characters.
To use Unicode characters or symbols in an interface description, install the specific input method editor
and log in to the switch through remote login software that supports the character type.
When the length of a description string reaches or exceeds the maximum line width on the terminal
software, the software starts a new line, possibly breaking a Unicode character into two. As a result,
garbled characters may be displayed at the end of a line.
Example
# Change the description of interface GigabitEthernet 1/0/1 to lanswitch-interface.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] description lanswitch-interface
display counters
Description
Use the display counters command to display traffic statistics for interfaces.
If an interface type is specified, this command displays traffic statistics for all interfaces of the specified
type.
If no interface type is specified, this command displays traffic statistics for all interfaces that have traffic
counters.
Syntax
display counters { inbound | outbound } interface [ interface-type ] [ | { begin | exclude | include }
regular-expression ]
View
Any view
2
Default level
1: Monitor level
Parameters
inbound: Displays inbound traffic statistics.
outbound: Displays outbound traffic statistics.
interface-type: Specifies an interface type.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display inbound traffic statistics for all GigabitEthernet interfaces.
<Sysname> display counters inbound interface gigabitethernet
Interface
Total(pkts)
GE1/0/1
Broadcast(pkts)
100
Multicast(pkts) Err(pkts)
100
0
0
GE1/0/2
0
0
0
0
GE1/0/3
Overflow
Overflow
Overflow
Overflow
GE1/0/4
0
0
0
0
Overflow: more than 14 decimal digits(7 digits for column "Err").
--: not supported.
Table 1 Command output
Field
Description
Interface
Abbreviated interface name
Total (pkts)
Total number of packets received or sent through the interface
Broadcast (pkts)
Total number of broadcast packets received or sent through the interface
Multicast (pkts)
Total number of multicast packets received or sent through the interface
Err (pkts)
Total number of error packets received or sent through the interface
Overflow: more than 14
decimal digits(7 digits for
column "Err").
The command displays Overflow, if any of the following applies:
--: not supported.
The statistical item is not supported
The data length of an error statistic is greater than 7 decimal digits
The data length of a non-error statistic is greater than 14 decimal digits
display counters rate
Description
Use the display counters rate command to display traffic rate statistics over the last sampling interval.
3
The statistics cover only interfaces in the up state. If an interface type is specified, the command displays
traffic rate statistics for all up interfaces of the specified type. If no interface type is specified, the
command displays traffic rate statistics for all up interfaces that have traffic counters.
To set the statistics polling interval, use the flow-interval command. The default statistics polling interval is
five minutes.
Related commands: flow-interval.
Syntax
display counters rate { inbound | outbound } interface [ interface-type ] [ | { begin | exclude | include }
regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
inbound: Displays inbound traffic rate statistics.
outbound: Displays outbound traffic rate statistics.
interface-type: Specifies an interface type.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the inbound traffic rate statistics for all GigabitEthernet interfaces.
<Sysname> display counters rate inbound interface gigabitethernet
Interface
Total(pkts/sec)
GE1/0/1
Broadcast(pkts/sec)
0
--
Multicast(pkts/sec)
--
Overflow: more than 14 decimal digits.
--: not supported.
Table 2 Command output
Field
Description
Interface
Abbreviated interface name
Total (pkts/sec)
Average rate (in packets per second) of receiving or sending packets during
the sampling interval
Broadcast (pkts/sec)
Average rate (packets per second) of receiving or sending broadcast
packets during the sampling interval
4
Field
Description
Multicast (pkts/sec)
Average rate (packets per second) of receiving or sending multicast packets
during the sampling interval
Overflow: more than 14
decimal digits.
--: not supported.
The command displays Overflow, if any of the following applies:
The data length of an error statistic is greater than 7 decimal digits
The data length of a non-error statistic is greater than 14 decimal digits
The statistical item is not supported
display interface
Description
Use the display interface command to display Ethernet interface information.
If no interface type is specified, this command displays information about all interfaces.
If an interface type is specified but no interface number is specified, this command displays information
about all interfaces of that type.
Related commands: interface.
Syntax
display interface [ interface-type ] [ brief [ down ] ] [ | { begin | exclude | include } regular-expression ]
display interface interface-type interface-number [ brief ] [ | { begin | exclude | include } regularexpression ]
View
Any view
Default level
1: Monitor level
Parameters
interface-type interface-number: Specifies an interface type and number.
brief: Displays brief interface information. If you do not specify this parameter, the command displays
detailed interface information.
down: Displays information about interfaces in the down state and the causes. If you do not specify this
parameter, this command displays information about interfaces in all states.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display information about Layer 3 interface GigabitEthernet 1/0/1.
<Sysname>display interface gigabitethernet 1/0/1
5
GigabitEthernet1/0/1 current state: DOWN
Line protocol current state: DOWN
Description: GigabitEthernet1/0/1 Interface
The Maximum Transmit Unit is 1500
Internet protocol processing : disabled
IP Packet Frame Type: PKTFMT_ETHNT_2,
Hardware Address: 3ce5-a6df-e139
IPv6 Packet Frame Type: PKTFMT_ETHNT_2,
Hardware Address: 3ce5-a6df-e139
Media type is twisted pair
Port hardware type is
1000_BASE_T
Port priority: 0
Output queue: Strict-priority queue
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
Flow-control is not enabled
The Maximum Frame Length is 9216
Peak value of input: 0 bytes/sec, at 2011-05-28 10:01:36
Peak value of output: 0 bytes/sec, at 2011-05-28 10:01:36
Last 300 seconds input:
Last 300 seconds output:
Input (total):
0 packets/sec 0 bytes/sec
0 packets/sec 0 bytes/sec
0 packets, 0 bytes
0 unicasts, 0 broadcasts,
Input (normal):
0 multicasts, 0 pauses
0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input:
0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC,
0 frame, - overruns, 0 aborts
- ignored, - parity errors
Output (total):
0 packets, 0 bytes
0 unicasts, 0 broadcasts,
Output (normal):
0 multicasts, 0 pauses
0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output:
0 output errors,
0 aborts,
- underruns, - buffer failures
0 deferred, 0 collisions, 0 late collisions
0 lost carrier, - no carrier
Table 3 Display interface command (in route mode) output description
Field
Description
State of the Ethernet interface:
DOWN (Administratively)—Ethernet interface was shut down with the
shutdown command. The interface is down administratively.
GigabitEthernet1/0/1 current
state
DOWN (Link-Aggregation interface down)—Ethernet interface is down
physically because the aggregate interface corresponding to the
aggregation group to which the Ethernet interface belongs was shut
down with the shutdown command.
DOWN—Ethernet interface is up administratively, but down physically
(possibly because no physical link is present or the link has failed).
UP—Ethernet interface is up both administratively and physically.
6
Field
Description
Link layer state of the interface:
DOWN—Interface is down physically.
Line protocol current state
UP—Interface is up physically.
Description
Description of the Ethernet interface.
Disabled indicates that IP packets cannot be processed.
Internet protocol processing
For an interface configured with an IP address, this field changes to
Internet Address is.
Media type is
Physical medium, twisted pair or optical fiber.
Loopback testing function is disabled.
loopback not set
For an interface configured with the loopback external or loopback
internal command, this field changes to loopback is set.
promiscuous mode not set
Interface operates in non-promiscuous mode.
Output queue (Urgent queue:
Size/Length/Discards)
Output queue (current message number in the urgent queue, maximum
number of messages allowed in the urgent queue, and number of
discarded messages).
Output queue (Protocol queue:
Size/Length/Discards)
Output queue (current message number in the protocol queue, maximum
number of messages allowed in the protocol queue, and number of
discarded messages).
Output queue (FIFO queuing:
Size/Length/Discards)
Output queue (current message number in the FIFO queue, maximum
number of messages allowed in the FIFO queue, and number of
discarded messages).
Last clearing of counters
Time when the reset counters interface command was last used to clear
the interface statistics. Never indicates the reset counters interface
command was never used on the interface since the switch was started.
Last 300 seconds input rate
Average input rate over the last 300 seconds in Bps, bps, and pps.
Last 300 seconds output rate
Average output rate over the last 300 seconds in Bps, bps, and pps.
Input
Input packets.
Output
Output packets.
# Display detailed information about Layer 2 interface GigabitEthernet 1/0/1.
<Sysname> display interface gigabitethernet 1/0/1
GigabitEthernet1/0/1 current state: DOWN
IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 3ce5-a6df-e142
Description: GigabitEthernet1/0/1 Interface
Loopback is not set
Media type is twisted pair
Port hardware type is
1000_BASE_T
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
The Maximum Frame Length is 9216
Broadcast MAX-ratio: 100%
Unicast MAX-ratio: 100%
Multicast MAX-ratio: 100%
Allow jumbo frame to pass
7
PVID: 1
Mdi type: auto
Port link-type: access
Tagged
VLAN ID : none
Untagged VLAN ID : 1
Port priority: 0
Last clearing of counters:
Never
Peak value of input: 0 bytes/sec, at 2011-05-28 10:02:36
Peak value of output: 0 bytes/sec, at 2011-05-28 10:02:36
Last 300 seconds input:
Last 300 seconds output:
Input (total):
0 packets/sec 0 bytes/sec -%
0 packets/sec 0 bytes/sec -%
0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input (normal):
0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Input:
0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 frame, - overruns, 0 aborts
- ignored, - parity errors
Output (total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output (normal): 0 packets, - bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output: 0 output errors, - underruns, - buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
0 lost carrier, - no carrier
Table 4 display interface command (in bridge mode) output description
Field
Description
GigabitEthernet1/0/1 current state
Physical state of the Ethernet interface. For more information, see
Table 5.
IP Packet Frame Type
Ethernet framing format on the interface.
Hardware address
Hardware address of the port.
Description
Description of the interface.
Loopback is not set
Loopback testing function is disabled.
Unknown-speed mode
Port speed is unknown.
unknown-duplex mode
Duplex mode is unknown.
Link speed type is autonegotiation
Interface will negotiate a speed with its peer.
link duplex type is autonegotiation
Interface will negotiate a duplex mode with its peer.
The Maximum Frame Length
Maximum Ethernet frame length allowed on the interface.
Broadcast MAX-ratio
Broadcast suppression threshold as a percentage of the interface
transmission capability. When the threshold is exceeded, the
interface drops broadcast packets.
Unicast MAX-ratio
Unknown unicast suppression threshold as a percentage of the
interface transmission capability. When the threshold is exceeded,
the interface drops unknown unicast packets.
8
Field
Description
Multicast MAX-ratio
Multicast suppression threshold as a percentage of the interface
transmission capability. When the threshold is exceeded, the
interface drops multicast packets.
Allow jumbo frame to pass
Maximum length of Ethernet frames that are allowed to pass through
the interface.
PVID
Port VLAN ID.
Mdi type
Cable type.
Port link-type
Link type of the interface, which could be access, trunk, or hybrid.
Tagged VLAN ID
VLANs for which the interface sends packets without removing VLAN
tags.
Untagged VLAN ID
VLANs for which the interface sends packets after removing VLAN
tags.
Peak value of input
Peak value of inbound traffic, in Bps.
Peak value of output
Peak value of outbound traffic, in Bps.
Last 300 seconds input: 0
packets/sec 0 bytes/sec
Last 300 seconds output: 0
packets/sec 0 bytes/sec
Input (total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0
multicasts, 0 pauses
Input (normal): 0 packets, - bytes
Average rate of input and output traffic in the last 300 seconds, in
pps and Bps.
Inbound traffic statistics (in packets and bytes) for the interface. All
inbound normal and abnormal packets (including unicast,
broadcast, and multicast), and pause frames were counted.
0 unicasts, 0 broadcasts, 0
multicasts, 0 pauses
Inbound traffic statistics (in packets and bytes) for the interface. All
inbound normal packets (including unicast, broadcast, and
multicast), and pause frames were counted.
input errors
Inbound packets with errors.
runts
Inbound frames shorter than 64 bytes, in correct format, and
containing valid CRCs.
Inbound frames larger than the maximum frame length supported on
the interface.
giants
For an Ethernet interface that does not permit jumbo frames, giants
refer to frames larger than 1536 bytes (without VLAN tags) or 1540
bytes (with VLAN tags).
For an Ethernet interface that permits jumbo frames, giants refer to
frames larger than the maximum length of Ethernet frames that are
allowed to pass through, which is configured when you configure
jumbo frame support on the interface.
- throttles
The number of times that the port shut down due to buffer or CPU
overload.
frame
Total number of inbound frames that contained checksum errors and
a non-integer number of bytes.
- overruns
Number of packet drops because the input rate of the port exceeded
the queuing capability.
9
Field
Description
Total number of illegal inbound packets:
Fragment frames—CRC error frames shorter than 64 bytes. The
length can be an integral or non-integral value.
aborts
Jabber frames—CRC error frames greater than the maximum frame
length supported on the Ethernet interface (with an integral or nonintegral length). For an Ethernet interface that does not permit jumbo
frames, jabber frames refer to CRC error frames greater than 1518
bytes (without VLAN tags) or 1522 bytes (with VLAN tags). For an
Ethernet interface that permits jumbo frames, jabber frames refer to
CRC error frames greater than the maximum length of Ethernet
frames that are allowed to pass through the interface (which is
configured when you configure jumbo frame support on the
interface).
Symbol error frames—Frames that contained at least one undefined
symbol.
Unknown operation code frames—Non-pause MAC control frames
Length error frames—Frames whose 802.3 length fields did not
accord with the actual frame length (46 to 1500 bytes).
ignored
Number of inbound frames dropped because the receive buffer of
the port ran low.
- parity errors
Total number of frames with parity errors.
Output (total): 1502 packets,
138924 bytes
- unicasts, 2 broadcasts, 406
multicasts, 0 pauses
Output (normal): - packets, - bytes
1094 unicasts, - broadcasts, multicasts, - pauses
Outbound traffic statistics (in packets and bytes) for the port. All
outbound normal and abnormal packets (including unicast,
broadcast, and multicast), and pause frames were counted.
Outbound normal traffic (including unicast, broadcast, and multicast)
and pause frame statistics (in packets and bytes) for the interface.
output errors
Outbound packets with errors.
- underruns
Number of packet drops because the output rate of the interface
exceeded the output queuing capability. This is a low-probability
hardware anomaly.
- buffer failures
Number of packets dropped because the transmit buffer of the
interface ran low.
aborts
Number of packets that failed to be transmitted, for example,
because of Ethernet collisions.
deferred
Number of frames that the interface deferred to transmit because of
detected collisions.
collisions
Number of frames that the interface stopped transmitting because
Ethernet collisions were detected during transmission.
late collisions
Number of frames that the interface deferred to transmit after
transmitting their first 512 bits, because of detected collisions.
lost carrier
Number of carrier losses during transmission. This counter applies to
serial WAN interfaces.
10
Field
Description
- no carrier
Number of times that the port failed to detect the carrier when
attempting to send frames. This counter applies to serial WAN
interfaces.
NOTE:
If an output field is not available, a hyphen (-) is displayed.
Table 5 Description on the possible physical states of a Layer 2 Ethernet interface
Field
Description
UP
Interface is up physically.
DOWN
Interface is down physically because no physical connection exists. Possible
reason: The network cable is disconnected or faulty.
DOWN (Administratively)
Interface is down physically because it was shut down with the shutdown
command. To restore its physical state, use the undo shutdown command.
DOWN (Link-Aggregation
interface down)
Interface is down physically because the aggregate interface corresponding
to the aggregation group to which it belongs was shut down with the
shutdown command.
DOWN ( OAM connection
failure )
Interface is down physically because an OAM connection fails to be
established on it or the OAM connection is disconnected.
DOWN ( DLDP connection
failure )
Interface is down physically because a DLDP connection fails to be
established on it or the DLDP connection is disconnected.
DOWN ( Loopback
detection-protected )
Interface is shut down because a loop is detected on it.
DOWN ( BPDU-protected )
Interface is shut down by the BPDU guard function.
DOWN ( Monitor-Link uplink
down )
Interface is down physically because the uplink of the monitor link group to
which it belongs is down.
# Display brief information about all interfaces.
<Sysname> display interface brief
The brief information of interface(s) under route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Main IP
Description
M-GE0/0/0
DOWN DOWN
--
NULL0
UP
UP(s)
--
Vlan1
UP
UP
192.168.0.59
The brief information of interface(s) under bridge mode:
Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface
Link Speed
Duplex Type PVID Description
GE1/0/2
DOWN auto
A
A
11
1
GE1/0/3
DOWN auto
A
A
1
GE1/0/4
DOWN auto
A
A
1
GE1/0/5
DOWN auto
A
A
1
GE1/0/6
DOWN auto
A
A
1
GE1/0/7
DOWN auto
A
A
1
GE1/0/8
DOWN auto
A
A
1
GE1/0/9
DOWN auto
A
A
1
GE1/0/10
DOWN auto
A
A
1
GE1/0/11
DOWN auto
A
A
1
# Filter the brief interface information to display the line starting with the (s) string and all subsequent
lines.
<Sysname> display interface brief | begin (s)
The brief information of interface(s) under route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Main IP
NULL0
UP
UP(s)
--
Vlan1
UP
UP
192.168.0.59
Description
When you use the begin parameter to filter the output, the system only searches the Layer 3 interface list
or the Layer 2 interface list. If regular-expression is on the Layer 3 interface list, the system only displays
the line that contains regular-expression, and all subsequent lines on the Layer 3 interface list.
<Sysname> display interface brief down
The brief information of interface(s) under route mode:
Link: ADM - administratively down; Stby - standby
Interface
Link Cause
M-GE0/0/0
DOWN Not connected
GE1/0/8
DOWN Not connected
The brief information of interface(s) under bridge mode:
Link: ADM - administratively down; Stby - standby
Interface
Link Cause
BAGG1
DOWN Not connected
GE1/0/1
DOWN Not connected
GE1/0/2
DOWN Not connected
GE1/0/4
DOWN Not connected
GE1/0/5
DOWN Not connected
Table 6 display interface brief command output description
Field
Description
The brief information of
interfaces under route
mode:
Command displays brief information about Layer 3 interfaces.
Link: ADM administratively down;
Stby - standby
ADM—Interface has been shut down by the network administrator. To recover
its physical layer state, perform the undo shutdown command.
Stby—Interface is a standby interface. You can use the display standby state
command to check the corresponding primary interface.
12
Field
Description
Protocol: (s) - spoofing
If the network layer protocol state of an interface is shown as UP, but its link is
an on-demand link or not present at all, its protocol attribute includes the
spoofing flag (an s in parentheses). This attribute is typical of interface Null 0
and the loopback interfaces.
Interface
Interface name.
Physical link state of the interface:
UP—Link is up.
Link
DOWN—Link is down physically.
ADM—Link has been shut down administratively. To recover its physical
state, perform the undo shutdown command.
Stby—Interface is a standby interface.
Protocol
Protocol connection state of the interface, which can be UP, DOWN, or UP(s).
The brief information of
interfaces under bridge
mode:
Brief information about Layer 2 interfaces.
If the speed of an interface is negotiated automatically, its speed attribute
includes the auto negotiation flag, letter a in parentheses.
Speed or Duplex: (a)/A auto; H - half; F - full
If the duplex mode of an interface is negotiated automatically, its duplex mode
attribute includes the following options:
(a)/A—Auto negotiation
H—Half negotiation
F—Full negotiation
Type: A - access; T - trunk;
H – hybrid
Link type options for Ethernet interfaces.
Speed
Interface rate, in bps.
Duplex mode of the interface:
A—Auto-negotiation
Duplex
F—Full duplex
F(a)—Auto-negotiated full duplex
H—Half duplex
H(a)—Auto-negotiated half duplex
Link type of the interface:
Type
A—Access
H—Hybrid
T—Trunk
PVID
Port VLAN ID of the interface.
Cause
Causes for the physical state of an interface to be DOWN. For more
information, see Table 7.
Table 7 Causes for the physical state of an interface to be DOWN
Field
Description
Not connected
No physical connection exists (possibly because the network cable is
disconnected or faulty).
13
Field
Description
Administratively
Port was shut down with the shutdown command. To restore the physical
state of the interface, use the undo shutdown command.
Link-Aggregation interface
down
Aggregate interface corresponding to the aggregation group to which the
interface belongs was shut down with the shutdown command.
OAM connection failure
OAM connection fails (possibly because the connection fails to be
established or the connection is disconnected).
DLDP connection failure
DLDP connection fails (possibly because the connection fails to be
established or the connection is disconnected).
Loopback detection-protected
Interface is shut down because a loop is detected on it.
BPDU-protected
Interface is shut down by the BPDU guard function.
Monitor-Link uplink down
Uplink of the monitor link group to which the interface belongs is down.
display packet-drop interface
Description
Use the display packet-drop interface command to display information about packets dropped on an
interface or multiple interfaces:
If you do not specify an interface type, this command displays information about dropped packets
on all the interfaces on the switch.
If you specify an interface type only, this command displays information about dropped packets on
the specified type of interfaces.
If you specify both the interface type and interface number, this command displays information
about dropped packets on the specified interface.
Syntax
display packet-drop interface [ interface-type [ interface-number ] ] [ | { begin | exclude | include }
regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface-type interface-number: Specifies an interface type and number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
14
Example
# Display information about dropped packets on GigabitEthernet 1/0/1.
<Sysname> display packet-drop interface gigabitethernet 1/0/1
GigabitEthernet1/0/1:
Packets dropped by GBP full or insufficient bandwidth: 301
Packets dropped by FFP: 261
Packets dropped by STP non-forwarding state: 321
Table 8 Command output
Field
Description
Packets dropped by GBP full or insufficient
bandwidth
Packets that are dropped because the buffer is used up or
the bandwidth is insufficient
Packets dropped by FFP
Packets that are filtered out
Packets dropped by STP non-forwarding state
Packets that are dropped because STP is in the nonforwarding state
display packet-drop summary
Description
Use the display packet-drop summary command to display summary information about dropped packets
on all interfaces.
Syntax
display packet-drop summary [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display information about dropped packets on all interfaces.
<Sysname> display packet-drop summary
All interfaces:
Packets dropped by GBP full or insufficient bandwidth: 301
Packets dropped by FFP: 261
Packets dropped by STP non-forwarding state: 321
15
For the description of some fields in the output, see Table 8.
display port combo
Description
Use the display port combo command to display the combo interfaces of the switch and the fiber and
copper combo ports.
Syntax
display port combo [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the combo interfaces of the switch and the fiber and copper combo ports.
<Sysname> display port combo
Combo-group
Active
Inactive
1
GigabitEthernet1/0/47
GigabitEthernet1/0/49
2
GigabitEthernet1/0/48
GigabitEthernet1/0/50
Table 9 Command output
Field
Description
Combo-group
Combo interfaces of the switch, represented by combo interface numbers that are
generated by the system
Active
Ports of the combo interfaces that are active
Inactive
Ports of the combo interfaces that are inactive
In a combo interface, the fiber or copper combo port with the smaller port number is active by default.
You can determine whether a port is a fiber combo port or a copper combo port by checking the ―Media
type is‖ field of the display interface command.
duplex
Description
Use the duplex command to set the duplex mode for an Ethernet interface.
16
Use the undo duplex command to restore the default duplex mode of the Ethernet interface.
By default, Ethernet interfaces operate in auto-negotiation mode.
Related commands: speed.
Syntax
duplex { auto | full | half }
undo duplex
View
Ethernet interface view
Default level
2: System level
Parameters
auto: Sets the interface to operate in auto-negotiation mode.
full: Sets the interface to operate in full duplex mode.
half: Sets the interface to operate in half-duplex mode. This parameter is not available for Ethernet
copper ports that are configured with a 1000-mbps port speed and fiber ports.
Example
# Configure the interface GigabitEthernet 1/0/1 to operate in full-duplex mode.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] duplex full
flow-interval
Description
Use the flow-interval command to set the interface statistics polling interval.
Use the undo flow-interval command to restore the default interval.
In system view, use the flow-interval command to set the statistics polling interval for all interfaces.
In Ethernet interface view, use the flow-interval command to set the statistics polling interval for the
interface.
Syntax
flow-interval interval
undo flow-interval
View
Ethernet interface view
Default level
2: System level
17
Parameter
interval: Sets the statistics polling interval, in seconds. It ranges from 5 to 300 and must be a multiple of
5.
Example
# Set the statistics polling interval to 100 seconds on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] flow-interval 100
interface
Description
Use the interface command to enter interface view.
Syntax
interface interface-type interface-number
View
System view
Default level
2: System level
Parameter
interface-type interface-number: Specifies an interface type and number.
Example
# Enter GigabitEthernet 1/0/1 interface view (assuming that the interface is an Ethernet interface).
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1]
jumboframe enable
Description
Use the jumboframe enable command to allow jumbo frames within the specified length to pass through
one or multiple Ethernet interfaces.
Use the undo jumboframe enable command to prevent jumbo frames from passing through one or
multiple Ethernet interfaces.
By default, the switch allows jumbo frames within 9216 bytes to pass through Ethernet interfaces.
In Ethernet interface view, the command applies only to the current Ethernet interface.
In port group view, the command applies to every Ethernet interface in the port group.
Syntax
jumboframe enable [ value ]
undo jumboframe enable
18
View
Ethernet interface view, port group view
Default level
2: System level
Parameter
value: Sets the maximum length of Ethernet frames that are allowed to pass through, ranging from 1536
to 9216 bytes. If you set the value parameter multiple times, the latest configuration takes effect.
Example
# Configure the switch to allow jumbo frames within 9216 bytes to pass through GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] jumboframe enable
link-delay
Description
Use the link-delay command to set the physical state change suppression interval on an Ethernet
interface.
Use the undo link-delay command to restore the default.
By default, physical state change suppression is disabled on Ethernet interfaces.
Do not use this command on Ethernet interfaces with RRPP, MSTP, or Smart Link enabled.
This command does not apply to ports that are shut down administratively (with the shutdown command).
Syntax
link-delay delay-time
undo link-delay
View
Ethernet interface view
Default level
2: System level
Parameter
delay-time: Sets the physical state change suppression interval on the Ethernet interface, ranging from 2
to 10 seconds.
Example
# Enable physical state change suppression on GigabitEthernet 1/0/1, setting the suppression interval to
8 seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] link-delay 8
19
loopback
Description
Use the loopback command to enable loopback testing on an Ethernet interface.
By default, loopback testing is disabled on Ethernet interfaces.
Enable loopback testing for troubleshooting purposes, such as identifying an Ethernet problem.
During loopback testing, the speed, duplex, mdi, and shutdown commands are not available. In
addition, the port is operating in full duplex mode, regardless of its duplex configuration. After loopback
testing is disabled, the duplex configuration of the port is restored.
Loopback testing is a one-time operation, and is not recorded in the configuration file.
Syntax
loopback { external | internal }
View
Ethernet interface view
Default level
2: System level
Parameters
external: Enables external loopback testing to test all on-chip functions related to Ethernet interfaces.
internal: Enables internal loopback testing to test the hardware of Ethernet interfaces.
Example
# Enable internal loopback testing on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] loopback internal
port link-mode
Description
Use the port link-mode command to change the link mode of an Ethernet interface.
Use the undo port link-mode command to restore the default.
By default, Ethernet interfaces operate in Layer 2 mode.
To meet networking requirements, you can change the link mode of a port, so it can operate as a Layer 2
Ethernet interface (in bridge mode) or Layer 3 Ethernet interface (in route mode).
When you change the link mode of an Ethernet interface, all the settings of the Ethernet interface are
restored to their defaults under the new link mode.
Related commands: port link-mode interface-list.
Syntax
port link-mode { bridge | route }
undo port link-mode
20
View
Ethernet interface view
Default level
2: System level
Parameters
bridge: Specifies the Layer 2 mode.
route: Specifies the Layer 3 mode.
Example
# Configure GigabitEthernet 1/0/1 to operate in Layer 2 mode.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode route
#
Return
The output shows that GigabitEthernet 1/0/1 operates in route mode.
[Sysname-GigabitEthernet1/0/1] port link-mode bridge
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
#
Return
The output shows that GigabitEthernet 1/0/1 is now operating in bridge mode.
NOTE:
The display this command displays the configuration that takes effect in the current view.
port link-mode interface-list
Description
Use the port link-mode interface-list command to change the link mode of Ethernet interfaces.
To meet networking requirements, you can change the link mode of a port, so it can operate as a Layer 2
Ethernet interface (in bridge mode) or Layer 3 Ethernet interface (in route mode).
Configuring the port link-mode interface-list command in system view and configuring the port link-mode
command in Ethernet interface view lead to the same result. The difference between the two commands is
that the former changes the link mode of multiple Ethernet interfaces in batch, and the latter changes the
link mode of one Ethernet interface at a time.
When you change the link mode of an Ethernet interface, all the settings of the Ethernet interface are
restored to their defaults under the new link mode.
21
The link mode configuration for an Ethernet interface in system view and that in interface view supersede
each other. The command that is configured last takes effect.
Syntax
port link-mode { bridge | route } interface-list
View
System view
Default level
2: System level
Parameters
bridge: Specifies the Layer 2 mode.
route: Specifies the Layer 3 mode.
interface-list: Specifies an Ethernet interface list, in the format of interface-type interface-number [ to
interface-type interface-number ] &<1-10>, where &<1-10> indicates that you can specify up to 10
interfaces or interface ranges.
Examples
# Configure GigabitEthernet 1/0/1 through GigabitEthernet 1/0/5 to operate in Layer 2 mode.
<Sysname> system-view
[Sysname] port link-mode bridge gigabitethernet 1/0/1 to gigabitethernet 1/0/5
# Configure GigabitEthernet 1/0/1 through GigabitEthernet 1/0/5 to operate in Layer 3 mode.
<Sysname> system-view
[Sysname] port link-mode route gigabitethernet 1/0/1 to gigabitethernet 1/0/5
reset counters interface
Description
Use the reset counters interface command to clear the Ethernet interface statistics.
Before collecting traffic statistics for a specific period of time on an interface, clear the old statistics first.
If no interface type is specified, this command clears statistics for all interfaces.
If only the interface type is specified, this command clears statistics for all interfaces of that type.
Syntax
reset counters interface [ interface-type [ interface-number ] ]
View
User view
Default level
2: System level
Parameter
interface-type interface-number: Specifies an interface type and number.
22
Example
# Clear the statistics of GigabitEthernet 1/0/1.
<Sysname> reset counters interface gigabitethernet 1/0/1
reset packet-drop interface
Description
Use the reset packet-drop interface command to clear statistics of dropped packets on an interface or
multiple interfaces.
Sometimes you need to clear the old statistics before you can collect statistics of dropped packets:
If you do not specify an interface type, this command clears statistics of dropped packets on all the
interfaces on the switch.
If you specify an interface type only, this command clears statistics of dropped packets on the
specified type of interfaces.
If you specify both the interface type and interface number, this command clears statistics of
dropped packets on the specified interface.
Syntax
reset packet-drop interface [ interface-type [ interface-number ] ]
View
Any view
Default level
2: System level
Parameter
interface-type interface-number: Specifies an interface type and number.
Examples
# Clear statistics of dropped packets on GigabitEthernet 1/0/1.
<Sysname> reset packet-drop interface gigabitethernet 1/0/1
# Clear statistics of dropped packets on all interfaces.
<Sysname> reset packet-drop interface
shutdown
Description
Use the shutdown command to shut down an Ethernet interface.
Use the undo shutdown command to bring up an Ethernet interface.
By default, an Ethernet interface is in the up state.
CAUTION:
After you shut down an Ethernet interface with this command, it cannot forward packets, even
if it is physically connected.
23
Syntax
shutdown
undo shutdown
View
Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Examples
# Shut down and then bring up GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] shutdown
[Sysname-GigabitEthernet1/0/1] undo shutdown
# Shut down all member ports in the port group named group1.
<Sysname> system-view
[Sysname] port-group manual group1
[Sysname-port-group-manual-group1] shutdown
speed
Description
Use the speed command to set the speed of an Ethernet interface.
Use the undo speed command to restore the default.
By default, an Ethernet interface automatically negotiates a speed with the peer.
For an Ethernet copper port, use the speed command to set its speed to match the speed of the peer
interface.
For a fiber port, use the speed command to set its speed to match the rate of a pluggable transceiver.
Related commands: duplex and speed auto.
NOTE:
A Gigabit fiber port does not support the 10 or 10000 parameter. A 10-Gigabit fiber port
does not support the 10 or 100 parameter.
Syntax
speed { 10 | 100 | 1000 | 10000 | auto }
undo speed
View
Ethernet interface view
24
Default level
2: System level
Parameters
10: Sets the interface speed to 10 Mbps. This parameter is not applicable to GE and 10-GE fiber ports.
100: Sets the interface speed to 100 Mbps. This parameter is not applicable to 10-GE fiber ports.
1000: Sets the interface speed to 1000 Mbps.
10000: Sets the interface speed to 10,000 Mbps. This parameter is not applicable to GE fiber ports.
auto: Enables the interface to negotiate a speed with its peer.
Example
# Configure GigabitEthernet 1/0/1 to operate at 100 Mbps.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] speed 100
Layer 2 Ethernet interface configuration commands
broadcast-suppression
Description
Use the broadcast-suppression command to set the broadcast suppression threshold on one or multiple
Ethernet interfaces.
Use the undo broadcast-suppression command to restore the default.
By default, Ethernet interfaces do not suppress broadcast traffic.
If you execute this command in Ethernet interface view, the configuration takes effect only on the interface.
If you execute this command in port group view, the configuration takes effect on all ports in the port
group.
When broadcast traffic exceeds the broadcast suppression threshold, the system discards broadcast
packets until the broadcast traffic drops below the threshold.
If you set different broadcast suppression thresholds in Ethernet interface view or port group view multiple
times, the one configured last takes effect.
Syntax
broadcast-suppression { ratio | pps max-pps | kbps max-kbps }
undo broadcast-suppression
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
25
Parameters
ratio: Sets the broadcast suppression threshold as a percentage of the transmission capability of an
Ethernet interface, ranging from 1 to 100. The smaller the percentage, the less broadcast traffic is
allowed to pass through.
pps max-pps: Specifies the maximum number of broadcast packets that the Ethernet interface can forward
per second:
For GE ports, the max-pps parameter ranges from 1 to 1,488,100 pps.
For 10-GE ports, the max-pps parameter ranges from 1 to 14,881,000 pps.
kbps max-kbps: Specifies the maximum number of kilobits of broadcast traffic that the Ethernet interface
can forward per second:
For GE ports, the max-kbps parameter ranges from 1 to 1,000,000 kbps.
For 10-GE ports, the max-kbps parameter ranges from 1 to 10,000,000 kbps.
Examples
# Set the broadcast suppression threshold to 20% on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] broadcast-suppression 20
# Set the broadcast suppression threshold to 20% on all ports in the manual port group named group1.
<Sysname> system-view
[Sysname] port-group manual group1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/2
[Sysname-port-group-manual-group1] broadcast-suppression 20
display loopback-detection
Description
Use the display loopback-detection command to display the status of the loopback detection function.
If loopback detection is enabled, this command also displays the detection interval and ports in a loop
condition.
Syntax
display loopback-detection [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
26
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display information about loopback detection.
<Sysname> display loopback-detection
Loopback detection is running.
Detection interval is 30 seconds.
No port is detected with loopback.
Table 10 Command output
Field
Description
Detection interval time is 30 seconds.
Loopback detection interval is 30 seconds
No port is detected with loopback.
No loops are detected on ports
display port-group manual
Description
Use the display port-group manual command to display information about port groups.
If the all parameter is specified, this command displays the name and member Ethernet interfaces of each
port group on the switch.
If a port group is specified, this command displays its name and member Ethernet interfaces.
If you do not specify the all parameter or any port group name, the command displays the name of each
port group on the switch.
Syntax
display port-group manual [ all | name port-group-name ] [ | { begin | exclude | include } regularexpression ]
View
Any view
Default level
2: System level
Parameters
all: Displays information about all port groups.
name port-group-name: Specifies the name of a port group, a string of 1 to 32 characters.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
27
Examples
# Display the names of all port groups.
<Sysname> display port-group manual
The following manual port group exist(s):
group1
group2
# Display detailed information about all port groups.
<Sysname> display port-group manual all
Member of group1:
GigabitEthernet1/0/3
GigabitEthernet1/0/6
GigabitEthernet1/0/4
GigabitEthernet1/0/5
GigabitEthernet1/0/7
Member of group2:
None
# Display detailed information about the port group named group1.
<Sysname> display port-group manual name group1
Member of group1:
GigabitEthernet1/0/3
GigabitEthernet1/0/6
GigabitEthernet1/0/4
GigabitEthernet1/0/5
GigabitEthernet1/0/7
group-member
Description
Use the group-member command to assign Layer 2 Ethernet interfaces to a port group.
Use the undo group-member command to remove Layer 2 Ethernet interfaces from the port group.
By default, a port group does not contain any member ports.
If you use the group-member interface-type interface-start-number to interface-type interface-end-number
command to add multiple ports in batch to the specified port group, make sure that the interface-endnumber parameter must be greater than the interface-start-number parameter.
Syntax
group-member interface-list
undo group-member interface-list
View
Port group view
Default level
2: System level
Parameter
interface-list: Specifies an Ethernet interface list, in the form of interface-type interface-number [ to
interface-type interface-number ] &<1-10>, where &<1-10> indicates that you can specify up to 10
interfaces or interface ranges.
Example
# Assign Layer 2 Ethernet interface GigabitEthernet 1/0/1 to the port group named group1.
<Sysname> system-view
28
[Sysname] port-group manual group1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/1
loopback-detection action
Description
Use the loopback-detection action command to configure the action for loop protection on Ethernet
interfaces.
Use the undo loopback-detection action command to restore the default.
By default, a looped interface does not receive or send packets.
When you change the link type of an Ethernet interface by using the port link-type command, the switch
removes the protective action configured on the interface. For more information about the port link-type
command, see the chapter ―VLAN configuration commands.‖
Syntax
loopback-detection action { no-learning | semi-block | shutdown }
undo loopback-detection action
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameters
no-learning: Disables MAC address learning on the interface.
semi-block: Blocks all packets but STP BPDUs.
shutdown: Shuts down the Ethernet interface. To bring up the interface again, use the undo shutdown
command.
Examples
# Configure the access port GigabitEthernet 1/0/1 to shut down when a loop is detected.
<Sysname> system-view
[Sysname] loopback-detection enable
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] loopback-detection enable
[Sysname-GigabitEthernet1/0/1] loopback-detection action shutdown
# Configure the trunk port GigabitEthernet 1/0/2 to shut down when a loop is detected.
<Sysname> system-view
[Sysname] loopback-detection enable
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port link-type trunk
[Sysname-GigabitEthernet1/0/2] loopback-detection enable
[Sysname-GigabitEthernet1/0/2] loopback-detection control enable
[Sysname-GigabitEthernet1/0/2] loopback-detection action shutdown
29
loopback-detection control enable
Description
Use the loopback-detection control enable command to enable loopback detection control on trunk or
hybrid ports.
Use the undo loopback-detection control enable command to restore the default.
By default, loopback detection control is disabled on trunk and hybrid ports.
When a hybrid or trunk port detects a loop condition, it sends traps, whether loopback detection control
is enabled or not. However, only after loopback detection control is enabled will the port perform the
protective action configured with the loopback-detection action command.
This command is not applicable to access ports.
Syntax
loopback-detection control enable
undo loopback-detection control enable
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Example
# Enable loopback detection control on the trunk port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] loopback-detection enable
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type trunk
[Sysname-GigabitEthernet1/0/1] loopback-detection enable
[Sysname-GigabitEthernet1/0/1] loopback-detection control enable
loopback-detection enable
Description
Use the loopback-detection enable command to enable loopback detection globally in system view or on
interfaces in Ethernet interface or port group view. To use loopback detection on an Ethernet interface,
you must enable the function both globally and on the port.
Use the undo loopback-detection enable command to disable loopback detection globally or on Ethernet
interfaces.
The undo loopback-detection enable command in system view disables loopback detection on all
interfaces.
By default, loopback detection is disabled on all Ethernet interfaces.
30
If an interface receives a packet that it sent out, a loop has occurred. Loops may cause broadcast storms,
which degrade network performance. You can enable loopback detection to detect loops on an interface
and, if the interface supports the loopback-detection action command, configure the protective action (for
example, shut down the port) to take on the interface when a loop is detected.
In addition to the configured protective action, the switch also performs other actions to alleviate the
impact of the loop condition. For more information, see Table 11.
Table 11 Actions to take upon detection of a loop condition
Port type
Access port
Actions
No protective action is configured
Place the interface in controlled mode. The
interface does not receive or send packets.
Generate traps.
Delete all MAC address entries of the interface.
Perform the configured protective
action.
Generate traps and log messages.
Delete all MAC address entries of the
interface.
Create traps and log messages.
Generate traps.
Hybrid or trunk
port
A protective action is configured
If loopback detection control is enabled, set the
interface in controlled mode. The interface
does not receive or send packets.
Delete all MAC address entries of the interface.
If loopback detection control is
enabled, take the configured protective
action on the interface.
Delete all MAC address entries of the
interface.
Related commands: loopback-detection control enable.
Syntax
loopback-detection enable
undo loopback-detection enable
View
System view, Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Example
# Enable loopback detection on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] loopback-detection enable
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] loopback-detection enable
loopback-detection interval-time
Description
Use the loopback-detection interval-time command to set the loopback detection interval.
31
Use the undo loopback-detection interval-time command to restore the default loopback detection
interval.
The default loopback detection interval is 30 seconds.
Related commands: display loopback-detection.
Syntax
loopback-detection interval-time time
undo loopback-detection interval-time
View
System view
Default level
2: System level
Parameter
time: Sets the loopback detection interval, ranging from 5 to 300 seconds.
Example
# Set the loopback detection interval to 10 seconds.
<Sysname> system-view
[Sysname] loopback-detection interval-time 10
loopback-detection per-vlan enable
Description
Use the loopback-detection per-vlan enable command to enable loopback detection in each VLAN on
trunk or hybrid ports.
Use the undo loopback-detection per-vlan enable command to disable loopback detection in all but the
PVID on trunk or hybrid ports.
By default, a trunk port or hybrid port performs loopback detection only in its PVID.
The loopback-detection per-vlan enable command is not applicable to access ports.
Syntax
loopback-detection per-vlan enable
undo loopback-detection per-vlan enable
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Example
# Enable loopback detection in all VLANs on hybrid port GigabitEthernet 1/0/1.
32
<Sysname> system-view
[Sysname] loopback-detection enable
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] loopback-detection enable
[Sysname-GigabitEthernet1/0/1] port link-type trunk
[Sysname-GigabitEthernet1/0/1] loopback-detection per-vlan enable
mdi
Description
Use the mdi command to configure the MDI mode of a copper Ethernet interface.
Use the undo mdi command to restore the default.
By default, Ethernet interfaces operate in auto MDI mode.
This command is not applicable to fiber ports.
Syntax
mdi { across | auto | normal }
undo mdi
View
Layer 2 Ethernet interface view
Default level
2: System level
Parameters
across: Sets the MDI mode to across. In this mode, pins 1 and 2 of the port are receive pins, and pins 3
and 6 are transmit pins.
auto: Sets the MDI mode to auto. In this mode, the port negotiates pin roles with its peer.
normal: Sets the MDI mode to normal. In normal mode, pins 1 and 2 of the port are transmit pins, and
pins 3 and 6 are receive pins.
Example
# Set GigabitEthernet 1/0/1 to operate in across MDI mode.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mdi across
multicast-suppression
Description
Use the multicast-suppression command to set the multicast suppression threshold on one or multiple
Ethernet interfaces.
Use the undo multicast-suppression command to restore the default.
By default, Ethernet interfaces do not suppress multicast traffic.
33
If you execute this command in Ethernet interface view, the configurations take effect only on the interface.
If you execute this command in port group view, the configurations take effect on all ports in the port
group.
When multicast traffic exceeds the threshold you configure, the system discards multicast packets until the
multicast traffic drops below the threshold.
If you set different multicast suppression thresholds in Ethernet interface view or port group view multiple
times, the one configured last takes effect.
Syntax
multicast-suppression { ratio | pps max-pps | kbps max-kbps }
undo multicast-suppression
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameters
ratio: Sets the multicast suppression threshold as a percentage of the transmission capability of an
Ethernet interface, ranging from 1 to 100. The smaller the percentage, the less multicast traffic is allowed
to pass through.
pps max-pps: Specifies the maximum number of multicast packets that the Ethernet interface can forward
per second:
For GE ports, the max-pps parameter ranges from 1 to 1,488,100 pps.
For 10-GE ports, the max-pps parameter ranges from 1 to 14,881,000 pps.
kbps max-kbps: Specifies the maximum number of kilobits of multicast traffic that the Ethernet interface
can forward per second:
For GE ports, the max-kbps parameter ranges from 1 to 1,000,000 kbps.
For 10-GE ports, the max-kbps parameter ranges from 1 to 10,000,000 kbps.
Examples
# Set the multicast threshold to 20% on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] multicast-suppression 20
# Set the multicast threshold to 20% on all ports in the port group named group1.
<Sysname> system-view
[Sysname] port-group manual group1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/2
[Sysname-port-group-manual-group1] multicast-suppression 20
34
port auto-power-down
Description
Use the port auto-power-down command to enable auto power-down on Ethernet interfaces for energy
efficiency.
Use the undo port auto-power-down to restore the default.
By default, auto power-down is disabled on Ethernet interfaces.
Syntax
port auto-power-down
undo port auto-power-down
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Examples
# Enable auto power-down on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port auto-power-down
# Enable auto power-down on all member ports of port group group1.
<Sysname> system-view
[Sysname] port-group manual group1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/2
[Sysname-port-group-manual-group1] port auto-power-down
port-group manual
Description
Use the port-group manual command to create a port group and enter port group view.
Use the undo port-group manual command to remove a port group.
By default, no port group exists.
Syntax
port-group manual port-group-name
undo port-group manual port-group-name
View
System view
35
Default level
2: System level
Parameter
port-group-name: Sets the port group name, a string of 1 to 32 characters.
Example
# Create port group group1.
<Sysname> system-view
[Sysname] port-group manual group1
[Sysname-port-group-manual-group1]
speed auto
Description
Use the speed auto command to set options for speed auto negotiation.
Use the undo speed command to restore the default.
By default, an Ethernet interface automatically negotiates a speed with the peer.
The speed command and the speed auto command supersede each other. The command that is
configured last takes effect.
If you configure speed 100 after configuring speed auto 100 1000 on an interface, the interface speed is
set to 100 Mbps by force without negotiation. If you configure speed auto 100 1000 after configuring
speed 100 on the interface, the interface negotiates with its peer, and the negotiated speed is either 100
Mbps or 1000 Mbps.
To avoid negotiation failure, ensure that at least one speed option is supported at both ends.
This feature is supported only on Gigabit copper ports that support speed auto negotiation.
Syntax
speed auto { 10 | 100 | 1000 } *
undo speed
View
Layer 2 GE interface view
Default level
2: System level
Parameters
10: Sets 10 Mbps as an option for speed auto negotiation.
100: Sets 100 Mbps as an option for speed auto negotiation.
1000: Sets 1000 Mbps as an option for speed auto negotiation.
Example
# Configure the port GigabitEthernet 1/0/1 to use 10 Mbps and 1000 Mbps for speed negotiation.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
36
[Sysname-GigabitEthernet1/0/1] speed auto 10 1000
unicast-suppression
Description
Use the unicast-suppression command to set the unknown unicast suppression threshold on one or
multiple Ethernet interfaces.
Use the undo unicast-suppression command to restore the default.
By default, Ethernet interfaces do not suppress unknown unicast traffic.
If you execute this command in Ethernet interface view, the configurations take effect only on the interface.
If you execute this command in port group view, the configurations take effect on all ports in the port
group.
When unknown unicast traffic exceeds the threshold you configure, the system discards unknown unicast
packets until the unknown unicast traffic drops below the threshold.
If you set different unknown unicast suppression thresholds in Ethernet interface view or port group view
multiple times, the one configured last takes effect.
Syntax
unicast-suppression { ratio | pps max-pps | kbps max-kbps }
undo unicast-suppression
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameters
ratio: Sets the unknown unicast suppression threshold as a percentage of the transmission capability of an
Ethernet interface, ranging from 1 to 100. The smaller the percentage, the less unknown unicast traffic is
allowed to pass through.
pps max-pps: Specifies the maximum number of unknown unicast packets that the Ethernet interface can
forward per second:
For GE ports, the max-pps parameter ranges from 1 to 1,488,100 pps.
For 10-GE ports, the max-pps parameter ranges from 1 to 14,881,000 pps.
kbps max-kbps: Specifies the maximum number of kilobits of unknown unicast traffic that the Ethernet
interface can forward per second:
For GE ports, the max-kbps parameter ranges from 1 to 1,000,000 kbps.
For 10-GE ports, the max-kbps parameter ranges from 1 to 10,000,000 kbps.
Examples
# Set the unknown unicast threshold to 20% on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] unicast-suppression 20
# Set the unknown unicast threshold to 20% on all ports of port group group1.
37
<Sysname> system-view
[Sysname] port-group manual group1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/1
[Sysname-port-group-manual-group1] group-member gigabitethernet 1/0/2
[Sysname-port-group-manual-group1] unicast-suppression 20
virtual-cable-test
Description
Use the virtual-cable-test command to test the cable connection of an Ethernet interface. The test results
are displayed within five seconds.
The following cable states are available:
Normal—The cable is in good condition.
Abnormal—Any fault other than a short or open circuit is detected.
If the cable connection is normal, the displayed cable length is the total length of the cable.
If the cable connection has a fault, it is the length from the local port to the faulty point.
Fiber ports do not support this command.
If the link of an Ethernet interface is up, testing its cable connection will cause the link to go down and
then up.
The test result is for reference only. The cable length detection error is up to 5 m (about 16 ft). If a test
item is not available, a hyphen (-) is displayed.
Syntax
virtual-cable-test
View
Layer 2 Ethernet interface view
Default level
2: System level
Parameters
None
Example
# Test the cable connection of GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] virtual-cable-test
Cable status: normal, 1 metres
Pair Impedance mismatch: Pair skew: - ns
Pair swap: Pair polarity: Insertion loss: - db
Return loss: - db
Near-end crosstalk: - db
38
NOTE:
The Pair Impedance mismatch field has the following values:
Yes—Match
No—Mismatch
Layer 3 Ethernet interface configuration commands
mtu
Description
Use the mtu command to set the MTU for a Layer 3 Ethernet interface.
Use the undo mtu command to restore the default.
By default, the MTU of a Layer 3 Ethernet interface is 1500 bytes.
Syntax
mtu size
undo mtu
View
Layer 3 Ethernet interface view
Default level
2: System level
Parameter
size: Sets the MTU in bytes, whose range varies by interface types.
Example
# Set the MTU to 1430 bytes for the Layer 3 Ethernet interface GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mtu 1430
39
Loopback and null interface configuration
commands
default
Description
Use the default command to restore the default settings for the loopback or null interface.
This command might fail to restore the default settings for some commands for reasons such as command
dependencies and system restrictions. You can use the display this command in interface view to check
for these commands, and perform their undo forms or follow the command reference to individually
restore their default settings. If your restoration attempt still fails, follow the error message to resolve the
problem.
CAUTION:
The default command might interrupt ongoing network services. Make sure you are fully
aware of the impacts of this command when you perform it on a live network.
Syntax
default
View
Loopback interface view, null interface view
Default level
2: System level
Parameters
None
Example
# Restore the default settings of interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-loopback1] default
This command will restore the default settings. Continue? [Y/N]:y
description
Description
Use the description command to set a description for the interface.
Use the undo description command to restore the default.
40
By default, the description of a loopback or null interface is interface name Interface. For example:
Loopback1 interface.
Related commands: display interface.
Syntax
description text
undo description
View
Loopback interface view, null interface view
Default level
2: System level
Parameter
text: Creates an interface description, a string of 1 to 80 characters. Valid characters and symbols
include English letters (A to Z, a to z), digits (0 to 9), special English characters, spaces, and other
Unicode characters and symbols.
An interface description can be a mixture of English characters and other Unicode characters. The mixed
description cannot exceed the specified length.
To use a type of Unicode characters or symbols in an interface description, you must install the
corresponding Input Method Editor (IME) and log in to the device through supported remote login
software.
Each non-English Unicode character or symbol takes the space of two regular characters. When the
length of a description string reaches or exceeds the maximum line width on the terminal software, the
software starts a new line. If a line is broken, it may break a Unicode character into two parts and create
garbled characters.
Example
# Set the description for interface loopback 1 to loopback1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname- loopback1] description loopback1
display interface loopback
Description
Use the display interface loopback command to display information about a loopback interface:
If you do not specify the loopback parameter, this command displays information about all
interfaces on the device.
If you specify the loopback parameter without the interface-number parameter, this command
displays information about all created loopback interfaces.
Related commands: interface loopback.
Syntax
display interface [ loopback ] [ brief [ down ] ] [ | { begin | exclude | include } regular-expression ]
41
display interface loopback interface-number [ brief ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface-number: Specifies the loopback interface number, which can be the number of any existing
loopback interface. With this parameter, this command displays information about a specified loopback
interface.
brief: Displays brief interface information. If you do not specify this parameter, this command displays
detailed interface information.
down: Displays information about interfaces in the DOWN state and the causes. If you do not specify this
parameter, this command displays information about interfaces in all states.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display detailed information about interface loopback 0. (Suppose the loopback interface supports
traffic accounting)
<Sysname> display interface loopback 0
LoopBack0 current state: UP
Line protocol current state: UP (spoofing)
Description: LoopBack0 Interface
The Maximum Transmit Unit is 1536
Internet protocol processing : disabled
Physical is Loopback
Last clearing of counters:
Never
Last 300 seconds input:
Last 300 seconds output:
0 bytes/sec, 0 bits/sec, 0 packets/sec
0 bytes/sec, 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 drops
0 packets output, 0 bytes, 0 drops
# Display brief information about interface loopback 0.
<Sysname> display interface loopback 0 brief
The brief information of interface(s) under route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Main IP
Loop0
UP
UP(s)
--
42
Description
Table 12 Command output
Field
Description
current state
Physical state (up or administratively down) of the interface.
Line protocol current state
State of the data link layer protocol: up (spoofing). Spoofing
refers to the spoofing attribute of the interface. When the
network layer protocol state of the interface is displayed as up,
the corresponding link may not exist, or the corresponding link
is non-permanent and established on demand.
Description
Description string of the interface.
The Maximum Transmit Unit
MTU of the interface.
Internet protocol processing
State (enabled or disabled) of the network layer protocol
(displayed as Internet Address is X.X.X.X/XX Primary).
Physical is loopback
The physical type of the interface is loopback.
Time when statistics on the logical interface were last cleared
by using the reset counters interface command.
Last clearing of counters
If the statistics of the interface have never been cleared by
using the reset counters interface command since the device
started, Never is displayed for this field.
Average input rate during the last 300 seconds (displayed
when the interface supports traffic accounting), where the
following conditions apply:
Last 300 seconds input: 0 bytes/sec, 0
bits/sec, 0 packets/sec
packets/sec indicates the average number of packets received
per second.
bytes/sec indicates the average number of bytes received per
second.
bits/sec indicates the average number of bits received per
second.
Average output rate over the last 300 seconds (displayed when
the interface supports traffic accounting), where the following
conditions apply:
Last 300 seconds output: 0 bytes/sec, 0
bits/sec, 0 packets/sec
packets/sec indicates the average number of packets sent per
second.
bytes/sec indicates the average number of bytes sent per
second.
bits/sec indicates the average number of bits sent per second.
0 packets input, 0 bytes, 0 drops
Total number and size (in bytes) of the input packets of the
interface and the number of the dropped packets (displayed
when the interface supports traffic accounting).
0 packets output, 0 bytes, 0 drops
Total number and size (in bytes) of the output packets of the
interface and the number of the dropped packets (displayed
when the interface supports traffic accounting).
The brief information of interfaces under
route mode
Brief information about Layer 3 interfaces.
43
Field
Description
Link status:
Link: ADM - administratively down; Stby standby
ADM—Interface has been shut down administratively. To
recover its physical state, perform the undo shutdown command.
Stby—Interface is operating as a backup interface. To see the
primary interface, use the display standby state command in the
High Availability Command Reference.
Protocol: (s) - spoofing
If the network layer protocol state of an interface is shown as
UP, but its link is an on-demand link or not present at all, its
protocol attribute includes the spoofing flag (an s in
parentheses).
Interface
Abbreviated interface name.
Physical link state of the interface:
UP—Link is up.
Link
ADM—Link has been shut down administratively. To recover its
physical state, perform the undo shutdown command.
Protocol
Protocol connection state of the interface, which can be UP,
DOWN, or UP(s).
Main IP
Main IP address of the interface.
Description
Description of the interface.
Cause
Cause of a DOWN physical link. If the port has been shut down
with the shutdown command, this field displays
Administratively. To restore the physical state of the interface,
use the undo shutdown command.
display interface null
Description
Use the display interface null command to display information about the null interface. Because Null 0
interface is the only null interface on a device, this command displays information about Null 0 interface,
even if you do not specify the 0 parameter:
If you do not specify the null parameter, this command displays information about all interfaces on
the device.
If you specify the null parameter, this command displays information about interface Null 0 with or
without the 0 parameter, because the device supports only one interface Null 0.
Related commands: interface null.
Syntax
display interface [ null ] [ brief [ down ] ] [ | { begin | exclude | include } regular-expression ]
display interface null 0 [ brief ] [ | { begin | exclude | include } regular-expression ]
View
Any view
44
Default level
1: Monitor level
Parameters
0: Specifies interface Null 0. The null interface number is fixed at 0, because the device has only one null
interface.
brief: Displays brief interface information. If you do not specify this parameter, this command displays
detailed interface information.
down: Displays information about interfaces in the DOWN state and the causes. If you do not specify this
parameter, this command displays information about interfaces in all states.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display detailed information about null interface Null 0. (Suppose the null interface supports traffic
accounting)
<Sysname> display interface null 0
NULL0 current state :UP
Line protocol current state :UP (spoofing)
Description :
NULL0 Interface
The Maximum Transmit Unit is 1500
Internet protocol processing : disabled
Physical is NULL DEV
Last clearing of counters:
Never
Last 300 seconds input:
Last 300 seconds output:
0 bytes/sec, 0 bits/sec, 0 packets/sec
0 bytes/sec, 0 bits/sec, 0 packets/sec
0 packets input, 0 bytes, 0 drops
0 packets output, 0 bytes, 0 drops
# Display brief information about interface Null 0.
<Sysname> display interface null 0 brief
The brief information of interface(s) under route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Main IP
NULL0
UP
UP(s)
Description
--
See Table 12 for the display interface null output description.
45
interface loopback
Description
Use the interface loopback command to create a loopback interface or enter loopback interface view.
Use the undo interface loopback command to remove a loopback interface.
Related commands: display interface loopback.
Syntax
interface loopback interface-number
undo interface loopback interface-number
View
System view
Default level
2: System level
Parameter
interface-number: Specifies the loopback interface number, ranging from 0 to 127.
Example
# Create interface loopback 5.
<Sysname> system-view
[Sysname] interface loopback 5
[Sysname-LoopBack5]
interface null
Description
Use the interface null command to enter null interface view.
A device has only one null interface, interface Null 0. Interface Null 0 is always up. You cannot remove
or shut it down.
Related commands: display interface null.
Syntax
interface null 0
View
System view
Default level
2: System level
Parameter
0: Specifies interface Null 0. The null interface number is fixed to 0.
46
Example
# Enter Null 0 interface view.
<Sysname> system-view
[Sysname] interface null 0
[Sysname-NULL0]
reset counters interface loopback
Description
Use the reset counters interface loopback command to clear statistics on loopback interfaces.
Before collecting traffic statistics within a specific period of time on a loopback interface, clear the
existing statistics:
If you do not specify the loopback parameter, this command clears the statistics on all interfaces in
the system.
If you specify the loopback parameter without the interface-number parameter, this command clears
the statistics on all loopback interfaces.
Syntax
reset counters interface [ loopback [ interface-number ] ]
View
User view
Default level
2: System level
Parameter
interface-number: Specifies the number of the loopback interface, which can be the number of any
existing loopback interface. With this parameter, the command clears statistics on a specified loopback
interface.
Example
# Clear statistics on loopback interface Loopback 5.
<Sysname> reset counters interface loopback 5
reset counters interface null
Description
Use the reset counters interface null command to clear statistics on the null interface.
Before collecting traffic statistics within a specific period of time on the null interface, clear the existing
statistics:
If you do not specify the null parameter, this command clears statistics on all interfaces.
If you specify the null parameter, this command clears the statistics on interface Null 0 with or
without the 0 parameter, because the device supports only one interface Null 0.
Syntax
reset counters interface [ null [ 0 ] ]
47
View
User view
Default level
2: System level
Parameter
0: Specifies the number of the null interface, which is fixed at 0.
Example
# Clear statistics on interface Null 0.
<Sysname> reset counters interface null 0
shutdown
Description
Use the shutdown command to shut down the loopback interface.
Use the undo shutdown command to bring up the loopback interface.
By default, a loopback interface is up.
Syntax
shutdown
undo shutdown
View
Loopback interface view
Default level
2: System level
Parameters
None
Example
# Shut down loopback interface loopback 1.
<Sysname> system-view
[Sysname] interface loopback 1
[Sysname-Loopback1] shutdown
48
MAC address table configuration commands
The MAC address table can contain only Layer 2 Ethernet ports and Layer 2 aggregate interfaces.
This document covers only the configuration of unicast MAC address table entries, including static,
dynamic, and blackhole MAC address table entries.
display mac-address
Description
Use the display mac-address command to display information about the MAC address table.
If you execute this command without specifying any parameters, it displays information of all MAC
address entries on the device, including unicast MAC address entries and static multicast MAC address
entries.
If you execute this command using only the vlan parameter or the count parameter, or only these two
parameters, it displays information of unicast MAC address entries and static multicast MAC address
entries.
Related commands: mac-address (system view), mac-address (interface view), and mac-address timer.
Syntax
display mac-address [ mac-address [ vlan vlan-id ] | [ [ dynamic | static ] [ interface interface-type
interface-number ] | blackhole ] [ vlan vlan-id ] [ count ] ] [ | { begin | exclude | include } regularexpression ]
View
Any view
Default level
1: Monitor level
Parameters
blackhole: Displays blackhole MAC address entries.
vlan vlan-id: Displays MAC address entries of the specified VLAN, where vlan-id is in the range of 1 to
4094.
count: Displays the number of MAC address entries specified by related parameters in the command.
When this parameter is used, the command displays only the number of specified MAC address entries,
rather than related information about these MAC address entries.
mac-address: Displays MAC address entries of a specified MAC address, in the format of H-H-H.
dynamic: Displays dynamic MAC address entries, which can be aged.
static: Displays static MAC address entries, which do not age.
interface interface-type interface-number: Displays the MAC address learning status of the specified
interface. interface-type interface-number specifies an interface by its type and number.
49
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the MAC address table entry for MAC address 000f-e201-0101.
<Sysname> display mac-address 000f-e201-0101
MAC ADDR
VLAN ID
STATE
PORT INDEX
AGING TIME(s)
000f-e201-0101
1
Learned
GigabitEthernet1/0/1
AGING
---
1 mac address(es) found
---
Table 13 Command output
Field
Description
MAC ADDR
MAC address.
VLAN ID
ID of the VLAN to which the MAC address belongs.
State of a MAC address entry:
Config static—Static entry configured manually by the user.
Config dynamic—Dynamic entry configured manually by the user.
Learned—Entry learned by the device.
STATE
Blackhole—Blackhole entry.
802.1X—Entry generated after a user passes the 802.1X authentication. For
more information about 802.1X authentication, see Security Configuration
Guide.
Multicast—Static multicast MAC address entry configured manually by the
user.
PORT INDEX
Number of the port corresponding to the MAC address. Packets destined to
this MAC address are sent out this port (displayed as N/A for a blackhole
MAC address entry).
Aging time:
AGING TIME(s)
AGING—Entry is aging.
NOAGED—Entry does not age.
1 mac address(es) found
One MAC address entry is found.
display mac-address aging-time
Description
Use the display mac-address aging-time command to display the aging time of dynamic entries in the
MAC address table.
50
Related commands: mac-address (system view), mac-address (interface view), mac-address timer, and
display mac-address.
Syntax
display mac-address aging-time [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the aging time of dynamic entries in the MAC address table.
<Sysname> display mac-address aging-time
Mac address aging time: 300s
The output shows that the aging time of dynamic entries in the MAC address table is 300 seconds.
display mac-address statistics
Description
Use the display mac-address statistics command to display the statistics of the MAC address table.
Syntax
display mac-address statistics [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
51
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the statistics of the MAC address table.
<Sysname> display mac-address statistics
MAC TYPE
LEARNED
USER-DEFINED
SYSTEM-DEFINED IN-USE
Dynamic
Unicast
21
0
2
23
AVAILABLE
Static
Unicast
0
0
8
8
5120
Total
Unicast
31
32768
Dynamic Multicast
0
0
0
0
Static
Multicast
0
0
0
0
256
Total
Multicast
0
256
Table 14 Command output
Field
Description
MAC address type:
Dynamic Unicast
Static Unicast
MAC TYPE
Total Unicast
Dynamic Multicast
Static Multicast
Total Multicast
LEARNED
Dynamically learned MAC addresses
USER-DEFINED
User defined MAC addresses (dynamic and static)
SYSTEM-DEFINED
MAC addresses generated by the system (for example, 802.1x and
MAC authentication)
IN-USE
Number of existing MAC addresses of a specific type
AVAILABLE
Maximum number of MAC addresses supported by the system
mac-address (interface view)
Description
Use the mac-address command to add or modify a MAC address entry on a specified interface.
Use the undo mac-address command to remove a MAC address entry on the interface.
The MAC address entries configuration cannot survive a reboot unless you save it. However, the dynamic
MAC address table entries are lost at next reboot whether you save the configuration or not.
Related commands: display mac-address.
Syntax
mac-address { dynamic | static } mac-address vlan vlan-id
undo mac-address { dynamic | static } mac-address vlan vlan-id
52
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
dynamic: Specifies dynamic MAC address entries. These entries can age.
static: Specifies static MAC address entries. They do not age, but you can add or remove them.
mac-address: Specifies a MAC address in the format of H-H-H, where 0s at the beginning of each H (16bit hexadecimal digit) can be omitted. For example, inputting ―f-e2-1‖ indicates that the MAC address is
―000f-00e2-0001‖.
vlan vlan-id: Specifies an existing VLAN to which the Ethernet interface belongs, where vlan-id is the
specified VLAN ID, in the range of 1 to 4094.
Examples
# Add a static entry for MAC address 000f-e201-0101 on port GigabitEthernet 1/0/1 that belongs to
VLAN 2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-address static 000f-e201-0101 vlan 2
# Add a static entry for MAC address 000f-e201-0102 on port Bridge-Aggregation 1 that belongs to
VLAN 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] mac-address static 000f-e201-0102 vlan 1
mac-address (system view)
Description
Use the mac-address command to add or modify a MAC address entry.
Use the undo mac-address command to remove one or all MAC address entries.
A static or blackhole MAC address entry will not be overwritten by a dynamic MAC address entry. A
dynamic MAC address entry can be overwritten by a static or blackhole MAC address entry.
If you execute the undo mac-address command without specifying any parameters, this command deletes
all unicast MAC address entries and static multicast MAC address entries.
You can delete all the MAC address entries (including unicast MAC address entries and static multicast
MAC address entries) of a VLAN, or you can choose to delete a specific type (dynamic, static, or
blackhole) of MAC address entries only. You can single out certain ports and delete the corresponding
unicast MAC address entries, but not the corresponding static multicast MAC address entries.
The MAC address entries configuration cannot survive a reboot unless you save it. The dynamic MAC
address table entries, however, are lost at next reboot regardless of whether you save the configuration or
not.
Related commands: display mac-address.
53
Syntax
mac-address blackhole mac-address vlan vlan-id
mac-address { dynamic | static } mac-address interface interface-type interface-number vlan vlan-id
undo mac-address [ { dynamic | static } mac-address interface interface-type interface-number vlan vlanid ]
undo mac-address [ blackhole | dynamic | static ] [ mac-address ] vlan vlan-id
undo mac-address [ dynamic | static ] mac-address interface interface-type interface-number vlan vlan-id
undo mac-address [ dynamic | static ] interface interface-type interface-number
View
System view
Default level
2: System level
Parameters
blackhole: Specifies blackhole MAC address entries. These entries do not age, but you can add or
remove them. The packets whose source or destination MAC addresses match blackhole MAC address
entries are dropped.
mac-address: Specifies a MAC address in the format of H-H-H, where 0s at the beginning of each H (16bit hexadecimal digit) can be omitted. For example, inputting ―f-e2-1‖ indicates that the MAC address is
―000f-00e2-0001‖.
vlan vlan-id: Specifies an existing VLAN to which the Ethernet interface belongs, where vlan-id is the
specified VLAN ID, in the range of 1 to 4094.
dynamic: Specifies dynamic MAC address entries, which can be aged.
static: Specifies static MAC address entries. These entries do not age, but you can add or remove them.
interface interface-type interface-number: Specifies an outbound interface by its type and number.
Example
# Add a static entry for MAC address 000f-e201-0101. All frames destined to this MAC address are sent
out port GigabitEthernet 1/0/1 which belongs to VLAN 2.
<Sysname> system-view
[Sysname] mac-address static 000f-e201-0101 interface gigabitethernet 1/0/1 vlan 2
mac-address mac-learning disable
Description
Use the mac-address mac-learning disable command to disable MAC address learning. Depending on
the view that you entered, you can disable it globally, on a Layer 2 interface or a group of Ethernet ports,
or on a VLAN.
Use the undo mac-address mac-learning disable command to enable MAC address learning. Depending
on the view that you entered, you can disable it globally, on a Layer 2 interface or a group of Ethernet
ports, or on a VLAN.
By default, MAC address learning is enabled.
54
Follow these guidelines when configuring MAC address learning:
You may need to disable MAC address learning to prevent the MAC address table from being
saturated. For example, when your device is being attacked by many packets with different source
MAC addresses, it affects the update of the MAC address table.
Because disabling MAC address learning may result in broadcast storms, enable broadcast storm
suppression after you disable MAC address learning on a port.
Related commands: display mac-address mac-learning.
When MAC address learning is disabled, the learned MAC addresses remain valid until they age out.
Syntax
mac-address mac-learning disable
undo mac-address mac-learning disable
View
System view, Layer 2 Ethernet interface view, VLAN view, port group view, Layer 2 aggregate interface
view
Default level
2: System level
Parameters
None
Examples
# Disable global MAC address learning.
<Sysname> system-view
[Sysname] mac-address mac-learning disable
# Disable MAC address learning on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-address mac-learning disable
# Disable MAC address learning on VLAN 10.
<Sysname> system-view
[Sysname] vlan 10
[Sysname-vlan10] mac-address mac-learning disable
# Disable MAC address learning on Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] mac-address mac-learning disable
mac-address max-mac-count
Description
Use the mac-address max-mac-count count command to configure the maximum number of MAC
addresses that can be learned on a port.
55
Use the undo mac-address max-mac-count command to restore the default maximum number of MAC
addresses that can be learned on an Ethernet port.
By default, no MAC learning limit is configured.
If the command is executed in interface view, the configuration takes effect on the interface only. If the
command is executed in port group view, the configuration takes effect on all ports in the port group.
Related commands: mac-address and mac-address timer.
Syntax
mac-address max-mac-count count
undo mac-address max-mac-count
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameter
count: Specifies the maximum number of MAC addresses that can be learned on a port. The value is in
the range of 0 to 4096. When the parameter takes 0, the VLAN is not allowed to learn MAC addresses.
Example
# Set the maximum number of MAC addresses that can be learned on port GigabitEthernet 1/0/1 to
600.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-address max-mac-count 600
mac-address timer
Description
Use the mac-address timer command to configure the aging timer for dynamic MAC address entries.
Use the undo mac-address timer command to restore the default.
By default, the aging timer is 300 seconds.
Follow these guidelines to set the aging timer appropriately:
A long aging interval may cause the MAC address table to retain outdated entries and fail to
accommodate the latest network changes.
A short aging interval may result in removal of valid entries and unnecessary broadcasts that may
affect the performance of the switch.
Syntax
mac-address timer { aging seconds | no-aging }
undo mac-address timer aging
View
System view
56
Default level
2: System level
Parameters
aging seconds: Sets an aging timer (in seconds) for dynamic MAC address entries. The value is in the
range of 10 to 1,000,000 seconds.
no-aging: Sets dynamic MAC address entries not to age.
Example
# Set the aging timer for dynamic MAC address entries to 500 seconds.
<Sysname> system-view
[Sysname] mac-address timer aging 500
57
MAC Information configuration commands
MAC Information applies only to Layer 2 Ethernet interfaces.
mac-address information enable (Ethernet interface view)
Description
Use the mac-address information enable command to enable MAC Information on the Layer 2 Ethernet
interface.
Use the undo mac-address information enable command to disable MAC Information on the Layer 2
Ethernet interface.
By default, MAC Information is disabled on a Layer 2 Ethernet interface.
This command is not supported on aggregate interfaces.
To enable MAC Information on an Ethernet interface, enable MAC Information globally.
Syntax
mac-address information enable { added | deleted }
undo mac-address information enable { added | deleted }
View
Layer 2 Ethernet interface view
Default level
1: Monitor level
Parameters
added: Enables the device to record security information when a new MAC address is learned on the
Ethernet port.
deleted: Enables the device to record security information when an existing MAC address is deleted.
Example
# Enable MAC Information on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-address information enable added
mac-address information enable (system view)
Description
Use the mac-address information enable command to enable MAC Information globally.
Use the undo mac-address information enable command to disable MAC Information globally.
By default, MAC Information is disabled globally.
58
Syntax
mac-address information enable
undo mac-address information enable
View
System view
Default level
2: System level
Parameters
None
Example
# Enable MAC Information globally.
<Sysname> system-view
[Sysname] mac-address information enable
mac-address information interval
Description
Use the mac-address information interval command to set the interval for sending Syslog or trap
messages.
Use the undo mac-address information interval command to restore the default interval for sending
Syslog or trap messages.
By default, the interval for sending Syslog or trap messages is 1 second.
Syntax
mac-address information interval value
undo mac-address information interval
View
System view
Default level
2: System level
Parameter
value: Sets the interval for sending Syslog or trap messages, in the range of 1 to 20,000 seconds.
Example
# Set the interval for sending Syslog or trap messages to 200 seconds.
<Sysname> system-view
[Sysname] mac-address information interval 200
59
mac-address information mode
Description
Use the mac-address information mode command to set the MAC Information mode (to use Syslog
messages or trap messages) to inform the remote network management device of MAC address changes.
Use the undo mac-address information mode command to restore the default.
By default, trap messages are sent to inform the remote network management device of MAC address
changes.
Syntax
mac-address information mode { syslog | trap }
undo mac-address information mode { syslog | trap }
View
System view
Default level
2: System level
Parameters
syslog: Specifies that the device sends Syslog messages to inform the remote network management device
of MAC address changes.
trap: Specifies that the device sends trap messages to inform the remote network management device of
MAC address changes.
Example
# Configure the device to send trap messages to inform the remote network management device of MAC
address changes.
<Sysname> system-view
[Sysname] mac-address information mode trap
mac-address information queue-length
Description
Use the mac-address information queue-length command to set the MAC Information queue length.
Use the undo mac-address information queue-length command to restore the default.
By default, the MAC Information queue length is 50.
When you set the MAC Information queue length to 0, it indicates that the device will send a Syslog or
trap message to the network management device as soon as a new MAC address is learned or an
existing MAC address is deleted.
Syntax
mac-address information queue-length value
undo mac-address information queue-length
60
View
System view
Default level
2: System level
Parameter
value: Specifies the MAC Information queue length, in the range of 0 to 1000.
Example
# Set the MAC Information queue length to 600.
<Sysname> system-view
[Sysname] mac-address information queue-length 600
61
Ethernet link aggregation configuration
commands
default
Description
Use the default command to restore the default settings for an aggregate interface.
This command might fail to restore the default settings for some commands for reasons such as command
dependencies and system restrictions. You can use the display this command in interface view to check
for these commands, and perform their undo forms or follow the command reference to individually
restore their default settings. If your restoration attempt still fails, follow the error message to resolve the
problem.
CAUTION:
The default command might interrupt ongoing network services. Make sure you are fully
aware of the impacts of this command when you perform it on a live network.
Syntax
default
View
Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Restore the default settings for Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] default
This command will restore the default settings. Continue? [Y/N]:y
description
Description
Use the description command to set a description for an interface. Fore example, you can include
information such as the purpose of the interface for the ease of management.
Use the undo description command to restore the default setting.
62
By default, the description of an interface is interface-name Interface. For example, the default description
of Bridge-Aggregation1 is Bridge-Aggregation1 Interface.
Syntax
description text
undo description
View
Layer 2 aggregate interface view
Default level
2: System level
Parameter
text: Specifies the interface description, a string of 1 to 80 characters.
Example
# Set the description of Layer 2 aggregate interface Bridge-Aggregation 1 to connect to the lab.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] description connect to the lab
display interface
Description
Use the display interface command to display aggregate interface information.
If bridge-aggregation is not specified, this command displays information about all interfaces.
If bridge-aggregation is specified without any interface number specified, this command displays
information about all aggregate interfaces.
If bridge-aggregation interface-number is specified, this command displays information about the
specified aggregate interface.
Syntax
display interface bridge-aggregation
expression ]
[ brief [ down ] ] [ | { begin | exclude | include } regular-
display interface bridge-aggregation interface-number [ brief ] [ | { begin | exclude | include } regularexpression ]
View
Any view
Default level
1: Monitor level
Parameters
bridge-aggregation: Displays information about Layer 2 aggregate interfaces.
63
interface-number: Specifies an existing aggregate interface number. The value range for the interfacenumber parameter is the set of all existing aggregate interface numbers.
brief: Displays brief interface information. If you do not specify this parameter, this command displays
detailed interface information.
down: Displays information about interfaces in the DOWN state and the causes. If you do not specify this
parameter, this command displays information about interfaces in all states.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display information about Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> display interface bridge-aggregation 1
Bridge-Aggregation1 current state: DOWN
IP Packet Frame Type: PKTFMT_ETHNT_2, Hardware Address: 000f-e207-f2e0
Description: Bridge-Aggregation1 Interface
Unknown-speed mode, unknown-duplex mode
Link speed type is autonegotiation, link duplex type is autonegotiation
PVID: 1
Port link-type: access
Tagged
VLAN ID : none
Untagged VLAN ID : 1
Last clearing of counters:
Last 300 seconds input:
Last 300 seconds output:
Input (total):
Never
0 packets/sec 0 bytes/sec
-%
0 packets/sec 0 bytes/sec
-%
0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts
Input (normal):
0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts
Input:
0 input errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 frame, 0 overruns, 0 aborts
0 ignored, 0 parity errors
Output (total): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output (normal): 0 packets, 0 bytes
0 unicasts, 0 broadcasts, 0 multicasts, 0 pauses
Output: 0 output errors, 0 underruns, 0 buffer failures
0 aborts, 0 deferred, 0 collisions, 0 late collisions
0 lost carrier, 0 no carrier
# Display brief information about Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> display interface bridge-aggregation 1 brief
The brief information of interface(s) under bridge mode:
64
Link: ADM - administratively down; Stby - standby
Speed or Duplex: (a)/A - auto; H - half; F - full
Type: A - access; T - trunk; H - hybrid
Interface
Link Speed
Duplex Type PVID Description
BAGG1
DOWN auto
A
A
1
Table 15 Command output
Field
Description
Layer 2/Layer 3 interface status:
Bridge-Aggregation1/RouteAggregation1 current state
DOWN (Administratively)—Interface is shut down administratively with
the shutdown command.
DOWN—Interface is up administratively, but down physically (possibly
because no physical link is present or the link is faulty).
UP—The Ethernet interface is up both administratively and physically.
Unknown-speed mode, unknownduplex mode
Interface speed and duplex mode are unknown.
PVID
Port VLAN ID.
Last clearing of counters
Time when the reset counters interface command was last used to clear
the interface statistics.
Never indicates the reset counters interface command has never been
used on the interface since the device’s startup.
Last 300 seconds input/output
Average input/output rate over the last 300 seconds.
Input/Output (total)
Statistics of all packets received/sent on the interface.
Input/Output (normal)
Statistics of all normal packets received/sent on the interface.
Line protocol current state
Link layer state of the interface.
IP packet processing.
Internet protocol processing
Disabled indicates that IP packets cannot be processed.
For an interface configured with an IP address, this field changes to
Internet Address is.
Output queue : (Urgent queuing :
Size/Length/Discards)
Output queue (current message number in the urgent queue/ maximum
number of messages allowed in the urgent queue/number of discarded
messages).
Output queue : (Protocol queuing
: Size/Length/Discards)
Output queue (current message number in the protocol queue/
maximum number of messages allowed in the protocol queue/number
of discarded messages).
Output queue : (FIFO queuing :
Size/Length/Discards)
Output queue (current message number in the FIFO queue/ maximum
number of messages allowed in the FIFO queue/number of discarded
messages).
The brief information of interfaces
under route mode
Brief information about Layer 3 interfaces.
The brief information of interfaces
under bridge mode
Brief information about Layer 2 interfaces.
65
Field
Description
Link status:
Link: ADM - administratively
down; Stby - standby
Speed or Duplex: (a)/A - auto; H half; F - full
ADM—Interface has been shut down administratively. To recover its
physical layer state, perform the undo shutdown command.
Stby—Interface is operating as a backup interface. To see the primary
interface, use the display standby state command (see High
Availability Command Reference).
If the speed of an interface is negotiated automatically, its speed
attribute includes the auto negotiation flag, which is the letter a in
parentheses.
If the duplex mode of an interface is negotiated automatically, its
duplex mode attribute includes the auto negotiation flag, letter a in
parentheses or a capital A. Letter H indicates the half duplex mode,
and letter F indicates the full duplex mode.
Type: A - access; T - trunk; H hybrid
Link type options for Ethernet interfaces.
Protocol: (s) - spoofing
If the network layer protocol state of an interface is shown as UP, but
its link is an on-demand link or not present, its protocol attribute
includes the spoofing flag (an s in parentheses).
Interface
Abbreviated interface name.
Link
Physical link state of the interface.
Speed
Interface speed, in bps.
Cause
Cause of a DOWN physical link.
display lacp system-id
Description
Use the display lacp system-id command to display the system ID of the local system.
The system ID comprises the system LACP priority and the system MAC address.
Use the lacp system-priority command to change the LACP priority of the local system. Although you
specify the LACP priority value in decimal format in the lacp system-priority command, it is displayed as
a hexadecimal value with the display lacp system-id command.
Related commands: lacp system-priority.
Syntax
display lacp system-id [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
66
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the local system ID.
<Sysname> display lacp system-id
Actor System ID: 0x8000, 0000-fc00-6504
Table 16 Command output
Field
Description
Actor System ID: 0x8000, 0000fc00-6504
Local system ID, which comprises the system LACP priority (0x8000 in
this sample output) and the system MAC address (0000-fc00-6504 in
this sample output).
display link-aggregation load-sharing mode
Description
Use the display link-aggregation load-sharing mode command to display global or group-specific linkaggregation load sharing criteria.
To display the global link-aggregation load sharing criteria, run the command without the interface
parameter.
To display all the group-specific load sharing criteria, run the command with the interface parameter, but
do not specify a particular interface.
To display the load sharing criterion or criteria of a particular aggregation group, perform the command
with the aggregate interface specified.
The bridge-aggregation parameter becomes available only after you create Layer 2 aggregate interfaces
on the device.
Syntax
display link-aggregation load-sharing mode [ interface [ bridge-aggregation interface-number ] ] [ | {
begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
67
Parameters
bridge-aggregation: Displays the load sharing criteria of the aggregation group corresponding to the
specified Layer 2 aggregate interface.
interface-number: Specifies an existing aggregate interface number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display the default global link-aggregation load sharing criteria.
Link-Aggregation Load-Sharing Mode:
Layer 2 traffic: packet type-based sharing
Layer 3 traffic: packet type-based sharing
# Display the configured global link-aggregation load sharing criteria.
<Sysname> display link-aggregation load-sharing mode
Link-Aggregation Load-Sharing Mode:
destination-mac address, source-mac address
# Display the default link-aggregation load sharing criteria of the aggregation group corresponding to
Layer 2 aggregate interface Bridge-Aggregation 10.
<Sysname>display link-aggregation load-sharing mode interface Bridge-Aggregation
10
Bridge-Aggregation10 Load-Sharing Mode:
Layer 2 traffic: packet type-based sharing
Layer 3 traffic: packet type-based sharing
# Display the configured link-aggregation load sharing criterion or criteria of the aggregation group
corresponding to Layer 2 aggregate interface Bridge-Aggregation 10.
<Sysname> display link-aggregation load-sharing mode interface bridge-aggregation 10
Bridge-Aggregation10 Load-Sharing Mode:
destination-mac address, source-mac address
Table 17 Command output
Field
Description
Global link-aggregation load sharing criteria.
Link-Aggregation Load-Sharing
Mode
By default, the link-aggregation load sharing criteria for Layer 2 traffic,
Layer 3 traffic, Layer 4 traffic, and MPLS traffic are displayed.
If you have configured the global link-aggregation load sharing
criteria, the configured ones are displayed.
68
Field
Description
Link-aggregation load sharing criteria of the aggregation group
corresponding to the aggregate interface Bridge-Aggregation 10.
Bridge-Aggregation10 LoadSharing Mode
By default, the global link-aggregation load sharing criteria are
displayed.
If you have configured link-aggregation load sharing criteria especially
for this aggregation group, the configured ones are displayed.
Link-aggregation load sharing criteria of the aggregation group
corresponding to aggregate interface Route-Aggregation 10.
Route-Aggregation10 LoadSharing Mode
By default, the global link-aggregation load sharing criteria are
displayed.
If you have configured link-aggregation load sharing criteria especially
for this aggregation group, the configured ones are displayed.
Layer 2 traffic: destination-mac
address, source-mac address
Default link-aggregation load sharing criteria for Layer 2 traffic. In this
sample output, the criteria are the source and destination MAC
addresses of packets.
Layer 3 traffic: destination-ip
address, source-ip address
Default link-aggregation load sharing criteria for Layer 3 traffic. In this
sample output, the criteria are the source and destination IP addresses
of packets.
destination-mac address, sourcemac address
User-configured link-aggregation load sharing criteria. In this sample
output, the criteria are the source and destination MAC addresses of
packets.
display link-aggregation member-port
Description
Use the display link-aggregation member-port command to display detailed link aggregation information
for the specified member ports. If no port is specified, this command displays detailed link aggregation
information for all member ports.
Only the port number and operational key of a member port in a static aggregation group are displayed,
because the aggregation group is not aware of the partner’s information.
Syntax
display link-aggregation member-port [ interface-list ] [ | { begin | exclude | include } regular-expression
]
View
Any view
Default level
1: Monitor level
Parameters
interface-list: Specifies a list of link aggregation member ports, in the format interface-type interfacenumber [ to interface-type interface-number ], where interface-type interface-number indicates the port
type and port number.
69
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display detailed link aggregation information for GigabitEthernet 1/0/1, a member port of a static
aggregation group.
<Sysname>display link-aggregation member-port GigabitEthernet 1/0/1
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
GigabitEthernet1/0/1:
Aggregation Interface: Route-Aggregation1
Port Number: 3
Port Priority: 32768
Oper-Key: 2
# Display detailed link aggregation information for GigabitEthernet 1/0/2, a member port of a dynamic
aggregation group.
<Sysname>display link-aggregation member-port GigabitEthernet 1/0/2
Flags: A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
GigabitEthernet1/0/2:
Aggregation Interface: Bridge-Aggregation2
Local:
Port Number: 7
Port Priority: 32768
Oper-Key: 3
Flag: {ACG}
Remote:
System ID: 0x8000, 0000-0000-0000
Port Number: 0
Port Priority: 32768
Oper-Key: 0
Flag: {EF}
Received LACP Packets: 0 packet(s)
Illegal: 0 packet(s)
Sent LACP Packets: 0 packet(s)
70
Table 18 Command output
Field
Description
LACP state flags:
A—LACP is enabled
B—Indicates the LACP short timeout
C—Sending system detects that the link is aggregatable
Flags
D—Sending system detects that the link is synchronized
E—Sending system detects that the incoming frames are collected
F—Sending system detects that the outgoing frames are distributed
G—Sending system receives frames in the default state
H—Sending system receives frames in the expired state
Aggregation Interface
Aggregate interface to which the member port belongs
Local
Information about the local end
Port Priority
Aggregation priority of the port
Oper-key
Operational key
Flag
LACP protocol state flag
Remote
Information about the remote end
System ID
The remote end system ID, comprising the system LACP priority and the system
MAC address
Received LACP Packets
Total number of LACP packets received
Illegal
Total number of illegal packets
Sent LACP Packets
Total number of LACP packets sent
display link-aggregation summary
Description
Use the display link-aggregation summary command to display the summary information for all
aggregation groups.
The information about the remote system for a static link aggregation group may be displayed as none or
may not be displayed because the aggregation group is not aware of the partner’s information.
Syntax
display link-aggregation summary [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
71
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the summary information for all aggregation groups.
<Sysname> display link-aggregation summary
Aggregation Interface Type:
BAGG -- Bridge-Aggregation, RAGG -- Route-Aggregation
Aggregation Mode: S -- Static, D -- Dynamic
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Actor System ID: 0x8000, 000f-e267-6c6a
AGG
AGG
Interface
Mode
Partner ID
Select Unselect
Share
Ports
Type
Ports
------------------------------------------------------------------------BAGG1
S
none
1
0
Shar
BAGG10
D
0x8000, 000f-e267-57ad
2
0
Shar
Table 19 Command output
Field
Description
Aggregate interface type:
Aggregation Interface Type
BAGG—Layer 2 aggregate interface
RAGG—Layer 3 aggregate interface
Aggregation group type:
Aggregation Mode
S—Static link aggregation
D—Dynamic aggregation
Load sharing type:
Loadsharing Type
Shar—Load sharing
NonS—Non-load sharing
Actor System ID
Local system ID, which comprises the system LACP priority and the
system MAC address
AGG Interface
Type and number of the aggregate interface
AGG Mode
Aggregation group type
Partner ID
System ID of the partner, which comprises the system LACP
priority and the system MAC address
Select Ports
Total number of Selected ports
Unselect Ports
Total number of Unselected ports
72
Field
Description
Share Type
Load sharing type
display link-aggregation verbose
Description
Use the display link-aggregation verbose command to display detailed information about the
aggregation groups corresponding to the aggregate interfaces.
Use the display link-aggregation verbose bridge-aggregation interface-number command to display
information about a specific Layer 2 aggregation group.
Use the display link-aggregation verbose bridge-aggregation command to display information about all
Layer 2 aggregation groups,.
Use the display link-aggregation verbose command to display information about all aggregation groups.
The bridge-aggregation parameter is available only when you create Layer 2 aggregate interfaces on the
device.
Syntax
display link-aggregation verbose [ bridge-aggregation [ interface-number ] ] [ | { begin | exclude |
include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
bridge-aggregation: Displays detailed information about the Layer 2 aggregation groups corresponding
to Layer 2 aggregate interfaces.
interface-number: Specifies an existing aggregate interface number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display detailed information about the aggregation group corresponding to Layer 2 aggregate
interface Bridge-Aggregation 10, which is a dynamic aggregation group.
<Sysname> display link-aggregation verbose bridge-aggregation 10
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected
73
Flags:
A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Aggregation Interface: Bridge-Aggregation10
Aggregation Mode: Dynamic
Loadsharing Type: Shar
System ID: 0x8000, 000f-e267-6c6a
Local:
Port
Status
Priority Oper-Key
Flag
------------------------------------------------------------------------------GE1/0/26
S
32768
2
{ACDEF}
GE1/0/32
S
32768
2
{ACDEF}
Remote:
Actor
Partner Priority Oper-Key
SystemID
Flag
------------------------------------------------------------------------------GE1/0/26
32
32768
2
0x8000, 000f-e267-57ad {ACDEF}
GE1/0/32
26
32768
2
0x8000, 000f-e267-57ad {ACDEF}
# Display detailed information about the aggregation group corresponding to Layer 2 aggregate
interface Bridge-Aggregation 20, which is a static aggregation group.
<Sysname> display link-aggregation verbose bridge-aggregation 20
Loadsharing Type: Shar -- Loadsharing, NonS -- Non-Loadsharing
Port Status: S -- Selected, U -- Unselected
Flags:
A -- LACP_Activity, B -- LACP_Timeout, C -- Aggregation,
D -- Synchronization, E -- Collecting, F -- Distributing,
G -- Defaulted, H -- Expired
Aggregation Interface: Bridge-Aggregation20
Aggregation Mode: Static
Loadsharing Type: NonS
Port
Status
Priority
Oper-Key
-------------------------------------------------------------------------------GE1/0/21
U
32768
1
GE1/0/22
U
32768
1
GE1/0/23
U
63
1
Table 20 Command output
Field
Description
Load sharing type:
Loadsharing Type
Shar—Load sharing
NonS—Non-load sharing
Port Status
Port state: Selected or unselected
74
Field
Description
LACP state flags:
A—LACP is enabled.
B—Indicates the LACP short timeout.
C—Sending system detects that the link is aggregatable
Flags
D—Sending system detects that the link is synchronized
E—Sending system detects that the incoming frames are collected
F—Sending system detects that the outgoing frames are distributed
G—Sending system receives frames in the default state
H—Sending system receives frames in the expired state
Aggregation Interface
Name of the aggregate interface.
Mode of the aggregation group:
Aggregation Mode
Static for static aggregation
Dynamic for dynamic aggregation
System ID
Local system ID, comprising the system LACP priority and the system MAC
address
Local
Information about the local end
Port
Port type and number
Status
Port state: selected or unselected
Priority
Port aggregation priority
Oper-Key
Operational key
Flag
LACP protocol state flag
Remote
Information about the remote end
Actor
Local port type and number
Partner
Remote port index
enable snmp trap updown
Description
Use the enable snmp trap updown command to enable linkUp/linkDown trap generation for the
aggregate interface.
Use the undo enable snmp trap updown command to disable linkUp/linkDown trap generation for the
aggregate interface.
By default, linkUp/linkDown trap generation is enabled for an aggregate interface.
For an aggregate interface to generate linkUp/linkDown traps when its link state changes, you must also
enable linkUp/linkDown trap generation globally with the snmp-agent trap enable [ standard [ linkdown
| linkup ] * ] command.
For more information about the snmp-agent trap enable command, see Network Management and
Monitoring Command Reference.
75
Syntax
enable snmp trap updown
undo enable snmp trap updown
View
Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Enable linkUp/linkDown trap generation on Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] snmp-agent trap enable
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] enable snmp trap updown
interface bridge-aggregation
Description
Use the interface bridge-aggregation command to create a Layer 2 aggregate interface and enter the
Layer 2 aggregate interface view.
Use the undo interface bridge-aggregation command to remove a Layer 2 aggregate interface.
When you create a Layer 2 aggregate interface, a Layer 2 aggregation group with the same number is
automatically created. If you remove the Layer 2 aggregate interface, you also remove the Layer 2
aggregation group, and any member ports will leave the aggregation group.
Syntax
interface bridge-aggregation interface-number
undo interface bridge-aggregation interface-number
View
System view
Default level
2: System level
Parameter
interface-number: Specifies a Layer 2 aggregate interface number, in the range of 1 to 128.
Example
# Create Layer 2 aggregate interface Bridge-Aggregation 1 and enter its view.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
76
[Sysname-Bridge-Aggregation1]
lacp period short
Description
Use the lacp period short command to set the LACP timeout interval on a port to the short timeout interval
(1 second).
Use the undo lacp period command to restore the default setting.
The default LACP timeout interval is the long timeout interval (30 seconds).
Syntax
lacp period short
undo lacp period
View
Ethernet interface view
Default level
2: System level
Parameters
None
Example
# Set the LACP timeout interval on GigabitEthernet 1/0/1 to the short timeout interval (1 second).
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] lacp period short
lacp system-priority
Description
Use the lacp system-priority command to set the LACP priority of the local system.
Use the undo lacp system-priority command to restore the default setting.
By default, the system LACP priority is 32,768.
Syntax
lacp system-priority system-priority
undo lacp system-priority
View
System view
Default level
2: System level
77
Parameter
system-priority: Specifies the LACP priority of the local system, in the range of 0 to 65,535. The smaller
the value, the higher the system LACP priority.
Example
# Set the system LACP priority to 64.
<Sysname> system-view
[Sysname] lacp system-priority 64
link-aggregation lacp traffic-redirect-notification enable
Description
Use the link-aggregation lacp traffic-redirect-notification enable command to enable link-aggregation
traffic redirection.
Use the undo link-aggregation lacp traffic-redirect-notification enable command to disable linkaggregation traffic redirection.
By default, link-aggregation traffic redirection is disabled.
Link-aggregation traffic redirection applies only to dynamic link aggregation groups.
To prevent traffic interruption, enable link-aggregation traffic redirection on devices at both ends of the
aggregate link.
Do not enable both MSTP and link-aggregation traffic redirection at the same time, because light packet
loss may occur when the device reboots.
Syntax
link-aggregation lacp traffic-redirect-notification enable
undo link-aggregation lacp traffic-redirect-notification enable
View
System view
Default level
2: System level
Parameters
None
Example
# Enable link-aggregation traffic redirection.
<Sysname> system-view
[Sysname] link-aggregation lacp traffic-redirect-notification enable
link-aggregation load-sharing mode
Description
Use the link-aggregation load-sharing mode command to configure the global or group-specific linkaggregation load sharing criteria.
78
Use the undo link-aggregation load-sharing mode command to restore the default setting.
By default, Layer 2 packets are load-shared based on the source/destination MAC addresses and
incoming ports; Layer 3 packets are load-shared based on the source/destination IP addresses.
The load sharing criteria that you configure will overwrite the previous criteria.
If unsupported load sharing criteria are configured, an error prompt will appear.
In system view, the switch supports the following load sharing criteria and combinations:
Source IP address
Destination IP address
Source MAC address
Destination MAC address
Source IP address and destination IP address
Source IP address and source port
Destination IP address and destination port
Any combination of incoming port, source MAC address, and destination MAC address
In Layer 2 aggregate interface view, the switch supports the following load sharing criteria and
combinations:
Automatic load sharing criteria determined based on the packet type
Source IP address
Destination IP address
Source MAC address
Destination MAC address
Destination IP address and source IP address
Destination MAC address and source MAC address
Syntax
In system view:
link-aggregation load-sharing mode { destination-ip | destination-mac | destination-port | ingress-port
| source-ip | source-mac | source-port } *
undo link-aggregation load-sharing mode
In Layer 2 aggregate interface view:
link-aggregation load-sharing mode { { destination-ip | destination-mac | source-ip | source-mac } * }
undo link-aggregation load-sharing mode
View
System view, Layer 2 aggregate interface view,
Default level
2: System level
Parameters
destination-ip: Performs load sharing in link aggregation groups based on destination IP address.
79
destination-mac: Performs load sharing in link aggregation groups based on destination MAC address.
destination-port: Performs load sharing in link aggregation groups based on destination port.
ingress-port: Performs load sharing in link aggregation groups based on ingress port.
source-ip: Performs load sharing in link aggregation groups based on source IP address.
source-mac: Performs load sharing in link aggregation groups based on source MAC address.
source-port: Performs load sharing in link aggregation groups based on source port.
Examples
# Configure the destination MAC address as the global link-aggregation load sharing criterion.
<Sysname> system-view
[Sysname] link-aggregation load-sharing mode destination-mac
# Configure the destination MAC address as the load sharing criterion specific to the link aggregation
group of aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation load-sharing mode destination-mac
link-aggregation load-sharing mode local-first
Description
Use the link-aggregation load-sharing mode local-first command to enable local-first load sharing for link
aggregation.
Use the undo link-aggregation load-sharing mode local-first command to disable local-first load sharing
for link aggregation.
By default, local-first load sharing is enabled for link aggregation.
Syntax
link-aggregation load-sharing mode local-first
undo link-aggregation load-sharing mode local-first
View
System view
Default level
2: System level
Parameters
None
Example
# Disable local-first load sharing for link aggregation.
<Sysname> system-view
[Sysname] undo link-aggregation load-sharing mode local-first
80
link-aggregation mode
Description
Use the link-aggregation mode dynamic command to configure an aggregation group to work in
dynamic aggregation mode.
Use the undo link-aggregation mode command to restore the default setting.
By default, an aggregation group works in static aggregation mode.
To change the aggregation mode of an aggregation group that contains member ports, remove all the
member ports from the aggregation group first.
Syntax
link-aggregation mode dynamic
undo link-aggregation mode
View
Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Configure the aggregation group corresponding to Bridge-Aggregation 1 to work in dynamic
aggregation mode.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] link-aggregation mode dynamic
link-aggregation port-priority
Description
Use the link-aggregation port-priority command to set the aggregation priority of a port.
Use the undo link-aggregation port-priority command to restore the default setting.
The default aggregation priority of a port is 32,768.
Syntax
link-aggregation port-priority port-priority
undo link-aggregation port-priority
View
Ethernet interface view
Default level
2: System level
81
Parameter
port-priority: Specifies a port aggregation priority, in the range of 0 to 65,535. The smaller the value, the
higher the port aggregation priority.
Example
# Set the aggregation priority of port GigabitEthernet 1/0/1 to 64.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] link-aggregation port-priority 64
port link-aggregation group
Description
Use the port link-aggregation group command to assign the Ethernet interface to the specified
aggregation group.
Use the undo port link-aggregation group command to remove the Ethernet interface from the
aggregation group to which it belongs.
A Layer 2 Ethernet interface can be assigned to a Layer 2 aggregation group only.
An Ethernet interface can belong to only one aggregation group.
Syntax
port link-aggregation group number
undo port link-aggregation group
View
Ethernet interface view
Default level
2: System level
Parameter
number: Specifies the number of the aggregate interface corresponding to an aggregation group. The
number parameter is in the range of 1 to 1024 for a Layer 2 aggregate interface
Example
# Assign Layer 2 Ethernet interface GigabitEthernet 1/0/1 to Layer 2 aggregation group 1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-aggregation group 1
reset counters interface
Description
Use the reset counters interface command to clear the statistics of the specified aggregate interface or
interfaces.
82
Before collecting statistics for a Layer 2 aggregate interface within a specific period, clear the existing
statistics of the interface:
If no keywords or parameter is specified, the command clears the statistics of all interfaces in the
system.
If only the bridge-aggregation parameter is specified, the command clears the statistics of all Layer
2 aggregate interfaces.
If the bridge-aggregation interface-number keyword and parameter combination is specified, the
command clears the statistics of the specified Layer 2 aggregate interface.
The bridge-aggregation parameter becomes available only after you create Layer 2 aggregate
interfaces on the device.
Syntax
reset counters interface [ bridge-aggregation [ interface-number ] ]
View
User view
Default level
2: System level
Parameters
bridge-aggregation: Clears statistics for Layer 2 aggregate interfaces.
interface-number: Specifies an aggregate interface number. If the interface-number parameter is not
specified, this command clears statistics of all aggregate interfaces of the specified type.
Example
# Clear the statistics of Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> reset counters interface bridge-aggregation 1
reset lacp statistics
Description
Use the reset lacp statistics command to clear the LACP statistics on the specified member ports or all
member ports, if no member ports are specified.
Related commands: display link-aggregation member-port.
Syntax
reset lacp statistics [ interface interface-list ]
View
User view
Default level
1: Monitor level
83
Parameter
interface-list: Specifies a list of link aggregation member ports, in the format interface-type interfacenumber [ to interface-type interface-number ], where interface-type interface-number indicates the port
type and port number.
Example
# Clear the LACP statistics on all link aggregation member ports.
<Sysname> reset lacp statistics
shutdown
Description
Use the shutdown command to shut down the aggregate interface.
Use the undo shutdown command to bring up the aggregate interface.
By default, aggregate interfaces is up.
Syntax
shutdown
undo shutdown
View
Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Shut down Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] shutdown
84
Port isolation configuration commands
display port-isolate group
Description
Use the display port-isolate group command to display information about one or all isolation groups.
Syntax
display port-isolate group [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# On a single-isolation-group device, display information about the isolation group.
<Sysname> display port-isolate group
Port-isolate group information:
Uplink port support: NO
Group ID: 1
Group members:
GigabitEthernet1/0/2
Table 21 Command output
Field
Description
Port-isolate group information
Display the information of a port-isolation group
Uplink port support
Indicates whether the uplink port is supported
Group ID
Isolation group number
Group members
Isolated ports (non-uplink ports) in the isolation group
85
port-isolate enable
Description
Use the port-isolate enable command to add a port or a group of ports to an isolation group as isolated
ports.
Use the undo port-isolate enable command to remove the port or ports from the isolation group.
In Layer 2 Ethernet interface view, the configuration applies to the current port.
In port group view, the configuration applies to all ports in the port group.
In Layer 2 aggregate interface view, the configuration applies to the Layer 2 aggregate interface and all
its member ports. After you make the configuration, the system starts applying the configuration to the
aggregate interface and its aggregation member ports. If the system fails to do that on the aggregate
interface, it stops applying the configuration to the aggregation member ports. If it fails to do that on an
aggregation member port, it simply skips the port and moves to the next port. For more information about
Layer 2 aggregate interfaces, see Layer 2—LAN Switching Configuration Guide.
You can add a port to multiple isolation groups as an isolated port. However, you cannot configure an
isolated port in an aggregation group as the uplink port in any isolation group.
The member port of a service loopback group cannot be assigned to an isolation group and vice versa.
Syntax
port-isolate enable
undo port-isolate enable
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameter
group group-number: Specifies the ID of the group to which the ports are to be added.
Examples
# On a single-isolation-group device, assign ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to
the isolation group.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port-isolate enable
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port-isolate enable
# On a single-isolation-group device, assign all the ports within port group aa to the isolation group.
<Sysname> system-view
[Sysname] port-group manual aa
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/1
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/2
86
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/3
[Sysname-port-group-manual-aa] group-member gigabitethernet 1/0/4
[Sysname-port-group-manual-aa] port-isolate enable
# Assign Layer 2 aggregate interface Bridge-aggregation 1 and its member ports to the isolation group
on a single-isolation-group device.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] quit
[Sysname] interface GigabitEthernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-aggregation group 1
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface GigabitEthernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port link-aggregation group 1
[Sysname-GigabitEthernet1/0/2] quit
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port-isolate enable
87
Spanning tree configuration commands
active region-configuration
Description
Use the active region-configuration command to activate your MST region configuration.
When you configure MST region–related parameters, MSTP launches a new spanning tree calculation
process that may cause network topology instability. This is mostly likely to occur when you configure the
VLAN-to-instance mapping table. The launch will only occur after you activate the MST region–related
parameters by using active region-configuration command or enable MSTP by using the stp enable
command.
HP recommends that you use the check region-configuration command to determine whether the MST
region configurations to be activated are correct. Run this command only when they are correct.
Related commands: instance, region-name, revision-level, vlan-mapping modulo, and check regionconfiguration.
Syntax
active region-configuration
View
MST region view
Default level
2: System level
Parameters
None
Example
# Map VLAN 2 to MSTI 1 and manually activate the MST region configuration.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] instance 1 vlan 2
[Sysname-mst-region] active region-configuration
bpdu-drop any
Description
Use the bpdu-drop any command to enable BPDU drop on a port.
Use the undo bpdu-drop any command to disable BPDU drop on a port.
By default, BPDU drop is disabled on a port.
88
Syntax
bpdu-drop any
undo bpdu-drop any
View
Ethernet interface view
Default level
2: System level
Parameters
None
Example
# Enable BPDU drop on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] bpdu-drop any
check region-configuration
Description
Use the check region-configuration command to display MST region pre-configuration information,
including the region name, revision level, and VLAN-to-instance mapping settings.
Two or more spanning tree devices belong to the same MST region only if they are configured with the
same format selector (0 by default, not configurable), MST region name, MST region revision level, and
the same VLAN-to-instance mapping entries in the MST region, and if they are connected via a physical
link.
HP recommends that you use this command to determine whether the MST region configurations to be
activated are correct. Activate them only when they are correct.
Related commands: instance, region-name, revision-level, vlan-mapping modulo, and active regionconfiguration.
Syntax
check region-configuration
View
MST region view
Default level
2: System level
Parameters
None
Example
# Display MST region pre-configurations.
89
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] check region-configuration
Admin Configuration
Format selector
:0
Region name
:000fe26a58ed
Revision level
:0
Configuration digest :0x41b5018aca57daa8dcfdba2984d99d06
Instance
0
15
Vlans Mapped
1 to 9, 11 to 4094
10
Table 22 Command output
Field
Description
Format selector
Format selector of the MST region, which is 0 (not
configurable)
Region name
MST region name
Revision level
Revision level of the MST region
Instance Vlans Mapped
VLAN-to-instance mappings in the MST region
display stp
Description
Use the display stp command to display the spanning tree status and statistics information.
Based on the spanning tree status and statistics information, you can analyze and maintain the network
topology or check whether spanning tree is working properly.
In STP/RSTP mode, follow these guidelines:
If you do not specify any port, this command displays the spanning tree information for all ports.
The displayed information is sorted by port name.
If you specify a port list, this command displays the spanning tree information for the specified ports.
The displayed information is sorted by port name.
In MSTP mode, follow these guidelines:
If you do not specify any MSTI or port, this command displays the spanning tree information of all
MSTIs on all ports. The displayed information is sorted by MSTI ID and by port name in each MSTI.
If you specify an MSTI but not a port, this command displays the spanning tree information on all
ports in that MSTI. The displayed information is sorted by port name.
If you specify some ports but not an MSTI, this command displays the spanning tree information of
all MSTIs on the specified ports. The displayed information is sorted by MSTI ID and by port name in
each MSTI.
If you specify both an MSTI ID and a port list, this command displays the spanning tree information
on the specified ports in the specified MSTI. The displayed information is sorted by port name.
In PVST mode, follow these guidelines:
90
If you do not specify any VLAN or port, this command displays the spanning tree information of all
VLANs on all ports. The displayed information is sorted by VLAN ID and by port name in each
VLAN.
If you specify a VLAN but not a port, this command displays the spanning tree information on all
ports in that VLAN. The displayed information is sorted by port name.
If you specify some ports but not any VLAN, this command displays the spanning tree information of
all VLANs on the specified ports. The displayed information is sorted by VLAN ID, and by port
name in each VLAN.
If you specify both a VLAN ID and a port list, this command displays the spanning tree information
on the specified ports in the specified VLAN. The displayed information is sorted by port name.
The MSTP status information includes the following parameters:
CIST global parameters:

Protocol work mode

Device priority in the CIST (Priority)

MAC address

Hello time

Max age

Forward delay

Maximum hops

Common root bridge of the CIST

External path cost from the device to the CIST common root

Regional root

Internal path cost from the device to the regional root

CIST root port of the device

Status of the BPDU guard function (enabled or disabled)
CIST port parameters:

Port status

Role

Priority

Path cost

Designated bridge

Designated port

Edge port/non-edge port

Connecting to a point-to-point link or not

Maximum transmission rate (transmit limit)

Status of the root guard function (enabled or disabled)

BPDU format

Boundary port/non-boundary port

Hello time

Max age
91

Forward delay

Message age

Remaining hops

Status of rapid state transition (enabled or disabled) for designated ports
MSTI global parameters:

MSTI ID

Bridge priority of the MSTI

Regional root

Internal path cost

MSTI root port

Master bridge
MSTI port parameters:

Port status

Role

Priority

Path cost

Designated bridge

Designated port

Remaining hops

Status of rapid state transition (enabled or disabled) for designated ports
The PVST status information includes the following parameters:
Global parameters:

Device priority in the VLAN

MAC address

Hello time

Max age

Forward delay

Root bridge

Path cost from the device to the root bridge

Root port

Status of the BPDU guard function (enabled or disabled)

Number of received TC/TN BPDUs

Time since the last topology change
Port parameters:

Port status

Role

Priority

Path cost

Designated bridge
92

Designated port

Edge port/non-edge port

Connecting to a point-to-point link or not

Maximum transmission rate (transmit limit)

Status of the root guard function (enabled or disabled)

Hello time

Max age

Forward delay

Message age

Status of rapid state transition (enabled or disabled) for designated ports
The statistics in STP/RSTP/MSTP mode include the following items:
The number of TCN BPDUs, configuration BPDUs, RST BPDUs, and MST BPDUs sent from each port
The number of TCN BPDUs, configuration BPDUs, RST BPDUs, MST BPDUs, and wrong BPDUs
received on each port
The number of BPDUs discarded on each port
Related commands: reset stp.
Syntax
display stp [ instance instance-id | vlan vlan-id ] [ interface interface-list | slot slot-number ] [ brief ] [ | {
begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
instance instance-id: Displays the status and statistics information of a specific MSTI. The value of
instance-id is in the range of 0 to 31, where 0 represents the CIST.
vlan vlan-id: Displays the spanning tree status and statistics information of a VLAN specified by vlan-id, in
the range of 1 to 4094.
interface interface-list: Displays the spanning tree status and statistics information on the ports specified
by a port list, in the format of interface-list = { interface-type interface-number [ to interface-type interfacenumber ] }&<1-10>, where &<1-10> indicates that you can specify up to 10 ports or port ranges.
slot slot-number: Displays the MSTP status and statistics information on the specified IRF member switch.
slot-number represents the member number of the device in the IRF. If this keyword-parameter combination
is not specified, this command displays the MSTP status and statistics information on all IRF member
switches.
brief: Displays brief spanning tree status and statistics information.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
93
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# In MSTP mode, display the brief spanning tree status and statistics of MSTI 0 on ports GigabitEthernet
1/0/1 through GigabitEthernet 1/0/4.
<Sysname> display stp instance 0 interface gigabitethernet 1/0/1 to gigabitethernet 1/0/4
brief
MSTID
Port
Role
STP State
Protection
0
GigabitEthernet1/0/1
ALTE
DISCARDING
LOOP
0
GigabitEthernet1/0/2
DESI
FORWARDING
NONE
0
GigabitEthernet1/0/3
DESI
FORWARDING
NONE
0
GigabitEthernet1/0/4
DESI
FORWARDING
NONE
# In PVST mode, display the brief spanning tree status and statistics of VLAN 2 on ports GigabitEthernet
1/0/1 through GigabitEthernet 1/0/4.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] display stp vlan 2 interface gigabitethernet 1/0/1 to gigabitethernet 1/0/4
brief
VLAN
Port
Role
STP State
Protection
2
GigabitEthernet1/0/1
ALTE
DISCARDING
LOOP
2
GigabitEthernet1/0/2
DESI
FORWARDING
NONE
2
GigabitEthernet1/0/3
DESI
FORWARDING
NONE
2
GigabitEthernet1/0/4
DESI
FORWARDING
NONE
Table 23 display stp brief command output description
Field
Description
MSTID
MSTI ID in the MST region
Port
Port name, corresponding to each MSTI or VLAN
Port role:
ALTE—Port is an alternate port
BACK—Port is a backup port
Role
ROOT—Port is a root port
DESI—Port is a designated port
MAST—Port is a master port
DISA—Port is disabled
Spanning tree status on the port:
FORWARDING—Port can receive and send BPDUs, and also forward user
traffic
STP State
DISCARDING—Port can receive and send BPDUs, but cannot forward user
traffic
LEARNING—Port is in a transitional state. It can receive and send BPDUs,
but cannot forward user traffic
94
Field
Description
Protection type on the port:
ROOT—Root guard
LOOP—Loop guard
Protection
BPDU—BPDU guard
BPDU/ROOT—BPDU guard and root guard
NONE—No protection
# In MSTP mode, display the spanning tree status and statistics of all MSTIs on all ports.
<Sysname> display stp
-------[CIST Global Info][Mode MSTP]------CIST Bridge
:32768.000f-e200-2200
Bridge Times
:Hello 2s MaxAge 20s FwDly 15s MaxHop 20
CIST Root/ERPC
:0.00e0-fc0e-6554 / 200200
CIST RegRoot/IRPC
:32768.000f-e200-2200 / 0
CIST RootPortId
:128.48
BPDU-Protection
:disabled
Bridge ConfigDigest-Snooping
:disabled
TC or TCN received
:2
Time since last TC
:0 days 0h:5m:42s
----[Port1(GigabitEthernet1/0/1)][FORWARDING]---Port Protocol
:enabled
Port Role
:CIST Designated Port
Port Priority
:128
Port Cost(Legacy)
:Config=auto / Active=200
Desg. Bridge/Port
:32768.000f-e200-2200 / 128.2
Port Edged
:Config=disabled / Active=disabled
Point-to-point
:Config=auto / Active=true
Transmit Limit
:10 packets/hello-time
Protection Type
:None
MST BPDU Format
:Config=auto / Active=legacy
Port ConfigDigest-Snooping
:disabled
Rapid transition
:false
Num of Vlans Mapped :1
PortTimes
:Hello 2s MaxAge 20s FwDly 15s MsgAge 2s RemHop 20
BPDU Sent
:186
TCN: 0, Config: 0, RST: 0, MST: 186
BPDU Received
:0
TCN: 0, Config: 0, RST: 0, MST: 0
-------[MSTI 1 Global Info]------MSTI Bridge ID
:0.000f-e23e-9ca4
MSTI RegRoot/IRPC
:0.000f-e23e-9ca4 / 0
95
MSTI RootPortId
:0.0
MSTI Root Type
:PRIMARY root
Master Bridge
:32768.000f-e23e-9ca4
Cost to Master
:0
TC received
:0
# In PVST mode, display the spanning tree status and statistics of all VLANs on all ports.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] display stp
-------[VLAN 1 Global Info]------Protocol Status
:enabled
Bridge ID
:32768.000f-e200-2200
Bridge Times
:Hello 2s MaxAge 20s FwDly 15s
Root ID / RPC
:0.00e0-fc0e-6554 / 200200
Root PortId
:128.48
BPDU-Protection
:disabled
TC or TCN received
:2
Time since last TC
:0 days 0h:5m:42s
----[Port1(GigabitEthernet1/0/1)][FORWARDING]---Port Protocol
:enabled
Port Role
:Designated Port
Port Priority
:128
Port Cost(Legacy)
:Config=auto / Active=200
Desg. Bridge/Port
:32768.000f-e200-2200 / 128.2
Port Edged
:Config=disabled / Active=disabled
Point-to-point
:Config=auto / Active=true
Transmit Limit
:10 packets/hello-time
Protection Type
:None
Rapid transition
:false
PortTimes
:Hello 2s MaxAge 20s FwDly 15s MsgAge 2s
BPDU Sent
:186
TCN: 0, Config: 0, RST: 0
BPDU Received
:0
TCN: 0, Config: 0, RST: 0, MST: 0
-------[VLAN 2 Global Info]------Protocol Status
:enabled
Bridge ID
:32768.000f-e200-2200
Bridge Times
:Hello 2s MaxAge 20s FwDly 15s
Root ID / RPC
:0.00e0-fc0e-6554 / 200200
Root PortId
:128.48
BPDU-Protection
:disabled
TC or TCN received
:2
Time since last TC
:0 days 0h:5m:42s
# Display the spanning tree status and statistics when the spanning tree feature is disabled.
<Sysname> display stp
96
Protocol Status
:disabled
Protocol Std.
:IEEE 802.1s
Version
:3
Bridge-Prio.
:32768
MAC address
:000f-e200-8048
Max age(s)
:20
Forward delay(s)
:15
Hello time(s)
:2
Max hops
:20
Table 24 display stp command output description
Field
Description
CIST Bridge
CIST bridge ID, which comprises the device’s priority in the CIST and its MAC
address. For example, in output information ―32768.000f-e200-2200‖, the
value preceding the dot is the device’s priority in the CIST, and the value
following the dot is the device’s MAC address.
Bridge ID
The bridge ID, which comprises the device's priority in VLAN 1 and its MAC
address. For example, in output information ―32768.000f-e200-2200‖, the
value preceding the dot is the device’s priority in VLAN 1, and the value
following the dot is the device’s MAC address.
Major parameters for the bridge:
Hello—Hello timer.
Bridge Times
MaxAge—Max age timer.
FWDly—Forward delay timer.
Max Hop—Max hops within the MST region.
CIST Root/ERPC
CIST root ID and external path cost (the path cost from the device to the CIST
root).
CIST RegRoot/IRPC
CIST regional root ID and internal path cost (the path cost from the device to
the CIST regional root).
Root ID / RPC
VLAN root ID and root path cost (the path cost from the device to the root).
CIST RootPortId
CIST root port ID. "0.0" indicates that the device is the root and there is no
root port.
Root PortId
VLAN root port ID. "0.0" indicates that the device is the root and there is no
root port.
BPDU-Protection
Global status of BPDU protection.
Bridge ConfigDigest-Snooping
Global status of Digest Snooping.
TC or TCN received
Number of TC/TCN BPDUs received in the MSTI or VLAN.
Time since last TC
Time since the latest topology change in the MSTI or VLAN.
[FORWARDING]
Port is in forwarding state.
[DISCARDING]
Port is in discarding state.
[LEARNING]
Port is in learning state.
Port Protocol
Status of the spanning tree feature on the port.
97
Field
Description
Port Role
Port role, which can be Alternate, Backup, Root, Designated, Master, or
Disabled.
Port Cost(Legacy)
Path cost of the port. The field in parentheses indicates the standard (legacy,
dot1d-1998, or dot1t) used for port path cost calculation.
Config—Configured value.
Active—Actual value.
Designated bridge ID and port ID of the port.
Desg. Bridge/Port
The port ID displayed is insignificant for a port which does not support port
priority.
Port is an edge port or non-edge port.
Port Edged
Config—Configured value.
Active—Actual value.
Port is connected to a point-to-point link or not.
Point-to-point
Config—Configured value.
Active—Actual value.
Transmit Limit
The maximum number of packets sent within each hello time.
Protection type on the port:
Root—Root guard.
Protection Type
Loop—Loop guard.
BPDU—BPDU guard.
BPDU/ROOT—BPDU guard and root guard.
None—No protection.
MST BPDU Format
Format of the MST BPDUs that the port can send, which can be legacy or
802.1s.
Config—Configured value.
Active—Actual value.
Port ConfigDigest-Snooping
Status of Digest Snooping on the port.
Rapid transition
Port rapidly transitions to the forwarding state or not in the MSTI or VLAN.
Num of Vlans Mapped
Number of VLANs mapped to the MSTI.
Major parameters for the port:
Hello—Hello timer.
PortTimes
MaxAge—Max Age timer.
FWDly—Forward delay timer.
MsgAge—Message Age timer.
Remain Hop—Remaining hops.
BPDU Sent
Statistics on sent BPDUs.
BPDU Received
Statistics on received BPDUs.
MSTI RegRoot/IRPC
MSTI regional root/internal path cost.
98
Field
Description
MSTI RootPortId
MSTI root port ID.
MSTI Root Type
MSTI root type, which can be primary root or secondary root.
Master Bridge
MSTI root bridge ID.
Cost to Master
Path cost from the MSTI to the master bridge.
TC received
Number of received TC BPDUs.
Protocol Status
Spanning tree protocol status.
Protocol Std.
Spanning tree protocol standard.
Version
Spanning tree protocol version.
Bridge-Prio.
In MSTP mode, this field indicates the device’s priority in the CIST. In PVST
mode, this field indicates the device's priority in VLAN 1.
Max ages
Aging timer (in seconds) for BPDUs. In PVST mode, this field is the
configuration in VLAN 1.
Forward delays
Port state transition delay (in seconds). In PVST mode, this field is the
configuration in VLAN 1.
Hello times
Interval (in seconds) for the root bridge to send BPDUs. In PVST mode, this field
is the configuration in VLAN 1.
Max hops
Maximum hops in the MSTI.
display stp abnormal-port
Description
Use the display stp abnormal-port command to display information about ports blocked by spanning tree
protection functions.
Syntax
display stp abnormal-port [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
99
Examples
# In MSTP mode, display information about ports blocked by spanning tree protection functions.
<Sysname> display stp abnormal-port
MSTID
Blocked Port
Reason
1
GigabitEthernet1/0/1
ROOT-Protected
2
GigabitEthernet1/0/2
LOOP-Protected
2
GigabitEthernet1/0/3
Formatcompatibility–Protected
# In PVST mode, display information about ports blocked by spanning tree protection functions.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] display stp abnormal-port
VLAN
Blocked Port
Reason
1
GigabitEthernet1/0/1
ROOT-Protected
2
GigabitEthernet1/0/2
LOOP-Protected
2
GigabitEthernet1/0/3
Formatcompatibility–Protected
Table 25 Command output
Field
Description
Blocked Port
Name of a blocked port, which corresponds to the related MSTI or VLAN.
Reason that the port was blocked:
ROOT-Protected—Root guard function.
LOOP-Protected—Loop guard function.
Reason
Formatcompatibility-Protected—MSTP BPDU format incompatibility protection
function.
InconsistentPortType-Protected—Port type inconsistent protection function.
InconsistentPvid-Protected—PVID inconsistent protection function.
display stp bpdu-statistics
Description
Use the display stp bpdu-statistics command to display the BPDU statistics on ports.
In MSTP mode, follow these guidelines:
If you do not specify any MSTI or port, this command displays the BPDU statistics of all MSTIs on all
ports. The displayed information is sorted by port name and by MSTI ID on each port.
If you specify a port but not an MSTI, this command displays the BPDU statistics of all MSTIs on the
port. The displayed information is sorted by MSTI ID.
If you specify both an MSTI ID and a port, this command displays the BPDU statistics of the specified
MSTI on the port.
In STP, RSTP, or PVST mode, follow these guidelines:
If you do not specify any port, this command displays the BPDU statistics of on all ports. The
displayed information is sorted by port name.
If you specify a port, this command displays the BPDU statistics on the port.
100
Syntax
display stp bpdu-statistics [ interface interface-type interface-number [ instance instance-id ] ] [ | { begin
| exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface interface-type interface-number: Displays the BPDU statistics on a specified port, where
interface-type interface-number indicates the port type and number.
instance instance-id: Displays the BPDU statistics of a specified MSTI on a specified port. The value of
instance-id is in the range of 0 to 31, where 0 represents the CIST.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# In MSTP mode, display the BPDU statistics of all MSTIs on GigabitEthernet 1/0/1.
<Sysname> display stp bpdu-statistics interface gigabitethernet 1/0/1
Port: GigabitEthernet1/0/1
Instance-independent:
Type
Count
Last Updated
--------------------------- ---------- ----------------Invalid BPDUs
0
Looped-back BPDUs
0
MAX-aged BPDUs
0
TCN sent
0
TCN received
0
TCA sent
0
TCA received
2
Config sent
0
Config received
0
RST sent
0
RST received
0
MST sent
4
10:33:11 01/13/2010
MST received
151
10:37:43 01/13/2010
10:33:12 01/13/2010
Instance 0:
101
Type
Count
Last Updated
--------------------------- ---------- ----------------Timeout BPDUs
0
MAX-hoped BPDUs
0
TC detected
1
10:32:40 01/13/2010
TC sent
3
10:33:11 01/13/2010
TC received
0
Instance 1:
Type
Count
Last Updated
--------------------------- ---------- ----------------Timeout BPDUs
0
MAX-hoped BPDUs
0
TC detected
0
TC sent
0
TC received
0
Instance 2:
Type
Count
Last Updated
--------------------------- ---------- ----------------Timeout BPDUs
0
MAX-hoped BPDUs
0
TC detected
0
TC sent
0
TC received
0
# In PVST mode, display the BPDU statistics on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] display stp bpdu-statistics interface gigabitethernet 1/0/1
Port: GigabitEthernet1/0/1
Type
Count
Last Updated
--------------------------- ---------- ----------------Invalid BPDUs
0
Looped-back BPDUs
0
MAX-aged BPDUs
0
TCN sent
0
TCN received
0
TCA sent
0
TCA received
2
Config sent
0
Config received
0
RST sent
0
RST received
0
10:33:12 01/13/2010
102
MST sent
4
10:33:11 01/13/2010
MST received
151
10:37:43 01/13/2010
Timeout BPDUs
0
MAX-hoped BPDUs
0
TC detected
511
10:32:40 01/13/2010
TC sent
8844
10:33:11 01/13/2010
TC received
1426
10:33:32 01/13/2010
Table 26 Command output
Field
Description
Port
Port name
Instance-independent
Statistics not related to any particular MSTI
Type
Statistical item
Looped-back BPDUs
BPDUs sent and then received by the same port
Max-Aged BPDUs
BPDUs whose max age was exceeded
TCN Sent
TCN BPDUs sent
TCN Received
TCN BPDUs received
TCA Sent
TCA BPDUs sent
TCA Received
TCA BPDUs received
Config Sent
Configuration BPDUs sent
Config Received
Configuration BPDUs received
RST Sent
RSTP BPDUs sent
RST Received
RSTP BPDUs received
MST Sent
MSTP BPDUs sent
MST Received
MSTP BPDUs received
Instance
Statistical information for a particular MSTI
Timeout BPDUs
Expired BPDUs
Max-Hoped BPDUs
BPDUs whose maximum hops were exceeded
TC Detected
TC BPDUs detected
TC Sent
TC BPDUs sent
TC Received
TC BPDUs received
display stp down-port
Description
Use the display stp down-port command to display information about ports shut down by spanning tree
protection functions.
Syntax
display stp down-port [ | { begin | exclude | include } regular-expression ]
103
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display information about ports shut down by spanning tree protection functions.
<Sysname> display stp down-port
Down Port
Reason
GigabitEthernet1/0/1
BPDU-Protected
GigabitEthernet1/0/2
Formatfrequency-Protected
Table 27 Command output
Field
Description
Down Port
Name of a port shut down by the spanning tree protection functions.
Reason that the port was shut down:
Reason
BPDU-Protected—BPDU guard function.
Formatfrequency-Protected—MSTP BPDU format frequent change protection function.
display stp history
Description
Use the display stp history command to display the historical port role calculation information of the
specified MSTI or all MSTIs.
In STP/RSTP mode, the displayed information is sorted by port role calculation time.
In MSTP mode, follow these guidelines:
If you do not specify any MSTI, this command displays the historical port role calculation information
of all MSTIs. The displayed information is sorted by MSTI ID and by port role calculation time in
each MSTI.
If you specify an MSTI, this command displays the historical port role calculation information of the
specified MSTI by the sequence of port role calculation time.
In PVST mode, follow these guidelines:
104
If you do not specify any VLAN, this command displays the historical port role calculation
information of all VLANs. The displayed information is sorted by VLAN ID, and by port role
calculation time in each VLAN.
If you specify a VLAN, this command displays the historical port role calculation information of the
specified VLAN by the sequence of port role calculation time.
Syntax
display stp [ instance instance-id | vlan vlan-id ] history [ slot slot-number ] [ | { begin | exclude |
include } regular-expression ]
View
Any view
Default level
0: Visit level
Parameters
instance instance-id: Displays the historical port role calculation information of a specific MSTI. The value
of instance-id is in the range of 0 to 31, where 0 represents the CIST.
vlan vlan-id: Displays the historical port role calculation information for a specific VLAN, in the range of
1 to 4094.
slot slot-number: Displays the historical port role calculation information on the specified IRF member
switch. slot-number represents the number of the member number of the device in the IRF. If this keywordparameter combination is not specified, this command displays the historical port role calculation
information on all IRF member switches.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# In MSTP mode, display the historical port role calculation information of IRF member switch 1 in MSTI
2.
<Sysname> display stp instance 2 history slot 1
--------------- STP slot 1 history trace ---------------------------------
Instance 2
---------------------
Port GigabitEthernet1/0/1
Role change
: ROOT->DESI (Aged)
Time
: 2009/02/08 00:22:56
Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Port GigabitEthernet1/0/2
Role change
: ALTER->ROOT
105
Time
: 2009/02/08 00:22:56
Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
# In PVST mode, display the historical port role calculation information of IRF member switch 1 in VLAN
2.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] display stp vlan 2 history slot 1
--------------- STP slot 1 history trace ---------------------------------
VLAN 2
---------------------
Port GigabitEthernet1/0/1
Role change
: ROOT->DESI (Aged)
Time
: 2009/02/08 00:22:56
Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.1
Port GigabitEthernet1/0/2
Role change
: ALTER->ROOT
Time
: 2009/02/08 00:22:56
Port priority : 0.00e0-fc01-6510 0 0.00e0-fc01-6510 128.2
Table 28 Command output
Field
Description
Port
Port name
Role change
A role change of the port (―Age‖ means that the change was caused by
expiration of the received configuration BPDU)
Time
Time of port role calculation
Port priority
Port priority
display stp ignored-vlan
Description
Use the display stp ignored-vlan command to display VLAN Ignore-enabled VLANs.
Syntax
display stp ignored-vlan [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
106
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display VLAN Ignore-enabled VLANs.
<Sysname> display stp ignored-vlan
STP-Ignored VLAN: 1 to 2
Table 29 Command output
Field
Description
STP-Ignored VLAN
List of VLAN Ignore-enabled VLANs. A value of NONE for this field
indicates that no VLAN is enabled with the VLAN Ignore feature.
display stp region-configuration
Description
Use the display stp region-configuration command to display effective configuration information of the
MST region, including the region name, revision level, and user-configured VLAN-to-instance mappings.
Related commands: instance, region-name, revision-level, and vlan-mapping modulo.
Syntax
display stp region-configuration [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# In MSTP mode, display effective MST region configuration information.
<Sysname> display stp region-configuration
Oper Configuration
Format selector
:0
Region name
:hello
107
Revision level
:0
Configuration digest :0x5f762d9a46311effb7a488a3267fca9f
Instance
Vlans Mapped
0
21 to 4094
1
1 to 10
2
11 to 20
# In PVST mode, display the effective MST region configuration information.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] display stp region-configuration
Oper Configuration
Format selector
:0
Region name
:hello
Revision level
:0
Configuration digest :0x5f762d9a46311effb7a488a3267fca9f
Instance
Mode
Vlans Mapped
0
default
3 to 4094
1
static
1
2
dynamic
2
Table 30 Command output
Field
Description
Format selector
Format selector defined by the spanning tree protocol. The default value is
0 and the selector cannot be configured.
Region name
MST region name.
Revision level
Revision level of the MST region, which can be configured by using the
revision-level command and defaults to 0.
MSTI mode:
Mode
Default—Default instance MSTI 0. In PVST mode, the spanning tree
feature is disabled.
Static—Static MSTI.
Dynamic—Dynamically-assigned MSTI, which only exists in PVST mode.
display stp root
Description
Use the display stp root command to display the root bridge information of all MSTIs.
Syntax
display stp root [ | { begin | exclude | include } regular-expression ]
View
Any view
108
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# In MSTP mode, display the root bridge information of all spanning trees.
<Sysname> display stp root
MSTID
0
Root Bridge ID
ExtPathCost IntPathCost Root Port
0.00e0-fc0e-6554
200200
0
GigabitEthernet1/0/1
# In PVST mode, display the root bridge information of all spanning trees.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] display stp root
VLAN
1
Root Bridge ID
ExtPathCost IntPathCost Root Port
0.00e0-fc0e-6554
200200
0
GigabitEthernet1/0/1
Table 31 Command output
Field
Description
ExtPathCost
External path cost. Either the device calculates the default path cost of a port
automatically or you can use the stp cost command to configure the path cost
of a port.
IntPathCost
Internal path cost. Either the device calculates the default path cost of a port
automatically or you can use the stp cost command to configure the path cost
of a port.
Root Port
Root port name (displayed only if a port of the device is the root port of MSTIs).
display stp tc
Description
Use the display stp tc command to display the statistics of TC/TCN BPDUs received and sent by all ports
in an MSTI or all MSTIs.
In STP/RSTP mode, the displayed information is sorted by port name.
In MSTP mode, follow these guidelines:
If you do not specify any MSTI, this command displays the statistics of TC/TCN BPDUs received and
sent by all ports in all MSTIs. The displayed information is sorted by instance ID and by port name
in each MSTI.
109
If you specify an MSTI, this command displays the statistics of TC/TCN BPDUs received and sent by
all ports in the specified MSTI, in port name order.
In PVST mode, follow these guidelines:
If you do not specify any VLAN, this command displays the statistics of TC/TCN BPDUs received
and sent by all ports in all VLANs. The displayed information is sorted by VLAN ID and by port
name in each VLAN.
If you specify a VLAN, this command displays the statistics of TC/TCN BPDUs received and sent by
all ports in the specified VLAN, in port name order.
Syntax
display stp [ instance instance-id | vlan vlan-id ] tc [ slot slot-number ] [ | { begin | exclude | include }
regular-expression ]
View
Any view
Default level
0: Visit level
Parameters
instance instance-id: Displays the statistics of TC/TCN BPDUs received and sent by all ports in a
particular MSTI. The value of instance-id is in the range of 0 to 31, where 0 represents the CIST.
vlan vlan-id: Displays the statistics of TC/TCN BPDUs received and sent by all ports in the specified
VLAN, in the range of 1 to 4094.
slot slot-number: Displays the statistics of TC/TCN BPDUs received and sent by all ports on the specified
IRF member switch. slot-number represents the member number of the device in the IRF. If this keywordparameter combination is not specified, this command displays the statistics of TC/TCN BPDUs received
and sent by all ports on all IRF member switches.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# In MSTP mode, display the statistics of TC/TCN BPDUs received and sent by all ports on IRF member
switch 1 in MSTI 0.
<Sysname> display stp instance 0 tc slot 1
-------------- STP slot 1 TC or TCN count ------------MSTID
Port
Receive
Send
0
GigabitEthernet1/0/1
6
4
0
GigabitEthernet1/0/2
0
2
# In PVST mode, display the statistics of TC/TCN BPDUs received and sent by all ports on IRF member
switch 1 in VLAN 2.
<Sysname> system-view
110
[Sysname] stp mode pvst
[Sysname] display stp vlan 2 tc slot 1
-------------- STP slot 1 TC or TCN count ------------VLAN
Receive
Send
2
Port
GigabitEthernet1/0/1
6
4
2
GigabitEthernet1/0/2
0
2
Table 32 Command output
Field
Description
Port
Port name
Receive
Number of TC/TCN BPDUs received on each port
Send
Number of TC/TCN BPDUs sent by each port
instance
Description
Use the instance command to map a list of VLANs to the specified MSTI.
Use the undo instance command to remap the specified VLAN or all VLANs to the CIST (MSTI 0).
By default, all VLANs are mapped to the CIST.
If you specify no VLAN in the undo instance command, all VLANs mapped to the specified MSTI will be
remapped to the CIST.
You cannot map the same VLAN to different MSTIs. If you map a VLAN that has been mapped to an
MSTI to a new MSTI, the old mapping will be automatically removed.
In PVST mode, you can map multiple VLANs to the CIST, and only one VLAN to each remaining MSTI.
After configuring this command, run the active region-configuration command to activate the VLAN-toinstance mapping.
Related commands: display stp region-configuration, check region-configuration, and active regionconfiguration.
Syntax
instance instance-id vlan vlan-list
undo instance instance-id [ vlan vlan-list ]
View
MST region view
Default level
2: System level
Parameters
instance-id: Specifies an MSTI ID. The minimum value is 0, representing the CIST:
In MSTP mode, the instance-id parameter is in the range of 0 to 31.
In PVST mode, the instance-id parameter is in the range of 0 to 128.
111
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
Example
# Map VLAN 2 to MSTI 1.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] instance 1 vlan 2
region-name
Description
Use the region-name command to configure the MST region name.
Use the undo region-name command to restore the default MST region name.
By default, the MST region name of a device is its MAC address.
The MST region name, the VLAN-to-instance mapping table, and the MSTP revision level of a device
determine the device's MST region.
After configuring this command, run the active region-configuration command to activate the configured
MST region name.
Related commands: instance, revision-level, vlan-mapping modulo, display stp region-configuration,
check region-configuration, and active region-configuration.
Syntax
region-name name
undo region-name
View
MST region view
Default level
2: System level
Parameter
name: Specifies the MST region name, a string of 1 to 32 characters.
Example
# Set the MST region name of the device to hello.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] region-name hello
reset stp
Description
Use the reset stp command to clear the MSTP statistics information.
112
The MSTP statistics information includes the numbers of TCN BPDUs, configuration BPDUs, RST BPDUs
and MST BPDUs sent/received through the specified ports. The STP BPDUs and TCN BPDUs are counted
only for the CIST.
If you specify the interface-list parameter, the reset stp command clears the spanning tree-related statistics
information on the specified ports. Without the parameter, the reset stp command clears the spanning
tree-related statistics on all ports.
Related commands: display stp.
Syntax
reset stp [ interface interface-list ]
View
User view
Default level
1: Monitor level
Parameter
interface interface-list: Clears the MSTP statistics of the ports specified in the format of interface-list = {
interface-type interface-number [ to interface-type interface-number ] }&<1-10>, where &<1-10> indicates
that you can specify up to 10 ports or port ranges.
Example
# Clear the spanning tree-related statistics on ports GigabitEthernet 1/0/1 through GigabitEthernet
1/0/3.
<Sysname> reset stp interface gigabitethernet 1/0/1 to gigabitethernet 1/0/3
revision-level
Description
Use the revision-level command to configure the MSTP revision level.
Use the undo revision-level command to restore the default MSTP revision level.
By default, the MSTP revision level is 0.
The MSTP revision level, the MST region name, and the VLAN-to-instance mapping table of a device
determine the device's MST region. When the MST region name and VLAN-to-instance mapping table
are both the same for two MST regions, they can still be differentiated by their MSTP revision levels.
After configuring this command, run the active region-configuration command to activate the configured
MST region level.
Related commands: instance, region-name, vlan-mapping modulo, display stp region-configuration,
check region-configuration, and active region-configuration.
Syntax
revision-level level
undo revision-level
113
View
MST region view
Default level
2: System level
Parameter
level: Specifies an MSTP revision level, in the range of 0 to 65,535.
Example
# Set the MSTP revision level of the MST region to 5.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] revision-level 5
stp bpdu-protection
Description
Use the stp bpdu-protection command to enable the BPDU guard function.
Use the undo stp bpdu-protection command to disable the BPDU guard function.
By default, the BPDU guard function is disabled.
Syntax
stp bpdu-protection
undo stp bpdu-protection
View
System view
Default level
2: System level
Parameters
None
Example
# Enable the BPDU guard function.
<Sysname> system-view
[Sysname] stp bpdu-protection
stp bridge-diameter
Description
Use the stp bridge-diameter command to specify the network diameter, the maximum possible number of
stations between any two terminal devices on the switched network.
Use the undo stp bridge-diameter command to restore the default.
114
By default, the network diameter of the switched network is 7.
An appropriate setting of hello time, forward delay, and max age can speed up network convergence.
The values of these timers are related to the network size and you can set the timers by setting the
network diameter. With the network diameter set to 7 (the default), the three timers will also be set to their
defaults.
To set the network diameter of an STP/RSTP/MSTP switched network, use this command without
specifying any VLAN. To set the network diameter of a specified VLAN or multiple VLANs in a PVST
switched network, use this command with a VLAN list specified.
In STP, RSTP, or MSTP mode, each MST region is considered as a device, and the configured network
diameter of the switched network is only effective for the CIST (or the common root bridge), not for MSTIs.
In PVST mode, the network diameter configuration takes effect only on the root bridge.
Related commands: stp timer forward-delay, stp timer hello, and stp timer max-age.
Syntax
stp [ vlan vlan-list ] bridge-diameter diameter
undo stp [ vlan vlan-list ] bridge-diameter
View
System view
Default level
2: System level
Parameters
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
diameter: Specifies the switched network diameter, in the range of 2 to 7.
Examples
# In MSTP mode, set the network diameter of the switched network to 5.
<Sysname> system-view
[Sysname] stp bridge-diameter 5
# In PVST mode, set the network diameter of VLAN 2 to 5.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] stp vlan 2 bridge-diameter 5
stp compliance
Description
Use the stp compliance command to configure the mode the specified ports will use to recognize and
send MSTP BPDUs.
Use the undo stp compliance command to restore the default.
115
By default, a port automatically recognizes the formats of received MSTP packets and determines the
formats of MSTP packets to be sent based on the recognized formats.
Configured in Ethernet interface view, the setting takes effect on that interface only.
Configured in port group view, the setting takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
Syntax
stp compliance { auto | dot1s | legacy }
undo stp compliance
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
auto: Configures the ports to recognize the MSTP BPDU format automatically and determine the format of
MSTP BPDUs to send.
dot1s: Configures the ports to receive and send only standard-format (802.1s-compliant) MSTP BPDUs.
legacy: Configures the ports to receive and send only compatible-format MSTP BPDUs.
Example
# Configure GigabitEthernet 1/0/1 to receive and send only standard-format (802.1s) MSTP packets.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp compliance dot1s
stp config-digest-snooping
Description
Use the stp config-digest-snooping command to enable Digest Snooping.
Use the undo stp config-digest-snooping command to disable Digest Snooping.
The feature is disabled by default.
Configured in system view, the setting takes effect globally.
Configured in Ethernet interface view, the setting takes effect on the interface only.
Configured in port group view, the setting takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
116
Enable this feature both globally and on ports connected to other vendors' devices to make it effective. To
minimize impact, enable the feature on all associated ports before you enable it globally.
Related commands: display stp.
Syntax
stp config-digest-snooping
undo stp config-digest-snooping
View
System view, Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Enable Digest Snooping on GigabitEthernet 1/0/1 and then globally.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp config-digest-snooping
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] stp config-digest-snooping
stp cost
Description
Use the stp cost command to set the path cost of the port or ports.
Use the undo stp cost command to restore the default.
By default, the device automatically calculates the path costs of ports in each spanning tree based on the
corresponding standard.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
To set the path cost of an MSTP port in a specific MSTI, use this command with the MSTI specified. To set
the path cost of a PVST port in a specific VLAN, use this command with the VLAN specified. To set the
path cost of an MSTP port in the CIST or an STP/RSTP port, use this command without specifying any
MSTI and VLAN.
Path cost is an important factor in spanning tree calculation. Setting different path costs for a port in
MSTIs allows VLAN traffic flows to be forwarded along different physical links, which results in VLANbased load balancing.
117
The path cost setting of a port can affect the role selection of the port. When the path cost of a port is
changed, the system will re-calculate the role of the port and initiate a state transition.
Related commands: display stp and stp pathcost-standard.
Syntax
stp [ instance instance-id | vlan vlan-list ] cost cost
undo stp [ instance instance-id | vlan vlan-list ] cost
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
instance instance-id: Sets the path cost of the ports in a particular MSTI. The value of instance-id is in the
range of 0 to 31, where 0 represents the CIST.
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
cost: Specifies the path cost of the port, with an effective range that depends on the path cost calculation
standard adopted:
With the IEEE 802.1d-1998 standard selected for path cost calculation, the cost parameter is in the
range of 1 to 65,535.
With the IEEE 802.1t standard selected for path cost calculation, the cost parameter is in the range
of 1 to 200,000,000.
With the private standard selected for path cost calculation, the cost parameter is in the range of 1
to 200,000.
Examples
# In MSTP mode, set the path cost of port GigabitEthernet 1/0/3 in MSTI 2 to 200.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/3
[Sysname-GigabitEthernet1/0/3] stp instance 2 cost 200
# In PVST mode, set the path cost of port GigabitEthernet 1/0/3 in VLAN 2 to 200.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] interface gigabitethernet 1/0/3
[Sysname-GigabitEthernet1/0/3] stp vlan 2 cost 200
stp edged-port
Description
Use the stp edged-port enable command to configure the ports as edge ports.
Use the stp edged-port disable command to configure the ports as non-edge ports.
118
Use the undo stp edged-port command to restore the default.
By default, all ports are non-edge ports.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
If a port directly connects to a user terminal rather than another device or a shared LAN segment, this
port is regarded as an edge port. When the network topology changes, an edge port will not cause a
temporary loop. You can enable the port to transition to the forwarding state rapidly by configuring it as
an edge port. HP recommends you to configure ports directly connecting to user terminals as edge ports.
Typically, configuration BPDUs from other devices cannot reach an edge port, because the edge port
does not connect to any other device. Therefore, if a port receives a configuration BPDU when the BPDU
guard function is disabled, the port functions as a non-edge port, even if you configure it as an edge
port.
You cannot configure edge port settings and loop guard on a port at the same time.
Related commands: stp loop-protection.
Syntax
stp edged-port { enable | disable }
undo stp edged-port
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
enable: Configures the ports as edge ports.
disable: Configures the ports as non-edge ports.
Example
# Configure GigabitEthernet 1/0/1 as an edge port.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp edged-port enable
stp enable
Description
Use the stp enable command to enable the spanning tree feature globally.
Use the undo stp enable command to disable the spanning tree feature.
119
By default, the spanning tree feature is disabled globally, enabled on all VLANs, and enabled on all
ports.
To enable or disable the spanning tree feature globally (not for any VLANs), use this command without
specifying any VLAN in system view. To enable or disable the spanning tree feature on specific VLANs,
use this command with the VLANs specified in system view.
Configured in system view, the setting takes effect globally.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
When you enable the spanning tree feature, the device works in STP-compatible, RSTP, MSTP, or PVST
mode, depending on the spanning tree mode setting.
When you enable MSTP, the switch dynamically maintains the spanning tree status of VLANs, based on
received configuration BPDUs.
When you disable MSTP, the switch stops maintaining the spanning tree status.
Related commands: stp mode.
Syntax
In system view:
stp [ vlan vlan-list ] enable
undo stp [ vlan vlan-list ] enable
In Ethernet interface, Layer 2 aggregate interface, port group:
stp enable
undo stp enable
View
System view, Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameter
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
Examples
# In MSTP mode, enable the spanning tree feature globally.
<Sysname> system-view
[Sysname] stp enable
# In PVST mode, enable the spanning tree feature globally and in VLAN 2.
<Sysname> system-view
120
[Sysname] stp mode pvst
[Sysname] stp enable
[Sysname] stp vlan 2 enable
# In MSTP mode, disable the spanning tree feature on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] undo stp enable
stp ignored vlan
Description
Use the stp ignored vlan command to enable VLAN Ignore for the specified VLANs.
Use the undo stp ignored vlan command to disable VLAN Ignore for the specified VLANs.
By default, VLAN Ignore is disabled for a VLAN.
Related commands: display stp ignored-vlan.
Syntax
stp ignored vlan vlan-list
undo stp ignored vlan vlan-list
View
System view
Default level
2: System level
Parameter
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
Example
# Enable VLAN Ignore for VLAN 1 through VLAN 10.
<Sysname> system-view
[Sysname] stp ignored vlan 1 to 10
stp loop-protection
Description
Use the stp loop-protection command to enable the loop guard function on the ports.
Use the undo stp loop-protection command to restore the default.
By default, the loop guard function is disabled.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all ports in the port group.
121
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
You cannot configure edge port settings and loop guard, or configure root guard and loop guard on a
port at the same time.
Related commands: stp edged-port and stp root-protection.
Syntax
stp loop-protection
undo stp loop-protection
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Enable the loop guard function on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp loop-protection
stp max-hops
Description
Use the stp max-hops command to set the maximum hops of the MST region.
Use the undo stp max-hops command to restore the default.
By default, the maximum number of hops of an MST region is 20.
Related commands: display stp.
Syntax
stp max-hops hops
undo stp max-hops
View
System view
Default level
2: System level
Parameter
hops: Sets the maximum hops, in the range of 1 to 40.
122
Example
# Set the maximum hops of the MST region to 35.
<Sysname> system-view
[Sysname] stp max-hops 35
stp mcheck
Description
Use the stp mcheck command to perform the mCheck operation globally or on a port.
If a port on a device running MSTP, RSTP, or PVST mode connects to an STP device, the port will
automatically migrate to the STP-compatible mode. It will not be able to migrate automatically back to the
MSTP, RSTP, or PVST mode, so it will remain working in the STP-compatible mode until the STP switch is
shut down or removed, or migrated to the MSTP, RSTP, or PVST mode. Then, you can perform an mCheck
operation to force the port to migrate to the MSTP, RSTP, or PVST mode.
The device works in STP-compatible, RSTP, MSTP, or PVST mode depending on the spanning tree mode
setting.
The stp mcheck command is effective only when the device works in MSTP, RSTP, or PVST mode.
Configured in system view, the setting takes effect globally.
Configured in Ethernet interface view, the setting takes only effect on the interface.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
Related commands: stp mode.
Syntax
stp mcheck
View
System view, Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Perform mCheck on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp mcheck
123
stp mode
Description
Use the stp mode command to configure the spanning tree work mode.
Use the undo stp mode command to restore the default.
By default, a spanning tree device works in MSTP mode.
Related commands: stp mcheck and stp enable.
Syntax
stp mode { stp | rstp | mstp | pvst }
undo stp mode
View
System view
Default level
2: System level
Parameters
stp: Configures the spanning tree device to work in STP-compatible mode.
rstp: Configures the spanning tree device to work in RSTP mode.
mstp: Configures the spanning tree device to work in MSTP mode.
pvst: Configures the spanning tree device to work in PVST mode.
Example
# Configure the spanning tree device to work in STP-compatible mode.
<Sysname> system-view
[Sysname] stp mode stp
stp no-agreement-check
Description
Use the stp no-agreement-check command to enable No Agreement Check on the ports.
Use the undo stp no-agreement-check command to disable No Agreement Check on the ports.
By default, No Agreement Check is disabled.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all member ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
This feature takes effect only after you enable it on the root port.
124
Syntax
stp no-agreement-check
undo stp no-agreement-check
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Enable No Agreement Check on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp no-agreement-check
stp pathcost-standard
Description
Use the stp pathcost-standard command to specify a standard for the device to use when calculating the
default path costs for ports.
Use the undo stp pathcost-standard command to restore the default.
By default, the switch calculates the default path cost for ports based on a private standard.
If you change the standard that the device uses in calculating the default path costs, you restore the path
costs to the default.
Related commands: stp cost and display stp.
Syntax
stp pathcost-standard { dot1d-1998 | dot1t | legacy }
undo stp pathcost-standard
View
System view
Default level
2: System level
Parameters
dot1d-1998: Configures the device to calculate the default path cost for ports based on IEEE 802.1d-1998.
dot1t: Configures the device to calculate the default path cost for ports based on IEEE 802.1t.
legacy: Configures the device to calculate the default path cost for ports based on a private standard.
125
Example
# Configure the device to calculate the default path cost for ports based on IEEE 802.1d-1998.
<Sysname> system-view
[Sysname] stp pathcost-standard dot1d-1998
stp point-to-point
Description
Use the stp point-to-point command to configure the link type of the ports.
Use the undo stp point-to-point command to restore the default.
The default setting is auto and the spanning tree device automatically detects whether a port connects to
a point-to-point link.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all member ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
When connecting to a non-point-to-point link, a port is incapable of rapid state transition.
You can configure the link type as point-to-point for a Layer 2 aggregate interface or a port that works in
full duplex mode. HP recommends that you use the default setting, which lets the device automatically
detect the port link type.
The stp point-to-point force-false or stp point-to-point force-true command configured on a port in MSTP
or PVST mode is effective for all MSTIs or VLANs.
If the physical link to which the port connects is not a point-to-point link but you set it to be one, the
configuration may bring a temporary loop.
Related commands: display stp.
Syntax
stp point-to-point { auto | force-false | force-true }
undo stp point-to-point
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
auto: Specifies automatic detection of the link type.
force-false: Specifies the non-point-to-point link type.
force-true: Specifies the point-to-point link type.
126
Example
# Configure the link connecting GigabitEthernet 1/0/3 as a point-to-point link.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/3
[Sysname-GigabitEthernet1/0/3] stp point-to-point force-true
stp port priority
Description
Use the stp port priority command to set the priority of the ports.
Use the undo stp port priority command to restore the default.
By default, the port priority is 128.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
To set the priority of an MSTP port in a specific MSTI, use this command with the MSTI specified. To set
the priority of a PVST port in a specific VLAN or multiple VLANs, use this command with a VLAN list
specified. To set the priority of an MSTP port in the CIST or an STP/RSTP port, use this command without
specifying any MSTI and VLAN.
Port priority affects the role of a port in a spanning tree.
The smaller the value, the higher the port priority. If all ports on your device use the same priority value,
the port priority depends on the port index. The smaller the index, the higher the priority.
Related commands: display stp.
Syntax
stp [ instance instance-id | vlan vlan-list ] port priority priority
undo stp [ instance instance-id | vlan vlan-list ] port priority
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
instance instance-id: Sets the priority of the ports in a particular MSTI. The value of instance-id is in the
range of 0 to 31, where 0 represents the CIST.
priority: Specifies a port priority, in the range of 0 to 240 in steps of 16 (as in 0, 16, 32).
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
127
Examples
# In MSTP mode, set the priority of port GigabitEthernet 1/0/3 to 16 in MSTI 2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/3
[Sysname-GigabitEthernet1/0/3] stp instance 2 port priority 16
# In PVST mode, set the priority of port GigabitEthernet 1/0/3 to 16 in VLAN 2.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] interface gigabitethernet 1/0/3
[Sysname-GigabitEthernet1/0/3] stp vlan 2 port priority 16
stp port-log
Description
Use the stp port-log command to enable output of port state transition information for the specified MSTI
or all MSTIs.
Use the undo stp port-log command to disable output of port state transition information for the specified
MSTI or all MSTIs.
By default, this function is enabled.
Syntax
stp port-log { instance { instance-id | all } | vlan vlan-list }
undo stp port-log { instance { instance-id | all } | vlan vlan-list }
View
System view
Default level
2: System level
Parameters
instance instance-id: Specifies an MSTI. The value of instance-id is in the range of 0 to 31, where 0
represents the CIST. To enable or disable output of port state transition information in STP/RSTP mode,
specify instance 0.
all: Specifies all MSTIs.
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
Examples
# In MSTP mode, enable output of port state transition information for MSTI 2.
<Sysname> system-view
[Sysname] stp port-log instance 2
%Aug
16
00:49:41:856
2006
Sysname
MSTP/3/MSTP_DISCARDING:
GigabitEthernet1/0/1 has been set to discarding state!
128
Instance
2's
%Aug
16
00:49:41:856
2006
Sysname
MSTP/3/MSTP_DISCARDING:
GigabitEthernet1/0/2 has been set to forwarding state!
Instance
2's
The output shows that GigabitEthernet 1/0/1 in MSTI 2 transitioned to the discarding state and
GigabitEthernet 1/0/2 in MSTI 2 transitioned to the forwarding state.
# In PVST mode, enable output of port state transition information for VLAN 1 to VLAN 4094.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] stp port-log vlan 1 to 4094
%Aug 16 00:49:41:856 2006 Sysname MSTP/3/PVST_DISCARDING: VLAN 2's GigabitEthernet1/0/1
has been set to discarding state!
%Aug 16 00:49:41:856 2006 Sysname MSTP/3/PVST_FORWARDING: VLAN 2's GigabitEthernet1/0/2
has been set to forwarding state!
The output shows that GigabitEthernet 1/0/1 in VLAN 2 transitioned to the discarding state and
GigabitEthernet 1/0/2 in VLAN 2 transitioned to the forwarding state.
stp priority
Description
Use the stp priority command to set the priority of the device.
Use the undo stp priority command to restore the default priority.
By default, the device priority is 32,768.
To set the priority of an MSTP device in a specific MSTI, use this command with the MSTI specified. To set
the priority of a PVST device in a specific VLAN or multiple VLANs, use this command with a VLAN list
specified. To set the priority of an MSTP device in the CIST or an STP/RSTP device, use this command
without specifying any MSTI and VLAN.
Syntax
stp [ instance instance-id | vlan vlan-list ] priority priority
undo stp [ instance instance-id | vlan vlan-list ] priority
View
System view
Default level
2: System level
Parameters
instance instance-id: Sets the priority of the device in an MSTI. The value of instance-id is in the range of
0 to 31, where 0 represents the CIST.
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, is in the range of 1 to 4094, and &<1-10> indicates that you
can specify up to 10 VLAN IDs or VLAN ID ranges.
priority: Specifies a device priority, in the range of 0 to 61440 in increments of 4096 (as in 0, 4096,
8192). You can set up to 16 priority values on the device. The smaller the value, the higher the device
priority.
129
Examples
# In MSTP mode, set the device priority to 4096 in MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 priority 4096
# In PVST mode, set the device priority to 4096 in VLAN 1.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] stp vlan 1 priority 4096
stp region-configuration
Description
Use the stp region-configuration command to enter MST region view.
Use the undo stp region-configuration command to restore the default MST region configurations.
These are the default settings for the MST region:
The MST region name of the device is the MAC address of the device.
All VLANs are mapped to the CIST.
The MSTP revision level is 0.
After you enter MST region view, you can configure the MST region-related parameters, including the
region name, VLAN-to-instance mappings, and revision level.
Syntax
stp region-configuration
undo stp region-configuration
View
System view
Default level
2: System level
Parameters
None
Example
# Enter MST region view.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region]
stp root primary
Description
Use the stp root primary command to configure the device as the root bridge.
130
Use the undo stp root command to restore the default.
By default, a device is not a root bridge.
To set an MSTP device as the root bridge in a specific MSTI, use this command with the MSTI specified.
To set a PVST device as the root bridge in a specific VLAN or multiple VLANs, use this command with a
VLAN list specified. To set an MSTP device in the CIST or an STP/RSTP device as the root bridge, use this
command without specifying any MSTI and VLAN.
Once you specify the device as the root bridge, you cannot change the priority of the device.
Related commands: stp priority and stp root secondary.
Syntax
stp [ instance instance-id | vlan vlan-list ] root primary
undo stp [ instance instance-id | vlan vlan-list ] root
View
System view
Default level
2: System level
Parameters
instance instance-id: Configures the device as the root bridge in a particular MSTI. The value of instanceid is in the range of 0 to 31, where 0 represents the CIST.
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
Examples
# In MSTP mode, specify the device as the root bridge of MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 root primary
# In PVST mode, specify the device as the root bridge of VLAN 1.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] stp vlan 1 root primary
stp root secondary
Description
Use the stp root secondary command to configure the device as a secondary root bridge.
Use the undo stp root command to restore the default.
By default, a device is not a secondary root bridge.
To set an MSTP device as a secondary root bridge in a specific MSTI, use this command with the MSTI
specified. To set a PVST device as a secondary root bridge in a specific VLAN or multiple VLANs, use this
command with a VLAN list specified. To set an MSTP device in the CIST or an STP/RSTP device as a
secondary root bridge, use this command without specifying any MSTI and VLAN.
131
Once you specify the device as a secondary root bridge, you cannot change the priority of the device.
Related commands: stp priority and stp root primary.
Syntax
stp [ instance instance-id | vlan vlan-list ] root secondary
undo stp [ instance instance-id | vlan vlan-list ] root
View
System view
Default level
2: System level
Parameters
instance instance-id: Configures the device as a secondary root bridge in a particular MSTI. The value of
instance-id is in the range of 0 to 31, where 0 represents the CIST.
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
Examples
# In MSTP mode, specify the device as a secondary root bridge in MSTI 1.
<Sysname> system-view
[Sysname] stp instance 1 root secondary
# In PVST mode, specify the device as a secondary root bridge in VLAN 1.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] stp vlan 1 root secondary
stp root-protection
Description
Use the stp root-protection command to enable the root guard function on the ports.
Use the undo stp root-protection command to restore the default.
By default, the root guard function is disabled.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
You cannot configure root guard and loop guard on a port at the same time.
Related commands: stp loop-protection.
132
Syntax
stp root-protection
undo stp root-protection
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Example
# Enable the root guard function for GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp root-protection
stp tc-protection
Description
Use the stp tc-protection enable command to enable the TC-BPDU attack guard function for the device.
Use the stp tc-protection disable command to disable the TC-BPDU attack guard function for the device.
By default, the TC-BPDU attack guard function is enabled.
Syntax
stp tc-protection enable
stp tc-protection disable
View
System view
Default level
2: System level
Parameters
None
Example
# Disable the TC-BPDU attack guard function for the device.
<Sysname> system-view
[Sysname] stp tc-protection disable
133
stp tc-protection threshold
Description
Use the stp tc-protection threshold command to configure the maximum number of forwarding address
entry flushes that the device can perform every a certain period of time (10 seconds).
Use the undo stp tc-protection threshold command to restore the default.
By default, the device can perform a maximum of six forwarding address entry flushes every 10 seconds.
Syntax
stp tc-protection threshold number
undo stp tc-protection threshold
View
System view
Default level
2: System level
Parameter
number: Sets the maximum number of immediate forwarding address entry flushes that the device can
perform within a certain period of time (10 seconds). The value is in the range of 1 to 255.
Example
# Configure the device to perform up to 10 forwarding address entry flushes every 10 seconds.
<Sysname> system-view
[Sysname] stp tc-protection threshold 10
stp timer forward-delay
Description
Use the stp timer forward-delay command to set the forward delay timer of the device.
Use the undo stp timer forward-delay command to restore the default.
By default, the forward delay timer is 1500 centiseconds.
The forward delay timer determines the time interval of state transition. To prevent temporary loops, a
spanning tree port goes through the learning (intermediate) state before it transitions from the discarding
to the forwarding state. To stay synchronized with the remote device, the port has a wait period between
transition states that is determined by the forward delay timer.
To set the forward delay in STP/RSTP/MSTP mode, use this command without any VLAN specified. To set
the forward delay for a specific VLAN or multiple VLANs in PVST mode, use this command with a VLAN
list specified.
HP does not recommend that you set the forward delay with this command. Instead, you can specify the
network diameter of the switched network by using the stp bridge-diameter command and let spanning
tree protocols automatically calculate optimal settings of the forward delay timer. If the network diameter
uses the default value, the forward delay timer also uses the default value.
Related commands: stp timer hello, stp timer max-age, and stp bridge-diameter.
134
Syntax
stp [ vlan vlan-list ] timer forward-delay time
undo stp [ vlan vlan-list ] timer forward-delay
View
System view
Default level
2: System level
Parameters
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
time: Sets the forward delay in centiseconds, in the range of 400 to 3000 in increments of 100 (as in
400, 500, 600).
Examples
# In MSTP mode, set the forward delay timer to 2000 centiseconds.
<Sysname> system-view
[Sysname] stp timer forward-delay 2000
# In PVST mode, set the forward delay timer to 2000 centiseconds.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] stp vlan 2 timer forward-delay 2000
stp timer hello
Description
Use the stp timer hello command to set the hello time of the device.
Use the undo stp timer hello command to restore the default.
By default, the hello time is 200 centiseconds.
Hello time is the time interval at which spanning tree devices send configuration BPDUs to maintain
spanning tree. If a device fails to receive configuration BPDUs within the set period of time, a new
spanning tree calculation process will be triggered due to timeout.
To set the hello time in STP/RSTP/MSTP mode, use this command without any VLAN specified. To set the
hello time for a specific VLAN or multiple VLANs in PVST mode, use this command with a VLAN list
specified.
HP does not recommend that you set the hello time with this command. Instead, you can specify the
network diameter of the switched network by using the stp bridge-diameter command and let spanning
tree protocols automatically calculate optimal settings of the hello timer. If the network diameter uses the
default value, the hello timer also uses the default value.
Related commands: stp timer forward-delay, stp timer max-age, and stp bridge-diameter.
135
Syntax
stp [ vlan vlan-list ] timer hello time
undo stp [ vlan vlan-list ] timer hello
View
System view
Default level
2: System level
Parameters
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
time: Sets the hello time in centiseconds, in the range of 100 to 1000 in increments of 100 (as in 100,
200, 300).
Examples
# In MSTP mode, set the hello time to 400 centiseconds.
<Sysname> system-view
[Sysname] stp timer hello 400
# In PVST mode, set the hello time in VLAN 2 to 400 centiseconds.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] stp vlan 2 timer hello 400
stp timer max-age
Description
Use the stp timer max-age command to set the max age timer of the device.
Use the undo stp timer max-age command to restore the default.
By default, the max age is 2000 centiseconds.
In the CIST of an MSTP network or each VLAN of a PVST network, the device determines whether a
configuration BPDU received on a port has expired based on the max age timer. If yes, a new spanning
tree calculation process starts. The max age timer is ineffective for MSTIs.
To set the max age timer in STP/RSTP/MSTP mode, use this command without any VLAN specified. To set
the max age timer for a specific VLAN or multiple VLANs in PVST mode, use this command with a VLAN
list specified.
HP does not recommend that you set the max age timer with this command. Instead, you can specify the
network diameter of the switched network by using the stp bridge-diameter command and let spanning
tree protocols automatically calculate optimal settings of the max age timer. If the network diameter uses
the default value, the max age timer also uses the default value.
Related commands: stp timer forward-delay, stp timer hello, and stp bridge-diameter.
136
Syntax
stp [ vlan vlan-list ] timer max-age time
undo stp [ vlan vlan-list ] timer max-age
View
System view
Default level
2: System level
Parameters
vlan vlan-list: Specifies a VLAN list in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>, where the
vlan-id parameter represents the VLAN ID, in the range of 1 to 4094, and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
time: Sets the max age in centiseconds, in the range of 600 to 4000 in increments of 100 (as in 600,
700, 800).
Examples
# In MSTP mode, set the max age timer to 1000 centiseconds.
<Sysname> system-view
[Sysname] stp timer max-age 1000
# In PVST mode, set the max age timer in VLAN 2 to 1000 centiseconds.
<Sysname> system-view
[Sysname] stp mode pvst
[Sysname] stp vlan 2 timer max-age 1000
stp timer-factor
Description
Use the stp timer-factor command to configure the timeout time by setting the timeout factor.
Timeout time = timeout factor × 3 × hello time.
Use the undo stp timer-factor command to restore the default.
By default, the timeout factor of the switch is set to 3.
After the network topology is stabilized, each non-root-bridge device forwards configuration BPDUs to the
surrounding devices at the interval of hello time to check whether any link is faulty. If a device does not
receive a BPDU from the upstream device within nine times the hello time, it will assume that the upstream
device has failed and start a new spanning tree calculation process.
In a stable network, this kind of spanning tree calculation may occur because the upstream device is
busy. You can avoid such unwanted spanning tree calculations by lengthening the timeout time (by setting
the timeout factor to 4 or more), saving the network resources. HP recommends you to set the timeout
factor to 5, 6, or 7 for a stable network.
Related commands: stp timer hello.
Syntax
stp timer-factor factor
137
undo stp timer-factor
View
System view
Default level
2: System level
Parameter
factor: Sets the timeout factor, in the range of 1 to 20.
Example
# Set the timeout factor of the device to 7.
<Sysname> system-view
[Sysname] stp timer-factor 7
stp transmit-limit
Description
Use the stp transmit-limit command to set the maximum number of BPDUs that the ports can send within
each hello time.
Use the undo stp transmit-limit command to restore the default.
By default, the maximum transmission rate of all ports is 10. Each port can send up to 10 BPDUs within
each hello time.
Configured in Ethernet interface view, the setting takes effect only on the interface.
Configured in port group view, the setting takes effect on all member ports in the port group.
Configured in Layer 2 aggregate interface view, the setting takes effect only on the aggregate interface.
Configured on a member port in an aggregation group, the setting takes effect only after the port leaves
the aggregation group.
A larger maximum transmission rate value requires more system resources. An appropriate maximum
transmission rate setting can prevent spanning tree protocols from using excessive bandwidth resources
during network topology changes. HP recommends that you use the default value.
Syntax
stp transmit-limit limit
undo stp transmit-limit
View
Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameter
limit: Sets the maximum number of BPDUs the ports can send within each hello time, in the range of 1 to
255.
138
Example
# Set the maximum transmission rate of port GigabitEthernet 1/0/1 to 5.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] stp transmit-limit 5
vlan-mapping modulo
Description
Use the vlan-mapping modulo command to map VLANs in the MST region to MSTIs according to the
specified modulo value, quickly creating a VLAN-to-instance mapping table.
By default, all VLANs are mapped to the CIST (MSTI 0).
You cannot map a VLAN to different MSTIs. If you map a VLAN that has been mapped to an MSTI to a
new MSTI, the old mapping will be automatically removed.
This command maps each VLAN to the MSTI whose ID is (VLAN ID - 1) %modulo + 1, where (VLAN ID 1) %modulo is the modulo operation for (VLAN ID - 1). If the modulo value is 15, for example, then VLAN
1 will be mapped to MSTI 1, VLAN 2 to MSTI 2, VLAN 15 to MSTI 15, VLAN 16 to MSTI 1, and so on.
Related commands: region-name, revision-level, display stp region-configuration, check regionconfiguration, and active region-configuration.
Syntax
vlan-mapping modulo modulo
View
MST region view
Default level
2: System level
Parameter
modulo: Sets the modulo value, in the range of 1 to 31.
Example
# Map VLANs to MSTIs as per modulo 8.
<Sysname> system-view
[Sysname] stp region-configuration
[Sysname-mst-region] vlan-mapping modulo 8
139
BPDU tunneling configuration commands
bpdu-tunnel dot1q
Description
Use the bpdu-tunnel dot1q command to enable BPDU tunneling for a protocol on the ports.
Use the undo bpdu-tunnel dot1q command to disable BPDU tunneling for a protocol on the ports.
By default, BPDU tunneling for any protocol is disabled.
Settings made in Layer 2 Ethernet interface view or Layer 2 aggregate interface view take effect only on
the Ethernet interface or aggregate interface. Settings made in port group view take effect on all ports in
the port group.
You cannot enable BPDU tunneling on a member port of a service loopback group.
Before enabling BPDU tunneling for DLDP, EOAM, GVRP, HGMP, LLDP, or STP on a port, disable the
protocol on the port first.
To enable BPDU tunneling for PVST (which is a spanning tree protocol) on a port, disable STP first and
then enable BPDU tunneling for STP on the port.
Do not enable BPDU tunneling for DLDP, EOAM, LACP, LLDP, PAGP, or UDLD on the member port of a
Layer 2 aggregation group.
Syntax
In Layer 2 Ethernet interface view or port group view:
bpdu-tunnel dot1q { cdp | dldp | eoam | gvrp | hgmp | lacp | lldp | pagp | pvst | stp | udld | vtp }
undo bpdu-tunnel dot1q { cdp | dldp | eoam | gvrp | hgmp | lacp | lldp | pagp | pvst | stp | udld |
vtp }
In Layer 2 aggregate interface view:
bpdu-tunnel dot1q { cdp | gvrp | hgmp | pvst | stp | vtp }
undo bpdu-tunnel dot1q { cdp | gvrp | hgmp | pvst | stp | vtp }
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
cdp: Specifies the CDP.
dldp: Specifies the DLDP.
eoam: Specifies Ethernet Operation, Administration and Maintenance (EOAM).
gvrp: Specifies the GVRP.
140
hgmp: Specifies the HGMP.
lacp: Specifies the LACP.
lldp: Specifies the LLDP.
pagp: Specifies the PAGP.
pvst: Specifies PVST.
stp: Specifies the STP.
udld: Specifies UDLD.
vtp: Specifies the VTP.
Examples
# Disable STP on GigabitEthernet 1/0/1, and then enable BPDU tunneling for STP on the port.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] undo stp enable
[Sysname-GigabitEthernet1/0/1] bpdu-tunnel dot1q stp
# Disable STP for port group 1, and then enable BPDU tunneling for STP in the port group.
<Sysname> system-view
[Sysname] port-group manual 1
[Sysname-port-group-manual-1] group-member gigabitethernet 1/0/1 to gigabitethernet 1/0/6
[Sysname-port-group-manual-1] undo stp enable
[Sysname-port-group-manual-1] bpdu-tunnel dot1q stp
# Disable STP on Layer 2 aggregate interface Bridge-Aggregation 1, and then enable BPDU tunneling for
STP on the Layer 2 aggregate interface.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] undo stp enable
[Sysname-Bridge-Aggregation1] bpdu-tunnel dot1q stp
bpdu-tunnel tunnel-dmac
Description
Use the bpdu-tunnel tunnel-dmac command to configure the destination multicast MAC address for
BPDUs.
Use the undo bpdu-tunnel tunnel-dmac command to restore the default value.
By default, the destination multicast MAC address for BPDUs is 0x010F-E200-0003.
Syntax
bpdu-tunnel tunnel-dmac mac-address
undo bpdu-tunnel tunnel-dmac
View
System view
141
Default level
2: System level
Parameter
mac-address: Specifies a destination multicast MAC address for BPDUs, in the format of H-H-H. The
allowed values are 0x0100-0CCD-CDD0, 0x0100-0CCD-CDD1, 0x0100-0CCD-CDD2, and 0x010FE200-0003.
Example
# Set the destination multicast MAC address for BPDUs to 0x0100-0CCD-CDD0.
<Sysname> system-view
[Sysname] bpdu-tunnel tunnel-dmac 0100-0ccd-cdd0
142
VLAN configuration commands
VLAN configuration commands
default
Description
Use the default command to restore the default settings for a VLAN interface.
This command might fail to restore the default settings for some commands for reasons such as command
dependencies and system restrictions. You can use the display this command in interface view to check
for these commands, and perform their undo forms or follow the command reference to individually
restore their default settings. If your restoration attempt still fails, follow the error message to resolve the
problem.
CAUTION:
The default command might interrupt ongoing network services. Make sure you are fully
aware of the impacts of this command when you perform it on a live network.
Syntax
default
View
VLAN interface view
Default level
2: System level
Parameters
None
Example
# Restore the default settings for VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] default
This command will restore the default settings. Continue? [Y/N]:y
description
Description
Use the description command to change the description of the VLAN or VLAN interface.
Use the undo description command to restore the default.
143
The default description for a VLAN is the VLAN ID. For example, VLAN 0001.
The default description for a VLAN interface is the name of the interface. For example, Vlaninterface 1 Interface.
You can configure a description to describe the function or connection of a VLAN or VLAN interface for
easy management.
Syntax
description text
undo description
View
VLAN view, VLAN interface view
Default level
2: System level
Parameters
text: Describes a VLAN or VLAN interface. The string can include case-sensitive letters, digits, special
characters (including ~ ! @ # $ % ^ & * ( ) - _ + = { } [ ] | \ : ; " ' < > , . /), spaces, and other Unicode
characters and symbols:
For a VLAN, this is a string of 1 to 32 characters.
For a VLAN interface, this is a string of 1 to 80 characters.
Each Unicode character takes the space of two regular characters.
To use Unicode characters or symbols in an interface description, install the specific input method editor
and log in to the device through remote login software that supports the character type.
When the length of a description string reaches or exceeds the maximum line width on the terminal
software, the software starts a new line, possibly breaking a Unicode character into two. As a result,
garbled characters may be displayed at the end of a line.
Examples
# Change the description of VLAN 2 to sales-private.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] description sales-private
# Change the description of VLAN-interface 2 to linktoPC56.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] quit
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] description linktoPC56
display interface vlan-interface
Description
Use the display interface vlan-interface command to display information about a specified or all VLAN
interfaces.
144
If you do not provide the vlan-interface parameter, this command displays information about all
interfaces.
If you provide the vlan-interface parameter but do not specify the VLAN interface number, this command
displays information about all VLAN interfaces.
Related commands: reset counters interface vlan-interface.
Syntax
display interface [ vlan-interface ] [ brief [ down ] ] [ | { begin | exclude | include } regular-expression ]
display interface vlan-interface vlan-interface-id [ brief ] [ | { begin | exclude | include } regularexpression ]
View
Any view
Default level
1: Monitor level
Parameters
vlan-interface-id: Specifies a VLAN interface number.
brief: Displays brief interface information. If you do not specify this parameter, the command displays
detailed interface information.
down: Displays information about interfaces in the DOWN state and the causes. If you do not specify this
parameter, this command displays information about interfaces in all states.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display information for VLAN-interface 2.
<Sysname> display interface vlan-interface 2
Vlan-interface2 current state: DOWN
Line protocol current state: DOWN
Description: Vlan-interface2 Interface
The Maximum Transmit Unit is 1500
Internet protocol processing : disabled
IP Packet Frame Type: PKTFMT_ETHNT_2,
Hardware Address: 000f-e249-8050
IPv6 Packet Frame Type: PKTFMT_ETHNT_2,
Last clearing of counters:
Hardware Address: 000f-e249-8050
Never
Last 300 seconds input:
Last 300 seconds output:
0 bytes/sec 0 packets/sec
0 bytes/sec 0 packets/sec
0 packets input, 0 bytes, 0 drops
0 packets output, 0 bytes, 0 drops
145
# Display brief information for VLAN-interface 2.
<Sysname> display interface vlan-interface 2 brief
The brief information of interface(s) under route mode:
Link: ADM - administratively down; Stby - standby
Protocol: (s) - spoofing
Interface
Link Protocol Main IP
Vlan2
DOWN DOWN
Description
--
# Display brief information for VLAN interfaces in DOWN state.
<Sysname> display interface vlan-interface brief down
The brief information of interface(s) under route mode:
Link: ADM - administratively down; Stby - standby
Interface
Link Cause
Vlan2
DOWN Not connected
Table 33 Command output
Field
Description
Physical state of a VLAN interface:
DOWN (Administratively)—Administrative state of the VLAN
interface is down because it has been shut down with the shutdown
command.
Vlan-interface2 current state
DOWN—Administrative sate of the VLAN interface is up, but its
physical sate is down. The VLAN corresponding to this interface
does not contain any physical port in the UP state (possibly because
the ports are not well connected or the lines have failed).
UP—Both the administrative state and the physical state of the VLAN
interface are up.
Link layer protocol state of a VLAN interface:
Line protocol current state
DOWN—Protocol state of the VLAN interface is down.
UP—Protocol state of the VLAN interface is up.
Description
Description string of a VLAN interface.
The Maximum Transmit Unit
MTU of a VLAN interface.
Internet protocol processing :
disabled
Interface is not capable of processing IP packets. This information is
displayed when the interface is not configured with an IP address.
Internet Address is
192.168.1.54/24 Primary
Primary IP address of the interface is 192.168.1.54/24. This
information is displayed only if the primary IP address is configured
for the interface.
Internet Address is 6.4.4.4/24 Sub
Secondary IP address of the interface is 6.4.4.4/24. This
information is displayed only if a secondary IP address is configured
for the interface.
IP Packet Frame Type
IPv4 outgoing frame format.
Hardware address
MAC address corresponding to a VLAN interface.
IPv6 Packet Frame Type
IPv6 outgoing frame format.
146
Field
Last clearing of counters
Description
Time when the reset counts interface vlan-interface command was
last used to clear the interface statistics.
Never indicates the reset counters interface command has never
been used on the interface since the device’s startup.
Last 300 seconds input: 0 bytes/sec
0 packets/sec
Average rate of input packets in the last 300 seconds (in bps and
pps).
Last 300 seconds output: 0
bytes/sec 0 packets/sec
Average rate of output packets in the last 300 seconds (in bps and
pps).
0 packets input, 0 bytes, 0 drops
Total number and size (in bytes) of the received packets of the
interface and the number of the dropped packets.
0 packets output, 0 bytes, 0 drops
Total number and size (in bytes) of the sent packets of the interface
and the number of the dropped packets.
The brief information of interfaces
under route mode
Brief information about Layer 3 interfaces.
Link: ADM - administratively down;
Stby - standby
ADM—Interface has been administratively shut down. To recover its
physical state, perform the undo shutdown command.
Stby—Interface is operating as a standby interface. To see the main
interface, use the display standby state command.
Protocol: (s) - spoofing
If the network layer protocol state of an interface is shown as UP, but
its link is an on-demand link or not present at all, its protocol
attribute includes the spoofing flag (an s in parentheses).
Interface
Abbreviated interface name.
Physical link state of the interface:
Link
UP—Link is up.
ADM—Link has been administratively shut down. To recover its
physical state, perform the undo shutdown command.
Protocol
Protocol connection state of the interface, which can be UP,
DOWN, or UP(s).
Main IP
Main IP address of the interface.
Description
Description of the interface.
Cause
Cause of a DOWN physical link. If the port has been shut down
with the shutdown command, this field displays Administratively. To
restore the physical state of the interface, use the undo shutdown
command.
display vlan
Description
Use the display vlan command to display VLAN information.
Related commands: vlan.
147
Syntax
display vlan [ vlan-id1 [ to vlan-id2 ] | all | dynamic | reserved | static ] [ | { begin | exclude | include
} regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
vlan-id1: Displays information about a VLAN specified by VLAN ID, in the range of 1 to 4094.
vlan-id1 to vlan-id2: Displays information about VLANs specified by a VLAN ID range.
all: Displays all VLAN information but the reserved VLANs.
dynamic: Displays the number of dynamic VLANs and the ID for each dynamic VLAN. The dynamic
VLANs are generated through GVRP or those distributed by a RADIUS server.
reserved: Displays information about the reserved VLANs. Protocol modules determine which VLANs are
reserved VLANs according to function implementation, and reserved VLANs serve protocol modules. You
cannot configure reserved VLANs.
static: Displays the number of static VLANs and the ID for each static VLAN. The static VLANs are
manually created.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display VLAN 2 information.
<Sysname> display vlan 2
VLAN ID: 2
VLAN Type: static
Route interface: not configured
Description: VLAN 0002
Name: VLAN 0002
Tagged
Ports: none
Untagged Ports:
GigabitEthernet1/0/1
GigabitEthernet1/0/2
# Display VLAN 3 information.
<Sysname> display vlan 3
VLAN ID: 3
VLAN Type: static
Route Interface: configured
148
GigabitEthernet1/0/3
IP Address: 1.1.1.1
Subnet Mask: 255.255.255.0
Description: VLAN 0003
Name: VLAN 0003
Tagged
Ports: none
Untagged Ports: none
Table 34 Command output
Field
Description
VLAN Type
VLAN type, static or dynamic.
Route interface
Indicates whether the VLAN interface is configured or not.
Description
Description of the VLAN.
Name
Name configured for the VLAN.
IP Address
Primary IP address of the VLAN interface (available only when an IP address
is configured for the VLAN interface). To display secondary IP addresses,
use the display interface vlan-interface command in any view or the display
this command in VLAN interface view.
Subnet Mask
Subnet mask of the primary IP address (available only when an IP address is
configured for the VLAN interface).
Tagged Ports
Ports through which VLAN packets are sent tagged.
Untagged Ports
Ports through which VLAN packets are sent untagged.
interface vlan-interface
Description
Use the interface vlan-interface command to create a VLAN interface and enter its view or enter the view
of an existing VLAN interface.
Use the undo interface vlan-interface command to remove the specified VLAN interface.
Create the VLAN before you create the VLAN interface.
To configure an IP address for a VLAN interface that will perform IP routing, use the ip address command
in VLAN interface view.
Related commands: display interface vlan-interface.
Syntax
interface vlan-interface vlan-interface-id
undo interface vlan-interface vlan-interface-id
View
System view
Default level
2: System level
149
Parameter
vlan-interface-id: Specifies a VLAN interface number, in the range of 1 to 4094.
Example
# Create VLAN-interface 2.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] quit
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2]
ip address
Description
Use the ip address command to assign an IP address and subnet mask to a VLAN interface.
Use the undo ip address command to remove the IP address and subnet mask for a VLAN interface.
By default, no IP address is assigned to any VLAN interface.
To connect a VLAN to multiple subnets, assign one primary IP address and multiple secondary IP
addresses to a VLAN interface.
When configuring IP addresses for a VLAN interface, follow these rules:
The primary IP address you assign to a VLAN interface overwrites the previous one, if any.
Remove all secondary IP addresses before you remove the primary IP address.
To remove all IP addresses, use the undo ip address command without any parameter.
To remove the primary IP address, use the undo ip address ip-address { mask | mask-length }
command.
To remove a secondary IP address, use the undo ip address [ ip-address { mask | mask-length } [
sub ] ] command
Related commands: display ip interface (Layer 3—IP Services Command Reference).
Syntax
ip address ip-address { mask | mask-length } [ sub ]
undo ip address [ ip-address { mask | mask-length } [ sub ] ]
View
VLAN interface view
Default level
2: System level
Parameters
ip-address: Specifies an IP address in dotted decimal notation.
mask: Specifies a subnet mask in dotted decimal notation.
mask-length: Sets the number of consecutive 1s in the subnet mask, in the range of 0 to 32.
sub: Indicates the address is a secondary IP address.
150
Example
# Specify the IP address as 1.1.0.1, the subnet mask as 255.255.255.0 for VLAN interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] ip address 1.1.0.1 255.255.255.0
mtu
Description
Use the mtu command to set the MTU for a VLAN interface.
Use the undo mtu command to restore the default.
By default, the MTU of a VLAN interface is 1500 bytes.
Related commands: display interface vlan-interface.
Syntax
mtu size
undo mtu
View
VLAN interface view
Default level
2: System level
Parameter
size: Sets the MTU, in the range of 46 to 1500 bytes.
Example
# Set the MTU to 1492 bytes for VLAN-interface 1.
<Sysname> system-view
[Sysname] interface vlan-interface 1
[Sysname-Vlan-interface1] mtu 1492
name
Description
Use the name command to configure a name for the VLAN.
Use the undo name command to restore the default name of the VLAN.
By default, the name of a VLAN is its VLAN ID, for example, VLAN 0001.
When 802.1X or MAC address authentication is configured on a switch, you can use a RADIUS server to
issue VLAN configuration to ports that have passed the authentication. Some servers can send IDs or
names of the issued VLANs to the switch.
Use VLAN names rather than VLAN IDs to distinguish a large number of VLANs.
151
Syntax
name text
undo name
View
VLAN view
Default level
2: System level
Parameter
text: Specifies a VLAN name, a string of 1 to 32 characters. The string can include case-sensitive letters,
digits, special characters (including ~ ! @ # $ % ^ & * ( ) - _ + = { } [ ] | \ : ; " ' < > , . /), and spaces.
Example
# Configure the name of VLAN 2 as Test VLAN.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] name Test VLAN
reset counters interface vlan-interface
Description
Use the reset counters interface vlan-interface command to clear the statistics on a VLAN interface.
Before collecting the traffic statistics within a specific period of time on an interface, clear the existing
statistics first.
If the vlan-interface-id parameter is not specified, this command clears the statistics of all VLAN interfaces.
If the vlan-interface-id parameter is specified, this command clears the statistics of the specified VLAN
interface.
Related commands: display interface vlan-interface.
Syntax
reset counters interface vlan-interface [ vlan-interface-id ]
View
User view
Default level
2: System level
Parameter
vlan-interface-id: Specifies a VLAN interface number.
Example
# Clear the statistics on VLAN-interface 2.
<Sysname> reset counters interface vlan-interface 2
152
shutdown
Description
Use the shutdown command to shut down a VLAN interface.
Use the undo shutdown command to bring up a VLAN interface.
By default, a VLAN interface is up unless all ports in the VLAN are down.
Use the undo shutdown command to bring up a VLAN interface after configuring related parameters and
protocols for the VLAN interface. You can shut down a failed VLAN interface with the shutdown
command and then bring it up with the undo shutdown command to see if it recovers.
In a VLAN, the state of any Ethernet port is independent of the state of the VLAN interface.
Syntax
shutdown
undo shutdown
View
VLAN interface view
Default level
2: System level
Parameters
None
Example
# Shut down VLAN-interface 2 and then bring it up.
<Sysname> system-view
[Sysname] interface vlan-interface 2
[Sysname-Vlan-interface2] shutdown
[Sysname-Vlan-interface2] undo shutdown
vlan
Description
Use the vlan vlan-id command to create a VLAN and enter its view or enter the view of an existing VLAN.
Use the vlan vlan-id1 to vlan-id2 command to create VLANs in the range of vlan-id1 to vlan-id2, except
reserved VLANs.
Use the undo vlan command to remove the specified VLANs.
You cannot create or remove the default VLAN (VLAN 1).
You cannot create or remove reserved VLANs reserved for specific functions.
For the following VLANs, you must remove the related configurations first, because you cannot use the
undo vlan command to directly remove them:
Protocol reserved VLANs
Management VLANs
153
Dynamic VLANs
VLANs configured with QoS policies
Control VLANs configured for smart link groups or RRPP domains
Source VLANs for port mirroring
Remote probe VLANs for remote port mirroring
If an isolate-user-VLAN is associated with a secondary VLAN with the isolate-user-vlan command, you
cannot remove the isolate-user-VLAN or secondary VLAN unless you remove the association first.
Related commands: display vlan.
Syntax
vlan { vlan-id1 [ to vlan-id2 ] | all }
undo vlan { vlan-id1 [ to vlan-id2 ] | all }
View
System view
Default level
2: System level
Parameters
vlan-id1, vlan-id2: Specifies a VLAN ID, in the range of 1 to 4094.
vlan-id1 to vlan-id2: Specifies a VLAN range.
all: Creates or removes all VLANs except reserved VLANs. The parameter is not supported when the
maximum number of VLANs that can be created on a device is less than 4094.
Examples
# Enter VLAN 2 view.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2]
# Create VLAN 4 through VLAN 100.
<Sysname> system-view
[Sysname] vlan 4 to 100
Please wait............. Done.
Port-based VLAN configuration commands
display port
Description
Use the display port command to display information about the hybrid or trunk ports on the device,
including the port names, PVIDs, and allowed VLAN IDs.
Syntax
display port { hybrid | trunk } [ | { begin | exclude | include } regular-expression ]
154
View
Any view
Default level
1: Monitor level
Parameters
hybrid: Displays hybrid ports.
trunk: Displays trunk ports.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display information about the hybrid ports in the system.
<Sysname> display port hybrid
Interface
GE1/0/4
PVID
VLAN passing
100
Tagged:
1000, 1002, 1500, 1600-1611, 2000,
2555-2558, 3000, 4000
Untagged:1, 10, 15, 18, 20-30, 44, 55, 67, 100,
150-160, 200, 255, 286, 300-302
# Display information about the trunk ports in the system.
<Sysname> display port trunk
Interface
GE1/0/8
PVID
2
VLAN passing
1-4, 6-100, 145, 177, 189-200, 244, 289, 400,
555, 600-611, 1000, 2006-2008
Table 35 Command output
Field
Description
Interface
Port name
PVID
PVID of the port
VLAN passing
VLANs for which the port allows packets to pass through
Tagged
VLANs for which the port sends packets without removing VLAN tags
Untagged
VLANs for which the port sends packets after removing VLAN tags
port
Description
Use the port command to assign the specified access ports to the VLAN.
155
Use the undo port command to remove the specified access ports from the VLAN.
By default, all ports are in VLAN 1.
This command is only applicable on access ports.
By default, all ports are access ports. However, you can manually configure the port type. For more
information, see ―port link-type.‖
You cannot assign Layer 2 aggregate interfaces to a VLAN.
Related commands: display vlan.
Syntax
port interface-list
undo port interface-list
View
VLAN view
Default level
2: System level
Parameter
interface-list: Specifies an interface list, in the format of interface-list = { interface-type interface-number [
to interface-type interface-number ] }&<1-10>, where interface-type interface-number represents the
interface type and interface number and &<1-10> indicates that you can specify up to 10 ports or port
ranges.
Example
# Assign GigabitEthernet 1/0/1 through GigabitEthernet 1/0/3 to VLAN 2.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] port gigabitethernet 1/0/1 to gigabitethernet 1/0/3
port access vlan
Description
Use the port access vlan command to assign the access ports to the specified VLAN.
Use the undo port access vlan command to restore the default.
By default, all access ports belong to VLAN 1.
The configuration made in Layer 2 Ethernet interface view, applies only to the port.
The configuration made in port group view applies to all ports in the port group.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports:
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
156
Syntax
port access vlan vlan-id
undo port access vlan
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameter
vlan-id: Specifies a VLAN ID, in the range of 1 to 4094. Verify that the VLAN specified by the VLAN ID
already exists.
Examples
# Assign GigabitEthernet 1/0/1 to VLAN 3.
<Sysname> system-view
[Sysname] vlan 3
[Sysname-vlan3] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port access vlan 3
# Assign Layer 2 aggregate interface Bridge-Aggregation 1 and its member ports to VLAN 3.
<Sysname> system-view
[Sysname] vlan 3
[Sysname-vlan3] quit
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port access vlan 3
port hybrid pvid
Description
Use the port hybrid pvid command to configure the PVID of the hybrid port.
Use the undo port hybrid pvid command to restore the default.
By default, the PVID of a hybrid port is VLAN 1.
You can use a nonexistent VLAN as the PVID for a hybrid port. If you use the undo vlan command to
remove the PVID of a hybrid port, it does not affect the setting of the PVID on the port.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in port group view applies to all ports in the port group.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports:
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
157
HP recommends that you set the same PVID for the local and remote hybrid ports.
You must use the port hybrid vlan command to configure the hybrid port to allow and forward packets
from the PVID.
Related commands: port link-type and port hybrid vlan.
Syntax
port hybrid pvid vlan vlan-id
undo port hybrid pvid
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameter
vlan-id: Specifies a VLAN ID, in the range of 1 to 4094.
Examples
# Configure VLAN 100 as the PVID of the hybrid port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] vlan 100
[Sysname-vlan100] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type hybrid
[Sysname-GigabitEthernet1/0/1] port hybrid pvid vlan 100
# Configure VLAN 100 as the PVID of the hybrid Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port link-type hybrid
[Sysname-Bridge-Aggregation1] port hybrid pvid vlan 100
port hybrid vlan
Description
Use the port hybrid vlan command to assign the hybrid ports to the specified VLANs.
Use the undo port hybrid vlan command to remove the hybrid ports from the specified VLANs.
By default, a hybrid port only allows packets from VLAN 1 to pass through untagged.
A hybrid port can carry multiple VLANs. If you execute the port hybrid vlan command multiple times, the
VLANs the hybrid port carries are the set of VLANs specified by vlan-id-list in each execution.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in port group view applies to all ports in the port group.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports:
158
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Related commands: port link-type.
Syntax
port hybrid vlan vlan-id-list { tagged | untagged }
undo port hybrid vlan vlan-id-list
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
vlan-id-list: Specifies a list of VLANs that the hybrid ports will be assigned to, in the format of [ vlan-id1 [
to vlan-id2 ] ]&<1-10>, where vlan-id ranges from 1 to 4094 and &<1-10> indicates that you can specify
up to 10 VLAN IDs or VLAN ID ranges. Verify that the specified VLANs already exist.
tagged: Configures the ports to send tagged packets of the specified VLANs.
untagged: Configures the ports to send untagged packets of the specified VLANs.
Examples
# Assign the hybrid port GigabitEthernet 1/0/1 to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100,
and configure GigabitEthernet 1/0/1 to send packets of these VLANs with tags kept.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type hybrid
[Sysname-GigabitEthernet1/0/1] port hybrid vlan 2 4 50 to 100 tagged
# Assign hybrid ports in port group 2 to VLAN 2, and configure these hybrid ports to send packets of
VLAN 2 with VLAN tags removed.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] quit
[Sysname] port-group manual 2
[Sysname-port-group-manual-2] group-member gigabitethernet 1/0/1 to gigabitethernet 1/0/6
[Sysname-port-group-manual-2] port link-type hybrid
[Sysname-port-group-manual-2] port hybrid vlan 2 untagged
Configuring GigabitEthernet1/0/1... Done.
Configuring GigabitEthernet1/0/2... Done.
Configuring GigabitEthernet1/0/3... Done.
Configuring GigabitEthernet1/0/4... Done.
Configuring GigabitEthernet1/0/5... Done.
Configuring GigabitEthernet1/0/6... Done.
# Assign the hybrid Layer 2 aggregate interface Bridge-Aggregation 1 and its member ports to VLAN 2,
and configure them to send packets of VLAN 2 with tags removed.
159
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port link-type hybrid
[Sysname-Bridge-Aggregation1] port hybrid vlan 2 untagged
Please wait... Done.
Configuring GigabitEthernet1/0/1... Done.
Configuring GigabitEthernet1/0/2... Done.
Configuring GigabitEthernet1/0/3... Done.
The output shows that Gigab.itEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 are
the member ports of the aggregation group corresponding to Bridge-Aggregation 1.
port link-type
Description
Use the port link-type command to configure the link type of a port.
Use the undo port link-type command to restore the default link type of a port.
By default, any port is an access port.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in port group view applies to all ports in the port group.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports:
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
To change the link type of a port from trunk to hybrid or vice versa, you must set the link type to access.
After you change the link type of an interface with the port link-type command, the loopback detection
action configured on the interface with the loopback-detection action command automatically restores the
default. For more information about the loopback detection action configuration, see Layer 2—LAN
Switching Configuration Guide.
Syntax
port link-type { access | hybrid | trunk }
undo port link-type
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
access: Configures the link type of a port as access.
hybrid: Configures the link type of a port as hybrid.
160
trunk: Configures the link type of a port as trunk.
Examples
# Configure GigabitEthernet 1/0/1 as a trunk port.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type trunk
# Configure all the ports in the manual port group group1 as hybrid ports.
<Sysname> system-view
[Sysname] port-group manual group1
[Sysname-port-group manual group1] group-member gigabitethernet 1/0/1
[Sysname-port-group manual group1] group-member gigabitethernet 1/0/2
[Sysname-port-group manual group1] port link-type hybrid
# Configure Layer 2 aggregate interface Bridge-Aggregation 1 and its member ports as hybrid ports.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port link-type hybrid
port trunk permit vlan
Description
Use the port trunk permit vlan command to assign the trunk ports to the specified VLANs.
Use the undo port trunk permit vlan command to remove the trunk ports from the specified VLANs.
By default, a trunk port allows only packets from VLAN 1 to pass through.
A trunk port can carry multiple VLANs. If you execute the port trunk permit vlan command multiple times,
the trunk port carries the set of VLANs specified by vlan-id-list in each execution.
If you are prompted with a configuration error message when using this command, use the display this
command to view the execution result.
On a trunk port, only traffic of the PVID can pass through untagged.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in port group view applies to all ports in the port group.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports:
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
On GVRP-enabled trunk ports, you must configure the port trunk permit vlan all command to ensure that
the traffic of all dynamically registered VLANs can pass through. To prevent unauthorized VLAN users
from accessing restricted resources through a GVRP-disabled port, do not use the port trunk permit vlan
all command on the port.
Related commands: port link-type.
161
Syntax
port trunk permit vlan { vlan-id-list | all }
undo port trunk permit vlan { vlan-id-list | all }
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
vlan-id-list: Specifies a list of VLANs that the trunk ports will be assigned to, in the format of [vlan-id1 [ to
vlan-id2 ] ]&<1-10>, where vlan-id is in the range of 1 to 4094 and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
all: Permits all VLANs to pass through the trunk ports.
Examples
# Assign the trunk port GigabitEthernet 1/0/1 to VLAN 2, VLAN 4, and VLAN 50 through VLAN 100.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type trunk
[Sysname-GigabitEthernet1/0/1] port trunk permit vlan 2 4 50 to 100
Please wait........... Done.
# Assign the trunk Layer 2 aggregate interface Bridge-Aggregation 1 to VLAN 2.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port link-type trunk
[Sysname-Bridge-Aggregation1] port trunk permit vlan 2
Please wait... Done.
Configuring GigabitEthernet1/0/1... Done.
Configuring GigabitEthernet1/0/2... Done.
Configuring GigabitEthernet1/0/3... Done.
The output shows that GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 are
the member ports of the aggregation group corresponding to Bridge-Aggregation 1.
port trunk pvid
Description
Use the port trunk pvid command to configure the PVID for the trunk port.
Use the undo port trunk pvid command to restore the default.
By default, the PVID of a trunk port is VLAN 1.
You can use a nonexistent VLAN as the PVID for a trunk port. If you use the undo vlan command to
remove the PVID of a hybrid port, it does not affect the setting of the PVID on the port.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in port group view applies to all ports in the port group.
162
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports:
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
The local and remote trunk ports must use the same PVID for the traffic of the PVID to be transmitted
properly.
You must use the port trunk permit vlan command to configure the trunk port to allow and forward
packets from the PVID.
Related commands: port link-type and port trunk permit vlan.
Syntax
port trunk pvid vlan vlan-id
undo port trunk pvid
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameter
vlan-id: Specifies a VLAN ID, in the range of 1 to 4094
Examples
# Configure VLAN 100 as the PVID of the trunk port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type trunk
[Sysname-GigabitEthernet1/0/1] port trunk pvid vlan 100
# Configure VLAN 100 as the PVID of the trunk Layer 2 aggregate interface Bridge-Aggregation 1.
<Sysname> system-view
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port link-type trunk
[Sysname-Bridge-Aggregation1] port trunk pvid vlan 100
MAC-based VLAN configuration commands
display mac-vlan
Description
Use the display mac-vlan command to display the specified MAC address-to-VLAN entries.
If mac-address mac-address is specified but mask is not specified, only the MAC address-to-VLAN entry
containing the specified MAC address is displayed.
163
Syntax
display mac-vlan { all | dynamic | mac-address mac-address [ mask mac-mask ] | static | vlan vlan-id }
[ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
all: Displays all the MAC address-to-VLAN entries.
dynamic: Displays dynamically configured MAC address-to-VLAN entries.
mac-address mac-address: Displays the MAC address-to-VLAN entry containing the specified MAC
address.
mask mac-mask: Displays the MAC address-to-VLAN entries with their MAC addresses in the specified
range.
static: Displays the statically configured MAC address-to-VLAN entries.
vlan vlan-id: Displays the MAC address-to-VLAN entries associated with the specified VLAN.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display all the MAC address-to-VLAN entries.
<Sysname> display mac-vlan all
The following MAC-VLAN address exist:
S: Static
D: Dynamic
MAC ADDR
MASK
VLAN ID
PRIO
STATE
------------------------------------------------------------------0008-0001-0000
FFFF-FF00-0000
5
3
S
0002-0001-0000
FFFF-FFFF-FFFF
5
3
S&D
Total MAC VLAN address count:2
Table 36 Command output
Field
Description
S: Static
Character S stands for the MAC address-to-VLAN entries that are configured
statically.
D: Dynamic
Character D stands for the MAC address-to-VLAN entries that are configured
dynamically.
164
Field
Description
MAC ADDR
MAC address of a MAC address-to-VLAN entry.
MASK
Mask of the MAC address of a MAC address-to-VLAN entry.
VLAN ID
VLAN ID of a MAC address-to-VLAN entry.
PRIO
802.1p priority corresponding to the MAC address of a MAC address-toVLAN entry
State of a MAC address-to-VLAN entry:
S—MAC address-to-VLAN entry is configured statically.
STATE
D—MAC address-to-VLAN entry is configured automatically through the
authentication server.
S&D—MAC address-to-VLAN entry is configured both statically and
dynamically.
display mac-vlan interface
Description
Use the display mac-vlan interface command to display all the ports with MAC-based VLAN enabled.
Related commands: mac-vlan enable.
Syntax
display mac-vlan interface [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display all the interfaces with MAC-based VLAN enabled.
<Sysname> display mac-vlan interface
MAC VLAN is enabled on following ports:
--------------------------------------GigabitEthernet1/0/1
GigabitEthernet1/0/2
165
GigabitEthernet1/0/3
mac-vlan enable
Description
Use the mac-vlan enable command to enable the MAC-based VLAN feature on a port.
Use the undo mac-vlan enable command to disable the MAC-based VLAN feature on a port.
By default, the MAC-based VLAN feature is disabled on a port.
Syntax
mac-vlan enable
undo mac-vlan enable
View
Layer 2 Ethernet port view
Default level
2: System level
Parameters
None
Example
# Enable the MAC-based VLAN feature on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname–GigabitEthernet1/0/1] mac-vlan enable
mac-vlan mac-address
Description
Use the mac-vlan mac-address command to associate the specified VLAN and priority value with the
specified MAC addresses.
Use the undo mac-vlan command to remove the association.
Two MAC address-to-VLAN entry tables exist in a device. One table contains the MAC address-to-VLAN
entries configured with the mask parameter specified. A MAC address-to-VLAN entry of this type
describes the relationship between a group of MAC addresses and a VLAN, and a priority value.
Another table contains the MAC address-to-VLAN entries configured without the mask parameter
specified. A MAC address-to-VLAN entry of this type describes the relationship between a single MAC
address and a VLAN, and a priority value. The system adds/removes MAC address-to-VLAN entries
to/from the two tables according to the configuration.
Syntax
mac-vlan mac-address mac-address [ mask mac-mask ] vlan vlan-id [ priority pri ]
undo mac-vlan { all | mac-address mac-address [ mask mac-mask ] | vlan vlan-id }
View
System view
166
Default level
2: System level
Parameters
mac-address mac-address: Specifies a MAC address.
mask mac-mask: Specifies a mask for the MAC address in the format of H-H-H. The mac-mask parameter
is comprised of the high-order part (all the binary bits of which are 1s) and the low-order part (all the
binary bits of which are 0s). By default, the hexadecimal digits of this parameter are all Fs.
vlan vlan-id: Specifies a VLAN ID, in the range of 1 to 4094.
priority pri: Specifies the 802.1p priority value corresponding to the specified MAC address. The pri
parameter ranges from 0 to 7.
all: Removes all the static MAC address-to-VLAN entries.
Examples
# Associate a single MAC address 0-1-1 with VLAN 100 and 802.1p priority 7.
<Sysname> system-view
[Sysname] mac-vlan mac-address 0-1-1 vlan 100 priority 7
# Associate the MAC addresses with the high-order six hexadecimal digits being 111122 with VLAN 100
and 802.1p priority 4.
<Sysname> system-view
[Sysname] mac-vlan mac-address 1111-2222-3333 mask ffff-ff00-0000 vlan 100 priority 4
mac-vlan trigger enable
Description
Use the mac-vlan trigger enable command to enable dynamic MAC-based VLAN assignment. The port
configured with this command will be dynamically assigned to VLANs based on the source MAC
addresses of the received packets.
Use the undo mac-vlan trigger enable command to restore the default.
By default, dynamic MAC-based VLAN assignment is not enabled.
After receiving a packet with an unknown source MAC address, a port submits the packet to the CPU.
If the source MAC address matches a MAC address-to-VLAN entry (whose mask is all Fs) maintained by
the device, the device dynamically learns the source MAC address and assigns the receiving port to the
corresponding VLAN. Then, subsequent packets with this source MAC address can be directly forwarded
through the port.
If the MAC address does not match any MAC address-to-VLAN entry or matches only a MAC address-toVLAN entry whose mask is not all Fs, the device will not dynamically learn the MAC address and assign
the receiving port to the corresponding VLAN.
Syntax
mac-vlan trigger enable
undo mac-vlan trigger enable
167
View
Layer 2 Ethernet port view
Default level
2: System level
Parameters
None
Example
# Enable dynamic MAC-based VLAN assignment on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] mac-vlan trigger enable
port pvid disable
Description
Use the port pvid disable command to disable the PVID of the port from forwarding packets whose
source MAC addresses do not match any MAC address-to-VLAN entry.
Use the undo port pvid disable command to restore the default.
By default, when a port receives a packet with an unknown source MAC address that does not match any
MAC address-to-VLAN entry, it forwards the packet in its PVID.
Syntax
port pvid disable
undo port pvid disable
View
Layer 2 Ethernet port view
Default level
2: System level
Parameters
None
Example
# Disable the PVID of GigabitEthernet 1/0/1 from forwarding packets whose source MAC addresses do
not match any MAC address-to-VLAN entry.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port pvid disable
168
vlan precedence
Description
Use the vlan precedence command to set the order of VLAN matching.
Use the undo vlan precedence command to restore the default.
By default, VLANs are matched based on MAC addresses preferentially.
This command only applies to VLANs based on a single MAC address and IP subnet-based VLANs.
If both the MAC-based VLAN function and the IP subnet-based VLAN function are created on a port,
MAC address-to-VLAN entries are matched preferentially, and the remaining VLAN entries (VLAN entries
based on a single MAC address and IP subnet-based VLANs) are matched as configured by the vlan
precedence command.
Syntax
vlan precedence { mac-vlan | ip-subnet-vlan }
undo vlan precedence
View
Layer 2 Ethernet port view, port group view
Default level
2: System level
Parameters
mac-vlan: Matches VLANs based on MAC addresses preferentially.
ip-subnet-vlan: Matches VLANs based on IP subnet settings preferentially.
Example
# Configure matching VLANs based on MAC addresses preferentially on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] vlan precedence mac-vlan
Protocol-based VLAN configuration commands
display protocol-vlan interface
Description
Use the display protocol-vlan interface command to display information about protocol-based VLANs for
the specified ports.
Syntax
display protocol-vlan interface { interface-type interface-number1 [ to interface-type interface-number2 ] |
all } [ | { begin | exclude | include } regular-expression ]
169
View
Any view
Default level
2: System level
Parameters
interface-type interface-number1: Specifies an interface by its type and number.
interface-type interface-number1 to interface-type interface-number2: Specifies an interface range.
all: Displays information about protocol-based VLANs on all ports.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display protocol-based VLAN information on GigabitEthernet 1/0/1.
[Sysname] display protocol-vlan interface gigabitethernet 1/0/1
Interface: GigabitEthernet1/0/1
VLAN ID
Protocol Index
Protocol Type
======================================================
2
0
ipv6
3
0
ipv4
Table 37 Command output
Field
Description
VLAN ID
ID of the protocol-based VLAN bound to the port
Protocol Index
Protocol template index
Protocol Type
Protocol type specified by the protocol template
display protocol-vlan vlan
Description
Use the display protocol-vlan vlan command to display the protocols and protocol indexes configured on
the specified VLANs.
Related commands: display vlan.
Syntax
display protocol-vlan vlan { vlan-id1 [ to vlan-id2 ] | all } [ | { begin | exclude | include } regularexpression ]
170
View
Any view
Default level
2: System level
Parameters
vlan-id1: Specifies a protocol-based VLAN ID, in the range of 1 to 4094.
vlan-id1 to vlan-id2: Displays protocol-based VLAN information of a VLAN that is in the range of vlan-id1
to vlan-id2. The vlan-id2 parameter specifies a protocol-based VLAN ID, in the range of 1 to 4094, but
you must ensure that its value is greater than or equal to that of vlan-id1.
all: Displays information about all protocol-based VLANs.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the protocols and protocol indexes configured on all protocol-based-VLANs.
<Sysname> display protocol-vlan vlan all
VLAN ID:2
Protocol Index
Protocol Type
======================================================
0
ipv4
3
ipv6
VLAN ID:3
Protocol Index
Protocol Type
======================================================
0
ipv4
1
ipv6
Table 38 Command output
Field
Description
VLAN ID
ID of the protocol-based VLAN bound to the port
Protocol Index
Protocol template index
Protocol Type
Protocol type specified by the protocol template
port hybrid protocol-vlan
Description
Use the port hybrid protocol-vlan command to associate the hybrid ports with a protocol-based VLAN.
171
Use the undo port hybrid protocol-vlan command to remove the association.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in port group view applies to all ports in the port group.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports:
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Before you use this command, make the following configurations:
Create a VLAN and associate it with specified protocols.
Configure the link type as hybrid.
Configure the port to allow the protocol-based VLAN to pass through.
Related commands: display protocol-vlan interface.
Syntax
port hybrid protocol-vlan vlan vlan-id { protocol-index [ to protocol-end ] | all }
undo port hybrid protocol-vlan { vlan vlan-id { protocol-index [ to protocol-end ] | all } | all }
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
vlan vlan-id: Specifies a VLAN ID, in the range of 1 to 4094.
protocol-index: Specifies a protocol index. The value can be specified by the users or assigned by the
system automatically when the protocol-based VLAN is created. You can use the display protocol-vlan
vlan all command to display the protocol indexes. The protocol-index parameter ranges from 0 to 15.
to protocol-end: Specifies the end protocol index. The protocol-end parameter must be greater than or
equal to the beginning protocol index. The protocol-end parameter is in the range of 0 to 15.
all: Specifies all protocols bound to vlan-id.
Examples
# Associate the hybrid port GigabitEthernet 1/0/1 with protocol 0 (IPv4) in VLAN 2.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] protocol-vlan ipv4
[Sysname-vlan2] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type hybrid
[Sysname-GigabitEthernet1/0/1] port hybrid vlan 2 untagged
Please wait... Done
[Sysname-GigabitEthernet1/0/1] port hybrid protocol-vlan vlan 2 0
172
# Associate the hybrid Layer 2 aggregate interface Bridge-Aggregation 1 with protocol 0 in VLAN 2.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] protocol-vlan ipv4
[Sysname-vlan2] quit
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port link-type hybrid
[Sysname-Bridge-Aggregation1] port hybrid vlan 2 untagged
Please wait... Done
Configuring GigabitEthernet1/0/1... Done.
Configuring GigabitEthernet1/0/2... Done.
Configuring GigabitEthernet1/0/3... Done.
[Sysname-Bridge-Aggregation1] port hybrid protocol-vlan vlan 2 0
The output shows that GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 are
the member ports of the aggregation group corresponding to Bridge-Aggregation 1.
protocol-vlan
Description
Use the protocol-vlan command to configure the VLAN as a protocol based VLAN and configure the
protocol template for the VLAN.
Use the undo protocol-vlan command to remove the configured protocol template.
By default, no VLAN is bound to any protocol template.
When you use the mode parameter to configure a user-defined protocol template, do not set etype-id in
ethernetii etype etype-id to 0x0800, 0x809B, 0x8137, or 0x86DD. Otherwise, the encapsulation format
of the matching packets will be the same as that of the IPv4, AppleTalk, IPX, and IPv6 packets,
respectively.
Do not configure both the dsap-id and ssap-id parameters in the protocol-vlan command as 0xE0 or 0xFF
when configuring the user-defined template for llc encapsulation. Otherwise, the encapsulation format of
the matching packets will be the same as that of the ipx llc or ipx raw packets, respectively. When either
of the dsap-id and ssap-id parameters is configured, the system assigns 0XAA to the other parameter.
When you use the mode parameter to configure a user-defined protocol template, do not set etype-id in
snap etype etype-id to 0x8137. Otherwise, the template format will be the same as that of the IPX
protocol. You can set etype-id to 0x0800, 0x809B, or 0x86DD, corresponding to IPv4, AppleTalk, and
IPv6, respectively.
Related commands: display protocol-vlan vlan.
Syntax
protocol-vlan [ protocol-index ] { at | ipv4 | ipv6 | ipx { ethernetii | llc | raw | snap } | mode {
ethernetii etype etype-id | llc { dsap dsap-id [ ssap ssap-id ] | ssap ssap-id } | snap etype etype-id } }
undo protocol-vlan { protocol-index [ to protocol-end ] | all }
View
VLAN view
173
Default level
2: System level
Parameters
at: Specifies the AppleTalk based VLAN.
ipv4: Specifies the IPv4 based VLAN.
ipv6: Specifies the IPv6 based VLAN.
ipx: Specifies the IPX based VLAN. The parameters ethernetii, llc, raw, and snap are encapsulation
formats for IPX.
mode: Configures a user-defined protocol template for the VLAN, which could also have the following
encapsulation formats: ethernetii, llc, and snap.
ethernetii etype etype-id: Matches Ethernet II encapsulation format and the corresponding protocol type
values. The etype-id parameter is the protocol type ID of inbound packets, in the range of 0x0600 to
0xFFFF (excluding 0x0800, 0x809B, 0x8137, and 0x86DD).
llc: Matches the llc encapsulation format.
dsap dsap-id: Specifies the destination service access point, in the range of 0x00 to 0xFF.
ssap ssap-id: Specifies the source service access point, in the range of 0x00 to 0xFF.
snap etype etype-id: Matches SNAP encapsulation format and the corresponding protocol type values.
The etype-id parameter is the Ethernet type of inbound packets, in the range of 0x0600 to 0xFFFF
(excluding 0x8137).
protocol-index: Specifies a protocol template index, in the range of 0 to 15. The system will automatically
assign an index if this parameter is not specified.
to protocol-end: Specifies the end protocol index, in the range of 0 to 15. The protocol-end parameter
must be greater than or equal to the protocol-index parameter.
all: Removes all the protocols bound to the VLAN.
Examples
# Configure VLAN 3 as an IPv4 based VLAN.
<Sysname> system-view
[Sysname] vlan 3
[Sysname-vlan3] protocol-vlan ipv4
CAUTION:
IP uses ARP for address resolution in Ethernet. To prevent communication failure, configure the
IP and ARP templates in the same VLAN and associate them with the same port.
# Create an ARP protocol template for VLAN 3 (ARP code is 0x0806) to make VLAN 3 transmit ARP
packets.
To use Ethernet encapsulation, use this command:
[Sysname-vlan3] protocol-vlan mode ethernetii etype 0806
To use 802.3 encapsulation, use this command:
[Sysname-vlan3] protocol-vlan mode snap etype 0806
174
IP subnet-based VLAN configuration commands
display ip-subnet-vlan interface
Description
Use the display ip-subnet-vlan interface command to display IP subnet-based VLANs and IP subnet
indexes on the specified ports.
Syntax
display ip-subnet-vlan interface { interface-list | all } [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
2: System level
Parameters
interface-list: Specifies an Ethernet port list in the format of interface-list = { interface-type interface-number
[ to interface-type interface-number ] }&<1-10>, where interface-type interface-number represents the port
type and port number and &<1-10> indicates that you can specify up to 10 ports or port ranges.
all: Displays IP subnet information about all the ports with IP subnet-based VLAN configured.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display IP subnet-based VLANs and IP subnet indexes on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] display ip-subnet-vlan interface gigabitethernet 1/0/1
Interface: GigabitEthernet1/0/1
VLAN ID
Subnet-Index
IP ADDRESS
NET MASK
=======================================================
3
0
192.168.1.0
255.255.255.0
Table 39 Command output
Field
Description
Subnet-Index
Index of the IP subnet
IP ADDRESS
IP address of the subnet (either an IP address or a network address)
NET MASK
Mask of the IP subnet
175
display ip-subnet-vlan vlan
Description
Use the display ip-subnet-vlan vlan command to display the IP subnet information and IP subnet indexes
on the specified VLANs.
Related commands: display vlan.
Syntax
display ip-subnet-vlan vlan { vlan-id [ to vlan-id ] | all } [ | { begin | exclude | include } regularexpression ]
View
Any view
Default level
2: System level
Parameters
vlan-id: Specifies a VLAN ID, in the range of 1 to 4094.
to: Specifies a VLAN ID range. The parameter after this keyword must be greater than or equal to the one
before this keyword.
all: Specifies all the VLANs.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the IP subnet information and IP subnet indexes for all VLANs.
<Sysname> display ip-subnet-vlan vlan all
VLAN ID:
3
Subnet Index
IP Address
Subnet Mask
====================================================
0
192.168.1.0
255.255.255.0
Table 40 Command output
Field
Description
Subnet Index
IP subnet index
IP Address
IP address of the subnet; it can be an IP address or a network address.
Subnet Mask
Mask of the IP subnet
176
ip-subnet-vlan
Description
Use the ip-subnet-vlan command to associate the VLAN with a specified IP subnet or IP address.
Use the undo ip-subnet-vlan command to remove the association.
The IP subnet or IP address cannot be a multicast network segment or a multicast address.
Related commands: display ip-subnet-vlan vlan.
Syntax
ip-subnet-vlan [ ip-subnet-index ] ip ip-address [ mask ]
undo ip-subnet-vlan { ip-subnet-index [ to ip-subnet-end ] | all }
View
VLAN view
Default level
2: System level
Parameters
ip-subnet-index: Specifies a beginning IP subnet index, in the range of 0 to 11. The value can be
configured by users, or automatically numbered by the system, based on the order in which the IP subnets
or IP addresses are associated with the VLAN.
ip ip-address [ mask ]: Specifies the source IP address or network address based on which the subnetbased VLANs are classified, in dotted decimal notation. The mask parameter is the subnet mask of the
source IP address or network address, in dotted decimal notation with a default value of 255.255.255.0.
to: Specifies an IP subnet index range.
ip-subnet-end: Specifies an end IP subnet index, in the range of 0 to 11. The value must be greater than or
equal to the beginning IP subnet index.
all: Removes all the associations between VLANs and IP subnets or IP addresses.
Example
# Configure VLAN 3 as an IP subnet-based VLAN and associate it with the 192.168.1.0/24 network
segment.
<Sysname> system-view
[Sysname] vlan 3
[Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0
port hybrid ip-subnet-vlan
Description
Use the port hybrid ip-subnet-vlan command to associate the Ethernet port with the specified IP subnetbased VLAN.
Use the undo port hybrid ip-subnet-vlan command to remove the association.
177
On an Ethernet port associated with an IP subnet-based VLAN, if the source IP address of a received
untagged packet belongs to the corresponding IP subnet, the port tags the packet with the corresponding
VLAN tag.
The configuration made in Layer 2 Ethernet interface view applies only to the port.
The configuration made in port group view applies to all ports in the port group.
The configuration made in Layer 2 aggregate interface view applies to the aggregate interface and its
aggregation member ports:
If the system fails to apply the configuration to the aggregate interface, it stops applying the
configuration to aggregation member ports.
If the system fails to apply the configuration to an aggregation member port, it skips the port and
moves to the next member port.
Only hybrid ports support this feature. Before you use this command, assign the port to the IP subnetbased VLAN you want to associate with.
Related commands: display ip-subnet-vlan interface.
Syntax
port hybrid ip-subnet-vlan vlan vlan-id
undo port hybrid ip-subnet-vlan { vlan vlan-id | all }
View
Layer 2 Ethernet interface view, port group view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
vlan vlan-id: Specifies a VLAN ID, in the range of 1 to 4094.
all: Specifies all VLANs.
Examples
# Associate GigabitEthernet 1/0/1 with the IP subnet-based VLAN 3.
<Sysname> system-view
[Sysname] vlan 3
[Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0
[Sysname-vlan3] quit
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type hybrid
[Sysname-GigabitEthernet1/0/1] port hybrid vlan 3 untagged
Please wait... Done.
[Sysname-GigabitEthernet1/0/1] port hybrid ip-subnet-vlan vlan 3
# Associate the hybrid Layer 2 aggregate interface Bridge-Aggregation 1 with the IP subnet-based VLAN
3.
<Sysname> system-view
[Sysname] vlan 3
[Sysname-vlan3] ip-subnet-vlan ip 192.168.1.0 255.255.255.0
[Sysname-vlan3] quit
178
[Sysname] interface bridge-aggregation 1
[Sysname-Bridge-Aggregation1] port link-type hybrid
[Sysname-Bridge-Aggregation1] port hybrid vlan 3 untagged
Please wait... Done
Configuring GigabitEthernet1/0/1... Done.
Configuring GigabitEthernet1/0/2... Done.
Configuring GigabitEthernet1/0/3... Done.
[Sysname-Bridge-Aggregation1] port hybrid ip-subnet-vlan vlan 3
The output shows that GigabitEthernet 1/0/1, GigabitEthernet 1/0/2, and GigabitEthernet 1/0/3 are
the member ports of the aggregation group corresponding to Bridge-Aggregation 1.
179
Isolate-user-VLAN configuration commands
display isolate-user-vlan
Description
Use the display isolate-user-vlan command to display the mapping between an isolate-user-VLAN and
secondary VLANs.
Related commands: isolate-user-vlan and isolate-user-vlan enable.
Syntax
display isolate-user-vlan [ isolate-user-vlan-id ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
isolate-user-vlan-id: Specifies an isolate-user-VLAN ID, in the range of 1 to 4094.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the mapping between an isolate-user-VLAN and secondary VLANs.
<Sysname> display isolate-user-vlan
Isolate-user-VLAN VLAN ID : 2
Secondary VLAN ID : 3 4
VLAN ID: 2
VLAN Type: static
Isolate-user-VLAN type : isolate-user-VLAN
Route Interface: configured
IP Address: 1.1.1.1
Subnet Mask: 255.255.255.0
Description: VLAN 0002
Name: VLAN 0002
Tagged
Ports: none
Untagged Ports:
180
GigabitEthernet1/0/2
GigabitEthernet1/0/3
GigabitEthernet1/0/4
VLAN ID: 3
VLAN Type: static
Isolate-user-VLAN type : secondary
Route Interface: configured
IP Address: 2.2.2.2
Subnet Mask: 255.255.255.0
Description: VLAN 0003
Name: VLAN 0003
Tagged
Ports: none
Untagged Ports:
GigabitEthernet1/0/2
GigabitEthernet1/0/3
VLAN ID: 4
VLAN Type: static
Isolate-user-VLAN type : secondary
Route Interface: not configured
Description: VLAN 0004
Name: VLAN 0004
Tagged
Ports: none
Untagged Ports:
GigabitEthernet1/0/2
GigabitEthernet1/0/4
Table 41 Command output
Field
Description
Isolate-user-VLAN VLAN ID
Isolate-user-VLAN ID.
Secondary VLAN ID
Secondary VLAN ID.
VLAN Type
VLAN type (static or dynamic).
Isolate-user-VLAN type
Current VLAN type (isolate-user-VLAN or secondary VLAN).
Route Interface
Indicates whether a VLAN interface is configured for the VLAN.
IP Address
IP address of the VLAN interface, if configured. This field is not
displayed if no IP address is configured for the VLAN interface.
Subnet Mask
Subnet mask of the VLAN interface, if configured. This field is not
displayed if no mask is configured for the VLAN interface.
Description
VLAN description.
Name
VLAN name.
Tagged Ports
Ports through which packets of this VLAN are sent tagged.
Untagged Ports
Ports through which packets of this VLAN are sent untagged.
181
isolate-user-vlan
Description
Use the isolate-user-vlan command to associate an isolate-user-VLAN with the specified secondary
VLANs.
Use the undo isolate-user-vlan command to remove the association.
By default, an isolate-user-VLAN is not associated with any secondary VLAN. .
The undo isolate-user-vlan command without the secondary secondary-vlan-id parameter specified
removes the association between the specified isolate-user-VLAN and all its secondary VLANs.
The undo isolate-user-vlan command with the secondary secondary-vlan-id parameter specified only
removes the association between the specified isolate-user-VLAN and the specified secondary VLANs.
Do not configure the default VLAN (VLAN 1) as a secondary VLAN or isolate-user-VLAN.
Related commands: display isolate-user-vlan.
Syntax
isolate-user-vlan isolate-user-vlan-id secondary secondary-vlan-id [ to secondary-vlan-id ]
undo isolate-user-vlan isolate-user-vlan-id [ secondary secondary-vlan-id [ to secondary-vlan-id ] ]
View
System view
Default level
2: System level
Parameters
isolate-user-vlan-id: Specifies an isolate-user-VLAN ID, in the range of 1 to 4094.
secondary secondary-vlan-id [ to secondary-vlan-id ]: Specifies a secondary VLAN ID or a secondary
VLAN ID range. The secondary-vlan-id parameter is a secondary VLAN ID, in the range of 1 to 4094.
Example
# Associate isolate-user-VLAN 2 with secondary VLANs VLAN 3 and VLAN 4.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] isolate-user-vlan enable
[Sysname-vlan2] port gigabitethernet 1/0/2
[Sysname-vlan2] vlan 3
[Sysname-vlan3] port gigabitethernet 1/0/3
[Sysname-vlan3] vlan 4
[Sysname-vlan4] port gigabitethernet 1/0/4
[Sysname-vlan4] quit
[Sysname] isolate-user-vlan 2 secondary 3 to 4
182
isolate-user-vlan enable
Description
Use the isolate-user-vlan enable command to configure the VLAN as an isolate-user-VLAN.
Use the undo isolate-user-vlan enable command to remove the isolate-user-VLAN configuration for the
VLAN.
By default, no VLAN is an isolate-user-VLAN.
An isolate-user-VLAN may include multiple ports, including the one connected to the upstream device.
Do not configure the default VLAN (VLAN 1) as a secondary VLAN or isolate-user-VLAN.
Related commands: display isolate-user-vlan.
Syntax
isolate-user-vlan enable
undo isolate-user-vlan enable
View
VLAN view
Default level
2: System level
Parameters
None
Example
# Configure VLAN 5 as an isolate-user-VLAN.
<Sysname> system-view
[Sysname] vlan 5
[Sysname-vlan5] isolate-user-vlan enable
isolated-vlan enable
Description
Use the isolated-vlan enable command to configure Layer 2 isolation between ports in the same
secondary VLAN.
Use the undo isolated-vlan enable command to restore the default.
By default, ports in the same secondary VLAN can communicate at Layer 2.
You cannot configure Layer 2 isolation between ports in an isolate-user-VLAN.
Layer 2 isolation configured with the isolated-vlan enable command takes effect only when the isolateuser-VLAN type of each port in the secondary VLAN is configured as host and the secondary VLAN is
associated with an isolate-user-VLAN.
After you configure the isolated-vlan enable command in VLAN view, you cannot assign any port in the
VLAN to an isolation group.
183
Layer 2 isolation configured with the isolated-vlan enable command takes effect only after the secondary
VLAN is associated with an isolate-user-VLAN.
Related commands: isolate-user-vlan.
Syntax
isolated-vlan enable
undo isolated-vlan enable
View
VLAN view
Default level
2: System level
Parameters
None
Example
# Configure Layer 2 isolation between ports in secondary VLAN 4, where GigabitEthernet 1/0/1 is the
uplink port and GigabitEthernet 1/0/2 is the downlink port.
<Sysname> system-view
[Sysname] vlan 2
[Sysname-vlan2] isolate-user-vlan enable
[Sysname-vlan2] quit
[Sysname] vlan 4
[Sysname-vlan4] isolated-vlan enable
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type hybrid
[Sysname-GigabitEthernet1/0/1] port hybrid vlan 2 4 untagged
[Sysname-GigabitEthernet1/0/1] port hybrid pvid vlan 2
[Sysname-GigabitEthernet1/0/1] quit
[Sysname] interface gigabitethernet 1/0/2
[Sysname-GigabitEthernet1/0/2] port link-type hybrid
[Sysname-GigabitEthernet1/0/2] port hybrid vlan 2 4 untagged
[Sysname-GigabitEthernet1/0/2] port hybrid pvid vlan 4
[Sysname-GigabitEthernet1/0/2] port isolate-user-vlan host
[Sysname-GigabitEthernet1/0/2] quit
[Sysname] isolate-user-vlan 2 secondary 4
port isolate-user-vlan promiscuous
Description
Use the port isolate-user-vlan promiscuous command to configure a port to operate in promiscuous mode
in a VLAN and assign the port to the VLAN. If the VLAN is an isolate-user-VLAN, this command
simultaneously assigns the port to the secondary VLANs associated with the isolate-user-VLAN.
Use the undo port isolate-user-vlan command to cancel the promiscuous operating mode of a port.
By default, a port does not operate in promiscuous mode in a VLAN.
184
When the device executes the port isolate-user-vlan promiscuous command, the following guidelines
apply:
HP recommends assigning access or hybrid ports to an isolate-user-VLAN.
Before configuring the isolate-user-VLAN type of a port as promiscuous in an isolate-user-VLAN,
make sure that the VLAN has been created.
If the port is an access port and the specified VLAN is an isolate-user-VLAN associated with
secondary VLANs, the device changes the link type of the port to hybrid, sets the isolate-user-VLAN
as the PVID of the port, and assigns the port to the associated secondary VLANs.
If the port is a trunk or hybrid port, the device assigns the port to the isolate-user-VLAN and the
associated secondary VLANs without changing the link type and PVID of the port.
A hybrid port (original hybrid or changed from access) will send packets of the specific VLAN and
any associated secondary VLANs untagged. The existing VLAN settings on the port are not
changed.
When you use the port isolate-user-vlan promiscuous command on a port that operates in promiscuous
mode, the device automatically executes the undo port isolate-user-vlan command to cancel the
promiscuous mode of the port first.
The undo port isolate-user-vlan command does not remove a port from secondary VLANs or change its
link type and PVID, does not remove an access port from the specific VLAN, but removes a trunk or
hybrid port from the specific VLAN.
You can configure the port isolate-user-vlan promiscuous command and the isolate-user-vlan enable
command in any order.
Syntax
port isolate-user-vlan vlan-id promiscuous
undo port isolate-user-vlan
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameter
vlan-id: Specifies a VLAN ID, in the range of 1 to 4094, excluding VLAN 1.
Examples
# Configure access port GigabitEthernet 1/0/1 to operate in promiscuous mode in isolate-user-VLAN 2,
which is associated with secondary VLAN 20, and then cancel the configuration.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
#
return
[Sysname-GigabitEthernet1/0/1] port isolate-user-vlan 2 promiscuous
185
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
port isolate-user-vlan 2 promiscuous
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 2 20 untagged
port hybrid pvid vlan 2
#
return
[Sysname-GigabitEthernet1/0/1] undo port isolate-user-vlan
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 20 untagged
port hybrid pvid vlan 2
#
return
# Assign access port GigabitEthernet 1/0/1 to VLAN 10, which is not an isolate-user-VLAN, configure
the port to operate in promiscuous mode in VLAN 10, and then cancel the configuration.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
#
return
[Sysname-GigabitEthernet1/0/1] port isolate-user-vlan 10 promiscuous
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
port isolate-user-vlan 10 promiscuous
port access vlan 10
#
return
[Sysname-GigabitEthernet1/0/1] undo port isolate-user-vlan
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
port access vlan 10
#
186
return
port isolate-user-vlan host
Description
Use the port isolate-user-vlan host command to configure a port to operate in host mode. If the port is
assigned to a secondary VLAN, the command also assigns the port to the isolate-user-VLAN that is
associated with the secondary VLAN.
Use the undo port isolate-user-vlan command to cancel the host operating mode of a port.
By default, a port does not operate in host mode.
When the device executes the port isolate-user-vlan host command, the following guidelines apply:
You cannot assign trunk ports to a secondary VLAN.
If the port is an access port and has been assigned to a secondary VLAN, the device changes the
link type of the port to hybrid and sets the secondary VLAN as the PVID of the port.
If the port is a trunk or hybrid port and has been assigned to a secondary VLAN, the device does
not change the link type or PVID of the port.
A hybrid port (original hybrid or changed from access) will send packets of the secondary VLAN
and associated isolate-user-VLAN untagged. The existing VLAN settings on the port are not
changed.
You can configure the port isolate-user-vlan host command before or after assigning the port to a
secondary VLAN.
Syntax
port isolate-user-vlan host
undo port isolate-user-vlan
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view
Default level
2: System level
Parameters
None
Examples
# Configure access port GigabitEthernet 1/0/1 to operate in host mode and assign the port to
secondary VLAN 20, which is associated with isolate-user-VLAN 2.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port isolate-user-vlan host
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
port isolate-user-vlan host
187
#
return
[Sysname-GigabitEthernet1/0/1] port access vlan 20
[Sysname-GigabitEthernet1/0/1] display this
#
interface GigabitEthernet1/0/1
port link-mode bridge
port isolate-user-vlan host
port link-type hybrid
undo port hybrid vlan 1
port hybrid vlan 2 20 untagged
port hybrid pvid vlan 20
#
return
188
GVRP configuration commands
display garp statistics
Description
Use the display garp statistics command to display the GARP statistics of the specified ports. If no ports
are specified, this command displays the GARP statistics for all ports.
This command displays the statistics about GVRP PDUs received, transmitted, and dropped on GVRPenabled ports. When the system is restarted or after you perform the reset garp statistics command, the
existing packet statistics are cleared and the system starts to collect new GARP statistics. With the
statistics, you can judge whether a GVRP-enabled port is operating properly:
If the number of received and transmitted GVRP PDUs on the port is the same as the remote port, it
indicates that the two ends are transmitting and receiving GVRP PDUs properly and no registration
information is lost.
If the port drops GVRP PDUs, you should check its registration mode. GVRP PDUs are likely to be
dropped if the registration mode is fixed or forbidden, because dynamic VLANs cannot be
registered in these two modes.
Related commands: reset garp statistics.
Syntax
display garp statistics [ interface interface-list ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface interface-list: Displays the GARP statistics of one or multiple ports. You can specify up to 10 port
lists:
You can specify a single port in the form of interface-type interface-number.
You can specify a port range in the form of interface-type interface-number1 to interface-type
interface-number2, where the end port number specified by interface-number2 must be greater than
the start port number specified by interface-number1.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
189
Example
# Display GARP statistics on ports GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2.
<Sysname> display garp statistics interface gigabitethernet 1/0/1 to gigabitethernet
1/0/2
GARP statistics on port GigabitEthernet1/0/1
Number of GVRP Frames Received
: 5
Number of GVRP Frames Transmitted
: 2
Number of Frames Discarded
: 1
GARP statistics on port GigabitEthernet1/0/2
Number of GVRP Frames Received
: 3
Number of GVRP Frames Transmitted
: 4
Number of Frames Discarded
: 2
display garp timer
Description
Use the display garp timer command to display GARP timers on specific ports. If no ports are specified,
this command displays the GARP timers on all ports.
Related commands: garp timer hold, garp timer join, garp timer leave, and garp timer leaveall.
Syntax
display garp timer [ interface interface-list ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface interface-list: Displays the GARP timer settings of one or multiple ports. You can specify up to 10
port lists:
You can specify a single port in the form of interface-type interface-number.
You can specify a port range in the form of interface-type interface-number1 to interface-type
interface-number2, where the end port number specified by interface-number2 must be greater than
the start port number specified by interface-number1.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
190
Example
# Display GARP timers on port GigabitEthernet 1/0/1.
<Sysname> display garp timer interface gigabitethernet 1/0/1
GARP timers on port GigabitEthernet1/0/1
Garp Join Time
: 20 centiseconds
Garp Leave Time
: 60 centiseconds
Garp LeaveAll Time
: 1000 centiseconds
Garp Hold Time
: 10 centiseconds
display gvrp local-vlan
Description
Use the display gvrp local-vlan command to display the local VLAN information maintained by GVRP on
the specified port.
Syntax
display gvrp local-vlan interface interface-type interface-number [ | { begin | exclude | include } regularexpression ]
View
Any view
Default level
0: Visit level
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the local VLAN information maintained by GVRP on GigabitEthernet 1/0/1.
<Sysname> display gvrp local-vlan interface gigabitethernet 1/0/1
Following VLANs exist in GVRP local database:
1(default),2-500
display gvrp state
Description
Use the display gvrp state command to display GVRP state machines in a specified VLAN on a port.
191
Syntax
display gvrp state interface interface-type interface-number vlan vlan-id [ | { begin | exclude | include }
regular-expression ]
View
Any view
Default level
0: Visit level
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
vlan vlan-id: Specifies a VLAN ID, ranging from 1 to 4094.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display GVRP state machines in VLAN 2 on port GigabitEthernet 1/0/1.
<Sysname> display gvrp state interface gigabitethernet 1/0/1 vlan 2
GVRP state of VLAN 2 on port GigabitEthernet1/0/1
Applicant state machine
: VP
Registrar state machine
: MTR
Table 42 Command output
Field
Description
GVRP state of VLAN 2 on port
GigabitEthernet1/0/1
Information about the GVRP state machines in VLAN 2 on
port GigabitEthernet 1/0/1
Applicant state machine handles attribute declarations. Its
state can be VA, AA, QA, LA, VP, AP, QP, VO, AO, QO,
LO, VON, AON, and QON. Each state consists of two or
three letters with the following meanings:
Applicant state machine
The first letter indicates the state: V for Very anxious, A for
Anxious, Q for Quiet, and L for Leaving.
The second letter indicates the membership state: A for
Active member, P for Passive member, and O for
Observer.
The third letter N (if any) stands for Non-participant.
For example, VP indicates ―Very anxious, Passive
member".
192
Field
Description
Registrar state machine records the registration of
attributes declared by other participants. Its state can be
INN, LV, L3, L2, L1, MT, INR, LVR, L3R, L2R, L1R, MTR,
INF, LVF, L3F, L2F, L1F, and MTF. Each state consists of
two or three letters or numbers with the following
meanings:
Registrar state machine
The first two letters or numbers indicate the state: IN
stands for In; LV, L3, L2, and L1 all stand for Leaving, and
L3, L2, L1 are three sub-states of LV; MT stands for Empty
The third letter indicates the registration mode: N (if any)
for Normal registration, R for Registration fixed, and F for
Registration forbidden.
For example, MTR stands for ―Empty, Registration fixed",
indicating the fixed registration mode in Empty state.
display gvrp statistics
Description
Use the display gvrp statistics command to display the GVRP statistics of the specified trunk ports. If no
ports are specified, this command displays the GVRP statistics for all trunk ports.
Syntax
display gvrp statistics [ interface interface-list ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface interface-list: Displays the GVRP statistics of one or multiple Ethernet ports.
You can provide up to 10 Ethernet port lists, specified in the following ways:
As an individual port in the form of interface-type interface-number
As a port range in the form of interface-type interface-number1 to interface-type interface-number2,
where the end-port number specified by interface-number2 must be greater than the start-port
number specified by interface-number1
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
193
Example
# Display GVRP statistics for trunk port GigabitEthernet 1/0/1.
<Sysname> display gvrp statistics interface gigabitethernet 1/0/1
GVRP statistics on port GigabitEthernet1/0/1
GVRP Status
: Enabled
GVRP Running
: YES
GVRP Failed Registrations
: 0
GVRP Last Pdu Origin
: 0000-0000-0000
GVRP Registration Type
: Normal
Table 43 Command output
Field
Description
GVRP Status
Indicates whether GVRP is enabled or disabled
GVRP Running
Indicates whether GVRP is running
GVRP Failed Registrations
Indicates the number of GVRP registration failures
GVRP Last Pdu Origin
Indicates the source MAC address in the last GVRP PDU
GVRP Registration Type
Indicates the GVRP registration mode (fixed, forbidden, or
normal) on the port
display gvrp status
Description
Use the display gvrp status command to display the global GVRP state.
Syntax
display gvrp status [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the global GVRP state.
194
<Sysname> display gvrp status
GVRP is enabled
display gvrp vlan-operation
Description
Use the display gvrp vlan-operation command to display information about dynamic VLAN operations on
a port.
Syntax
display gvrp vlan-operation interface interface-type interface-number [ | { begin | exclude | include }
regular-expression ]
View
Any view
Default level
0: Visit level
Parameters
interface interface-type interface-number: Specifies an interface by its type and number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display information about dynamic VLAN operations on GigabitEthernet 1/0/1.
<Sysname> display gvrp vlan-operation interface gigabitethernet 1/0/1
Dynamic VLAN operations on port GigabitEthernet1/0/1
Operations of creating VLAN
:
2-100
Operations of deleting VLAN
:
none
Operations of adding VLAN to TRUNK
:
2-100
Operations of deleting VLAN from TRUNK
:
none
garp timer hold
Description
Use the garp timer hold command to set the GARP Hold timer for an Ethernet port, Layer-2 aggregate
interface, or all ports in a port group.
195
Use the undo garp timer hold command to restore the default of the GARP Hold timer. This may fail if the
default is beyond the valid value range for the Hold timer.
By default, the Hold timer is 10 centiseconds.
Related commands: display garp timer and garp timer join.
Syntax
garp timer hold timer-value
undo garp timer hold
View
Ethernet interface view, Layer-2 aggregate interface view, port group view
Default level
2: System level
Parameter
timer-value: Specifies the Hold timer (in centiseconds), which must be a multiple of 5 and range from 10
(inclusive) to half the Join timer (inclusive).
Example
# Set the GARP Hold timer to 15 centiseconds, assuming that the Join timer is 30 centiseconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] garp timer hold 15
garp timer join
Description
Use the garp timer join command to set the GARP Join timer for an Ethernet port, Layer-2 aggregate
interface, or all ports in a port group.
Use the undo garp timer join command to restore the default of the GARP Join timer. This may fail if the
default is beyond the valid value range for the Join timer.
By default, the Join timer is set to 20 centiseconds.
Related commands: display garp timer, garp timer hold, and garp timer leave.
Syntax
garp timer join timer-value
undo garp timer join
View
Ethernet interface view, Layer-2 aggregate interface view, port group view
Default level
2: System level
196
Parameter
timer-value: Specifies the Join timer (in centiseconds), which must be a multiple of 5 and range from twice
the Hold timer (inclusive) and half the Leave timer (inclusive).
Example
# Set the GARP Join timer to 25 centiseconds, assuming that both the Hold timer and the Leave timer are
using the default.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] garp timer join 25
garp timer leave
Description
Use the garp timer leave command to set the GARP Leave timer for an Ethernet port, Layer-2 aggregate
interface, or all ports in a port group.
Use the undo garp timer leave command to restore the default of the GARP Leave timer. This may fail if
the default is beyond the valid value range for the Leave timer.
By default, the Leave timer is set to 60 centiseconds.
Related commands: display garp timer, garp timer join, and garp timer leaveall.
Syntax
garp timer leave timer-value
undo garp timer leave
View
Ethernet interface view, Layer-2 aggregate interface view, port group view
Default level
2: System level
Parameter
timer-value: Specifies the Leave timer (in centiseconds), which must be a multiple of 5 and range from
twice the Join timer (exclusive) to the LeaveAll timer (exclusive).
Example
# Set the GARP Leave timer to 100 centiseconds, assuming that both the Join timer and the LeaveAll timer
are using the default.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] garp timer leave 100
garp timer leaveall
Description
Use the garp timer leaveall command to set the GARP LeaveAll timer.
197
Use the undo garp timer leaveall command to restore the default. This may fail if the default is beyond the
valid value range for the LeaveAll timer.
By default, the LeaveAll timer is 1000 centiseconds.
To keep the dynamic VLANs learned through GVRP stable, do not set the LeaveAll timer smaller than its
default value.
Related commands: display garp timer and garp timer leave.
Syntax
garp timer leaveall timer-value
undo garp timer leaveall
View
System view
Default level
2: System level
Parameter
timer-value: Specifies the Leaveall timer (in centiseconds), which must be a multiple of 5 and range from
the maximum Leave timer on the device (exclusive) to 32,765 (inclusive).
Example
# Set the leaveall timer to 2000 centiseconds, assuming that the Leave timer on every port is set to 60
centiseconds.
<Sysname> system-view
[Sysname] garp timer leaveall 2000
gvrp
Description
Use the gvrp command to enable GVRP.
Use the undo gvrp command to disable GVRP.
By default, GVRP is disabled.
Settings in system view take effect globally; settings in Ethernet view or Layer 2 aggregate interface take
effect on the current interface; settings in port group view take effect on all ports in the port group.
To enable GVRP on a port, enable GVRP globally before you enable it on the port.
In interface view, you can use this command on trunk ports only.
You cannot change the link type of a GVRP-enabled trunk port.
Related commands: display gvrp status.
Syntax
gvrp
undo gvrp
198
View
System view, Ethernet interface view, Layer-2 aggregate interface view, port group view
Default level
2: System level
Parameters
None
Example
# Enable GVRP globally.
<Sysname> system-view
[Sysname] gvrp
GVRP is enabled globally.
gvrp registration
Description
Use the gvrp registration command to configure the GVRP registration mode.
Use the undo gvrp registration command to restore the default.
The default GVRP registration mode is normal.
Settings in system view take effect globally; settings in Ethernet view or Layer 2 aggregate interface take
effect on the current interface; settings in port group view take effect on all ports in the port group.
This command is only available on trunk ports.
Related commands: display garp statistics.
Syntax
gvrp registration { fixed | forbidden | normal }
undo gvrp registration
View
Ethernet interface view, Layer-2 aggregate interface view, port group view
Default level
2: System level
Parameters
fixed: Sets the GVRP registration mode to fixed.
forbidden: Sets the GVRP registration mode to forbidden.
normal: Sets the GVRP registration mode to normal.
Example
# Set the GVRP registration mode to fixed on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type trunk
199
[Sysname-GigabitEthernet1/0/1] gvrp registration fixed
reset garp statistics
Description
Use the reset garp statistics command to clear the GARP statistics on the specified ports. If no ports are
specified, this command clears the GARP statistics on all ports.
The cleared statistics include the statistics about GVRP PDUs sent, received, and dropped.
Related commands: display garp statistics.
Syntax
reset garp statistics [ interface interface-list ]
View
User view
Default level
2: System level
Parameter
interface interface-list: Clears the GARP statistics of one or multiple ports.
You can provide up to 10 port lists, specified in the following ways:
As an individual port in the form of interface-type interface-number
As a port range in the form of interface-type interface-number1 to interface-type interface-number2,
where the end-port number specified by interface-number2 must be greater than the start port
number specified by interface-number1.
Example
# Clear the GARP statistics on all ports.
<Sysname> reset garp statistics
200
QinQ configuration commands
Throughout this document, customer network VLANs (CVLAN), also called inner VLANs, refer to the
VLANs that a customer uses on the private network; and service provider network VLANs (SVLAN), also
called outer VLANs, refer to the VLANs that a service provider uses to carry VLAN tagged traffic for
customers.
Selective QinQ is achieved through QoS policies. For more information about QoS policy configuration
commands, see ACL and QoS Command Reference.
nest
Description
Use the nest command to add a VLAN nest action to a traffic behavior. If the traffic behavior already
contains a VLAN nest action, the new one overwrites the old one.
Use the undo nest command to remove the action.
The nest action enables a port to insert an outer VLAN tag in VLAN tagged traffic.
If a QoS policy contains a VLAN nest action, apply it only to the incoming traffic of a port, and you must
enable basic QinQ on the port or port group first.
The nest action cannot be applied to a VLAN or globally.
Related commands: qos policy, traffic behavior, and classifier behavior (ACL and QoS Command
Reference).
Syntax
nest top-most vlan-id vlan-id
undo nest top-most
View
Traffic behavior view
Default level
2: System level
Parameter
vlan-id vlan-id: Specifies a VLAN tag ID, ranging from 1 to 4094.
Example
# Create traffic behavior b1, and add the action of inserting outer VLAN tag 123.
<Sysname> system-view
[Sysname] traffic behavior b1
[Sysname-behavior-b1] nest top-most vlan-id 123
201
qinq enable
Description
Use the qinq enable command to enable basic QinQ on the Ethernet ports.
Use the undo qinq enable command to disable basic QinQ on the Ethernet ports.
By default, basic QinQ is disabled on Ethernet ports.
A basic QinQ-enabled port tags received frames with its PVID tag.
Configured in Layer 2 Ethernet interface view, the command takes effect on the port only.
Configured in Layer 2 aggregate interface view, the command takes effect on the Layer 2 aggregate
interface and all the member ports in the aggregation group.
Configured in port group view, the command takes effect on all ports in the port group.
Syntax
qinq enable
undo qinq enable
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameters
None
Examples
# Enable basic QinQ on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] qinq enable
# Enable basic QinQ on all ports in port group 1.
<Sysname> system-view
[Sysname] port-group manual 1
[Sysname-port-group-manual-1] group-member gigabitethernet 1/0/1 to gigabitethernet 1/0/6
[Sysname-port-group-manual-1] qinq enable
qinq ethernet-type customer-tag
Description
Use the qinq ethernet-type customer-tag command to configure the TPID value in CVLAN tags.
Use the undo qinq ethernet-type customer-tag command to restore the TPID value in CVLAN tags to the
system default.
By default, the TPID value in CVLAN tags is 0x8100.
202
On a port with basic QinQ or customer-side QinQ enabled, the switch judges whether a frame is VLAN
tagged based on the CVLAN TPID value globally configured.
For more information about customer-side QinQ, see the chapter ―VLAN mapping configuration.‖
Syntax
qinq ethernet-type customer-tag hex-value
undo qinq ethernet-type customer-tag
View
System view
Default level
2: System level
Parameter
hex-value: Specifies the Hexadecimal TPID value, ranging from 0x0001 to 0xFFFF. However, do not set it
to any of the protocol type values listed in Table 44.
Table 44 Common protocol type values
Protocol type
Value
ARP
0x0806
PUP
0x0200
RARP
0x8035
IP
0x0800
IPv6
0x86DD
PPPoE
0x8863/0x8864
MPLS
0x8847/0x8848
IPX/SPX
0x8137
IS-IS
0x8000
LACP
0x8809
802.1X
0x888E
Cluster
0x88A7
Reserved
0xFFFD/0xFFFE/0xFFFF
Example
# Set the TPID value in the CVLAN tags to 0x8200 globally.
<Sysname> system-view
[Sysname] qinq ethernet-type customer-tag 8200
qinq ethernet-type service-tag
Description
Use the qinq ethernet-type service-tag command to configure the TPID value in SVLAN tags.
203
Use the undo qinq ethernet-type service-tag command to restore the TPID value in SVLAN tags to the
default setting.
By default, the TPID value in SVLAN tags is 0x8100.
On a port with basic QinQ and customer-side QinQ not enabled, the switch judges whether a frame is
VLAN tagged based on the SVLAN TPID value on the port.
For more information about customer-side QinQ, see the chapter ―VLAN mapping configuration.‖
Configured in Ethernet interface view, this command takes effect on the current port only.
Configured in port group view, this command takes effect on all ports in the port group.
Configured in Layer 2 aggregate interface view, this command takes effect on the Layer 2 aggregate
interface and the member ports in its aggregation group. You can configure this command on a Layer 2
aggregate interface and its member ports separately. Configured on an aggregation member port, this
command takes effect immediately. For more information about link aggregation, see the chapter
―Ethernet link aggregation configuration.‖
Syntax
qinq ethernet-type service-tag hex-value
undo qinq ethernet-type service-tag
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameter
hex-value: Specifies the Hexadecimal TPID value, ranging from 0x0001 to 0xFFFF. However, do not set it
to any of the protocol type values listed in Table 44.
Example
# Set the TPID value in the SVLAN tags to 0x9100 on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] qinq ethernet-type service-tag 9100
qinq transparent-vlan
Description
Use the qinq transparent-vlan command to configure VLAN transparent transmission on one or multiple
ports, so the port or ports can transparently transmit frames from the specified VLANs.
Use the undo qinq transparent-vlan command to remove the configuration.
By default, VLAN transparent transmission is not configured on ports.
Configured in Layer 2 Ethernet interface view, the command takes effect on the interface only.
Configured in Layer 2 aggregate interface view, the command takes effect on the Layer 2 aggregate
interface and all the member ports in the aggregation group.
204
Configured in port group view, the command takes effect on all ports in the port group.
Syntax
qinq transparent-vlan vlan-list
undo qinq transparent-vlan { all | vlan-list }
View
Layer 2 Ethernet interface view, Layer 2 aggregate interface view, port group view
Default level
2: System level
Parameter
vlan-list: Specifies a list of existing VLANs in the format of vlan-list = { vlan-id [ to vlan-id ] }&<1-10>,
where vlan-id represents the VLAN ID ranging from 1 to 4094 and &<1-10> indicates that you can
specify up to 10 VLAN IDs or VLAN ID ranges.
all: Indicates all VLANs.
Example
# Enable basic QinQ on GigabitEthernet 1/0/1, and configure GigabitEthernet 1/0/1 to transparently
transmit frames from VLAN 2, VLAN 3, and VLAN 50 through VLAN 100.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port link-type trunk
[Sysname-GigabitEthernet1/0/1] port trunk permit vlan 2 3 50 to 100
[Sysname-GigabitEthernet1/0/1] qinq enable
[Sysname-GigabitEthernet1/0/1] qinq transparent-vlan 2 3 50 to 100
205
VLAN mapping configuration commands
VLAN mapping is achieved through QoS policies. For QoS policy configuration commands, see ACL and
QoS Command Reference.
nest
Description
Use the nest command to add a VLAN nest action to a traffic behavior. If the traffic behavior already
contains a VLAN nest action, the new one overwrites the old one.
Use the undo nest command to remove the action.
The nest action enables a port to insert an outer VLAN tag in VLAN tagged traffic.
If a QoS policy contains a VLAN nest action, you can apply it only to the incoming traffic of a port or a
port group enabled with basic QinQ.
The nest action cannot be applied to a VLAN or globally.
Related commands: qos policy, traffic behavior, and classifier behavior (ACL and QoS Command
Reference).
Syntax
nest top-most vlan-id vlan-id
undo nest top-most
View
Traffic behavior view
Default level
2: System level
Parameter
vlan-id vlan-id: Specifies a VLAN tag ID, ranging from 1 to 4094.
Example
# Create traffic behavior b1, and add the action of inserting outer VLAN tag 123.
<Sysname> system-view
[Sysname] traffic behavior b1
[Sysname-behavior-b1] nest top-most vlan-id 123
qinq enable downlink
Description
Use the qinq enable downlink command to enable customer-side QinQ on an Ethernet port.
Use the undo qinq enable command to disable customer-side QinQ on an Ethernet port.
206
By default, customer-side QinQ is disabled on Ethernet ports.
Enable or disable customer-side QinQ on one port in Ethernet interface view or on a group of ports in
port group view.
Syntax
qinq enable downlink
undo qinq enable
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Examples
# Enable customer-side QinQ on port GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] qinq enable downlink
# Enable customer-side QinQ on port group 1.
<Sysname> system-view
[Sysname] port-group manual 1
[Sysname-port-group-manual-1] group-member gigabitethernet 1/0/1 to gigabitethernet 1/0/6
[Sysname-port-group-manual-1] qinq enable downlink
qinq enable uplink
Description
Use the qinq enable uplink command to enable network-side QinQ on an Ethernet port.
Use the undo qinq enable command to disable network-side QinQ on the Ethernet port.
By default, network-side QinQ is disabled on Ethernet ports.
Enable or disable network-side QinQ on one port in Ethernet interface view or on a group of ports in port
group view.
Syntax
qinq enable uplink
undo qinq enable
View
Layer 2 Ethernet interface view, port group view
Default level
2: System level
207
Parameters
None
Examples
# Enable network-side QinQ on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] qinq enable uplink
# Enable network-side QinQ on port group 1.
<Sysname> system-view
[Sysname] port-group manual 1
[Sysname-port-group-manual-1] group-member gigabitethernet 1/0/1 to gigabitethernet 1/0/6
[Sysname-port-group-manual-1] qinq enable uplink
remark customer-vlan-id
Description
Use the remark customer-vlan-id command to add a CVLAN marking action to a traffic behavior.
Use the undo remark customer-vlan-id command to remove the action from the traffic behavior.
The remark customer-vlan-id action cannot be applied to a VLAN or applied globally.
Syntax
remark customer-vlan-id vlan-id
undo remark customer-vlan-id
View
Traffic behavior view
Default level
2: System level
Parameter
vlan-id: Specifies a customer VLAN (CVLAN) ID, ranging from 1 to 4094.
Example
# Configure traffic behavior b1 to mark matching packets with CVLAN 111.
<Sysname> system-view
[Sysname] traffic behavior b1
[Sysname-behavior-b1] remark customer-vlan-id 111
remark service-vlan-id
Description
Use the remark service-vlan-id command to add an SVLAN marking action to a traffic behavior.
Use the undo remark service-vlan-id command to remove the action from the traffic behavior.
208
The remark service-vlan-id action cannot be applied to a VLAN or applied globally.
Syntax
remark service-vlan-id vlan-id
undo remark service-vlan-id
View
Traffic behavior view
Default level
2: System level
Parameter
vlan-id: Specifies a service-provider VLAN (SVLAN) ID, ranging from 1 to 4094.
Example
# Configure traffic behavior b1 to mark matching packets with SVLAN 222.
<Sysname> system-view
[Sysname] traffic behavior b1
[Sysname-behavior-b1] remark service-vlan-id 222
209
LLDP configuration commands
Both bridge mode (Layer 2) and route mode (Layer 3) Ethernet ports support LLDP. The term interface in
this chapter collectively refers to these two types of ports. You can use the port link-mode command to set
an Ethernet port to operate in bridge or route mode (see Layer 2—LAN Switching Configuration Guide).
display lldp local-information
Description
Use the display lldp local-information command to display the LLDP information to be sent, which will be
contained in the LLDP TLVs and sent to neighbor devices.
If no keyword or parameter is specified, this command displays all LLDP information to be sent, including
the global LLDP information and the LLDP information about the LLDP-enabled ports in the up state.
Syntax
display lldp local-information [ global | interface interface-type interface-number ] [ | { begin | exclude
| include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
global: Displays the global LLDP information to be sent.
interface interface-type interface-number: Displays the LLDP information to be sent out the interface
specified by its type and number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display all LLDP information to be sent.
<Sysname> display lldp local-information
Global LLDP local-information:
Chassis ID
: 00e0-fc00-5600
System name
: Sysname
System description : HP Comware Platform Software
System capabilities supported : Bridge,Router
210
System capabilities enabled
: Bridge,Router
MED information
Device class: Connectivity device
(MED inventory information of master board)
HardwareRev
: REV.A
FirmwareRev
: 109
SoftwareRev
: 5.20 Alpha 2101
SerialNum
: NONE
Manufacturer name
: HP
Model name
: HP Comware
Asset tracking identifier : Unknown
LLDP local-information of port 1[GigabitEthernet1/0/1]:
Port ID subtype
: Interface name
Port ID
: GigabitEthernet1/0/1
Port description : GigabitEthernet1/0/1 Interface
Management address type
: ipv4
Management address
: 192.168.1.11
Management address interface type : IfIndex
Management address interface ID
: 54
Management address OID
: 0
Port VLAN ID(PVID): 1
Port and protocol VLAN ID(PPVID) : 1
Port and protocol VLAN supported : Yes
Port and protocol VLAN enabled
: No
VLAN name of VLAN 1: VLAN 0001
Auto-negotiation supported : Yes
Auto-negotiation enabled
: Yes
OperMau
: speed(1000)/duplex(Full)
PoE supported: No
Link aggregation supported : Yes
Link aggregation enabled
: No
Aggregation port ID
: 0
Maximum frame Size: 1536
MED information
Media policy type
: Unknown
Unknown Policy
: Yes
211
VLAN tagged
: No
Media policy VlanID
: 0
Media policy L2 priority : 0
Media policy Dscp
: 0
Table 45 Command output
Field
Description
Global LLDP local-information
Global LLDP information to be sent.
Chassis ID
Bridge MAC address of the device.
Supported capabilities:
System capabilities supported
Bridge—Switching is supported.
Router—Routing is supported.
Enabled capabilities:
System capabilities enabled
Bridge—Switching is enabled.
Router—Routing is enabled.
MED device class:
Connectivity device—Network device.
Class I—Normal terminal device. It requires the basic LLDP discovery
services.
Device class
Class II—Media terminal device. It supports media streams, and can
also function as a normal terminal device.
Class III—Communication terminal device. It supports the IP
communication systems of end users, and can also function as a
normal terminal device or media terminal device.
MED inventory information of
master board
MED inventory information of the master of the IRF fabric.
HardwareRev
Hardware version.
FirmwareRev
Firmware version.
SoftwareRev
Software version.
SerialNum
Serial number.
Manufacturer name
Device manufacturer.
Model name
Device model.
LLDP local-information of port 1
LLDP information to be sent out port 1.
Port ID subtype
Port ID type, which can be MAC address or interface name.
Port ID
Port ID, the value of which depends on the port ID subtype.
Management address interface
type
Numbering type of the interface identified by the management address.
Management address interface
ID
Index of the interface identified by the management address.
Management address OID
Management address object ID.
Port and protocol VLAN
ID(PPVID)
Port protocol VLAN ID.
212
Field
Description
Port and protocol VLAN
supported
Indicates whether protocol VLAN is supported on the port.
Port and protocol VLAN enabled
Indicates whether protocol VLAN is enabled on the port.
VLAN name of VLAN 1
Name of VLAN 1.
Auto-negotiation supported
Indicates whether auto-negotiation is supported on the port.
Auto-negotiation enabled
Indicates whether auto-negotiation is enabled on the port.
OperMau
Speed and duplex state of the port.
PoE supported
Indicates whether PoE is supported on the port.
Link aggregation supported
Indicates whether link aggregation is supported.
Link aggregation enabled
Indicates whether link aggregation is enabled.
Aggregation port ID
Aggregation group ID, which is 0 when link aggregation is disabled.
MED information
MED LLDP information.
Media policy type:
unknown
voice
voiceSignaling
Media policy type
guestVoice
guestVoiceSignaling
softPhoneVoice
videoconferencing
streamingVideo
videoSignaling
Unknown Policy
Indicates whether the media policy is unknown.
VLAN tagged
Indicates whether packets of the media VLAN are tagged.
Media Policy VlanID
ID of the media VLAN.
Media Policy L2 priority
Layer 2 priority.
Media Policy Dscp
DSCP precedence.
Location information format:
Invalid—Format of the location information is invalid.
Location format
Coordinate-based LCI—Location information is coordinate-based.
Civic Address LCI—Typical address information.
ECS ELIN—Telephone number for urgencies.
display lldp neighbor-information
Description
Use the display lldp neighbor-information command to display the LLDP information carried in LLDP TLVs
sent from the neighboring devices.
213
Syntax
display lldp neighbor-information [ brief | interface interface-type interface-number [ brief ] | list [
system-name system-name ] ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
brief: Displays the summary of LLDP information sent from the neighboring devices. If this parameter is not
specified, this command displays detailed LLDP information sent from the neighboring devices.
interface interface-type interface-number: Displays the LLDP information sent from the neighboring devices
received through a port specified by its type and number. If this option is not specified, this command
displays the LLDP information sent from the neighboring devices received through all ports.
list: Displays the LLDP information sent from the neighboring devices in the form of a list.
system-name system-name: Displays the LLDP information sent from a neighboring device specified by its
system name. The system-name parameter is a character string of 1 to 255 characters. If this option is not
specified, this command displays the LLDP information sent from all neighboring devices in a list.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Examples
# Display the LLDP information sent from the neighboring devices received through all ports.
<Sysname> display lldp neighbor-information
LLDP neighbor-information of port 1[GigabitEthernet1/0/1]:
Neighbor index
: 1
Update time
: 0 days,0 hours,1 minutes,1 seconds
Chassis type
: MAC address
Chassis ID
: 000f-0055-0002
Port ID type
: Interface name
Port ID
: GigabitEthernet1/0/1
Port description : GigabitEthernet1/0/1 Interface
System name
: HP
System description : HP Comware Platform Software
System capabilities supported : Repeater,Bridge,Router
System capabilities enabled
: Repeater,Bridge,Router
Management address type
: ipv4
Management address
: 192.168.1.55
214
Management address interface type : IfIndex
Management address interface ID
: Unknown
Management address OID
: 0
Port VLAN ID(PVID): 1
Port and protocol VLAN ID(PPVID) : 1
Port and protocol VLAN supported : Yes
Port and protocol VLAN enabled
: No
VLAN name of VLAN 1: VLAN 0001
Auto-negotiation supported : Yes
Auto-negotiation enabled
: Yes
OperMau
: speed(1000)/duplex(Full)
Power port class
: PD
PSE power supported
: No
PSE power enabled
: No
PSE pairs control ability : No
Power pairs
: Signal
Port power classification : Class 0
Link aggregation supported : Yes
Link aggregation enabled
: No
Aggregation port ID
: 0
Maximum frame Size: 1536
# Display the LLDP information sent from all neighboring devices in a list.
<Sysname> display lldp neighbor-information list
System Name
Local Interface Chassis ID
Port ID
System1
GE1/0/1
000f-e25d-ee91 GigabitEthernet1/0/5
System2
GE1/0/2
000f-e25d-ee92 GigabitEthernet1/0/6
System3
GE1/0/3
000f-e25d-ee93 GigabitEthernet1/0/7
Table 46 Command output
Field
Description
LLDP neighbor-information of port 1
LLDP information received through port 1
Update time
Time when LLDP information about a neighboring device was last
updated
215
Field
Description
Chassis information:
Chassis component
Interface alias
Chassis type
Port component
MAC address
Network address (the IP address type, such as ipv4)
Interface name
Locally assigned—Indicates the local configuration
Chassis ID
ID that identifies the LLDP sending device, which can be a MAC
address, a network address, an interface or some other value
depending on the chassis type
Port information:
Interface alias
Port component
Port ID type
MAC address
Network address (the IP address type, such as ipv4)
Interface name
Agent circuit ID
Locally assigned—Indicates the local configuration
Port ID
Value of the port ID type
System name
System name of the neighboring device
System description
System description of the neighboring device
Capabilities supported on the neighboring device:
System capabilities supported
Repeater—Signal repeating is supported
Bridge—Switching is supported
Router—Routing is supported
Capabilities enabled on the neighboring device:
System capabilities enabled
Repeater—Signal repeating is enabled
Bridge—Switching is enabled
Router—Routing is enabled
Management address OID
Management address object ID
Port and protocol VLAN ID(PPVID)
Port protocol VLAN ID
Port and protocol VLAN supported
Indicates whether protocol VLAN is supported on the port
Port and protocol VLAN enabled
Indicates whether protocol VLAN is enabled on the port
VLAN name of VLAN 1
Name of VLAN 1
Auto-negotiation supported
Indicates whether auto-negotiation is supported on the port
Auto-negotiation enabled
Indicates whether auto-negotiation is enabled on the port
OperMau
Speed and duplex state on the port
PoE device type:
Power port class
PSE—Power sourcing equipment
PD—Powered device
216
Field
Description
PSE power supported
Indicates whether the device can operate as a PSE
PSE power enabled
Indicates whether the device is operating as a PSE
PSE pairs control ability
Indicates whether the PSE-PD pair control is available
PoE mode:
Power pairs
Signal—PoE via signal lines
Spare—PoE via spare lines
Port power classification of the PD:
Class 0
Port power classification
Class 1
Class 2
Class 3
Class 4
Link aggregation supported
Indicates whether link aggregation is supported
Link aggregation enabled
Indicates whether link aggregation is enabled
Aggregation port ID
Aggregation group ID, which is 0 when link aggregation is
disabled
Location information format:
Invalid—The format of the location information is invalid
Location format
Coordinate-based LCI—The location information is coordinatebased
Civic Address LCI—Typical address information
ECS ELIN—Telephone for urgencies
PSE power type:
PoE PSE power source
Unknown—Unknown power supply
Primary—Primary power supply
Backup—Backup power supply
PD power type:
Unknown—Unknown power supply
PoE PD power source
PSE—PSE power supply
Local—Local power supply
PSE and local—PSE and local power supplies
PoE power supply priority of PSE ports:
Unknown
Port PSE Priority
Critical
High
Low
PoE power receiving priority of PD ports:
Unknown
Port PD Priority
Critical
High
Low
217
Field
Description
Port available power value
Available PoE power on PSE ports, or power needed on PD ports,
in watts
TLV type
Unknown basic TLV type
TLV information
Information contained in the unknown basic TLV type
Unknown organizationally-defined
TLV
Unknown organizationally specific TLV
TLV OUI
OUI of the unknown organizationally specific TLV
TLV subtype
Unknown organizationally specific TLV subtype
Index
Unknown organization index
TLV information
Information contained in unknown organizationally specific TLV
Local Interface
Local port that receives the LLDP information
display lldp statistics
Description
Use the display lldp statistics command to display the global LLDP statistics or the LLDP statistics of a port.
If no keyword or parameter is specified, this command displays the global LLDP statistics as well as the
LLDP statistics of all ports.
Syntax
display lldp statistics [ global | interface interface-type interface-number ] [ | { begin | exclude | include
} regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
global: Displays the global LLDP statistics.
interface interface-type interface-number: Specifies a port by its type and number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the global LLDP statistics as well as the LLDP statistics of all ports.
<Sysname> display lldp statistics
218
LLDP statistics global Information:
LLDP neighbor information last change time:0 days,0 hours,4 minutes,40 seconds
The number of LLDP neighbor information inserted : 1
The number of LLDP neighbor information deleted
: 1
The number of LLDP neighbor information dropped
: 0
The number of LLDP neighbor information aged out : 1
LLDP statistics information of port 1 [GigabitEthernet1/0/1]:
The number of LLDP frames transmitted
: 0
The number of LLDP frames received
: 0
The number of LLDP frames discarded
: 0
The number of LLDP error frames
: 0
The number of LLDP TLVs discarded
: 0
The number of LLDP TLVs unrecognized
: 0
The number of LLDP neighbor information aged out : 0
Table 47 Command output
Field
Description
LLDP statistics global information
Global LLDP statistics
LLDP neighbor information last change time
Time the neighbor information was last updated
The number of LLDP neighbor information inserted
Number of times of adding neighbor information
The number of LLDP neighbor information deleted
Number of times of removing neighbor information
The number of LLDP neighbor information dropped
Number of times of dropping neighbor information
due to lack of available memory space
display lldp status
Description
Use the display lldp status command to display LLDP status information.
If no port is specified, this command displays the global LLDP status and the LLDP status information for all
ports.
Syntax
display lldp status [ interface interface-type interface-number ] [ | { begin | exclude | include } regularexpression ]
View
Any view
Default level
1: Monitor level
Parameters
interface interface-type interface-number: Specifies a port by its type and number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
219
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the global LLDP status as well as the LLDP status information of all ports.
<Sysname> display lldp status
Global status of LLDP: Enable
The current number of LLDP neighbors: 0
The current number of CDP neighbors: 0
LLDP neighbor information last changed time: 0 days,0 hours,4 minutes,40 seconds
Transmit interval
: 30s
Hold multiplier
: 4
Reinit delay
: 2s
Transmit delay
: 2s
Trap interval
: 5s
Fast start times
: 3
Port 1 [GigabitEthernet1/0/1]:
Port status of LLDP
: Enable
Admin status
: Tx_Rx
Trap flag
: No
Polling interval
: 0s
Number of neighbors
: 5
Number of MED neighbors
: 2
Number of sent optional TLV
: 12
Number of received unknown TLV : 5
Table 48 Command output
Field
Description
Global status of LLDP
Indicates whether LLDP is globally enabled
LLDP neighbor information last
changed time
Time when the neighbor information was last updated
Transmit interval
LLDPDU transmit interval
Hold multiplier
TTL multiplier
Reinit delay
LLDP re-initialization delay
Transmit delay
LLDPDU transmit delay
Trap interval
Trap transmit interval
Fast start times
Number of the LLDPDUs sent each time fast LLDPDU transmission is
triggered
Port 1
LLDP status of port 1
Port status of LLDP
Indicates whether LLDP is enabled on the port
220
Field
Description
LLDP mode of the port:
TxRx—Port sends and receives LLDPDUs
Admin status
Rx_Only— Port only receives LLDPDUs
Tx_Only— Port only sends LLDPDUs
Disable— Port does not send or receive LLDPDUs
Trap Flag
Indicates whether trapping is enabled
Polling interval
LLDP polling interval, which is 0 when LLDP polling is disabled
Number of neighbors
Number of LLDP neighbors connecting to the port
Number of MED neighbors
Number of MED neighbors connecting to the port
Number of CDP neighbors
Number of CDP neighbors connecting to the port
Number of sent optional TLV
Number of optional TLVs contained in an LLDPDU sent through the
port
Number of received unknown TLV
Number of unknown TLVs contained in a received LLDPDU
display lldp tlv-config
Description
Use the display lldp tlv-config command to display the types of advertisable optional LLDP TLVs of a port.
If no port is specified, this command displays the types of advertisable optional TLVs of each port.
Syntax
display lldp tlv-config [ interface interface-type interface-number ] [ | { begin | exclude | include }
regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
interface interface-type interface-number: Specifies a port by its type and number.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display the types of advertisable optional LLDP TLVs of interface GigabitEthernet 1/0/1.
<Sysname> display lldp tlv-config interface gigabitethernet 1/0/1
221
LLDP tlv-config of port 1[GigabitEthernet1/0/1]:
NAME
STATUS
DEFAULT
Port Description TLV
YES
YES
System Name TLV
YES
YES
System Description TLV
YES
YES
System Capabilities TLV
YES
YES
Management Address TLV
YES
YES
Port VLAN ID TLV
YES
YES
Port And Protocol VLAN ID TLV
YES
YES
VLAN Name TLV
YES
YES
MAC-Physic TLV
YES
YES
Power via MDI TLV
YES
YES
Basic optional TLV:
IEEE 802.1 extend TLV:
IEEE 802.3 extend TLV:
Link Aggregation TLV
YES
YES
Maximum Frame Size TLV
YES
YES
LLDP-MED extend TLV:
Capabilities TLV
YES
YES
Network Policy TLV
YES
YES
Location Identification TLV
NO
NO
Extended Power via MDI TLV
YES
YES
Inventory TLV
YES
YES
Table 49 Command output
Field
Description
LLDP tlv-config of port 1
Advertisable optional TLVs of port 1
NAME
TLV type
STATUS
Indicates whether a specific type of TLV is sent through a port
DEFAULT
Indicates whether a specific type of TLV is sent through a port by
default
Basic TLVs:
Port description TLV
Basic optional TLV
System name TLV
System description TLV
System capabilities TLV
Management address TLV
IEEE 802.1 organizationally specific TLVs:
IEEE 802.1 extended TLV
Port VLAN ID TLV
Port and protocol VLAN ID TLV
VLAN name TLV
222
Field
Description
IEEE 802.3 organizationally specific TLVs:
MAC-Physic TLV
IEEE 802.3 extended TLV
Power via MDI TLV
Link aggregation TLV
Maximum frame size TLV
LLDP-MED TLVs:
Capabilities TLV
Network Policy TLV
LLDP-MED extend TLV
Extended Power-via-MDI TLV
Location Identification TLV
Inventory TLV, including hardware revision TLV, firmware revision
TLV, software revision TLV, serial number TLV, manufacturer name
TLV, model name TLV, and asset id TLV
lldp admin-status
Description
Use the lldp admin-status command to specify the LLDP operating mode for a port or all ports in a port
group.
Use the undo lldp admin-status command to restore the default LLDP operating mode.
By default, the LLDP operating mode is TxRx.
Syntax
lldp admin-status { disable | rx | tx | txrx }
undo lldp admin-status
View
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view
Default level
2: System level
Parameters
disable: Specifies the Disable mode. A port in this mode does not send or receive LLDPDUs.
rx: Specifies the Rx mode. A port in this mode only receives LLDPDUs.
tx: Specifies the Tx mode. A port in this mode only sends LLDPDUs.
txrx: Specifies the TxRx mode. A port in this mode sends and receives LLDPDUs.
Example
# Configure the LLDP operating mode as Rx for GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] lldp admin-status rx
223
lldp check-change-interval
Description
Use the lldp check-change-interval command to enable LLDP polling and set the polling interval.
Use the undo lldp check-change-interval command to restore the default.
By default, LLDP polling is disabled.
Syntax
lldp check-change-interval interval
undo lldp check-change-interval
View
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view
Default level
2: System level
Parameter
interval: Sets the LLDP polling interval, ranging from 1 to 30 seconds.
Example
# Enable LLDP polling on GigabitEthernet 1/0/1, setting the polling interval to 30 seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] lldp check-change-interval 30
lldp enable
Description
Use the lldp enable command to enable LLDP.
Use the undo lldp enable command to disable LLDP.
By default, LLDP is enabled on a port and globally.
LLDP takes effect on a port only when LLDP is enabled both globally and on the port.
Syntax
lldp enable
undo lldp enable
View
System view, Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
224
Example
# Disable LLDP on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] undo lldp enable
lldp encapsulation snap
Description
Use the lldp encapsulation snap command to configure the encapsulation format for LLDPDUs as SNAP
on a port or a group of ports.
Use the undo lldp encapsulation command to restore the default encapsulation format for LLDPDUs.
By default, the encapsulation format for LLDPDUs is Ethernet II.
The command does not apply to LLDP-CDP packets, which use only SNAP encapsulation.
Syntax
lldp encapsulation snap
undo lldp encapsulation
View
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Example
# Configure the encapsulation format for LLDPDUs as SNAP on GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] lldp encapsulation snap
lldp fast-count
Description
Use the lldp fast-count command to set the number of the LLDPDUs sent each time fast LLDPDU
transmission is triggered.
Use the undo lldp fast-count command to restore the default.
By default, the number is 3.
Syntax
lldp fast-count count
undo lldp fast-count
225
View
System view
Default level
2: System level
Parameter
count: Sets the number of the LLDPDUs sent each time fast LLDPDU transmission is triggered. The
parameter ranges from 1 to 10.
Example
# Configure the device to send four LLDPDUs each time fast LLDPDU transmission is triggered.
<Sysname> system-view
[Sysname] lldp fast-count 4
lldp hold-multiplier
Description
Use the lldp hold-multiplier command to set the TTL multiplier.
Use the undo lldp hold-multiplier command to restore the default.
By default, the TTL multiplier is 4.
You can set the TTL of the local device information by configuring the TTL multiplier.
The TTL configuration of a device is determined by the following expression:
TTL multiplier × LLDPDU transmit interval
The TTL can be up to 65,535 seconds. Longer TTLs will be rounded off to 65,535 seconds.
Related commands: lldp timer tx-interval.
Syntax
lldp hold-multiplier value
undo lldp hold-multiplier
View
System view
Default level
2: System level
Parameter
value: Sets the TTL multiplier, ranging from 2 to 10.
Example
# Set the TTL multiplier to 6.
<Sysname> system-view
[Sysname] lldp hold-multiplier 6
226
lldp management-address-format string
Description
Use the lldp management-address-format string command to encapsulate the management address in
the form of strings in TLVs.
Use the undo lldp management-address-format command to restore the default.
By default, the management address is encapsulated in the form of numbers in TLVs.
Syntax
lldp management-address-format string
undo lldp management-address-format
View
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Example
# Configure GigabitEthernet 1/0/1 to encapsulate the management address in the form of strings in
management address TLVs.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] lldp management-address-format string
lldp management-address-tlv
Description
Use the lldp management-address-tlv command to enable management address advertising and set the
management address.
Use the undo lldp management-address-tlv command to disable management address advertising in
LLDPDUs.
By default, the management address is advertised through LLDPDUs. For a Layer 2 Ethernet port, the
management address is the main IP address of the lowest-ID VLAN carried on the port. If none of the
carried VLANs is assigned an IP address, no management address will be advertised. For a Layer 3
Ethernet port, the management address is its own IP address. If no IP address is configured for the Layer 3
Ethernet port, no management address will be advertised.
An LLDPDU carries only one management address TLV. If you set the management address repeatedly, the
latest one takes effect.
In Layer 2 Ethernet interface view, if you run the lldp management-address-tlv command without
specifying the ip-address parameter, the advertised management address is the main IP address of the
lowest-ID VLAN carried on the interface. If none of the carried VLANs is assigned an IP address, no
management address will be advertised.
227
In Layer 3 Ethernet interface view, if you run the lldp management-address-tlv command without
specifying the ip-address parameter, the advertised management address is the IP address of the Layer 3
Ethernet port. If no IP address is configured for the port, no management address will be advertised.
Syntax
lldp management-address-tlv [ ip-address ]
undo lldp management-address-tlv
View
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view
Default level
2: System level
Parameter
ip-address: Specifies a management address to be advertised in LLDPDUs.
Example
# Set the management address to 192.6.0.1 for GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] lldp management-address-tlv 192.6.0.1
lldp notification remote-change enable
Description
Use the lldp notification remote-change enable command to enable LLDP trapping for a port or all ports
in a port group.
Use the undo lldp notification remote-change enable command to restore the default.
By default, LLDP trapping is disabled on ports.
Syntax
lldp notification remote-change enable
undo lldp notification remote-change enable
View
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view
Default level
2: System level
Parameters
None
Example
# Enable LLDP trapping for GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
228
[Sysname-GigabitEthernet1/0/1] lldp notification remote-change enable
lldp timer notification-interval
Description
Use the lldp timer notification-interval command to set the LLDP trap transmit interval.
Use the undo lldp timer notification-interval command to restore the default.
By default, the LLDP trap transmit interval is 5 seconds.
Syntax
lldp timer notification-interval interval
undo lldp timer notification-interval
View
System view
Default level
2: System level
Parameter
interval: Sets the LLDP trap transmit interval, ranging from 5 to 3600 seconds.
Example
# Set the LLDP trap transmit interval to 8 seconds.
<Sysname> system-view
[Sysname] lldp timer notification-interval 8
lldp timer reinit-delay
Description
Use the lldp timer reinit-delay command to set the LLDP re-initialization delay.
Use the undo lldp timer reinit-delay command to restore the default.
By default, the LLDP re-initialization delay is 2 seconds.
Syntax
lldp timer reinit-delay delay
undo lldp timer reinit-delay
View
System view
Default level
2: System level
Parameter
delay: Sets the LLDP re-initialization delay, ranging from 1 to 10 seconds.
229
Example
# Set the LLDP re-initialization delay to 4 seconds.
<Sysname> system-view
[Sysname] lldp timer reinit-delay 4
lldp timer tx-delay
Description
Use the lldp timer tx-delay command to set the LLDPDU transmit delay.
Use the undo lldp timer tx-delay command to restore the default.
By default, the LLDPDU transmit delay is 2 seconds.
It is a good practice to set the LLDPDU transmit delay to be no greater than a quarter of the LLDPDU
transmit interval.
If the LLDPDU transmit delay is greater than the LLDPDU transmit interval, the device uses the LLDPDUs
transmit delay as the transmit interval.
Related commands: lldp timer tx-interval.
Syntax
lldp timer tx-delay delay
undo lldp timer tx-delay
View
System view
Default level
2: System level
Parameter
delay: Sets the LLDPDU transmit delay, ranging from 1 to 8192 seconds.
Example
# Set the LLDPDU transmit delay to 4 seconds.
<Sysname> system-view
[Sysname] lldp timer tx-delay 4
lldp timer tx-interval
Description
Use the lldp timer tx-interval command to set the LLDPDU transmit interval.
Use the undo lldp timer tx-interval command to restore the default.
By default, the LLDPDU transmit interval is 30 seconds.
It is a good practice to set the LLDPDU transmit interval to be no less than four times the LLDPDU transmit
delay.
230
If the LLDPDU transmit interval is less than the LLDPDU transmit delay, the device uses the LLDPDUs
transmit delay as the transmit interval.
Related commands: lldp timer tx-delay.
Syntax
lldp timer tx-interval interval
undo lldp timer tx-interval
View
System view
Default level
2: System level
Parameter
interval: Sets the LLDPDU transmit interval, ranging from 5 to 32,768 seconds.
Example
# Set the LLDPDU transmit interval to 20 seconds.
<Sysname> system-view
[Sysname] lldp timer tx-interval 20
lldp tlv-enable
Description
Use the lldp tlv-enable command to configure the types of advertisable TLVs for a port or all ports in a
port group.
Use the undo lldp tlv-enable command to disable the advertising of specific types of TLVs.
By default, the device can advertise on a Layer 2 Ethernet port all types of LLDP TLVs, except location
identification TLVs, and advertise on a Layer 3 Ethernet port all types of LLDP TLVs, except IEEE 802.1
organizationally specific TLVs, network policy TLVs, and location identification TLVs.
To enable the device to advertise LLDP-MED TLVs, you must first enable it to advertise LLDP-MED
capabilities TLVs.
To disable the device from advertising LLDP-MED capabilities TLVs, you must first disable it from
advertising other LLDP-MED TLVs.
To disable the device from advertising MAC/PHY configuration/status TLVs, you must first disable it from
advertising LLDP-MED capabilities TLVs.
If you enable the device to advertise LLDP-MED capabilities TLVs, you also enable it to advertise
MAC/PHY configuration/status TLVs.
To enable the device to advertise multiple types of TLVs, you can execute the lldp tlv-enable command
repeatedly without the all parameter specified.
Syntax
In Layer 2 Ethernet interface view or port group view:
lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name
} | dot1-tlv { all | port-vlan-id | protocol-vlan-id [ vlan-id ] | vlan-name [ vlan-id ] } | dot3-tlv { all |
231
link-aggregation | mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory |
location-id { civic-address device-type country-code { ca-type ca-value }&<1-10> | elin-address tel-number
} | network-policy | power-over-ethernet } }
undo lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | systemname } | dot1-tlv { all | port-vlan-id | protocol-vlan-id | vlan-name } | dot3-tlv { all | link-aggregation
| mac-physic | max-frame-size | power } | med-tlv { all | capability | inventory | location-id |
network-policy | power-over-ethernet } }
In Layer 3 Ethernet interface view:
lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | system-name
} | dot3-tlv { all | link-aggregation | mac-physic | max-frame-size | power } | med-tlv { all | capability
| inventory | location-id { civic-address device-type country-code { ca-type ca-value }&<1-10> | elinaddress tel-number } | power-over-ethernet } }
undo lldp tlv-enable { basic-tlv { all | port-description | system-capability | system-description | systemname } | dot3-tlv { all | link-aggregation | mac-physic | max-frame-size | power } | med-tlv { all |
capability | inventory | location-id | power-over-ethernet } }
View
Layer 2 Ethernet interface view, Layer 3 Ethernet interface view, port group view
Default level
2: System level
Parameters
all: Advertises all basic LLDP TLVs, IEEE 802.1 organizationally specific LLDP TLVs, or IEEE 802.3
organizationally specific LLDP TLVs when the all parameter is specified for basic-tlv, dot1-tlv, or dot3-tlv in
Layer 2 Ethernet interface view; advertises all basic LLDP TLVs or IEEE 802.3 organizationally specific
LLDP TLVs when the all parameter is specified for basic-tlv or dot3-tlv in Layer 3 Ethernet interface view;
or advertises all LLDP-MED TLVs except location identification TLVs when the all parameter is specified for
med-tlv, regardless of whether in Layer 2 or Layer 3 Ethernet interface view.
basic-tlv: Advertises basic LLDP TLVs.
port-description: Advertises port description TLVs.
system-capability: Advertises system capabilities TLVs.
system-description: Advertises system description TLVs.
system-name: Advertises system name TLVs.
dot1-tlv: Advertises IEEE 802.1 organizationally specific LLDP TLVs.
port-vlan-id: Advertises port VLAN ID TLVs.
protocol-vlan-id: Advertises port and protocol VLAN ID TLVs.
vlan-name: Advertises VLAN name TLVs.
vlan-id: Specifies a VLAN ID in the TLVs to be advertised. The parameter ranges from 1 to 4094 and
defaults to the least VLAN ID on the port.
dot3-tlv: Advertises IEEE 802.3 organizationally specific LLDP TLVs.
link-aggregation: Advertises link aggregation TLVs.
mac-physic: Advertises MAC/PHY configuration/status TLVs.
232
max-frame-size: Advertises maximum frame size TLVs.
power: Advertises power via MDI TLVs and power stateful control TLVs.
med-tlv: Advertises LLDP-MED TLVs.
capability: Advertises LLDP-MED capabilities TLVs.
inventory: Advertises the following TLVs: hardware revision, firmware revision, software revision, serial
number, manufacturer name, model name, and asset ID.
location-id: Advertises location identification TLVs.
civic-address: Inserts the normal address information about the network device in location identification
TLVs .
device-type: Sets a device type value, ranging from 0 to 2. Value 0 specifies a DHCP server. Value 1
specifies a switch. Value 2 specifies an LLDP-MED endpoint.
country-code: Sets a country code, corresponding to ISO 3166.
{ ca-type ca-value }&<1-10>: Configures address information, where ca-type represents the address
information type, ranging from 0 to 255, ca-value represents address information, a string of 1 to 250
characters, and &<1-10> indicates that you can enter up to 10 parameters.
elin-address: Inserts telephone numbers for emergencies in location identification TLVs.
tel-number: Sets the telephone number for emergencies, a string of 10 to 25 characters.
network-policy: Advertises network policy TLVs.
power-over-ethernet: Advertises extended power-via-MDI TLVs.
Example
# Enable the device to advertise link aggregation TLVs of the IEEE 802.3 organizationally specific TLVs on
GigabitEthernet 1/0/1.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] lldp tlv-enable dot3-tlv link-aggregation
233
Service loopback group configuration
commands
display service-loopback group
Description
Use the display service-loopback group command to display information of the specified service
loopback group or all service loopback groups.
Syntax
display service-loopback group [ number ] [ | { begin | exclude | include } regular-expression ]
View
Any view
Default level
1: Monitor level
Parameters
number: Specifies the ID of the service loopback group to be displayed. If no service loopback group is
specified, information of all service loopback groups is displayed.
|: Filters command output by specifying a regular expression. For more information about regular
expressions, see Fundamentals Configuration Guide.
begin: Displays the first line that matches the specified regular expression and all lines that follow.
exclude: Displays all lines that do not match the specified regular expression.
include: Displays all lines that match the specified regular expression.
regular-expression: Specifies a regular expression, a case-sensitive string of 1 to 256 characters.
Example
# Display information of service loopback group 5.
<Sysname> display service-loopback group 5
Service Group ID:
5
Quote Number: 0
Service Type: tunnel
Member
Status
-------------------------------------------------------------------------------GE1/0/1
Selected
GE1/0/2
Selected
234
Table 50 Command output
Field
Description
Service Group ID
Service loopback group ID
Quote Number
Reference count of the service loopback group
Service type of the service loopback group:
Service Type
Multicast tunnel, supporting multicast tunnel traffic
Tunnel, supporting unicast tunnel traffic
Member
Member ports of the service loopback group
Status
Port state, which can be selected or unselected
port service-loopback group
Description
Use the port service-loopback group command to assign the current port to the specified service
loopback group.
Use the undo port service-loopback group command to remove the current port from the specified service
loopback group.
By default, a port does not belong to any service loopback group.
To assign multiple ports to a service loopback group, run this command on multiple ports separately.
You cannot remove the last member port of a referenced service loopback group.
Syntax
port service-loopback group number
undo port service-loopback group
View
Layer 2 Ethernet interface view
Default level
2: System level
Parameter
number: Specifies the service loopback group ID.
Example
# Assign interface GigabitEthernet 1/0/1 to service loopback group 5.
<Sysname> system-view
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] port service-loopback group 5
235
service-loopback group
Description
Use the service-loopback group command to create a service loopback group and specify its service
type.
Use the undo service-loopback group command to remove a service loopback group.
A service loopback group can be referenced by other features once it is created, and can process service
traffic only after it is referenced. A service loopback group may be referenced by multiple features at the
same time.
You can change the service type of an existing service loopback group. For the change to be successful,
verify the following conditions:
The service group has not been referenced.
The attributes of all member ports (if any) are not conflicting with the target service type
No service loopback group has been created for the target service type. Only one service loopback
group is allowed for a service type.
You cannot remove a service loopback group that is referenced by other features.
Syntax
service-loopback group number type tunnel
undo service-loopback group number
View
System view
Default level
2: System level
Parameters
number: Specifies the service loopback group ID, ranging from 1 to 1024.
type: Specifies the service type of a service loopback group.
tunnel: Specifies the service type of a service loopback group as Tunnel (unicast tunnel service).
Example
# Configure service loopback group 5 and specify its service type as Tunnel.
<Sysname> system-view
[Sysname] service-loopback group 5 type tunnel
236
Support and other resources
Contacting HP
For worldwide technical support information, see the HP support website:
http://www.hp.com/support
Before contacting HP, collect the following information:
Product model names and numbers
Technical support registration number (if applicable)
Product serial numbers
Error messages
Operating system type and revision level
Detailed questions
Subscription service
HP recommends that you register your product at the Subscriber's Choice for Business website:
http://www.hp.com/go/wwalerts
After registering, you will receive email notification of product enhancements, new driver versions,
firmware updates, and other product resources.
Related information
Documents
To find related documents, browse to the Manuals page of the HP Business Support Center website:
http://www.hp.com/support/manuals
For related documentation, navigate to the Networking section, and select a networking category.
For a complete list of acronyms and their definitions, see HP A-Series Acronyms.
Websites
HP.com http://www.hp.com
HP Networking http://www.hp.com/go/networking
HP manuals http://www.hp.com/support/manuals
HP download drivers and software http://www.hp.com/support/downloads
HP software depot http://www.software.hp.com
237
Conventions
This section describes the conventions used in this documentation set.
Command conventions
Convention
Description
Boldface
Bold text represents commands and keywords that you enter literally as shown.
Italic
Italic text represents arguments that you replace with actual values.
[]
Square brackets enclose syntax choices (keywords or arguments) that are optional.
{ x | y | ... }
Braces enclose a set of required syntax choices separated by vertical bars, from which
you select one.
[ x | y | ... ]
Square brackets enclose a set of optional syntax choices separated by vertical bars,
from which you select one or none.
{ x | y | ... } *
Asterisk-marked braces enclose a set of required syntax choices separated by vertical
bars, from which you select at least one.
[ x | y | ... ] *
Asterisk-marked square brackets enclose optional syntax choices separated by vertical
bars, from which you select one choice, multiple choices, or none.
&<1-n>
The argument or keyword and argument combination before the ampersand (&) sign
can be entered 1 to n times.
#
A line that starts with a pound (#) sign is comments.
GUI conventions
Convention
Description
Boldface
Window names, button names, field names, and menu items are in bold text. For
example, the New User window appears; click OK.
>
Multi-level menus are separated by angle brackets. For example, File > Create >
Folder.
Convention
Description
Symbols
WARNING
An alert that calls attention to important information that if not understood or followed
can result in personal injury.
CAUTION
An alert that calls attention to important information that if not understood or followed
can result in data loss, data corruption, or damage to hardware or software.
IMPORTANT
An alert that calls attention to essential information.
NOTE
TIP
An alert that contains additional or supplementary information.
An alert that provides helpful information.
238
Network topology icons
Represents a generic network device, such as a router, switch, or firewall.
Represents a routing-capable device, such as a router or Layer 3 switch.
Represents a generic switch, such as a Layer 2 or Layer 3 switch, or a router that
supports Layer 2 forwarding and other Layer 2 features.
Port numbering in examples
The port numbers in this document are for illustration only and might be unavailable on your device.
239
Index
ABCDEFGIJLMNPQRSUV
A
active region-configuration,88
B
display link-aggregation load-sharing mode,67
display link-aggregation member-port,69
display link-aggregation summary,71
display link-aggregation verbose,73
bpdu-drop any,88
display lldp local-information,210
bpdu-tunnel dot1q,140
display lldp neighbor-information,213
bpdu-tunnel tunnel-dmac,141
display lldp statistics,218
broadcast-suppression,25
display lldp status,219
C
display lldp tlv-config,221
check region-configuration,89
display loopback-detection,26
display mac-address,49
D
display mac-address aging-time,50
default,62
display mac-address statistics,51
default,40
display mac-vlan,163
default,143
display mac-vlan interface,165
default,1
display packet-drop interface,14
description,1
display packet-drop summary,15
description,40
display port,154
description,143
display port combo,16
description,62
display port-group manual,27
display counters,2
display port-isolate group,85
display counters rate,3
display protocol-vlan interface,169
display garp statistics,189
display protocol-vlan vlan,170
display garp timer,190
display service-loopback group,234
display gvrp local-vlan,191
display stp,90
display gvrp state,191
display stp abnormal-port,99
display gvrp statistics,193
display stp bpdu-statistics,100
display gvrp status,194
display stp down-port,103
display gvrp vlan-operation,195
display stp history,104
display interface,5
display stp ignored-vlan,106
display interface,63
display stp region-configuration,107
display interface loopback,41
display stp root,108
display interface null,44
display stp tc,109
display interface vlan-interface,144
display vlan,147
display ip-subnet-vlan interface,175
duplex,16
display ip-subnet-vlan vlan,176
E
display isolate-user-vlan,180
display lacp system-id,66
enable snmp trap updown,75
240
F
lldp notification remote-change enable,228
flow-interval,17
lldp timer notification-interval,229
G
garp timer hold,195
garp timer join,196
garp timer leave,197
garp timer leaveall,197
group-member,28
gvrp,198
gvrp registration,199
lldp timer reinit-delay,229
lldp timer tx-delay,230
lldp timer tx-interval,230
lldp tlv-enable,231
loopback,20
loopback-detection action,29
loopback-detection control enable,30
loopback-detection enable,30
loopback-detection interval-time,31
I
loopback-detection per-vlan enable,32
instance,111
M
interface,18
mac-address (interface view),52
interface bridge-aggregation,76
interface loopback,46
mac-address (system view),53
interface null,46
mac-address information enable (Ethernet interface
view),58
interface vlan-interface,149
mac-address information enable (system view),58
ip address,150
mac-address information interval,59
ip-subnet-vlan,177
mac-address information mode,60
isolated-vlan enable,183
mac-address information queue-length,60
isolate-user-vlan,182
mac-address mac-learning disable,54
isolate-user-vlan enable,183
mac-address max-mac-count,55
J
mac-address timer,56
jumboframe enable,18
L
mac-vlan enable,166
mac-vlan mac-address,166
mac-vlan trigger enable,167
lacp period short,77
mdi,33
lacp system-priority,77
mtu,151
link-aggregation lacp traffic-redirect-notification
enable,78
mtu,39
link-aggregation load-sharing mode,78
link-aggregation load-sharing mode local-first,80
link-aggregation mode,81
link-aggregation port-priority,81
multicast-suppression,33
N
name,151
nest,201
link-delay,19
nest,206
lldp admin-status,223
P
lldp check-change-interval,224
port,155
lldp enable,224
lldp encapsulation snap,225
lldp fast-count,225
lldp hold-multiplier,226
lldp management-address-format string,227
lldp management-address-tlv,227
port access vlan,156
port auto-power-down,35
port hybrid ip-subnet-vlan,177
port hybrid protocol-vlan,171
port hybrid pvid,157
port hybrid vlan,158
241
port isolate-user-vlan host,187
shutdown,48
port isolate-user-vlan promiscuous,184
speed,24
port link-aggregation group,82
speed auto,36
port link-mode,20
stp bpdu-protection,114
port link-mode interface-list,21
stp bridge-diameter,114
port link-type,160
stp compliance,115
port pvid disable,168
stp config-digest-snooping,116
port service-loopback group,235
stp cost,117
port trunk permit vlan,161
stp edged-port,118
port trunk pvid,162
stp enable,119
port-group manual,35
stp ignored vlan,121
port-isolate enable,86
stp loop-protection,121
protocol-vlan,173
stp max-hops,122
Q
stp mcheck,123
qinq enable,202
qinq enable downlink,206
qinq enable uplink,207
qinq ethernet-type customer-tag,202
qinq ethernet-type service-tag,203
qinq transparent-vlan,204
R
stp mode,124
stp no-agreement-check,124
stp pathcost-standard,125
stp point-to-point,126
stp port priority,127
stp port-log,128
stp priority,129
stp region-configuration,130
region-name,112
stp root primary,130
remark customer-vlan-id,208
stp root secondary,131
remark service-vlan-id,208
stp root-protection,132
reset counters interface,82
stp tc-protection,133
reset counters interface,22
stp tc-protection threshold,134
reset counters interface loopback,47
stp timer forward-delay,134
reset counters interface null,47
stp timer hello,135
reset counters interface vlan-interface,152
stp timer max-age,136
reset garp statistics,200
stp timer-factor,137
reset lacp statistics,83
stp transmit-limit,138
reset packet-drop interface,23
U
reset stp,112
revision-level,113
S
service-loopback group,236
shutdown,153
shutdown,23
shutdown,84
unicast-suppression,37
V
virtual-cable-test,38
vlan,153
vlan precedence,169
vlan-mapping modulo,139
242