Dell Force10 S60-44T Reference Guide
Advertisement
Advertisement
FTOS Command Line Reference
Guide for the S60 System
FTOS 8.3.3.9
Notes, Cautions, and Warnings
NOTE: A NOTE indicates important information that helps you make better use of your computer.
CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the problem.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
Information in this publication is subject to change without notice.
© 2013 Dell Force10. All rights reserved.
Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.
Trademarks used in this text: Dell™, the Dell logo, Dell Boomi™, Dell Precision™ , OptiPlex™, Latitude™, PowerEdge™, PowerVault™,
PowerConnect™, OpenManage™, EqualLogic™, Compellent™, KACE™, FlexAddress™, Force10™ and Vostro™ are trademarks of Dell
Inc. Intel®, Pentium®, Xeon®, Core® and Celeron® are registered trademarks of Intel Corporation in the U.S. and other countries. AMD®is a registered trademark and AMD Opteron™, AMD Phenom™ and AMD Sempron™ are trademarks of Advanced Micro Devices, Inc.
Microsoft®, Windows®, Windows Server®, Internet Explorer®, MS-DOS®, Windows Vista® and Active Directory® are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries. Red Hat® and Red Hat®Enterprise Linux® are registered trademarks of Red Hat, Inc. in the United States and/or other countries. Novell® and SUSE® are registered trademarks of Novell
Inc. in the United States and other countries. Oracle® is a registered trademark of Oracle Corporation and/or its affiliates. Citrix®, Xen®,
XenServer® and XenMotion® are either registered trademarks or trademarks of Citrix Systems, Inc. in the United States and/or other countries.
VMware®, Virtual SMP®, vMotion®, vCenter® and vSphere® are registered trademarks or trademarks of VMware, Inc. in the United States or other countries. IBM® is a registered trademark of International Business Machines Corporation.
Other trademarks and trade names may be used in this publication to refer to either the entities claiming the marks and names or their products.
Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.
April 2013
Table of Contents
| 3
4 |
7 Border Gateway Protocol IPv4(BGPv4) . . . . . . . . . . . . . . . . . . . . . . . . .259
9 Content Addressable Memory (CAM) . . . . . . . . . . . . . . . . . . . . . . . . . . .379
Table of Contents
10 Dynamic Host Configuration Protocol (DHCP) . . . . . . . . . . . . . . . . . . . .393
Commands to Configure the System to be a DHCP Server . . . . . . . . . . . . . . . . . . . . . 393
11 Force10 Resilient Ring Protocol (FRRP) . . . . . . . . . . . . . . . . . . . . . . . .407
12 GARP VLAN Registration (GVRP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415
13 Internet Group Management Protocol (IGMP) . . . . . . . . . . . . . . . . . . . .425
Important Points to Remember for IGMP Snooping . . . . . . . . . . . . . . . . . . . . . . . . 435
16 IPv6 Access Control Lists (IPv6 ACLs) . . . . . . . . . . . . . . . . . . . . . . . . .563
| 5
6 |
19 Link Aggregation Control Protocol (LACP) . . . . . . . . . . . . . . . . . . . . . . .613
21 Link Layer Detection Protocol (LLDP). . . . . . . . . . . . . . . . . . . . . . . . . . .649
22 Multiple Spanning Tree Protocol (MSTP) . . . . . . . . . . . . . . . . . . . . . . . .669
24 Neighbor Discovery Protocol (NDP) . . . . . . . . . . . . . . . . . . . . . . . . . . . .697
25 Open Shortest Path First (OSPFv2 and OSPFv3) . . . . . . . . . . . . . . . . .705
26 PIM-Sparse Mode (PIM-SM) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .763
Table of Contents
27 PIM-Source Specific Mode (PIM-SSM) . . . . . . . . . . . . . . . . . . . . . . . . . .779
30 Per-VLAN Spanning Tree plus (PVST+) . . . . . . . . . . . . . . . . . . . . . . . . .799
Important Points to Remember—multicast-bandwidth option . . . . . . . . . . . . . . . . . 835
32 Router Information Protocol (RIP). . . . . . . . . . . . . . . . . . . . . . . . . . . . . .869
33 Remote Monitoring (RMON) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .889
34 Rapid Spanning Tree Protocol (RSTP) . . . . . . . . . . . . . . . . . . . . . . . . . .901
| 7
8 |
39 S-Series Stacking Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1009
41 Spanning Tree Protocol (STP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1029
Table of Contents
42 Time and Network Time Protocol (NTP) . . . . . . . . . . . . . . . . . . . . . . . .1039
44 Uplink Failure Detection (UFD) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1059
46 Virtual Router Redundancy Protocol (VRRP) . . . . . . . . . . . . . . . . . . . .1079
47 S-Series Debugging and Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . .1091
| 9
10 |
1
About this Guide
This book provides information on the FTOS Command Line Interface (CLI). It includes some information on the protocols and features found in FTOS and on the Dell Networking systems supported by FTOS (C-Series c
, E-Series e
, and S-Series s
).
This chapter includes:
•
•
•
•
Objectives
This document is intended as a reference guide for the FTOS command line interface (CLI) commands used with the S60 system.
Audience
This document is intended for system administrators who are responsible for configuring or maintaining networks. This guide assumes you are knowledgeable in Layer 2 and Layer 3 networking technologies.
Conventions
This document uses the following conventions to describe command syntax:
Convention keyword parameter
{X}
[X] x | y x||y
Description
Keywords are in bold and should be entered in the CLI as listed.
Parameters are in italics and require a number or word to be entered in the CLI.
Keywords and parameters within braces must be entered in the CLI.
Keywords and parameters within brackets are optional.
Keywords and parameters separated by bar require you to choose one.
Keywords and parameters separated by a double bar enables you to choose any or all of them.
About this Guide | 11
Information Symbols
Table 1-1 describes symbols contained in this guide.
Table 1-1.
Information Symbols
Symbol c e e e s t x
Brief
C-Series
E-Series
E-Series
TeraScale
E-Series
ExaScale
S-Series
S60
Description
This symbol indicates that the selected feature is supported on the C-Series.
This symbol indicates that the selected feature is supported on the E-Series TeraScale AND
E-Series ExaScale.
This symbol indicates that the selected feature is supported on the E-Series TeraScale platform only.
This symbol indicates that the selected feature is supported on the E-Series ExaScale platform only.
This symbol indicates that the selected feature is supported on the S-Series. Note that when a feature is supported on all the S-Series systems, including the S60, this symbol is used.
This symbol indicates that the selected feature is supported on the S60 but not on other S-Series systems.
Related Documents
For more information about the system, refer to the following documents:
• FTOS Configuration Guide for the S60
• S60 Installation Guide
• Release Notes for FTOS
12 | About this Guide
2
CLI Basics
This chapter describes the command structure and command modes. FTOS commands are in a text-based interface that allows you to use launch commands, change the command modes, and configure interfaces and protocols.
This chapter covers the following topics:
•
•
•
Navigating the Command Line Interface
•
•
•
•
Accessing the Command Line
When the system boots successfully, you are positioned on the command line in the EXEC mode and not prompted to log in. You can access the commands through a serial console port or a Telnet session.
When you Telnet into the switch, you are prompted to enter a login name and password.
is an example of a successful Telnet login session.
Figure 2-1.
Login Example telnet 172.31.1.53
Trying 172.31.1.53...
Connected to 172.31.1.53.
Escape character is '^]'.
Login: username
Password:
FTOS>
Once you log into the switch, the prompt provides you with current command-level information (refer to
CLI Basics | 13
Multiple Configuration Users
When a user enters the CONFIGURATION mode and another user(s) is already in that configuration mode, FTOS generates an alert warning message similar to the following:
Figure 2-2.
Configuration Mode User Alert
FTOS#conf
% Warning: The following users are currently configuring the system:
User "" on line console0
User "admin" on line vty0 ( 123.12.1.123 )
User "admin" on line vty1 ( 123.12.1.123 )
User "Irene" on line vty3 ( 123.12.1.321 )
FTOS(conf)#FTOS#
When another user enters the CONFIGURATION mode, FTOS sends a message similar to the following, where the user in this case is “admin” on vty2:
% Warning: User "admin" on line vty2 "172.16.1.210" is in configuration
Navigating the Command Line Interface
The Command Line Interface (CLI) prompt displayed by FTOS is comprised of:
• “hostname”— the initial part of the prompt, “FTOS” by default. You can change it with the hostname command, as described in
.
• The second part of the prompt, reflecting the current CLI mode, as shown in
The CLI prompt changes as you move up and down the levels of the command structure.
lists the prompts and their corresponding command levels, called modes . Starting with the
CONFIGURATION mode, the command prompt adds modifiers to further identify the mode. The command modes are explained in
Note: Some of the following modes are not available on C-Series or S-Series.
Table 2-1.
Command Prompt and Corresponding Command Mode
Prompt
FTOS>
FTOS#
FTOS(conf)#
CLI Command Mode
EXEC
EXEC Privilege
CONFIGURATION
14 | CLI Basics
Table 2-1.
Command Prompt and Corresponding Command Mode
Prompt
FTOS(conf-if)#
FTOS(conf-if-gi-0/0)#
FTOS(conf-if-te-0/0)#
FTOS(conf-if-lo-0)#
FTOS(conf-if-nu-0)#
FTOS(conf-if-po-0)#
FTOS(conf-if-vl-0)#
FTOS(conf-if-so-0/0)#
FTOS(conf-if-ma-0/0)#
FTOS(conf-if-range)#
FTOS(config-ext-nacl)#
FTOS(config-std-nacl)#
FTOS(config-line-aux)#
FTOS(config-line-console)#
FTOS(config-line-vty)#
FTOS(config-ext-macl)#
FTOS(config-std-macl)#
FTOS(config-mon-sess)#
FTOS(config-span)#
FTOS(config-mstp)#
FTOS(config-pvst)#
FTOS(config-rstp)#
FTOS(config-gvrp)#
FTOS(config-route-map)#
FTOS(conf-nprefixl)#
FTOS(conf-router_rip)#
FTOS(conf-redirect-list)#
FTOS(conf-router_bgp)#
FTOS(conf-router_ospf)#
FTOS(conf-router_isis)#
FTOS(conf-trace-acl)#
CLI Command Mode
INTERFACE
IP ACCESS LIST
LINE
MAC ACCESS LIST
MONITOR SESSION
STP
MULTIPLE SPANNING TREE
Per-VLAN SPANNING TREE Plus
RAPID SPANNING TREE
PROTOCOL GVRP
ROUTE-MAP
PREFIX-LIST
ROUTER RIP
REDIRECT
ROUTER BGP
ROUTER OSPF
ROUTER ISIS
TRACE-LIST
Obtaining Help
As soon as you are in a command mode there are several ways to access help.
• To obtain a list of keywords at any command mode, do the following:
— Enter a ?
at the prompt or after a keyword. There must always be a space before the ?
.
• To obtain a list of keywords with a brief functional description, do the following:
— Enter help at the prompt.
CLI Basics | 15
16 | CLI Basics
• To obtain a list of available options, do the following:
— Type a keyword followed by a space and a ?
• Type a partial keyword followed by a ?
— A display of keywords beginning with the partial keyword is listed.
illustrates the results of entering ip ?
at the prompt.
Figure 2-3.
Partial Keyword Example
FTOS(conf)#ip ?
access-list Named access-list as-path BGP autonomous system path filter community-list Add a community list entry domain-list Domain name to complete unqualified host name domain-lookup Enable IP Domain Name System hostname translation domain-name Define the default domain name fib FIB configuration commands ftp FTP configuration commands host Add an entry to the ip hostname table max-frag-count Max. fragmented packets allowed in IP re-assembly multicast-routing Enable IP multicast forwarding name-server Specify addess of name server to use pim Protocol Independent Multicast prefix-list Build a prefix list radius Interface configuration for RADIUS redirect-list Named redirect-list route Establish static routes scp SCP configuration commands source-route Process packets with source routing header options ssh SSH configuration commands tacacs Interface configuration for TACACS+ telnet Specify telnet options tftp TFTP configuration commands trace-group Named trace-list trace-list Named trace-list
FTOS(conf)#ip
When entering commands, you can take advantage of the following timesaving features:
• The commands are not case sensitive.
• You can enter partial (truncated) command keywords. For example, you can enter int gig int interface for the interface gigabitethernet interface command.
• Use the TAB key to complete keywords in commands.
• Use the up arrow key to display the last enabled command.
• Use either the Backspace key or the Delete key to erase the previous character.
Use the left and right arrow
keys to navigate left or right in the FTOS command line. Table 2-2
defines the key combinations valid at the FTOS command line.
Table 2-2.
Short-cut Keys and their Actions
CNTL-P
CNTL-R
CNTL-U
CNTL-W
CNTL-X
CNTL-Z
Esc B
Esc F
Esc D
Key
Combination Action
CNTL-A
CNTL-B
CNTL-D
CNTL-E
CNTL-F
CNTL-I
CNTL-K
CNTL-L
CNTL-N
Moves the cursor to the beginning of the command line.
Moves the cursor back one character.
Deletes character at cursor.
Moves the cursor to the end of the line.
Moves the cursor forward one character.
Completes a keyword.
Deletes all characters from the cursor to the end of the command line.
Re-enters the previous command.
Return to more recent commands in the history buffer after recalling commands with Ctrl-P or the up arrow key
Recalls commands, beginning with the last command
Re-enters the previous command.
Deletes the line.
Deletes the previous word.
Deletes the line.
Ends continuous scrolling of command outputs.
Moves the cursor back one word.
Moves the cursor forward one word.
Deletes all characters from the cursor to the end of the word.
Using the Keyword No
To disable, delete, or return to default values, use the no form of the commands. For most commands, if you type the keyword no in front of the command, you will disable that command or delete it from the running configuration. In this document, the no form of the command is discussed in the Command
Syntax portion of the command description.
Filtering show Commands
You can filter the display output of a show command to find specific information, to display certain information only, or to begin the command output at the first instance of a regular expression or phrase.
When you execute a show command, followed by a pipe ( | ) and one of the parameters listed below and a regular expression, the resulting output either excludes or includes those parameters, as defined by the parameter:
• display — display additional configuration information
CLI Basics | 17
• except — display only text that does not match the pattern (or regular expression)
• find — search for the first occurrence of a pattern
• grep — display text that matches a pattern
• no-more — do not paginate the display output
• save - copy output to a file for future use
Note: FTOS accepts a space before or after the pipe, no space before or after the pipe, or any combination. For example:
FTOS# command | grep gigabit | except regular-expression | find regular-expression
The grep command option has an ignore-case sub-option that makes the search case-insensitive. For example, the commands:
• show run | grep Ethernet would return a search result with instances containing a capitalized
“Ethernet,” such as interface GigabitEthernet 0/0 .
• show run | grep ethernet would not return the search result, above, because it only searches for instances containing a non-capitalized “ethernet.”
Executing the command show run | grep Ethernet ignore-case would return instances containing both “Ethernet” and “ethernet.”
Displaying All Output
To display the output all at once (not one screen at a time), use the no-more after the pipe. This is similar to the terminal length screen-length command except that the no-more option affects the output of just the specified command.For example:
FTOS# show running-config|no-more
Filtering Command Output Multiple Times
You can filter a single command output multiple times. Place the save option as the last filter. For example:
FTOS# command | grep regular-expression | except regular-expression | grep other-regular-expression | find regular-expression | no-more | save
Command Modes
To navigate to various CLI modes, you need to use specific commands to launch each mode.
Navigation to these modes is discussed in the following sections.
Note: Some of the following modes are not available on C-Series or S-Series.
18 | CLI Basics
EXEC Mode
When you initially log in to the switch, by default, you are logged into the EXEC mode. This mode allows you to view settings and to enter the EXEC Privilege mode to configure the device. While you are in the EXEC mode, the > prompt is displayed following the “hostname” prompt, as described above. which is “FTOS” by default. You can change it with the hostname command. See the
command hostname . Each mode prompt is preceded by the hostname.
EXEC Privilege Mode
The enable command accesses the EXEC Privilege mode. If an administrator has configured an
“Enable” password, you will be prompted to enter it here.
The EXEC Privilege mode allows you to access all commands accessible in EXEC mode, plus other commands, such as to clear ARP entries and IP addresses. In addition, you can access the
CONFIGURATION mode to configure interfaces, routes, and protocols on the switch. While you are logged in to the EXEC Privilege mode, the # prompt is displayed.
CONFIGURATION Mode
In the EXEC Privilege mode, use the configure command to enter the CONFIGURATION mode and configure routing protocols and access interfaces.
To enter the CONFIGURATION mode:
1.
Verify that you are logged in to the EXEC Privilege mode.
2.
Enter the configure command. The prompt changes to include (conf).
From this mode, you can enter INTERFACE by using the interface command.
INTERFACE Mode
Use the INTERFACE mode to configure interfaces or IP services on those interfaces. An interface can be physical (for example, a Gigabit Ethernet port) or virtual (for example, the Null interface).
To enter INTERFACE mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the interface command followed by an interface type and interface number that is available on the switch.
3.
The prompt changes to include the designated interface and slot/port number, as outlined in
.
Table 2-3.
Interface prompts
Prompt
FTOS(conf-if)#
FTOS(conf-if-gi-0/0)#
FTOS(conf-if-te-0/0)#
FTOS(conf-if-lo-0)#
Interface Type
INTERFACE mode
Gigabit Ethernet interface followed by slot/port information
Ten Gigabit Ethernet interface followed by slot/port information
Loopback interface number.
CLI Basics | 19
Table 2-3.
Interface prompts
Prompt
FTOS(conf-if-nu-0)#
FTOS(conf-if-po-0)#
FTOS(conf-if-vl-0)#
FTOS(conf-if-so-0/0)#
FTOS(conf-if-ma-0/0)#
FTOS(conf-if-range)#
Interface Type
Null Interface followed by zero
Port-channel interface number
VLAN Interface followed by VLAN number (range 1 to 4094)
SONET interface followed by slot/port information.
Management Ethernet interface followed by slot/port information
Designated interface range (used for bulk configuration; see interface range ).
LINE Mode
Use the LINE mode to configure console or virtual terminal parameters.
To enter LINE mode:
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Enter the line command. You must include the keywords console or vty and their line number available on the switch.The prompt changes to include (config-line-console) or (config-line-vty).
You can exit this mode by using the exit command.
TRACE-LIST Mode
When in the CONFIGURATION mode, use the trace-list command to enter the TRACE-LIST mode and configure a Trace list.
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Enter the ip trace-list command. You must include the name of the Trace list. The prompt change to include (conf-trace-acl).
You can exit this mode by using the exit command.
MAC ACCESS LIST Mode
While in the CONFIGURATION mode, use the mac access-list standard or mac access-list extended command to enter the MAC ACCESS LIST mode and configure either standard or extended access control lists (ACL).
To enter MAC ACCESS LIST mode:
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Use the mac access-list standard or mac access-list extended command. You must include a name for the ACL.The prompt changes to include (conf-std-macl) or (conf-ext-macl).
You can return to the CONFIGURATION mode by entering the exit command.
20 | CLI Basics
IP ACCESS LIST Mode
While in the CONFIGURATION mode, use the ip access-list standard or ip access-list extended command to enter the IP ACCESS LIST mode and configure either standard or extended access control lists (ACL).
To enter IP ACCESS LIST mode:
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Use the ip access-list standard or ip access-list extended command. You must include a name for the ACL.The prompt changes to include (conf-std-nacl) or (conf-ext-nacl).
You can return to the CONFIGURATION mode by entering the exit command.
ROUTE-MAP Mode
While in the CONFIGURATION mode, use the route-map command to enter the ROUTE-MAP mode and configure a route map.
To enter ROUTE-MAP mode:
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Use the route-ma p map-name [ permit | deny ] [ sequence-number ] command. The prompt changes to include (route-map).
You can return to the CONFIGURATION mode by entering the exit command.
PREFIX-LIST Mode
While in the CONFIGURATION mode, use the ip prefix-list command to enter the PREFIX-LIST mode and configure a prefix list.
To enter PREFIX-LIST mode:
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Enter the ip prefix-list command. You must include a name for the prefix list.The prompt changes to include (conf-nprefixl).
You can return to the CONFIGURATION mode by entering the exit command.
AS-PATH ACL Mode
Use the AS-PATH ACL mode to configure an AS-PATH Access Control List (ACL) on the E-Series.
See
Chapter 6, Access Control Lists (ACL) .
To enter AS-PATH ACL mode:
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Enter the ip as-path access-list command. You must include a name for the AS-PATH ACL.The prompt changes to include (config-as-path).
You can return to the CONFIGURATION mode by entering the exit command.
CLI Basics | 21
IP COMMUNITY LIST Mode
Use the IP COMMUNITY LIST mode to configure an IP Community ACL on the E-Series. See
Chapter 6, Access Control Lists (ACL)
.
To enter IP COMMUNITY LIST mode:
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Enter the ip community-list command. You must include a name for the Community list.The prompt changes to include (config-community-list).
You can return to the CONFIGURATION mode by entering the exit command.
REDIRECT-LIST Mode
Use the REDIRECT-LIST mode to configure a Redirect list on the E-Series, as described in the
E-Series FTOS Command Reference Guide chapter on Policy-based Routing
To enter REDIRECT-LIST mode:
1.
Verify that you are logged in to the CONFIGURATION mode.
2.
Use the ip redirect-list command. You must include a name for the Redirect-list.The prompt changes to include (conf-redirect-list).
You can return to the CONFIGURATION mode by entering the exit command.
SPANNING TREE Mode
Use the STP mode to enable and configure the Spanning Tree protocol, as described in Chapter 41,
Spanning Tree Protocol (STP) .
To enter STP mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the protocol spanning-tree stp-id command.
You can return to the CONFIGURATION mode by entering the exit command.
Per-VLAN SPANNING TREE Plus Mode
Use PVST+ mode to enable and configure the Per-VLAN Spanning Tree (PVST+) protocol, as described in
Chapter 30, Per-VLAN Spanning Tree plus (PVST+) .
Note: The protocol is PVST+, but the plus sign is dropped at the CLI prompt
To enter PVST+ mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the protocol spanning-tree pvst command.
You can return to the CONFIGURATION mode by entering the exit command.
22 | CLI Basics
RAPID SPANNING TREE Mode
Use PVST+ mode to enable and configure the RSTP protocol, as described in Chapter 34, Rapid
Spanning Tree Protocol (RSTP) .
To enter RSTP mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the protocol spanning-tree rstp command.
You can return to the CONFIGURATION mode by entering the exit command.
MULTIPLE SPANNING TREE Mode
Use MULTIPLE SPANNING TREE mode to enable and configure the Multiple Spanning Tree protocol, as described in
Chapter 22, Multiple Spanning Tree Protocol (MSTP) .
To enter MULTIPLE SPANNING TREE mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the protocol spanning-tree mstp command.
You can return to the CONFIGURATION mode by entering the exit command.
PROTOCOL GVRP Mode
Use the PROTOCOL GVRP mode to enable and configure GARP VLAN Registration Protocol
(GVRP), as described in
Chapter 12, GARP VLAN Registration (GVRP) .
To enter PROTOCOL GVRP mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the protocol gvrp command syntax.
You can return to the CONFIGURATION mode by entering the exit command.
ROUTER OSPF Mode
Use the ROUTER OSPF mode to configure OSPF, as described in Chapter 25, Open Shortest Path
.
To enter ROUTER OSPF mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Use the router ospf { process-id } command.The prompt changes to include
(conf-router_ospf-id).
You can switch to the INTERFACE mode by using the interface command or you can switch to the
ROUTER RIP mode by using the router rip command.
CLI Basics | 23
ROUTER RIP Mode
Use the ROUTER RIP mode to configure RIP on the C-Series or E-Series, as described in Chapter 32,
Router Information Protocol (RIP)
.
To enter ROUTER RIP mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the router rip command.The prompt changes to include (conf-router_rip).
You can switch to the INTERFACE mode by using the interface command or you can switch to the
ROUTER OSPF mode by using the router ospf command.
ROUTER ISIS Mode
Use the ROUTER ISIS mode to configure ISIS on the E-Series, as described in the E-Series FTOS
Command Reference Guide chapter on Intermediate System to Intermediate System (IS-IS).
To enter ROUTER ISIS mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the router isis [ tag ] command.The prompt changes to include (conf-router_isis).
You can switch to the INTERFACE mode by using the interface command or you can switch to the
ROUTER RIP mode by using the router rip command.
ROUTER BGP Mode
Use the ROUTER BGP mode to configure BGP on the C-Series or E-Series, as described in
Border Gateway Protocol IPv4(BGPv4) .
To enter ROUTER BGP mode:
1.
Verify that you are logged into the CONFIGURATION mode.
2.
Enter the router bgp as-number command.The prompt changes to include (conf-router_bgp).
You can return to the CONFIGURATION mode by entering the exit command.
Determining the Chassis Mode
The chassis mode in FTOS determines which hardware is being supported in an E-Series chassis. The chassis mode is programmed into an EEPROM on the backplane of the chassis and the change takes place only after the chassis is rebooted. Configuring the appropriate chassis mode enables the system to use all the ports on the card and recognize all software features.
24 | CLI Basics
3
File Management
Overview
This chapter contains commands needed to manage the configuration files and includes other file management commands found in FTOS. This chapter contains these sections:
•
Basic File Management Commands
Basic File Management Commands
The commands included in this chapter are:
•
•
•
•
•
•
•
•
•
•
•
copy running-config startup-config
•
•
•
•
•
•
format (C-Series and E-Series)
•
•
•
•
•
•
•
•
File Management | 25
•
•
•
•
•
•
•
•
•
•
•
•
upgrade (S-Series management unit)
•
•
•
boot config ce Set the location and name of the configuration file that is loaded at system start-up (or reload) instead of the default startup-configuration.
Syntax boot config { remote-first | rpm0 file-url | rpm1 file-url }
To return to the default setting, enter no boot config { remote-first | rpm0 | rpm1 }.
Parameters remote-first rpm0 rpm1 file-url
Enter the keywords remote-first to attempt to load the boot configuration files from a remote location.
Enter the keywords rpm0 first to specify the local boot configuration file for RPM 0.
Enter the keywords rpm1 first to specify the local boot configuration file for RPM 1.
Enter the location information:
• For a file on the internal Flash, enter flash:// followed by the filename.
• For a file on the external Flash, enter slot0:// followed by the filename.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
To display these changes in the
command output, you must save the running
configuration to the startup configuration ( copy running-config startup-config
Dell Networking strongly recommends using local files for configuration (RPM0 or RPM1 flash or slot0).
26 | File Management
When you specify a file as the boot config file, it is listed in the boot variables (bootvar) as LOCAL
CONFIG FILE . If you do not specify a boot config file, then the startup-configuration is used, although the bootvar shows LOCAL CONFIG FILE = variable does not exist . When you specify a boot config file, the switch reloads with that config file, rather than the startup-config. Note that if you specify a local config file which is not present in the specified location, then the startup-configuration is loaded.
The write memory command always saves the running-configuration to the file labeled startup-configuration. When using a LOCAL CONFIG FILE other than the startup-config, use the copy command to save any running-configuration changes to that local file.
Output for show bootvar with no boot configuration configured
FTOS# show bootvar
PRIMARY IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
SECONDARY IMAGE FILE = flash://FTOS-EF-7.6.1.0.bin
DEFAULT IMAGE FILE = flash://FTOS-EF-7.5.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
CURRENT CONFIG FILE 1 = flash://startup-config
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist
Output for show bootvar with boot configuration configured
FTOS# show bootvar
PRIMARY IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
SECONDARY IMAGE FILE = flash://FTOS-EF-7.6.1.0.bin
DEFAULT IMAGE FILE = flash://FTOS-EF-7.5.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = flash://FTOS-EF-8.2.1.0.bin
CURRENT CONFIG FILE 1 = flash://CustomerA.cfg
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist
Related
Commands
Display the variable settings for the E-Series boot parameters .
boot host c e Set the location of the configuration file from a remote host.
Syntax boot host { primary | secondary } remote-url
To return to the default settings, enter no boot host { primary | secondary } command.
Parameters primary Enter the keywords primary to attempt to load the primary host configuration files.
File Management | 27
Defaults
Command Modes
Command
History secondary remote-url
Not configured.
CONFIGURATION
Enter the keywords secondary to attempt to load the secondary host configuration files.
Enter the following location keywords and information:
• For a file on an FTP server, enter ftp:// user:password @ hostip/filepath
• For a file on a TFTP server, enter tftp:// hostip/filepath
Usage
Information
Related
Commands
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
To display these changes in the
command output, you must save the running configuration to the startup configuration (using the
Display the variable settings for the E-Series boot parameters .
boot network c e Set the location of the configuration file in a remote network.
Syntax boot network { primary | secondary } remote-url
To return to the default settings, enter no boot network { primary | secondary } command.
Parameters primary secondary remote-url
Enter the keywords primary to attempt to load the primary network configuration files.
Enter the keywords secondary to attempt to load the secondary network configuration files.
Enter the following location keywords and information:
• For a file on an FTP server, enter ftp:// user:password @ hostip/filepath
• For a file on a TFTP server, enter tftp:// hostip/filepath
Defaults
Command Modes
Command
History
None
CONFIGURATION
Usage
Information
Related
Commands
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
To display these changes in the
command output, you must save the running configuration to the startup configuration (using the
Display the variable settings for the E-Series boot parameters .
28 | File Management
boot system (C-Series and E-Series) c e Tell the system where to access the FTOS image used to boot the system.
Syntax boot system { rpm0 | rpm1 } ( default | primary | secondary } file-url
To return to the default boot sequence, use the no boot system { rpm0 | rpm1 } { primary | secondary } command.
Parameters rpm0 rpm1 default primary secondary file-url
Enter the keyword rpm0 to configure boot parameters for RPM0.
Enter the keyword rpm1 to configure boot parameters for RPM1.
After entering rpm0 or rpm1 , enter the keyword default to specify the parameters to be used if those specified by primary or secondary fail. The default location should always be the internal flash device (flash:), so that you can be sure that a verified image is available there.
After entering rpm0 or rpm1 , enter the keyword primary to configure the boot parameters used in the first attempt to boot FTOS .
After entering rpm0 or rpm1 , enter the keyword secondary to configure boot parameters used if the primary operating system boot selection is not available.
To boot from a file:
• on the internal Flash, enter flash:// followed by the filename.
• on an FTP server, enter ftp:// user:password @ hostip/filepath
• on the external Flash, enter slot0:// followed by the filename.
• on a TFTP server, enter tftp:// hostip/filepath
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
To display these changes in the show bootvar command output, you must save the running configuration to the startup configuration (using the
copy command) and reload system.
Related
Commands
Change the primary, secondary, or default boot image configuration.
Specify the IP address of the default next-hop gateway for the management subnet.
boot system (S60)
Tell the system where to access the FTOS image used to boot the system.
Syntax boot system { gateway ip address | stack-unit [ 0-11 | all ] [ default | primary { system { A : |
B :} | tftp : | | secondary ]}
To return to the default boot sequence, use the no boot system command.
File Management | 29
Parameters
Defaults
Command Modes
Command
History
Usage
Information
Related
Commands gateway stack-unit ip-address
0-11, all default primary secondary tftp:
A: | B:
Not configured.
CONFIGURATION
Enter the IP address of the default next-hop gateway for the management subnet
Enter the stack-unit number for the master switch.
Enter an IP address in dotted decimal format.
Stack-unit number
Enter the default keyword to use the primary FTOS image.
Enter the primary keyword to use the primary FTOS image.
Enter the secondary keyword to use the primary FTOS image.
Enter TFTP : to retrieve the image from a TFTP server. tftp://hostip/filepath
Enter A: or B: to boot one of the system partitions.
Version 8.3.3.1
To display these changes in the show bootvar command output, you must save the running configuration to the startup configuration (using the
copy command) and reload system.
Introduced on the S60
Specify the IP address of the default next-hop gateway for the management subnet.
boot system gateway c e Specify the IP address of the default next-hop gateway for the management subnet.
Syntax boot system gateway ip-address
To delete a gateway configuration, enter no boot system gateway .
Parameters ip-address Enter an IP address in dotted decimal format.
Command Modes
Usage
Information
CONFIGURATION
Saving the address to the startup configuration file preserves the address in NVRAM in case the startup configuration file is deleted.
Command
History
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Related
Commands
Change the primary, secondary, or default boot image configuration.
30 | File Management
cd c e s Change to a different working directory.
Syntax cd directory
Parameters directory
•
•
(OPTONAL) Enter one of the following: flash: (internal Flash) or any sub-directory slot0: (external Flash) or any sub-directory (C-Series and E-Series only)
Command Modes EXEC Privilege
Command
History
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series
Introduced on C-Series
E-Series original Command change bootflash-image c e Change boot flash image from which to boot.
Syntax change bootflash-image { cp | linecard linecard-slot | rp }
Parameters cp linecard linecard-slot rp
Enter the keyword cp to change the bootflash image on the Control Processor on the RPM.
Enter the keyword linecard followed by the slot number to change the bootflash image on a specific line card.
C-Series Range: 0-7
E-Series Range: 0 to 13 on the E1200; 0 on 6 on the E600, and 0 to 5 on the
E300.
Enter the keyword rp to change the bootflash image on the RPM Route
Processor.
Defaults
Command Modes
Command
History
Not configured.
EXEC Privilege
Usage
Information
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
A system message appears stating that the bootflash image has been changed. You must reload the system before the system can switch to the new bootflash image.
copy c e s Copy one file to another location.
Syntax copy source-file-url destination-file-url
File Management | 31
Parameters
Command Modes
Command
History file-url Enter the following location keywords and information:
• To copy a file from the internal FLASH, enter flash:// followed by the filename.
• To copy a file on an FTP server, enter ftp:// user:password @ hostip/filepath
• To copy a file from the internal FLASH on RPM0, enter rpm0flash:// filepath
• To copy a file from the external FLASH on RPM0, enter rpm0slot0:// filepath
• To copy a file from the internal FLASH on RPM1, enter rpm1flash:/ / filepath
• To copy a file from the external FLASH on RPM1, enter rpm1slot0:// filepath
• To copy the running configuration, enter the keyword running-config .
• To copy the startup configuration, enter the keyword startup-config .
• To copy using Secure Copy (SCP), enter the keyword scp: (If scp: is entered in the source position, then enter the target URL;
If scp: is entered in the target position, first enter the source URL; see below for examples.)
• To copy a file on the external FLASH, enter slot0:// followed by the filename.
• To copy a file on a TFTP server, enter tftp:// hostip/filepath
ExaScale only
• To copy a file from a USB drive on RPM0, enter rpm0usbflash:// filepath
ExaScale and S60
• To copy a file from an external USB drive, enter usbflash:// filepath
EXEC Privilege
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Introduced on the S60.
Added usbflash and rpm0usbflash commands on E-Series ExaScale
Version 7.6.1.0
Introduced on S-Series and added SSH port number to SCP prompt sequence on all systems.
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
FTOS supports a maximum of 100 files, at the root directory level, on both the internal and external
Flash.
The usbflash and rpm0usbflash commands are supported on E-Series ExaScale platform only.
Refer to the FTOS Release Notes for a list of approved USB vendors.
When copying a file to a remote location (for example, using Secure Copy (SCP)), enter only the keywords and FTOS prompts you for the rest of the information.
For example, when using SCP, you can enter copy running-config scp:
The running-config is the source, and the target is specified in the ensuing prompts. FTOS prompts you to enter any required information, as needed for the named destination—remote destination, destination filename, user ID and password, etc.
When you use the copy running-config startup-config command to copy the running configuration (the startup configuration file amended by any configuration changes made since the system was started) to the startup configuration file, FTOS creates a backup file on the internal flash of the startup configuration.
FTOS supports copying the running-configuration to a TFTP server or to an FTP server:
32 | File Management
copy running-config tftp: copy running-config ftp:
Command Example: copy running-config scp:
FTOS#copy running-config scp:/
Address or name of remote host []: 10.10.10.1
Destination file name [startup-config]? old_running
User name to login remote host? home
Password to login remote host? home
In this example — copy scp: flash: — specifying SCP in the first position indicates that the target is to be specified in the ensuing prompts. Entering flash: in the second position means that the target is the internal Flash. In this example the source is on a secure server running SSH, so the user is prompted for the UDP port of the SSH server on the remote host.
Using scp to copy from an SSH Server
FTOS#copy scp: flash:
Address or name of remote host []: 10.11.199.134
Port number of the server [22]: 99
Source file name []: test.cfg
User name to login remote host: admin
Password to login remote host:
Destination file name [test.cfg]: test1.cfg
Related
Commands
Change working directory.
copy (Streamline Upgrade) c e Copy a system image to a local file and update the boot profile.
Syntax copy source-url target-url [ boot-image [ synchronize-rpm [ external ]]]
Parameters source-url target-url boot-image synchronize-rpm external
Enter the source file in url format. The source file is a valid Dell Networking release image. Image validation is automatic.
Enter the local target file in url format.
Enter the keyword boot-image to designate this copy command as a streamline update.
Enter the keyword synchronize-rpm to copy the new image file to the peer
RPM .
Enter the keyword external to designate the target device on the peer RPM as external flash (instead of the default internal flash).
Default: Internal Flash
Defaults
Command Modes
No default behavior
CONFIGURATION
Command
History
Version 7.5.1.0
Version 6.1.1.0
Introduced on C-Series
Introduced
File Management | 33
Usage
Information
In this streamline copy command, the source image is copied to the primary RPM and then, if specified, to the standby RPM. After the copy is complete, the new image file path on each RPM is automatically configured as the primary image path for the next boot. The current system image (the one from which the RPM booted) is automatically configured as the secondary image path.
Note: The keywords boot-image , synchronize-rpm , and external can be used on the
Primary RPM only.
copy running-config startup-config
Copy running configuration to the startup configuration.
c e
Syntax
Command Modes
Command
History copy running-config startup-config {duplicate}
EXEC Privilege
Usage
Information
Version 8.3.3.1
Version 7.5.1.0
Version 6.3.1.0
Introduced on S60.
Introduced on C-Series
Introduced
This command is useful for quickly making a changed configuration on one chassis available on external flash in order to move it to another chassis.
When you use the copy running-config startup-config duplicate command to copy the running configuration to the startup configuration, FTOS creates a backup file on the internal flash of the startup configuration.
delete c e s Delete a file from the flash. Once deleted, files cannot be restored.
Syntax delete flash-url [ no-confirm ]
Parameters flash-url no-confirm
Enter the following location and keywords:
• For a file or directory on the internal Flash, enter flash:// followed by the filename or directory name.
• For a file or directory on the external Flash, enter slot0:// followed by the filename or directory name.
(OPTIONAL) Enter the keyword no-confirm to specify that FTOS does not require user input for each file prior to deletion.
Command Modes EXEC Privilege
Command
History
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series
Introduced on C-Series
E-Series original Command
34 | File Management
dir c e s Display the files in a filesystem. The default is the current directory.
Syntax dir [ filename | directory name: ]
Parameters filename | directory name: (OPTIONAL) Enter one of the following:
• For a file or directory on the internal Flash, enter flash:// followed by the filename or directory name.
• For a file or directory on the external Flash, enter slot0:// followed by the filename or directory name:
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Example Command Example dir for the Internal Flash
FTOS#dir
Directory of flash:
1 -rwx 6478482 May 13 101 16:54:34 E1200.BIN flash: 64077824 bytes total (57454592 bytes free)
FTOS#
Related
Commands
Change working directory.
download alt-boot-image c e Download an alternate boot image to the chassis.
Syntax download alt-boot-image file-url
Command Modes EXEC Privilege
Command
History
Version 7.7.1.0
Removed from E-Series and C-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Usage
Information
Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade command.
For software upgrade details, see the FTOS Release Notes.
Related
Commands
Upgrade the bootflash or boot selector versions.
Upgrade the bootflash or boot selector versions.
File Management | 35
download alt-full-image e Download an alternate FTOS image to the chassis.
Syntax download alt-full-image file-url
Command Modes EXEC Privilege
Command
History
Version 7.7.1.0
Version 6.5.1.0
Removed form E-Series
Introduced
Usage
Information
Related
Commands
Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade command.
For software upgrade details, see the FTOS Release Notes.
Upgrade the bootflash or boot selector versions download alt-system-image e Download an alternate system image (not the boot flash or boot selector image) to the chassis.
Syntax download alt-system-image file-url
Command Modes EXEC Privilege
Command
History
Version 7.7.1.0
Version 6.5.1.0
Removed from E-Series
Introduced
Usage
Information
Related
Commands
Starting with FTOS 7.7.1.0, the functions of this command are incorporated into the upgrade command.
For software upgrade details, see the FTOS Release Notes.
Upgrade the bootflash or boot selector versions format (C-Series and E-Series) ce Erase all existing files and reformat a filesystem. Once the filesystem is formatted, files cannot be restored.
Syntax format filesystem : [ dosFs1.0
| dosFs2.0
]
Parameters filesystem : Enter one of the following:
• To reformat the internal Flash, enter flash:
• To reformat the external Flash, enter slot0:
36 | File Management
Default
Command Modes
Command
History dosFs1.0
dosFs2.0
DOS 1.0 (dosFs1.0)
EXEC Privilege
Enter the keyword dosFs1.0 to format in DOS 1.0 (the default)
Enter the keyword dosFs2.0 to format in DOS 2.0
Usage
Information
Related
Commands
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
When you format flash:
1 The startup-config is erased.
2 All cacheboot data files are erased and you must reconfigure cacheboot to regain it.
3 All generated SSH keys are erased and you must recreate them.
4 All archived configuration files are erased.
5 All trace logs, crash logs, core dumps, and call-home logs are erased.
6 In-service Process patches are erased.
After reformatting is complete, three empty directories are automatically created on flash:
CRASH_LOG_DIR, TRACE_LOG_DIR and NVTRACE_LOG_DIR.
Note: Version option is available on LC-ED-RPM only. LC-EE3-RPM, LC-EF-RPM, and
LC-EF3-RPM supports DOS 2.0 only.
Display contents of a text file in the local filesystem.
Display information about the file systems on the system.
format flash (S-Series) s Erase all existing files and reformat the filesystem in the internal flash memory. Once the filesystem is formatted, files cannot be restored.
Syntax format flash:
Default
Command Modes flash memory
EXEC Privilege
Command
History
Usage
Information
Version 7.8.1.0
Introduced on S-Series
You must include the colon (:) when entering this command.
Caution: This command deletes all files, including the startup configuration file. So, after executing this command, consider saving the running config as the startup config (use the write memory command or copy run start ).
File Management | 37
Related
Commands
Copy the current configuration to either the startup-configuration file or the terminal.
Display contents of a text file in the local filesystem.
Display information about the file systems on the system. format flash (S60)
Erase all existing files and reformat the filesystem in the internal flash memory or the USB drive. Once the filesystem is formatted, files cannot be restored.
Syntax
Parameters format [flash: | usbflash:] flash: usbflash:
Reformat the filesystem in the internal flash memory
Reformat the filesystem in the connected USB drive memory
Default
Command Modes
Command
History
Usage
Information flash memory
EXEC Privilege
Version 8.3.3.1
Introduced on the S60.
You must include the colon (:) when entering this command.
Caution: This command deletes all files, including the startup configuration file. So, after executing this command, consider saving the running config as the startup config (use the write memory command or copy run start ).
logging coredump c e s Enable coredump.
Syntax logging coredump { cp | linecard { number | all } | rps | stack-unit { id | all }}
Parameters
Disable coredump using the command no logging coredump { cp | linecard { number | all } | rps} cp linecard rps stack-unit
Enable coredump for the CP.
Enable coredump for a linecard.
Enable coredump for RP 1 and 2.
Enable coredump for the stack-unit.
Range: S60 0-11
All other S-Series 0-7
Defaults
Command Modes
The kernel coredump is enabled by default for RP 1 and 2 on E-Series. The kernel coredump for CP and application coredump are disabled on all systems by default.
CONFIGURATION
38 | File Management
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 6.5.1.0
Version 6.1.1.0
Introduced on the S60.
Restructured command to accommodate coredumps for CP. Introduced on C-Series and
S-Series
Application coredump naming convention enhanced to include application.
Introduced
The Kernel core dump can be large and may take up to 5 to 30 minutes to upload. FTOS does not overwrite application coredumps so you should delete them as necessary to conserve space on the flash; if the flash is out of memory, the coredump is aborted. On the S-Series, if the FTP server is not reachable, the application coredump is aborted. FTOS completes the coredump process and wait until the upload is complete before rebooting the system.
Designate a sever to upload kernel core-dumps.
logging coredump server c e s Designate a server to upload coredumps.
Syntax logging coredump server address username name password [ type ] password
Parameters
Disable logging coredumps to a server using the command no logging coredump server address username name password [ type ] password address name type password
Enter the server IP address in dotted decimal format (A.B.C.D) or hostname.
Enter a username to access the target server.
Enter the password type:
• Enter 0 to enter an unencrypted password.
• Enter 7 to enter a password that has already been encrypted using a Type
7 hashing algorithm.
Enter a password to access the target server.
Defaults
Command Modes
Command
History
Crash kernel files are uploaded to flash by default.
CONFIGURATION
Usage
Information
Version 7.7.1.0
Restructured command to accommodate coredumps for CP. Introduced on C-Series and
S-Series.
Introduced Version 6.1.1.0
Since flash space may be limited, using this command ensures your entire crash kernel files are uploaded successfully and completely.
Note: You must disable
logging coredump before you designate a new server destination for
your coredumps.
Related
Commands
Disable the kernel coredump
File Management | 39
pwd c e s Display the current working directory.
Syntax pwd
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.5.1.0
Introduced on the S60.
Introduced on C-Series
E-Series original Command
Example Command Example: pwd
FTOS#pwd flash:
FTOS#
Related
Commands
Change directory.
rename ces Rename a file in the local file system.
Syntax rename url url
Parameters url Enter the following keywords and a filename:
• For a file on the internal Flash, enter flash:// followed by the filename.
• For a file on the external Flash, enter slot0:// followed by the filename.
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series original Command restore factory-defaults
Restore factory defaults.
Syntax
Parameters restore factory-defaults stack-unit {0-11 | all} {clear-all | nvram} factory-defaults Return the system to its factory default mode.
0-11 Enter this keyword to restore only the mentioned stack-unit.
all Enter this keyword to restore all units in the stack.
40 | File Management
clear-all nvram
EXEC Privilege
Enter this keyword to reset the NvRAM and to delete the system startup configuration.
Enter this keyword to reset the NvRAM only.
Command Modes
Command
History
Usage
Information
Version 8.3.3.9
Version 8.3.5.4
Version 8.3.17.1
Introduced on the S60
Introduced on the S55
Supported on M I/O Aggregator
Restoring factory defaults deletes the existing startup configuration and all persistent settings
(stacking, fanout, etc.).
Dell Networking recommends backing up the startup configuration before using this command.
When restoring all S4810 units in a stack, all the S4810 units in the stack are placed into stand-alone mode.
When restoring a single S4810 unit in a stack, that S4810 unit is placed in stand-alone mode. No other units in the stack are affected.
When S55 and S60 units in a stack are restored, the S55 and S60 units will still form a stack.
After the restore is complete, the units power cycle immediately.
Caution: There is no undo for this command
Example Figure 3-1.
restore factory-defaults (all units in a stack) Command Example
FTOS#restore factory-defaults stack-unit all clear-all
***********************************************************************
* Warning - Restoring factory defaults will delete the existing *
* persistent settings (stacking, fanout, etc.) *
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution ! *
***********************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
-- Restore status --
Unit Nvram Config
------------------------
0 Success Success
1 Success Success
2 Success Success
3 Not present
4 Not present
5 Not present
6 Not present
7 Not present
8 Not present
9 Not present
10 Not present
11 Not present
Power-cycling the unit(s)
FTOS#
File Management | 41
42 | File Management
Figure 3-2.
restore factory-defaults (single unit in a stack) Command Example
FTOS#restore factory-defaults stack-unit 0 clear-all
***********************************************************************
* Warning - Restoring factory defaults will delete the existing *
* startup-config and all persistent settings (stacking, fanout, etc.)*
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution ! *
***********************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
-- Restore status --
Unit Nvram Config
------------------------
0 Success Success
Power-cycling the unit(s).
FTOS#
Figure 3-3.
restore factory-defaults (NvRAM only, all units in a stack) Command
Example
FTOS#restore factory-defaults stack-unit all nvram
***********************************************************************
* Warning - Restoring factory defaults will delete the existing *
* persistent settings (stacking, fanout, etc.) *
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution ! *
***********************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
-- Restore status --
Unit Nvram Config
------------------------
0 Success
1 Success
2 Success
3 Not present
4 Not present
5 Not present
6 Not present
7 Not present
8 Not present
9 Not present
10 Not present
11 Not present
Power-cycling the unit(s)
FTOS#
Figure 3-4.
restore factory-defaults (NvRAM only, single unit in a stack) Command
Example
FTOS#restore factory-defaults stack-unit 1nvram
***********************************************************************
* Warning - Restoring factory defaults will delete the existing *
* persistent settings (stacking, fanout, etc.) *
* After restoration the unit(s) will be powercycled immediately. *
* Proceed with caution ! *
***********************************************************************
Proceed with factory settings? Confirm [yes/no]:yes
-- Restore status --
Unit Nvram Config
------------------------
1Success
Power-cycling the unit(s).
FTOS# restore fpga-image c Copy the backup C-Series FPGA image to the primary FPGA image.
Syntax restore fpga-image { rpm | linecard } number
Parameters rpm linecard number
Enter rpm to upgrade an RPM FPGA.
Enter linecard to upgrade a line card FPGA.
Enter the line card or RPM slot number.
C-Series Line Card Range: 0-7, RPM Range: 0-1
Defaults
Command Mode
Command
History
None.
EXEC Privilege
Version 7.7.1.0
Version 7.5.1.0
Renamed keyword primary-fpga-flash to fpga-image .
Introduced on C-Series
File Management | 43
Example Command example: restore fpga-image
FTOS#restore fpga-image linecard 4
Current FPGA information in the system:
=======================================
Card FPGA Name Current Version New Version
------------------------------------------------------------------------
LC4 48 Port 1G LCM FPGA A: 3.6 restore
***********************************************************************
* Warning - Upgrading FPGA is inherently risky and should *
* only be attempted when necessary. A failure at this upgrade may *
* cause a board RMA. Proceed with caution ! *
***********************************************************************
Restore fpga image for linecard 4 [yes/no]: yes
FPGA restore in progress. Please do NOT power off the card.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Upgrade result :
================
Linecard 4 FPGA restore successful.
Usage
Information
Related
Commands
Reset the card using the reset power-cycle
Reset a card.
option after restoring the FPGA command.
show boot system
Displays information about boot images currently configured on the system.
c e
Syntax show boot system { all | linecard [ slot | all ] | rpm | stack-unit [ 0-11 | all ]}
Parameters all linecard rpm stack-unit
Enter this keyword to display boot image information for all linecards and rpms.
Enter this keyword to display boot image information for the specified linecard(s) on the system.
Enter this keyword to display boot image information for all rpms on the system.
Enter this keyword to display boot image information for one or all the S60 units.
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.7.1.0
Introduced on S60
Introduced on C-Series and E-Series
44 | File Management
Example
FTOS#show boot system all
Current system image information in the system:
=============================================
Type Boot Type A B
----------------------------------------------------------------
CP DOWNLOAD BOOT invalid invalid
RP1 DOWNLOAD BOOT invalid invalid
RP2 DOWNLOAD BOOT invalid invalid linecard 0 is not present.
linecard 1 DOWNLOAD BOOT invalid invalid linecard 2 DOWNLOAD BOOT 4.7.5.387 6.5.1.8
linecard 3 DOWNLOAD BOOT invalid invalid linecard 4 DOWNLOAD BOOT invalid invalid linecard 5 is not present.
Peer RPM:
=============================================
Type Boot Type A B
----------------------------------------------------------------
CP DOWNLOAD BOOT invalid invalid
RP1 DOWNLOAD BOOT invalid invalid
RP2 DOWNLOAD BOOT invalid invalid show bootvar
Display the variable settings for the system boot parameters.
c e
Syntax show bootvar
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.5.1.0
Introduced on S60
Introduced on C-Series
E-Series original Command
Example Command Output example: show bootvar
FTOS#show bootvar
PRIMARY IMAGE FILE = ftp://box:[email protected]//home/5.3.1/5.3.1.0/FTOS-ED-RPM1-5.3.1.0.bin
SECONDARY IMAGE FILE = variable does not exist
DEFAULT IMAGE FILE = flash://FTOS-ED-5.3.1.0.bin
LOCAL CONFIG FILE = variable does not exist
PRIMARY HOST CONFIG FILE = variable does not exist
SECONDARY HOST CONFIG FILE = variable does not exist
PRIMARY NETWORK CONFIG FILE = variable does not exist
SECONDARY NETWORK CONFIG FILE = variable does not exist
CURRENT IMAGE FILE = ftp://box:[email protected]//home/5.3.1/5.3.1.0/FTOS-ED-RPM1-5.3.1.0.bin
CURRENT CONFIG FILE 1 = flash://startup-config
CURRENT CONFIG FILE 2 = variable does not exist
CONFIG LOAD PREFERENCE = local first
BOOT INTERFACE GATEWAY IP ADDRESS = variable does not exist
FTOS#
File Management | 45
Related
Commands
Set the location of configuration files on local devices.
Set the location of configuration files from the remote host.
Set the location of configuration files from a remote network.
Set the location of FTOS image files.
Specify the IP address of the default next-hop gateway for the management subnet.
show file ces Display contents of a text file in the local filesystem.
Syntax show file filesystem
Parameters filesystem
•
•
Enter one of the following: flash: for the internal Flash slot0: for the external Flash
EXEC Privilege Command Modes
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series original Command
Command output example (Partial): show file
FTOS#show file flash://startup-config
!
boot system rpm0 primary ftp://test:[email protected]//home/images/
E1200_405-3.1.2b1.86.bin
boot system rpm0 secondary flash://FTOS-ED-6.1.1.0.bin
boot system rpm0 default ftp://:@/\
!
redundancy auto-synchronize persistent-data redundancy primary rpm0
! hostname E1200-20
!
enable password 7 94849d8482d5c3
!
username test password 7 93e1e7e2ef
!
enable restricted 7 948a9d848cd5c3
! protocol spanning-tree 0
bridge-priority 8192
rapid-root-failover enable
! interface GigabitEthernet 0/0
no ip address
shutdown
Related
Commands
format (C-Series and E-Series)
Erase all existing files and reformat a filesystem on the E-Series or
C-Series platform.
46 | File Management
Erase all existing files and reformat the filesystem in the internal flash memory on and S-Series.
Display information about the file systems on the system. show file-systems ces Display information about the file systems on the system.
Syntax show file-systems
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Example Command Output example: show file-system
FTOS#show file-systems
Size(b) Free(b) Feature Type Flags Prefixes
63938560 51646464 dosFs2.0 MMC rw flash:
63938560 18092032 dosFs1.0 MMC rw slot0:
- - - network rw ftp:
- - - network rw tftp:
- - - network rw scp:
FTOS# show file-systems Command Output Fields
Field size(b)
Free(b)
Feature
Type
Flags
Prefixes
Description
Lists the size in bytes of the storage location. If the location is remote, no size is listed.
Lists the available size in bytes of the storage location. If the location is remote, no size is listed.
Displays the formatted DOS version of the device.
Displays the type of storage. If the location is remote, the word network is listed.
Displays the access available to the storage location. The following letters indicate the level of access:
• r = read access
• w = write access
Displays the name of the storage location.
Related
Commands
format (C-Series and E-Series)
Erase all existing files and reformat a filesystem.
Erase all existing files and reformat the filesystem in the internal flash memory.
File Management | 47
Display contents of a text file in the local filesystem.
Display the current SFM status.
show linecard c e View the current linecard status.
Syntax show linecard [ number | all | boot-information ]
Parameters number all boot-information
Enter a number to view information on that linecard.
Range: 0 to 6.
(OPTIONAL) Enter the keyword all to view a table with information on all present linecards.
(OPTIONAL) Enter the keyword boot-information to view cache boot information of all line cards in table format.
Command Modes EXEC Privilege
Command
History
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Example Command output example (E-Series): show linecard boot-information
FTOS#show linecard boot-information
-- Line cards --
Serial Booted Next Cache
Boot
# Status CurType number from boot boot flash
-------------------------------------------------------------------------
--------------------------------------
0 -
1 -
2 -
3 online E48TF FX000032632 4.7.7.171 4.7.7.171 A: invalid B: invalid A: 2.3.2.1 [b] B: 2.3.2.1
4 -
5 -
6 -
FTOS#
48 | File Management
show os-version ces Display the release and software image version information of the image file specified or, optionally, the image loaded on the RPM (C-Series and E-Series only).
Syntax show os-version [ file-url ]
Parameters file-url (OPTIONAL) Enter the following location keywords and information:
• For a file on the internal Flash, enter flash:// followed by the filename.
• For a file on an FTP server, enter ftp:// user:password @ hostip/filepath
• For a file on the external Flash, enter slot0:// followed by the filename.
• For a file on a TFTP server, enter tftp:// hostip/filepath
Note: ftp and tftp are the only S-Series options.
Defaults
Command Modes
Command
History
No default values or behavior
EXEC Privilege
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series original Command
Usage
Information Note: A filepath that contains a dot ( .
) is not supported.
Example Command output example (E-Series): show os-version
FTOS#show os-version
RELEASE IMAGE INFORMATION :
---------------------------------------------------------------------
Platform Version Size ReleaseTime
E-series: EF 7.5.1.0 27676168 Aug 15 2007 10:06:21
TARGET IMAGE INFORMATION :
---------------------------------------------------------------------
Type Version Target checksum
runtime 7.5.1.0 control processor passed
runtime 7.5.1.0 route processor passed
runtime 7.5.1.0 terascale linecard passed
boot flash 2.4.1.1 control processor passed
boot flash 2.4.1.1 route processor passed
boot flash 2.3.1.3 terascale linecard passed
boot selector 2.4.1.1 control processor passed
boot selector 2.4.1.1 route processor passed
boot selector 2.3.1.3 terascale linecard passed
FTOS#
File Management | 49
Example Command output example (C-Series): show os-version
FTOS#show os-version
RELEASE IMAGE INFORMATION :
---------------------------------------------------------------------
Platform Version Size ReleaseTime
C-series: CB 7.5.1.0 23734363 Aug 18 2007 11:49:51
TARGET IMAGE INFORMATION :
---------------------------------------------------------------------
Type Version Target checksum
runtime 7.5.1.0 control processor passed
runtime 7.5.1.0 linecard passed
boot flash 2.7.0.1 control processor passed
boot flash 1.0.0.40 linecard passed
boot selector 2.7.0.1 control processor passed
boot selector 1.0.0.40 linecard passed
FPGA IMAGE INFORMATION :
---------------------------------------------------------------------
Card Version Release Date
Primary RPM 4.1 May 02 2007
Secondary RPM 4.1 May 02 2007
LC0 3.2 May 02 2007
LC5 3.2 May 02 2007
LC6 2.2 May 02 2007
FTOS# show running-config ces Display the current configuration and display changes from the default values.
Syntax show running-config [ entity ] [ configured ] [ status ]
Parameters entity
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
(OPTIONAL) Enter one of the keywords listed below to display that entity’s current (non-default) configuration. Note that, if nothing is configured for that entity, nothing is displayed and the prompt returns: aaa for the current AAA configuration acl f or the current ACL configuration arp for the current static ARP configuration as-path for the current AS-path configuration bgp for the current BGP configuration boot for the current boot configuration cam-profile for the current CAM profile in the configuration.
class-map for the current class-map configuration community-list for the current community-list configuration fefd for the current FEFD configuration ftp for the current FTP configuration fvrp for the current FVRP configuration host for the current host configuration hardware-monitor for hardware-monitor action-on-error settings igmp for the current IGMP configuration interface for the current interface configuration isis for the current ISIS configuration line for the current line configuration load-balance for the current port-channel load-balance configuration logging for the current logging configuration
50 | File Management
configured status
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
• mac for the current MAC ACL configuration mac-address-table for the current MAC configuration management-route for the current Management port forwarding configuration mroute for the current Mroutes configuration ntp f or the current NTP configuration ospf f or the current OSPF configuration pim f or the current PIM configuration policy-map-input for the current input policy map configuration policy-map-output for the current output policy map configuration prefix-list for the current prefix-list configuration privilege for the current privilege configuration radius for the current RADIUS configuration redirect-list for the current redirect-list configuration redundancy for the current RPM redundancy configuration resolve for the current DNS configuration rip for the current RIP configuration route-map for the current route map configuration snmp for the current SNMP configuration spanning-tree for the current spanning tree configuration static for the current static route configuration tacacs+ for the current TACACS+ configuration tftp for the current TFTP configuration trace-group for the current trace-group configuration trace-list for the current trace-list configuration users for the current users configuration wred-profile for the current wred-profile configuration
(OPTIONAL) Enter the keyword configuration to display line card interfaces with non-default configurations only.
(OPTIONAL) Enter the keyword status to display the checksum for the running configuration and the start-up configuration.
Command Modes
Command
History
EXEC Privilege
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.4.0
Introduced on the S60.
Added hardware-monitor option
Introduced on S-Series
Introduced on C-Series
Expanded to include last configuration change and start-up last updated (date and time) and who made the change
Added status option
File Management | 51
Example Command output example (partial): show running-config
FTOS#show running-config
Current Configuration ...
! Version 7.4.1.0
! Last configuration change at Tue Apr 10 17:43:38 2007 by admin
! Startup-config last updated at Thu Mar 29 02:35:08 2007 by default
!
boot system rpm0 primary flash://FTOS-EF-7.4.1.0.bin
boot system rpm0 secondary flash://FTOS-EF-6.3.1.2.bin
boot system rpm0 default flash://FTOS-EF-6.5.1.8.bin
!
...
Example Command output example: show running-config
FTOS#show running-config status running-config checksum 0xB4B9BF03 startup-config checksum 0x8803620F
FTOS#
Usage
Information
The status option enables you to display the size and checksum of the running configuration and the startup configuration.
show sfm c e View the current SFM status.
Syntax show sfm [ number [ brief ] | all ]
Parameters number all brief
Enter a number to view information on that SFM.
Range: 0 to 8.
(OPTIONAL) Enter the keyword all to view a table with information on all present SFMs.
(OPTIONAL) Enter the keyword brief to view a list with SFM status.
Note: The brief option is not available on C-Series.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.8
Version 7.5.1.0
Updated to support PPID on the S60
Introduced on C-Series
E-Series original Command
52 | File Management
E-Series Example Command output example (Partial) on E-Series: show sfm
FTOS#show sfm
Switch Fabric State: up
Switch Mode: SFM3
-- SFM card 0 --
Status : active (Older version of SFM for Exascale)
Card Type : SFM3 - Switch Fabric Module
Up Time : 18 hr, 40 min
Last Restart : remote-off
Temperature : 42C
Power Status : AC
Serial Number : VC074300030
Part Number : 7520020001 Rev 03
Vendor Id : 04
Date Code : 01402006
Country Code : 01
Piece Part ID : CN-0RVY43-75412-123-0030
PPID Revision : 003
Service Tag : SVCTG00
Expr Svc Code : 628 458 860 16
FPGA : 0x0.0.3
Booting from : EEPROM0
-- SFM card 1 --
Status : active (Older version of SFM for Exascale)
Card Type : SFM3 - Switch Fabric Module
Up Time : 18 hr, 40 min
Last Restart : remote-off
Temperature : 42C
Power Status : AC
Serial Number : VC074300032
Part Number : 7520020001 Rev 03
Vendor Id : 04
Date Code : 01402006
Country Code : 01
Piece Part ID : CN-0RVY43-75412-82B-0456
PPID Revision : 1B2
Service Tag : SVCTG01
Expr Svc Code : 628 458 860 17
FPGA : 0x0.0.3
Booting from : EEPROM0
!-------- output truncated -------------!
Command output example: show sfm all
FTOS#show sfm all
Switch Fabric State: up
Switch Mode: SFM3
-- Switch Fabric Modules --
Slot Status
---------------------------------------------------------------------------
0 active (Older version of SFM for Exascale)
1 active (Older version of SFM for Exascale)
2 active (Older version of SFM for Exascale)
3 active (Older version of SFM for Exascale)
4 not present
FTOS#
Table 3-1.
show sfm Command Output Fields
Field
Switch Fabric State:
Status
Card Type
Description
States that the Switch Fabric is up (8 SFMs are online and operating).
Displays the SFM’s active status.
States the type of SFM.
File Management | 53
Table 3-1.
show sfm Command Output Fields
Field
Up Time
Temperature
Power Status
Serial Num
Part Num
Vendor ID
Date Code
Country Code
Description
Displays the number of hours and minutes since the RPM’s last reboot.
Displays the temperature of the RPM.
Minor alarm status if temperature is over 65° C.
Displays power status: absent, down, or up
Displays the line card serial number.
Displays the line card part number.
Displays an internal code, which specifies the manufacturing vendor.
Displays the line card’s manufacturing date.
Displays the country of origin.
01 = USA show startup-config ces Display the startup configuration.
Syntax show startup-config
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Expanded to include last configuration change and start-up last updated (date and time) and who made the change.
Example Command output example (partial): show startup-config
FTOS#show startup-config
! Version 7.4.1.0
! Last configuration change at Thu Mar 29 02:16:07 2007 by default
! Startup-config last updated at Thu Mar 29 02:35:08 2007 by default
!
boot system rpm0 primary flash://FTOS-EF-7.4.1.0.bin
boot system rpm0 secondary flash://FTOS-EF-6.3.1.2.bin
boot system rpm0 default flash://FTOS-EF-6.5.1.8.bin
!
...
Related
Commands
Display current (running) configuration.
54 | File Management
show version c e s z Display the current FTOS version information on the system.
Syntax
Command Modes
Command
History show version
EXEC Privilege
Example
(E-Series)
Example
(S-Series)
Version 9.0.0.0
Version 8.3.12.0
Version 7.6.1.0
Introduced on Z9000.
Introduced on S4810.
Introduced on S-Series.
Version 7.5.1.0
Introduced on C-Series.
E-Series original Command
FTOS#show version
Dell Force10 Networks Real Time Operating System SoftwareDe
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: 5.3.1.0
Copyright (c) 1999-2004 by Dell Force10 Networks, Inc.
Build Time: Sun May 9 00:57:03 PT 2004
Build Path: /local/local0/Release/5-4-1/SW/Bsp/Diag
Dell Force10 uptime is 1 days, 3 hours, 16 minutes
System image file is "/home/5.3.1/5.3.1.0/FTOS-ED-RPM1-5.3.1.0.bin"
Chassis Type: E1200
Control Processor: IBM PowerPC 405GP (Rev D) with 268435456 bytes of memory.
Route Processor 1: IBM PowerPC 405GP (Rev D) with 536870912 bytes of memory.
Route Processor 2: IBM PowerPC 405GP (Rev D) with 536870912 bytes of memory.
128K bytes of non-volatile configuration memory.
1 Route Processor Module
9 Switch Fabric Module
1 24-port GE line card with SFP optics (EE)
1 12-port GE Flex line card with SFP optics (EE)
1 2-port OC48c line card with SR optics (EC)
2 24-port GE line card with SX optics (EB)
1 2-port 10GE WAN PHY line card with 10Km (1310nm) optics (EE)
1 12-port GE Flex line card with SFP optics (EC)
1 2-port 10GE LAN PHY line card with 10Km (1310nm) optics (ED)
1 12-port OC12c/3c PoS line card with IR optics (EC)
1 24-port GE line card with SFP optics (ED)
1 FastEthernet/IEEE 802.3 interface(s)
120 GigabitEthernet/IEEE 802.3 interface(s)
14 SONET network interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS#
FTOS#show version
Dell Force10 Networks Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: E7-8-1-13
Copyright (c) 1999-2008 by Dell Force10 Networks, Inc.
Build Time: Mon Nov 24 18:59:27 2008
Build Path: /local/local/sw/build/build2/Release/7-8-1/SW/SRC
Dell Force10 uptime is 1 minute(s)
File Management | 55
Example
(S4810)
System Type: S50V
Control Processor: MPC8451E with 252739584 bytes of memory.
32M bytes of boot flash memory.
1 48-port E/FE/GE with POE (SB)
48 GigabitEthernet/IEEE 802.3 interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS#
FTOS#
FTOS#show version
Dell Force10 Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: Z9K-ICC-PRIM-SYNC-8-3-11-173
Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved.
Build Time: Mon Jul 16 22:19:01 PDT 2012
Build Path: /local/local/build/build15/8.3.12.0/SW/SRC/Radius
FTOS uptime is 1 minute(s)
System image file is "s4810-14"
System Type: S4810
Control Processor: Freescale QorIQ P2020 with 2147483648 bytes of memory.
128M bytes of boot flash memory.
1 52-port GE/TE/FG (SE)
52 Ten GigabitEthernet/IEEE 802.3 interface(s)
FTOS#
FTOS#
FTOS#
FTOS#config t
FTOS(conf)#int te 0/5
FTOS(conf-if-te-0/5)#no shut
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#ipv6 nd prefix FEC0::/10
FTOS(conf-if-te-0/5)#
FTOS(conf-if-te-0/5)#show conf
!
interface TenGigabitEthernet 0/5
ip address 78.21.1.3/24
ipv6 nd prefix fec0::/10
flowcontrol rx on tx on
no shutdown
FTOS(conf-if-te-0/5)#
FTOS#
56 | File Management
Example (Z9000) st-pet-z9k-6#show version
Dell Force10 Real Time Operating System Software
Dell Force10 Operating System Version: 2.1
Dell Force10 Application Software Version: 9.0(0.0)
Copyright (c) 1999-2012 by Dell Inc. All Rights Reserved.
Build Time: Mon Oct 22 00:52:30 PDT 2012
Build Path: /sites/sjc/work/build/buildSpaces/build04/E9-0-0/SW/SRC st-pet-z9k-6 uptime is 23 hour(s), 23 minute(s)
System image file is "system://A"
System Type: Z9000
Control Processor: Intel Jasper Forest with 3474911232 bytes of memory.
8G bytes of boot flash memory.
1 32-port TE/FG (ZB)
24 Ten GigabitEthernet/IEEE 802.3 interface(s)
26 Forty GigabitEthernet/IEEE 802.3 interface(s)
Table 3-2.
show version Command Fields
Lines beginning with
Dell Force10 Network...
Dell Force10 Operating...
Dell Force10 Application...
Copyright (c)...
Build Time...
Build Path...
Dell Force10 uptime is...
System image...
Chassis Type:
Control Processor:...
Route Processor 1:...
Route Processor 2:...
128K bytes...
1 Route Processor...
Description
Name of the operating system
OS version number
Software version
Copyright information
Software build’s date stamp
Location of the software build files loaded on the system
Amount of time the system has been up
Image file name
Chassis type (E1200, E600, E600i, E300, C300, C150)
Control processor information and amount of memory on processor.
E-Series route processor 1 information and the amount of memory on that processor.
E-Series route processor 2 information and the amount of memory on that processor.
Amount and type of memory on system.
Hardware configuration of the system, including the number and type of physical interfaces available.
File Management | 57
upgrade (E-Series version) e Upgrade the bootflash, boot selector, or system image on a processor.
Syntax upgrade { bootflash-image | bootselector-image | system-image } { all | linecard linecard-slot
| rpm } { booted | file-url }
Parameters bootflash-image Enter to upgrade the bootflash image.
bootselector-image Enter image.
bootselector-image
Use with TAC supervision only.
to upgrade the boot selector system-image Enter the keyword system-image to upgrade the cache boot image.
all Enter processors in the E-Series. This keyword does not upgrade the bootflash on the standby RPM.
linecard linecard-slot Enter the keyword linecard followed by the slot number to change the bootflash image on a specific line card.
E-Series Range: 0 to 13 on the E1200; 0 to 6 for the E600; 0 to 5 on the
E300 rpm Enter the keyword rpm to upgrade the bootflash/boot selector image on all processors on the RPM.
booted file-url
Enter this keyword to upgrade using the image packed with the currently running FTOS image.
Enter the following location keywords and information to upgrade using an
FTOS image other than the one currently running:
Enter the transfer method and file location: flash:// filename ftp:// userid : password @ hostip / filepath slot0:// filename tftp:// hostip / filepath
Defaults
Command Modes
Command
History
No configuration or default values
EXEC Privilege
Version 7.7.1.0
Removed alt-bootflash-image , alt-bootselector-image , alt-system-image options , rp1 , rp2 , and cp options.
E-Series original Command
Usage
Information
Related
Commands
A system message appears stating the Bootflash upgrade status. Reload the system to boot from the upgraded boot images.
Once the URL is specified, the same downloaded image can be used for upgrading an individual RPM, line cards, SFM FPGA, and system-image for cache-boot without specifying the file-url again using the command upgrade { bootflash-image | bootselector-image | system-image } { all | linecard linecard-slot | rpm }. After 20 minutes, the cached memory is released and returned for general use, but the URL is maintained and you do not have to specify it for subsequent upgrades.
Upgrade the FPGA version in the specified E-Series SFM.
Display configured boot image information
58 | File Management
upgrade (C-Series version) c Upgrade the bootflash or boot selector image on a processor.
Syntax upgrade { bootflash-image | bootselector-image | system-image }
{ all | linecard { number | all } | rpm } [ booted | file-url | repair ]
Parameters bootflash-image Enter to upgrade the bootflash image.
bootselector-image Enter bootselector-image to upgrade the boot selector image. Use with TAC supervision only.
system-image Enter to upgrade the system image. Use with TAC supervision only.
all Enter all processors. This keyword does not upgrade the bootflash on the standby
RPM.
Enter the keyword all after the keyword linecard to upgrade the bootflash or boot selector image on all linecards.
linecard number Enter the keyword linecard followed by the line card slot number.
Range:
E1200, E1200i AC/DC: 0-13
E600, E600i: 0-6
E300: 0-5
C300: 0-7
C150: 0-3 rpm Enter on all processors on the RPM.
repair Enter this keyword to upgrade a line card newly inserted into an already upgraded chassis. This option is only available with the system-image keyword.
booted Upgrade the bootflash or bootselector image using the currently running
FTOS image.
file-url Enter the following location keywords and information to upgrade using an
FTOS image other than the one currently running:
• To specify an FTOS image on the internal flash, enter flash:// file-path / filename .
• To specify an FTOS image on an FTP server, enter ftp:// user:password @ hostip / filepath
• To specify an FTOS image on the external flash on the primary RPM, slot0:// file-path / filename
• To copy a file on a TFTP server, enter tftp:// hostip / filepath / filename
Defaults
Command Modes
FTOS uses the boot flash image that was packed with it if no URL is specified.
EXEC Privilege
Command
History
Version 7.7.1.0
Version 7.5.1.0
Introduced
E-Series original Command system-image
Introduced on C-Series
option
File Management | 59
Usage
Information
Related
Commands
A system message appears stating the Bootflash upgrade status. Reload the system to boot from the upgraded boot images.
Once the URL is specified, the same downloaded image can be used for upgrading an individual RPM, line cards, SFM FPGA, and system-image for cache-boot without specifying the file-url again using the command upgrade { bootflash-image | bootselector-image | system-image } { all | linecard linecard-slot | rpm }. After 20 minutes, the cached memory is released and returned for general use, but the URL is maintained and you do not have to specify it for subsequent upgrades.
Upgrade the FPGA version in the specified E-Series SFM.
Display configured boot image information upgrade (S-Series management unit) s Upgrade the bootflash image or system image of the S-Series management unit.
Syntax upgrade { boot | system } { ftp: | scp: | tftp: | flash: { A: |B: } | stack-unit | usbflash :} file-url
Parameters boot system ftp: scp: tftp: flash:
A: | B: stack-unit: usbflash:
Enter this keyword to change the boot image.
Enter this keyword to change the system image.
After entering this keyword you can either follow it with the location of the source file in this form: //userid:password@hostip/filepath, or press Enter to launch a prompt sequence.
After entering this keyword you can either follow it with the location of the source file in this form: //userid:password@hostip/filepath , or press Enter to launch a prompt sequence.
After entering this keyword you can either follow it with the location of the source file in this form: //hostlocation/filepath , or press Enter to launch a prompt sequence.
After entering this keyword you can either follow it with the location of the source file in this form: flash //filepath ,or press Enter to launch a prompt sequence.
S60 only
Enter the partition to upgrade from the flash.
S60 only
After entering this keyword to synch the image to the stack-unit.
After entering this keyword you can either follow it with the location of the source file in this form: usbflash://filepath , or press Enter to launch a prompt sequence.
S60 only
Defaults
Command Modes
Command
History
No configuration or default values
EXEC Privilege
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60
Added support for TFTP and SCP.
Introduced on S-Series
60 | File Management
Usage
Information
You must reload FTOS after executing this command. Use the command upgrade system stack-unit
(S-Series stack member) on page 242 to copy FTOS from the management unit to one or more stack members.
FTOS#upgrade system ?
ftp: Copy from remote file system (ftp://userid:password@hostip/filepath) scp: Copy from remote file system (scp://userid:password@hostip/filepath) tftp: Copy from remote file system (tftp://hostip/filepath)
FTOS#$pgrade system ftp://username:[email protected]/FTOS-SB-7.7.1.0.bin
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!
Erasing Sseries ImageUpgrade Table of Contents, please wait
.!..................................................................................................
....................................................................................................
....................................................................................................
....................................................................................................
....................................................................................................
....................................................................................................
....................................................................................................
....................................................................................................
....................................................................................................
....................................!
12946259 bytes successfully copied
FTOS#reload upgrade fpga-image (E-Series) e Upgrade the FPGA version in the specified E-Series SFM and automatically initiate an automatic reset to complete the version upgrade.
Syntax upgrade fpga-image { sfm } { all | id } [booted | flash:// | ftp: |slot0: | tftp]
Parameters sfm rpm all id
Enter the keyword sfm to upgrade the FPGA on the SFMs.
Enter the keyword rpm to upgrade all processors on the RPM.
Enter the keyword all to upgrade the FPGA on all the SFMs.
Enter the keyword id to upgrade the FPGA on all a specific SFM.
Enter the path to the upgrade source. Entering <CR> updates the FPGA from the flash.
Defaults
Command Modes
Command
History
No default values or behavior
EXEC Privilege
Example
Version 8.3.1.0
Version 7.5.1.0
Added rpm option
Introduced on E-Series
Command example: upgrade sfm autoreset
FTOS#upgrade sfm 1 autoreset
SFM1: upgrade in progress
!!! !!! !!!
SFM1: upgrade complete
SFM1 is active. Resetting it might temporarily impact traffic.
Proceed with reset [confirm yes/no]: yes
FTOS#
File Management | 61
Related
Commands
0
Usage
Information
Display the SFM status.
Upgrade the E-Series.
On E-Series ExaScale, you cannot upgrade SFMs using this command when Cache Boot is configured.
If you attempt an upgrade, you must reload the chassis to recover.
upgrade fpga-image (C-Series) c Upgrade the primary FPGA image.
Syntax upgrade fpga-image { rpm { number | all }| linecard { number | all } [ system-fpga | link-fpga ] | all } { booted | file-url }
Parameters rpm number linecard number all system-fpga link-fpga booted file-url
Enter rpm followed by the RPM slot number to upgrade an RPM FPGA
Range: 0-1
Enter linecard followed by the line card slot number to upgrade a linecard FPGA.
Range: 0-7 on the C300, 0-3 on the C150
Enter the keyword all to upgrade all RPM and linecard FPGAs. Enter the keyword all after the keyword rpm to upgrade all FPGAs on all RPMs.
Enter the keyword all after the keyword linecard to upgrade all FPGAs on all linecards.
(OPTIONAL) Enter system-fpga to upgrade only the system FPGA on a fiber line card. Contact the Dell Networking TAC before using this keyword.
(OPTIONAL) Enter link-fpga to upgrade only the link FPGA on a fiber line card. Contact the Dell Networking TAC before using this keyword.
Upgrade the FPGA image using the currently running FTOS image.
Enter the following location keywords and information to upgrade the
FPGA using an FTOS image other than the one currently running:
• To specify an FTOS image on the internal flash, enter flash:// file-path / filename .
• To specify an FTOS image on an FTP server, enter ftp:// user:password @ hostip / filepath
• To specify an FTOS image on the external flash on the primary RPM, slot0:// file-path / filename
• To copy a file on a TFTP server, enter tftp:// hostip / filepath / filename
Defaults
Command Mode
None.
EXEC Privilege
Command
History
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
Renamed the primary-fpga-flash keyword to fpga-image . Added support for upgrading using a remote FTOS image.
Added support for the all keyword
Introduced on C-Series
62 | File Management
Example Command example: upgrade fpga-image
FTOS#conf
FTOS(conf)# upgrade primary-fpga-flash rpm
Proceed to upgrade primary fpga flash for rpm 0 [confirm yes/no]: yes
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
FTOS#
Usage
Information
Related
Commands
Reset the card using the reset restore fpga-image power-cycle option after restoring the FPGA command.
Reset a line card or RPM.
This command copies the backup FPGA image to the primary FPGA image.
upgrade fpga-image (S60)
Upgrade the FPGA version on the S60.
Syntax
Parameters
Defaults
Command Modes
Command
History
Example upgrade fpga-image stack-unit { 0-11 } booted stack-unit booted
Enter the keyword stack-unit to upgrade the FPGA on the specified S60 chassis.
Upgrade the FPGA image using the currently running FTOS image.
No default values or behavior
EXEC Privilege
Version 8.3.3.1
Introduced on the S60
Command example: upgrade fpga-image
FTOS#upgrade fpga-image stack-unit 0 booted
Current FPGA information in the system:
=======================================
Card FPGA Name Current Version New Version
------------------------------------------------------------------------
Unit0 S60 SYSTEM FPGA 15 16
***********************************************************************
* Warning - Upgrading FPGA is inherently risky and should *
* only be attempted when necessary. A failure at this upgrade may *
* cause a board RMA. Proceed with caution ! *
***********************************************************************
Upgrade fpga image for stack-unit 0 [yes/no]: yes
FPGA upgrade in progress. Please do NOT power off the card.
!!!!!!!!!!!!!!!!!!
Upgrade result :
================
Unit 0 FPGA upgrade successful. Power cycle the stack-unit to complete the upgrade.
FTOS#
File Management | 63
64 | File Management
4
Control and Monitoring
Overview
This chapter contains the following commands to configure and monitor the system, including Telnet,
FTP, and TFTP as they apply to platforms c e s
.
Commands
banner motd cam-audit linecard
clear alarms clear command history clear line
configure debug cpu-traffic-stats
enable enable xfp-power-updates
ftp-server topdir ftp-server username
show console lp show cpu-traffic-stats
show environment (C-Series and E-Series)
show inventory (C-Series and E-Series)
show linecard boot-information
show memory (C-Series and E-Series)
show processes cpu (C-Series and E-Series)
show processes ipc flow-control
show processes memory (C-Series and E-Series)
show processes memory (S-Series)
show tech-support (C-Series and E-Series)
Control and Monitoring | 65
ip ftp username ip telnet server enable
ip telnet source-interface ip tftp source-interface
audible cut-off e Turn off an audible alarm.
Syntax audible cut-off
Defaults Not configured.
Command Modes EXEC Privilege
telnet-peer-stack-unit telnet-peer-stack-unit terminal length
util-threshold cpu (C- and E-Series)
util-threshold mem (C- and E-Series)
banner exec c e s Configure a message that is displayed when a user enters the EXEC mode.
Syntax banner exec c line c
To delete a banner, enter no banner exec .
Parameters c line
Enter the keywords banner exec , and then enter a character delineator, represented here by the letter c , and press ENTER.
Enter a text string for your banner message ending the message with your delineator.
In the example below, the delineator is a percent character (%); the banner message is
“testing, testing”.
Defaults No banner is displayed.
66 | Control and Monitoring
Command Modes
Command
History
CONFIGURATION
Usage
Information
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command
Optionally, use the banner exec command to create a text string that is displayed when the user accesses the EXEC mode. The exec-banner command toggles that display.
FTOS(conf)#banner exec ?
LINE c banner-text c, where 'c' is a delimiting character
FTOS(conf)#banner exec %
Enter TEXT message. End with the character '%'.
This is the banner%
FTOS(conf)#end
FTOS#exit
4d21h5m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console
This is the banner
FTOS con0 now available
Press RETURN to get started.
4d21h6m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console
This is the banner
FTOS>
Related
Commands
Sets a banner for login connections to the system.
Sets a Message of the Day banner.
Enable the display of a text string when the user enters the EXEC mode.
Enable and configure console and virtual terminal lines to the system.
banner login c e s Set a banner to be displayed when logging on to the system.
Syntax
Parameters banner login { keyboard-interactive | no keyboard-interactive } [ c line c ]
Enter no banner login to delete the banner text.
Enter no banner login keyboard-interactive to automatically go to the banner message prompt
(does not require a carriage return).
keyboard-interactive Enter this keyword to require a carriage return (CR) to get the message banner prompt.
Control and Monitoring | 67
Usage
Information
Related
Commands c line
Enter a delineator character to specify the limits of the text banner. In Figure 4-1 ,
the % character is the delineator character.
Enter a text string for your text banner message ending the message with your delineator.
In the example in
, the delineator is a percent character (%).
Ranges:
• maximum of 50 lines
• up to 255 characters per line
No banner is configured and the CR is required when creating a banner.
CONFIGURATION
Defaults
Command Modes
Command
History
Version 8.3.3.1
Version 8.2.1.0
Introduced on the S60.
Introduced keyboard-interactive keyword
Version 8.1.1.0
Version 7.6.1.0
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
A login banner message is displayed only in EXEC Privilege mode after entering the enable command followed by the password. These banners are not displayed to users in EXEC mode.
Example
Sets a banner to be displayed when you enter EXEC Privilege mode.
Sets a Message of the Day banner.
Figure 4-1.
Command Example: banner login
FTOS(conf)#banner login ?
keyboard-interactive Press enter key to get prompt
LINE c banner-text c, where 'c' is a delimiting character
FTOS(conf)#no banner login ?
keyboard-interactive Prompt will be displayed by default
<cr>
FTOS(conf)#banner login keyboard-interactive
Enter TEXT message. End with the character '%'.
This is the banner%
FTOS(conf)#end
FTOS#exit
13d21h9m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console
This is the banner
FTOS con0 now available
Press RETURN to get started.
13d21h10m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console
This is the banner
FTOS>
68 | Control and Monitoring
banner motd c e s Set a Message of the Day (MOTD) banner.
Syntax banner motd c line c
Parameters
To delete a Message of the Day banner, enter no banner motd .
c line
Enter a delineator character to specify the limits of the text banner. In the above figures, the % character is the delineator character.
Enter a text string for your message of the day banner message ending the message with your delineator.
In the example figures above, the delineator is a percent character (%).
Defaults
Command Modes
No banner is configured.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command
Usage
Information
Related
Commands
A MOTD banner message is displayed only in EXEC Privilege mode after entering the enable command followed by the password. These banners are not displayed to users in EXEC (non-privilege) mode.
Sets a banner to be displayed when you enter the EXEC Privilege mode.
Sets a banner to be displayed after successful login to the system.
cam-audit linecard e Enable audit of the IPv4 forwarding table on all line cards.
Syntax cam-audit linecard all ipv4-fib interval time-in-minutes
To disable audit, use the no cam-audit linecard all ipv4-fib command
Parameters all ipv4-fib interval time-in-minutes
Enter the keyword all to enable CAM audit on all line cards.
Enter the keyword ipv4-fib to designate the CAM audit on the IPv4 forwarding entries.
Enter the keyword interval followed by the frequency in minutes of the
CAM audit.
Range: 5 to 1440 minutes (24 hours)
Default: 60 minutes
Defaults Disabled
Control and Monitoring | 69
Command Modes
Command
History
Usage
Information
CONFIGURATION
Version 7.4.1.0
Introduced on E-Series
Enables periodic audits of software and hardware copies of the IPv4 forwarding table. clear alarms c e s Clear alarms on the system.
Syntax clear alarms
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Usage
Information
This command clear alarms that are no longer active. If an alarm situation is still active, it is seen in the system output.
clear command history c e s Clear the command history log.
Syntax clear command history
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command
Related
Commands
Display a buffered log of all commands entered by all users along with a time stamp.
clear line c e s Reset a terminal line.
Syntax clear line { line-number | aux 0 | console 0 | vty number }
70 | Control and Monitoring
Parameters line-number aux 0 console 0 vty number
Enter a number for one of the 12 terminal lines on the system.
Range: 0 to 11.
Enter the keywords aux 0 to reset the Auxiliary port.
Note: This option is supported on E-Series only.
Enter the keyword console 0 to reset the Console port.
Enter the keyword vty followed by a number to clear a Terminal line.
Range: 0 to 9
Command Modes
Command
History
EXEC Privilege
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command configure c e s Enter the CONFIGURATION mode from the EXEC Privilege mode.
Syntax configure [ terminal ]
Parameters terminal (OPTIONAL) Enter the keyword terminal to specify that you are configuring from the terminal.
EXEC Privilege Command Modes
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Figure 4-2.
Command Example: configure
FTOS#configure
FTOS(conf)# debug cpu-traffic-stats c e s Enable the collection of CPU traffic statistics.
Syntax debug cpu-traffic-stats
To disable the debugging, execute the no debug cpu-traffic-stats command.
Defaults Disabled
Control and Monitoring | 71
Command Modes
Command
History
EXEC Privilege
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
This command enables (and disables) the collection of CPU traffic statistics from the time this command is executed (not from system boot). However, excessive traffic received by a CPU will automatically trigger (turn on) the collection of CPU traffic statics. The following message is an
indication that collection of CPU traffic is automatically turned on. Use the show cpu-traffic-stats
to view the traffic statistics.
Excessive traffic is received by CPU and traffic will be rate controlled
Note: This command must be enabled before the
show cpu-traffic-stats command will
display traffic statistics . Dell Networking recommends that you disable debugging ( no debug cpu-traffic-stats) once troubleshooting is complete .
Related
Commands
Display cpu traffic statistics debug ftpserver c e s View transactions during an FTP session when a user is logged into the FTP server.
Syntax
Command Modes debug ftpserver
To stop debugging, enter no debug ftpserver .
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command disable c e Return to the EXEC mode.
Syntax disable [ level ]
Parameters level (OPTIONAL) Enter a number for a privilege level of the FTOS.
Range: 0 to 15.
Default: 1
Defaults 1
72 | Control and Monitoring
Command Modes
Command
History
EXEC Privilege
Version 8.1.1.0
Version 7.6.1.0
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command do c e s Allows the execution of most EXEC-level commands from all CONFIGURATION levels without returning to the EXEC level.
Syntax do command
Parameters command Enter an EXEC-level command.
Defaults
Command Modes
No default behavior
CONFIGURATION
INTERFACE
Command
History
Usage
Information
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
The following commands are not supported by the do command:
• enable
• disable
• exit
• config
Figure 4-3.
Command Example: do
FTOS(conf-if-te-5/0)#do clear counters
Clear counters on all interfaces [confirm]
FTOS(conf-if-te-5/0)#
FTOS(conf-if-te-5/0)#do clear logging
Clear logging buffer [confirm]
FTOS(conf-if-te-5/0)#
FTOS(conf-if-te-5/0)#do reload
System configuration has been modified. Save? [yes/no]: n
Proceed with reload [confirm yes/no]: n
FTOS(conf-if-te-5/0)#
Control and Monitoring | 73
enable c e s Enter the EXEC Privilege mode or any other privilege level configured. After entering this command, you may need to enter a password.
Syntax enable [ level ]
Parameters level (OPTIONAL) Enter a number for a privilege level of FTOS.
Range: 0 to 15.
Default: 15
Defaults
Command Modes
Command
History
15
EXEC
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Users entering the EXEC Privilege mode or any other configured privilege level can access configuration commands. To protect against unauthorized access, use the
command to configure a password for the enable command at a specific privilege level. If no privilege level is specified, the default is privilege level 15.
Related
Commands
Configure a password for the enable command and to access a privilege level.
enable xfp-power-updates c e s Enable XFP power updates for SNMP.
Syntax enable xfp-power-updates interval seconds
To disable XFP power updates, use the no enable xfp-power-updates command.
Parameters interval seconds Enter the keyword interval followed by the polling interval in seconds.
Range: 120 to 6000 seconds
Default: 300 seconds (5 minutes)
Defaults
Command Modes
Disabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series and E-Series
74 | Control and Monitoring
Usage
Information
The chassis MIB contain the entry chSysXfpRecvPower in the chSysPortTable table. Periodically, IFA polls the XFP power for each of the ports, and sends the values to IFM where it is cached. The default interval for the polling is 300 seconds (5 minutes). Use this command to enable the polling and to configure the polling frequency.
end c e s Return to the EXEC Privilege mode from other command modes (for example, the
CONFIGURATION or ROUTER OSPF modes).
Syntax end
Command Modes CONFIGURATION, SPANNING TREE, MULTIPLE SPANNING TREE, LINE, INTERFACE,
TRACE-LIST, VRRP, ACCESS-LIST, PREFIX-LIST, AS-PATH ACL, COMMUNITY-LIST,
ROUTER OSPF, ROUTER RIP, ROUTER ISIS, ROUTER BGP
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Related
Commands
Return to the lower command mode.
epoch e Set the epoch scheduling time for the chassis.
Syntax epoch { 2.4
| 3.2
| 10.4
}
To return to the default setting, enter no epoch .
Parameters
2.4
Enter the keyword 2.4
to set the epoch to 2.4 micro-seconds and lower the latency.
This option is available on the E600i and E1200i E-Series ExaScale systems only.
3.2
Enter 3.2
to set the epoch to 3.2 micro-seconds and lower the latency.
This option is available on the E600/E600i and E1200/E1200i only. ExaScale does not supports this setting with FTOS 8.3.1.0 and later.
10.4
Enter 10.4
to set the epoch to 10.4 micro-seconds.
This is the default setting and is available on the E300, E600/E600i, and E1200.
Defaults
Command Modes
Command
History
10.4
CONFIGURATION
Version 8.3.1.0
Version 8.1.1.2
Added 2.4 micro-seconds option. ExaScale supports only 10.4 microseconds and 2.4 microseconds with FTOS 8.3.1.0 and later.
Introduced on E-Series ExaScale E600i
Control and Monitoring | 75
Usage
Information
Version 8.1.1.0
Version 6.2.1.1
Version 6.1.1.0
Introduced on E-Series ExaScale E1200i
Support for E300 introduced (10.4 only)
Values changed as described above
You save the configuration and reload the chassis for the changes to the epoch command setting to take affect.
When using 10 SFMs in an ExaScale chassis, the 10.4 and 2.4 settings are both linerate. Additionally, the 2.4 setting has a lower latency.
When using 9 SFMs in an ExaScale chassis, the 10.4 setting is linerate; the 2.4 setting reduces throughput. Dell Networking recommends using the 10.4 setting when the system has 9 SFMs.
Using 8 SFMs in an ExaScale chassis reduces throughput at any epoch setting.
Note: The E300 supports only the 10.4 epoch setting. The E-Series TeraScale E600/E600i and the E1200/E1200i systems support the 10.4 and the 3.2 epoch settings.
Note: For E-Series ExaScale, the 2.4 setting is supported on FTOS version 8.3.1.0 and later.
The 10.4 setting is supported on all ExaScale FTOS versions. The 3.2 setting is only supported on FTOS versions 8.2.1.0 and earlier.
exec-banner c e s Enable the display of a text string when the user enters the EXEC mode.
Syntax
Defaults
Command Modes exec-banner
To disable the banner on terminal lines, enter no exec-banner .
Enabled on all lines (if configured, the banner appears).
LINE
Command
History
Usage
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command
Optionally, use the banner exec command to create a text string that is displayed when the user accesses the EXEC mode. This command toggles that display.
Configure a banner to display when entering the EXEC mode.
Enable and configure console and virtual terminal lines to the system.
76 | Control and Monitoring
exec-timeout ce s Set a time interval the system will wait for input on a line before disconnecting the session.
Syntax exec-timeout minutes [ seconds ]
To return to default settings, enter no exec-timeout .
Parameters minutes seconds
Enter the number of minutes of inactivity on the system before disconnecting the current session.
Range: 0 to 35791
Default: 10 minutes for console line; 30 minutes for VTY line.
(OPTIONAL) Enter the number of seconds
Range: 0 to 2147483
Default: 0 seconds
Defaults
Command Modes
Command
History
10 minutes for console line; 30 minutes for VTY lines; 0 seconds
LINE
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series original Command
To remove the time interval, enter exec-timeout 0 0 .
Usage
Information
Example Figure 4-4.
FTOS time-out display
FTOS con0 is now available
Press RETURN to get started.
FTOS> exit ce s Return to the lower command mode.
Syntax exit
Command Modes EXEC Privilege, CONFIGURATION, LINE, INTERFACE, TRACE-LIST, PROTOCOL GVRP,
SPANNING TREE, MULTIPLE SPANNING TREE, MAC ACCESS LIST, ACCESS-LIST,
AS-PATH ACL, COMMUNITY-LIST, PREFIX-LIST, ROUTER OSPF, ROUTER RIP, ROUTER
ISIS, ROUTER BGP
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Control and Monitoring | 77
Related
Commands
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Return to the EXEC Privilege command mode.
ftp-server enable c e s Enable FTP server functions on the system.
Syntax ftp-server enable
To disable FTP server on the system, enter no ftp-server enable .
Defaults
Command Modes
Disabled.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Example Figure 4-5.
Example of Logging on to an FTP Server morpheus% ftp 10.31.1.111
Connected to 10.31.1.111.
220 FTOS (1.0) FTP server ready
Name (10.31.1.111:dch): dch
331 Password required
Password:
230 User logged in ftp> pwd
257 Current directory is "flash:" ftp> dir
200 Port set okay
150 Opening ASCII mode data connection
size date time name
-------- ------ ------ --------
512 Jul-20-2004 18:15:00 tgtimg
512 Jul-20-2004 18:15:00 diagnostic
512 Jul-20-2004 18:15:00 other
512 Jul-20-2004 18:15:00 tgt
226 Transfer complete
329 bytes received in 0.018 seconds (17.95 Kbytes/s) ftp>
Related
Commands
ftp-server topdir ftp-server username
Set the directory to be used for incoming FTP connections to the E-Series.
Set a username and password for incoming FTP connections to the E-Series.
78 | Control and Monitoring
ftp-server topdir c e s Specify the top-level directory to be accessed when an incoming FTP connection request is made.
Syntax ftp-server topdir directory
To return to the default settings, enter no ftp-server topdir .
Parameters directory Enter the directory path.
Defaults
Command Modes
Command
History
The internal flash is the default directory.
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
After you enable FTP server functions with the
command, Dell Networking recommends that you specify a top-level directory path. Without a top-level directory path specified, the FTOS directs users to the flash directory when they log in to the FTP server.
Enables FTP server functions on the E-Series.
Set a username and password for incoming FTP connections to the E-Series.
ftp-server username c e s Create a user name and associated password for incoming FTP server sessions.
Syntax ftp-server username username password [ encryption-type ] password
To delete a user name and its password, use the no ftp-server username username command.
Parameters username password password encryption-type
Enter a text string up to 40 characters long as the user name.
Enter the keyword password followed by a string up to 40 characters long as the password.
Without specifying an encryption type, the password is unencrypted.
(OPTIONAL) After the keyword password enter one of the following numbers:
• 0 (zero) for an unecrypted (clear text) password
• 7 (seven) for hidden text password.
Defaults
Command Modes
Not enabled.
CONFIGURATION
Control and Monitoring | 79
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command hostname c e s Set the host name of the system.
Syntax hostname name
To delete a hostname assigned, enter no hostname .
Parameters name Enter a text string, up to 32 characters long.
Defaults
Command Modes
Command
History
FTOS
CONFIGURATION
Usage
Information
Version 8.3.3.9
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Default changed to FTOS.
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
The hostname is used in the prompt.
ip ftp password c e s Specify a password for outgoing FTP connections.
Syntax ip ftp password [ encryption-type ] password
To remove a password and return to the default setting, use the no ip ftp password [ password ] command.
Parameters encryption-type password
(OPTIONAL) Enter one of the following numbers:
• 0 (zero) for an unecrypted (clear text) password
• 7 (seven) for hidden text password
Enter a string up to 40 characters as the password.
Defaults
Command Modes
Not configured.
CONFIGURATION
80 | Control and Monitoring
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command
The password is listed in the configuration file; you can view the password by entering the show running-config ftp command.
The password configured by the ip ftp password command is used when you use the
ftp: parameter in the copy command.
Copy files.
Set the user name for FTP sessions.
ip ftp source-interface c e s Specify an interface’s IP address as the source IP address for FTP connections.
Syntax ip ftp source-interface interface
To delete an interface, use the no ip ftp source-interface interface command.
Parameters interface Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from zero (0) to 16383.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series : 1-128
E-Series : 1 to 255 for TeraScale and ExaScale
• For SONET interface types, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Increased number of VLANs on ExaScale to 4094 (was 2094)
Introduced on E-Series ExaScale
Support added for S-Series
Control and Monitoring | 81
Related
Commands
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Copy files from and to the switch.
ip ftp username c e s Assign a user name for outgoing FTP connection requests.
Syntax ip ftp username username
To return to anonymous FTP connections, use the no ip ftp username [ username ] command.
Parameters username Enter a text string as the user name up to 40 characters long.
Defaults
Command Modes
Command
History
No user name is configured.
CONFIGURATION
Version 8.3.3.1
Version 8.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series
Introduced on C-Series
E-Series original Command
You must also configure a password with the
command.
Usage
Information
Related
Commands
Set the password for FTP connections.
ip telnet server enable c e s Enable the Telnet server on the switch.
Syntax ip telnet server enable
To disable the Telnet server, execute the no ip telnet server enable command.
Defaults
Command Modes
Enabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Introduced on C-Series
Introduced on E-Series
82 | Control and Monitoring
Related
Commands
Enable SSH server on the system .
ip telnet source-interface c e s Set an interface’s IP address as the source address in outgoing packets for Telnet sessions.
Syntax ip telnet source-interface interface
To return to the default setting, use the no ip telnet source-interface [ interface ] command.
Parameters interface Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from zero
(0) to 16383.
• For the SONET interfaces, enter the keyword sonet followed by slot/port information.
• For a Port Channel, enter the keyword port-channel followed by a number:
C-Series and S-Series : 1-128
E-Series : 1 to 255 for TeraScale and ExaScale
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Increased number of VLANs on ExaScale to 4094 (was 2094)
Introduced on E-Series ExaScale
Support added for S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Related
Commands
Telnet to another device.
ip tftp source-interface c e s Assign an interface’s IP address in outgoing packets for TFTP traffic.
Syntax ip tftp source-interface interface
To return to the default setting, use the no ip tftp source-interface interface command.
Control and Monitoring | 83
Parameters
Defaults
Command Modes
Command
History interface Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from zero
(0) to 16383.
• For a Port Channel, enter the keyword port-channel followed by a number:
C-Series and S-Series : 1-128
E-Series : 1 to 255 for TeraScale and ExaScale
• For the SONET interfaces, enter the keyword sonet followed by slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
The IP address on the system that is closest to the Telnet address is used in the outgoing packets.
CONFIGURATION
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Increased number of VLANs on ExaScale to 4094 (was 2094)
Introduced on E-Series ExaScale
Support added for S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command line c e s Enable and configure console and virtual terminal lines to the system. This command accesses LINE mode, where you can set the access conditions for the designated line.
Syntax line { aux 0 | console 0 | vty number [ end-number ]}
Parameters aux 0 console 0 vty number end-number
Enter the keyword aux 0 to configure the auxiliary terminal connection.
Note: This option is supported on E-Series only.
Enter the keyword console 0 to configure the console port.
The console option for the S-Series is <0-0>.
Enter the keyword vty followed by a number from 0 to 9 to configure a virtual terminal line for Telnet sessions.
The system supports 10 Telnet sessions.
(OPTIONAL) Enter a number from 1 to 9 as the last virtual terminal line to configure.
You can configure multiple lines at one time.
Defaults
Command Modes
Not configured
CONFIGURATION
84 | Control and Monitoring
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command
You cannot delete a terminal connection.
Usage
Information
Related
Commands
Restrict incoming connections to a particular IP address in an IP access control list (ACL).
Specify a password for users on terminal lines.
Display the line card(s) status.
linecard c e Pre-configure a line card in a currently empty slot of the system or a different line card type for the slot.
Syntax linecard number card-type
To delete a card setting, use the no linecard number command.
Parameters number card-type
Enter the number of the slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E6001, and 0 to 5 on a
E300.
Enter the line card ID (see the Supported Hardware section in the Release Notes).
Defaults
Command Modes
Not configured
CONFIGURATION
Command
History
Version 8.1.1.2
Version 8.1.1.0
Introduced on E-Series ExaScale E600i
Introduced on E-Series ExaScale E1200i
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Usage
Information
Use this command only for empty slots or a slot where you have hot-swapped a different line card type.
Before inserting a card of a different type into the pre-configured slot, execute the no linecard number command. The following screenshot shows the current supported C-Series line cards, along with their “card types” (card-type IDs).
Control and Monitoring | 85
Figure 4-6.
Command Example: show linecard on Empty C300 Slot
FTOS#show linecard 3
-- Line card 11 --
Status : not present
FTOS#linecard 3 ?
E46TB 36-port GE 10/100/1000Base-T with RJ45 - 8-port FE/GE with SFP - 2-port 10GE with SFP+
E46VB 36-port GE 10/100/1000Base-T with RJ45 and PoE - 8-port FE/GE with SFP -
2-port 10GE with SFP+
E48PB 48-port FE/GE line card with SFP optics (CB)
E48TB 48-port GE 10/100/1000Base-T line card with RJ45 interfaces (CB)
E48VB 48-port GE 10/100/1000Base-T line card with RJ45 interfaces and PoE (CB)
EX4PB 4-port 10GE LAN PHY line card with XFP optics (CB)
EX8PB 8-port 10GE LAN PHY line card with XFP optics (CB)
FTOS#linecard 3 EX4PB
FTOS#show linecard 3
-- Line card 11 --
Status : not present
Required Type : EX4PB - 4-port 10GE LAN PHY line card with XFP optics (CB)
FTOS#
Note: It is advisable to shut down interfaces on a line card that you are hot-swapping.
Related
Commands
Display the line card(s) status.
module power-off c e Turn off power to a line card at next reboot.
Syntax module power-off linecard number
To remove the command from the running configuration, use the no module power-off linecard number command.
Parameters linecard number Enter the keyword line card followed by the line card slot number
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
Defaults
Command Modes
Not configured.
CONFIGURATION
Command
History
Version 8.1.1.2
Version 8.1.1.0
Introduced on E-Series ExaScale E600i
Introduced on E-Series ExaScale E1200i
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
86 | Control and Monitoring
motd-banner c e s Enable a Message of the Day (MOTD) banner to appear when you log in to the system.
Syntax motd-banner
To disable the MOTD banner, enter no motd-banner .
Defaults Enabled on all lines.
Command Modes LINE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command ping c e s Test connectivity between the system and another device by sending echo requests and waiting for replies.
Syntax ping [ vrf <id> ] [ host | ip-address | ipv6-address ] [ count { number | continuous }] [ datagram-size ]
[ timeout ] [ source (ip src-ipv4-address) | interface ] [ tos ] [ df-bit (y|n) ] [ validate-reply(y|n) ] [ pattern pattern ] [ sweep-min-size ] [ sweep-max-size ] [ sweep-interval ] [ ointerface (ip src-ipv4-address) | interface ]
Parameter vrf host ip-address ipv6-address count datagram size timeout
(OPTIONAL) E-Series Only : Enter the VRF Instance name of the device to which you are testing connectivity.
(OPTIONAL) Enter the host name of the devices to which you are testing connectivity.
(OPTIONAL) Enter the IPv4 address of the device to which you are testing connectivity. The address must be in the dotted decimal format.
(OPTIONAL) E-Series only Enter the IPv6 address, in the x:x:x:x::x format, to which you are testing connectivity.
Note: The :: notation specifies successive hexadecimal fields of zeros
Enter the number of echo packets to be sent.
number : 1- 2147483647
Continuous : transmit echo request continuously
Default: 5
Enter the ICMP datagram size.
Range: 36 - 15360 bytes
Default: 100
Enter the interval to wait for an echo reply before timing out.
Range: 0 -3600 seconds
Default: 2 seconds
Control and Monitoring | 87
source tos df-bit validate-reply pattern pattern sweep-min-size sweep-max-size sweep-interval ointerface
(IPv4 only) Enter the IPv4 source ip address or the source interface.
• Enter the IP address in A.B.C.D format
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel, enter the keyword port-channel followed by a number:
C-Series and S-Series : 1-128
E-Series : 1 to 255 for TeraScale and ExaScale
• E-Series only For the SONET interfaces, enter the keyword sonet followed by slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to
4094.
(IPv4 only) Enter the type of service required.
Range: 0-255
Default: 0
(IPv4 only) Enter Y or N for the “don't fragment” bit in IPv4 header
N: Do not set the “don't fragment” bit
Y: Do set “don't fragment” bit
Default is No.
(IPv4 only) Enter Y or N for reply validation.
N: Do not validate reply data
Y: Do validate reply data
Default is No.
(IPv4 only) Enter the IPv4 data pattern.
Range: 0-FFFF
Default: 0xABCD
Enter the minimum size of datagram in sweep range.
Range: 52-15359 bytes
Enter the maximum size of datagram in sweep range.
Range: 53-15359 bytes
Enter the incremental value for sweep size.
1-15308 seconds
(IPv4 only) Enter the outgoing interface for multicast packets.
• Enter the IP address in A.B.C.D format
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel, enter the keyword port-channel followed by a number:
C-Series and S-Series : 1-128
E-Series : 1 to 255 for TeraScale and ExaScale
• E-Series only For the SONET interfaces, enter the keyword sonet followed by slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to
4094.
88 | Control and Monitoring
Defaults
Command Modes
See parameters above.
EXEC
EXEC Privilege
Command
History
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced extended ping options.
Introduced on E-Series ExaScale (IPv6)
Introduced on E-Series ExaScale (IPv4)
Introduced VRF
Introduced on S-Series
Introduced support for C-Series
Added support for IPv6 address on E-Series
When you enter the ping command without specifying an IP/IPv6 address (Extended Ping), you are prompted for a target IP/IPv6 address, a repeat count, a datagram size (up to 1500 bytes), a timeout in seconds, and for Extended Commands. See Appendix A, ICMP Message Types for information on the
ICMP message codes that return from a ping command.
Figure 4-7.
Command Example: ping (IPv4)
FTOS#ping 172.31.1.255
Type Ctrl-C to abort.
Sending 5, 100-byte ICMP Echos to 172.31.1.255, timeout is 2 seconds:
Reply to request 1 from 172.31.1.208 0 ms
Reply to request 1 from 172.31.1.216 0 ms
Reply to request 1 from 172.31.1.205 16 ms
:
:
Reply to request 5 from 172.31.1.209 0 ms
Reply to request 5 from 172.31.1.66 0 ms
Reply to request 5 from 172.31.1.87 0 ms
FTOS#
Figure 4-8.
Command Example: ping (IPv6)
FTOS#ping 100::1
Type Ctrl-C to abort.
Sending 5, 100-byte ICMP Echos to 100::1, timeout is 2 seconds:
!!!!!
Success rate is 100.0 percent (5/5), round-trip min/avg/max = 0/0/0 (ms)
FTOS#
Control and Monitoring | 89
power-off c e Turn off power to a selected line card or the standby (extra) Switch Fabric Module (SFM).
Syntax power-off { linecard number | sfm sfm-slot-id }
Parameters linecard number sfm sfm-slot-id
Enter the keyword linecard and a number for the line card slot number.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
Enter the keyword sfm by the slot number of the SFM to which you want to turn off power.
Note: This option is supported on E-Series only.
Defaults
Command Modes
Disabled
EXEC Privilege
Command
History
Version 8.1.1.2
Version 8.1.1.0
Introduced on E-Series ExaScale E600i
Introduced on E-Series ExaScale E1200i
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Related
Commands
Power on a line card or standby SFM.
power-on c e Turn on power to a line card or the standby (extra) Switch Fabric Module (SFM).
Syntax
Parameters power-on { linecard number | sfm sfm-slot-id } linecard number sfm standby
Enter the keyword linecard and a number for the line card slot number.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
Enter the keyword sfm followed by the slot number of the SFM to power on.
Note: This option is supported on E-Series only.
Defaults
Command Modes
Disabled
EXEC Privilege
Command
History
Version 8.1.1.2
Version 8.1.1.0
Version 7.5.1.0
Introduced on E-Series ExaScale E600i
Introduced on E-Series ExaScale E1200i
Introduced on C-Series
E-Series original Command
90 | Control and Monitoring
Related
Commands
Power off a line card or standby SFM.
reload c e s Reboot FTOS.
Syntax reload
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Usage
Information
Related
Commands
If there is a change in the configuration, FTOS will prompt you to save the new configuration. Or you can save your running configuration with the copy running-config command.
Refer to
Chapter 8, Bare Metal Provisioning
for information related to the BMP reload options.
Reset a line card, RPM, or a failed SFM (TeraScale and ExaScale).
Reset any designated stack member except the management unit
Configure a switch to reload in normal mode or as a DHCP client with all ports configured for Layer 3 traffic.
reset c e Reset a line card, RPM, or a failed SFM (TeraScale only).
Syntax reset { linecard number [ hard | power-cycle ] | rpm number [ hard | power-cycle ] | sfm slot number }
Parameters linecard number hard power-cycle
Enter the keyword linecard and a number for the line card slot number.
(Optional) Add the keyword hard or power-cycle ( power-cycle is C-Series only) to power cycle the line card.
C-Series Range: 0-7
E-Series Range: 0 to 13 on E1200/E1200i, 0 to 6 on E600/E600i, and 0 to 5 on E300
Enter the keyword hard to power cycle the line card.
Enter the keyword power-cycle after upgrading a C-Series FPGA to cause the
FPGA to be reprogrammed based on the contents of the FPGA PROM.
Note: This option is supported on C-Series only.
Control and Monitoring | 91
rpm sfm number slot number
Enter the keyword rpm followed by a number for the RPM slot number.
(Optional) Add the keyword hard or power-cycle (C-Series only) to power cycle the RPM.
Range: 0 to 1
Enter the keyword sfm followed by the failed or powered-off SFM slot number.
Note: Supported on E-Series only
Defaults
Command Modes
Command
History
Disabled.
EXEC Privilege
Usage
Information
Related
Commands
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
The command reset without any options is a soft reset, which means FTOS boots the line card from its runtime image. The hard option reloads the FTOS image on the line card. Use the power-cycle after upgrading an FPGA.
When a soft reset is issued on a line card ( reset linecard number ), FTOS boots the line card from its runtime image. Only when you enter reset linecard number hard is the software image reloaded on the line card.
Reboots the system.
Copy the backup C-Series FPGA image to the primary FPGA image.
rpm <slot> location-led e x
Toggle the location LED on/off on the E-Series ExaScale RPM (LC-EH-RPM).
Syntax rpm slot number location-led [ on | off ]
Parameters rpm slot number on |off
Enter the slot number
E1200i: 0-13
E600i: 0-6
Toggles the LED on the RPM on or off.
Defaults
Command Modes
Command
History
Usage
Information
OFF
EXEC
Version 8.2.1.0
Introduced on the E-Series ExaScale
The LED setting is not saved through power cycles.
92 | Control and Monitoring
send c e s Send messages to one or all terminal line users.
Syntax send [ * ] | [ line ] | [ aux ] | [ console ] | [ vty ]
Parameters
* line
Enter the asterisk character * to send a message to all tty lines.
Send a message to a specific line.
Range: 0 to 11 aux Enter the keyword aux to send a message to an Auxiliary line.
Note: This option is supported on E-Series only.
console Enter to send a message to the Primary terminal line. vty Enter the keyword vty to send a message to the Virtual terminal
Defaults
Command Modes
Command
History
No default behavior or values
EXEC
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Messages can contain an unlimited number of lines, however each line is limited to 255 characters. To move to the next line, use the <CR>. To send the message use CTR-Z, to abort a message use CTR-C.
service timestamps c e s Add time stamps to debug and log messages. This command adds either the uptime or the current time and date.
Syntax service timestamps [ debug | log ] [ datetime [ localtime ] [ msec ] [ show-timezone ] | uptime ]
To disable timestamping, use the no service timestamps [ debug | log ] command.
Parameters debug log datetime localtime msec show-timezone uptime
(OPTIONAL) Enter the keyword debug to add timestamps to debug messages.
(OPTIONAL) Enter the keyword log to add timestamps to log messages with severity 0 to 6.
(OPTIONAL) Enter the keyword datetime to have the current time and date added to the message.
(OPTIONAL) Enter the keyword localtime to include the localtime in the timestamp.
(OPTIONAL) Enter the keyword msec to include milliseconds in the timestamp.
(OPTIONAL) Enter the keyword show-timezone to include the time zone information in the timestamp.
(OPTIONAL) Enter the keyword uptime to have the timestamp based on time elapsed since system reboot.
Control and Monitoring | 93
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command
If you do not specify parameters and enter service timestamps , it appears as service timestamps debug uptime in the running-configuration.
Use the
command to view the current options set for the
command.
show alarms c e s View alarms for the RPM, SFMs, line cards and fan trays.
Syntax show alarms [ threshold ]
Parameters threshold (OPTIONAL) Enter the keyword threshold to display the temperature thresholds set for the line cards, RPM, and SFMs.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command
94 | Control and Monitoring
E-Series Example Figure 4-9.
Command Example: show alarms on E-Series
FTOS# show alarms
-- Minor Alarms --
Alarm Type Duration
----------------------------------------------------
RPM 0 PEM A failed or rmvd 7 hr, 37 min
SFM 0 PEM A failed or rmvd 7 hr, 37 min
SFM 1 PEM A failed or rmvd 7 hr, 37 min
SFM 2 PEM A failed or rmvd 7 hr, 37 min
SFM 3 PEM A failed or rmvd 7 hr, 37 min
SFM 4 PEM A failed or rmvd 7 hr, 37 min
SFM 5 PEM A failed or rmvd 7 hr, 37 min
SFM 6 PEM A failed or rmvd 7 hr, 37 min
SFM 7 PEM A failed or rmvd 7 hr, 36 min line card 1 PEM A failed or rmvd 7 hr, 36 min line card 4 PEM A failed or rmvd 7 hr, 36 min only 8 SFMs in chassis 7 hr, 35 min
-- Major Alarms --
Alarm Type Duration
----------------------------------------------------
No major alarms
FTOS# show chassis c e View the configuration and status of modules in the system. Use this command to determine the chassis mode.
Syntax show chassis [ brief ]
Parameters brief (OPTIONAL) Enter the keyword brief to view a summary of the show chassis output.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.1.1.0
Introduced on E-Series ExaScale
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Control and Monitoring | 95
Example Figure 4-10.
Command Example: show chassis brief on E-Series
FTOS#show chassis brief
Chassis Type : E1200
Chassis Mode : TeraScale
Chassis Epoch : 3.2 micro-seconds
-- Line cards --
Slot Status NxtBoot ReqTyp CurTyp Version Ports
---------------------------------------------------------------------------
0 not present
1 not present
2 not present
3 not present
4 not present
5 not present
6 not present
7 not present
8 not present
9 not present
10 not present
11 online online E48PF E48PF 6.1.1.0 48
12 not present E48PF
13 not present E48PF
-- Route Processor Modules --
Slot Status NxtBoot Version
---------------------------------------------------------------------------
0 active online 6.1.1.0
1 not present
Switch Fabric State: up
-- Switch Fabric Modules --
Slot Status
---------------------------------------------------------------------------
0 active
1 active
2 active
3 active
4 active
5 active
6 active
7 active
8 active
-- Power Entry Modules --
Bay Status
---------------------------------------------------------------------------
0 up
1 up
-- Fan Status --
Tray Status Temp Volt Speed PEM0 PEM1 Fan1 Fan2 Fan3
--------------------------------------------------------------------------------
0 up < 50C 12-16V low/2100-2700 RPM up up up up up
1 up < 50C 12-16V low/2100-2700 RPM up up up up up
2 up < 50C 12-16V low/2100-2700 RPM up up up up up
3 up < 50C 12-16V low/2100-2700 RPM up up up up up
4 up < 50C 16-20V med/2700-3200 RPM up up up up up
5 up < 50C 12-16V low/2100-2700 RPM up up up up up
Related
Commands
View line card status
View Route Processor Module status.
View Switch Fabric Module status.
96 | Control and Monitoring
show command-history c e s Display a buffered log of all commands entered by all users along with a time stamp.
Syntax show command-history
Defaults
Command Mode
None.
EXEC
EXEC Privilege
Command
History
H
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series and E-Series
Usage
Information
Example
One trace log message is generated for each command. No password information is saved to this file. A command-history trace log is saved to a file upon an RPM failover. This file can be analyzed by the
Dell Networking TAC to help identify the root cause of an RPM failover.
Figure 4-11.
Command Example: show command-history
FTOS#show command-history
[11/20 15:47:22]: CMD-(CLI):[service password-encryption]by default from console
[11/20 15:47:22]: CMD-(CLI):[service password-encryption hostname FTOS]by default from console
- Repeated 3 times.
[11/20 15:47:23]: CMD-(CLI):[service timestamps log datetime]by default from console
[11/20 15:47:23]: CMD-(CLI):[hostname FTOS]by default from console
[11/20 15:47:23]: CMD-(CLI):[enable password 7 ******]by default from console
[11/20 15:47:23]: CMD-(CLI):[username admin password 7 ******]by default from console
[11/20 15:47:23]: CMD-(CLI):[enable restricted 7 ******]by default from console
[11/20 15:47:23]: CMD-(CLI):[protocol spanning-tree rstp]by default from console
[11/20 15:47:23]: CMD-(CLI):[protocol spanning-tree pvst]by default from console
[11/20 15:47:23]: CMD-(CLI):[no disable]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/1]by default from console
[11/20 15:47:23]: CMD-(CLI):[ip address 1.1.1.1 /24]by default from console
[11/20 15:47:23]: CMD-(CLI):[ip access-group abc in]by default from console
[11/20 15:47:23]: CMD-(CLI):[no shutdown]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/2]by default from console
[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console
[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/3]by default from console
[11/20 15:47:23]: CMD-(CLI):[ip address 5.5.5.1 /24]by default from console
[11/20 15:47:23]: CMD-(CLI):[no shutdown]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/4]by default from console
[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console
[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console
[11/20 15:47:23]: CMD-(CLI):[interface gigabitethernet 0/5]by default from console
[11/20 15:47:23]: CMD-(CLI):[no ip address]by default from console
[11/20 15:47:23]: CMD-(CLI):[shutdown]by default from console
[11/20 21:17:35]: CMD-(CLI):[line console 0]by default from console
[11/20 21:17:36]: CMD-(CLI):[exec-timeout 0]by default from console
[11/20 21:17:36]: CMD-(CLI):[exit]by default from console
[11/20 21:19:25]: CMD-(CLI):[show command-history]by default from console
FTOS#
Related
Commands
Clear the command history log.
Control and Monitoring | 97
show command-tree c e s Display the entire CLI command tree, and optionally, display the utilization count for each commands and its options.
Syntax show command-tree [ count | no ]
Parameters count no
Display the command tree with a usage counter for each command.
Display all of the commands that may be preceded by the keyword no , which is the keyword used to remove a command from the running-configuration.
Defaults
Command Mode
Command
History
None
EXEC
EXEC Privilege
H
Version 8.3.3.1
Version 8.2.1.0
Introduced on the S60.
Introduced
Usage
Information
Example
Reload the system to reset the command-tree counters.
FTOS#show command-tree count
!
Enable privilege mode: enable command usage:3
<0-15> option usage: 0 exit command usage:1 show command-tree command usage:9
count option usage: 3 show version command usage:1
!
Global configuration mode: aaa authentication enable command usage:1
WORD option usage: 1
default option usage: 0
enable option usage: 0
line option usage: 0
none option usage: 0
radius option usage: 1
tacacs+ option usage: 0
98 | Control and Monitoring
show console lp c e View the buffered boot-up log of a line card.
Syntax show console lp number
Parameters number Enter the line card slot number.
Range: 0–7 for the C300
Range: 0–13 for the E1200
Range: 0–6 for the E600
Range: 0–5 for the E300
Defaults
Command Mode
None
EXEC
EXEC Privilege
Command
History
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Usage
Information
Caution: Use this command only when you are working directly with a technical support representative to troubleshoot a problem. Do not use this command unless a technical support representative instructs you to do so.
show cpu-traffic-stats c e s View the CPU traffic statistics.
Syntax show cpu-traffic-stats [ port number | all | cp | linecard { all | slot# } | rp1 | rp2 ]
Parameters port number all cp linecard rp1 rp2
(OPTIONAL) Enter the port number to display traffic statistics on that port only.
Range: 1 to 1568
(OPTIONAL) Enter the keyword all to display traffic statistics on all the interfaces receiving traffic, sorted based on traffic.
(OPTIONAL) Enter the keyword cp to display traffic statistics on the specified
CPU.
Note: This option is supported on E-Series only.
(OPTIONAL) Enter the keyword linecard followed by either all or the slot number to display traffic statistics on the designated line card.
Note: This option is supported on C-Series only.
(OPTIONAL) Enter the keyword rp1 to display traffic statistics on the RP1.
Note: This option is supported on E-Series only.
(OPTIONAL) Enter the keyword rp2 to display traffic statistics on the RP2.
Note: This option is supported on E-Series only.
Defaults all
Control and Monitoring | 99
Command Modes
Command
History
E-Series Example
EXEC
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 4-12.
Command Example: show cpu-traffic-stats on the E-Series
FTOS#show cpu-traffic-stats
Processor : CP
--------------
Received 100% traffic on GigabitEthernet 8/2 Total packets:100
LLC:0, SNAP:0, IP:100, ARP:0, other:0
Unicast:100, Multicast:0, Broadcast:0
Processor : RP1
---------------
Received 62% traffic on GigabitEthernet 8/2 Total packets:500
LLC:0, SNAP:0, IP:500, ARP:0, other:0
Unicast:500, Multicast:0, Broadcast:0
Received 37% traffic on GigabitEthernet 8/1 Total packets:300
LLC:0, SNAP:0, IP:300, ARP:0, other:0
Unicast:300, Multicast:0, Broadcast:0
Processor : RP2
---------------
No CPU traffic statistics.
FTOS#
Usage
Information
Traffic statistics are sorted on a per-interface basis; the interface receiving the most traffic is displayed first. All CPU and port information is displayed unless a specific port or CPU is specified. Traffic information is displayed for router ports only; not for management interfaces. The traffic statistics are
collected only after the debug cpu-traffic-stats command is executed; not from the system bootup.
Note: After debugging is complete, use the no
command to shut off traffic statistics collection.
Related
Commands
Enable CPU traffic statistics for debugging show debugging c e s View a list of all enabled debugging processes.
Syntax show debugging
Command Mode EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series
Introduced on C-Series
E-Series original Command
100 | Control and Monitoring
Example Figure 4-13.
Command Example: show debugging
FTOS#show debug
Generic IP:
IP packet debugging is on for
ManagementEthernet 0/0
Port-channel 1-2
Port-channel 5
GigabitEthernet 4/0-3,5-6,10-11,20
GigabitEthernet 5/0-1,5-6,10-11,15,17,19,21
ICMP packet debugging is on for
GigabitEthernet 5/0,2,4,6,8,10,12,14,16
FTOS# show environment (C-Series and E-Series) c e View the system component status (for example, temperature, voltage).
Syntax show environment [ all | fan | linecard | linecard-voltage | PEM | RPM | SFM ]
Parameters all fan linecard linecard-voltage
PEM
RPM
SFM
Enter the keyword all to view all components.
Enter the keyword fan to view information on the fans. The output of this
command is chassis dependent. See Figure 4-10
for a comparison of output.
Enter the keyword linecard to view only information on line cards
Enter the keyword linecard-voltage to view line card voltage information.
Enter the keyword pem to view only information on power entry modules.
Enter the keyword rpm to view only information on RPMs.
Enter the keyword sfm to view only information on SFMs.
Note: This option is supported on E-Series only.
Command Modes EXEC
EXEC Privilege
Command
History
Version8.3.3.8
Version 8.1.1.0
Version 7.8.1.0
Version 7.5.1.0
Updated to support PPID on the S60
Introduced on E-Series ExaScale
Added temperature information for C-Series fans
Introduced on C-Series
E-Series original Command
Usage
Information
Fan speed is controlled by temperatures measured at the sensor located on the fan itself. The fan temperatures shown with this command may not accurately reflect the temperature and fan speed.
Refer to your hardware installation guide for fan speed and temperature information.
Control and Monitoring | 101
Examples Figure 4-14.
Command Example: show environment
FTOS#show environment
-- Fan Status --
Status Temp Fan1 Fan2 Fan3 Serial Num Version
---------------------------------------------------------------------------
up 32C 6000 RPM 6000 RPM 7500 RPM FX000040889 3.2
-- Power Supplies --
Bay Status
---------------------------------------------------------------------------
0 absent
1 up
2 up
3 up
-- Line Card Environment Status --
Slot Status Temp Voltage
---------------------------------------------------------------------------
0 not present
1 online 66C ok
2 not present
3 online 59C ok
4 online 64C ok
5 not present
6 online 59C ok
-- RPM Environment Status --
Slot Status Temp Voltage
---------------------------------------------------------------------------
0 active 36C ok
1 not present
-- SFM Environment Status --
FTOS#
Figure 4-15.
Command Example: show environment fan
FTOS#show environment fan
-- Fan Status --
Status Temp Fan1 Fan2 Fan3 Serial Num Version
----------------------------------------------------------------------
up 32C 6000 RPM 6000 RPM 6000 RPM FX000040889 3.2
show environment (S-Series) s View S-Series system component status (for example, temperature, voltage).
Syntax show environment [ all | fan | stack-unit unit-id | pem | thermal-sensor ]
Parameters all fan stack-unit unit-id
Enter the keyword all to view all components.
Enter the keyword fan to view information on the fans. The output of this command is chassis dependent.
Enter the keyword stack-unit followed by the unit-id to display information on a specific stack member.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
102 | Control and Monitoring
pem thermal-sensor
Enter the keyword pem to view only information on power entry modules.
Enter the keyword thermal-sensor to view only information on the thermal sensors.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Introduced on the S60.
The output of the show environment fan command for S-Series is changed to display fan speeds instead of just showing the fan status as up or down.
Introduced for S-Series. S-Series options and output differ from the
C-Series/E-Series version.
Example Figure 4-16.
Command Example: show environment on the S60
FTOS#show environment
-- Fan Status --
Status Temp Fan1 Fan2 Fan3 Serial Num Version
---------------------------------------------------------------------------
up 32C 6000 RPM 6000 RPM 7500 RPM FX000040889 3.2
-- Power Supplies --
Bay Status
---------------------------------------------------------------------------
0 absent
1 up
2 up
3 up
-- Line Card Environment Status --
Slot Status Temp Voltage
---------------------------------------------------------------------------
0 not present
1 online 66C ok
2 not present
3 online 59C ok
4 online 64C ok
5 not present
6 online 59C ok
-- RPM Environment Status --
Slot Status Temp Voltage
---------------------------------------------------------------------------
0 active 36C ok
1 not present
-- SFM Environment Status --
FTOS#
Example Figure 4-17.
Command Example: show environment fan
FTOS#show environment fan
-- Fan Status --
Status Temp Fan1 Fan2 Fan3 Serial Num Version
---------------------------------------------------------------------------
up 32C 6000 RPM 6000 RPM 6000 RPM FX000040889 3.2
Control and Monitoring | 103
Example Figure 4-18.
Command Example: show environment pem
FTOS#show environment pem
-- Power Supplies --
Unit Bay Status Type
---------------------------------------------------------------------------
0 0 up AC
0 1 absent
Example Figure 4-19.
Command Example: show environment stack-unit
FTOS#show environment stack-unit 0
-- Unit Environment Status --
Unit Status Temp Voltage
---------------------------------------------------------------------------
0* online 49C ok
* Management Unit
Example Figure 4-20.
Command Example: show environment thermal-sensor
FTOS#show environment thermal-sensor
-- Thermal Sensor Readings (deg C) --
Unit Sensor0 Sensor1 Sensor2 Sensor3 Sensor4 Sensor5
---------------------------------------------------------------------------
0 30 33 36 30 30 32
FTOS# show inventory (C-Series and E-Series) c e Display the chassis type, components (including media), FTOS version including hardware identification numbers and configured protocols.
Syntax show inventory [media slot ]
Parameters media slot (OPTIONAL) Enter the keyword media followed by the slot number.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300
Defaults
Command Modes
No default behavior or values
CONFIGURATION
Command
History
Version 8.3.3.8
Version 8.1.1.0
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 6.2.1.0
Version 5.3.1.0
Updated to support PPID on the S60
Introduced on E-Series ExaScale
Output expanded to include SFP+ media in C-Series.
Vendor field removed from output of show inventory media .
Introduced on C-Series and expanded to include transceiver media
Expanded to include Software Protocol Configured field on E-Series
Introduced on E-Series
104 | Control and Monitoring
Usage
Information
C300 Example
The show inventory media command provides some details about installed pluggable media (SFP,
XFP), as shown in
. Use the show interfaces command to get more details about installed pluggable media.
The display output might include a double asterisk (**) next to the SFMs, for example:
...
0 CC-E-SFM ** 0004875 7490007411 A
1 CC-E-SFM ** 0004889 7490007411 A
...
The double asterisk generally indicates the SFM’s frequency capabilities, indicating either that they are operating at 125 MHz or that the frequency capability, which is stored in an EPROM, cannot be determined.
If there are no fiber ports in the line card, then just the header under show inventory media will be displayed. If there are fiber ports but no optics inserted, then the output will display "Media not present or accessible".
Figure 4-21.
Example output of show inventory for C300 (C-Series)
FTOS# show inventory
Chassis Type : C300
Chassis Mode : 1.0
Software Version : FTOS-EF-7.6.1.0
Slot Item Serial Number Part Number Revision
--------------------------------------------------------------
C300 TY000001400 7520029999 04
3 LC-CB-GE-48T FX000020075 7520036700 01
0 LC-CB-RPM 0060361 7520029300 02
0 CC-C-1200W-AC N/A N/A N/A
1 CC-C-1200W-AC N/A N/A N/A
0 CC-C300-FAN
* - standby
Software Protocol Configured
--------------------------------------------------------------
OSPF
FTOS#
Control and Monitoring | 105
E-Series Example Figure 4-22.
Example output of show inventory for E-Series
FTOS#show inventory
Chassis Type : E600i
Chassis Mode : ExaScale
Software Version : E8-4-1-317
Slot Item Serial Number Part Number Rev Piece Part ID Rev Svc Tag Exprs Svc Code
--------------------------------------------------------------------------------------------------------------
E600i TY000002693 7520023900 03 US-0RVY43-76991-82B-0456 1B2 SVCTGCH 628 458 864 65
1 LC-EH-10GE-10S FX000049121 7520042807 03 N/A N/A N/A N/A
1 LC-PIC0 FX000049647 7490105800 01 N/A N/A N/A N/A
1 LC-PIC1 FX000049650 7490105800 01 N/A N/A N/A N/A
3 LC-EJ-10GE-10S FX000097669 7520047602 A N/A N/A N/A N/A
3 LC-PIC0 FX000047055 7490105800 01 N/A N/A N/A N/A
3 LC-PIC1 FX000048680 7490105800 02 N/A N/A N/A N/A
4 LC-EH-GE-90M FX000046835 7520041702 01 N/A N/A N/A N/A
4 LC-PIC0 FX000046905 7490102401 02 N/A N/A N/A N/A
6 LC-EH-GE-90M FX000044725 7520041702 01 N/A N/A N/A N/A
6 LC-PIC0 FX000044256 7490102401 02 N/A N/A N/A N/A
0 LC-EH-RPM FX000056234 7520043401 05 N/A N/A N/A N/A
0 CC-E-SFM3 VC074300030 7520020001 03 CN-0RVY43-75412-123-0030 003 SVCTG00 628 458 860 16
1 CC-E-SFM3 VC074300032 7520020001 03 CN-0RVY43-75412-82B-0456 1B2 SVCTG01 628 458 860 17
2 CC-E-SFM3 VC074300032 7520020001 03 CN-0RVY43-75412-82B-0456 1B2 SVCTG02 628 458 860 18
3 CC-E-SFM3 0068166 7520020001 03 N/A N/A N/A N/A
1 CC-E600-2500W-AC VC074300032 7520026400 02 N/A N/A N/A N/A
2 CC-E600-2500W-AC VC074300087 7520026400 02 N/A N/A N/A N/A
3 CC-E600-2500W-AC VC073700046 7520026400 02 N/A N/A N/A N/A
0 CC-E600-FAN FX000040889 N/A N/A N/A N/A N/A N/A
0 slot0: 110613B1304M2737 - HDX 2.15 N/A N/A N/A N/A
* - standby
Software Protocol Configured
--------------------------------------------------------------
BGP
MCAST
OSPF
PIM
SNMP
Example Figure 4-23.
Example output of show inventory media slot (partial)
FTOS#show inventory media 3
Slot Port Type Media Serial Number F10Qualified
----------------------------------------------------------------------------
...
3 11 SFP 1000BASE-SX U9600L0 Yes
...
Example Figure 4-24.
Example Output of show inventory media
FTOS#show inventory media
Slot Port Type Media Serial Number F10Qualified
------------------------------------------------------------------------------
1 0 Media not present or accessible
1 1 Media not present or accessible
1 2 Media not present or accessible
1 3 Media not present or accessible
1 4 Media not present or accessible
1 5 SFP+ 10GBASE-SR AM70PXW Yes
1 6 Media not present or accessible
1 7 Media not present or accessible
1 8 SFP+ 10GBASE-SR AM70W84 Yes
1 9 Media not present or accessible
3 0 Media not present or accessible
3 1 Media not present or accessible
3 2 Media not present or accessible
3 3 Media not present or accessible
3 4 Media not present or accessible
3 5 Media not present or accessible
3 6 Media not present or accessible
3 7 Media not present or accessible
3 8 Media not present or accessible
106 | Control and Monitoring
Related
Commands
Display a specific interface configuration.
Display the physical status and operational status of an installed transceiver. The output also displays the transceiver’s serial number.
show inventory (S-Series) s Display the S-Series switch type, components (including media), FTOS version including hardware identification numbers and configured protocols.
Syntax show inventory [media slot ]
Parameters media slot (OPTIONAL) Enter the keyword media followed by the stack ID of the stack member for which you want to display pluggable media inventory.
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION
Version 8.3.3.8
Version 8.3.3.1
Version 7.6.1.0
Updated to support PPID on the S60.
Introduced on the S60.
Introduced this version of the command for S-Series. S-Series output differs from
E-Series.
Usage If there are no fiber ports in the unit, then just the header under show inventory media will be displayed. If there are fiber ports but no optics inserted, then the output will display "Media not present or accessible". Example 1
Figure 4-25.
Example output of show inventory for S-Series
FTOS>show inventory
System Type : S4810
System Mode : 1.0
Software Version : 8.3.12.0
Unit Type Serial Number Part Number Rev Piece Part ID Rev Svc Tag Exprs Svc Code
------------------------------------------------------------------------------------------------
* 0 S4810-01-64F HADL111220134 7590009601 A N/A N/A N/A N/A
0 S4810-PWR-AC H6DL111220150 7590008501 C N/A N/A N/A N/A
0 S4810-FAN N/A N/A N/A N/A N/A N/A N/A
0 S4810-FAN N/A N/A N/A N/A N/A N/A N/A
* - Management Unit
Software Protocol Configured
--------------------------------------------------------------
iSCSI
LLDP
MCAST
OSPF
PIM
SNMP
===============================================
Control and Monitoring | 107
Example 2 Figure 4-26.
Example Output of show inventory media (S-Series)(partial)
FTOS#show inventory media ?
Slot Port Type Media Serial Number F10Qualified
-----------------------------------------------------------------------------
0 0 SFP 1000BASE-SX P681WK0 Yes
0 1 SFP 1000BASE-SX PGF3T36 Yes
0 2 SFP 1000BASE-SX PGF420E Yes
0 3 SFP 1000BASE-SX P118HQ2 Yes
0 4 SFP 1000BASE-SX PGF4244 Yes
0 5 SFP 1000BASE-SX P5N1BN6 Yes
0 6 SFP 1000BASE-SX P7529KV Yes
0 7 SFP 1000BASE-SX PGC514G Yes
0 8 SFP 1000BASE-SX PLE71GD Yes
0 9 SFP 1000BASE-SX PLE71N0 Yes
0 10 SFP 1000BASE-SX PLE71M7 Yes
0 11 SFP 1000BASE-SX PLE71LL Yes
0 12 SFP 1000BASE-SX B320210110 Yes
0 13 SFP 1000BASE-SX B322237357 Yes
0 14 SFP 1000BASE-SX P118PGB Yes
0 15 SFP 1000BASE-SX PGF425R Yes
0 16 SFP 1000BASE-SX PLE71MF Yes
0 17 SFP 1000BASE-SX AMEH367 Yes
0 18 SFP 1000BASE-SX PLE71LZ Yes
0 19 SFP 1000BASE-SX PGA531L Yes
0 20 SFP 1000BASE-SX PLE71M8 Yes
0 21 SFP 1000BASE-SX PGC51EM Yes
0 22 SFP 1000BASE-SX PLP32BP Yes
0 23 SFP 1000BASE-SX AJHG367 Yes
0 24 SFP 1000BASE-SX P11BWUJ Yes
0 25 SFP 1000BASE-SX P741RVM Yes
0 26 SFP 1000BASE-SX PGF3T9H Yes
0 27 SFP 1000BASE-SX PGC51ZE Yes
0 28 SFP 1000BASE-SX PGC525W Yes
!-------- output truncated -------------!
Related
Commands
interface configuration.
Display the physical status and operational status of an installed transceiver. The output also displays the transceiver’s serial number.
show linecard c e Display the line card(s) status.
Syntax show linecard [ number [ brief ] | all ]
Parameters number all brief
(OPTIONAL) Enter a slot number to view information on the line card in that slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600, and 0 to 5 on a E300.
(OPTIONAL) Enter the keyword all to view a table with information on all present line cards.
(OPTIONAL) Enter the keyword brief to view an abbreviated list of line card information.
Command Modes EXEC
EXEC Privilege
108 | Control and Monitoring
Command
History
E-Series Example
Version 8.3.3.8
Version 8.1.1.0
Updated to support PPID on the S60
Introduced on E-Series ExaScale
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Figure 4-27.
Command Example: show linecard on E-Series
-- Line card 0 --
Status : not present
-- Line card 1 --
Status : online
Next Boot : online
Required Type : EXW10SH - 10-port 10GE LAN/WAN PHY line card with
SFP+ options 10M CAM (EH)
Current Type : EXW10SH - 10-port 10GE LAN/WAN PHY line card with
SFP+ options 10M CAM (EH)
Hardware Rev : Base - 1.4 PP0 - 02 PP1 - 02
Num Ports : 10
Up Time : 18 hr, 42 min
FTOS Version : 8-4-1-317
Jumbo Capable : yes
Boot Flash : A: 2.9.1.1c B: 2.9.2.0E0 [booted]
Memory Size : 1073741824 bytes
Temperature : 65C
Power Status : AC
Voltage : ok
Serial Number : FX000049121
Part Number : 7520042807 Rev 03
Vendor Id : 04
Date Code : 01212010
Country Code : 01
Piece Part ID : N/A
PPID Revision : N/A
Service Tag : N/A
Expr Svc Code : N/A
Last Restart : soft reset
Auto Reboot : enabled
-- Line card 2 --
Status : not present
-- Line card 3 --
Status : online
Next Boot : online
Required Type : EXW10SJ - 10-port 10GE LAN/WAN PHY line card with
!-------- output truncated -------------!
C-Series
Example
Figure 4-28.
Command Example: show linecard on C-Series
FTOS#show linecard 11
-- Line card 11 --
Status : online
Next Boot : online
Required Type : E48PF - 48-port GE line card with SFP optics (EF)
Current Type : E48PF - 48-port GE line card with SFP optics (EF)
Hardware Rev : Base - 1.0 PP0 - n/a PP1 - n/a
Num Ports : 48
Up Time : 12 hr, 37 min
FTOS Version : 6.2.1.x
Jumbo Capable : yes
Boot Flash : A: 2.0.3.4 B: 2.0.3.4 [booted]
Memory Size : 268435456 bytes
Temperature : 49C
Power Status : PEM0: absent or down PEM1: up
Voltage : ok
Serial Number :
Part Number : Rev
Vendor Id :
Date Code :
Country Code :
FTOS#
Control and Monitoring | 109
list the definitions of the fields shown in
Table 4-1.
Descriptions for show linecard output
Field
Line card
Status
Next Boot
Required Type
Current Type
Hardware Rev
Num Ports
Up Time
FTOS Version
Jumbo Capable
Boot Flash Ver
Memory Size
Temperature
Power Status
Voltage
Serial Number
Part Num
Vendor ID
Date Code
Description
Displays the line card slot number (only listed in show linecard all command output).
Displays the line card’s status.
Displays whether the line card is to be brought online at the next system reload.
Displays the line card type configured for the slot.
The Required Type and Current Type must match. Use the linecard command to reconfigure the line card type if they do not match.
Displays the line card type installed in the slot.
The Required Type and Current Type must match. Use the linecard command to reconfigure the line card type if they do not match.
Displays the chip set revision.
Displays the number of ports in the line card.
Displays the number of hours and minutes the card is online.
Displays the operating software version.
Displays Yes or No indicating if the line card can support Jumbo frames.
Displays the two possible Bootflash versions. The [Booted] keyword next to the version states which version was used at system boot.
List the memory of the line card processor.
Displays the temperature of the line card.
Minor alarm status if temperature is over 65° C.
Lists the type of power modules used in the chassis:
• AC = AC power supply
• DC = DC Power Entry Module (PEM)
Displays OK if the line voltage is within range.
Displays the line card serial number.
Displays the line card part number.
Displays an internal code, which specifies the manufacturing vendor.
Displays the line card’s manufacturing date.
Figure 4-29.
Command Example: show linecard brief
FTOS#show linecard 11 brief
-- Line card 11 --
Status : online
Next Boot : online
Required Type : E48PF - 48-port GE line card with SFP optics (EF)
Current Type : E48PF - 48-port GE line card with SFP optics (EF)
Hardware Rev : Base - 1.0 PP0 - n/a PP1 - n/a
Num Ports : 48
Up Time : 11 hr, 24 min
FTOS Version : 6.1.1.0
Jumbo Capable : yes
FTOS#
110 | Control and Monitoring
Related
Commands
Pre-configure a line card in a currently empty slot of the system or a different line card type for the slot.
Display information on all interfaces on a specific line card.
View information on all elements of the system.
View information on the RPM.
View information on the SFM.
show linecard boot-information e View the line card status and boot information.
Syntax show linecard boot-information
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.8
Version 8.1.1.0
Version 6.5.1.4
Updated to support PPID on the S60
Introduced on E-Series ExaScale
Introduced on E-Series
Example Figure 4-30.
Command Example: show linecard boot-information
FTOS#show linecard boot-information
Serial Booted Next Cache Boot
# Status CurType number from boot boot flash
----------------------------------------------------------------------------------------------------------------
0 -
1 online EXW10SH FX000049121 8-4-1-317 8-4-1-317 A: 8-4-1-213 B: A: 2.9.1.1c B: 2.9.2.0E0 [b]
2 -
3 online EXW10SJ FX000097669 8-4-1-317 8-4-1-317 A: 8-4-1-305 B: invalid A: 2.9.1.1 [b] B: 2.9.1.1
4 online E90MH FX000046835 8-4-1-317 8-4-1-317 A: 8-4-1-213 B: invalid A: 2.9.1.1 B: 2.9.1.1 [b]
5 -
6 online E90MH FX000044725 8-4-1-317 8-4-1-317 A: 8-4-1-213 B: invalid A: 2.9.1.1 [b] B: 2.9.1.1
FTOS#
Control and Monitoring | 111
defines the fields in
Table 4-2.
Descriptions for show linecard boot-information output
Field
#
Status
CurType
Serial number
Booted from
Next boot
Cache boot
Boot flash
Description
Displays the line card slot numbers, beginning with slot 0. The number of slots listed is dependent on your chassis:
E-Series: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
Indicates if a line card is online, offline, or booting. If a line card is not detected in the slot, a hyphen ( - ) is displayed.
Displays the line card identification number, for example
EXW4PF.
Displays the line card serial number.
Indicates whether the line card cache booted or system booted. In addition, the image with which the line card booted is also displayed. If the line card cache booted, then the output is A: or B: followed by the image in the flash partition (A: 6.5.1.4 or B:
6.5.1.4).
If the line card system booted, then display is the current FTOS version number (6.5.1.4).
Indicates if the next line card boot is a cache boot or system boot and which image will be used in the boot.
Displays the system image in cache boot flash partition A: and B: for the line card. If the cache boot does not contain a valid image,
“invalid” is displayed.
Displays the two possible Boot flash versions. The [b] next to the version number is the current boot flash, that is the image used in the last boot.
Usage
Information
Related
Commands
The display area of this command uses the maximum 80 character length. If your display area is not set to 80 characters, the display will wrap.
download alt-full-image download alt-system-image
View the line card status
Upgrade the boot flash, boot selector, or system image
Download an alternate boot image to the chassis
Download an alternate FTOS image to the chassis
Download an alternate system image to the chassis
112 | Control and Monitoring
show memory (C-Series and E-Series) c e View current memory usage on the system.
Syntax show memory [ cp | lp slot-number | rp1 | rp2 ]
Parameters cp lp slot-number rp1 rp2
(OPTIONAL) Enter the keyword cp to view information on the Control Processor on the RPM.
(OPTIONAL) Enter the keyword lp and the slot number to view information on the line-card processor in that slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
(OPTIONAL) Enter the keyword rp1 to view information on Route Processor 1 on the RPM.
Note: This option is supported on the E-Series only.
(OPTIONAL) Enter the keyword rp2 to view information on Route Processor 2 on the
RPM.
Note: This option is supported on the E-Series only.
Command Modes EXEC
EXEC Privilege
Command
History
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Usage
Information
E-Series Example
The output for show memory displays the memory usage of LP part (sysdlp) of the system. The Sysdlp is an aggregate task that handles all the tasks running on C-Series’ and E-Series' LP.
show processes memory (C-Series and E-Series) will differ based on which FTOS
processes are counted.
• In the
show memory (C-Series and E-Series)
display output, the memory size is equal to the size of the application processes.
• In the
show processes memory (C-Series and E-Series) display output, the memory size is equal to
the size of the application processes plus the size of the system processes.
Figure 4-31.
Command Example: show memory on E-Series
FTOS#show memory
Statistics On CP Processor
===========================
Total(b) Used(b) Free(b) Lowest(b) Largest(b)
452689184 64837834 387851350 387805590 371426976
Statistics On RP1 Processor
===========================
Total(b) Used(b) Free(b) Lowest(b) Largest(b)
629145600 4079544 625066056 625066056 0
Statistics On RP2 Processor
===========================
Total(b) Used(b) Free(b) Lowest(b) Largest(b)
510209568 47294716 462914852 462617968 446275376
FTOS#
Control and Monitoring | 113
defines the fields displayed in
.
Table 4-3.
Descriptions for show memory output
Field
Lowest
Largest
Description
Displays the memory usage the system went to in the lifetime of the system. Indirectly, it indicates the maximum usage in the lifetime of the system: Total minus Lowest.
The current largest available. This relates to block size and is not related to the amount of memory on the system.
show memory (S-Series) s View current memory usage on the S-Series switch.
Syntax show memory [ stack-unit id ]
Parameters stack-unit id (OPTIONAL) Enter the keyword stack-unit followed by the stack unit ID of the
S-Series stack member to display memory information on the designated stack member.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Command Modes EXEC
EXEC Privilege
Command
History
Usage
Information
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced this version of the command for the S-Series
The output for show memory displays the memory usage of LP part (sysdlp) of the system. The Sysdlp is an aggregate task that handles all the tasks running on the S-Series’ CPU.
Figure 4-32.
Command Example: show memory on S-Series
FTOS#show memory stack-unit 0
Statistics On Unit 0 Processor
===========================
Total(b) Used(b) Free(b) Lowest(b) Largest(b)
268435456 4010354 264425102 264375410 264425102
114 | Control and Monitoring
show processes cpu (C-Series and E-Series) c e View CPU usage information based on processes running in the system.
Syntax show processes cpu [ cp | rp1 | rp2 ] [lp [ linecard-number [ 1-99 ] | all | summary]
Parameters cp rp1 rp2 lp linecard [ 1-99 ] lp all lp summary
(OPTIONAL) Enter the keyword cp to view CPU usage of the Control
Processor.
(OPTIONAL) Enter the keyword rp1 to view CPU usage of the Route
Processor 1.
Note: This option is supported on the E-Series only.
(OPTIONAL) Enter the keyword rp2 to view CPU usage of the Route
Processor 2.
Note: This option is supported on the E-Series only.
(OPTIONAL) Enter the keyword lp followed by the line card number to display the CPU usage of that line card.
The optional 1-99 variable sets the number of tasks to display in order of the highest CPU usage in the past five (5) seconds.
(OPTIONAL) Enter the keyword lp all to view CPU utilization on all active line cards.
(OPTIONAL) Enter the keyword lp summary to view a summary of the line card CPU utilization.
Command Modes EXEC
EXEC Privilege
Command
History
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.1.0
Introduced on C-Series
Modified: Added the lp all option
Modified: The granularity of the output for rp1 and rp2 is changed. The the output is now at the process level, so process-specific statistics are displayed.
Example 1 Figure 4-33.
Command Example: show processes cpu (Partial)
FTOS#show processes cpu
CPU Statistics On CP Processor
===============================
CPU utilization for five seconds: 4%/2%; one minute: 2%; five minutes: 2%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
0xd02e4e8 1498633 89918 16666 3.00% 2.67% 2.67% 0 KP
0xd9d4c70 0 0 0 0.00% 0.00% 0.00% 0 tLogTask
0xd9cd200 0 0 0 0.00% 0.00% 0.00% 0 soc_dpc
0xd9bf588 0 0 0 0.00% 0.00% 0.00% 0 tARL
0xd9bd2f8 0 0 0 0.00% 0.00% 0.00% 0 tBCMlink
0xd9bb0e0 700 42 16666 0.00% 0.00% 0.00% 0 tBcmTask
0xd9798d0 106683 6401 16666 0.00% 0.00% 0.00% 0 tNetTask
0xd3368a0 0 0 0 0.00% 0.00% 0.00% 0 tWdbTask
0xd3329b0 166 10 16600 0.00% 0.00% 0.00% 0 tWdtTask
0xd32a8c8 102500 6150 16666 0.00% 0.00% 0.00% 0 tme
0xd16b1d8 12050 723 16666 0.00% 0.00% 0.00% 0 ipc
0xd1680c8 33 2 16500 0.00% 0.00% 0.00% 0 irc
0xd156008 116 7 16571 0.00% 0.00% 0.00% 0 RpmAvailMgr
0xd153ab0 216 13 16615 0.00% 0.00% 0.00% 0 ev
-more-
Control and Monitoring | 115
Example 2 Figure 4-34.
Command Example: show processes cpu rp1
FTOS#show processes cpu rp1
CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
0x0000007c 60 6 10000 0.00% 0.00% 0.00% 0 ospf
0x00000077 460 46 10000 0.00% 0.00% 0.00% 0 dsm
0x00000074 100 10 10000 0.00% 0.00% 0.00% 0 ipm1
0x0000006e 180 18 10000 0.00% 0.00% 0.00% 0 rtm
0x0000006b 100 10 10000 0.00% 0.00% 0.00% 0 rip
0x00000068 120 12 10000 0.00% 0.00% 0.00% 0 acl
0x00000064 690 69 10000 0.00% 0.00% 0.00% 0 sysd1
0x00000062 20 2 10000 0.00% 0.00% 0.00% 0 sysmon
0x00000024 880 88 10000 0.00% 0.00% 0.00% 0 sshd
0x00000022 0 0 0 0.00% 0.00% 0.00% 0 inetd
0x00000020 2580 258 10000 0.00% 0.00% 0.00% 0 mount_mfs
0x00000013 0 0 0 0.00% 0.00% 0.00% 0 mount_mfs
0x00000006 80 8 10000 0.00% 0.00% 0.00% 0 sh
0x00000005 30 3 10000 0.00% 0.00% 0.00% 0 aiodoned
0x00000004 840 84 10000 0.00% 0.00% 0.00% 0 ioflush
0x00000003 250 25 10000 0.00% 0.00% 0.00% 0 reaper
0x00000002 0 0 0 0.00% 0.00% 0.00% 0 pagedaemon
0x00000001 160 16 10000 0.00% 0.00% 0.00% 0 init
0x00000000 700 70 10000 0.00% 0.00% 0.00% 0 swapper
0x00000088 260 26 10000 0.00% 0.00% 0.00% 0 bgp
Example 3 Figure 4-35.
Command Example: show processes cpu rp2
FTOS#show processes cpu rp2
CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
0x00000090 140 14 10000 0.00% 0.00% 0.00% 0 vrrp
0x0000008d 120 12 10000 0.00% 0.00% 0.00% 0 fvrp
0x00000088 360 36 10000 0.00% 0.00% 0.00% 0 xstp
0x00000084 60 6 10000 0.00% 0.00% 0.00% 0 span
0x00000083 180 18 10000 0.00% 0.00% 0.00% 0 pim
0x00000080 80 8 10000 0.00% 0.00% 0.00% 0 igmp
0x0000007b 130 13 10000 0.00% 0.00% 0.00% 0 ipm2
0x00000078 700 70 10000 0.00% 0.00% 0.00% 0 mrtm
0x00000074 100 10 10000 0.00% 0.00% 0.00% 0 l2mgr
0x00000070 80 8 10000 0.00% 0.00% 0.00% 0 l2pm
0x0000006c 80 8 10000 0.00% 0.00% 0.00% 0 arpm
0x00000068 60 6 10000 0.00% 0.00% 0.00% 0 acl2
0x00000064 750 75 10000 0.00% 0.00% 0.00% 0 sysd2
0x00000062 0 0 0 0.00% 0.00% 0.00% 0 sysmon
0x00000024 880 88 10000 0.00% 0.00% 0.00% 0 sshd
0x00000022 0 0 0 0.00% 0.00% 0.00% 0 inetd
0x00000020 2250 225 10000 0.00% 0.00% 0.00% 0 mount_mfs
0x00000013 0 0 0 0.00% 0.00% 0.00% 0 mount_mfs
0x00000006 100 10 10000 0.00% 0.00% 0.00% 0 sh
0x00000005 0 0 0 0.00% 0.00% 0.00% 0 aiodoned
0x00000004 960 96 10000 0.00% 0.00% 0.00% 0 ioflush
0x00000003 140 14 10000 0.00% 0.00% 0.00% 0 reaper
0x00000002 0 0 0 0.00% 0.00% 0.00% 0 pagedaemon
0x00000001 160 16 10000 0.00% 0.00% 0.00% 0 init
0x00000000 700 70 10000 0.00% 0.00% 0.00% 0 swapper
0x00000098 140 14 10000 0.00% 0.00% 0.00% 0 msdp
Usage
Information
is the CPU utilization for the last five seconds. The second number (2%) indicates the percent of CPU time spent at the interrupt level.
116 | Control and Monitoring
show processes cpu (S-Series) s Display CPU usage information based on processes running in an S-Series.
Syntax show processes cpu [ management-unit 1-99 [ details ] | stack-unit id | summary | ipc | memory [stack-unit id ] ]
Parameters management-unit 1-99
[ details ] stack-unit id summary ipc memory
(OPTIONAL) Display processes running in the control processor. The
1-99 variable sets the number of tasks to display in order of the highest
CPU usage in the past five (5) seconds. Add the details keyword to display all running processes (except sysdlp). See Example 3.
(OPTIONAL) Enter the keyword stack-unit followed by the stack member ID.
As an option of show processes cpu , this option displays CPU usage for the designated stack member. See Example 2.
Or, as an option of memory , this option limits the output of memory statistics to the designated stack member. See Example 5.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
(OPTIONAL) Enter the keyword summary to view a summary view of
CPU usage for all members of the stack. See Example 1.
(OPTIONAL) Enter the keyword ipc to display inter-process communication statistics.
(OPTIONAL) Enter the keyword memory to display memory statistics.
See Example 4.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Modified: Added management-unit [details] keywords.
Introduced for S-Series
Example 1 Figure 4-36.
Command Example: show processes cpu summary on S-Series
FTOS#show processes cpu summary
CPU utilization 5Sec 1Min 5Min
-------------------------------------------
Unit0 0% 0% 0%
CPU utilization 5Sec 1Min 5Min
-------------------------------------------
Unit1* 1% 0% 0%
Unit2 0% 0% 0%
Unit3 0% 0% 0%
* Mgmt Unit
Control and Monitoring | 117
Example 2 Figure 4-37.
Command Example: show processes cpu management-unit on S-Series
FTOS#show processes cpu management-unit 0
CPU utilization for five seconds: 1%/0%; one minute: 10%; five minutes: 2%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY
Process
272 20 2 10000 0.00% 0.00% 0.00% 0 topoDPC
271 0 0 0 0.00% 0.00% 0.00% 0 bcmNHOP
270 0 0 0 0.00% 0.00% 0.00% 0 bcmDISC
269 0 0 0 0.00% 0.00% 0.00% 0 bcmATP-RX
268 0 0 0 0.00% 0.00% 0.00% 0 bcmATP-TX
267 30 3 10000 0.00% 0.00% 0.00% 0 bcmSTACK
266 380 38 10000 0.00% 0.00% 0.08% 0 bcmRX
265 30 3 10000 0.00% 0.00% 0.00% 0 bcmLINK.0
264 0 0 0 0.00% 0.00% 0.00% 0 bcmXGS3AsyncTX
263 0 0 0 0.00% 0.00% 0.00% 0 bcmTX
262 160 16 10000 0.00% 0.00% 0.00% 0 bcmCNTR.0
260 0 0 0 0.00% 0.00% 0.00% 0 bcmDPC
253 10690 1069 10000 0.00% 10.00% 2.97% 0 sysd
251 2380 238 10000 0.00% 0.00% 0.50% 0 kfldintr
58 30 3 10000 0.00% 0.00% 0.00% 0 sh
36 50 5 10000 0.00% 0.00% 0.00% 0 13 5 3 1
!-------- output truncated -------------!
118 | Control and Monitoring
Example 3 Figure 4-38.
Command Example: show processes cpu stack-unit on S-Series
FTOS#show processes cpu stack-unit 0
CPU Statistics On Unit0 Processor
===============================
CPU utilization for five seconds: 0%/0%; one minute: 0%; five minutes: 0%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY
Process
52 8260 826 10000 0.00% 0.00% 0.22% 0 sysd
124 1160 116 10000 0.00% 0.00% 0.12% 0
KernLrnAgMv
116 70 7 10000 0.00% 0.00% 0.00% 0 xstp
109 50 5 10000 0.00% 0.00% 0.00% 0 span
108 60 6 10000 0.00% 0.00% 0.00% 0 pim
103 70 7 10000 0.00% 0.00% 0.00% 0 igmp
100 70 7 10000 0.00% 0.00% 0.00% 0 mrtm
96 70 7 10000 0.00% 0.00% 0.00% 0 l2mgr
92 100 10 10000 0.00% 0.00% 0.00% 0 l2pm
86 30 3 10000 0.00% 0.00% 0.00% 0 arpm
83 40 4 10000 0.00% 0.00% 0.00% 0 ospf
80 100 10 10000 0.00% 0.00% 0.00% 0 dsm
74 60 6 10000 0.00% 0.00% 0.00% 0 rtm
70 30 3 10000 0.00% 0.00% 0.00% 0 rip
68 120 12 10000 0.00% 0.00% 0.00% 0 ipm1
64 70 7 10000 0.00% 0.00% 0.00% 0 acl
63 30 3 10000 0.00% 0.00% 0.00% 0 bcmLINK.1
62 290 29 10000 0.00% 0.00% 0.00% 0 bcmCNTR.1
61 50 5 10000 0.00% 0.00% 0.00% 0 bcmRX
60 40 4 10000 0.00% 0.00% 0.00% 0 bcmLINK.0
59 0 0 0 0.00% 0.00% 0.00% 0 bcmXGS3AsyncTX
58 0 0 0 0.00% 0.00% 0.00% 0 bcmTX
57 340 34 10000 0.00% 0.00% 0.00% 0 bcmCNTR.0
55 0 0 0 0.00% 0.00% 0.00% 0 bcmDPC
117 60 6 10000 0.00% 0.00% 0.00% 0 frrp
28 0 0 0 0.00% 0.00% 0.00% 0 inetd
21 450 45 10000 0.00% 0.00% 0.00% 0 mount_mfs
18 130 13 10000 0.00% 0.00% 0.00% 0 mount_mfs
11 0 0 0 0.00% 0.00% 0.00% 0 syslogd
6 30 3 10000 0.00% 0.00% 0.00% 0 sh
5 10 1 10000 0.00% 0.00% 0.00% 0 aiodoned
4 0 0 0 0.00% 0.00% 0.00% 0 ioflush
3 20 2 10000 0.00% 0.00% 0.00% 0 reaper
2 0 0 0 0.00% 0.00% 0.00% 0 pagedaemon
1 0 0 0 0.00% 0.00% 0.00% 0 init
0 10 1 10000 0 00% 0 00% 0 00% 0
Control and Monitoring | 119
Example 4 Figure 4-39.
Command Example: show processes memory on S-Series
FTOS#show processes memory
Memory Statistics On Unit 0 Processor (bytes)
==========================================
start
Total : 160231424, MaxUsed : 130596864 [09/19/2007 03:11:17]
CurrentUsed: 130596864, CurrentFree: 29634560
SharedUsed : 14261872, SharedFree : 6709672
PID Process ResSize Size Allocs Frees Max
Current
124 KernLrnAgMv 140410880 0 0 0 0
0
117 frrp 5677056 217088 87650 0 87650
87650
116 xstp 7585792 1536000 551812 49692 518684
502120
109 span 5709824 221184 55386 0 55386
55386
108 pim 5869568 720896 12300 0 12300
12300
103 igmp 5513216 327680 18236 16564 18236
1672
100 mrtm 6905856 516096 72846 0 72846
72846
96 l2mgr 6107136 491520 254858 115948 172038
138910
92 l2pm 5607424 221184 667578 579740 120966
87838
86 arpm 5353472 208896 54528 16564 54528
37964
83 ospf 4210688 475136 0 0 0
0
80 dsm 6057984 552960 22838 0 22838
22838
74 rtm 6311936 577536 574792 298152 376024 276640
70 rip 5001216 249856 528 0 528
528
68 ipm1 5292032 339968 67224 0 67224
67224
64 acl 5607424 544768 140086 66256 123522
73830
63 bcmLINK.1 40410880 0 0 0 0 0
62 bcmCNTR.1 140410880 0 0 0 0 0
61 bcmRX 140410880 0 0 0 0
0
60 bcmLINK.0 140410880 0 0 0 0 0
59 bcmXGS3AsyncTX 140410880 0 0 0 0 0
58 bcmTX 140410880 0 0 0 0
0
57 bcmCNTR.0 140410880 0 0 0 0 0
55 bcmDPC 140410880 0 0 0 0 0
52 sysd 44650496 22876160 3930856 1358248 2589172
2572608
28 inetd 876544 69632 0 0 0
0
21 mount_mfs 22642688 1953792 0 0 0
0
!----output truncated ------------------!
120 | Control and Monitoring
Example 5 Figure 4-40.
Command Example: show processes memory stack-unit on S-Series
FTOS#show processes memory stack-unit 0
Memory Statistics On Unit 0 Processor (bytes)
==========================================
start
Total : 160231424, MaxUsed : 130596864 [09/19/2007 03:11:17]
CurrentUsed: 130560000, CurrentFree: 29671424
SharedUsed : 14261872, SharedFree : 6709672
PID Process ResSize Size Allocs Frees Max
Current
124 KernLrnAgMv 140410880 0 0 0 0
0
117 frrp 5677056 217088 87650 0 87650
87650
116 xstp 7585792 1536000 551812 49692 518684
502120
109 span 5709824 221184 55386 0 55386
55386
108 pim 5869568 720896 12300 0 12300
12300
103 igmp 5513216 327680 18236 16564 18236
1672
100 mrtm 6905856 516096 72846 0 72846
72846
96 l2mgr 6107136 491520 254858 115948 172038
138910
92 l2pm 5607424 221184 667578 579740 120966
87838
86 arpm 5353472 208896 54528 16564 54528
37964
83 ospf 4210688 475136 0 0 0
0
80 dsm 6057984 552960 22838 0 22838
22838
74 rtm 6311936 577536 574792 298152 376024
276640
70 rip 5001216 249856 528 0 528
528
68 ipm1 5292032 339968 67224 0 67224
67224
!----output truncated ------------------!
Related
Commands
show hardware layer2 acl show hardware layer3
Display Layer 2 ACL data for the selected stack member and stack member port-pipe.
Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
Display information on all interfaces on a specific S-Series stack member.
Display CPU usage information based on processes running in an S-Series show processes ipc flow-control c e s Display the Single Window Protocol Queue (SWPQ) statistics.
Syntax show processes ipc flow-control [ cp | rp1 | rp2 | lp linecard-number ]
Control and Monitoring | 121
Parameters cp rp1
(OPTIONAL) Enter the keyword cp to view the Control Processor’s SWPQ statistics.
(OPTIONAL) Enter the keyword rp1 to view the Control Processor’s SWPQ statistics on Route Processor 1.* rp2 (OPTIONAL) Enter the keyword rp2 to view the Control Processor’s SWPQ statistics on Route Processor 2.* lp linecard-number (OPTIONAL) Enter the keyword lp followed by the line card number to view the
Control Processor’s SWPQ statistics on the specified line card.*
* In the S-Series , this command supports only the cp keyword, not the rp1 , rp2 , and lp options. See
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series and E-Series
Example 1 Figure 4-41.
Command Example: show processes ipc flow-control from C-Series
FTOS# show processes ipc flow-control cp
Q Statistics on CP Processor
TxProcess RxProcess Cur High Time Retr Msg Ack Aval Max
Len Mark Out ies Sent Rcvd Retra Retra
ACL0 RTM0 0 0 0 0 0 0 10 10
ACL0 DIFFSERV0 0 0 0 0 0 0 10 10
ACL0 IGMP0 0 0 0 0 0 0 10 10
ACL0 PIM0 0 0 0 0 0 0 10 10
ACL0 ACL20 0 1 0 0 2 2 50 50
CFG0 CFGDATASYNC0 0 2 0 0 7 7 255 255
DHCP0 ACL0 0 1 0 0 9 9 25 25
DHCP0 IFMGR0 0 0 0 0 0 0 25 25
RTM0 ARPMGR0 0 1 0 0 1 1 136 136
ACL20 IGMP0 0 0 0 0 0 0 50 50
LACP0 IFMGR0 0 2 0 0 4 4 25 25
ARPMGR0 MRTM0 0 0 0 0 0 0 100 100
ACL20 PIM0 0 0 0 0 0 0 50 50
MACMGR0 ACL0 0 1 0 0 1 1 25 25
TCLASSMGR0 ARPMGR0 0 0 0 0 0 0 100 100
IFMGR0 IPMGR2 0 6 0 0 44 44 8 8
!--------------------------output truncated ---------------------------------!
122 | Control and Monitoring
Example 2 Figure 4-42.
Command Example: show processes ipc flow-control rp from E-Series
FTOS# show processes ipc flow-control cp
Q Statistics on CP Processor
TxProcess RxProcess Cur High Time Retr Msg Ack Aval Max
Len Mark Out ies Sent Rcvd Retra Retra
DHCP0 ACL0 0 1 0 0 6 6 25 25
DHCP0 IFMGR0 0 0 0 0 0 0 25 25
IFMGR0 FEFD0 0 3 0 0 27 27 8 8
IFMGR0 IPMGR0 0 6 0 0 44 44 8 8
IFMGR0 SNMP0 0 1 0 0 16 16 8 8
IFMGR0 SFL_CP0 0 4 0 0 31 31 8 8
IFMGR0 EVENTTERMLOG0 0 1 0 0 6 6 8 8
IFMGR0 PORTMIRR0 0 0 0 0 0 0 8 8
IFMGR0 DHCP0 0 1 0 0 6 6 8 8
IFMGR0 TCLASSMGR0 0 2 0 0 13 13 8 8
IFMGR0 VRRP0 0 3 0 0 25 25 8 8
IFMGR0 MRTM0 0 2 0 0 21 21 8 8
TCLASSMGR0 ARPMGR0 0 0 0 0 0 0 100 100
IFMGR0 IPMGR2 0 6 0 0 44 44 8 8
!--------------------------output truncated ---------------------------------!
list the definitions of the fields shown in
Table 4-4.
Description of show processes ipc flow-control cp output
Field
Source QID /Tx Process
Destination QID/Rx Process
Cur Len
High Mark
#of to / Timeout
#of Retr /Retries
#msg Sent/Msg Sent/
#msg Ackd/Ack Rcvd
Retr /Available Retra
Total/ Max Retra
Description
Source Service Identifier
Destination Service Identifier
Current number of messages enqueued
Highest number of packets in the queue at any point of time
Timeout count
Number of retransmissions
Number of messages sent
Number of messages acknowledged
Number of retries left
Number of retries allowed
Example 2 Figure 4-43.
Command Example: show processes ipc flow-control rp
FTOS# show processes ipc flow-control rp2
[qid] Source->Dest Cur High #of #of #msg #msg Retr total
Len Mark to Retr Sent Ackd
--------------------------------------------------------------------
[1] unknown2->unknown2 0 0 0 0 0 0 3 3
[2] l2pm0->spanMgr0 0 2 0 0 2298 2298 25 25
[3] fvrp0->macMgr0 0 0 0 0 0 0 25 25
[4] l2pm0->fvrp0 0 2 0 0 1905 1905 25 25
[5] fvrp0->l2pm0 0 0 0 0 0 0 25 25
[6] stp0->l2pm0 0 0 0 0 0 0 25 25
[7] spanMgr0->macMgr0 0 0 0 0 0 0 25 25
[8] spanMgr0->ipMgr0 0 0 0 0 0 0 25 25
FTOS#
Control and Monitoring | 123
Example 3 Figure 4-44.
Command Example: show processes ipc flow-control lp
FTOS#show processes ipc flow-control lp 10
Q Statistics on LP 10
TxProcess RxProcess Cur High Time Retries Msg Ack Aval Max
Len Mark Out Sent Rcvd Retra Retra
-------------------------------------------------------------------------------------------
ACL_AGENT10 PIM0 0 0 0 0 0 0 20 20
ACL_AGENT10 PIM0 0 0 0 0 0 0 20 20
FRRPAGT10 FRRP0 0 0 0 0 0 0 30 30
IFAGT10 IFMGR0 0 1 0 0 1 1 8 8
LPDMACAGENT10 MACMGR0 0 0 0 0 0 0 25 25
FTOS#
Example 4 Figure 4-45.
Command Example: show processes ipc flow-control on S-Series
FTOS#show processes ipc flow-control
Q Statistics on CP Processor
TxProcess RxProcess Cur High Time Retr Msg Ack Aval Max
Len Mark Out ies Sent Rcvd Retra Retra
ACL0 RTM0 0 0 0 0 0 0 10 10
ACL0 DIFFSERV0 0 0 0 0 0 0 10 10
ACL0 IGMP0 0 0 0 0 0 0 10 10
ACL0 PIM0 0 0 0 0 0 0 10 10
LACP0 IFMGR0 0 0 0 0 0 0 25 25
RTM0 ARPMGR0 0 0 0 0 0 0 136 136
MACMGR0 ACL0 0 0 0 0 0 0 25 25
ARPMGR0 MRTM0 0 0 0 0 0 0 100 100
DHCP0 ACL0 0 1 0 0 1 1 25 25
DHCP0 IFMGR0 0 0 0 0 0 0 25 25
L2PM0 SPANMGR0 0 2 0 0 14 14 25 25
ARPMGR0 FIBAGT0 0 1 0 0 1 1 100 100
SPANMGR0 MACMGR0 0 0 0 0 0 0 25 25
SPANMGR0 IPMGR0 0 0 0 0 0 0 25 25
SPANMGR0 L2PM0 0 0 0 0 0 0 25 25
STP0 L2PM0 0 0 0 0 0 0 25 25
RTM0 FIBAGT0 0 2 0 0 4 4 255 255
L2PM0 STP0 0 5 0 0 5 5 25 25
ACL_AGENT0 PIM0 0 0 0 0 0 0 20 20
ACL_AGENT0 PIM0 0 0 0 0 0 0 20 20
FRRP0 L2PM0 0 0 0 0 0 0 25 25
L2PM0 FRRP0 0 1 0 0 13 13 25 25
ACL0 ACL_AGENT0 0 4 0 0 7 7 90 90
ACL0 MACAGENT0 0 0 0 0 0 0 90 90
IFMGR0 EVENTTERMLOG0 0 1 0 0 1 1 8 8
IFMGR0 SNMP0 0 1 0 0 1 1 8 8
IFMGR0 IPMGR0 0 7 0 0 9 9 8 8
IFMGR0 DIFFSERV0 0 2 0 0 3 3 8 8
DIFFSERV0 ACL_AGENT0 0 0 0 0 0 0 100 100
!---------------output truncated --------------------------!
Usage
Information
The Single Window Protocol (SWP) provides flow control-based reliable communication between the sending and receiving software tasks.
Important Points to Remember
• A sending task enqueues messages into the SWP queue3 for a receiving task and waits for an acknowledgement.
• If no response is received within a defined period of time, the SWP timeout mechanism resubmits the message at the head of the FIFO queue.
• After retrying a defined number of times, the following timeout message is generated:
SWP-2-NOMORETIMEOUT
•
In the display output in Figure 4-45 , a retry (Retries) value of zero indicates that the SWP
mechanism reached the maximum number of retransmissions without an acknowledgement.
124 | Control and Monitoring
show processes memory (C-Series and E-Series) c e View memory usage information based on processes running in the system.
Syntax show processes memory [ cp | lp slot-number { lp all | lp summary } | rp1 | rp2 ]
Parameters cp lp slot-number lp all lp summary rp1 rp2
(OPTIONAL) Enter the keyword cp to view memory usage of the Control Processor.
(OPTIONAL) Enter the keyword lp and the slot number to view information on the line-card processor in that slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/E1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
(OPTIONAL) Enter the keyword lp all to view CP memory usage on all active line cards.
(OPTIONAL) Enter the keyword lp summary to view a summary of the line card
CP memory usage.
(OPTIONAL) Enter the keyword rp1 to view memory usage of the Route Processor
1.
Note: This option is supported on the E-Series only.
(OPTIONAL) Enter the keyword rp2 to view memory usage of the Route Processor
2.
Note: This option is supported on the E-Series only.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.1.1.2
Version 8.1.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.1.0
Introduced on E-Series ExaScale E600i
Introduced on E-Series ExaScale E1200i
Introduced on C-Series
Added lp all and lp summary options
For rp1 and rp2 only, the output displays memory consumption of all the processes including a summary (see
Usage
Information
The output for show process memory displays the memory usage statistics running on CP part (sysd) of the system. The Sysd is an aggregate task that handles all the tasks running on C-Series’ and E-Series'
CP.
In FTOS Release 7.4.1.0 and higher, the total counter size (for all 3 CPUs) in show memory and show processes memory will differ based on which FTOS processes are counted.
• In the
show memory (C-Series and E-Series)
display output, the memory size is equal to the size of the application processes.
• In the
show processes memory (C-Series and E-Series) display output, the memory size is equal to
the size of the application processes plus the size of the system processes.
Control and Monitoring | 125
Example Figure 4-46.
Command Example: show processes memory (partial)
FTOS#show processes memory
Memory Statistics On CP Processor (bytes)
==========================================
Total: 452689184, MaxUsed: 64886986, CurrentUsed: 64873866, Current
TaskName TotalAllocated TotalFreed MaxHeld CurrentHolding
tRootTask 39083408 1395840 38143920 37687568
tARL 64 0 64 64
tBcmTask 256 0 256 256
tPortmapd 18560 0 18560 18560
tShell 3440 0 3440 3440
tPingTmo0 0 1088 0 0
tExcTask 0 592864 0 0
tme 4002494 192 4002302 4002302
ipc 34060 192 34060 33868
irc 943436 0 943436 943436
RpmAvailMgr 9376 32 9344 9344
ev 133188 0 133188 133188
evterm 26752 0 26752 26752
evhdlr 2528 8064 2528 0
dlm 7556256 7366960 1239104 189296
dla 416 0 416 416
tsm 15136 0 15136 15136
fmg 766560 0 766560 766560
fileProc 416 0 416 416
sysAdmTsk 42028 0 42028 42028
Example Figure 4-47.
Command Example: show processes memory rp1
FTOS#show processes memory rp1
Total : 954650624, MaxUsed : 114135040 [3/8/2006 15:1:42]
CurrentUsed: 114135040, CurrentFree: 840515584
SharedUsed : 7849096, SharedFree : 13122448
PID Process ResSize Size Allocs Frees Max Current
124 ospf 3215360 425984 0 0 0 0
119 dsm 7749632 1859584 797026 0 797026 797026
114 ipm1 3821568 229376 297324 0 297324 297324
112 rtm 4722688 421888 925008 0 925008 925008
107 rip 3731456 253952 198216 0 198216 198216
104 acl 4734976 430080 1127524 0 1127524 1127524
100 sysd1 11636736 2019328 965798 0 965798 965798
98 sysmon 528384 94208 0 0 0 0
36 sshd 1286144 430080 0 0 0 0
34 inetd 663552 98304 0 0 0 0
32 mount_mfs 42397696 2514944 0 0 0 0
19 mount_mfs 364544 2449408 0 0 0 0
6 sh 446464 737280 0 0 0 0
5 aiodoned 76529664 0 0 0 0 0
4 ioflush 76529664 0 0 0 0 0
3 reaper 76529664 0 0 0 0 0
2 pagedaemon 76529664 0 0 0 0 0
1 init 139264 2375680 0 0 0 0
0 swapper 76529664 0 0 0 0 0
126 | Control and Monitoring
Example Figure 4-48.
Command Example: show processes memory rp2
FTOS#show processes memory rp2
Total : 953700352, MaxUsed : 149417984 [3/8/2006 12:33:6]
CurrentUsed: 149417984, CurrentFree: 804282368
SharedUsed : 7847200, SharedFree : 13124344
PID Process ResSize Size Allocs Frees Max Current
145 vrrp 3870720 266240 297324 0 297324 297324
141 fvrp 4472832 204800 797010 0 797010 797010
138 xstp 10764288 7155712 367534 0 367534 367534
133 span 4136960 167936 565810 0 565810 565810
132 pim 6664192 516096 2812528 0 2812528 2812528
128 igmp 4112384 344064 627684 0 627684 627684
124 ipm2 3923968 237568 363396 0 363396 363396
120 mrtm 25567232 593920 697790 0 697790 697790
116 l2mgr 4579328 520192 830098 0 830098 830098
112 l2pm 3874816 225280 367446 32948 367446 334498
108 arpm 3702784 208896 268420 0 268420 268420
104 acl2 3485696 94208 132144 0 132144 132144
100 sysd2 11657216 1679360 998834 0 998834 998834
98 sysmon 528384 94208 0 0 0 0
36 sshd 1286144 430080 0 0 0 0
34 inetd 663552 98304 0 0 0 0
32 mount_mfs 41791488 2514944 0 0 0 0
19 mount_mfs 364544 2449408 0 0 0 0
6 sh 446464 737280 0 0 0 0
5 aiodoned 76967936 0 0 0 0 0
4 ioflush 76967936 0 0 0 0 0
3 reaper 76967936 0 0 0 0 0
2 pagedaemon 76967936 0 0 0 0 0
1 init 139264 2375680 0 0 0 0
0 swapper 76967936 0 0 0 0 0
FTOS#
defines the fields that appear in the show processes memory output.
Table 4-5.
Descriptions of show processes memory rp1/rp2 output
Field
Total:
MaxUsed:
CurrentUsed:
CurrentFree:
SharedUsed:
SharedFree:
PID
Process
ResSize
Size
Allocs
Frees
Max
Current
Description
Total system memory available
Total maximum memory used ever (history indicated with time stamp)
Total memory currently in use
Total system memory available
Total used shared memory
Total free shared memory
Process ID
Process Name
Actual resident size of the process in memory
Process test, stack, and data size
Total dynamic memory allocated
Total dynamic memory freed
Maximum dynamic memory allocated
Current dynamic memory in use
Control and Monitoring | 127
show processes memory (S-Series) s Display memory usage information based on processes running in the S-Series system.
Syntax show processes memory { management-unit | stack unit { 0–7 | all | summary }}
Parameters management-unit stack unit 0–7 all summary
Enter the keyword management-unit for CPU memory usage of the stack management unit.
Enter the keyword stack unit followed by a stack unit ID of the member unit for which to display memory usage on the forwarding processor.
Enter the keyword all for detailed memory usage on all stack members.
Enter the keyword summary for a brief summary of memory availability and usage on all stack members.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Modified: Added management-unit option
Introduced on S-Series
Usage
Information
Example
The output for show process memory displays the memory usage statistics running on CP part (sysd) of the system. The Sysd is an aggregate task that handles all the tasks running on S-Series’ CP.
For S-Series, the output of show memory and this command will differ based on which FTOS processes are counted.
• In the show memory display output, the memory size is equal to the size of the application processes.
• In the output of this command, the memory size is equal to the size of the application processes plus the size of the system processes.
Figure 4-49.
Command Example: show processes memory on S-Series
FTOS#show processes memory stack-unit 0
Total: 268435456, MaxUsed: 2420244, CurrentUsed: 2420244, CurrentFree:
266015212
TaskName TotalAllocated TotalFreed MaxHeld CurrentHolding
tme 435406 397536 54434 37870
ipc 16652 0 16652 16652
timerMgr 33304 0 33304 33304
sysAdmTsk 33216 0 33216 33216
tFib4 1943960 0 1943960 1943960
aclAgent 90770 16564 74206 74206
ifagt_1 21318 16564 21318 4754
dsagt 6504 0 6504 6504
MacAgent 269778 0 269778 269778
128 | Control and Monitoring
Example Figure 4-50.
Command Example: show processes memory management-unit
FTOS#show processes management-unit
Total : 151937024, MaxUsed : 111800320 [2/25/2008 4:18:53]
CurrentUsed: 98848768, CurrentFree: 53088256
SharedUsed : 13007848, SharedFree : 7963696
PID Process ResSize Size Allocs Frees Max Current
337 KernLrnAgMv 117927936 0 0 0 0 0
331 vrrp 5189632 249856 50572 0 50572 50572
323 frrp 5206016 241664 369238 0 369238 369238
322 xstp 7430144 2928640 38328 0 38328 38328
321 pim 5267456 823296 62168 0 62168 62168
314 igmp 4960256 380928 18588 16564 18588 2024
313 mrtm 6742016 1130496 72758 0 72758 72758
308 l2mgr 5607424 552960 735214 380972 619266 354242
301 l2pm 5001216 167936 1429522 1176044 286606 253478
298 arpm 4628480 217088 71092 33128 71092 37964
294 ospf 5468160 503808 724204 662560 78208 61644
288 dsm 6778880 1159168 39490 16564 39490 22926
287 rtm 5713920 602112 442280 198768 376024 243512
284 rip 4562944 258048 528 0 528 528
281 lacp 4673536 266240 221060 0 221060 221060
277 ipm1 4837376 380928 83788 0 83788 83788
273 acl 5005312 512000 239564 149076 123616 90488
272 topoDPC 117927936 0 0 0 0 0
271 bcmNHOP 117927936 0 0 0 0 0
270 bcmDISC 117927936 0 0 0 0 0
269 bcmATP-RX 117927936 0 0 0 0 0
268 bcmATP-TX 117927936 0 0 0 0 0
267 bcmSTACK 117927936 0 0 0 0 0
266 bcmRX 117927936 0 0 0 0 0
265 bcmLINK.0 117927936 0 0 0 0 0
!----------- output truncated --------------!
defines the fields that appear in the show processes memory output.
.:
Table 4-6.
Descriptions of show processes memory output
Field
Total:
MaxUsed:
CurrentUsed:
CurrentFree:
SharedUsed:
SharedFree:
PID
Process
ResSize
Size
Allocs
Frees
Max
Current
Description
Total system memory available
Total maximum memory used ever (history indicated with time stamp)
Total memory currently in use
Total system memory available
Total used shared memory
Total free shared memory
Process ID
Process Name
Actual resident size of the process in memory
Process test, stack, and data size
Total dynamic memory allocated
Total dynamic memory freed
Maximum dynamic memory allocated
Current dynamic memory in use
Control and Monitoring | 129
show processes switch-utilization e Show switch fabric utilization.
Syntax show processes switch-utilization
Command Mode EXEC
EXEC Privilege
Command
History
Version 8.1.1.0
Introduced on E-Series ExaScale
E-Series original Command
Example Figure 4-51.
Command Example: show processes switch-utilization
FTOS#show processes switch-utilization
Switch fabric utilization 5Sec 1Min 5Min
------------------------------------------------------
3% 3% 3%
Usage
Information
An asterisk ( * ) in the output indicates a legacy card that is not support by the show processes switch-utilization command. show rpm c e Show the current RPM status.
Syntax show rpm [ number [ brief ] | all ]
Parameters number all brief
(OPTIONAL) Enter either zero (0) or 1 for the RPM.
(OPTIONAL) Enter the keyword all to view a table with information on all present RPMs.
(OPTIONAL) Enter the keyword brief to view an abbreviated list of RPM information.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.8
Version 8.1.1.0
Updated to support PPID on the S60
Introduced on E-Series ExaScale
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
130 | Control and Monitoring
E-Series Example Figure 4-52.
Command Example: show rpm on E-Series
FTOS#show rpm
-- RPM card 0 --
Status : active
Next Boot : online
Card Type : RPM - Route Processor Module (LC-EH-RPM)
Hardware Rev : 3.1
Num Ports : 1
Up Time : 18 hr, 48 min
Last Restart : reset by user
FTOS Version : 8-4-1-317
Jumbo Capable : yes
CP Boot Flash : A: 2.5.1.0 [booted] B: 2.5.1.0
RP1 Boot Flash: A: 2.5.1.0 [booted] B: 2.5.1.0
RP2 Boot Flash: A: 2.5.1.0 [booted] B: 2.5.1.0
CP Mem Size : 1073741824 bytes
RP1 Mem Size : 1073741824 bytes
RP2 Mem Size : 1073741824 bytes
MMC Mem Size : 3566329856 bytes
External MMC : 128180224 bytes
USB Mem Size : n/a
Temperature : 36C
Power Status : AC
Voltage : ok
Serial Number : FX000056234
Part Number : 7520043401 Rev 05
Vendor Id : 04
Date Code : 01072010
Country Code : 01
Piece Part ID : N/A
PPID Revision : N/A
Service Tag : N/A
Expr Svc Code : N/A
-- RPM card 1 --
Status : not present
FTOS#
defines the fields displayed in
.
Table 4-7.
Descriptions of show rpm output
Field
Status
Next Boot
Card Type
Hardware Rev
Num Ports
Up Time
Last Restart
Description
Displays the RPM’s status.
Displays whether the RPM is to be brought online at the next system reload.
Displays the RPM catalog number.
Displays theE-Series chipset hardware revision level: 1.0 (non-Jumbo); 1.5
(Jumbo-enabled); 2.0 (or above is TeraScale).
Displays the number of active ports.
Displays the number of hours and minutes since the RPM’s last reboot.
States the reason for the last RPM reboot.
C-Series possible values:
• “normal power-cycle” ( reset power-cycle command)
• “reset by master” (peer RPM reset by master RPM)
• “over temperature shutdown”
• “power supply failed”
E-Series possible values:
• “normal power-cycle” (insufficient power, normal power cycle)
• “reset by user” (automatic failover, software reload of both RPMs, or master RPM resetting peer)
• “force-failover” ( redundancy force-failover command)
Control and Monitoring | 131
Table 4-7.
Descriptions of show rpm output
Field
FTOS Version
Jumbo Capable
CP Boot Flash
RP1 Boot Flash
RP2 Boot Flash
CP Mem Size
RP1 Mem Size
PR2 Mem Size
Temperature
Power Status
Voltage
Serial Num
Part Num
Vendor ID
Date Code
Country Code
Description
Displays the operating software version.
Displays a Yes or No indicating if the RPM is capable of sending and receiving
Jumbo frames.
This field does not indicate if the chassis is in Jumbo mode; for that determination, use the show chassis brief command.
Displays the two possible Boot Flash versions for the Control Processor. The
[Booted] keyword next to the version states which version was used at system boot.
Displays the two possible Boot Flash versions for the Routing Processor 1. The
[Booted] keyword next to the version states which version was used at system boot.
Displays the two possible Boot Flash versions for the Routing Processor 2. The
[Booted] keyword next to the version states which version was used at system boot.
Displays the memory of the Control Processor.
Displays the memory of the Routing Processor 1.
Displays the memory of the Routing Processor 2.
Displays the temperature of the RPM.
Minor alarm status if temperature is over 65° C.
Lists the status of the power modules in the chassis.
Displays the power rails for the line card.
Displays the line card serial number.
Displays the line card part number.
Displays an internal code, which specifies the manufacturing vendor.
Displays the line card’s manufacturing date.
Displays the country of origin.
01 = USA
Related
Commands
View information on all elements of the system.
View information on a line card.
View information on the SFM.
132 | Control and Monitoring
show software ifm c s Display interface management (IFM) data.
Syntax show software ifm { clients [ summary ] | ifagt number | ifcb interface | stack-unit unit-ID | trace-flags }
Parameters clients summary ifagt number ifcb interface stack-unit unit-ID trace-flags
Enter the keyword clients to display IFM client information.
(OPTIONAL) Enter the keyword summary to display brief information about IFM clients.
Enter the keyword ifagt followed by the number of an interface agent to display software pipe and IPC statistics.
Enter the keyword ifcb followed by one of the following interface IDs followed by the slot/port information to display interface control block information for that interface:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet .
• For a Port Channel interface, enter the keyword port-channel .
(Range:1– 128)
• For a 10G Ethernet interface, enter the keyword TenGigabitEthernet .
•
•
•
•
C-Series options also include:
• fastethernet for a Fast Ethernet interface loopback for a Loopback interface managementethernet for a Management Ethernet interface null for a Null interface vlan for a VLAN interface (Range: 1–4094, 1-2094 for ExaScale)
Enter the keyword stack-unit followed by the stack member number to display IFM information for that unit.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Note: This option is only available on S-Series.
Enter the keyword trace-flags to display IFM information for internal trace flags.
Defaults
Command Mode
None
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced for C-Series and S-Series
Control and Monitoring | 133
S-Series Example Figure 4-53.
Command Example: show software ifm clients summary on S-Series
FTOS#show software ifm clients summary
ClntType Inst svcMask subSvcMask tlvSvcMask tlvSubSvc swp
IPM 0 0x00000000 0x00000000 0x90ff71f3 0x021e0e81 31
RTM 0 0x00000000 0x00000000 0x800010ff 0x01930000 43
VRRP 0 0x00000000 0x00000000 0x803330f3 0x00400000 39
L2PM 0 0x00000000 0x00000000 0x87ff79ff 0x0e032200 45
ACL 0 0x00000000 0x00000000 0x867f50c3 0x000f0218 44
OSPF 0 0x00000dfa 0x00400098 0x00000000 0x00000000 0
PIM 0 0x000000f3 0x00030000 0x00000000 0x00000000 0
IGMP 0 0x000e027f 0x00000000 0x00000000 0x00000000 0
SNMP 0 0x00000000 0x00000000 0x800302c0 0x00000002 30
EVTTERM 0 0x00000000 0x00000000 0x800002c0 0x00000000 29
MRTM 0 0x00000000 0x00000200 0x81f7103f 0x00000000 38
DSM 0 0x00000000 0x00000000 0x80771003 0x00000000 32
LACP 0 0x00000000 0x00000000 0x8000383f 0x00000000 35
DHCP 0 0x00000000 0x00000000 0x800000c2 0x0000c000 37
V6RAD 0 0x00000433 0x00030000 0x00000000 0x00000000 0
Unidentified Client0 0x006e0002 0x00000000 0x00000000 0x00000000 0
FTOS# show switch links c View the switch fabric backplane or internal status.
Syntax show switch links { backplane | internal }
Parameters backplane internal
Enter the keyword backplane to view a table with information on the link status of the switch fabric backplane for both SFMs.
Enter the keyword internal to view a table with information on the internal status of the switch fabric modules.
Defaults
Command Modes
Command
History
Example
None
EXEC
Version 7.5.1.0
Introduced on C-Series
Figure 4-54.
Command Example: show switch links backplane
FTOS# show switch links backplane
Switch fabric backplane link status:
SFM0 Links Status SFM1 Links Status
LC SlotID Port0 | Port1 | Port2 | Port3 | Port4 | Port5 | Port6 |
Port7
0 up up up up down down down down
1 not present
2 not present
3 not present
4 not present
5 not present
6 up up up up down down down down
7 not present up - Both ends of the link are up down - Both ends of the link are down up / down - SFM side up and LC side down down / up - SFM side down and LC side up
FTOS#
134 | Control and Monitoring
show system (S-Series) s Display the current status of all stack members or a specific member.
Syntax show system [ brief | stack-unit unit-id | stack-ports { status | topology }]
Parameters brief stack-unit unit-id stack-ports status | topology
(OPTIONAL) Enter the keyword brief to view an abbreviated list of system information.
(OPTIONAL) Enter the keyword stack-unit followed by the stack member ID for information on that stack member.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
(OPTIONAL) Enter the keyword stack-ports for information on the status or topology of the S60 stack ports.
Note: THis option applies to the S60 only.
Command Modes EXEC
EXEC Privilege
Command
History
Usage
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Modified output: Boot Flash field will display code level for boot code 2.8.1.1 and newer, while older boot codes are displayed as "Present".
Modified output: Added Master Priority field.
Introduced for S-Series switches
Figure 4-57 shows the output from the
show system brief command.
Figure 4-56 shows the output from the
show system stack-unit command on a non-S60 system.
Figure 4-57 shows the output from the
show system stack-unit command on an S60.
Control and Monitoring | 135
Example Figure 4-55.
Command Example: show system brief
FTOS#show system brief
Stack MAC : 0:1:e8:d6:4:70
-- Stack Info --
Unit UnitType Status ReqTyp CurTyp Version Ports
---------------------------------------------------------------------------
0 Member not present
1 Standby online S50V S50V 7.7.1.0 52
2 Mgmt online S50V S50V 7.7.1.0 52
3 Member not present
4 Member not present
5 Member not present
6 Member not present
7 Member not present
-- Module Info --
Unit Module No Status Module Type Ports
---------------------------------------------------------------------------
1 0 online S50-01-10GE-2P 2
1 1 online S50-01-24G-2S 1
2 0 online S50-01-10GE-2P 2
2 1 online S50-01-24G-2S 1
-- Power Supplies --
Unit Bay Status Type
---------------------------------------------------------------------------
1 0 up AC
1 1 absent
2 0 up AC
2 1 absent
-- Fan Status --
Unit TrayStatus Fan0 Fan1 Fan2 Fan3 Fan4 Fan5
--------------------------------------------------------------------------------
1 up up up up up up up
2 up up up up up up up
FTOS#
136 | Control and Monitoring
Example Figure 4-56.
Command Example: show system stack-unit
FTOS#show system stack-unit 0
-- Unit 0 --
Unit Type : Management Unit
Status : online
Next Boot : online
Required Type : S4810 - 52-port GE/TE/FG (SE)
Current Type : S4810 - 52-port GE/TE/FG (SE)
Master priority : 0
Hardware Rev : 3.0
Num Ports : 64
Up Time : 3 day, 21 hr, 37 min
FTOS Version : 8.3.12.0
Jumbo Capable : yes
POE Capable : no
FIPS Mode : disabled
Boot Flash : 1.2.0.0
Memory Size : 2147483648 bytes
Temperature : 55C
Voltage : ok
Serial Number : HADL111220134
Part Number : 7590009601 Rev A
Vendor Id : 07
Date Code : 01122011
Country Code : 02
Piece Part ID : N/A
PPID Revision : N/A
Service Tag : N/A
Expr Svc Code : N/A
Auto Reboot : disabled
Burned In MAC : 00:01:e8:8a:e1:ab
No Of MACs : 3
-- Power Supplies --
Unit Bay Status Type FanStatus
----------------------------------------------------------------------------
0 0 up AC up
0 1 absent absent
-- Fan Status --
Unit Bay TrayStatus Fan0 Speed Fan1 Speed
----------------------------------------------------------------------------
0 0 up up 11280 up 11520
0 1 up up 11520 up 11280
FTOS#
Control and Monitoring | 137
Example Figure 4-57.
Command Example: show system stack-unit (S60)
FTOS#show system stack-unit 0
-- Unit 0 --
Unit Type : Management Unit
Status : online
Next Boot : online
Required Type : S60 - 48-port E/FE/GE (SC)
Current Type : S60 - 48-port E/FE/GE (SC)
Master priority : 0
Hardware Rev : 2.0
Num Ports : 52
Up Time : 2 hr, 16 min
FTOS Version : 1-2-0-205
Jumbo Capable : yes
POE Capable : no
Boot Flash : 1.0.0.2
Memory Size : 2147483648 bytes
Temperature : 50C
Voltage : ok
Serial Number : 00AS101900013
Part Number : 7520044101 Rev 02
Vendor Id : 11
Date Code : 01192010
Country Code : 01
Last Restart : soft reset
Auto Reboot : disabled
Burned In MAC : 00:01:e8:81:e1:b9
No Of MACs : 3
-- Module 0 --
Status : not present
-- Module 1 --
Status : not present
-- Power Supplies --
Unit Bay Status Type
---------------------------------------------------------------------------
0 0 up AC
0 1 up AC
-- Fan Status --
Unit Bay TrayStatus Fan0 Speed Fan1 Speed Fan2 Speed Temp
--------------------------------------------------------------------------------
0 0 up up 7200 up 7200 up 7200 20
0 1 up up 7200 up 7200 up 7200 21
Speed in RPM
FTOS#
Related
Commands
Display the FTOS version.
Display memory usage based on running processes.
Display information about the stack ports on all switches in the S-Series stack.
Display the data plane and management plane input and output statistics of a particular stack member.
Configure the ability of an S-Series switch to become the management unit of a stack.
138 | Control and Monitoring
show tech-support (C-Series and E-Series) c e Display, or save to a file, a collection of data from other show commands, the information necessary for Dell Networking technical support to perform troubleshooting.
Syntax show tech-support [ linecard 0-6 | page ] | { display | except | find | grep | no-more | save }
Parameters linecard page
0-6 (OPTIONAL) Enter the keyword linecard followed by the linecard number to view information relating to a specific linecard.
(OPTIONAL) Enter the keyword page to view 24 lines of text at a time.
Press the SPACE BAR to view the next 24 lines.
Press the ENTER key to view the next line of text.
If you use the pipe command ( | ), then enter one of these keywords to filter command
output. Refer to Chapter 2, CLI Basics
for details on filtering commands.
display , except , find , grep , no-more save Enter the save keyword (following the pipe) to save the command output.
flash: Save to local flash drive (flash://filename (max 20 chars) ) slot0: Save to local file system (slot0://filename (max 20 chars) )
EXEC Privilege Command Modes
Command
History
Version 7.8.1.0
Version 7.5.1.0
Version 6.5.4.0
Introduced save to file options
Introduced on C-Series
Show clock included in display on E-Series
Control and Monitoring | 139
C-Series
Example
Figure 4-58.
Command Example: show tech-support (partial) on C-Series
FTOS#show tech-support page
----------------------------------- show version -------------------------------
Dell Force10 Networks Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: FTOS 7.5.1.0
Copyright (c) 1999-2007 by Dell, Inc.
Build Time: Tue Sep 12 15:39:17 IST 2006
Build Path: /sites/maa/work/sw//C-SERIES/SW/SRC
FTOS uptime is 18 minutes
System image file is "/work/sw/IMAGES/Chassis/C300-ODC-2/FTOS-CS.bin"
Chassis Type: C300
Control Processor: IBM PowerPC 750FX (Rev D2.2) with 1073741824 bytes of memory.
128K bytes of non-volatile configuration memory.
1 Route Processor/Switch Fabric Module
2 48-port GE 10/100/1000Base-T line card with RJ45 interface (CB)
1 FastEthernet/IEEE 802.3 interface(s)
96 GigabitEthernet/IEEE 802.3 interface(s)
----------------------------------- show HA information -------------------
-- RPM Status --
------------------------------------------------
RPM Slot ID: 0
RPM Redundancy Role: Primary
RPM State: Active
RPM SW Version: CS-1-1-317
Link to Peer: Down
Peer RPM: not present
-- RPM Redundancy Configuration --
------------------------------------------------
Primary RPM: rpm0
Auto Data Sync: Full
Failover Type: Hot Failover
Auto reboot RPM: Disabled
Auto failover limit: 3 times in 60 minutes
...more----
140 | Control and Monitoring
E-Series Example Figure 4-59.
Command Example: show tech-support save (partial) on E-Series
FTOS#show tech-support ?
linecard Line card page Page through output
| Pipe through a command
<cr>
FTOS#show tech-support linecard 3 | ?
display Display additional information except Show only text that does not match a pattern find Search for the first occurrence of a pattern grep Show only text that matches a pattern no-more Don't paginate output save Save output to a file
FTOS#show tech-support linecard 3 | save ?
flash: Save to local file system (flash://filename (max 20 chars) ) slot0: Save to local file system (slot0://filename (max 20 chars) )
FTOS#show tech-support linecard 3 | save flash://LauraSave
Start saving show command report .......
FTOS#dir
Directory of flash:
1 drwx 32768 Jan 01 1980 00:00:00 +00:00 .
2 drwx 512 Aug 22 2008 14:21:13 +00:00 ..
3 drwx 8192 Mar 30 1919 10:31:04 +00:00 TRACE_LOG_DIR
4 drwx 8192 Mar 30 1919 10:31:04 +00:00 CRASH_LOG_DIR
5 drwx 8192 Mar 30 1919 10:31:04 +00:00 NVTRACE_LOG_DIR
6 drwx 8192 Mar 30 1919 10:31:04 +00:00 CORE_DUMP_DIR
7 d--- 8192 Mar 30 1919 10:31:04 +00:00 ADMIN_DIR
8 -rwx 33059550 Jul 11 2007 17:49:46 +00:00 FTOS-EF-7.4.2.0.bin
9 drwx 8192 Jan 01 1980 00:18:28 +00:00 diag
10 -rwx 29555751 May 12 2008 17:29:42 +00:00 FTOS-EF-4.7.6.0.bin
11 -rwx 27959813 Apr 04 2008 15:05:12 +00:00 FTOS-EF-7.5.1.0.bin
12 -rwx 4693 May 12 2008 17:24:36 +00:00 config051508
13 -rwx 29922288 Jan 11 2008 14:58:36 +00:00 FTOS-EF-7.6.1.0.bin
14 -rwx 6497 Aug 22 2008 14:18:56 +00:00 startup-config
15 -rwx 5832 Jul 25 2008 11:13:36 +00:00 startup-config.bak
16 -rwx 29947358 Jul 25 2008 11:04:26 +00:00 FTOS-EF-7.6.1.2.bin
17 -rwx 10375 Aug 25 2008 10:55:18 +00:00 LauraSave flash: 520962048 bytes total (40189952 bytes free)
FTOS#
Usage
Information
Without the linecard or page option, the command output is continuous, use CNTL-z to interrupt the command output.
The save option works with other filtering commands. This allows you to save specific information of a show command. The save entry should always be the last option.
For example: FTOS# show tech-support | grep regular-expression | except regular-expression | find regular-expression | save flash://result
This display output is an accumulation of the same information that is displayed when you execute one of the following show commands:
• show cam-profile
• show cam-ipv4flow
• show chassis
• show clock
• show environment
• show file-system
• show interface
• show inventory
Control and Monitoring | 141
Related
Commands
• show ip management-route
• show ip protocols
• show ip route summary
• show processes cpu
• show processes memory
• show redundancy
• show rpm
• show running-conf
• show sfm
• show version
show environment (C-Series and E-Series)
Display the FTOS version.
Display the line card(s) status.
Display system component status.
Display memory usage based on running processes. show tech-support (S-Series) s Display a collection of data from other show commands, necessary for Dell Networking technical support to perform troubleshooting on S-Series switches.
Syntax show tech-support [ stack-unit unit-id | page ]
Parameters stack-unit page save
(OPTIONAL) Enter the keyword stack-unit to view CPU memory usage for the stack member designated by unit-id.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
(OPTIONAL) Enter the keyword page to view 24 lines of text at a time.
Press the SPACE BAR to view the next 24 lines.
Press the ENTER key to view the next line of text.
When using the pipe command ( | ), enter one of these keywords to filter command output.
Refer to
Chapter 2, CLI Basics for details on filtering commands.
Enter the save keyword to save the command output.
flash: Save to local flash drive (flash://filename (max 20 chars) )
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced save to file options
Expanded to support S-Series switches
142 | Control and Monitoring
S-Series
Examples
Figure 4-60.
Command Example: show tech-support save (partial) on S-Series
FTOS#show tech-support ?
page Page through output stack-unit Unit Number
| Pipe through a command
<cr>
FTOS#show tech-support stack-unit 1 ?
| Pipe through a command
<cr>
FTOS#show tech-support stack-unit 1 | ?
except Show only text that does not match a pattern find Search for the first occurrence of a pattern grep Show only text that matches a pattern no-more Don't paginate output save Save output to a file
FTOS#show tech-support stack-unit 1 | save ?
flash: Save to local file system (flash://filename (max 20 chars) )
FTOS#show tech-support stack-unit 1 | save flash://LauraSave
Start saving show command report .......
FTOS#
FTOS#dir
Directory of flash:
1 drw- 16384 Jan 01 1980 00:00:00 +00:00 .
2 drwx 1536 Jul 13 1996 02:38:06 +00:00 ..
3 d--- 512 Nov 20 2007 15:46:44 +00:00 ADMIN_DIR
4 -rw- 7124 Jul 13 1996 02:33:04 +00:00 startup-config
5 -rw- 3303 Feb 14 2008 22:01:16 +00:00 startup-config.oldChassis
6 -rw- 6561 May 17 1996 04:10:54 +00:00 startup-config.bak
7 -rw- 6539 May 29 1996 10:35:42 +00:00 test.cfg
8 -rw- 276 Jul 15 1996 23:11:14 +00:00 LauraSave flash: 3104256 bytes total (3072512 bytes free)
FTOS#
Figure 4-61.
Command Example: show tech-support (partial) on S-Series
FTOS#show tech-support stack-unit 0
----------------------------------- show version -------------------------------
Dell Force10 Networks Real Time Operating System Software
Dell Force10 Operating System Version: 1.0
Dell Force10 Application Software Version: FTOS 7.6.1.0
Copyright (c) 1999-2007 by Dell, Inc.
Build Time: Tue Sep 12 15:39:17 IST 2006
Build Path: /sites/maa/work/sw/purushothaman/cser-latest/depot/main/Dev/Cyclone/
FTOS uptime is 18 minutes
System Type: S50N
Control Processor: MPC8451E with 255545344 bytes of memory.
32M bytes of Boot-Flash memory.
1 48-port E/FE/GE (SB)
48 GigabitEthernet/IEEE 802.3 interface(s)
4 Ten GigabitEthernet/IEEE 802.3 interface(s)
------------------------------------ show clock -------------------------------
12:03:01.695 UTC Wed Nov 21 2007
----------------------------------- show running-config ------------------------
Current Configuration ...
! Version E_MAIN4.7.5.414
! Last configuration change at Wed Nov 21 11:42:19 2007 by default
!
service timestamps log datetime
!
hostname FTOS
!
enable password 7 xxxxxxxx
!
username admin password 7 xxxxxxxx
!
enable restricted 7 xxxxxxxx
!
interface GigabitEthernet 0/1
no ip address
shutdown
!
interface GigabitEthernet 0/2
no ip address
shutdown
!------------- output truncated -----------------!
Control and Monitoring | 143
Usage
Information
Related
Commands
Without the page or stack-unit option, the command output is continuous, use Ctrl-z to interrupt the command output.
The save option works with other filtering commands. This allows you to save specific information of a show command. The save entry should always be the last option.
For example: FTOS# show tech-support | grep regular-expression | except regular-expression | find regular-expression | save flash://result
This display output is an accumulation of the same information that is displayed when you execute one of the following show commands:
• show cam
• show clock
• show environment
• show file
• show interfaces
• show inventory
• show ip protocols
• show ip route summary
• show processes cpu
• show processes memory
• show redundancy
• show running-conf
• show version
show processes memory (S-Series)
Display the FTOS version.
Display the current switch status.
Display system component status.
Display memory usage based on running processes. ssh-peer-rpm c e Open an SSH connection to the peer RPM.
Syntax ssh-peer-rpm [ -l username ]
Parameters
-l username (OPTIONAL) Enter the keyword -l followed by your user name.
Default: The user name associated with the terminal
Defaults
Command Modes
Not configured.
EXEC
EXEC Privilege
Command
History
Version 8.1.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced on E-Series
144 | Control and Monitoring
Usage
Information
This command is not available when the peer RPMs are running different FTOS releases.
ssh-peer-stack-unit
Open an SSH connection to the peer RPM.
Syntax
Parameters ssh-peer-stack-unit [ -l username ]
-l username (OPTIONAL) Enter the keyword -l followed by your user name.
Default: The user name associated with the terminal
Defaults
Command Modes
Not configured.
EXEC
EXEC Privilege
Command
History
Version 8.3.3.4
Introduced on S60 telnet c e s Connect through Telnet to a server.
Syntax telnet { host | ip-address | ipv6-address prefix-length | vrf vrf instance name } [ /source-interface ]
Parameters host ip-address ipv6-address prefix-length
Enter the name of a server.
Enter the IPv4 address in dotted decimal format of the server.
Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros
Control and Monitoring | 145
vrf instance source-interface
(Optional) E-Series Onl y: Enter the keyword vrf followed by the VRF Instance name.
(OPTIONAL) Enter the keywords /source-interface followed by the interface information to include the interface’s IP address.
Enter the following keywords and slot/port or number information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number from zero (0) to 16383.
• For the Null interface, enter the keyword null followed by 0.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For SONET interface types, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
Not configured.
EXEC
EXEC Privilege
Command
History Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale (IPv6)
Increased number of VLANs on ExaScale to 4094 (was 2094)
Introduced on E-Series ExaScale (IPv4)
Introduced VRF.
Introduced on S-Series
Introduced on C-Series and added support for IPv6 address on E-Series only telnet-peer-rpm c e Open a Telnet connection to the peer RPM.
Syntax
Defaults telnet-peer-rpm
Not configured.
Command Modes EXEC
EXEC Privilege
146 | Control and Monitoring
Command
History
Usage
Information
Version 8.1.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced on E-Series
Opening a telnet connection from the Standby RPM to an Active RPM follows the authentication procedure configured in the chassis. However, opening a telnet connection from the Active RPM into the Standby RPM requires local authentication.
Configuring an ACL on a VTY line will block a Telnet session using the telnet-peer-rpm command in the standby to active RPM direction only. Such an ACL will not block an internal Telnet session in the active RPM to standby RPM direction.
telnet-peer-stack-unit
Open a Telnet connection to the peer stack unit.
Syntax
Defaults
Command Modes telnet-peer-stack-unit
Not configured.
EXEC
EXEC Privilege
Command
History
Version 8.3.3.4
Introduced on S60 terminal length c e s Configure the number of lines displayed on the terminal screen.
Syntax terminal length screen-length
To return to the default values, enter terminal no length .
Parameters screen-length Enter a number of lines. Entering zero will cause the terminal to display without pausing.
Range: 0 to 512.
Default: 24 lines.
Defaults
Command Modes
24 lines
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Control and Monitoring | 147
Version 7.5.1.0
Introduced on C-Series
E-Series original Command terminal xml c e Enable XML mode in Telnet and SSH client sessions.
Syntax terminal xml
To exit the XML mode, enter terminal no xml .
Defaults Disabled
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.1.1.0
Version 7.7.1.0
Version 6.5.1.0
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced for E-Series
Usage
Information
This command enables the XML input mode where you can either cut and paste XML requests or enter the XML requests line-by-line. For more information on using the XML feature, refer to the XML chapter in the FTOS Configuration Guide .
traceroute c e s View a packet’s path to a specific device.
Syntax traceroute { host | vrf instance | ip-address | ipv6-address }
Parameters host vrf instance ip-address ipv6-address
Enter the name of device.
(Optional) E-Series Onl y: Enter the keyword vrf followed by the VRF Instance name.
Enter the IP address of the device in dotted decimal format.
Enter the IPv6 address, in the x:x:x:x::x format, to which you are testing connectivity.
Note: The :: notation specifies successive hexadecimal fields of zeros
Defaults
Command Modes
Timeout = 5 seconds; Probe count = 3; 30 hops max; 40 byte packet size; UDP port = 33434
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.9.1.0
Introduced on the S60.
Introduced on E-Series ExaScale with IPv6
Introduced on E-Series ExaScale (IPv4 only)
Introduced VRF.
148 | Control and Monitoring
Version 7.6.1.0
Version 7.5.1.0
Added support for S-Series
Introduced on C-Series
Version 7.4.1.0
Added support for IPv6 address on E-Series
E-Series original Command
Usage
Information
When you enter the traceroute command without specifying an IP address (Extended Traceroute), you are prompted for a target and source IP address, timeout in seconds (default is 5), a probe count
(default is 3), minimum TTL (default is 1), maximum TTL (default is 30), and port number (default is
33434). To keep the default setting for those parameters, press the ENTER key.
For IPv6, you are prompted for a minimum hop count (default is 1) and a maximum hop count (default is 64).
Example Figure 4-62.
Command Example: traceroute (IPv4)
FTOS#traceroute www.force10networks.com
Translating "www.force10networks.com"...domain server (10.11.0.1) [OK]
Type Ctrl-C to abort.
------------------------------------------------------------------------------------------
Tracing the route to www.force10networks.com (10.11.84.18), 30 hops max, 40 byte packets
------------------------------------------------------------------------------------------
TTL Hostname Probe1 Probe2 Probe3
1 10.11.199.190 001.000 ms 001.000 ms 002.000 ms
2 gwegress-sjc-02.force10networks.com (10.11.30.126) 005.000 ms 001.000 ms 001.000 ms
3 fw-sjc-01.force10networks.com (10.11.127.254) 000.000 ms 000.000 ms 000.000 ms
4 www.force10networks.com (10.11.84.18) 000.000 ms 000.000 ms 000.000 ms
FTOS#
Figure 4-63 contains examples of the IPv6
traceroute command with both a compressed IPv6 address and uncompressed address.
Example Figure 4-63.
Command Example: traceroute (IPv6)
FTOS#traceroute 100::1
Type Ctrl-C to abort.
-----------------------------------------------------------
Tracing the route to 100::1, 64 hops max, 60 byte packets
-----------------------------------------------------------
Hops Hostname Probe1 Probe2 Probe3
1 100::1 000.000 ms 000.000 ms 000.000 ms
FTOS#traceroute 3ffe:501:ffff:100:201:e8ff:fe00:4c8b
Type Ctrl-C to abort.
-----------------------------------------------------------------------------------------
Tracing the route to 3ffe:501:ffff:100:201:e8ff:fe00:4c8b, 64 hops max, 60 byte packets
-----------------------------------------------------------------------------------------
Hops Hostname Probe1 Probe2 Probe3
1 3ffe:501:ffff:100:201:e8ff:fe00:4c8b
000.000 ms 000.000 ms 000.000 ms
FTOS#
Related
Commands
Test connectivity to a device.
Control and Monitoring | 149
undebug all c e s Disable all debug operations on the system.
Syntax undebug all
Defaults No default behavior or values
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
E-Series original Command upload trace-log c e Upload trace log files from the three CPUs (cp, rp1, and rp2)
Syntax upload trace-log { cp { cmd-history | hw-trace | sw-trace }| rp1 { cmd-history | hw-trace | sw-trace }| rp2 { cmd-history | hw-trace | sw-trace }}
Parameters cp | rp1 | rp2 cmd-history hw-trace sw-trace
Enter the keyword cp | rp1 | rp2 to upload the trace log from that CPU.
(OPTIONAL) Enter the keyword cmd-history to upload the CPU’s command history.
(OPTIONAL) Enter the keyword hw-trace to upload the CPU’s hardware trace.
(OPTIONAL) Enter the keyword sw-trace to upload the CPU’s software trace.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Version 8.1.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced on C-Series and expanded to support command history, hardware trace, and software trace logs
Introduced on E-Series
Usage
Information
The log information is uploaded to flash:/TRACE_LOG_DIR
150 | Control and Monitoring
util-threshold cpu (C- and E-Series) c e Configure the high or low CPU utilization thresholds for SNMP traps.
Syntax util-threshold cpu {5sec | 1min | 5min} {rp1 | rp2 | cp | lp slot-id | all} {high { 0-100} | {low [ 0-100 }}
To return to the default settings, use the no util-threshold cpu command syntax.
Parameters cpu utilization time
Indicate the length of time in which the cpu has been busy.
• 5sec
• 1min
• 5min processor type Indicate the type of processor to be used to configure the CPU utilization information.
• rp1 = route processor1
• rp2 = route processor2
• cp = control processor
• lp slot-id = the line card slot-id
• all = use all of the processors to configure the CPU utilization information.
utilization threshold in %
Indicate the high or low values for the CPU utilization thresholds in percentage format.
• high. Range: 0 - 100
• low. Range: 0 - 100
Note: A threshold level of 0 will disable the syslog and SNMP trap.
Example
Defaults util-threshold cpu 5sec cp high 50
In this example, the low threshold value is not specified so it will take the value set for the high threshold value.In all other instances, the low threshold value must be equal to or less than that of the high threshold value.
High CPU utilization threshold: 1min = 85%, 5min = 80%
Low CPU utilization threshold: 1min = 75%, 5min = 70%
CONFIG Command Modes
Command
History
Usage
Information
Version 8.4.2.3
Version 8.4.2.0
Version 8.4.1.0
Introduced on C-Series, S25 and S50
Introduced on E-Series TeraScale
Introduced on E-Series ExaScale
When the total CPU utilization exceeds the configured threshold for a given time, a threshold notification is sent as a SNMP trap. If a low threshold value is not specified, the low threshold value is set to the same value as the high threshold value. The system will generate a SYSLOG and SNMP Trap each time the configured threshold is crossed.
Note: The 5sec util-threshold cpu command is disabled by default on all platforms. To enable the command, enter util-threshold cpu 5sec all high { value greater than zero }. To disable the SYSLOG and traps for the 5sec cpu utilization thresholds, enter util-threshold cpu 5sec all high 0 or no util-threshold cpu 5sec { rp1 | rp2 | cp | lp slot-id | all}
Control and Monitoring | 151
util-threshold cpu (S-Series) s Configure the high or low CPU utilization thresholds for SNMP traps.
Syntax util-threshold cpu {5sec | 1min | 5min} {Management-unit | standby | stack-unit unit-number | all}
{high { 0-100} | {low [ 0-100 }}}
To return to the default setting, enter no util-threshold cpu .
Parameters cpu utilization time Enter the keyword that indicates the amount of threshold time to configure the CPU utilization thresholds.
• 5sec
• 1min
• 5min unit Indicate the unit where you want to configure the CPU utilization thresholds.
• Management-unit
• standby
• stack-unit unit-number = select the number of the unit in the stack
• all = use all of the units to configure the cpu utilization information. utilization threshold in % Indicate the high or low values for the CPU utilization threshold in percentage format.
• high. Range: 0 - 100
• low. Range: 0 - 100
Note: A threshold level of 0 will disable the syslog and SNMP trap.
Defaults High threshold cpu default = 92%
Low threshold cpu default = 82%
CONFIG Command Modes
Command
History
Version 8.3.3.8
Version 8.3.5.3
Version 8.4.2.2
Version 8.4.2.0
Version 8.4.1.0
Introduced on S60.
Introduced on S55.
Introduced on C-Series, S25 and S50.
Introduced on E-Series TeraScale.
Introduced on E-Series ExaScale.
Usage
Information
When the total CPU utilization exceeds the configured threshold for a given time, a threshold notification is sent as a SNMP trap. If a low threshold value is not specified, the low threshold value is set to the same value as the high threshold value. The system will generate a SYSLOG and SNMP Trap each time the configured threshold is crossed.
152 | Control and Monitoring
util-threshold mem (C- and E-Series) c e Configure the high or low memory utilization thresholds for SNMP traps.
Syntax util-threshold mem {rp1 | rp2 | cp | lp slot-id | all} {high { 0-100} | {low [ 0-100 }}
To return to the default setting, use the no util-threshold mem command syntax.
Parameters processor type utilization threshold in %
Indicate the type of processor that will be used to configure the memory utilization information.
• rp1 = route processor1
• rp2 = route processor2
• cp = control processor
• lp slot-id = the line card slot-id
• all = use all of the processors to configure the memory utilization information.
Indicate the high or low values for the memory utilization threshold in percentage format.
• high. Range: 0 - 100
• low. Range: 0 - 100
Note: A threshold level of 0 will disable the syslog and SNMP trap.
Defaults
Command Modes
High threshold default = 92%
Low threshold default = 82%
CONFIG
Command
History
Version 8.4.2.2
Version 8.4.2.0
Version 8.4.1.0
Introduced on C-Series, S25 and S50
Introduced on E-Series TeraScale
Introduced on E-Series ExaScale
Usage
Information
When the total memory utilization exceeds the configured threshold for a given time, a threshold notification is sent as a SNMP trap. If a low threshold value is not specified, the low threshold value is set to the same value as the high threshold value.
To return the memory thresholds to the default values, enter no util-threshold mem rp1 | rp2 | cp | lp number | all
Control and Monitoring | 153
util-threshold mem (S-Series) s Configure the high or low memory utilization thresholds for SNMP traps.
Syntax util-threshold mem {Management-unit | standby | stack-unit unit-number | all} {high { 0-100} | {low
[ 0-100 }}}
To return to the default setting, enter the no util-threshold mem command syntax.
Parameters
Defaults unit utilization threshold in %
Indicate the unit where you want to configure the memory utilization thresholds.
• Management-unit
• standby
• stack-unit unit-number = select the number of the unit in the stack
• all = use all of the units to configure the memory utilization information.
Indicate the high or low values for the memory utilization in percentage format.
• high. Range: 0 - 100
• low. Range: 0 - 100
Note: A threshold level of0 will disable the syslog and SNMP trap.
High threshold default = 92%
Low threshold default = 82%
CONFIG Command Modes
Command
History
Usage
Information
Version 8.3.3.8
Version 8.3.5.3
Version 8.4.2.2
Version 8.4.2.0
Version 8.4.1.0
Introduced on S60.
Introduced on S55.
Introduced on C-Series, S25 and S50
Introduced on E-Series TeraScale
Introduced on E-Series ExaScale
When the total memory utilization exceeds the configured threshold for a given time, a threshold notification is sent as a SNMP trap. If a low threshold value is not specified, the low threshold value is set to the same value as the high threshold value.
154 | Control and Monitoring
virtual-ip c e Configure a virtual IP for the active management interface.
Syntax virtual-ip ip address
To return to the default, use the no virtual-ip ip address command.
Parameters ip address Enter the IP address of the active management interface in a dotted decimal format
(A.B.C.D.)
Defaults
Command Modes
No default behavior or values
CONFIGURATION
Command
History
Version 8.1.1.0
Version 7.5.1.0
Introduced on E-Series ExaScale
Introduced on C-Series
E-Series original Command
Related
Commands
Assign a primary and secondary IP address to the interface. write c e s Copy the current configuration to either the startup-configuration file or the terminal.
Syntax write { memory | terminal }
Parameters memory Enter memory to copy the current running configuration to the startup configuration file. This command is similar to the copy running-config startup-config command.
terminal Enter terminal to copy the current running configuration to the terminal. This command is similar to the show running-config command.
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series original Command
Related
Commands
Usage
Information
Save configurations created in uBoot.
The write memory command saves the running-configuration to the file labeled startup-configuration. When using a LOCAL CONFIG FILE other than the startup-config not named
“startup-configuration” (for example, you used a specific file during the boot config
command) the running-config is not saved to that file; use the copy command to save any running-configuration changes to that local file.
Control and Monitoring | 155
156 | Control and Monitoring
802.1ag
Overview
is available only on platform: s
Commands
This chapter contains the following commands:
•
•
•
clear ethernet cfm traceroute-cache
•
•
•
•
•
•
•
•
•
•
•
•
show ethernet cfm maintenance-points local
•
show ethernet cfm maintenance-points remote
•
•
•
show ethernet cfm port-statistics
•
show ethernet cfm traceroute-cache
•
•
•
•
5
802.1ag | 157
ccm disable s Disable CCM.
Syntax ccm disable
Enter no ccm disable to enable CCM.
Defaults
Command Modes
Disabled
ECFM DOMAIN
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series ccm transmit-interval s Configure the transmit interval (mandatory). The interval specified applies to all MEPs in the domain.
Syntax ccm transmit-interval seconds
Parameters seconds Enter a transmit interval.
Range: 1,10,60,600
Defaults
Command Modes
10 seconds
ECFM DOMAIN
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series clear ethernet cfm traceroute-cache s Delete all Link Trace Cache entries.
Syntax
Defaults clear ethernet cfm traceroute-cache
None
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
158 | 802.1ag
database hold-time s Set the amount of time that data from a missing MEP is kept in the Continuity Check Database.
Syntax database hold-time minutes
Parameters minutes Enter a hold-time.
Range: 100-65535 minutes
Defaults
Command Modes
100 minutes
ECFM DOMAIN
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series disable s Disable Ethernet CFM without stopping the CFM process.
Syntax
Defaults disable
Disabled
Command Modes ETHERNET CFM
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series domain s Create maintenance domain.
Syntax domain name md-level number
Parameters name md-level number
Name the maintenance domain.
Enter a maintenance domain level.
Range: 0-7
Defaults
Command Modes
Command
History
None
ETHERNET CFM
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
802.1ag | 159
ethernet cfm s Spawn the CFM process. No CFM configuration is allowed until the CFM process is spawned.
Syntax
Defaults ethernet cfm
Disabled
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series ethernet cfm mep s Create an MEP.
Syntax ethernet cfm mep { up-mep | down-mep } domain { name | level } ma-name name mepid mep-id
Parameters
[ up-mep | down-mep ] domain [ name | level ] ma-name name mepid mep-id
Specify whether the MEP is up or down facing.
Up-MEP : monitors the forwarding path internal to an bridge on the customer or provider edge; on Dell Networking systems the internal forwarding path is effectively the switch fabric and forwarding engine.
Down-MEP : monitors the forwarding path external another bridge.
Enter this keyword followed by the domain name or domain level.
Enter this keyword followed by the name of the maintenance association.
Enter an MEP ID.
Range: 1-8191
Defaults
Command Modes
None
INTERFACE
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series ethernet cfm mip s Create an MIP.
Syntax ethernet cfm mip domain { name | level } ma-name name
Parameters domain [ name | level ] ma-name name
Enter this keyword followed by the domain name or domain level.
Enter this keyword followed by the name of the maintenance association.
Defaults
Command Modes
None
INTERFACE
160 | 802.1ag
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series mep cross-check s Enable cross-checking for an MEP.
Syntax mep cross-check mep-id
Parameters mep-id Enter the MEP ID
Range: 1-8191
Defaults
Command Modes
None
ECFM DOMAIN
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series mep cross-check enable s Enable cross-checking.
Syntax mep cross-check enable { port | vlan-id }
Parameters port vlan-id
Down service with no VLAN association.
Enter the VLAN to apply the cross-check.
Defaults
Command Modes
None
ECFM DOMAIN
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series mep cross-check start-delay s Configure the amount of time the system waits for a remote MEP to come up before the cross-check operation is started.
Syntax mep cross-check start-delay number
Parameters start-delay number Enter a start-delay in seconds.
Range: 3-100 seconds
Defaults 3 ccms
802.1ag | 161
Command Modes
Command
History
ETHERNET CFM
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series ping ethernet s Send a Loopback message.
Syntax ping ethernet domain [ name l level ] ma-name ma-name remote { dest-mep-id | mac-addr mac-address } source { src-mep-id | port interface }
Parameters name | level ma-name ma-name dest-mep-id mac-addr mac-address src-mep-id port interface
Enter the domain name or level.
Enter the keyword followed by the maintenance association name.
Enter the MEP ID that will be the target of the ping.
Enter the keyword followed by the MAC address that will be the target of the ping.
Enter the MEP ID that will originate the ping.
Enter the keyword followed by the interface that will originate the ping.
Defaults
Command Modes
Command
History
None
EXEC Privilege
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series show ethernet cfm domain s Display maintenance domain information.
Syntax show ethernet cfm domain [ name | level | brief ]
Parameters name | level brief
Enter the maintenance domain name or level.
Enter this keyword to display a summary output.
Defaults
Command Modes
Command
History
None
EXEC Privilege
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
162 | 802.1ag
Example FTOS# show ethernet cfm domain
Domain Name: customer
Level: 7
Total Service: 1
Services
MA-Name VLAN CC-Int X-CHK Status
My_MA 200 10s enabled
Domain Name: My_Domain
Level: 6
Total Service: 1
Services
MA-Name VLAN CC-Int X-CHK Status
Your_MA 100 10s enabled show ethernet cfm maintenance-points local s Display configured MEPs and MIPs.
Syntax show ethernet cfm maintenance-points local [ mep | mip ]
Parameters mep mip
Enter this keyword to display configured MEPs.
Enter this keyword to display configured MIPs.
Defaults
Command Modes
None
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
Example FTOS#show ethernet cfm maintenance-points local mip
-------------------------------------------------------------------------------
MPID Domain Name Level Type Port CCM-Status
MA Name VLAN Dir MAC
-------------------------------------------------------------------------------
0 service1 4 MIP Gi 0/5 Disabled
My_MA 3333 DOWN 00:01:e8:0b:c6:36
0 service1 4 MIP Gi 0/5 Disabled
Your_MA 3333 UP 00:01:e8:0b:c6:36 show ethernet cfm maintenance-points remote s Display the MEP Database.
Syntax show ethernet cfm maintenance-points remote detail [ active | domain { level | name } | expired | waiting ]
Parameters active domain [ name | level ]
Enter this keyword to display only the MEPs in active state.
Enter this keyword followed by the domain name or domain level.
802.1ag | 163
Defaults
Command Modes
Command
History
Example expired waiting
None
EXEC Privilege
Enter this keyword to view MEP entries that have expired due to connectivity failure.
Enter this keyword to display MEP entries waiting for response.
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
FTOS#show ethernet cfm maintenance-points remote detail
MAC Address: 00:01:e8:58:68:78
Domain Name: cfm0
MA Name: test0
Level: 7
VLAN: 10
MP ID: 900
Sender Chassis ID: FTOS
MEP Interface status: Up
MEP Port status: Forwarding
Receive RDI: FALSE
MP Status: Active show ethernet cfm mipdb s Display the MIP Database.
Syntax
Defaults show ethernet cfm mipdb
None
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series show ethernet cfm statistics s Display MEP statistics.
Syntax show ethernet cfm statistics [ domain { name | level } vlan-id vlan-id mpid mpid ]
Parameters domain name | level vlan-id vlan-id mpid mpid
Enter this keyword to display statistics for a particular domain.
Enter the domain name or level.
Enter this keyword followed by a VLAN ID.
Enter this keyword followed by a maintenance point ID.
Defaults None
164 | 802.1ag
Command Modes
Command
History
Example
EXEC Privilege
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
FTOS# show ethernet cfm statistics
Domain Name: Customer
Domain Level: 7
MA Name: My_MA
MPID: 300
CCMs:
Transmitted: 1503 RcvdSeqErrors: 0
LTRs:
Unexpected Rcvd: 0
LBRs:
Received: 0 Rcvd Out Of Order: 0
Received Bad MSDU: 0
Transmitted: 0 show ethernet cfm port-statistics s Display CFM statistics by port.
Syntax show ethernet cfm port-statistics [ interface type slot / port ]
Parameters interface type slot/port
Enter this keyword followed by the interface type.
Enter the slot and port numbers for the port.
Defaults
Command Modes
Command
History
None
EXEC Privilege
Example
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
FTOS#show ethernet cfm port-statistics interface gigabitethernet 0/5
Port statistics for port: Gi 0/5
==================================
RX Statistics
=============
Total CFM Pkts 75394 CCM Pkts 75394
LBM Pkts 0 LTM Pkts 0
LBR Pkts 0 LTR Pkts 0
Bad CFM Pkts 0 CFM Pkts Discarded 0
CFM Pkts forwarded 102417
TX Statistics
=============
Total CFM Pkts 10303 CCM Pkts 0
LBM Pkts 0 LTM Pkts 3
LBR Pkts 0 LTR Pkts 0 show ethernet cfm traceroute-cache s Display the Link Trace Cache.
802.1ag | 165
Syntax
Defaults
Command Modes
Command
History
Example show ethernet cfm traceroute-cache
None
EXEC Privilege
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
FTOS#show ethernet cfm traceroute-cache
Traceroute to 00:01:e8:52:4a:f8 on Domain Customer2, Level 7, MA name Test2 with VLAN
2
------------------------------------------------------------------------------
Hops Host IngressMAC Ingr Action Relay Action
Next Host Egress MAC Egress Action FWD Status
------------------------------------------------------------------------------
4 00:00:00:01:e8:53:4a:f8 00:01:e8:52:4a:f8 IngOK RlyHit
00:00:00:01:e8:52:4a:f8 Terminal MEP service s Create maintenance association.
Syntax service name vlan vlan-id
Parameters name vlan vlan-id
Enter a maintenance association name.
Enter this keyword followed by the VLAN ID.
Range: 1-4094
Defaults
Command Modes
None
ECFM DOMAIN
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series traceroute cache hold-time s Set the amount of time a trace result is cached.
Syntax traceroute cache hold-time minutes
Parameters minutes Enter a hold-time.
Range: 10-65535 minutes
Defaults
Command Modes
100 minutes
ETHERNET CFM
166 | 802.1ag
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series traceroute cache size s Set the size of the Link Trace Cache.
Syntax traceroute cache size entries
Parameters entries Enter the number of entries the Link Trace Cache can hold.
Range: 1 - 4095 entries
Defaults
Command Modes
Command
History
100 entries
ETHERNET CFM
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series traceroute ethernet s Send a Linktrace message to an MEP.
Syntax traceroute ethernet domain [ name | level ] ma-name ma-name remote { mep-id mep-id | mac-addr mac-address }
Parameters domain name | level mac-addr mac-address
Enter the keyword followed by the domain name or level.
ma-name ma-name Enter the keyword followed by the maintenance association name.
mepid mep-id Enter the MEP ID that will be the trace target.
Enter the MAC address of the trace target.
Defaults
Command Modes
None
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced on S-Series
802.1ag | 167
168 | 802.1ag
Access Control Lists (ACL)
Overview
Access Control Lists (ACLs) are supported on platforms c e s
FTOS supports the following types of Access Control List (ACL), IP prefix list, and route map:
•
Commands Common to all ACL Types
•
•
•
•
Common MAC Access List Commands
•
•
•
•
•
•
Note:
For IPv6 ACL commands, see Chapter 16, IPv6 Access Control Lists (IPv6 ACLs) .
6
Commands Common to all ACL Types
The following commands are available within each ACL mode and do not have mode-specific options.
Some commands may use similar names, but require different options to support the different ACL types (for example, deny).
•
•
•
description c e s Configure a short text string describing the ACL.
Syntax description text
To delete the ACL description, enter no description .
Access Control Lists (ACL) | 169
Parameters
Defaults
Command Modes text Enter a text string up to 80 characters long.
Not enabled.
CONFIGURATION-STANDARD-ACCESS-LIST
CONFIGURATION-EXTENDED-ACCESS-LIST
CONFIGURATION-MAC ACCESS LIST-STANDARD
CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series remark c e s Enter a description for an ACL entry.
Syntax remark [ remark-number ] [ description ]
To delete the description, use the no remark [ remark number ] command. Note that it is not necessary to include the remark description that you are deleting.
Parameters remark-number description
Enter the remark number. Note that the same sequence number can be used for the remark and an ACL rule.
Range: 0 to 4294967290
Enter a description of up to 80 characters.
Defaults
Command Modes
Not configured
CONFIGURATION-STANDARD-ACCESS-LIST
CONFIGURATION-EXTENDED-ACCESS-LIST
CONFIGURATION-MAC ACCESS LIST-STANDARD
CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command
History
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Introduced for E-Series
The remark command is available in each ACL mode. You can configure up to 4294967290 remarks in a given ACL.
170 | Access Control Lists (ACL)
Example
The following example shows the use of the remark command twice within the
CONFIGURATION-STANDARD-ACCESS-LIST mode. Here, the same sequence number was used for the remark and for an associated ACL rule. The remark will precede the rule in the running-config because it is assumed that the remark is for the rule with the same sequence number, or the group of rules that follow the remark.
Figure 6-1.
Command Example: remark
FTOS(config-std-nacl)# remark 10 Deny rest of the traffic
FTOS(config-std-nacl)# remark 5 Permit traffic from XYZ Inc.
FTOS(config-std-nacl)#show config
!
ip access-list standard test remark 5 Permit traffic from XYZ Inc.
seq 5 permit 1.1.1.0/24 remark 10 Deny rest of the traffic seq 10 Deny any
FTOS(config-std-nacl)#
Related
Commands
Display the current ACL configuration.
show config c e s Display the current ACL configuration.
Syntax show config
Command Modes CONFIGURATION-STANDARD-ACCESS-LIST
CONFIGURATION-EXTENDED-ACCESS-LIST
CONFIGURATION-MAC ACCESS LIST-STANDARD
CONFIGURATION-MAC ACCESS LIST-EXTENDED
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced
Example Figure 6-2.
Command Example: show config
FTOS(config-ext-nacl)# show conf
!
ip access-list extended patches
FTOS(config-ext-nacl)#
Access Control Lists (ACL) | 171
Common IP ACL Commands
The following commands are available within both IP ACL modes (Standard and Extended) and do not have mode-specific options. When an access-list (ACL) is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit.
c and s
(non-S60) platforms support Ingress IP ACLs only.
The supports both Ingress and Egress IP ACLs.
The following commands allow you to clear, display, and assign IP ACL configurations.
•
•
clear counters ip access-group
•
•
ip control-plane egress-filter
•
show ip accounting access-list
Note:
See also Commands Common to all ACL Types .
access-class c e s Apply a standard ACL to a terminal line.
Syntax access-class access-list-name
To remove an ACL, use the no access-class access-list-name command.
Parameters access-list-name Enter the name of a configured Standard ACL, up to 140 characters.
Defaults
Command Modes
Not configured.
LINE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Support added for S-Series
Support added for C-Series
Introduced clear counters ip access-group c e s
Erase all counters maintained for access lists.
Syntax clear counters ip access-group [ access-list-name ]
172 | Access Control Lists (ACL)
Parameters
Command Modes
Command
History access-list-name
EXEC Privilege
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
(OPTIONAL) Enter the name of a configured access-list, up to 140 characters.
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Support added for S-Series
Support added for C-Series
Introduced ip access-group c e s Assign an IP access list (IP ACL) to an interface.
Syntax ip access-group access-list-name { in | out } [ implicit-permit ] [ vlan vlan-id ]
To delete an IP access-group configuration, use the no ip access-group access-list-name { in | out }
[ implicit-permit ] [ vlan vlan-id ] command.
Parameters access-list-name Enter the name of a configured access list, up to 140 characters.
in Enter out implicit-permit
Enter the keyword out to apply the ACL to outgoing traffic.
Note: Available only on 12-port 1-Gigabit Ethernet FLEX line card. Refer to your line card documentation for specifications. Not available on S-Series.
(OPTIONAL) Enter the keyword implicit-permit to change the default action of the ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the ACL, the traffic is permitted instead of dropped).
vlan vlan-id (OPTIONAL)
VLANs.
vlan followed by the ID numbers of the
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
Defaults
Command Modes
Not enabled.
INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Support added for S-Series
Support added for C-Series
Introduced
Access Control Lists (ACL) | 173
Usage
Information
You can assign one ACL (standard or extended ACL) to an interface.
Note: This command is supported on the loopback interfaces of EE3, and EF series RPMs. It is not supported on loopback interfaces ED series RPM, or on C-Series or S-Series loopback interfaces.
Related
Commands
When you apply an ACL that filters IGMP traffic, all IGMP traffic is redirected to the CPUs and soft-forwarded, if required, in the following scenarios:
• on a Layer 2 interface - if a Layer 3 ACL is applied to the interface.
• on a Layer 3 port or on a Layer 2/Layer 3 port
Configure a standard ACL.
Configure an extended ACL.
ip control-plane egress-filter
Enable egress Layer 3 ACL lookup for IPv4 CPU traffic
Syntax
Defaults
Command Modes
Command
History ip control-plane egress-filter
Not enabled.
EXEC Privilege
Version 8.3.3.4
Introduced on the S60.
show ip accounting access-list c e s Display the IP access-lists created on the switch and the sequence of filters.
Syntax show ip accounting {access-list access-list-name | cam_count} interface interface
Parameters access-list-name cam_count interface interface
Enter the name of the ACL to be displayed.
List the count of the CAM rules for this ACL.
Enter the keyword interface followed by the interface type and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
174 | Access Control Lists (ACL)
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Support added for S-Series
Support added for C-Series
Introduced
Figure 6-3.
Command Example: show ip accounting access-lists
FTOS# show ip accounting access FILTER1 interface gig 1/6
Extended IP access list FILTER1 seq 5 deny ip any 191.1.0.0 /16 count (0x00 packets) seq 10 deny ip any 191.2.0.0 /16 order 4 seq 15 deny ip any 191.3.0.0 /16 seq 20 deny ip any 191.4.0.0 /16 seq 25 deny ip any 191.5.0.0 /16
Table 6-1 defines the information in Figure 6-3 .
Table 6-1.
show ip accounting access-lists Command Example Field
Field
“Extended IP...”
“seq 5...”
“order 4”
Description
Displays the name of the IP ACL.
Displays the filter. If the keywords count or byte were configured in the filter, the number of packets or bytes processed by the filter is displayed at the end of the line.
Displays the QoS order of priority for the ACL entry.
Standard IP ACL Commands
When an ACL is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit.
c and s
platforms (except the S60) support Ingress IP ACLs only.
The supports both Ingress and Egress IP ACLs.
The commands needed to configure a Standard IP ACL are:
•
•
•
•
•
•
Note: See also
Commands Common to all ACL Types and
.
Access Control Lists (ACL) | 175
deny c e s Configure a filter to drop packets with a certain IP address.
Syntax deny { source [ mask ] | any | host ip-address } [ count [ byte ] | log] [ dscp value ] [ order ]
[ monitor ] [fragments]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny { source [ mask ] | any | host ip-address } command.
source mask any host count byte log dscp order ip-address monitor fragments
Enter the IP address in dotted decimal format of the network from which the packet was sent.
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous
(discontiguous).
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address only.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS order of priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default(255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based
Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
Defaults
Command Modes
Not configured.
CONFIGURATION-STANDARD-ACCESS-LIST
Command
History
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.1.0
Introduced on the S60.
Add DSCP value for ACL matching.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
176 | Access Control Lists (ACL)
Usage
Information
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The monitor
option is relevant in the context of flow-based monitoring only. See the Chapter 28, Port
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related
Commands
Configure a standard ACL.
Configure a permit filter.
ip access-list standard c e s Create a standard IP access list (IP ACL) to filter based on IP address.
Syntax ip access-list standard access-list-name
To delete an access list, use the no ip access-list standard access-list-name command.
Parameters access-list-name Enter a string up to 140 characters long as the ACL name.
Defaults
Command Modes
Command
History
All IP access lists contain an implicit “deny any,” that is, if no match occurs, the packet is dropped.
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
FTOS supports one ingress and one egress IP ACL per interface.
Prior to 7.8.1.0, names are up to 16 characters long.
The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.
Access Control Lists (ACL) | 177
Example Figure 6-4.
Command Example: ip access-list standard
FTOS(conf)#ip access-list standard TestList
FTOS(config-std-nacl)#
Related
Commands
Create an extended access list.
Display the current configuration.
permit c e s Configure a filter to permit packets from a specific source IP address to leave the switch.
Syntax permit { source [ mask ] | any | host ip-address } [ count [ byte ] | log] [ dscp value ] [ order ]
[ monitor ]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit { source [ mask ] | any | host ip-address } command.
source mask any host count dscp byte log order ip-address monitor
Enter the IP address in dotted decimal format of the network from which the packet was sent.
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address or hostname.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Defaults
Command Modes
Not configured.
CONFIGURATION-STANDARD-ACCESS-LIST
178 | Access Control Lists (ACL)
Command
History
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Introduced on the S60.
Add DSCP value for ACL matching.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The monitor
option is relevant in the context of flow-based monitoring only. See Chapter 28, Port
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related
Commands
Assign a IP ACL filter to deny IP packets.
Create a standard ACL.
resequence access-list c e s Re-assign sequence numbers to entries of an existing access-list.
Syntax resequence access-list { ipv4 | ipv6 | mac } { access-list-name StartingSeqNum
Step-to-Increment }
Parameters ipv4 | ipv6 | mac access-list-name
StartingSeqNum
Step-to-Increment
Enter the keyword ipv4 , or mac to identify the access list type to resequence.
Enter the name of a configured IP access list.
Enter the starting sequence number to resequence.
Range: 0 - 4294967290
Enter the step to increment the sequence number.
Range: 1 - 4294967290
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Access Control Lists (ACL) | 179
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale (IPv6)
Introduced on E-Series ExaScale (IPv4)
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Support added for S-Series
Support added for C-Series
Introduced
When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing access-list.
Resequence a prefix list resequence prefix-list ipv4 c e s Re-assign sequence numbers to entries of an existing prefix list.
Syntax resequence prefix-list ipv4 { prefix-list-name StartingSeqNum Step-to-increment }
Parameters prefix-list-name
StartingSeqNum
Step-to-Increment
Enter the name of configured prefix list, up to 140 characters long.
Enter the starting sequence number to resequence.
Range: 0 – 65535
Enter the step to increment the sequence number.
Range: 1 – 65535
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Added support for S-Series
Added support for C-Series
Introduced
When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing prefix list.
Prior to 7.8.1.0, names are up to 16 characters long.
Resequence an access-list
180 | Access Control Lists (ACL)
seq c e s Assign a sequence number to a deny or permit filter in an IP access list while creating the filter.
Syntax seq sequence-number { deny | permit } { source [ mask ] | any | host ip-address }} [ count [ byte ] | log] [ dscp value ] [ order ] [ monitor ] [fragments]
To delete a filter, use the no seq sequence-number command.
Parameters sequence-number deny permit source mask any host ip-address count byte log dscp order monitor fragments
Enter a number from 0 to 4294967290.
Enter the keyword deny to configure a filter to drop packets meeting this condition.
Enter the keyword permit to configure a filter to forward packets meeting this criteria.
Enter a IP address in dotted decimal format of the network from which the packet was received.
(OPTIONAL) Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address or hostname.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS order for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
Defaults
Command Modes
Not configured
CONFIGURATION-STANDARD-ACCESS-LIST
Command
History
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Introduced on the S60.
Add DSCP value for ACL matching.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Access Control Lists (ACL) | 181
Usage
Information
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
The monitor
option is relevant in the context of flow-based monitoring only. See Chapter 28, Port
The order option is relevant in the context of the Policy QoS feature only. The following applies:
• The seq sequence-number is applicable only in an ACL group.
• The order option works across ACL groups that have been applied on an interface via QoS policy framework.
• The order option takes precedence over the seq sequence-number .
• If sequence-number is not configured, then rules with the same order value are ordered according to their configuration order.
• If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related
Commands
Configure a filter to drop packets.
Configure a filter to forward packets.
Assign a sequence number to a deny or permit filter in an IP access list while creating the filter.
182 | Access Control Lists (ACL)
Extended IP ACL Commands
When an ACL is created without any rule and then applied to an interface, ACL behavior reflects an implicit permit.
The following commands configure extended IP ACLs, which in addition to the IP address also examine the packet’s protocol type. c and s
platforms (except the S60) support Ingress IP ACLs only.
The supports both Ingress and Egress IP ACLs.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Note: See also
Commands Common to all ACL Types and
.
deny c e s Configure a filter that drops IP packets meeting the filter criteria.
Syntax deny { ip | ip-protocol-number } { source mask | any | host ip-address } { destination mask | any | host ip-address } [ count [ byte ] | log] [ dscp value ] [ order ] [ monitor ] [ fragments ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny { ip | ip-protocol-number } { source mask | any | host ip-address } { destination mask | any | host ip-address } command.
Access Control Lists (ACL) | 183
Parameters ip ip-protocol-number source mask any host destination count byte log dscp order ip-address monitor
Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will deny all IP protocols.
Enter a number from 0 to 255 to deny based on the protocol identified in the IP protocol header.
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
fragments
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Introduced on the S60.
Add DSCP value for ACL matching.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
184 | Access Control Lists (ACL)
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
The monitor
option is relevant in the context of flow-based monitoring only. See the Chapter 28, Port
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related
Commands
Assign a filter to deny TCP packets.
Assign a filter to deny UDP packets.
Create an extended ACL.
deny arp e Configure an egress filter that drops ARP packets on egress ACL supported line cards (see your line card documentation).
Syntax deny arp { destination-mac-address mac-address-mask | any } vlan vlan-id { ip-address | any | opcode code-number } [ count [ byte ] | log ] [ order ] [ monitor ]
To remove this filter, use one of the following:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny arp { destination-mac-address mac-address-mask | any } vlan vlan-id
{ ip-address | any | opcode code-number } command.
Parameters destination-mac-address mac-address-mask
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
any Enter interface.
vlan vlan-id Enter associated with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.
ip-address opcode code-number
Enter an IP address in dotted decimal format (A.B.C.D) as the target IP address of the ARP.
Enter
Range: 1 to 23.
opcode followed by the number of the ARP opcode.
count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
Access Control Lists (ACL) | 185
Defaults
Command Modes
Command
History byte log order monitor
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the
FTOS Configuration Guide .
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.2.1.0
Version 8.1.1.0
Version 7.4.1.0
Version 6.5.10
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added monitor option
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
The monitor
option is relevant in the context of flow-based monitoring only. See Chapter 28, Port
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type
(Layer 2) filters. Apply Layer 2 ACLs (ARP and Ether-type) to Layer 2 interfaces only.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
deny ether-type e Configure an egress filter that drops specified types of Ethernet packets on egress ACL supported line cards (see your line card documentation).
Syntax deny ether-type protocol-type-number { destination-mac-address mac-address-mask | any } vlan vlan-id { source-mac-address mac-address-mask | any } [ count [ byte ] | log ] [ order ] [ monitor ]
186 | Access Control Lists (ACL)
To remove this filter, use one of the following:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny ether-type protocol-type-number { destination-mac-address mac-address-mask | any } vlan vlan-id { source-mac-address mac-address-mask | any } command.
Parameters
Defaults
Command Modes
Command
History protocol-type-number destination-mac-address mac-address-mask any Enter interface.
vlan vlan-id Enter associated with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.
source-mac-address mac-address-mask
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
count
Enter a number from 600 to FFFF as the specific Ethernet type traffic to drop.
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
byte log order monitor
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the
FTOS Configuration Guide .
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.2.1.0
Version 8.1.1.0
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Access Control Lists (ACL) | 187
Usage
Information
Version 7.4.1.0
Version 6.5.10
Added monitor option
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The monitor
option is relevant in the context of flow-based monitoring only. See Chapter 28, Port
You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type
(Layer 2) filters. Apply Layer 2 ACLs (ARP and Ether-type) to Layer 2 interfaces only.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
deny icmp e Configure a filter to drop all or specific ICMP messages.
Syntax deny icmp { source mask | any | host ip-address } { destination mask | any | host ip-address }
[ dscp ] [ message-type ] [ count [ byte ] | log ] [ order ] [ monitor ] [ fragments ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny icmp { source mask | any | host ip-address } { destination mask | any | host ip-address } command.
Parameters source mask any host ip-address destination dscp message-type count byte log
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
Enter this keyword to deny a packet based on DSCP value.
Range: 0-63
(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type (ICMP message types are
).
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
188 | Access Control Lists (ACL)
order monitor
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default
(255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the
Port Monitoring chapter of the FTOS Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
fragments
Not configured
CONFIGURATION-EXTENDED-ACCESS-LIST
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.4.1.0
Version 6.5.10
Added dscp keyword.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The monitor
option is relevant in the context of flow-based monitoring only. See Chapter 28, Port
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
lists the keywords displayed in the CLI help and their corresponding ICMP Message Type
Name.
Table 6-2.
ICMP Message Type Keywords
Keyword administratively-prohibited alternate-address
ICMP Message Type Name
Administratively prohibited
Alternate host address echo Echo
Access Control Lists (ACL) | 189
Table 6-2.
ICMP Message Type Keywords
Keyword ICMP Message Type Name host-precedence-unreachable host-tos-redirect host-tos-unreachable
Host unreachable for precedence
Host redirect for TOS
Host unreachable for TOS mobile-redirect Mobile host redirect net-tos-redirect net-tos-unreachable
Network redirect for TOS
Network unreachable for TOS no-room-for-option Parameter required but no room packet-too-big Fragmentation needed and DF set parameter-problem All parameter problems port-unreachable Port unreachable protocol-unreachable Protocol unreachable router-advertisement Router discovery advertisements router-solicitation Router discovery solicitations time-exceeded All time exceeded timestamp-reply Timestamp replies traceroute Traceroute
190 | Access Control Lists (ACL)
deny tcp c e s Configure a filter that drops TCP packets meeting the filter criteria.
Syntax deny tcp { source mask | any | host ip-address } [ bit ] [ operator port [ port ]] { destination mask | any | host ip-address } [ dscp ] [ bit ] [ operator port [ port ]] [ count [ byte ] | log ] [ order ] [ monitor ]
[ fragments ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny tcp { source mask | any | host ip-address } { destination mask | any | host ip-address } command.
Parameters source mask any host ip-address dscp bit operator port port destination mask count byte
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
Enter this keyword to deny a packet based on DSCP value.
Range: 0-63
Enter a flag or combination of bits: ack: acknowledgement field fin : finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field
•
•
•
•
•
(OPTIONAL) Enter one of the following logical operand: eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port command parameter.
Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP
Enter the IP address of the network or host to which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
Access Control Lists (ACL) | 191
Defaults
Command Modes
Command
History log order monitor
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
fragments
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Introduced on the S60.
Added dscp keyword.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option. Deprecated established keyword.
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
The monitor
option is relevant in the context of flow-based monitoring only. See Chapter 28, Port
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators ( gt , lt , range ) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.
192 | Access Control Lists (ACL)
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
Assign a filter to deny IP traffic.
Assign a filter to deny UDP traffic.
deny udp c e s Configure a filter to drop UDP packets meeting the filter criteria.
Syntax deny udp { source mask | any | host ip-address } [ operator port [ port ]] { destination mask | any | host ip-address } [ dscp ] [ operator port [ port ]] [ count [ byte ] | log ] [ order ] [ monitor ]
[ fragments ]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny udp { source mask | any | host ip-address } { destination mask | any | host ip-address } command.
source mask any host ip-address dscp
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
Enter this keyword to deny a packet based on DSCP value.
Range: 0-63
Access Control Lists (ACL) | 193
Defaults
Command Modes
Command
History operator port count byte log destination mask port order monitor
•
•
•
•
•
(OPTIONAL) Enter one of the following logical operand: eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports
(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535
Enter the IP address of the network or host to which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based
Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
fragments
Not configured
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Introduced on the S60.
Added dscp keyword.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
194 | Access Control Lists (ACL)
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
The monitor
option is relevant in the context of flow-based monitoring only. See the Chapter 28, Port
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators ( gt , lt , range ) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 will use 8 entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
Assign a deny filter for IP traffic.
Assign a deny filter for TCP traffic.
ip access-list extended c e s Name (or select) an extended IP access list (IP ACL) based on IP addresses or protocols.
Syntax ip access-list extended access-list-name
To delete an access list, use the no ip access-list extended access-list-name command.
Parameters access-list-name Enter a string up to 140 characters long as the access list name.
Defaults
Command Modes
All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is dropped.
CONFIGURATION
Access Control Lists (ACL) | 195
Command
History
Usage
Information
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced on E-Series
The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.
Prior to 7.8.1.0, names are up to 16 characters long.
Figure 6-5.
Command Example: ip access-list extended
FTOS(conf)# ip access-list extended TESTListEXTEND
FTOS(config-ext-nacl)#
Related
Commands
Configure a standard IP access list.
Display the current configuration.
permit c e s Configure a filter to pass IP packets meeting the filter criteria.
Syntax permit { ip | ip-protocol-number } { source mask | any | host ip-address } { destination mask | any | host ip-address } [ count [ byte ] | log] [ dscp value ] [ order ] [ monitor ] [ fragments ]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny { ip | ip-protocol-number } { source mask | any | host ip-address } { destination mask | any | host ip-address } command. ip ip-protocol-number source mask any host ip-address destination count
Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will permit all IP protocols.
Enter a number from 0 to 255 to permit based on the protocol identified in the
IP protocol header.
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
196 | Access Control Lists (ACL)
Defaults
Command Modes
Command
History byte log dscp order monitor fragments
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS order of priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Introduced on the S60.
Add DSCP value for ACL matching.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
The monitor
option is relevant in the context of flow-based monitoring only. See the Chapter 28, Port
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related
Commands
Create an extended ACL.
Access Control Lists (ACL) | 197
Assign a permit filter for TCP packets.
Assign a permit filter for UDP packets.
permit arp e Configure a filter that forwards ARP packets meeting this criteria.This command is supported only on
12-port GE line cards with SFP optics; refer to your line card documentation for specifications.
Syntax permit arp { destination-mac-address mac-address-mask | any } vlan vlan-id { ip-address | any | opcode code-number } [ count [ byte ] | log ] [ order ] [ monitor ] [ fragments ]
To remove this filter, use one of the following:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit arp { destination-mac-address mac-address-mask | any } vlan vlan-id
{ ip-address | any | opcode code-number } command.
Parameters destination-mac-address mac-address-mask
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any Enter vlan vlan-id Enter the keyword vlan followed by the VLAN ID to filter traffic associated with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.
ip-address opcode code-number
Enter an IP address in dotted decimal format (A.B.C.D) as the target IP address of the ARP.
Enter
Range: 1 to 16.
opcode followed by the number of the ARP opcode.
count byte log
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
order
(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
monitor fragments
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
198 | Access Control Lists (ACL)
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.2.1.0
Version 8.1.1.0
Version 7.4.1.0
Version 6.5.10
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The monitor
option is relevant in the context of flow-based monitoring only. See the Chapter 28, Port
You cannot include IP, TCP or UDP filters in an ACL configured with ARP filters.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
permit ether-type e Configure a filter that allows traffic with specified types of Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.
Syntax permit ether-type protocol-type-number { destination-mac-address mac-address-mask | any } vlan vlan-id { source-mac-address mac-address-mask | any } [ count [ byte ] | log ] [ order ]
[ monitor ]
To remove this filter, use one of the following:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit ether-type protocol-type-number { destination-mac-address mac-address-mask | any } vlan vlan-id { source-mac-address mac-address-mask | any } command.
Parameters protocol-type-number destination-mac-address mac-address-mask
Enter a number from 600 to FFF as the specific Ethernet type traffic to drop.
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any Enter interface.
Access Control Lists (ACL) | 199
Defaults
Command Modes
Command
History vlan vlan-id Enter with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.
source-mac-address mac-address-mask
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
count byte log
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
order monitor
(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.2.1.0
Version 8.1.1.0
Version 7.4.1.0
Version 6.5.10
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added monitor option
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The monitor option is relevant in the context of the flow-based monitoring feature only. See
.
You cannot include IP, TCP or UDP filters in an ACL configured with ARP filters.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
200 | Access Control Lists (ACL)
permit icmp e Configure a filter to allow all or specific ICMP messages.
Syntax permit icmp { source mask | any | host ip-address } { destination mask | any | host ip-address }
[ dscp ] [ message-type ] [ count [ byte ] | log ] [ order ] [ monitor ] [ fragments ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit icmp { source mask | any | host ip-address } { destination mask | any | host ip-address } command.
Parameters source mask any host ip-address destination dscp message-type count byte log order monitor fragments
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
Enter the IP address of the network or host to which the packets are sent.
Enter this keyword to deny a packet based on DSCP value.
Range: 0-63
(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type (ICMP message types are
).
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default
(255).
(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Enter the keyword fragments to use ACLs to control packet fragments.
Defaults
Command Modes
Command
History
Not configured
CONFIGURATION-STANDARD-ACCESS-LIST
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.4.1.0
Version 6.5.10
Added dscp keyword.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
Access Control Lists (ACL) | 201
Usage
Information
The order option is relevant in the context of the Policy QoS feature only. See the “Quality of Service” chapter of the FTOS Configuration Guide for more information.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The monitor option is relevant in the context of the flow-based monitoring feature only. See
.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
permit tcp c e s Configure a filter to pass TCP packets meeting the filter criteria.
Syntax permit tcp { source mask | any | host ip-address } [ bit ] [ operator port [ port ]] { destination mask | any | host ip-address } [ bit ] [ dscp ] [ operator port [ port ]] [ count [ byte ] | log ] [ order ] [ monitor ]
[ fragments ]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit tcp { source mask | any | host ip-address } { destination mask | any | host ip-address } command.
source mask any host bit dscp ip-address operator
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
Enter a flag or combination of bits: ack: acknowledgement field fin : finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field
Enter this keyword to deny a packet based on DSCP value.
Range: 0-63
•
•
(OPTIONAL) Enter one of the following logical operand:
• eq = equal to
•
• neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two port for the port parameter.)
202 | Access Control Lists (ACL)
port port destination mask count byte log order monitor
Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet
20 and 21 = FTP
25 = SMTP
169 = SNMP
Enter the IP address of the network or host to which the packets are sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based
Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
fragments
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Introduced on the S60.
Added dscp keyword.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option. Deprecated established keyword.
Expanded to include the optional QoS order priority for the ACL entry.
The order option is relevant in the context of the Policy QoS feature only. See the Quality of Service chapter of the FTOS Configuration Guide for more information.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
The monitor option is relevant in the context of the flow-based monitoring feature only. See
.
Access Control Lists (ACL) | 203
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators ( gt , lt , range ) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
Create an extended ACL.
Assign a permit filter for IP packets.
Assign a permit filter for UDP packets.
permit udp c e s Configure a filter to pass UDP packets meeting the filter criteria.
Syntax permit udp { source mask | any | host ip-address } [ operator port [ port ]] { destination mask | any | host ip-address } [ dscp ] [ operator port [ port ]] [ count [ byte ] | log ] [ order ] [ monitor ]
[ fragments ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit udp { source mask | any | host ip-address } { destination mask | any | host ip-address } command.
204 | Access Control Lists (ACL)
Parameters
Defaults
Command Modes
Command
History source mask any host dscp destination count byte log order ip-address operator port port monitor fragments
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
Enter this keyword to deny a packet based on DSCP value.
Range: 0-63
•
•
•
•
•
(OPTIONAL) Enter one of the following logical operand: eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port parameter.)
(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the
Port Monitoring chapter of the FTOS Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Introduced on the S60.
Added dscp keyword.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option.
Expanded to include the optional QoS order priority for the ACL entry.
Access Control Lists (ACL) | 205
Usage
Information
The order option is relevant in the context of the Policy QoS feature only. See the Quality of Service chapter of the FTOS Configuration Guide for more information.
The monitor option is relevant in the context of the flow-based monitoring feature only. See
.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The C-Series and S-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators ( gt , lt , range ) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
Configure an extended ACL.
Assign a permit filter for IP packets.
Assign a permit filter for TCP packets.
206 | Access Control Lists (ACL)
resequence access-list c e s Re-assign sequence numbers to entries of an existing access-list.
Syntax resequence access-list { ipv4 | mac } { access-list-name StartingSeqNum Step-to-Increment }
Parameters ipv4 | mac access-list-name
StartingSeqNum
Step-to-Increment
Enter the keyword ipv4 , or mac to identify the access list type to resequence.
Enter the name of a configured IP access list, up to 140 characters.
Enter the starting sequence number to resequence.
Range: 0 - 4294967290
Enter the step to increment the sequence number.
Range: 1 - 4294967290
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Added support for S-Series
Added support for C-Series
Introduced for E-Series
When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing access-list.
Prior to 7.8.1.0, names are up to 16 characters long.
Resequence a prefix list resequence prefix-list ipv4 c e s Re-assign sequence numbers to entries of an existing prefix list.
Syntax resequence prefix-list ipv4 { prefix-list-name StartingSeqNum Step-to-increment }
Parameters prefix-list-name
StartingSeqNum
Step-to-Increment
Enter the name of configured prefix list, up to 140 characters long.
Enter the starting sequence number to resequence.
Range: 0 – 65535
Enter the step to increment the sequence number.
Range: 1 – 65535
Defaults No default values or behavior
Access Control Lists (ACL) | 207
Command Modes EXEC
EXEC Privilege
Command
History
Usage
Information
Related
Commands
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Added support for S-Series
Added support for C-Series
Introduced for E-Series
When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing prefix list.
Prior to 7.8.1.0, names are up to 16 characters long.
Resequence an access-list seq arp e Configure an egress filter with a sequence number that filters ARP packets meeting this criteria. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.
Syntax seq sequence-number { deny | permit} arp { destination-mac-address mac-address-mask | any } vlan vlan-id { ip-address | any | opcode code-number } [ count [ byte ] | log ] [ order ] [ monitor ]
To remove this filter, use the no seq sequence-number command.
Parameters sequence-number Enter a number from 0 to 4294967290. deny Enter permit Enter destination-mac-address mac-address-mask
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any Enter vlan vlan-id Enter with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.
ip-address opcode code-number
Enter an IP address in dotted decimal format (A.B.C.D) as the target IP address of the ARP.
Enter
Range: 1 to 16.
opcode followed by the number of the ARP opcode.
count (OPTIONAL) Enter the keyword count to count packets processed by the filter.
208 | Access Control Lists (ACL)
Defaults
Command Modes
Command
History byte log order monitor
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.2.1.0
Version 8.1.1.0
Version 7.4.1.0
Version 6.5.10
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added monitor option
Expanded to include the optional QoS order priority for the ACL entry.
The monitor option is relevant in the context of the flow-based monitoring feature only. See
.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The order option is relevant in the context of the Policy QoS feature only. The following applies:
• The seq sequence-number is applicable only in an ACL group.
• The order option works across ACL groups that have been applied on an interface via QoS policy framework.
• The order option takes precedence over the seq sequence-number .
• If sequence-number is not configured, then rules with the same order value are ordered according to their configuration order.
• If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type
(Layer 2) filters. Apply Layer 2 ACLs to interfaces in Layer 2 mode.
Access Control Lists (ACL) | 209
seq ether-type e Configure an egress filter with a specific sequence number that filters traffic with specified types of
Ethernet packets. This command is supported only on 12-port GE line cards with SFP optics; refer to your line card documentation for specifications.
Syntax seq sequence-number { deny | permit } ether-type protocol-type-number
{ destination-mac-address mac-address-mask | any } vlan vlan-id { source-mac-address mac-address-mask | any } [ count [ byte ] | log ] [ order ] [ monitor ]
To remove this filter, use the no seq sequence-number command.
Parameters sequence-number Enter a number from 0 to 4294967290. deny Enter permit Enter protocol-type-number Enter a number from 600 to FFFF as the specific Ethernet type traffic to drop.
destination-mac-address mac-address-mask
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
any Enter interface.
vlan vlan-id Enter with a specific VLAN.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
To filter all VLAN traffic specify VLAN 1.
source-mac-address mac-address-mask
Enter a MAC address and mask in the nn:nn:nn:nn:nn format.
For the MAC address mask, specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of 00:00:00:00:00:00 only allows entries that match exactly.
count byte
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log order monitor
(OPTIONAL, E-Series only) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the
ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section
“Flow-based Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
210 | Access Control Lists (ACL)
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.2.1.0
Version 8.1.1.0
Version 7.4.1.0
Version 6.5.10
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added monitor option
Expanded to include the optional QoS order priority for the ACL entry.
The monitor option is relevant in the context of the flow-based monitoring feature only. See
.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The order option is relevant in the context of the Policy QoS feature only. The following applies:
• The seq sequence-number is applicable only in an ACL group.
• The order option works across ACL groups that have been applied on an interface via QoS policy framework.
• The order option takes precedence over the seq sequence-number .
• If sequence-number is not configured, then rules with the same order value are ordered according to their configuration order.
• If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
You cannot include IP, TCP or UDP (Layer 3) filters in an ACL configured with ARP or Ether-type
(Layer 2) filters. Apply Layer 2 filters to interfaces in Layer 2 mode.
seq c e s Assign a sequence number to a deny or permit filter in an extended IP access list while creating the filter.
Syntax seq sequence-number { deny | permit } { ip-protocol-number | icmp | ip | tcp | udp }
{ source mask | any | host ip-address } { destination mask | any | host ip-address } [ operator port
[ port ]] [ count [ byte ] | log ] [ dscp value ] [ order ] [ monitor ] [fragments]
To delete a filter, use the no seq sequence-number command.
Parameters sequence-number deny permit ip-protocol-number icmp
Enter a number from 0 to 4294967290.
Enter the keyword deny to configure a filter to drop packets meeting this condition.
Enter the keyword permit to configure a filter to forward packets meeting this criteria.
Enter a number from 0 to 255 to filter based on the protocol identified in the IP protocol header.
Enter the keyword icmp to configure an ICMP access list filter.
Access Control Lists (ACL) | 211
ip tcp udp source mask any host ip-address operator port port destination message-type count byte log dscp order monitor
Defaults fragments
Not configured
Enter the keyword ip to configure a generic IP access list. The keyword ip specifies that the access list will permit all IP protocols.
Enter the keyword tcp to configure a TCP access list filter.
Enter the keyword udp to configure a UDP access list filter.
Enter the IP address of the network or host from which the packets were sent.
Enter a network mask in /prefix format (/x) or A.B.C.D. The mask, when specified in
A.B.C.D format, may be either contiguous or non-contiguous.
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IP address to specify a host IP address.
•
•
•
•
(OPTIONAL) Enter one of the following logical operands:
• eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port parameter.)
(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP
Enter the IP address of the network or host to which the packets are sent.
(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type (ICMP message types are
).
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to enter ACL matches in the log. Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword dcsp to match to the IP DCSCP values.
(OPTIONAL) Enter the keyword order to specify the QoS priority for the ACL entry.
Range: 0-254 (where 0 is the highest priority and 254 is the lowest; lower order numbers have a higher priority)
Default: If the order keyword is not used, the ACLs have the lowest order by default (255).
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based
Monitoring” in the Port Monitoring chapter of the FTOS Configuration Guide .
Enter the keyword fragments to use ACLs to control packet fragments.
212 | Access Control Lists (ACL)
Command Modes
Command
History
CONFIGURATION-EXTENDED-ACCESS-LIST
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.10
Introduced on the S60.
Add DSCP value for ACL matching.
Allows ACL control of fragmented packets for IP (Layer 3) ACLs.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Added support for non-contiguous mask and added the monitor option. Deprecated established keyword
Expanded to include the optional QoS order priority for the ACL entry.
The monitor option is relevant in the context of the flow-based monitoring feature only. See
.
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
The order option is relevant in the context of the Policy QoS feature only. The following applies:
• The seq sequence-number is applicable only in an ACL group.
• The order option works across ACL groups that have been applied on an interface via QoS policy framework.
• The order option takes precedence over the seq sequence-number .
• If sequence-number is not configured, then rules with the same order value are ordered according to their configuration order.
• If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.
If the sequence-number is configured, then the sequence-number is used as a tie breaker for rules with the same order.
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Related
Commands
Configure a filter to drop packets.
Configure a filter to forward packets.
Access Control Lists (ACL) | 213
Common MAC Access List Commands
The following commands are available within both MAC ACL modes (Standard and Extended) and do not have mode-specific options. c and s
platforms (except the S60) support Ingress MAC ACLs only.
The supports both Ingress and Egress MAC ACLs.
The following commands allow you to clear, display and assign MAC ACL configurations.
•
clear counters mac access-group
•
•
show mac accounting access-list
clear counters mac access-group c e s Clear counters for all or a specific MAC ACL.
Syntax clear counters mac access-group [ mac-list-name ]
Parameters mac-list-name (OPTIONAL) Enter the name of a configured MAC access list.
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series mac access-group c e s Apply a MAC ACL to traffic entering or exiting an interface.
Syntax mac access-group access-list-name { in [ vlan vlan-range ] | out }
To delete a MAC access-group, use the no mac access-group mac-list-name command.
Parameters access-list-name vlan vlan-range in out
Enter the name of a configured MAC access list, up to 140 characters.
(OPTIONAL) Enter the keyword vlan followed a range of VLANs. Note that this option is available only with the in keyword option.
Range: 1 to 4094, 1-2094 for ExaScale (can used IDs 1-4094)
Enter the keyword in to configure the ACL to filter incoming traffic.
Enter the keyword out to configure the ACL to filter outgoing traffic. Not available on S-Series.
Defaults No default behavior or configuration
214 | Access Control Lists (ACL)
Command Modes
Command
History
INTERFACE
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
You can assign one ACL (standard or extended) to an interface.
Prior to 7.8.1.0, names are up to 16 characters long.
Configure a standard MAC ACL.
Configure an extended MAC ACL.
show mac accounting access-list c e s Display MAC access list configurations and counters (if configured).
Syntax show mac accounting access-list access-list-name interface interface in | out
Parameters access-list-name interface interface in | out
Enter the name of a configured MAC ACL, up to 140 characters.
Enter the keyword interface followed by the one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEtherne t followed by the slot/port information.
Identify whether ACL is applied ay Ingress (in) or egress (out) side.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Access Control Lists (ACL) | 215
Version 7.5.1.0
pre-Version 6.1.1.0
Support added for C-Series
Introduced for E-Series
Example Figure 6-6.
Command Example: show mac accounting access-list
FTOS#show mac accounting access-list mac-ext interface po 1
Extended mac access-list mac-ext on GigabitEthernet 0/11
seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19 count (393794576 packets)
seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29 count (89076777 packets)
seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39 count (0 packets)
seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49 count (0 packets)
seq 25 permit any any count (0 packets)
Extended mac access-list mac-ext on GigabitEthernet 0/12
seq 5 permit host 00:00:00:00:00:11 host 00:00:00:00:00:19 count (57589834 packets)
seq 10 deny host 00:00:00:00:00:21 host 00:00:00:00:00:29 count (393143077 packets)
seq 15 deny host 00:00:00:00:00:31 host 00:00:00:00:00:39 count (0 packets)
seq 20 deny host 00:00:00:00:00:41 host 00:00:00:00:00:49 count (0 packets)
seq 25 permit any any count (0 packets)
FTOS#
Related
Commands
show mac accounting destination
Display destination counters for Layer 2 traffic (available on physical interfaces only).
Standard MAC ACL Commands
When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.
c and s
platforms (except the S60 system) support Ingress MAC ACLs only.
The supports both Ingress and Egress MAC ACLs.
The following commands configure standard MAC ACLs:
•
•
•
•
Note: See also
Commands Common to all ACL Types
.
deny c e s Configure a filter to drop packets with a the MAC address specified.
Syntax deny { any | mac-source-address [ mac-source-address-mask ]} [ count [ byte ]] [ log ] [ monitor ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny { any | mac-source-address mac-source-address-mask } command.
216 | Access Control Lists (ACL)
Parameters
Defaults
Command Modes
Command
History any mac-source-address mac-source-address-mask count byte log monitor
Enter the keyword any to specify that all traffic is subject to the filter.
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface.
For details, see the section “Flow-based Monitoring” in the Port
Monitoring chapter of the FTOS Configuration Guide .
Not enabled.
CONFIGURATION-MAC ACCESS LIST-STANDARD
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Added monitor option
Introduced for E-Series
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage
Information
Related
Commands
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Configure a MAC address filter to pass packets.
Configure a MAC address filter with a specified sequence number.
mac access-list standard c e s Name a new or existing MAC access control list (MAC ACL) and enter the MAC ACCESS LIST mode to configure a standard MAC ACL. See
Commands Common to all ACL Types and
Syntax mac access-list standard mac-list-name
To delete a MAC access list, use the no mac access-list standard mac-list-name command.
Access Control Lists (ACL) | 217
Parameters mac-list-name Enter a text string as the name of the standard MAC access list (140 character maximum).
Defaults
Command Modes
Command
History
Not configured
CONFIGURATION
Usage
Information
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
FTOS supports one ingress and one egress MAC ACL per interface.
Prior to 7.8.1.0, names are up to 16 characters long.
The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.
C-Series and S-Series support ingress ACLs only.
Figure 6-7.
Command Example: mac-access-list standard
FTOS(conf)# mac-access-list access-list standard TestMAC
FTOS(config-std-macl)#?
deny Specify packets to reject description List description exit Exit from access-list configuration mode no Negate a command or set its defaults permit Specify packets to forward remark Specify access-list entry remark seq Sequence numbers show Show Standard ACL configuration permit c e s Configure a filter to forward packets from a specific source MAC address.
Syntax permit { any | mac-source-address [ mac-source-address-mask ]} [ count [ byte ]] | [ log ]
[ monitor ]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit { any | mac-source-address mac-source-address-mask } command.
any mac-source-address
Enter the keyword any to forward all packets received with a MAC address.
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
218 | Access Control Lists (ACL)
Defaults
Command Modes
Command
History mac-source-address-mask count byte log monitor
(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface.
For details, see the section “Flow-based Monitoring” in the Port
Monitoring chapter of the FTOS Configuration Guide .
Not configured.
CONFIGURATION-MAC ACCESS LIST-STANDARD
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage
Information
Related
Commands
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Configure a MAC ACL filter to drop packets.
Configure a MAC ACL filter with a specified sequence number.
seq c e s Assign a sequence number to a deny or permit filter in a MAC access list while creating the filter.
Syntax seq sequence-number { deny | permit } { any | mac-source-address [ mac-source-address-mask ]}
[ count [ byte ]] [ log ] [ monitor ]
To remove this filter, use the no seq sequence-number command.
Parameters sequence-number deny permit
Enter a number between 0 and 65535.
Enter the keyword deny to configure a filter to drop packets meeting this condition.
Enter the keyword permit to configure a filter to forward packets meeting this criteria.
Access Control Lists (ACL) | 219
Defaults
Command Modes
Command
History any mac-source-address mac-source-address-mask count byte log monitor
Enter the keyword any to filter all packets.
Enter a MAC address in nn:nn:nn:nn:nn:nn format.
(OPTIONAL) Specify which bits in the MAC address must match. If no mask is specified, a mask of 00:00:00:00:00:00 is applied (in other words, the filter allows only MAC addresses that match).
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface.
For details, see the section “Flow-based Monitoring” in the Port
Monitoring chapter of the FTOS Configuration Guide .
Not configured.
CONFIGURATION-MAC ACCESS LIST-STANDARD
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Added monitor option
Introduced for E-Series
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage
Information
Related
Commands
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Configure a filter to drop packets.
Configure a filter to forward packets.
220 | Access Control Lists (ACL)
Extended MAC ACL Commands
When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.
c and s
platforms (except the S60 system) support Ingress MAC ACLs only.
The supports both Ingress and Egress MAC ACLs.
The following commands configure Extended MAC ACLs.
•
•
•
•
Note: See also
Commands Common to all ACL Types
.
deny c e s Configure a filter to drop packets that match the filter criteria.
Syntax deny { any | host mac-address | mac-source-address mac-source-address-mask } { any | host mac-address | mac-destination-address mac-destination-address-mask } [ ethertype-operator ]
[ count [ byte ]] [ log ] [ monitor ]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny { any | host mac-address | mac-source-address mac-source-address-mask }
{ any | host mac-address | mac-destination-address mac-destination-address-mask } command.
any Enter host mac-address Enter packets with that host address.
mac-source-address mac-source-address-mask
Enter the source MAC address in nn:nn:nn:nn:nn:nn format.
Specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
mac-destination-address Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format.
mac-destination-address-mask Specify which bits in the MAC address must match.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
Access Control Lists (ACL) | 221
Defaults
Command Modes
Command
History ethertype operator count byte log monitor
•
•
•
(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: ev2 - is the Ethernet II frame format.
llc - is the IEEE 802.3 frame format.
snap - is the IEEE 802.3 SNAP frame format.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based
Monitoring” in the Port Monitoring chapter of the FTOS
Configuration Guide .
Not configured.
CONFIGURATION-MAC ACCESS LIST-EXTENDED
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Added monitor option
Introduced for E-Series
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage
Information
Related
Commands
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Configure a filter to forward based on MAC addresses.
Configure a filter with specific sequence numbers.
mac access-list extended c e s Name a new or existing extended MAC access control list (extended MAC ACL).
Syntax mac access-list extended access-list-name
To delete a MAC access list, use the no mac access-list extended access-list-name command.
Parameters access-list-name Enter a text string as the MAC access list name, up to 140 characters.
222 | Access Control Lists (ACL)
Defaults
Command Modes
Command
History
No default configuration
CONFIGURATION
Usage
Information
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.
Prior to 7.8.1.0, names are up to 16 characters long.
Figure 6-8.
Command Example: mac-access-list extended
FTOS(conf)# mac-access-list access-list extended TestMATExt
FTOS(config-ext-macl)#remark 5 IPv4
FTOS(config-ext-macl)#seq 10 permit any any ev2 eq 800 count bytes
FTOS(config-ext-macl)#remark 15 ARP
FTOS(config-ext-macl)#seq 20 permit any any ev2 eq 806 count bytes
FTOS(config-ext-macl)#remark 25 IPv6
FTOS(config-ext-macl)#seq 30 permit any any ev2 eq 86dd count bytes
FTOS(config-ext-macl)#seq 40 permit any any count bytes
FTOS(config-ext-macl)#exit
FTOS(conf)#do show mac accounting access-list snickers interface g0/47 in
Extended mac access-list snickers on GigabitEthernet 0/47 seq 10 permit any any ev2 eq 800 count bytes (559851886 packets 191402152148 bytes) seq 20 permit any any ev2 eq 806 count bytes (74481486 packets 5031686754 bytes) seq 30 permit any any ev2 eq 86dd count bytes (7751519 packets 797843521 bytes)
Related
Commands
show mac accounting access-list
Configure a standard MAC access list.
Display MAC access list configurations and counters (if configured).
permit c e s Configure a filter to pass packets matching the criteria specified.
Syntax permit { any | host mac-address | mac-source-address mac-source-address-mask } { any | host mac-address | mac-destination-address mac-destination-address-mask } [ ethertype operator ]
[ count [ byte ]] | [ log ] [ monitor ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit { any | host mac-address | mac-source-address mac-source-address-mask } { any | mac-destination-address mac-destination-address-mask } command.
Access Control Lists (ACL) | 223
Parameters
Defaults
Command Modes
Command
History any Enter host mac-source-address mac-source-address-mask
Enter the keyword host followed by a MAC address to forward packets with that host address.
Enter the source MAC address in nn:nn:nn:nn:nn:nn format.
mac-destination-address mac-destination-address-mask
Specify which bits in the MAC address must be matched.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format.
Specify which bits in the MAC address must be matched.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
ethertype operator count byte
•
•
•
(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: ev2 - is the Ethernet II frame format.
llc - is the IEEE 802.3 frame format.
snap - is the IEEE 802.3 SNAP frame format.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
log monitor
(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port Monitoring chapter of the FTOS Configuration
Guide .
Not configured.
CONFIGURATION-MAC ACCESS LIST-EXTENDED
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Added monitor option
Introduced for E-Series
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage
Information
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
224 | Access Control Lists (ACL)
Related
Commands
Configure a filter to drop traffic based on the MAC address.
Configure a filter with specific sequence numbers.
seq c e s Configure a filter with a specific sequence number.
Syntax seq sequence-number { deny | permit } { any | host mac-address | mac-source-address mac-source-address-mask } { any | host mac-address | mac-destination-address mac-destination-address-mask } [ ethertype operator ] [ count [ byte ]] [ log ] [ monitor ]
To delete a filter, use the no seq sequence-number command.
Parameters sequence-number Enter a number as the filter sequence number.
Range: zero (0) to 65535.
deny Enter permit Enter the keyword permit to forward any traffic matching this filter.
any Enter host mac-address mac-source-address Enter the source MAC address in nn:nn:nn:nn:nn:nn format.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
Specify which bits in the MAC address must be matched. mac-source-address-mask mac-destination-address Enter the destination MAC address and mask in nn:nn:nn:nn:nn:nn format.
mac-destination-address-mask Specify which bits in the MAC address must be matched.
The MAC ACL supports an inverse mask, therefore, a mask of ff:ff:ff:ff:ff:ff allows entries that do not match and a mask of
00:00:00:00:00:00 only allows entries that match exactly.
ethertype operator
•
•
•
(OPTIONAL) To filter based on protocol type, enter one of the following Ethertypes: ev2 - is the Ethernet II frame format.
llc - is the IEEE 802.3 frame format.
snap - is the IEEE 802.3 SNAP frame format.
count
Enter the keyword host followed by a MAC address to filter packets with that host address.
byte log monitor
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL, E-Series only) Enter the keyword log to log the packets.
(OPTIONAL) Enter the keyword monitor when the rule is describing the traffic that you want to monitor and the ACL in which you are creating the rule will be applied to the monitored interface. For details, see the section “Flow-based Monitoring” in the Port
Monitoring chapter of the FTOS Configuration Guide .
Defaults Not configured
Access Control Lists (ACL) | 225
Command Modes
Command
History
CONFIGURATION-MAC ACCESS LIST-STANDARD
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Added monitor option
Introduced for E-Series
Note: When ACL logging and byte counters are configured simultaneously, byte counters may display an incorrect value. Configure packet counters with logging instead.
Usage
Information
When you use the log option, CP processor logs details about the packets that match. Depending on how many packets match the log entry and at what rate, the CP may become busy as it has to log these packets’ details.
Related
Commands
Configure a filter to drop traffic.
Configure a filter to forward traffic.
IP Prefix List Commands
When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.
Use these commands to configure or enable IP prefix lists.
•
•
•
•
•
•
•
•
clear ip prefix-list c e s Reset the number of times traffic met the conditions (“hit” counters) of the configured prefix lists.
Syntax clear ip prefix-list [ prefix-name ]
Parameters prefix-name (OPTIONAL) Enter the name of the configured prefix list to clear only counters for that prefix list, up to 140 characters long.
Command Modes EXEC Privilege
226 | Access Control Lists (ACL)
Command
History
Default
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Clears “hit” counters for all prefix lists unless a prefix list is specified.
Configure a prefix list.
deny c e s Configure a filter to drop packets meeting the criteria specified.
Syntax deny ip-prefix [ ge min-prefix-length ] [ le max-prefix-length ]
To delete a drop filter, use the no deny ip-prefix command.
Parameters ip-prefix ge min-prefix-length le max-prefix-length
Specify an IP prefix in the network/length format. For example, 35.0.0.0/
8 means match the first 8 bits of address 35.0.0.0.
(OPTIONAL) Enter the keyword ge followed by the minimum prefix length, which is a number from zero (0) to 32.
(OPTIONAL) Enter the keyword le followed by the maximum prefix length, which is a number from zero (0) to 32.
Defaults
Command Modes
Command
History
Not configured.
PREFIX-LIST
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Sequence numbers for this filter are automatically assigned starting at sequence number 5.
If the options ge or le are not used, only packets with an exact match to the prefix are filtered.
Related
Commands
Configure a filter to pass packets.
Configure a drop or permit filter with a specified sequence number.
Access Control Lists (ACL) | 227
ip prefix-list c e s Enter the PREFIX-LIST mode and configure a prefix list.
Syntax ip prefix-list prefix-name
To delete a prefix list, use the no ip prefix-list prefix-name command.
Parameters prefix-name Enter a string up to 16 characters long as the name of the prefix list, up to 140 characters long.
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Usage
Information
Prefix lists redistribute OSPF and RIP routes meeting specific criteria. For related RIP commands
supported on C-Series and E-Series, see Chapter 32, Router Information Protocol (RIP)
. For related
OSPF commands supported on all three platforms, see
Chapter 25, Open Shortest Path First (OSPFv2 and OSPFv3) .
Prior to 7.8.1.0, names are up to 16 characters long.
Related
Commands
Display IP routes in an IP prefix list.
Display a summary of the configured prefix lists.
permit c e s Configure a filter that passes packets meeting the criteria specified.
Syntax permit ip-prefix [ ge min-prefix-length ] [ le max-prefix-length ]
To delete a forward filter, use the no permit ip-prefix command.
Parameters ip-prefix ge min-prefix-length le max-prefix-length
Specify an IP prefix in the network/length format. For example, 35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.
(OPTIONAL) Enter the keyword ge followed by the minimum prefix length, which is a number from zero (0) to 32.
(OPTIONAL) Enter the keyword le followed by the maximum prefix length, which is a number from zero (0) to 32.
Command Modes PREFIX-LIST
228 | Access Control Lists (ACL)
Command
History
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Sequence numbers for this filter are automatically assigned starting at sequence number 5.
If the options ge or le are not used, only packets with an exact match to the prefix are filtered.
Related
Commands
Configure a filter to drop packets.
Configure a drop or permit filter with a specified sequence number.
seq c e s Assign a sequence number to a deny or permit filter in a prefix list while configuring the filter.
Syntax seq sequence-number { deny | permit } { any } | [ ip-prefix /nn { ge min-prefix-length } { le max-prefix-length } ] | [ bitmask number ]
To delete a specific filter, use the no seq sequence-number { deny | permit } { any } | [ ip-prefix { ge min-prefix-length } { le max-prefix-length } ] | [ bitmask number ].
Parameters sequence-number deny permit any ip-prefix /nn ge min-prefix-length le max-prefix-length bitmask number
Enter a number.
Range: 1 to 4294967294.
Enter the keyword deny to configure a filter to drop packets meeting this condition.
Enter the keyword permit to configure a filter to forward packets meeting this condition.
(OPTIONAL) Enter the keyword any to match any packets.
(OPTIONAL) Specify an IP prefix in the network/length format. For example,
35.0.0.0/8 means match the first 8 bits of address 35.0.0.0.
(OPTIONAL) Enter the keyword ge followed by the minimum prefix length, which is a number from zero (0) to 32.
(OPTIONAL) Enter the keyword le followed by the maximum prefix length, which is a number from zero (0) to 32.
Enter the keyword bitmask followed by a bitmask number in dotted decimal format.
Defaults
Command Modes
Command
History
Not configured.
PREFIX-LIST
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Access Control Lists (ACL) | 229
Usage
Information
Related
Commands
Version 7.5.1.0
Version 6.3.1.0
Added support for C-Series
Added bitmask option
If the options ge or le are not used, only packets with an exact match to the prefix are filtered.
Configure a filter to drop packets.
Configure a filter to pass packets.
show config c e s Display the current PREFIX-LIST configurations.
Syntax show config
Command Modes PREFIX-LIST
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 6-9.
Command Example: show config
FTOS(conf-nprefixl)#show config
!
ip prefix-list snickers
FTOS(conf-nprefixl)# show ip prefix-list detail c e s Display details of the configured prefix lists.
Syntax show ip prefix-list detail [ prefix-name ]
Parameters prefix-name (OPTIONAL) Enter a text string as the name of the prefix list, up to 140 characters.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
230 | Access Control Lists (ACL)
Example
Version 7.5.1.0
pre-Version 6.1.1.0
Support added for C-Series
Introduced for E-Series
Figure 6-10.
Command Example: show ip prefix-list detail
FTOS# show ip prefix-list detail
Prefix-list with the last deletion/insertion: filter_ospf ip prefix-list filter_in: count: 3, range entries: 3, sequences: 5 - 10
seq 5 deny 1.102.0.0/16 le 32 (hit count: 0)
seq 6 deny 2.1.0.0/16 ge 23 (hit count: 0)
seq 10 permit 0.0.0.0/0 le 32 (hit count: 0) ip prefix-list filter_ospf: count: 4, range entries: 1, sequences: 5 - 10
seq 5 deny 100.100.1.0/24 (hit count: 5)
seq 6 deny 200.200.1.0/24 (hit count: 1)
seq 7 deny 200.200.2.0/24 (hit count: 1)
seq 10 permit 0.0.0.0/0 le 32 (hit count: 132)
FTOS# show ip prefix-list summary c e s Display a summary of the configured prefix lists.
Syntax show ip prefix-list summary [ prefix-name ]
Parameters prefix-name (OPTIONAL) Enter a text string as the name of the prefix list, up to 140 characters long.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Access Control Lists (ACL) | 231
Example Figure 6-11.
Command Example: show ip prefix-list summary
FTOS# show ip prefix summary
Prefix-list with the last deletion/insertion: test ip prefix-list test: count: 3, range entries: 1, sequences: 5 - 15 ip prefix-list test1: count: 2, range entries: 2, sequences: 5 - 10 ip prefix-list test2: count: 1, range entries: 1, sequences: 5 - 5 ip prefix-list test3: count: 1, range entries: 1, sequences: 5 - 5 ip prefix-list test4: count: 1, range entries: 1, sequences: 5 - 5 ip prefix-list test5: count: 1, range entries: 1, sequences: 5 - 5 ip prefix-list test6: count: 1, range entries: 1, sequences: 5 - 5
FTOS#
Route Map Commands
When an access-list is created without any rule and then applied to an interface, ACL behavior reflects implicit permit.
The following commands allow you to configure route maps and their redistribution criteria.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
232 | Access Control Lists (ACL)
•
•
continue c e s Configure a route-map to go to a route-map entry with a higher sequence number.
Syntax continue [ sequence-number ]
To remove the continue clause, use the no continue [ sequence-number ] command.
Parameters sequence-number (OPTIONAL) Enter the route map sequence number.
Range: 1 - 65535
Default: no sequence number
Defaults
Command Modes
Command
History
Not Configured
ROUTE-MAP
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced
The continue feature allows movement from one route-map entry to a specific route-map entry (the sequence number ). If the sequence number is not specified, the continue feature simply moves to the next sequence number (also known as an implied continue). If a match clause exists, the continue feature executes only after a successful match occurs. If there are no successful matches, continue is ignored.
Match clause with Continue clause
The continue feature can exist without a match clause. A continue clause without a match clause executes and jumps to the specified route-map entry.
With a match clause and a continue clause, the match clause executes first and the continue clause next in a specified route map entry. The continue clause launches only after a successful match. The behavior is:
• A successful match with a continue clause—the route map executes the set clauses and then goes to the specified route map entry upon execution of the continue clause.
• If the next route map entry contains a continue clause, the route map will execute the continue clause if a successful match occurs.
• If the next route map entry does not contain a continue clause, the route map evaluates normally. If a match does not does not occur, the route map does not continue and will fall through to the next sequence number, if one exists.
Access Control Lists (ACL) | 233
Related
Commands
Set clause with Continue clause
If the route-map entry contains sets with the continue clause, then set actions is performed first followed by the continue clause jump to the specified route map entry.
• If a set actions occurs in the first route map entry and then the same set action occurs with a different value in a subsequent route map entry, the last set of actions overrides the previous set of actions with the same set command.
• If set community additive and set as-path prepend are configure, the communities and AS numbers are pre-pended.
Specify a COMMUNITY attribute
Configure a filter to modify the AS path description c e s Add a description to this route map.
Syntax description { description }
Parameters
To remove the description, use the no description { description } command.
description Enter a description to identify the route map (80 characters maximum).
Defaults
Command Modes
Command
History
Related
Commands
No default behavior or values
ROUTE-MAP
Version 8.3.3.1
Version 8.1.1.0
pre-Version 7.7.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced
Enable a route map match as-path c e s Configure a filter to match routes that have a certain AS number in their BGP path.
Syntax match as-path as-path-name
To delete a match AS path filter, use the no match as-path as-path-name command.
Parameters as-path-name Enter the name of an established AS-PATH ACL, up to 140 characters.
Defaults
Command Modes
Not configured.
ROUTE-MAP
234 | Access Control Lists (ACL)
Command
History
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Add information to the BGP AS_PATH attribute.
match community c e s Configure a filter to match routes that have a certain COMMUNITY attribute in their BGP path.
Syntax match community community-list-name [ exact ]
To delete a community match filter, use the no match community command.
Parameters community-list-name exact
Enter the name of a configured community list.
(OPTIONAL) Enter the keywords exact to process only those routes with this community list name.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Configure an Community Access list.
Specify a COMMUNITY attribute.
Send COMMUNITY attribute to peer or peer group.
match interface c e s Configure a filter to match routes whose next hop is on the interface specified.
Syntax match interface interface
To remove a match, use the no match interface interface command.
Access Control Lists (ACL) | 235
Parameters interface Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/ port information.
• For the loopback interface, enter the keyword loopback followed by a number from zero (0) to 16383.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094, 1-2094 for
ExaScale (can used IDs 1-4094).
Not configured
ROUTE-MAP
Defaults
Command Modes
Command
History
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
match ip route-source match metric
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Redistribute routes that match an IP address.
Redistribute routes that match the next-hop IP address.
Redistribute routes that match routes advertised by other routers.
Redistribute routes that match a specific metric.
Redistribute routes that match a route type.
Redistribute routes that match a specific tag.
match ip address c e s Configure a filter to match routes based on IP addresses specified in an access list.
Syntax match ip address prefix-list-name
To delete a match, use the no match ip address prefix-list-name command.
Parameters prefix-list-name Enter the name of configured prefix list, up to 140 characters.
Defaults
Command Modes
Not configured.
ROUTE-MAP
236 | Access Control Lists (ACL)
Command
History
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
match ip route-source match metric
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Redistribute routes that match the next-hop interface.
Redistribute routes that match the next-hop IP address.
Redistribute routes that match routes advertised by other routers.
Redistribute routes that match a specific metric.
Redistribute routes that match a route type.
Redistribute routes that match a specific tag.
match ip next-hop c e s Configure a filter to match based on the next-hop IP addresses specified in an IP access list or IP prefix list.
Syntax match ip next-hop { access-list | prefix-list prefix-list-name }
To delete a match, use the no match ip next-hop { access-list-name | prefix-list prefix-list-name } command.
Parameters access-list-name Enter the name of a configured IP access list, up to 140 characters.
prefix-list prefix-list-name Enter the keywords prefix-list followed by the name of configured prefix list.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
match ip route-source match metric
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Redistribute routes that match the next-hop interface.
Redistribute routes that match an IP address.
Redistribute routes that match routes advertised by other routers.
Redistribute routes that match a specific metric.
Access Control Lists (ACL) | 237
Redistribute routes that match a route type.
Redistribute routes that match a specific tag.
match ip route-source c e s Configure a filter to match based on the routes advertised by routes specified in IP access lists or IP prefix lists.
Syntax match ip route-source { access-list | prefix-list prefix-list-name }
To delete a match, use the no match ip route-source { access-list | prefix-list prefix-list-name } command.
Parameters access-list-name prefix-list prefix-list-name
Enter the name of a configured IP access list, up to 140 characters.
Enter the keywords prefix-list followed by the name of configured prefix list, up 10 140 characters.
Defaults
Command Modes
Not configured.
ROUTE-MAP
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Related
Commands
Redistribute routes that match the next-hop interface.
Redistribute routes that match an IP address.
Redistribute routes that match the next-hop IP address.
Redistribute routes that match a specific metric.
Redistribute routes that match a route type.
Redistribute routes that match a specific tag.
match metric c e s Configure a filter to match on a specified value.
Syntax match metric metric-value
To delete a value, use the no match metric [ metric-value ] command.
Parameters metric-value Enter a value to match.
Range: zero (0) to 4294967295.
238 | Access Control Lists (ACL)
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Redistribute routes that match the next-hop interface.
Redistribute routes that match an IP address.
Redistribute routes that match the next-hop IP address.
Redistribute routes that match routes advertised by other routers.
Redistribute routes that match a route type.
Redistribute routes that match a specific tag.
match origin c e s Configure a filter to match routes based on the value found in the BGP path ORIGIN attribute.
Syntax match origin { egp | igp | incomplete }
To disable matching filter, use the no match origin { igp | egp | incomplete } command.
Parameters egp igp incomplete
Enter the keyword egp to match routes originating outside the AS.
Enter the keyword igp to match routes originating within the same AS.
Enter the keyword incomplete to match routes with incomplete routing information.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Version 8.3.3.1
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced for E-Series match route-type c e s Configure a filter to match routes based on the how the route is defined.
Syntax match route-type { external [ type-1 | type-2 ] | internal | level-1 | level-2 | local }
To delete a match, use the no match route-type { local | internal | external [ type-1 | type-2 ] | level-1 | level-2 } command.
Access Control Lists (ACL) | 239
Parameters external internal level-1 level-2 local
[ type-1| type-2 ] Enter the keyword external followed by either type-1 or type-2 to match only on OSPF Type 1 routes or OSPF Type 2 routes.
Enter the keyword internal to match only on routes generated within
OSPF areas.
Enter the keyword level-1 to match IS-IS Level 1 routes.
Enter the keyword level-2 to match IS-IS Level 2 routes.
Enter the keyword local to match only on routes generated within the switch.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
match ip route-source match metric
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Redistribute routes that match the next-hop interface.
Redistribute routes that match an IP address.
Redistribute routes that match the next-hop IP address.
Redistribute routes that match routes advertised by other routers.
Redistribute routes that match a specific metric.
Redistribute routes that match a tag.
match tag c e s Configure a filter to redistribute only routes that match a specified tag value.
Syntax match tag tag-value
To remove a match, use the no match tag command.
Parameters tag-value Enter a value as the tag on which to match.
Range: zero (0) to 4294967295.
Defaults
Command Modes
Not configured
ROUTE-MAP
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
240 | Access Control Lists (ACL)
Related
Commands
match ip route-source match metric
Redistribute routes that match the next-hop interface.
Redistribute routes that match an IP address.
Redistribute routes that match the next-hop IP address.
Redistribute routes that match routes advertised by other routers.
Redistribute routes that match a specific metric.
Redistribute routes that match a route type.
route-map c e s Enable a route map statement and configure its action and sequence number. This command also places you in the ROUTE-MAP mode.
Syntax route-map map-name [ permit | deny ] [ sequence-number ]
To delete a route map, use the no route-map map-name [ permit | deny ] [ sequence-number ] command.
Parameters map-name permit deny sequence-number
Enter a text string of up to 140 characters to name the route map for easy identification.
(OPTIONAL) Enter the keyword permit to set the route map default as permit.
If no keyword is specified, the default is permit .
(OPTIONAL) Enter the keyword deny to set the route map default as deny.
(OPTIONAL) Enter a number to identify the route map for editing and sequencing with other route maps. You are prompted for a sequence number if there are multiple instances of the route map.
Range: 1 to 65535.
Defaults
Command Modes
Not configured
If no keyword ( permit or deny ) is defined for the route map, the permit action is the default.
CONFIGURATION
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
\
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 6-12.
Command Example: route-map
FTOS(conf)#route-map dempsey
FTOS(config-route-map)#
Usage
Information
Use caution when you delete route maps because if you do not specify a sequence number, all route maps with the same map-name are deleted when you use no
map-name command.
Access Control Lists (ACL) | 241
Related
Commands
Prior to 7.8.1.0, names are up to 16 characters long.
Display the current configuration.
set as-path c e s Configure a filter to modify the AS path for BGP routes.
Syntax set as-path prepend as-number [... as-number ]
To remove an AS-Path setting, use the no set as-path { prepend as-number | tag } command.
Parameters prepend as-number Enter the keyword prepend followed by up to eight AS numbers to be inserted into the BGP path information.
Range: 1 to 65535
Defaults
Command Modes
Not configured
ROUTE-MAP
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Usage
Information
You can prepend up to eight AS numbers to a BGP route.
This command influences best path selection in BGP by inserting a tag or AS number into the
AS_PATH attribute.
Related
Commands
Redistribute routes that match an AS-PATH attribute.
Configure an AS-PATH access list.
Configure a BGP filter based on the AS-PATH attribute.
Display configured IP Community access lists.
set automatic-tag c e s Configure a filter to automatically compute the tag value of the route.
Syntax set automatic-tag
Defaults
Command Modes
To return to the default, enter no set automatic-tag .
Not configured.
ROUTE-MAP
242 | Access Control Lists (ACL)
Command
History
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Specify the OSPF area for route redistribution.
Specify the metric value assigned to redistributed routes.
Specify the metric type assigned to redistributed routes.
Specify the tag assigned to redistributed routes.
set comm-list delete c e s Configure a filter to remove the specified community list from the BGP route’s COMMUNITY attribute.
Syntax set comm-list community-list-name delete
To insert the community list into the COMMUNITY attribute, use the no set comm-list community-list-name delete command.
Parameters community-list-name Enter the name of an established Community list, up to 140 characters.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
The community list used in the set comm-list delete command must be configured so that each filter contains only one community. For example, the filter deny 100:12 is acceptable, but the filter deny 120:13 140:33 results in an error.
If the set comm-list delete command and the set community command are configured in the same route map sequence, then the deletion command ( set comm-list delete ) is processed before the insertion command ( set community ).
Prior to 7.8.1.0, names are up to 16 characters long.
Related
Commands
Configure community access list.
Access Control Lists (ACL) | 243
Redistribute routes that match the COMMUNITY attribute.
Specify a COMMUNITY attribute.
set community c e s Allows you to assign a BGP COMMUNITY attribute.
Syntax set community { community-number | local-as | no-advertise | no-export | none } [ additive ]
To delete a BGP COMMUNITY attribute assignment, use the no set community
{ community-number | local-as | no-advertise | no-export | none } command.
Parameters community-number local-AS no-advertise no-export none additive
Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
Enter the keywords local-AS to drop all routes with the COMMUNITY attribute of
NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
Enter the keywords no-advertise to drop all routes containing the well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers.
Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
Enter the keywords none to remove the community attribute from routes meeting the route map criteria.
(OPTIONAL) Enter the keyword additive add the communities to already existing communities.
Defaults
Command Modes
Command
History
Not configured
ROUTE-MAP
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Related
Commands
Configure a Community access list.
Redistribute routes that match a BGP COMMUNITY attribute.
Assign the COMMUNITY attribute.
Display BGP community groups.
Display configured Community access lists.
244 | Access Control Lists (ACL)
set level c e s Configure a filter to specify the IS-IS level or OSPF area to which matched routes are redistributed.
Syntax set level { backbone | level-1 | level-1-2 | level-2 | stub-area }
To remove a set level condition, use the no set level { backbone | level-1 | level-1-2 | level-2 | stub-area } command.
Parameters backbone level-1 level-1-2 level-2 stub-area
Enter the keyword backbone to redistribute matched routes to the OSPF backbone area
(area 0.0.0.0).
Enter the keyword level-1 to redistribute matched routes to IS-IS Level 1.
Enter the keyword level-1-2 to redistribute matched routes to IS-IS Level 1 and Level 2.
Enter the keyword level-2 to redistribute matched routes to IS-IS Level 2.
Enter the keyword stub to redistributed matched routes to OSPF stub areas.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Compute the tag value of the route.
Specify the metric value assigned to redistributed routes.
Specify the metric type assigned to redistributed routes.
Specify the tag assigned to redistributed routes.
set local-preference c e s Configure a filter to set the BGP LOCAL_PREF attribute for routers within the local autonomous system.
Syntax set local-preference value
To delete a BGP LOCAL_PREF attribute, enter no set local-preference .
Parameters value Enter a number as the LOCAL_PREF attribute value.
Range: 0 to 4294967295
Defaults
Command Modes
Not configured
ROUTE-MAP
Access Control Lists (ACL) | 245
Command
History
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
command changes the LOCAL_PREF attribute for routes meeting the route map criteria. To change the LOCAL_PREF for all routes, use the
command.
Related
Commands
Change default LOCAL_PREF attribute for all routes.
set metric c e s Configure a filter to assign a new metric to redistributed routes.
Syntax set metric [ + | ] metric-value
To delete a setting, enter no set metric .
Parameters
+
- metric-value
(OPTIONAL) Enter + to add a metric-value to the redistributed routes.
(OPTIONAL) Enter - to subtract a metric-value from the redistributed routes.
Enter a number as the new metric value.
Range: zero (0) to 4294967295
Defaults
Command Modes
Not configured
ROUTE-MAP
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Related
Commands
Compute the tag value of the route.
Specify the OSPF area for route redistribution.
Specify the route type assigned to redistributed routes.
Specify the tag assigned to redistributed routes.
246 | Access Control Lists (ACL)
set metric-type c e s Configure a filter to assign a new route type for routes redistributed to OSPF.
Syntax set metric-type { internal | external | type-1 | type-2 }
To delete a setting, enter no set metric-type .
Parameters internal external type-1 type-2
Enter the keyword internal to assign the Interior Gateway Protocol metric of the next hop as the route’s BGP MULTI_EXIT_DES (MED) value.
Enter the keyword external to assign the IS-IS external metric.
Enter the keyword type-1 to assign the OSPF Type 1 metric.
Enter the keyword type-2 to assign the OSPF Type 2 metric.
Defaults
Command Modes
Command
History
Related
Commands
Not configured.
ROUTE-MAP
Version 8.3.3.1
Version 8.3.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Implemented internal keyword
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Compute the tag value of the route.
Specify the OSPF area for route redistribution.
Specify the metric value assigned to redistributed routes.
Specify the tag assigned to redistributed routes.
set next-hop c e s Configure a filter to specify an IP address as the next hop.
Syntax set next-hop ip-address
To delete the setting, use the no set next-hop ip-address command.
Parameters ip-address Specify an IP address in dotted decimal format.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Access Control Lists (ACL) | 247
Usage
Information
Related
Commands
Version 7.5.1.0
pre-Version 6.1.1.0
Support added for C-Series
Introduced for E-Series
command is configured, its configuration takes precedence over the neighbor next-hop-self
command in the ROUTER BGP mode.
If you configure the
command with the interface’s (either Loopback or physical) IP address, the software declares the route unreachable.
Redistribute routes that match the next-hop IP address.
Configure the routers as the next hop for a BGP neighbor.
set origin c e s Configure a filter to manipulate the BGP ORIGIN attribute.
Syntax set origin { igp | egp | incomplete }
To delete an ORIGIN attribute setting, enter no set origin .
Parameters egp Enter igp incomplete
Enter the keyword igp to set routes originating within the same AS.
Enter the keyword incomplete to set routes with incomplete routing information.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series set tag c e s Configure a filter to specify a tag for redistributed routes.
Syntax set tag tag-value
To delete a setting, enter no set tag .
Parameters tag-value Enter a number as the tag.
Range: zero (0) to 4294967295.
Defaults
Command Modes
Not configured
ROUTE-MAP
248 | Access Control Lists (ACL)
Command
History
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Compute the tag value of the route.
Specify the OSPF area for route redistribution.
Specify the metric value assigned to redistributed routes.
Specify the route type assigned to redistributed routes.
set weight c e s Configure a filter to add a non-RFC compliant attribute to the BGP route to assist with route selection.
Syntax set weight weight
To delete a weight specification, use the no set weight weight command.
Parameters weight Enter a number as the weight to be used by the route meeting the route map specification.
Routes with a higher weight are preferred when there are multiple routes to the same destination.
Range: 0 to 65535
Default: router-originated = 32768; all other routes = 0
Defaults
Command Modes
Command
History router-originated = 32768; all other routes = 0
ROUTE-MAP
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
If you do not use the
command, router-originated paths have a weight attribute of 32768 and all other paths have a weight attribute of zero. show config c e s Display the current route map configuration.
Syntax show config
Command Modes ROUTE-MAP
Access Control Lists (ACL) | 249
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 6-13.
Command Example: show config
FTOS(config-route-map)#show config
!
route-map hopper permit 10
FTOS(config-route-map)# show route-map c e s Display the current route map configurations.
Syntax show route-map [ map-name ]
Parameters map-name (OPTIONAL) Enter the name of a configured route map, up to 140 characters.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 6-14.
Command Example: show route-map
FTOS#show route-map route-map firpo, permit, sequence 10
Match clauses:
Set clauses:
tag 34
FTOS#
Related
Commands
Configure a route map.
250 | Access Control Lists (ACL)
AS-Path Commands
This feature is supported on E-Series only, as indicated by this character under each command heading: e
The following commands configure AS-Path ACLs.
•
•
•
•
•
deny e Create a filter to drop routes that match the route’s AS-PATH attribute. Use regular expressions to identify which routes are affected by the filter.
Syntax deny as-regular-expression
To remove this filter, use the no deny as-regular-expression command.
Parameters as-regular-expression Enter a regular expression to match BGP AS-PATH attributes.
Use one or a combination of the following:
• . = (period) matches on any single character, including white space
• * = (asterisk) matches on sequences in a pattern (zero or more sequences)
• + = (plus sign) matches on sequences in a pattern (one or more sequences)
• ? = (question mark) matches sequences in a pattern (0 or 1 sequences).
You must enter an escape sequence (CNTL+v) prior to entering the
? regular expression.
• [ ] = (brackets) matches a range of single-character patterns.
• ^ = (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.)
• $ = (dollar sign) matches the end of the output string.
• _ = (underscore) matches a comma (,), left brace ({), right brace (}), left parenthesis, right parenthesis, the beginning of the input string, the end of the input string, or a space.
• | = (pipe) matches either character.
Defaults
Command Modes
Not configured
AS-PATH ACL
The regular expression must match part of the ASCII-text in the AS-PATH attribute of the BGP route. Usage
Information
Command
History
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series
Access Control Lists (ACL) | 251
ip as-path access-list e Enter the AS-PATH ACL mode and configure an access control list based on the BGP AS_PATH attribute.
Syntax ip as-path access-list as-path-name
To delete an AS-PATH ACL, use the no ip as-path access-list as-path-name command.
Parameters as-path-name Enter the access-list name, up to 140 characters.
Defaults
Command Modes
Example
Not configured
CONFIGURATION
Figure 6-15.
Command Example: ip as-path access-list
FTOS(conf)#ip as-path access-list TestPath
FTOS(config-as-path)#
Usage
Information
Command
History
Use the
commands to apply the AS-PATH ACL to BGP routes.
Version 8.1.1.0
Version 7.8.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Introduced for E-Series
Related
Commands
Match on routes contain a specific AS-PATH.
Configure filter based on AS-PATH information.
permit e Create a filter to forward BGP routes that match the route’s AS-PATH attributes. Use regular expressions to identify which routes are affected by this filter.
Syntax permit as-regular-expression
To remove this filter, use the no permit as-regular-expression command.
252 | Access Control Lists (ACL)
Parameters as-regular-expression Enter a regular expression to match BGP AS-PATH attributes.
Use one or a combination of the following:
• . = (period) matches on any single character, including white space
• * = (asterisk) matches on sequences in a pattern (zero or more sequences)
• + = (plus sign) matches on sequences in a pattern (one or more sequences)
• ? = (question mark) matches sequences in a pattern (0 or 1 sequences). You must enter an escape sequence (CNTL+v) prior to entering the ? regular expression.
• [] = (brackets) matches a range of single-character patterns.
• ^ = (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.)
• $ = (dollar sign) matches the end of the output string.
• _ = (underscore) matches a comma (,), left brace ({), right brace (}), left parenthesis, right parenthesis, the beginning of the input string, the end of the input string, or a space.
• | = (pipe) matches either character.
Defaults
Command Modes
Command
History
Not configured
AS-PATH ACL
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series show config e Display the current configuration.
Syntax show config
Command Mode AS-PATH ACL
Command
History
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series
Example Figure 6-16.
Command Example: show config (AS-PATH ACL)
FTOS(config-as-path)#show config
!
ip as-path access-list snickers
deny .3
FTOS(config-as-path)# show ip as-path-access-lists e Display the all AS-PATH access lists configured on the E-Series.
Syntax show ip as-path-access-lists
Access Control Lists (ACL) | 253
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series
Figure 6-17.
Command Example: show ip as-path-access-lists
FTOS#show ip as-path-access-lists ip as-path access-list 1
permit ^$
permit ^\(.*\)$
deny .* ip as-path access-list 91
permit ^$
deny .*
permit ^\(.*\)$
FTOS#
IP Community List Commands
IP Community List commands are supported on E-Series only, as indicated by this character under each command heading: e
The commands in this section are.
•
•
•
•
•
deny e Create a filter to drop routes matching a BGP COMMUNITY number.
Syntax deny { community-number | local-AS | no-advertise | no-export | quote-regexp regular-expressions-list | regexp regular-expression }
To delete a description, enter no deny { community-number | local-AS | no-advertise | no-export | quote-regexp regular-expressions-list | regexp regular-expression }.
Parameters community-number local-AS
Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
Enter the keywords local-AS to drop all routes with the COMMUNITY attribute of
NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
254 | Access Control Lists (ACL)
no-advertise no-export regexp regular-expression
Enter the keywords no-advertise to drop all routes containing the well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers.
Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
Enter the keyword regexp followed by a regular expression. Use one or a combination of the following:
• . = (period) matches on any single character, including white space
• * = (asterisk) matches on sequences in a pattern (zero or more sequences)
• + = (plus sign) matches on sequences in a pattern (one or more sequences)
• ? = (question mark) matches sequences in a pattern (0 or 1 sequences). You must enter an escape sequence (CNTL+v) prior to entering the ? regular expression.
• [] = (brackets) matches a range of single-character patterns.
• ^ = (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.)
• $ = (dollar sign) matches the end of the output string.
• _ = (underscore) matches a comma (,), left brace ({), right brace (}), left parenthesis, right parenthesis, the beginning of the input string, the end of the input string, or a space.
• | = (pipe) matches either character.
Defaults
Command Modes
Command
History
Not configured.
COMMUNITY-LIST
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series ip community-list e Enter COMMUNITY-LIST mode and create an IP community-list for BGP.
Syntax ip community-list comm-list-name
To delete a community-list, use the no ip community-list comm-list-name command.
Parameters comm-list-name Enter a text string as the name of the community-list, up to 140 characters.
Command Modes
Example
CONFIGURATION
Figure 6-18.
Command Example: ip community-list
FTOS(conf)#ip community-list TestComList
FTOS(config-community-list)#
Access Control Lists (ACL) | 255
Command
History
Version 8.1.1.0
Version 7.8.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Introduced for E-Series permit e Configure a filter to forward routes that match the route’s COMMUNITY attribute.
Syntax permit { community-number | local-AS | no-advertise | no-export | quote-regexp regular-expressions-list | regexp regular-expression }
To remove this filter, use the no permit { community-number | local-AS | no-advertise | no-export
| quote-regexp regular-expressions-list | regexp regular-expression } command.
Parameters community-number local-AS no-advertise no-export regexp regular-expression
Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
Enter the keywords local-AS to drop all routes with the COMMUNITY attribute of
NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
Enter the keywords no-advertise to drop all routes containing the well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers.
Enter the keywords no-export to drop all routes containing the well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
Enter the keyword regexp followed by a regular expression. Use one or a combination of the following:
• . = (period) matches on any single character, including white space
• * = (asterisk) matches on sequences in a pattern (zero or more sequences)
• + = (plus sign) matches on sequences in a pattern (one or more sequences)
• ? = (question mark) matches sequences in a pattern (0 or 1 sequences). You must enter an escape sequence (CNTL+v) prior to entering the ? regular expression.
• [] = (brackets) matches a range of single-character patterns.
• ^ = (caret) matches the beginning of the input string. (If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.)
• $ = (dollar sign) matches the end of the output string.
• _ = (underscore) matches a comma (,), left brace ({), right brace (}), left parenthesis, right parenthesis, the beginning of the input string, the end of the input string, or a space.
• | = (pipe) matches either character.
Defaults
Command Modes
Not configured
COMMUNITY-LIST
256 | Access Control Lists (ACL)
Command
History
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series show config e Display the non-default information in the current configuration.
Syntax show config
Command Mode COMMUNITY-LIST
Command
History
Example
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series
Figure 6-19.
Command Example: show config (COMMUNITY-LIST
FTOS(config-std-community-list)#show config
!
ip community-list standard patches
deny 45:1
permit no-export
FTOS(config-std-community-list)# show ip community-lists e Display configured IP community lists in alphabetic order.
Syntax show ip community-lists [ name ]
Parameters name (OPTIONAL) Enter the name of the standard or extended IP community list, up to 140 characters.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.1.1.0
Version 7.8.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Introduced for E-Series
Access Control Lists (ACL) | 257
Example Figure 6-20.
Command Example: show ip community-lists
FTOS#show ip community-lists ip community-list standard 1
deny 701:20
deny 702:20
deny 703:20
deny 704:20
deny 705:20
deny 14551:20
deny 701:112
deny 702:112
deny 703:112
deny 704:112
deny 705:112
deny 14551:112
deny 701:666
deny 702:666
deny 703:666
deny 704:666
deny 705:666
deny 14551:666
FTOS#
258 | Access Control Lists (ACL)
Border Gateway Protocol IPv4(BGPv4)
Overview
BGPv4 is supported as shown in the following table.
FTOS version
8.3.3.1
8.1.1.0
7.8.1.0
7.7.1.0.
pre-7.7.1.0
Platform support
S60
E-Series ExaScale
S-Series
C-Series
E-Series TeraScale e x s c e t
For detailed information on configuring BGP, refer to the BGP chapter in the FTOS Configuration
Guide .
This chapter contains the following sections:
•
•
•
BGP Extended Communities (RFC 4360)
7
Border Gateway Protocol IPv4(BGPv4) | 259
BGPv4 Commands
Border Gateway Protocol (BGP) is an external gateway protocol that transmits interdomain routing information within and between Autonomous Systems (AS). BGP version 4 (BGPv4) supports
Classless InterDomain Routing (CIDR) and the aggregation of routes and AS paths. Basically, two routers (called neighbors or peers) exchange information including full routing tables and periodically send messages to update those routing tables.
Note: FTOS Version 7.7.1 supports 2-Byte (16-bit) and 4-Byte (32-bit) format for
Autonomous System Numbers (ASNs), where the 2-Byte format is 1-65535, the 4-Byte format is 1-4294967295.
Note: FTOS Version 8.3.1.0 supports Dotted format as well as the Traditional Plain format for AS Numbers. The dot format is displayed when using the show ip bgp commands. To determine the comparable dot format for an ASN from a traditional format, use ASN/65536.
ASN%65536.
For more information about using the 2 or 4-Byte format, refer to the FTOS Configuration Guide .
The following commands enable you to configure and enable BGP.
•
•
•
•
•
•
•
bgp bestpath med missing-as-best
•
•
bgp client-to-client reflection
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
capture bgp-pdu max-buffer-size
•
•
•
260 | Border Gateway Protocol IPv4(BGPv4)
•
•
•
•
•
•
debug ip bgp soft-reconfiguration
•
•
•
•
•
•
•
neighbor advertisement-interval
•
•
•
•
•
•
•
•
•
•
•
•
•
•
neighbor peer-group (assigning peers)
•
neighbor peer-group (creating group)
•
•
•
•
•
neighbor route-reflector-client
•
•
•
neighbor soft-reconfiguration inbound
•
•
•
•
•
•
•
•
•
•
Border Gateway Protocol IPv4(BGPv4) | 261
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
address-family c e s Enable the IPv4 multicast or the IPv6 address family.
Syntax address-family [ ipv4 multicast| ipv6unicast ]
Parameters ipv4 multicast ipv6 unicast
Enter BGPv4 multicast mode.
Enter BGPv6 mode.
Defaults
Command Modes
Command
History
Not configured.
ROUTER BGP
.
Version 8.3.3.1
Version 6.5.1.0
Introduced on the S60.
Introduced aggregate-address c e s Summarize a range of prefixes to minimize the number of entries in the routing table.
Syntax aggregate-address ip-address mask [ advertise-map map-name ] [ as-set ] [ attribute-map map-name ] [ summary-only ] [ suppress-map map-name ]
262 | Border Gateway Protocol IPv4(BGPv4)
Parameters
Defaults
Command Modes
Usage
Information
Command
History ip-address mask advertise-map map-name as-set attribute-map map-name map-name summary-only suppress-map
Enter the IP address and mask of the route to be the aggregate address. Enter the IP address in dotted decimal format (A.B.C.D) and mask in /prefix format (/x).
(OPTIONAL) Enter the keywords advertise-map followed by the name of a configured route map to set filters for advertising an aggregate route.
(OPTIONAL) Enter the keyword as-set to generate path attribute information and include it in the aggregate.
AS_SET includes AS_PATH and community information from the routes included in the aggregated route.
(OPTIONAL) Enter the keywords attribute-map followed by the name of a configured route map to modify attributes of the aggregate, excluding AS_PATH and NEXT_HOP attributes.
(OPTIONAL) Enter the keyword summary-only to advertise only the aggregate address. Specific routes will not be advertised.
(OPTIONAL) Enter the keywords suppress-map followed by the name of a configured route map to identify which more-specific routes in the aggregate are suppressed.
Not configured.
ROUTER BGP ADDRESS FAMILY
ROUTER BGP ADDRESS FAMILY IPv6
At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active.
Do not add the as-set parameter to the aggregate, if routes within the aggregate are constantly changing as the aggregate will flap to keep track of the changes in the AS_PATH.
In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is true: routes meeting the permit clause are suppressed.
If the route is injected via the
command, that route will still appear in the routing table if the
summary-only parameter is configured in the aggregate-address
command.
The summary-only parameter suppresses all advertisements. If you want to suppress advertisements to only specific neighbors, use the
neighbor distribute-list command.
In the
show ip bgp command, aggregates contain an ‘a’ in the first column and routes suppressed by
the aggregate contain an ‘s’ in the first column.
.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Border Gateway Protocol IPv4(BGPv4) | 263
bgp always-compare-med c e s Enables you to enable comparison of the MULTI_EXIT_DISC (MED) attributes in the paths from different external ASs.
Syntax bgp always-compare-med
To disable comparison of MED, enter no bgp always-compare-med .
Defaults
Command Modes
Usage
Information
Command
History
Disabled (that is, the software only compares MEDs from neighbors within the same AS).
ROUTER BGP
Any update without a MED attribute is the least preferred route
If you enable this command, use the
clear ip bgp * command to recompute the best path.
.
Version 8.3.3.1
Version 8.2.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced command
Introduced support on C-Series bgp asnotation c e s Enables you to implement a method for AS Number representation in the CLI.
Syntax bgp asnotation [asplain | asdot+ | asdot ]
To disable a dot or dot+ representation and return to ASPLAIN, enter no bgp asnotation .
Defaults
Command Modes
Usage
Information asplain
ROUTER BGP
You must enable bgp four-octet-as-support before enabling this feature. If you disable
four-octect-support after using dot or dot+ format, the AS Numbers revert to asplain text.
When you apply an asnotation, it is reflected in the running-configuration. If you change the notation type, the running-config is updated dynamically and the new notation is shown.
Related
Commands
Command
History
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Enable 4-byte support for the BGP process
Introduced on the S60.
Introduced Dynamic Application of AS Notation changes
Introduced
264 | Border Gateway Protocol IPv4(BGPv4)
Example Figure 7-1.
Dynamic changes of the bgp asnotation command in the running config
FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asdot
FTOS(conf-router_bgp)#ex
FTOS(conf)#do show run | grep bgp router bgp 1
bgp four-octet-as-support
bgp asnotation asdot
FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asdot+
FTOS(conf-router_bgp)#ex
FTOS(conf)#do show run | grep bgp router bgp 1
bgp four-octet-as-support
bgp asnotation asdot+
FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#bgp asnotation asplain
FTOS(conf-router_bgp)#ex
FTOS(conf)#do show run |grep bgp router bgp 1
bgp four-octet-as-support
FTOS(conf)# bgp bestpath as-path ignore c e s Ignore the AS PATH in BGP best path calculations.
Syntax bgp bestpath as-path ignore
To return to the default, enter no bgp bestpath as-path ignore .
Defaults
Command Modes
Disabled (that is, the software considers the AS_PATH when choosing a route as best).
ROUTER BGP
If you enable this command, use the
clear ip bgp * command to recompute the best path.
Usage
Information
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series bgp bestpath med confed c e s Enable MULTI_EXIT_DISC (MED) attribute comparison on paths learned from BGP confederations.
Syntax bgp bestpath med confed
Border Gateway Protocol IPv4(BGPv4) | 265
Defaults
Command Modes
Usage
Information
Command
History
To disable MED comparison on BGP confederation paths, enter no bgp bestpath med confed .
Disabled
ROUTER BGP
The software compares the MEDs only if the path contains no external autonomous system numbers. If
you enable this command, use the clear ip bgp
* command to recompute the best path.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series bgp bestpath med missing-as-best c e s During path selection, indicate preference to paths with missing MED (MULTI_EXIT_DISC) over those paths with an advertised MED attribute.
Syntax bgp bestpath med missing-as-best
To return to the default selection, use the no bgp bestpath med missing-as-best command.
Defaults
Command Modes
Usage
Information
Disabled
ROUTER BGP
The MED is a 4-byte unsigned integer value and the default behavior is to assume a missing MED as
4294967295. This command causes a missing MED to be treated as 0. During the path selection, paths with a lower MED are preferred over those with a higher MED.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 6.3.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced bgp bestpath router-id ignore c e s Do not compare router-id information for external paths during best path selection.
Syntax bgp bestpath router-id ignore
To return to the default selection, use the no bgp bestpath router-id ignore command.
Defaults Disabled
Command Modes ROUTER BGP
Usage
Information
Configuring this option will retain the current best-path. When sessions are subsequently reset, the oldest received path will be chosen as the best-path.
266 | Border Gateway Protocol IPv4(BGPv4)
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced bgp client-to-client reflection c e s Enables you to enable route reflection between clients in a cluster.
Syntax bgp client-to-client reflection
To disable client-to-client reflection, enter no bgp client-to-client reflection .
Defaults
Command Modes
Enabled when a route reflector is configured.
ROUTER BGP
Route reflection to clients is not necessary if all client routers are fully meshed.
Usage
Information
Related
Commands
neighbor route-reflector-client
Assign ID to a BGP cluster with two or more route reflectors.
Configure a route reflector and clients.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series bgp cluster-id c e s Assign a cluster ID to a BGP cluster with more than one route reflector.
Syntax bgp cluster-id { ip-address | number }
To delete a cluster ID, use the no bgp cluster-id { ip-address | number } command.
Parameters ip-address number
Enter an IP address as the route reflector cluster ID.
Enter a route reflector cluster ID as a number from 1 to 4294967295.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
When a BGP cluster contains only one route reflector, the cluster ID is the route reflector’s router ID.
For redundancy, a BGP cluster may contain two or more route reflectors and you assign a cluster ID with the
command. Without a cluster ID, the route reflector cannot recognize route updates from the other route reflectors within the cluster.
The default format for displaying the cluster-id is dotted decimal, but if you enter the cluster-id as an integer, it will be displayed as an integer.
Border Gateway Protocol IPv4(BGPv4) | 267
Related
Commands
Command
History
bgp client-to-client reflection
neighbor route-reflector-client
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Enable route reflection between route reflector and clients.
Configure a route reflector and clients.
View paths with a cluster ID.
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series bgp confederation identifier c e s Configure an identifier for a BGP confederation.
Syntax bgp confederation identifier as-number
To delete a BGP confederation identifier, use the no bgp confederation identifier as-number command.
Parameters as-number Enter the AS number.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
You must configure your system to accept 4-Byte formats before entering a 4-Byte AS Number. All the routers in the Confederation must be 4 or 2-Byte identified routers. You cannot mix them.
The autonomous systems configured in this command are visible to the EBGP neighbors. Each autonomous system is fully meshed and contains a few connections to other autonomous systems. The next hop, MED, and local preference information is preserved throughout the confederation.
FTOS accepts confederation EBGP peers without a LOCAL_PREF attribute. The software sends
AS_CONFED_SET and accepts AS_CONFED_SET and AS_CONF_SEQ.
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Enable 4-Byte support for the BGP process.
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Added support for 4-Byte format
268 | Border Gateway Protocol IPv4(BGPv4)
bgp confederation peers c e s Specify the Autonomous Systems (ASs) that belong to the BGP confederation.
Syntax bgp confederation peers as-number [ ...as-number ]
To return to the default, enter no bgp confederation peers .
Parameters as-number
...as-number
Enter the AS number.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)
(OPTIONAL) Enter up to 16 confederation numbers.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
All the routers in the Confederation must be 4 or 2 byte identified routers. You cannot mix them.
The Autonomous Systems configured in this command are visible to the EBGP neighbors. Each
Autonomous System is fully meshed and contains a few connections to other Autonomous Systems.
After specifying autonomous systems numbers for the BGP confederation, recycle the peers to update their configuration.
Related
Commands
Configure a confederation ID.
Enable 4-byte support for the BGP process.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Added support for 4-byte format bgp dampening c e s Enable BGP route dampening and configure the dampening parameters.
Syntax bgp dampening [ half-life reuse suppress max-suppress-time ] [ route-map map-name ]
To disable route dampening, use the no bgp dampening [ half-life reuse suppress max-suppress-time ] [ route-map map-name ] command.
Border Gateway Protocol IPv4(BGPv4) | 269
Parameters
Defaults
Command Modes
Usage
Information
Related
Commands
Command
History half-life reuse suppress max-suppress-tim e route-map map-name
(OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half after the half-life period expires.
Range: 1 to 45.
Default: 15 minutes
(OPTIONAL) Enter a number as the reuse value, which is compared to the flapping route’s Penalty value. If the Penalty value is less than the reuse value, the flapping route is once again advertised (or no longer suppressed).
Range: 1 to 20000.
Default: 750
(OPTIONAL) Enter a number as the suppress value, which is compared to the flapping route’s Penalty value. If the Penalty value is greater than the suppress value, the flapping route is no longer advertised (that is, it is suppressed).
Range: 1 to 20000.
Default: 2000
(OPTIONAL) Enter the maximum number of minutes a route can be suppressed. The default is four times the half-life value.
Range: 1 to 255.
Default: 60 minutes.
(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.
Only match commands in the configured route map are supported.
Disabled.
ROUTER-BGP-ADDRESS FAMILY
If you enter bgp dampening , the default values for half-life , reuse , suppress , and max-suppress-time are applied. The parameters are position-dependent, therefore, if you configure one parameter, you must configure the parameters in the order they appear in the CLI.
View the BGP paths
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series bgp default local-preference c e s Change the default local preference value for routes exchanged between internal BGP peers.
Syntax bgp default local-preference value
To return to the default value, enter no bgp default local-preference .
270 | Border Gateway Protocol IPv4(BGPv4)
Parameters
Defaults
Command Modes
Usage
Information
Related
Commands
Command
History value Enter a number to assign to routes as the degree of preference for those routes. When routes are compared, the higher the degree of preference or local preference value, the more the route is preferred.
Range: 0 to 4294967295
Default: 100
100
ROUTER BGP
The bgp default local-preference
command setting is applied by all routers within the AS. To set the
local preference for a specific route, use the set local-preference command in the ROUTE-MAP mode.
Assign a local preference value for a specific route.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced on C-Series bgp enforce-first-as c e s Disable (or enable) enforce-first-as check for updates received from EBGP peers.
Syntax bgp enforce-first-as
To turn off the default, use the no bgp enforce-first-as command.
Defaults Enabled
Command Modes ROUTER BGP
Usage
Information
This is enabled by default, that is for all updates received from EBGP peers, BGP ensures that the first
AS of the first AS segment is always the AS of the peer. If not, the update is dropped and a counter is
incremented. Use the show ip bgp neighbors
command to view the “failed enforce-first-as check counter.
Related
Commands
If enforce-first-as is disabled, it can be viewed via the show ip protocols
command.
View the information exchanged by BGP neighbors
View Information on routing protocols.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support for C-Series
Introduced
Border Gateway Protocol IPv4(BGPv4) | 271
bgp fast-external-fallover c e s Enable the fast external fallover feature, which immediately resets the BGP session if a link to a directly connected external peer fails.
Syntax bgp fast-external-fallover
To disable fast external fallover, enter no bgp fast-external-fallover .
Defaults Enabled.
Command Modes ROUTER BGP
Usage
Information
Command
History
The bgp fast-external-fallover
command appears in the
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support for C-Series bgp four-octet-as-support c e s Enable 4-byte support for the BGP process.
Syntax bgp four-octet-as-support
Defaults
Command Modes
Usage
Information
To disable fast external fallover, enter no bgp four-octet-as-support .
Disabled (supports 2-Byte format)
ROUTER BGP
Routers supporting 4-Byte ASNs advertise that function in the OPEN message. The behavior of a
4-Byte router will be slightly different depending on whether it is speaking to a 2-Byte router or a
4-Byte router.
When creating Confederations, all the routers in the Confederation must be 4 or 2 byte identified routers. You cannot mix them.
Where the 2-Byte format is 1-65535, the 4-Byte format is 1-4294967295. Both formats are accepted, and the advertisements will reflect the entered format.
For more information about using the 2 or 4-Byte format, refer to the FTOS Configuration Guide .
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced command
Introduced support on C-Series
272 | Border Gateway Protocol IPv4(BGPv4)
bgp graceful-restart c e s Enable graceful restart on a BGP neighbor, a BGP node, or designate a local router to support graceful restart as a receiver only.
Syntax bgp graceful-restart [ restart-time seconds ] [ stale-path-time seconds ] [ role receiver-only ]
To return to the default, enter the no bgp graceful-restart command.
Parameters restart-time seconds stale-path-time seconds role receiver-only
Enter the keyword restart-time followed by the maximum number of seconds needed to restart and bring-up all the peers.
Range: 1 to 3600 seconds
Default: 120 seconds
Enter the keyword stale-path-time followed by the maximum number of seconds to wait before restarting a peer’s stale paths.
Default: 360 seconds.
Enter the keyword role receiver-only to designate the local router to support graceful restart as a receiver only.
Defaults
Command Modes
Usage
Information as above
ROUTER-BGP
This feature is advertised to BGP neighbors through a capability advertisement. In receiver only mode,
BGP saves the advertised routes of peers that support this capability when they restart.
BGP graceful restart is active only when the neighbor becomes established. Otherwise it is disabled.
Graceful-restart applies to all neighbors with established adjacency.
Command
History
Version 8.3.3.4
Version 7.8.1.0
Version 7.7.1.0
Introduced on S60
Introduced support on S-Series
Introduced support on C-Series bgp log-neighbor-changes c e s Enable logging of BGP neighbor resets.
Syntax bgp log-neighbor-changes
To disable logging, enter no bgp log-neighbor-changes .
Defaults Enabled.
Command Modes ROUTER BGP
Usage
Information
Use the
command in the EXEC mode to view BGP neighbor resets.
command appears in the
command output.
Related
Commands
View logging settings and system messages logged to the system.
Border Gateway Protocol IPv4(BGPv4) | 273
Command
History
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series
Introduced support on C-Series bgp non-deterministic-med c e s Compare MEDs of paths from different Autonomous Systems.
Syntax bgp non-deterministic-med
To return to the default, enter no bgp non-deterministic-med .
Defaults Disabled (that is, paths/routes for the same destination but from different ASs will not have their MEDs compared).
Command Modes ROUTER BGP
Usage
Information
In non-deterministic mode, paths are compared in the order in which they arrive. This method can lead to FTOS choosing different best paths from a set of paths, depending on the order in which they are received from the neighbors since MED may or may not get compared between adjacent paths. In deterministic mode ( no bgp non-deterministic-med) , FTOS compares MED between adjacent paths within an AS group since all paths in the AS group are from the same AS.
When you change the path selection from deterministic to non-deterministic, the path selection for
existing paths remains deterministic until you enter clear ip bgp
command to clear existing paths.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series bgp recursive-bgp-next-hop c e s Enable next-hop resolution through other routes learned by BGP.
Syntax bgp recursive-bgp-next-hop
Defaults
Command Modes
Usage
Information
Related
Commands
To disable next-hop resolution, use the no bgp recursive-bgp-next-hop command.
Enabled
ROUTER BGP
This command is a knob to disable BGP next-hop resolution via BGP learned routes. During the next-hop resolution, only the first route that the next-hop resolves through is verified for the route’s protocol source and is checked if the route is learned from BGP or not.
The clear ip bgp command is required for this command to take effect and to keep the BGP database consistent. Execute the clear ip bgp command right after executing this command.
Description.
274 | Border Gateway Protocol IPv4(BGPv4)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.2.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced bgp regex-eval-optz-disable c e s Disables the Regex Performance engine that optimizes complex regular expression with BGP.
Syntax bgp regex-eval-optz-disable
Defaults
Command Modes
Usage
Information
To re-enable optimization engine, use the no bgp regex-eval-optz-disable command.
Enabled by default
ROUTER BGP (conf-router_bgp)
BGP uses regular expressions (regex) to filter route information. In particular, the use of regular expressions to filter routes based on AS-PATHs and communities is quite common. In a large scale configuration, filtering millions of routes based on regular expressions can be quite CPU intensive, as a regular expression evaluation involves generation and evaluation of complex finite state machines.
BGP policies, containing regular expressions to match as-path and communities, tend to use a lot of
CPU processing time, which in turn affects the BGP routing convergence. Additionally, the show bgp commands, which are filtered through regular expressions, use up CPU cycles particularly with large databases. The Regex Engine Performance Enhancement feature optimizes the CPU usage by caching and reusing regular expression evaluation results. This caching and reuse may be at the expensive of
RP1 processor memory.
View information on all routing protocols enabled and active on the E-Series.
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced
Border Gateway Protocol IPv4(BGPv4) | 275
Example Figure 7-2.
Command Example: no bgp regex-eval-optz-disable
FTOS(conf-router_bgp)#no bgp regex-eval-optz-disable
FTOS(conf-router_bgp)#do show ip protocols
Routing Protocol is "ospf 22222"
Router ID is 2.2.2.2
Area Routing for Networks
51 10.10.10.0/00
Routing Protocol is "bgp 1"
Cluster Id is set to 10.10.10.0
Router Id is set to 10.10.10.0
Fast-external-fallover enabled
Regular expression evaluation optimization enabled
Capable of ROUTE_REFRESH
For Address Family IPv4 Unicast
BGP table version is 0, main routing table version 0
Distance: external 20 internal 200 local 200
FTOS(conf-router_bgp)# bgp router-id c e s Assign a user-given ID to a BGP router.
Syntax bgp router-id ip-address
To delete a user-assigned IP address, enter no bgp router-id .
Parameters ip-address Enter an IP address in dotted decimal format to reset only that BGP neighbor.
Defaults
Command Modes
Usage
Information
Command
History
The router ID is the highest IP address of the Loopback interface or, if no Loopback interfaces are configured, the highest IP address of a physical interface on the router.
ROUTER BGP
Peering sessions are reset when you change the router ID of a BGP router.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series bgp soft-reconfig-backup c e s Use this command only when route-refresh is not negotiated to avoid the peer from resending messages.
Syntax bgp soft-reconfig-backup
To return to the default setting, use the no bgp soft-reconfig-backup command.
Defaults
Command Modes
Off
ROUTER BGP
276 | Border Gateway Protocol IPv4(BGPv4)
Usage
Information
When soft-reconfiguration is enabled for a neighbor and the clear ip bgp soft in is executed, the update database stored in the router is replayed and updates are reevaluated. With this command, the replay and update process is triggered only if route-refresh request is not negotiated with the peer. If the request is indeed negotiated (upon execution of clear ip bgp soft in ), then BGP sends a route-refresh request to the neighbor and receives all of the peer’s updates.
Note: This command is supported in BGP Router Configuration mode for IPv4 Unicast address only.
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.2.1.0
Activate inbound policies without resetting the BGP TCP session.
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced capture bgp-pdu neighbor c e s Enable capture of an IPv4 BGP neighbor packet.
Syntax capture bgp-pdu neighbor ipv4-address direction { both | rx | tx }
To disable capture of the IPv4 BGP neighbor packet, use the no capture bgp-pdu neighbor ipv4-address command.
Parameters ipv4-address direction { both | rx | tx }
Enter the IPv4 address of the target BGP neighbor.
Enter the keyword direction and a direction— either rx for inbound, tx for outbound, or both .
Defaults
Command Modes
Related
Commands
Not configured.
EXEC Privilege
capture bgp-pdu max-buffer-size
Specify a size for the capture buffer.
Display BGP packet capture information
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced
Border Gateway Protocol IPv4(BGPv4) | 277
capture bgp-pdu max-buffer-size c e s Set the size of the BGP packet capture buffer. This buffer size pertains to both IPv4 and IPv6 addresses.
Syntax capture bgp-pdu max-buffer-size 100-102400000
Parameters
100-102400000 Enter a size for the capture buffer.
Defaults
Command Modes
Related
Commands
40960000 bytes.
EXEC Privilege
capture bgp-pdu neighbor capture bgp-pdu neighbor
Enable capture of an IPv4 BGP neighbor packet.
Enable capture of an IPv6 BGP neighbor packet.
Display BGP packet capture information for an IPv6 address on the
E-Series.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced clear ip bgp c e s Reset BGP sessions on the E-Series. The soft parameter (BGP Soft Reconfiguration) clears the policies without resetting the TCP connection.
Syntax
Parameters clear ip bgp * | as-number | ip-address [ flap-statistics | soft [ in | out ]]
* as-number ip-address flap-statistics soft in out
Enter an asterisk ( * ) to reset all BGP sessions.
Enter the AS number to reset all neighbors belonging to that AS.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)
Enter an IP address in dotted decimal format to reset all prefixes from that neighbor.
(OPTIONAL) Enter the keyword flap-statistics to reset the flap statistics on all prefixes from that neighbor.
(OPTIONAL) Enter the keyword soft to configure and activate policies without resetting the BGP TCP session, that is, BGP Soft Reconfiguration.
Note: If you enter clear ip bgp ip-address soft , both inbound and outbound policies are reset.
(OPTIONAL) Enter the keyword in to activate only inbound policies.
(OPTIONAL) Enter the keyword out to activate only outbound policies.
Command Modes EXEC Privilege
278 | Border Gateway Protocol IPv4(BGPv4)
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 6.5.1.0
Disable next-hop resolution through other routes learned by BGP
Turn on BGP Soft Reconfiguration
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Expanded to include the as-number option clear ip bgp peer-group c e s Reset a peer-group’s BGP sessions.
Syntax
Parameters clear ip bgp peer-group peer-group-name peer-group-name Enter the peer group name to reset the BGP sessions within that peer group.
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series clear ip bgp dampening c e s Clear information on route dampening and return suppressed route to active state.
Syntax clear ip bgp dampening [ ip-address mask ]
Parameters ip-address mask (OPTIONAL) Enter an IP address in dotted decimal format and the prefix mask in slash format (/x) to clear dampening information only that BGP neighbor.
Command Modes
Usage
Information
EXEC Privilege
After you enter this command, the software deletes history routes and returns suppressed routes to active state.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Border Gateway Protocol IPv4(BGPv4) | 279
clear ip bgp flap-statistics c e s Clear BGP flap statistics, which includes number of flaps and the time of the last flap.
Syntax clear ip bgp flap-statistics [ ip-address mask | filter-list as-path-name | regexp regular-expression ]
Parameters ip-address mask filter-list as-path-name regexp regular-expression
(OPTIONAL) Enter an IP address in dotted decimal format and the prefix mask in slash format (/x) to reset only that prefix.
(OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH list.
(OPTIONAL) Enter the keyword regexp followed by regular expressions. Use one or a combination of the following:
• .
= (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ?
= (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.
• $ = (dollar sign) the end of the output string.
Command Modes EXEC Privilege
If you enter
clear ip bgp flap-statistics without any parameters, all statistics are cleared.
Usage
Information
Related
Commands
View enabled debugging operations.
View BGP flap statistics.
Disable all debugging operations.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series debug ip bgp c e s Display all information on BGP, including BGP events, keepalives, notifications, and updates.
Syntax debug ip bgp [ ip-address | peer-group peer-group-name ] [ in | out ]
To disable all BGP debugging, enter no debug ip bgp .
280 | Border Gateway Protocol IPv4(BGPv4)
Parameters
Command Modes
Usage
Information ip-address peer-group peer-group-name in
Enter the IP address of the neighbor in dotted decimal format.
Enter the keyword peer-group followed by the name of the peer group.
out
(OPTIONAL) Enter the keyword in to view only information on inbound BGP routes.
(OPTIONAL) Enter the keyword out to view only information on outbound
BGP routes.
EXEC Privilege
To view information on both incoming and outgoing routes, do not include the in and out parameters in the debugging command. The in and out parameters cancel each other; for example, if you enter debug ip bgp in and then enter debug ip bgp out , you will not see information on the incoming routes.
Entering a no
command removes all configured debug commands for BGP.
Related
Commands
debug ip bgp events debug ip bgp keepalives
View information about BGP events.
View information about BGP keepalives.
View information about BGP notifications.
View information about BGP updates.
View enabled debugging operations.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series debug ip bgp dampening c e s Display information on routes being dampened.
Syntax debug ip bgp dampening [ in | out ]
To disable debugging, enter no debug ip bgp dampening .
Parameters in out
(OPTIONAL) Enter the keyword in to view only inbound dampened routes.
(OPTIONAL) Enter the keyword out to view only outbound dampened routes.
Command Modes
Usage
Information
Related
Commands
EXEC Privilege
Enter no
debug ip bgp command to remove all configured debug commands for BGP.
View enabled debugging operations.
View BGP dampened routes.
Border Gateway Protocol IPv4(BGPv4) | 281
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series debug ip bgp events c e s Display information on local BGP state changes and other BGP events.
Syntax debug ip bgp [ ip-address | peer-group peer-group-name ] events [ in | out ]
To disable debugging, use the no debug ip bgp [ ip-address | peer-group peer-group-name ] events command.
Parameters ip-address peer-group peer-group-name in out
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the keyword peer-group followed by the name of the peer group.
(OPTIONAL) Enter the keyword in to view only events on inbound BGP messages.
(OPTIONAL) Enter the keyword out to view only events on outbound BGP messages.
Command Modes EXEC Privilege
Enter no
debug ip bgp command to remove all configured debug commands for BGP.
Usage
Information
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series debug ip bgp keepalives c e s Display information about BGP keepalive messages.
Syntax debug ip bgp [ ip-address | peer-group peer-group-name ] keepalives [ in | out ]
To disable debugging, use the no debug ip bgp [ ip-address | peer-group peer-group-name ] keepalives [ in | out ] command.
Parameters ip-address peer-group peer-group-name in out
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the keyword peer-group followed by the name of the peer group.
(OPTIONAL) Enter the keyword in to view only inbound keepalive messages.
(OPTIONAL) Enter the keyword out to view only outbound keepalive messages.
Command Modes EXEC Privilege
282 | Border Gateway Protocol IPv4(BGPv4)
Usage
Information
Command
History
Enter no
debug ip bgp command to remove all configured debug commands for BGP.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series debug ip bgp notifications c e s Enables you to view information about BGP notifications received from neighbors.
Syntax debug ip bgp [ ip-address | peer-group peer-group-name ] notifications [ in | out ]
To disable debugging, use the no debug ip bgp [ ip-address | peer-group peer-group-name ] notifications [ in | out ] command.
Parameters ip-address peer-group peer-group-name in out
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the keyword peer-group followed by the name of the peer group.
(OPTIONAL) Enter the keyword in to view BGP notifications received from neighbors.
(OPTIONAL) Enter the keyword out to view BGP notifications sent to neighbors.
Command Modes EXEC Privilege
Enter no
debug ip bgp command to remove all configured debug commands for BGP.
Usage
Information
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series debug ip bgp soft-reconfiguration c e s Enable soft-reconfiguration debug.
Syntax debug ip bgp { ip-address | peer-group-name } soft-reconfiguration
To disable, use the no debug ip bgp { ip-address | peer-group-name } soft-reconfiguration command.
Parameters ip-address peer-group-name
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group.
Defaults Disabled
Border Gateway Protocol IPv4(BGPv4) | 283
Command Modes
Usage
Information
Command
History
EXEC Privilege
This command turns on BGP soft-reconfiguration inbound debugging. If no neighbor is specified, debug is turned on for all neighbors.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.2.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced debug ip bgp updates c e s Enables you to view information about BGP updates.
Syntax debug ip bgp updates [ in | out | prefix-list prefix-list-name ]
To disable debugging, use the no debug ip bgp [ ip-address | peer-group peer-group-name ] updates [ in | out ] command.
Parameters in out prefix-list prefix-list-name ip-address peer-group-name
(OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors.
(OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors.
(OPTIONAL) Enter the keyword prefix-list followed by the name of an established prefix list. If the prefix list is not configured, the default is permit (to allow all routes).
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the name of the peer group to disable or enable all routers within the peer group.
Command Modes EXEC Privilege
Enter no
debug ip bgp command to remove all configured debug commands for BGP.
Usage
Information
Command
History
Version 8.3.3.1
Version 7.7.1
Introduced on the S60.
Introduced support on C-Series default-metric c e s Enables you to change the metrics of redistributed routes to locally originated routes. Use this command with the
command.
Syntax default-metric number
To return to the default setting, enter no default-metric .
284 | Border Gateway Protocol IPv4(BGPv4)
Parameters
Defaults
Command Modes
Usage
Information
Related
Commands number Enter a number as the metric to be assigned to routes from other protocols.
Range: 1 to 4294967295.
0
ROUTER BGP
command in BGP sets the value of the BGP MULTI_EXIT_DISC (MED) attribute for redistributed routes only.
Enable comparison of all BGP MED attributes.
Redistribute routes from other routing protocols into BGP.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series description c e s Enter a description of the BGP routing protocol
Syntax description { description }
Parameters
To remove the description, use the no description { description } command.
description Enter a description to identify the BGP protocol (80 characters maximum).
Defaults
Command Modes
Command
History
Related
Commands
No default behavior or values
ROUTER BGP
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
pre-7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced
Enter ROUTER mode on the switch.
distance bgp c e s Configure three administrative distances for routes.
Syntax distance bgp external-distance internal-distance local-distance
To return to default values, enter no distance bgp .
Border Gateway Protocol IPv4(BGPv4) | 285
Parameters
Defaults
Command Modes external-distance internal-distance local-distance
Enter a number to assign to routes learned from a neighbor external to the AS.
Range: 1 to 255.
Default: 20
Enter a number to assign to routes learned from a router within the AS.
Range: 1 to 255.
Default: 200
Enter a number to assign to routes learned from networks listed in the
command.
Range: 1 to 255.
Default: 200 external-distance = 20; internal-distance = 200; local-distance = 200.
ROUTER BGP
Caution: Dell Networking recommends that you do not change the administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies.
Usage
Information
The higher the administrative distance assigned to a route means that your confidence in that route is low. Routes assigned an administrative distance of 255 are not installed in the routing table. Routes from confederations are treated as internal BGP routes.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series maximum-paths c e s Configure the maximum number of parallel routes (multipath support) BGP supports.
Syntax maximum-paths { ebgp | ibgp } number
Parameters
To return to the default values, enter no maximum-paths .
ebgp ibgp number
Enter the keyword
Enter the keyword ebgp to enable multipath support for External BGP routes.
ibgp to enable multipath support for Internal BGP routes.
Enter a number as the maximum number of parallel paths.
Range: 1 to 16
Default: 1
Defaults
Command Modes
Usage
Information
1
ROUTER BGP
If you enable this command, use the
clear ip bgp * command to recompute the best path.
286 | Border Gateway Protocol IPv4(BGPv4)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor activate c e s This command allows the specified neighbor/peer group to be enabled for the current AFI/SAFI
(Address Family Identifier/Subsequent Address Family Identifier).
Syntax neighbor [ ip-address | peer-group-name ] activate
Parameters
To disable, use the no neighbor [ ip-address | peer-group-name ] activate command.
ip-address (OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
peer-group-name (OPTIONAL) Enter the name of the peer group activate Enter to enable the neighbor/peer group in the new
AFI/SAFI.
Defaults
Command Modes
Usage
Information
Disabled
CONFIGURATION-ROUTER-BGP-ADDRESS FAMILY
By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv4/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor advertisement-interval c e s Set the advertisement interval between BGP neighbors or within a BGP peer group.
Syntax neighbor { ip-address | peer-group-name } advertisement-interval seconds
Parameters
To return to the default value, use the no neighbor { ip-address | peer-group-name } advertisement-interval command.
ip-address peer-group-name seconds
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
Enter a number as the time interval, in seconds, between BGP advertisements.
Range: 0 to 600 seconds.
Default: 5 seconds for internal BGP peers; 30 seconds for external BGP peers.
Defaults seconds = 5 seconds (internal peers); seconds = 30 seconds (external peers)
Border Gateway Protocol IPv4(BGPv4) | 287
Command Modes
Command
History
ROUTER BGP
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor advertisement-start c e s Set the minimum interval before starting to send BGP routing updates.
Syntax neighbor { ip-address } advertisement-start seconds
To return to the default value, use the no neighbor { ip-address } advertisement-start command.
Parameters ip-address seconds
Enter the IP address of the neighbor in dotted decimal format.
Enter a number as the time interval, in seconds, before BGP route updates are sent.
Range: 0 to 3600 seconds.
Defaults
Command Modes
Command
History none
ROUTER BGP
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor allowas-in c e s Set the number of times an AS number can occur in the AS path
Syntax neighbor { ip-address | peer-group-name } allowas-in number
To return to the default value, use the no neighbor { ip-address | peer-group-name } allowas-in command.
Parameters ip-address peer-group-name number
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
Enter a number of times to allow this neighbor ID to use the AS path.
Range: 1 to 10.
Defaults
Command Modes
Related
Commands
Not configured.
ROUTER BGP
Enable 4-Byte support for the BGP process.
288 | Border Gateway Protocol IPv4(BGPv4)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced on C-Series and E-Series neighbor default-originate c e s Inject the default route to a BGP peer or neighbor.
Syntax neighbor { ip-address | peer-group-name } default-originate [ route-map map-name ]
To remove a default route, use the no neighbor { ip-address | peer-group-name } default-originate command.
Parameters ip-address Enter the IP address of the neighbor in dotted decimal format.
peer-group-name Enter the name of the peer group to set the default route of all routers in that peer group.
route-map map-name (OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
If you apply a route map to a BGP peer or neighbor with the neighbor default-originate command
configured, the software does not apply the set filters in the route map to that BGP peer or neighbor.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor description c e s Assign a character string describing the neighbor or group of neighbors (peer group).
Syntax neighbor { ip-address | peer-group-name } description text
To delete a description, use the no neighbor { ip-address | peer-group-name } description command.
Parameters ip-address peer-group-name text
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group.
Enter a continuous text string up to 80 characters.
Defaults
Command Modes
Not configured.
ROUTER BGP
Border Gateway Protocol IPv4(BGPv4) | 289
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor distribute-list c e s Distribute BGP information via an established prefix list.
Syntax neighbor { ip-address | peer-group-name } distribute-list prefix-list-name { in | out }
To delete a neighbor distribution list, use the no neighbor { ip-address | peer-group-name } distribute-list prefix-list-name { in | out } command.
Parameters ip-address peer-group-name prefix-list-name in out
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to apply the distribute list filter to all routers in the peer group.
Enter the name of an established prefix list.
If the prefix list is not configured, the default is permit (to allow all routes).
Enter the keyword in to distribute only inbound traffic.
Enter the keyword out to distribute only outbound traffic.
Defaults
Command Modes
Usage
Information
Related
Commands
Not configured.
ROUTER BGP
Other BGP filtering commands include:
,
.
Configure IP AS-Path ACL.
Assign a AS-PATH list to a neighbor or peer group.
Assign a route map to a neighbor or peer group.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor ebgp-multihop c e s Attempt and accept BGP connections to external peers on networks that are not directly connected.
Syntax neighbor { ip-address | peer-group-name } ebgp-multihop [ ttl ]
To disallow and disconnect connections, use the no neighbor { ip-address | peer-group-name } ebgp-multihop command.
290 | Border Gateway Protocol IPv4(BGPv4)
Parameters
Defaults
Command Modes
Usage
Information
Command
History ip-address peer-group-name ttl
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group.
(OPTIONAL) Enter the number of hops as the Time to Live (ttl) value.
Range: 1 to 255.
Default: 255
Disabled.
ROUTER BGP
To prevent loops, the
neighbor ebgp-multihop command will not install default routes of the multihop
peer. Networks not directly connected are not considered valid for best path selection.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor fall-over e c s Enable or disable fast fall-over for BGP neighbors.
Syntax neighbor { ipv4-address | peer-group-name } fall-over
Parameters
To disable, use the no neighbor { ipv4-address | peer-group-name } fall-over command.
ipv4-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group.
Defaults
Command Modes
Usage
Information
Related
Commands
Command
History
Disabled
ROUTER BGP
When fall-over is enabled, BGP keeps track of IP or IPv6 reachability to the peer remote address and the peer local address. Whenever either address becomes unreachable (i.e, no active route exists in the routing table for peer IP or IPv6 destination/local address), BGP brings down the session with the peer.
Display information on the BGP neighbors
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced
Border Gateway Protocol IPv4(BGPv4) | 291
neighbor filter-list c e s Configure a BGP filter based on the AS-PATH attribute.
Syntax neighbor { ip-address | peer-group-name } filter-list as-path-name { in | out }
To delete a BGP filter, use the no neighbor { ip-address | peer-group-name } filter-list as-path-name { in | out } command.
Parameters ip-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to apply the filter to all routers in the peer group.
as-path-name Enter the name of an established AS-PATH access list (up to 140 characters).
If the AS-PATH access list is not configured, the default is permit (allow routes).
in Enter out Enter the keyword out to filter outbound BGP routes.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
Use the ip as-path access-list
command syntax in the CONFIGURATION mode to enter the AS-PATH
ACL mode and configure AS-PATH filters to deny or permit BGP routes based on information in their
AS-PATH attribute.
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Enter AS-PATH ACL mode and configure AS-PATH filters.
Introduced on the S60.
Introduced support on S-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, ACL names are up to 16 characters long.
Introduced support on C-Series neighbor graceful-restart c e s Enable graceful restart on a BGP neighbor.
Syntax neighbor { ip-address | peer-group-name } graceful-restart [ restart-time seconds ]
[ stale-path-time seconds ] [ role receiver-only ]
Parameters
To return to the default, enter the no bgp graceful-restart command.
ip-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to apply the filter to all routers in the peer group.
292 | Border Gateway Protocol IPv4(BGPv4)
Defaults
Command Modes
Usage
Information
Command
History restart-time seconds stale-path-time seconds role receiver-only
Enter the keyword restart-time followed by the maximum number of seconds needed to restart and bring-up all the peers.
Range: 1 to 3600 seconds
Default: 120 seconds
Enter the keyword stale-path-time followed by the maximum number of seconds to wait before restarting a peer’s stale paths.
Default: 360 seconds.
Enter the keyword role receiver-only to designate the local router to support graceful restart as a receiver only.
as above
ROUTER BGP
This feature is advertised to BGP neighbors through a capability advertisement. In receiver only mode,
BGP saves the advertised routes of peers that support this capability when they restart.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor local-as c e s Configure Internal BGP (IBGP) routers to accept external routes from neighbors with a local AS number in the AS number path
Syntax neighbor { ip-address | peer-group-name } local-as as number [no-prepend]
Parameters
To return to the default value, use the no neighbor { ip-address | peer-group-name } local-as command.
ip-address peer-group-name as-number no prepend
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
Enter the AS number to reset all neighbors belonging to that AS.
Range: 0-65535 (2-Byte) or
1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)
Specifies that local AS values are not prepended to announcements from the neighbor.
Defaults
Command Modes
Not configured.
ROUTER BGP
Related
Commands
Enable 4-Byte support for the BGP process.
Border Gateway Protocol IPv4(BGPv4) | 293
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced command
Introduced support on C-Series neighbor maximum-prefix c e s Control the number of network prefixes received.
Syntax neighbor { ip-address | peer-group-name } maximum-prefix maximum [ threshold ]
[ warning-only ]
To return to the default values, use the no neighbor { ip-address | peer-group-name } maximum-prefix maximum command.
Parameters ip-address peer-group-name maximum threshold warning-only
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group.
Enter a number as the maximum number of prefixes allowed for this BGP router.
Range: 1 to 4294967295.
(OPTIONAL) Enter a number to be used as a percentage of the maximum value.
When the number of prefixes reaches this percentage of the maximum value, the
E-Series software sends a message.
Range: 1 to 100 percent.
Default: 75
(OPTIONAL) Enter the keyword warning-only to set the router to send a log message when the maximum value is reached. If this parameter is not set, the router stops peering when the maximum number of prefixes is reached.
Defaults
Command Modes
Usage
Information threshold = 75
ROUTER BGP
If the neighbor maximum-prefix
is configured and the neighbor receives more prefixes than allowed by
command configuration, the neighbor goes down and the
summary command displays (prfxd) in the State/PfxRcd column for that neighbor. The neighbor
neighbor belongs or you enter
and neighbor no shutdown commands.
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Displays the current BGP configuration.
294 | Border Gateway Protocol IPv4(BGPv4)
neighbor next-hop-self c e s Enables you to configure the router as the next hop for a BGP neighbor. (This command is used for
IBGP).
Syntax neighbor { ip-address | peer-group-name } next-hop-self
To return to the default setting, use the no neighbor { ip-address | peer-group-name } next-hop-self command.
Parameters ip-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group.
Defaults
Command Modes
Usage
Information
Disabled.
ROUTER BGP
If the set next-hop command in the ROUTE-MAP mode is configured, its configuration takes
precedence over the neighbor next-hop-self
command.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor password c e s Enable Message Digest 5 (MD5) authentication on the TCP connection between two neighbors.
Syntax neighbor { ip-address | peer-group-name } password [ encryption-type ] password
To delete a password, use the no neighbor { ip-address | peer-group-name } password command.
Parameters ip-address peer-group-name encryption-type password
Enter the IP address of the router to be included in the peer group.
Enter the name of a configured peer group.
(OPTIONAL) Enter 7 as the encryption type for the password entered. 7 means that the password is encrypted and hidden.
Enter a text string up to 80 characters long. The first character of the password must be a letter.
You cannot use spaces in the password.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
Configure the same password on both BGP peers or a connection does not occur. When you configure
MD5 authentication between two BGP peers, each segment of the TCP connection between them is verified and the MD5 digest is checked on every segment sent on the TCP connection.
Configuring a password for a neighbor will cause an existing session to be torn down and a new one established.
Border Gateway Protocol IPv4(BGPv4) | 295
Command
History
If you specify a BGP peer group by using the peer-group-name parameter, all the members of the peer group will inherit the characteristic configured with this command.
If you configure a password on one neighbor, but you have not configured a password for the neighboring router, the following message appears on the console while the routers attempt to establish a BGP session between them:
%RPM0-P:RP1 %KERN-6-INT: No BGP MD5 from [peer's IP address]
:179 to [local router's IP address]:65524
Also, if you configure different passwords on the two routers, the following message appears on the console:
%RPM0-P:RP1 %KERN-6-INT: BGP MD5 password mismatch from
[peer's IP address] : 11502 to [local router's IP address] :179
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor peer-group (assigning peers) c e s Enables you to assign one peer to a existing peer group.
Syntax neighbor ip-address peer-group peer-group-name
To delete a peer from a peer group, use the no neighbor ip-address peer-group peer-group-name command.
Parameters ip-address peer-group-name
Enter the IP address of the router to be included in the peer group.
Enter the name of a configured peer group.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
You can assign up to 256 peers to one peer group.
When you add a peer to a peer group, it inherits all the peer group’s configured parameters. A peer cannot become part of a peer group if any of the following commands are configured on the peer:
•
neighbor advertisement-interval
•
out
•
out
•
•
out
•
neighbor route-reflector-client
•
296 | Border Gateway Protocol IPv4(BGPv4)
A neighbor may keep its configuration after it was added to a peer group if the neighbor’s configuration is more specific than the peer group’s, and the neighbor’s configuration does not affect outgoing updates.
A peer group must exist before you add a peer to it. If the peer group is disabled (shutdown) the peers within the group are also disabled (shutdown).
Related
Commands
neighbor peer-group (creating group)
Resets BGP sessions.
Create a peer group.
View BGP peers.
View BGP neighbors configurations.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor peer-group (creating group) c e s Enables you to create a peer group and assign it a name.
Syntax neighbor peer-group-name peer-group
To delete a peer group, use the no neighbor peer-group-name peer-group command.
Parameters peer-group-name Enter a text string up to 16 characters long as the name of the peer group.
Defaults
Command Modes
Usage
Information
Related
Commands
Not configured.
ROUTER BGP
When a peer group is created, it is disabled (shut mode).
neighbor peer-group (assigning peers)
Assign routers to a peer group.
Assign a indirectly connected AS to a neighbor or peer group.
Disable a peer or peer group.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor peer-group passive c e s Enable passive peering on a BGP peer group, that is, the peer group does not send an OPEN message, but will respond to one.
Syntax neighbor peer-group-name peer-group passive
Border Gateway Protocol IPv4(BGPv4) | 297
To delete a passive peer-group, use the no neighbor peer-group-name peer-group passive command.
Parameters
Defaults
Command Modes
Usage
Information
Related
Commands
Command
History peer-group-name Enter a text string up to 16 characters long as the name of the peer group.
Not configured.
ROUTER BGP
After you configure a peer group as passive, you must assign it a subnet using the
neighbor soft-reconfiguration inbound
command.
neighbor soft-reconfiguration inbound
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Assign a subnet to a dynamically-configured BGP neighbor.
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor remote-as c e s Create and specify the remote peer to the BGP neighbor.
Syntax neighbor { ip-address | peer-group-name } remote-as number
To delete a remote AS entry, use the no neighbor { ip-address | peer-group-name } remote-as number command.
Parameters ip-address peer-group-name number
Enter the IP address of the neighbor to enter the remote AS in its routing table.
Enter the name of the peer group to enter the remote AS into routing tables of all routers within the peer group.
Enter a number of the AS.
Range: 0-65535 (2-Byte) or 1-4294967295 (4-Byte)
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
You must configure your system to accept 4-Byte formats before entering a 4-Byte AS Number. If the number
parameter is the same as the AS number used in the router bgp
command, the remote AS entry in the neighbor is considered an internal BGP peer entry.
This command creates a peer and the newly created peer is disabled (shutdown).
Related
Commands
Enter the ROUTER BGP mode and configure routes in an AS.
Enable 4-Byte support for the BGP process.
Command
History
Version 8.3.3.1
Introduced on the S60.
298 | Border Gateway Protocol IPv4(BGPv4)
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series
Introduced support on C-Series
Added 4-Byte support.
neighbor remove-private-as c e s Remove private AS numbers from the AS-PATH of outgoing updates.
Syntax neighbor { ip-address | peer-group-name } remove-private-as
To return to the default, use the no neighbor { ip-address | peer-group-name } remove-private-as command.
Parameters ip-address peer-group-name
Enter the IP address of the neighbor to remove the private AS numbers.
Enter the name of the peer group to remove the private AS numbers
Defaults
Command Modes
Usage
Information
Disabled (that is, private AS number are not removed).
ROUTER BGP
Applies to EBGP neighbors only.
You must configure your system to accept 4-Byte formats before entering a 4-Byte AS Number.
If the AS-PATH contains both public and private AS number or contains AS numbers of an EBGP neighbor, the private AS numbers are not removed.
If a confederation contains private AS numbers in its AS-PATH, the software removes the private AS numbers only if they follow the confederation numbers in the AS path.
Private AS numbers are 64512 to 65535 (2-Byte).
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Added 4-Byte support.
neighbor route-map c e s Apply an established route map to either incoming or outbound routes of a BGP neighbor or peer group.
Syntax neighbor { ip-address | peer-group-name } route-map map-name { in | out }
To remove the route map, use the no neighbor { ip-address | peer-group-name } route-map map-name { in | out } command.
Border Gateway Protocol IPv4(BGPv4) | 299
Parameters
Defaults
Command Modes
Usage
Information ip-address peer-group-name map-name in out
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group.
Enter the name of an established route map.
If the Route map is not configured, the default is deny (to drop all routes).
Enter the keyword in to filter inbound routes.
Enter the keyword out to filter outbound routes.
Not configured.
ROUTER BGP
When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted.
If you identify a peer group by name, the peers in that peer group inherit the characteristics in the
Route map used in this command. If you identify a peer by IP address, the Route map overwrites either the inbound or outbound policies on that peer.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor route-reflector-client c e s Configure a neighbor as a member of a route reflector cluster.
Syntax neighbor { ip-address | peer-group-name } route-reflector-client
To indicate that the neighbor is not a route reflector client or to delete a route reflector configuration, use the no neighbor { ip-address | peer-group-name } route-reflector-client command.
Parameters ip-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group.
All routers in the peer group receive routes from a route reflector.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
The first time you enter this command it configures the neighbor as a route reflector and members of the route-reflector cluster. Internal BGP (IBGP) speakers do not need to be fully meshed if you configure a route reflector.
When all clients of a route reflector are disabled, the neighbor is no longer a route reflector.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
300 | Border Gateway Protocol IPv4(BGPv4)
neighbor send-community c e s Send a COMMUNITY attribute to a BGP neighbor or peer group. A COMMUNITY attribute indicates that all routes with that attribute belong to the same community grouping.
Syntax neighbor { ip-address | peer-group-name } send-community
To disable sending a COMMUNITY attribute, use the no neighbor { ip-address | peer-group-name } send-community command.
Parameters ip-address peer-group-name
Enter the IP address of the peer router in dotted decimal format.
Enter the name of the peer group to send a COMMUNITY attribute to all routers within the peer group.
Defaults
Command Modes
Usage
Information
Command
History
Not configured and COMMUNITY attributes are not sent to neighbors.
ROUTER BGP
To configure a COMMUNITY attribute, use the set community
command in the ROUTE-MAP mode.
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor shutdown c e s Disable a BGP neighbor or peer group.
Syntax neighbor { ip-address | peer-group-name } shutdown
To enable a disabled neighbor or peer group, use the neighbor { ip-address | peer-group-name } no shutdown command.
Parameters ip-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to disable or enable all routers within the peer group.
Defaults
Command Modes
Usage
Information
Enabled (that is, BGP neighbors and peer groups are disabled.)
ROUTER BGP
Peers that are enabled within a peer group are disabled when their peer group is disabled.
The neighbor shutdown command terminates all BGP sessions on the BGP neighbor or BGP peer
group. Use this command with caution as it terminates the specified BGP sessions. When a neighbor or peer group is shutdown, use the
to confirm its status.
Related
Commands
Displays the current BGP configuration.
Displays the current BGP neighbors.
Border Gateway Protocol IPv4(BGPv4) | 301
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor soft-reconfiguration inbound c e s Enable soft-reconfiguration for BGP.
Syntax neighbor { ip-address | peer-group-name } soft-reconfiguration inbound
To disable, use the no neighbor { ip-address | peer-group-name } soft-reconfiguration inbound command.
Parameters ip-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to disable or enable all routers within the peer group.
Defaults
Command Modes
Usage
Information
Disabled
ROUTER BGP
This command enables soft-reconfiguration for the BGP neighbor specified. BGP will store all the updates received by the neighbor but will not reset the peer-session.
Caution: Inbound update storage is a memory-intensive operation. The entire BGP update database from the neighbor is stored in memory regardless of the inbound policy results applied on the neighbor.
Note: This command is supported in BGP Router Configuration mode for IPv4 Unicast address only.
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.4.1.0
Display routes received by a neighbor
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced neighbor subnet c e s Enable passive peering so that the members of the peer group are dynamic
Syntax neighbor peer-group-name subnet subnet-number mask
To remove passive peering, use the no neighbor peer-group-name subnet subnet-number mask command.
302 | Border Gateway Protocol IPv4(BGPv4)
Parameters subnet-number Enter a subnet number in dotted decimal format (A.B.C.D.) as the allowable range of addresses included in the Peer group.
To allow all addresses, enter 0.0.0.0/0.
Enter a prefix mask in / prefix-length format (/x).
Defaults
Command Modes
Command
History mask
Not configured.
ROUTER BGP
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series
Introduced support on C-Series neighbor timers c e s Set keepalive and hold time timers for a BGP neighbor or a peer group.
Syntax neighbor { ip-address | peer-group-name } timers keepalive holdtime
To return to the default values, use the no neighbor { ip-address | peer-group-name } timers command.
Parameters ip-address peer-group-name keepalive holdtime
Enter the IP address of the peer router in dotted decimal format.
Enter the name of the peer group to set the timers for all routers within the peer group.
Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers.
Range: 1 to 65535
Default: 60 seconds
Enter a number for the time interval, in seconds, between the last keepalive message and declaring the router dead.
Range: 3 to 65535
Default: 180 seconds
Defaults
Command Modes
Usage
Information keepalive = 60 seconds; holdtime = 180 seconds.
ROUTER BGP
Timer values configured with the neighbor timers command override the timer values configured with
the any other command.
When two neighbors, configured with different keepalive and holdtime values, negotiate for new values, the resulting values will be as follows:
• the lower of the holdtime values is the new holdtime value, and
• whichever is the lower value; one-third of the new holdtime value, or the configured keepalive value is the new keepalive value.
Command
History
Version 8.3.3.1
Introduced on the S60.
Border Gateway Protocol IPv4(BGPv4) | 303
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series
Introduced support on C-Series neighbor update-source c e s Enable the E-Series software to use Loopback interfaces for TCP connections for BGP sessions.
Syntax neighbor { ip-address | peer-group-name } update-source interface
To use the closest interface, use the no neighbor { ip-address | peer-group-name } update-source interface command.
Parameters ip-address peer-group-name interface
Enter the IP address of the peer router in dotted decimal format.
Enter the name of the peer group to disable all routers within the peer group.
Enter the keyword loopback followed by a number of the loopback interface.
Range: 0 to 16383.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
Loopback interfaces are up constantly and the BGP session may need one interface constantly up to
stabilize the session. The neighbor update-source
command is not necessary for directly connected internal BGP sessions.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series neighbor weight c e s Assign a weight to the neighbor connection, which is used to determine the best path.
Syntax neighbor { ip-address | peer-group-name } weight weight
To remove a weight value, use the no neighbor { ip-address | peer-group-name } weight command.
Parameters ip-address peer-group-name weight
Enter the IP address of the peer router in dotted decimal format.
Enter the name of the peer group to disable all routers within the peer group.
Enter a number as the weight.
Range: 0 to 65535
Default: 0
Defaults
Command Modes
0
ROUTER BGP
304 | Border Gateway Protocol IPv4(BGPv4)
Usage
Information
In the FTOS best path selection process, the path with the highest weight value is preferred.
Note:
Reset the neighbor connection ( clear ip bgp
* command) to apply the weight to the connection and recompute the best path.
command is configured in a route map applied to this neighbor, the weight set in that
command overrides the weight set in the neighbor weight
command.
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Assign a weight to all paths meeting the route map criteria.
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series network c e s Specify the networks for the BGP process and enter them in the BGP routing table.
Syntax network ip-address mask [ route-map map-name ]
Parameters
To remove a network, use the no network ip-address mask [ route-map map-name ] command.
ip-address mask route-map map-name
Enter an IP address in dotted decimal format of the network.
Enter the mask of the IP address in the slash prefix length format (for example, /24).
The mask appears in command outputs in dotted decimal format (A.B.C.D).
(OPTIONAL) Enter the keyword route-map followed by the name of an established route map.
Only the following ROUTE-MAP mode commands are supported:
•
•
•
•
•
•
•
If the route map is not configured, the default is deny (to drop all routes).
Defaults
Command Modes
Usage
Information
Related
Commands
Not configured.
ROUTER BGP
FTOS software resolves the network address configured by the network
command with the routes in the main routing table to ensure that the networks are reachable via non-BGP routes and non-default routes.
Redistribute routes into BGP.
Border Gateway Protocol IPv4(BGPv4) | 305
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series network backdoor c e s Specify this IGP route as the preferred route.
Syntax network ip-address mask backdoor
To remove a network, use the no network ip-address mask backdoor command.
Parameters ip-address mask
Enter an IP address in dotted decimal format of the network.
Enter the mask of the IP address in the slash prefix length format (for example, /24).
The mask appears in command outputs in dotted decimal format (A.B.C.D).
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP
Though FTOS does not generate a route due to backdoor config, there is an option for injecting/ sourcing a local route in presence of network backdoor config on a learned route.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series redistribute c e s Redistribute routes into BGP.
Syntax redistribute { connected | static } [ route-map map-name ]
To disable redistribution, use the no redistribution { connected | static } command.
Parameters connected Enter the keyword connected to redistribute routes from physically connected interfaces.
306 | Border Gateway Protocol IPv4(BGPv4)
Defaults
Command Modes
Usage
Information static route-map map-name
Enter the keyword static to redistribute manually configured routes.
These routes are treated as incomplete routes.
(OPTIONAL) Enter the keyword route-map followed by the name of an established route map.
Only the following ROUTE-MAP mode commands are supported:
•
•
•
•
•
•
•
If the route map is not configured, the default is deny (to drop all routes).
Not configured.
ROUTER BGP
With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the IGP cost as the MED on redistributed routes . When the route-map is set with metric-type internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-group will have IGP cost set as MED.
If you do not configure default-metric
command, in addition to the redistribute command, or there is no
route map to set the metric, the metric for redistributed static and connected is “0”.
To redistribute the default route (0.0.0.0/0) configure the
neighbor default-originate command.
Related
Commands
Command
History
Version 8.3.3.1
Version 8.3.1.0
Version 7.8.1.0
Version 7.7.1.0
Inject the default route.
Introduced on the S60.
Introduced ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal.
Introduced support on S-Series
Introduced support on C-Series redistribute isis e Redistribute IS-IS routes into BGP.
Syntax redistribute isis [ WORD ] [ level-1 | level-1-2 | level-2 ] [ metric metric-value ] [ route-map map-name ]
To return to the default values, enter the no redistribute isis [ WORD ] [ level-1 | level-1-2 | level-2 ]
[ metric metric-value ] [ route-map map-name ] command.
Border Gateway Protocol IPv4(BGPv4) | 307
Parameters
Defaults
Command Modes
Example
WORD level-1 level-1-2 level-2 metric metric-value route-map map-name
ISO routing area tag
(OPTIONAL) Enter the keyword level-1 to independently redistributed into
Level 1 routes only.
(OPTIONAL) Enter the keyword level-1-2 to independently redistributed into Level 1 and Level 2 routes. This is the default.
(OPTIONAL) Enter the keyword level-2 to independently redistributed into
Level 2 routes only
(OPTIONAL) Enter the keyword metric followed by the metric value used for the redistributed route. Use a metric value that is consistent with the destination protocol.
Range: 0 to 16777215
Default: 0
Enter the keyword route-map followed by the map name that is an identifier for a configured route map.
The route map should filter imported routes from the source routing protocol to the current routing protocol.
If you do not specify a map-name, all routes are redistributed. If you specify a keyword, but fail to list route map tags, no routes will be imported.
level-1-2
ROUTER BGP
Figure 7-3.
Command Example: redistribute isis
FTOS(conf)#router bgp 1
FTOS(conf-router_bgp)#redistribute isis level-1 metric 44 route-map rmap-is2bgp
FTOS(conf-router_bgp)#show running-config bgp
!
router bgp 1 redistribute isis level-1 metric 44 route-map rmap-is2bgp
Usage
Information
With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the IGP cost as the MED on redistributed routes . When the route-map is set with metric-type internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-group will have IGP cost set as MED.
IS-IS to BGP redistribution supports matching of level-1 or level-2 routes or all routes (default). More advanced match options can be performed using route maps. The metric value of redistributed routes can be set by the redistribution command.
Command
History
Version 8.3.1.0
Version 6.3.1.0
Introduced ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal.
Introduced redistribute ospf c e s Redistribute OSPF routes into BGP.
Syntax redistribute ospf process-id [[ match external { 1 | 2 }] [ match internal ]] [ route-map map-name ]
308 | Border Gateway Protocol IPv4(BGPv4)
To stop redistribution of OSPF routes, use the no redistribute ospf process-id command.
Parameters
Defaults
Command Modes
Usage
Information process-id match external match internal route-map
{ 1 | 2 } map-name
Enter the number of the OSPF process.
Range: 1 to 65535
(OPTIONAL) Enter the keywords match external to redistribute OSPF external routes. You can specify 1 or 2 to redistribute those routes only.
(OPTIONAL) Enter the keywords match internal to redistribute OSPF internal routes only.
(OPTIONAL) Enter the keywords route-map followed by the name of a configured Route map.
Not configured.
ROUTER BGP
With FTOS version 8.3.1.0 and later, the redistribute command can be used to advertise the IGP cost as the MED on redistributed routes . When the route-map is set with metric-type internal and applied outbound to an EBGP peer/peer-group, the advertised routes corresponding to those peer/peer-group will have IGP cost set as MED.
When you enter
process-id command without any other parameters, FTOS redistributes all OSPF internal routes, external type 1 routes, and external type 2 routes. This feature is not supported by an RFC.
Command
History
Version 8.3.3.1
Version 8.3.1.0
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced ability to substitute IGP cost for MED when a peer/peer-group outbound route-map is set as internal.
Introduced support on S-Series
Introduced support on C-Series router bgp c e s Enter ROUTER BGP mode to configure and enable BGP.
Syntax router bgp as-number
To disable BGP, use the no router bgp as-number command.
Parameters as-number Enter the AS number.
Range: 1 to 65535 (2-Byte) or 1-4294967295 (4-Byte) or
0.1-65535.65535 (Dotted format)
Defaults
Command Modes
Not enabled.
CONFIGURATION
Border Gateway Protocol IPv4(BGPv4) | 309
Example Figure 7-4.
Command Example: router bgp
FTOS(conf)#router bgp 3
FTOS(conf-router_bgp)#
Command
History
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
At least one interface must be in Layer 3 mode for the router bgp command to be accepted. If no interfaces are enabled for Layer 3, an error message appears: % Error: No router id configured .
show capture bgp-pdu neighbor c e s Display BGP packet capture information for an IPv4 address on the system.
Syntax show capture bgp-pdu neighbor ipv4-address
Parameters ipv4-address Enter the IPv4 address (in dotted decimal format) of the BGP address to display packet information for that address.
Command Modes
Example
EXEC Privilege
Figure 7-5.
Command Example: show capture bgp-pdu neighbor
FTOS(conf-router_bgp)#show capture bgp-pdu neighbor 20.20.20.2
Incoming packet capture enabled for BGP neighbor 20.20.20.2
Available buffer size 40958758, 26 packet(s) captured using 680 bytes
PDU[1] : len 101, captured 00:34:51 ago
ffffffff ffffffff ffffffff ffffffff 00650100 00000013 00000000
00000000 419ef06c 00000000
00000000 00000000 00000000 00000000 0181a1e4 0181a25c 41af92c0
00000000 00000000 00000000
00000000 00000001 0181a1e4 0181a25c 41af9400 00000000
PDU[2] : len 19, captured 00:34:51 ago
ffffffff ffffffff ffffffff ffffffff 00130400
PDU[3] : len 19, captured 00:34:51 ago
ffffffff ffffffff ffffffff ffffffff 00130400
[. . .]
Outgoing packet capture enabled for BGP neighbor 20.20.20.2
Available buffer size 40958758, 27 packet(s) captured using 562 bytes
PDU[1] : len 41, captured 00:34:52 ago
ffffffff ffffffff ffffffff ffffffff 00290104 000100b4 14141401
0c020a01 04000100 01020080
00000000
PDU[2] : len 19, captured 00:34:51 ago
ffffffff ffffffff ffffffff ffffffff 00130400
PDU[3] : len 19, captured 00:34:50 ago
ffffffff ffffffff ffffffff ffffffff 00130400
[. . .]
FTOS#
Related
Commands
capture bgp-pdu max-buffer-size
Specify a size for the capture buffer.
310 | Border Gateway Protocol IPv4(BGPv4)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced show config c e s View the current ROUTER BGP configuration.
Syntax show config
Command Modes
Example
ROUTER BGP
Figure 7-6.
Command Example: show config
FTOS(conf-router_bgp)#show confi
!
router bgp 45
neighbor suzanne peer-group
neighbor suzanne no shutdown
neighbor sara peer-group
neighbor sara shutdown
neighbor 13.14.15.20 peer-group suzanne
neighbor 13.14.15.20 shutdown
neighbor 123.34.55.123 peer-group suzanne
neighbor 123.34.55.123 shutdown
FTOS(conf-router_bgp)#
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp c e s View the current BGP IPv4 routing table for the system.
Syntax show ip bgp [ipv4 unicast] [ network [ network-mask ] [ longer-prefixes ]]
Parameters ipv4 unicast network network-mask longer-prefixes
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
(OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network.
(OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address.
(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
Command Modes EXEC
EXEC Privilege
Border Gateway Protocol IPv4(BGPv4) | 311
Usage
Information
Example
When you enable bgp non-deterministic-med command, the show ip bgp command output for a
BGP route does not list the INACTIVE reason.
Figure 7-7.
Command Example: show ip bgp (Partial)
FTOS>show ip bgp
BGP table version is 847562, local router ID is 63.114.8.131
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 0.0.0.0/0 63.114.8.33 0 18508 i
* 3.0.0.0/8 63.114.8.33 0 18508 209 701 80 i
*> 63.114.8.33 0 18508 701 80 i
*> 3.3.0.0/16 0.0.0.0 22 32768 ?
63.114.8.35 0 18508 ?
*> 4.0.0.0/8 63.114.8.33 0 18508 701 1 i
*> 4.2.49.12/30 63.114.8.33 0 18508 209 i
* 4.17.250.0/24 63.114.8.33 0 18508 209 1239 13716 i
*> 63.114.8.33 0 18508 701 1239 13716 i
* 4.21.132.0/23 63.114.8.33 0 18508 209 6461 16422 i
*> 63.114.8.33 0 18508 701 6461 16422 i
*> 4.24.118.16/30 63.114.8.33 0 18508 209 i
*> 4.24.145.0/30 63.114.8.33 0 18508 209 i
*> 4.24.187.12/30 63.114.8.33 0 18508 209 i
*> 4.24.202.0/30 63.114.8.33 0 18508 209 i
*> 4.25.88.0/30 63.114.8.33 0 18508 209 3561 3908 i
*> 5.0.0.0/9 63.114.8.33 0 0 18508 ?
*> 5.0.0.0/10 63.114.8.33 0 0 18508 ?
*> 5.0.0.0/11 63.114.8.33 0 0 18508 ?
--More--
Table 7-1 defines the information displayed in Figure 7-7
Table 7-1.
Command Example Fields: show ip bgp
Field
Network
Next Hop
Metric
LocPrf
Weight
Path
Description
Displays the destination network prefix of each BGP route.
Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Displays the BGP route’s metric, if assigned.
Displays the BGP LOCAL_PREF attribute for the route.
Displays the route’s weight
Lists all the ASs the route passed through to reach the destination network.
Related
Commands
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
View BGP communities.
Control number of network prefixes received.
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
312 | Border Gateway Protocol IPv4(BGPv4)
show ip bgp cluster-list c e s View BGP neighbors in a specific cluster.
Syntax show ip bgp [ipv4 unicast] cluster-list [ cluster-id ]
Parameters ipv4 unicast cluster-id
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
(OPTIONAL) Enter the cluster id in dotted decimal format.
Command Modes
Example
EXEC
EXEC Privilege
Figure 7-8.
Command Example: show ip bgp cluster-list (Partial)
FTOS#show ip bgp cluster-list
BGP table version is 64444683, local router ID is 120.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n
- network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* I 10.10.10.1/32 192.68.16.1 0 100 0 i
* I 192.68.16.1 0 100 0 i
*>I 192.68.16.1 0 100 0 i
* I 192.68.16.1 0 100 0 i
* I 192.68.16.1 0 100 0 i
* I 192.68.16.1 0 100 0 i
* I 10.19.75.5/32 192.68.16.1 0 100 0 ?
* I 192.68.16.1 0 100 0 ?
*>I 192.68.16.1 0 100 0 ?
* I 192.68.16.1 0 100 0 ?
* I 192.68.16.1 0 100 0 ?
* I 192.68.16.1 0 100 0 ?
* I 10.30.1.0/24 192.68.16.1 0 100 0 ?
* I 192.68.16.1 0 100 0 ?
*>I 192.68.16.1 0 100 0 ?
* I 192.68.16.1 0 100 0 ?
* I 192.68.16.1 0 100 0 ?
* I 192.68.16.1 0 100 0 ?
Table 7-2 defines the information displayed in Figure 7-8
.
Table 7-2.
show ip bgp cluster-list Command Fields
Field
Network
Next Hop
Metric
LocPrf
Weight
Path
Description
Displays the destination network prefix of each BGP route.
Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Displays the BGP route’s metric, if assigned.
Displays the BGP LOCAL_PREF attribute for the route.
Displays the route’s weight
Lists all the ASs the route passed through to reach the destination network.
Border Gateway Protocol IPv4(BGPv4) | 313
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp community c e s View information on all routes with Community attributes or view specific BGP community groups.
Syntax show ip bgp [ ipv4 unicast] community [ community-number ] [ local-as ] [ no-export ]
[ no-advertise ]
Parameters ipv4 unicast community-number local-AS no-advertise no-export
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
You can specify up to eight community numbers to view information on those community groups.
Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
Enter the keywords no-advertise to view all routes containing the well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers.
Enter the keywords no-export to view all routes containing the well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
Command Modes
Usage
Information
EXEC
EXEC Privilege
To view the total number of COMMUNITY attributes found, use the
The text line above the route table states the number of COMMUNITY attributes found.
314 | Border Gateway Protocol IPv4(BGPv4)
Example Figure 7-9.
Command Example: show ip bgp community (Partial)
FTOS>show ip bgp community
BGP table version is 3762622, local router ID is 63.114.8.48
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* i 3.0.0.0/8 205.171.0.16 100 0 209 701 80 i
*>i 4.2.49.12/30 205.171.0.16 100 0 209 i
* i 4.21.132.0/23 205.171.0.16 100 0 209 6461 16422 i
*>i 4.24.118.16/30 205.171.0.16 100 0 209 i
*>i 4.24.145.0/30 205.171.0.16 100 0 209 i
*>i 4.24.187.12/30 205.171.0.16 100 0 209 i
*>i 4.24.202.0/30 205.171.0.16 100 0 209 i
*>i 4.25.88.0/30 205.171.0.16 100 0 209 3561 3908 i
*>i 6.1.0.0/16 205.171.0.16 100 0 209 7170 1455 i
*>i 6.2.0.0/22 205.171.0.16 100 0 209 7170 1455 i
*>i 6.3.0.0/18 205.171.0.16 100 0 209 7170 1455 i
*>i 6.4.0.0/16 205.171.0.16 100 0 209 7170 1455 i
*>i 6.5.0.0/19 205.171.0.16 100 0 209 7170 1455 i
*>i 6.8.0.0/20 205.171.0.16 100 0 209 7170 1455 i
*>i 6.9.0.0/20 205.171.0.16 100 0 209 7170 1455 i
*>i 6.10.0.0/15 205.171.0.16 100 0 209 7170 1455 i
*>i 6.14.0.0/15 205.171.0.16 100 0 209 7170 1455 i
*>i 6.133.0.0/21 205.171.0.16 100 0 209 7170 1455 i
*>i 6.151.0.0/16 205.171.0.16 100 0 209 7170 1455 i
--More--
The show ip bgp community command without any parameters lists BGP routes with at least one BGP
community attribute and the output is the same as for the
Table 7-3.
Command Example Fields: show ip bgp community
Field
Network
Next Hop
Metric
LocPrf
Weight
Path
Description
Displays the destination network prefix of each BGP route.
Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Displays the BGP route’s metric, if assigned.
Displays the BGP LOCAL_PREF attribute for the route.
Displays the route’s weight
Lists all the ASs the route passed through to reach the destination network.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp community-list c e s View routes that are affected by a specific community list.
Syntax show ip bgp [ ipv4 unicast] community-list community-list-name [ exact-match ]
Border Gateway Protocol IPv4(BGPv4) | 315
Parameters
Command Modes
Example ipv4 unicast community-list-name exact-match
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
Enter the name of a configured IP community list. (max 16 chars)
Enter the keyword for an exact match of the communities.
EXEC
EXEC Privilege
Figure 7-10.
Command Example: show ip bgp community-list
FTOS#show ip bgp community-list pass
BGP table version is 0, local router ID is 10.101.15.13
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
FTOS#
The show ip bgp community-list
command without any parameters lists BGP routes matching the
Community List and the output is the same as for the show ip bgp command output.
Table 7-4.
Command Example Fields: show ip bgp community-list
Field
Network
Next Hop
Metric
LocPrf
Weight
Path
Description
Displays the destination network prefix of each BGP route.
Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Displays the BGP route’s metric, if assigned.
Displays the BGP LOCAL_PREF attribute for the route.
Displays the route’s weight
Lists all the ASs the route passed through to reach the destination network.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp dampened-paths c e s View BGP routes that are dampened (non-active).
Syntax show ip bgp [ipv4 unicast] dampened-paths
Command Modes EXEC
EXEC Privilege
316 | Border Gateway Protocol IPv4(BGPv4)
Example Figure 7-11.
Command Example: show ip bgp dampened-paths
FTOS>show ip bgp damp
BGP table version is 210708, local router ID is 63.114.8.2
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network From Reuse Path
FTOS>
Table 7-5 defines the information displayed in Figure 7-11
.
Table 7-5.
Command Example: show ip bgp dampened-paths
Field
Network
From
Reuse
Path
Description
Displays the network ID to which the route is dampened.
Displays the IP address of the neighbor advertising the dampened route.
Displays the hour:minutes:seconds until the dampened route is available.
Lists all the ASs the dampened route passed through to reach the destination network.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp detail c e s Display BGP internal information for IPv4 Unicast address family.
Syntax show ip bgp [ipv4 unicast] detail
Defaults none
Command Modes EXEC
EXEC Privilege
Border Gateway Protocol IPv4(BGPv4) | 317
Example Figure 7-12.
Command Example: show ip bgp detail
R2#show ip bgp detail
Detail information for BGP Node bgpNdP 0x41a17000 : NdTmrP 0x41a17000 : NdKATmrP 0x41a17014 : NdTics 74857 :
NhLocAS 1 : NdState 2 : NdRPMPrim 1 : NdListSoc 13
NdAuto 1 : NdEqCost 1 : NdSync 0 : NdDefOrg 0
NdV6ListSoc 14 NdDefDid 0 : NdConfedId 0 : NdMedConfed 0 : NdMedMissVal -1 :
NdIgnrIllId 0 : NdRRC2C 1 : NdClstId 33686273 : NdPaTblP 0x41a19088
NdASPTblP 0x41a19090 : NdCommTblP 0x41a19098 : NhOptTransTblP 0x41a190a0 :
NdRRClsTblP 0x41a190a8
NdPktPA 0 : NdLocCBP 0x41a6f000 : NdTmpPAP 0x419efc80 : NdTmpASPAP 0x41a25000 :
NdTmpCommP 0x41a25800
NdTmpRRClP 0x41a4b000 : NdTmpOptP 0x41a4b800 : NdTmpNHP : NdOrigPAP 0
NdOrgNHP 0 : NdModPathP 0x419efcc0 : NdModASPAP 0x41a4c000 : NdModCommP 0x41a4c800
NdModOptP 0x41a4d000 : NdModNHP : NdComSortBufP 0x41a19110 : NdComSortHdP
0x41a19d04 : NdUpdAFMsk 0 : AFRstSet 0x41a1a298 : NHopDfrdHdP 0x41a1a3e0 :
NumNhDfrd 0 : CfgHdrAFMsk 1
AFChkNetTmrP 0x41ee705c : AFRtDamp 0 : AlwysCmpMed 0 : LocrHld 10 : LocrRem 10 : softReconfig 0x41a1a58c
DefMet 0 : AutoSumm 1 : NhopsP 0x41a0d100 : Starts 0 : Stops 0 : Opens 0
Closes 0 : Fails 0 : Fatals 0 : ConnExps 0 : HldExps 0 : KeepExps 0
RxOpens 0 : RxKeeps 0 : RxUpds 0 : RxNotifs 0 : TxUpds 0 : TxNotifs 0
BadEvts 0 : SynFails 0 : RxeCodeP 0x41a1b6b8 : RxHdrCodeP 0x41a1b6d4 : RxOpCodeP
0x41a1b6e4
RxUpdCodeP 0x41a1b704 : TxEcodeP 0x41a1b734 : TxHdrcodeP 0x41a1b750 : TxOpCodeP
0x41a1b760
TxUpdCodeP 0x41a1b780 : TrEvt 0 : LocPref 100 : tmpPathP 0x41a1b7b8 : LogNbrChgs 1
RecursiveNH 1 : PgCfgId 0 : KeepAlive 0 : HldTime 0 : DioHdl 0 : AggrValTmrP
0x41ee7024
UpdNetTmrP 0 : RedistTmrP 0x41ee7094 : PeerChgTmrP 0 : CleanRibTmrP 0x41ee7104
PeerUpdTmrP 0x41ee70cc : DfrdNHTmrP 0x41ee7174 : DfrdRtselTmrP 0x41ee713c :
FastExtFallover 1 : FastIntFallover 0 : Enforce1stAS 1
PeerIdBitsP 0x41967120 : softOutSz 16 : RibUpdCtxCBP 0
UpdPeerCtxCBP 0 : UpdPeerCtxAFI 0 : TcpioCtxCB 0 : RedistBlk 1
NextCBPurg 1101119536 : NumPeerToPurge 0 : PeerIBGPCnt 0 : NonDet 0 : DfrdPathSel 0
BGPRst 0 : NumGrCfg 1 : DfrdTmestmp 0 : SnmpTrps 0 : IgnrBestPthASP 0
RstOn 1 : RstMod 1 : RstRole 2 : AFFalgs 7 : RstInt 120 : MaxeorExtInt 361
FixedPartCrt 1 : VarParCrt 1
Packet Capture max allowed length 40960000 : current length 0
Peer Grp List
Nbr List
Confed Peer List
Address Family specific Information
AFIndex 0
NdSpFlag 0x41a190b0 : AFRttP 0x41a0d200 : NdRTMMkrP 0x41a19d28 : NdRTMAFTblVer 0 :
NdRibCtxAddr 1101110688
NdRibCtxAddrLen 255 : NdAFPrefix 0 : NdAfNLRIP 0 : NdAFNLRILen 0 : NdAFWPtrP 0
NdAFWLen 0 : NdAfNH : NdAFRedRttP 0x41a0d400 : NdRecCtxAdd 1101110868
NdRedCtxAddrLen 255 : NdAfRedMkrP 0x41a19e88 : AFAggRttP 0x41a0d600 : AfAggCtxAddr
1101111028 : AfAggrCtxAddrLen 255
AfNumAggrPfx 0 : AfNumAggrASSet 0 : AfNumSuppmap 0 : AfNumAggrValidPfx 0 :
AfMPathRttP 0x41a0d700
MpathCtxAddr 1101111140 : MpathCtxAddrlen 255 : AfEorSet 0x41a19f98 : NumDfrdPfx 0
AfActPeerHd 0x41a1a3a4 : AfExtDist 1101112312 : AfIntDist 200 : AfLocDist 200
AfNumRRc 0 : AfRR 0 : AfNetRttP 0x41a0d300 : AfNetCtxAddr 1101112392 :
AfNetCtxAddrlen 255
AfNwCtxAddr 1101112443 : AfNwCtxAddrlen 255 : AfNetBKDrRttP 0x41a0d500 :
AfNetBKDRCnt 0 : AfDampHLife 0
AfDampReuse 0 : AfDampSupp 0 : AfDampMaxHld 0 : AfDampCeiling 0 : AfDampRmapP
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced
318 | Border Gateway Protocol IPv4(BGPv4)
show ip bgp extcommunity-list c e s View information on all routes with Extended Community attributes.
Syntax show ip bgp [ ipv4 unicast] extcommunity-list [ list name ]
Parameters ipv4 unicast list name
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
Enter the extended community list name you wish to view.
Command Modes
Usage
Information
EXEC
EXEC Privilege
To view the total number of COMMUNITY attributes found, use the
The text line above the route table states the number of COMMUNITY attributes found.
The show ip bgp community command without any parameters lists BGP routes with at least one BGP
community attribute and the output is the same as for the
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp filter-list c e s View the routes that match the filter lists.
Syntax show ip bgp [ ipv4 unicast] filter-list as-path-name
Parameters ipv4 unicast as-path-name
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
Enter the name of an AS-PATH.
Command Modes EXEC
EXEC Privilege
Border Gateway Protocol IPv4(BGPv4) | 319
Example Figure 7-13.
Command Example: show ip bgp filter-list
FTOS#show ip bgp filter-list hello
BGP table version is 80227, local router ID is 120.1.1.1
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* I 6.1.5.0/24 192.100.11.2 20000 9999 0 ?
* I 192.100.8.2 20000 9999 0 ?
* I 192.100.9.2 20000 9999 0 ?
* I 192.100.10.2 20000 9999 0 ?
*>I 6.1.5.1 20000 9999 0 ?
* I 6.1.6.1 20000 9999 0 ?
* I 6.1.20.1 20000 9999 0 ?
* I 6.1.6.0/24 192.100.11.2 20000 9999 0 ?
* I 192.100.8.2 20000 9999 0 ?
* I 192.100.9.2 20000 9999 0 ?
* I 192.100.10.2 20000 9999 0 ?
*>I 6.1.5.1 20000 9999 0 ?
* I 6.1.6.1 20000 9999 0 ?
* I 6.1.20.1 20000 9999 0 ?
* I 6.1.20.0/24 192.100.11.2 20000 9999 0 ?
* I 192.100.8.2 20000 9999 0 ?
* I 192.100.9.2 20000 9999 0 ?
* I 192.100.10.2 20000 9999 0 ?
FTOS#
Table 7-6 defines the information displayed in Figure 7-13 .
Table 7-6.
Command Example Fields: show ip bgp filter-list
Field
Path source codes
Next Hop
Metric
LocPrf
Weight
Path
Description
Lists the path sources shown to the right of the last AS number in the
Path column:
• i = internal route entry
• a = aggregate route entry
• c = external confederation route entry
• n = network route entry
• r = redistributed route entry
Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Displays the BGP route’s metric, if assigned.
Displays the BGP LOCAL_PREF attribute for the route.
Displays the route’s weight
Lists all the ASs the route passed through to reach the destination network.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
320 | Border Gateway Protocol IPv4(BGPv4)
show ip bgp flap-statistics c e s View flap statistics on BGP routes.
Syntax show ip bgp [ ipv4 unicast] flap-statistics [ ip-address [ mask ]] [ filter-list as-path-name ]
[ regexp regular-expression ]
Parameters ipv4 unicast ip-address mask
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
(OPTIONAL) Enter the IP address (in dotted decimal format) of the BGP network to view information only on that network.
(OPTIONAL) Enter the network mask (in slash prefix (/x) format) of the
BGP network address.
filter-list as-path-name (OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH ACL.
regexp regular-expression Enter a regular expression then use one or a combination of the following characters to match:
• .
= (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ?
= (question mark) sequences in a pattern (either 0 or 1 sequences).
You must enter an escape sequence (CTRL+v) prior to entering the
? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.
• $ = (dollar sign) the end of the output string.
Command Modes EXEC
EXEC Privilege
Example Figure 7-14.
Command Example: show ip bgp flap-statistics
FTOS>show ip bgp flap
BGP table version is 210851, local router ID is 63.114.8.2
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network From Flaps Duration Reuse Path
FTOS>
Border Gateway Protocol IPv4(BGPv4) | 321
defines the information displayed in Figure 7-14 .
Table 7-7.
Command Example Fields: show ip bgp flap-statistics
Field
Network
From
Flaps
Duration
Reuse
Path
Description
Displays the network ID to which the route is flapping.
Displays the IP address of the neighbor advertising the flapping route.
Displays the number of times the route flapped.
Displays the hours:minutes:seconds since the route first flapped.
Displays the hours:minutes:seconds until the flapped route is available.
Lists all the ASs the flapping route passed through to reach the destination network.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp inconsistent-as c e s View routes with inconsistent originating Autonomous System (AS) numbers, that is, prefixes that are announced from the same neighbor AS but with a different AS-Path.
Syntax show ip bgp [ipv4 unicast] inconsistent-as
Command Modes EXEC
Example
EXEC Privilege
Figure 7-15.
Command Example: show ip bgp inconsistent-as (Partial)
FTOS>show ip bgp inconsistent-as
BGP table version is 280852, local router ID is 10.1.2.100
Status codes: s suppressed, d damped, h history, * valid, > best
Path source: I - internal, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* 3.0.0.0/8 63.114.8.33 0 18508 209 7018 80 i
* 63.114.8.34 0 18508 209 7018 80 i
* 63.114.8.60 0 18508 209 7018 80 i
*> 63.114.8.33 0 18508 701 80 i
*> 3.18.135.0/24 63.114.8.60 0 18508 209 7018 ?
* 63.114.8.34 0 18508 209 7018 ?
* 63.114.8.33 0 18508 701 7018 ?
* 63.114.8.33 0 18508 209 7018 ?
*> 4.0.0.0/8 63.114.8.60 0 18508 209 1 i
* 63.114.8.34 0 18508 209 1 i
* 63.114.8.33 0 18508 701 1 i
* 63.114.8.33 0 18508 209 1 i
* 6.0.0.0/20 63.114.8.60 0 18508 209 3549 i
* 63.114.8.34 0 18508 209 3549 i
*> 63.114.8.33 0 0 18508 ?
* 63.114.8.33 0 18508 209 3549 i
* 9.2.0.0/16 63.114.8.60 0 18508 209 701 i
* 63.114.8.34 0 18508 209 701 i
--More--
322 | Border Gateway Protocol IPv4(BGPv4)
Table 7-8.
Command Example Fields: show ip bgp inconsistent-as
Fields
Network
Next Hop
Metric
LocPrf
Weight
Path
Description
Displays the destination network prefix of each BGP route.
Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Displays the BGP route’s metric, if assigned.
Displays the BGP LOCAL_PREF attribute for the route.
Displays the route’s weight
Lists all the ASs the route passed through to reach the destination network.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp neighbors c e s Enables you to view the information exchanged by BGP neighbors.
Syntax show ip bgp [ipv4 unicast] neighbors [ ip-address [ advertised-routes | dampened-routes | detail | flap-statistics | routes | { received-routes [ network [ network-mask ]]} | { denied-routes
[ network [ network-mask ]]}]
Parameters ipv4 unicast ip-address advertised-routes dampened-routes detail flap-statistics routes received-routes
[ network
[ network-mask ] denied-routes
[ network
[ network-mask ]
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
(OPTIONAL) Enter the IP address of the neighbor to view only BGP information exchanged with that neighbor.
(OPTIONAL) Enter the keywords advertised-routes to view only the routes the neighbor sent.
(OPTIONAL) Enter the keyword dampened-routes to view information on dampened routes from the BGP neighbor.
(OPTIONAL) Enter the keyword detail to view neighbor-specific internal information for the IPv4 Unicast address family.
(OPTIONAL) Enter the keyword flap-statistics to view flap statistics on the neighbor’s routes.
(OPTIONAL) Enter the keywords routes to view only the neighbor’s feasible routes.
(OPTIONAL) Enter the keywords received-routes followed by either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information received from neighbors.
Note
: neighbor soft-reconfiguration inbound
must be configured prior to viewing all the information received from the neighbors.
(OPTIONAL) Enter the keywords denied-routes followed by either the network address (in dotted decimal format) or the network mask (in slash prefix format) to view all information on routes denied via neighbor inbound filters.
Border Gateway Protocol IPv4(BGPv4) | 323
Command Modes EXEC
EXEC Privilege
Command
History
Example 1
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 7.2.1.0
Version 6.3.10
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Added detail option and output now displays default MED value
Added received and denied route options
The output is changed to display the total number of advertised prefixes
Figure 7-16.
Command Example: show ip bgp neighbors (Partial)
FTOS#show ip bgp neighbors
BGP neighbor is 100.10.10.2, remote AS 200, external link
BGP version 4, remote router ID 192.168.2.101
BGP state ESTABLISHED, in this state for 00:16:12
Last read 00:00:12, last write 00:00:03
Hold time is 180, keepalive interval is 60 seconds
Received 1404 messages, 0 in queue
3 opens, 1 notifications, 1394 updates
6 keepalives, 0 route refresh requests
Sent 48 messages, 0 in queue
3 opens, 2 notifications, 0 updates
43 keepalives, 0 route refresh requests
Minimum time between advertisement runs is 30 seconds
Minimum time before advertisements start is 0 seconds
Capabilities received from neighbor for IPv4 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
Capabilities advertised to neighbor for IPv4 Unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
ROUTE_REFRESH(2)
GRACEFUL_RESTART(64)
CISCO_ROUTE_REFRESH(128)
Route map for incoming advertisements is test
Maximum prefix set to 4 with threshold 75
For address family: IPv4 Unicast
BGP table version 34, neighbor version 34
5 accepted prefixes consume 20 bytes
Prefix advertised 0, denied 4, withdrawn 0
Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer
Prefixes advertised 0, rejected 0, withdrawn 0 from peer
Connections established 2; dropped 1
Last reset 00:18:21, due to Maximum prefix limit reached
Notification History
'Connection Reset' Sent : 1 Recv: 0
Local host: 100.10.10.1, Local port: 179
Foreign host: 100.10.10.2, Foreign port: 47496
FTOS#
324 | Border Gateway Protocol IPv4(BGPv4)
Example 2 Figure 7-17.
Command Example: show ip bgp neighbors advertised-routes
FTOS>show ip bgp neighbors 192.14.1.5 advertised-routes
BGP table version is 74103, local router ID is 33.33.33.33
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>r 1.10.1.0/24 0.0.0.0 5000 32768 ?
*>r 1.11.0.0/16 0.0.0.0 5000 32768 ?
.....
.....
*>I 223.94.249.0/24 223.100.4.249 0 100 0 ?
*>I 223.94.250.0/24 223.100.4.250 0 100 0 ?
*>I 223.100.0.0/16 223.100.255.254 0 100 0 ?
Total number of prefixes: 74102
Example 3 Figure 7-18.
Command Example: show ip bgp neighbors received-routes
FTOS#show ip bgp neighbors 100.10.10.2 received-routes
BGP table version is 13, local router ID is 120.10.10.1
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed n - network, D - denied, S - stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
D 70.70.21.0/24 100.10.10.2 0 0 100 200 ?
D 70.70.22.0/24 100.10.10.2 0 0 100 200 ?
D 70.70.23.0/24 100.10.10.2 0 0 100 200 ?
D 70.70.24.0/24 100.10.10.2 0 0 100 200 ?
*> 70.70.25.0/24 100.10.10.2 0 0 100 200 ?
*> 70.70.26.0/24 100.10.10.2 0 0 0 100 200 ?
*> 70.70.27.0/24 100.10.10.2 0 0 0 100 200 ?
*> 70.70.28.0/24 100.10.10.2 0 0 0 100 200 ?
*> 70.70.29.0/24 100.10.10.2 0 0 0 100 200 ?
FTOS#
Example 4 Figure 7-19.
Command Example: show ip bgp neighbors denied-routes
FTOS#show ip bgp neighbors 100.10.10.2 denied-routes
4 denied paths using 205 bytes of memory
BGP table version is 34, local router ID is 100.10.10.2
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed
n - network, D - denied, S - stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
D 70.70.21.0/24 100.10.10.2 0 0 100 200 ?
D 70.70.22.0/24 100.10.10.2 0 0 100 200 ?
D 70.70.23.0/24 100.10.10.2 0 0 100 200 ?
D 70.70.24.0/24 100.10.10.2 0 0 100 200 ?
FTOS#
Table 7-9.
Command Example Fields: show ip bgp neighbors
Lines beginning with
BGP neighbor
BGP version
Description
Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one. If they are located in the same AS, then the link is internal; otherwise the link is external.
Displays the BGP version (always version 4) and the remote router
ID.
Border Gateway Protocol IPv4(BGPv4) | 325
Related
Commands
Table 7-9.
Command Example Fields: show ip bgp neighbors
Lines beginning with
BGP state
Last read
Received messages
Sent messages
Received updates
Soft reconfiguration
Minimum time
(list of inbound and outbound policies)
For address family:
BGP table version accepted prefixes
Prefix advertised
Connections established
Last reset
Local host:
Foreign host:
Description
Displays the neighbor’s BGP state and the amount of time in hours:minutes:seconds it has been in that state.
This line displays the following information:
• last read is the time (hours:minutes:seconds) the router read a message from its neighbor
• hold time is the number of seconds configured between messages from its neighbor
• keepalive interval is the number of seconds between keepalive messages to help ensure that the TCP session is still alive.
This line displays the number of BGP messages received, the number of notifications (error messages) and the number of messages waiting in a queue for processing.
The line displays the number of BGP messages sent, the number of notifications (error messages) and the number of messages waiting in a queue for processing.
This line displays the number of BGP updates received and sent.
This line indicates that soft reconfiguration inbound is configured.
Displays the minimum time, in seconds, between advertisements.
Displays the policy commands configured and the names of the Route map, AS-PATH ACL or Prefix list configured for the policy.
Displays IPv4 Unicast as the address family.
Displays the which version of the primary BGP routing table the router and the neighbor are using.
Displays the number of network prefixes accepted by the router and the amount of memory used to process those prefixes.
Displays the number of network prefixes advertised, the number rejected and the number withdrawn from the BGP routing table.
Displays the number of TCP connections established and dropped between the two peers to exchange BGP information.
Displays the amount of time since the peering session was last reset.
Also states if the peer resets the peering session.
If the peering session was never reset, the word never is displayed.
Displays the peering address of the local router and the TCP port number.
Displays the peering address of the neighbor and the TCP port number.
View the current BGP routing table.
326 | Border Gateway Protocol IPv4(BGPv4)
show ip bgp next-hop c e s View all next hops (via learned routes only) with current reachability and flap status. This command only displays one path, even if the next hop is reachable by multiple paths.
Syntax show ip bgp next-hop
Command Modes
Example
EXEC
EXEC Privilege
Figure 7-20.
Command Example: show ip bgp next-hop
FTOS>show ip bgp next-hop
Next-hop Via RefCount Cost Flaps Time Elapsed
63.114.8.33 63.114.8.33, Gi 12/22 240984 0 0 00:18:25
63.114.8.34 63.114.8.34, Gi 12/22 135152 0 0 00:18:13
63.114.8.35 63.114.8.35, Gi 12/22 1 0 0 00:18:07
63.114.8.60 63.114.8.60, Gi 12/22 135155 0 0 00:18:11
FTOS>
Table 7-10.
Command Example Fields: show ip bgp next-hop
Field
Next-hop
Via
RefCount
Cost
Flaps
Time Elapsed
Description
Displays the next-hop IP address.
Displays the IP address and interface used to reach the next hop.
Displays the number of BGP routes using this next hop.
Displays the cost associated with using this next hop.
Displays the number of times the next hop has flapped.
Displays the time elapsed since the next hop was learned. If the route is down, then this field displays time elapsed since the route went down.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp paths c e s View all the BGP path attributes in the BGP database.
Syntax show ip bgp paths [ regexp regular-expression ]
Border Gateway Protocol IPv4(BGPv4) | 327
Parameters
Command Modes
Example regexp regular-expression Enter a regular expression then use one or a combination of the following characters to match:
• .
= (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ?
= (question mark) sequences in a pattern (either 0 or 1 sequences).
You must enter an escape sequence (CTRL+v) prior to entering the
? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.
• $ = (dollar sign) the end of the output string.
EXEC
EXEC Privilege
Figure 7-21.
Command Example: show ip bgp paths (Partial)
FTOS#show ip bgp path
Total 16 Paths
Address Hash Refcount Metric Path
0x1efe7e5c 15 10000 32 ?
0x1efe7e1c 71 10000 23 ?
0x1efe7ddc 127 10000 22 ?
0x1efe7d9c 183 10000 43 ?
0x1efe7d5c 239 10000 42 ?
0x1efe7c9c 283 6 {102 103} ?
0x1efe7b1c 287 336 20000 ?
0x1efe7d1c 295 10000 13 ?
0x1efe7c5c 339 6 {92 93} ?
0x1efe7cdc 351 10000 12 ?
0x1efe7c1c 395 6 {82 83} ?
0x1efe7bdc 451 6 {72 73} ?
0x1efe7b5c 491 78 0 ?
0x1efe7adc 883 2 120 i
0x1efe7e9c 983 10000 33 ?
0x1efe7b9c 1003 6 0 i
FTOS#
Table 7-11.
Command Example Fields: show ip bgp paths
Field
Total
Address
Hash
Refcount
Metric
Path
Description
Displays the total number of BGP path attributes.
Displays the internal address where the path attribute is stored.
Displays the hash bucket where the path attribute is stored.
Displays the number of BGP routes using this path attribute.
Displays the MED attribute for this path attribute.
Displays the AS path for the route, with the origin code for the route listed last.
Numbers listed between braces {} are AS_SET information.
328 | Border Gateway Protocol IPv4(BGPv4)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp paths as-path c e s View all unique AS-PATHs in the BGP database
Syntax show ip bgp paths as-path
Command Modes
Example
EXEC
EXEC Privilege
Figure 7-22.
Command Example: show ip bgp paths as-path (Partial)
FTOS#show ip bgp paths as-path
Total 13 AS-Paths
Address Hash Refcount AS-Path
0x1ea3c1ec 251 1 42
0x1ea3c25c 251 1 22
0x1ea3c1b4 507 1 13
0x1ea3c304 507 1 33
0x1ea3c10c 763 1 {92 93}
0x1ea3c144 763 1 {102 103}
0x1ea3c17c 763 1 12
0x1ea3c2cc 763 1 32
0x1ea3c09c 764 1 {72 73}
0x1ea3c0d4 764 1 {82 83}
0x1ea3c224 1019 1 43
0x1ea3c294 1019 1 23
0x1ea3c02c 1021 4
FTOS#
Table 7-12.
Command Example Fields: show ip bgp paths community
Field
Address
Hash
Refcount
AS-Path
Description
Displays the internal address where the path attribute is stored.
Displays the hash bucket where the path attribute is stored.
Displays the number of BGP routes using these AS-Paths.
Displays the AS paths for this route, with the origin code for the route listed last.
Numbers listed between braces {} are AS_SET information.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp paths community c e s View all unique COMMUNITY numbers in the BGP database.
Syntax show ip bgp paths community
Border Gateway Protocol IPv4(BGPv4) | 329
Command Modes
Example
EXEC
EXEC Privilege
Figure 7-23.
Command Example: show ip bgp paths community (Partial)
E1200-BGP>show ip bgp paths community
Total 293 Communities
Address Hash Refcount Community
0x1ec88a5c 3 4 209:209 209:6059 209:31272 3908:900 19092:300
0x1e0f10ec 15 4 209:209 209:3039 209:31272 3908:900 19092:300
0x1c902234 37 2 209:209 209:7193 209:21362 3908:900 19092:300
0x1f588cd4 41 24 209:209 209:6253 209:21362 3908:900 19092:300
0x1e805884 46 2 209:209 209:21226 286:777 286:3033 1899:3033
64675:21092
0x1e433f4c 46 8 209:209 209:5097 209:21362 3908:900 19092:300
0x1f173294 48 16 209:209 209:21226 286:40 286:777 286:3040 5606:40
12955:5606
0x1c9f8e24 50 6 209:209 209:4069 209:21362 3908:900 19092:300
0x1c9f88e4 53 4 209:209 209:3193 209:21362 3908:900 19092:300
0x1f58a944 57 6 209:209 209:2073 209:21362 3908:900 19092:300
0x1ce6be44 80 2 209:209 209:999 209:40832
0x1c6e2374 80 2 209:777 209:41528
0x1f58ad6c 82 46 209:209 209:41528
0x1c6e2064 83 2 209:777 209:40832
0x1f588ecc 85 570 209:209 209:40832
0x1f57cc0c 98 2 209:209 209:21226 286:3031 13646:1044 13646:1124
13646:1154 13646:1164 13646:1184 13646:1194 13646:1204 13646:1214 13646:1224
13646:1234 13646:1244 13646:1254 13646:1264 13646:3000
0x1d65b2ac 117 6 209:209 209:999 209:31272
0x1f5854ac 119 18 209:209 209:21226 286:108 286:111 286:777 286:3033
517:5104
Table 7-13.
Command Example Fields: show ip bgp paths community
Field
Address
Hash
Refcount
Community
Description
Displays the internal address where the path attribute is stored.
Displays the hash bucket where the path attribute is stored.
Displays the number of BGP routes using these communities.
Displays the community attributes in this BGP path.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp peer-group c e s Enables you to view information on the BGP peers in a peer group.
Syntax show ip bgp [ipv4 unicast] peer-group [ peer-group-name [ detail | summary ]]
Parameters ipv4 unicast peer-group-name
(OPTIONAL) Enter the ipv4 unicast keywords to view information only related to ipv4 unicast routes.
(OPTIONAL) Enter the name of a peer group to view information about that peer group only.
330 | Border Gateway Protocol IPv4(BGPv4)
Command Modes
Example detail summary
(OPTIONAL) Enter the keyword detail to view detailed status information of the peers in that peer group.
(OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group.
The output is the same as that found in show ip bgp summary command
EXEC
EXEC Privilege
Figure 7-24.
Command Example: show ip bgp peer-group (Partial)
FTOS#show ip bgp peer-group
Peer-group RT-PEERS
Description: ***peering-with-RT***
BGP version 4
Minimum time between advertisement runs is 30 seconds
For address family: IPv4 Unicast
BGP neighbor is RT-PEERS
Number of peers in this group 20
Peer-group members (* - outbound optimized):
12.1.1.2*
12.1.1.3*
12.1.1.4*
12.1.1.5*
12.1.1.6*
12.2.1.2*
12.2.1.3*
12.2.1.4*
12.2.1.5*
12.2.1.6*
12.3.1.2*
12.3.1.3*
12.3.1.4*
12.3.1.5*
12.3.1.6*
12.4.1.2*
12.4.1.3*
12.4.1.4*
12.4.1.5*
12.4.1.6*
Table 7-14.
Command Example Fields: show ip bgp peer-group
Line beginning with
Peer-group
Administratively shut
BGP version
Minimum time
For address family
BGP neighbor
Number of peers
Peer-group members:
Description
Displays the peer group’s name.
Displays the peer group’s status if the peer group is not enabled.
If the peer group is enabled, this line is not displayed.
Displays the BGP version supported.
Displays the time interval between BGP advertisements.
Displays IPv4 Unicast as the address family.
Displays the name of the BGP neighbor.
Displays the number of peers currently configured for this peer group.
Lists the IP addresses of the peers in the peer group.
If the address is outbound optimized, a * is displayed next to the IP address.
Border Gateway Protocol IPv4(BGPv4) | 331
Related
Commands
neighbor peer-group (assigning peers)
neighbor peer-group (creating group)
(multicast)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.8.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series
Introduced support on S-Series
Assign peer to a peer-group.
Create a peer group.
View information on the BGP peers in a peer group.
show ip bgp regexp c e s Display the subset of BGP routing table matching the regular expressions specified.
Syntax show ip bgp regexp regular-expression [ character ]
Parameters regular-expression [ character ] Enter a regular expression then use one or a combination of the following characters to match:
• .
= (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ?
= (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.
• $ = (dollar sign) the end of the output string.
Command Modes EXEC
EXEC Privilege
332 | Border Gateway Protocol IPv4(BGPv4)
Example Figure 7-25.
Command Example: show ip bgp regexp (Partial)
FTOS#show ip bgp regexp ^2914+
BGP table version is 3700481, local router ID is 63.114.8.35
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>I 3.0.0.0/8 1.1.1.2 0 100 0 2914 1239 80 i
*>I 4.0.0.0/8 1.1.1.2 0 100 0 2914 3356 i
*>I 4.17.225.0/24 1.1.1.2 0 100 0 2914 11853 11853 11853 11853 11853 6496
*>I 4.17.226.0/23 1.1.1.2 0 100 0 2914 11853 11853 11853 11853 11853 6496
*>I 4.17.251.0/24 1.1.1.2 0 100 0 2914 11853 11853 11853 11853 11853 6496
*>I 4.17.252.0/23 1.1.1.2 0 100 0 2914 11853 11853 11853 11853 11853 6496
*>I 4.19.2.0/23 1.1.1.2 0 100 0 2914 701 6167 6167 6167 i
*>I 4.19.16.0/23 1.1.1.2 0 100 0 2914 701 6167 6167 6167 i
*>I 4.21.80.0/22 1.1.1.2 0 100 0 2914 174 4200 16559 i
*>I 4.21.82.0/24 1.1.1.2 0 100 0 2914 174 4200 16559 i
*>I 4.21.252.0/23 1.1.1.2 0 100 0 2914 701 6389 8063 19198 i
*>I 4.23.180.0/24 1.1.1.2 0 100 0 2914 3561 6128 30576 i
*>I 4.36.200.0/21 1.1.1.2 0 100 0 2914 14742 11854 14135 i
*>I 4.67.64.0/22 1.1.1.2 0 100 0 2914 11608 19281 i
*>I 4.78.32.0/21 1.1.1.2 0 100 0 2914 3491 29748 i
*>I 6.1.0.0/16 1.1.1.2 0 100 0 2914 701 668 i
*>I 6.2.0.0/22 1.1.1.2 0 100 0 2914 701 668 i
*>I 6.3.0.0/18 1.1.1.2 0 100 0 2914 701 668 i
Table 7-15.
Command Example Fields: show ip bgp regexp
Field
Network
Next Hop
Metric
LocPrf
Weight
Path
Description
Displays the destination network prefix of each BGP route.
Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then non-BGP routes exist in the router’s routing table.
Displays the BGP router’s metric, if assigned.
Displays the BGP LOCAL_PREF attribute for the route.
Displays the route’s weight
Lists all the AS paths the route passed through to reach the destination network.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show ip bgp summary c e s Enables you to view the status of all BGP connections.
Syntax
Command Modes show ip bgp [ipv4 unicast] summary
EXEC
EXEC Privilege
Border Gateway Protocol IPv4(BGPv4) | 333
Example Figure 7-26.
Command Example: show ip bgp summary
FTOS#show ip bgp summary
BGP router identifier 120.10.10.1, local AS number 100
BGP table version is 34, main routing table version 34
9 network entrie(s) using 1372 bytes of memory
5 paths using 380 bytes of memory
4 denied paths using 164 bytes of memory
BGP-RIB over all using 385 bytes of memory
2 BGP path attribute entrie(s) using 168 bytes of memory
1 BGP AS-PATH entrie(s) using 39 bytes of memory
1 BGP community entrie(s) using 43 bytes of memory
2 neighbor(s) using 7232 bytes of memory
Neighbor AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/Pfx
100.10.10.2 200 46 41 34 0 0 00:14:33 5
120.10.10.2 300 40 47 34 0 0 00:37:10 0
FTOS#
Table 7-16.
Command Example Fields: show ip bgp summary
Field
BGP router identifier
BGP table version network entries paths denied paths
BGP path attribute entries
BGP AS-PATH entries
BGP community entries
Dampening enabled
Neighbor
AS
MsgRcvd
MsgSent
TblVer
InQ
OutQ
Description
Displays the local router ID and the AS number.
Displays the BGP table version and the main routing table version.
Displays the number of network entries and route paths and the amount of memory used to process those entries.
Displays the number of paths and the amount of memory used.
Displays the number of denied paths and the amount of memory used.
Displays the number of BGP path attributes and the amount of memory used to process them.
Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them.
Displays the number of BGP COMMUNITY attributes processed and the
amount of memory used to process them. The show ip bgp community
command provides more details on the COMMUNITY attributes.
Displayed only when dampening is enabled. Displays the number of paths designated as history, dampened, or penalized.
Displays the BGP neighbor address.
Displays the AS number of the neighbor.
Displays the number of BGP messages that neighbor received.
Displays the number of BGP messages that neighbor sent.
Displays the version of the BGP table that was sent to that neighbor.
Displays the number of messages from that neighbor waiting to be processed.
Displays the number of messages waiting to be sent to that neighbor.
If a number appears in parentheses, the number represents the number of messages waiting to be sent to the peer group.
334 | Border Gateway Protocol IPv4(BGPv4)
Table 7-16.
Command Example Fields: show ip bgp summary
Field
Up/Down
State/Pfxrcd
Description
Displays the amount of time that the neighbor is in the Established stage.
If the neighbor has never moved into the Established stage, the word never is displayed.
The output format is:
Time Established ---------Display Exampl e
< 1 day ----------------------- 00:12:23 (hours:minutes:seconds)
< 1 week --------------------- 1d21h (DaysHours)
> 1 week --------------------- 11w2d (WeeksDays)
If the neighbor is in Established stage, the number of network prefixes received.
If a maximum limit was configured with the
command, (prfxd) appears in this column.
If the neighbor is not in Established stage, the current stage is displayed
(Idle, Connect, Active, OpenSent, OpenConfirm) When the peer is transitioning between states and clearing the routes received, the phrase
(Purging) may appear in this column.
If the neighbor is disabled, the phrase (Admin shut) appears in this column.
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced support on S-Series
Introduced support on C-Series show running-config bgp c e s Use this feature to display the current BGP configuration.
Syntax show running-config bgp
Defaults
Command Modes
No default values or behavior
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series timers bgp c e s Adjust BGP Keep Alive and Hold Time timers.
Syntax timers bgp keepalive holdtime
To return to the default, enter no timers bgp .
Border Gateway Protocol IPv4(BGPv4) | 335
Parameters
Defaults
Command Modes
Command
History keepalive holdtime
No default values or behavior
ROUTER BGP
Enter a number for the time interval, in seconds, between keepalive messages sent to the neighbor routers.
Range: 1 to 65535
Default: 60 seconds
Enter a number for the time interval, in seconds, between the last keepalive message and declaring the router dead.
Range: 3 to 65535
Default: 180 seconds
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
MBGP Commands
Multiprotocol BGP (MBGP) is an enhanced BGP that enables multicast routing policy throughout the
Internet and connecting multicast topologies between BGP and autonomous systems (AS). FTOS
MBGP is implemented as per IETF RFC 1858.
FTOS version 7.8.1.0 and later support MBGP for IPv6 on e t
and c
platforms.
FTOS version 7.8.1.0 and later support MBGP for IPv4 Multicast only on the s
platform.
FTOS version 8.2.1.0 and later support MBGP on the E-Series ExaScale e x platform.
The MBGP commands are:
•
address family ipv4 multicast (MBGP)
•
•
•
•
•
•
•
•
•
debug ip bgp peer-group updates
•
•
•
•
neighbor advertisement-interval
•
336 | Border Gateway Protocol IPv4(BGPv4)
•
•
•
•
•
•
•
neighbor route-reflector-client
•
•
•
•
•
•
•
•
•
•
•
•
show ip bgp ipv4 multicast neighbors
•
•
address family ipv4 multicast (MBGP) c e t
s This command changes the context to SAFI (Subsequent Address Family Identifier).
Syntax address family ipv4 multicast
To remove SAFI context, use the no address family ipv4 multicast command.
Parameters ipv4 multicast
Enter the keyword ipv4 to specify the address family as IPV4.
Enter the keyword multicast to specify multicast as SAFI.
Defaults
Command Modes
Usage
Information
IPv4 Unicast
ROUTER BGP (conf-router_bgp)
All subsequent commands will apply to this address family once this command is executed. You can exit from this AFI/SAFI to the IPv4 Unicast (the default) family by entering exit and returning to the
Router BGP context.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series for MBGP IPv4 Multicast
Introduced support on C-Series
Border Gateway Protocol IPv4(BGPv4) | 337
aggregate-address c e t
s Summarize a range of prefixes to minimize the number of entries in the routing table.
Syntax aggregate-address ip-address mask [ advertise-map map-name ] [ as-set ] [ attribute-map map-name ] [ summary-only ] [ suppress-map map-name ]
Parameters ip-address mask advertise-map map-name (OPTIONAL) Enter the keywords advertise-map followed by the name of a configured route map to set filters for advertising an aggregate route.
as-set
Enter the IP address and mask of the route to be the aggregate address.
Enter the IP address in dotted decimal format (A.B.C.D) and mask in / prefix format (/x).
(OPTIONAL) Enter the keyword as-set to generate path attribute information and include it in the aggregate.
AS_SET includes AS_PATH and community information from the routes included in the aggregated route.
attribute-map summary-only map-name (OPTIONAL) Enter the keywords attribute-map followed by the name of a configured route map to modify attributes of the aggregate, excluding
AS_PATH and NEXT_HOP attributes.
(OPTIONAL) Enter the keyword summary-only to advertise only the aggregate address. Specific routes will not be advertised.
suppress-map map-name (OPTIONAL) Enter the keywords suppress-map followed by the name of a configured route map to identify which more-specific routes in the aggregate are suppressed.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
At least one of the routes included in the aggregate address must be in the BGP routing table for the configured aggregate to become active.
Do not add the as-set parameter to the aggregate. If routes within the aggregate are constantly changing, the aggregate will flap to keep track of the changes in the AS_PATH.
In route maps used in the suppress-map parameter, routes meeting the deny clause are not suppress; in other words, they are allowed. The opposite is true: routes meeting the permit clause are suppressed.
If the route is injected via the
command, that route will still appear in the routing table if the
summary-only parameter is configured in the aggregate-address
command.
The summary-only parameter suppresses all advertisements. If you want to suppress advertisements to only specific neighbors, use the
neighbor distribute-list command.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series
Introduced support on C-Series
338 | Border Gateway Protocol IPv4(BGPv4)
bgp dampening c e t
s Enable MBGP route dampening.
Syntax bgp dampening [ half-life time ] [ route-map map-name ]
Parameters
To disable route dampening, use the no bgp dampening [ half-life time ] [ route-map map-name ] command.
half-life time route-map map-name
(OPTIONAL) Enter the number of minutes after which the Penalty is decreased. After the router assigns a Penalty of 1024 to a route, the Penalty is decreased by half, after the half-life period expires.
Range: 1 to 45.
Default: 15 minutes
(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.
Only match commands in the configured route map are supported.
Defaults
Command Modes
Command
History
Disabled.
ROUTER BGP Address Family (conf-router_bgp_af)
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series clear ip bgp ipv4 multicast c e t
s Reset MBGP sessions.
Syntax clear ip bgp ipv4 multicast * ip-address [ dampening | flap-statistics ] peer-group ]
Parameters
* ip-address dampening flap-statistics peer-group
Enter the character * to clear all peers.
Enter an IP address in dotted decimal format to clear the prefixes from that neighbor.
(OPTIONAL) Enter the keyword dampening to clear route flap dampening information.
(OPTIONAL) Enter the keyword flap-statistics to reset the flap statistics on all prefixes from that neighbor.
(OPTIONAL) Enter the keyword peer-group to clear all members of a peer-group.
Command Modes EXEC Privilege
Command
History
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series
Introduced support on C-Series
Border Gateway Protocol IPv4(BGPv4) | 339
clear ip bgp dampening c e t
s Clear information on route dampening.
Syntax clear ip bgp dampening ipv4 multicast network network-mask
Parameters dampening network network-mask
Enter the keyword dampening to clear route flap dampening information.
(OPTIONAL) Enter the network address in dotted decimal format
(A.B.C.D).
(OPTIONAL) Enter the network mask in slash prefix format (/x).
Command Modes EXEC Privilege
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series clear ip bgp flap-statistics c e t
s Clear BGP flap statistics, which includes number of flaps and the time of the last flap.
Syntax clear ip bgp ipv4 multicast flap-statistics network | filter-list list | regexp regexp
Parameters
Network filter-list list regexp regexp
(OPTIONAL) Enter the network address to clear flap statistics in dotted decimal format (A.B.C.D).
(OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH list (max 16 characters).
(OPTIONAL) Enter the keyword regexp followed by regular expressions. Use one or a combination of the following:
• .
= (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ?
= (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.
• $ = (dollar sign) the end of the output string.
Command Modes EXEC Privilege
Command
History
Version 7.8.1.0
Introduced support on S-Series
340 | Border Gateway Protocol IPv4(BGPv4)
Version 7.7.1.0
Version 7.6.1.0
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series debug ip bgp dampening c e t
s View information on routes being dampened.
Syntax debug ip bgp ipv4 multicast dampening
Parameters
To disable debugging, enter no debug ip bgp ipv4 multicast dampening dampening Enter the keyword dampening to clear route flap dampening information.
EXEC Privilege Command Modes
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series debug ip bgp peer-group updates c e t
s View information about BGP peer-group updates.
debug ip bgp peer-group peer-group-name updates [ in | out ]
To disable debugging, enter no debug ip bgp peer-group peer-group-name updates [ in | out ] command.
Parameters peer-group peer-group-name updates in out
Enter the keyword peer-group followed by the name of the peer-group.
Enter the keyword updates to view BGP update information.
(OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors.
(OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors.
EXEC Privilege Command Modes
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series debug ip bgp updates c e t
s View information about BGP updates.
debug ip bgp updates [ in | out ]
Border Gateway Protocol IPv4(BGPv4) | 341
Parameters
Command Modes
Defaults
Command
History
To disable debugging, enter no debug ip bgp updates [ in | out ] command.
updates in out
Enter the keyword updates to view BGP update information.
(OPTIONAL) Enter the keyword in to view only BGP updates received from neighbors.
(OPTIONAL) Enter the keyword out to view only BGP updates sent to neighbors.
EXEC Privilege
Disabled.
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series distance bgp c e t
s Define an administrative distance for routes.
Syntax distance bgp external-distance internal-distance local-distance
To return to default values, enter no distance bgp .
Parameters external-distance internal-distance local-distance
Enter a number to assign to routes learned from a neighbor external to the AS.
Range: 1 to 255.
Default: 20
Enter a number to assign to routes learned from a router within the AS.
Range: 1 to 255.
Default: 200
Enter a number to assign to routes learned from networks listed in the
command.
Range: 1 to 255.
Default: 200
Defaults
Command Modes external-distance = 20; internal-distance = 200; local-distance = 200.
ROUTER BGP (conf-router_bgp_af)
Caution: Dell Networking recommends that you do not change the administrative distance of internal routes. Changing the administrative distances may cause routing table inconsistencies.
Usage
Information
The higher the administrative distance assigned to a route means that your confidence in that route is low. Routes assigned an administrative distance of 255 are not installed in the routing table. Routes from confederations are treated as internal BGP routes.
342 | Border Gateway Protocol IPv4(BGPv4)
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor activate c e t
s This command allows the specified neighbor/peer group to be enabled for the current AFI/SAFI.
Syntax neighbor [ ip-address | peer-group-name ] activate
To disable, use the no neighbor [ ip-address | peer-group-name ] activate command.
Parameters ip-address peer-group-name
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the name of the peer group activate Enter to enable the neighbor/peer group in the new
AFI/SAFI.
Defaults
Command Modes
Usage
Information
Disabled
ROUTER BGP Address Family (conf-router_bgp_af)
By default, when a neighbor/peer group configuration is created in the Router BGP context, it is enabled for the IPv4/Unicast AFI/SAFI. By using activate in the new context, the neighbor/peer group is enabled for AFI/SAFI.
address family ipv4 multicast (MBGP)
Changes the context to SAFI
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor advertisement-interval c e t
s Set the advertisement interval between BGP neighbors or within a BGP peer group.
Syntax neighbor { ip-address | peer-group-name } advertisement-interval seconds
To return to the default value, use the no neighbor { ip-address | peer-group-name } advertisement-interval command.
Parameters ip-address peer-group-name seconds
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to set the advertisement interval for all routers in the peer group.
Enter a number as the time interval, in seconds, between BGP advertisements.
Range: 0 to 600 seconds.
Default: 5 seconds for internal BGP peers; 30 seconds for external BGP peers.
Border Gateway Protocol IPv4(BGPv4) | 343
Defaults
Command Modes
Command
History seconds = 5 seconds (internal peers); seconds = 30 seconds (external peers)
ROUTER BGP Address Family (conf-router_bgp_af)
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor default-originate c e t
s Inject the default route to a BGP peer or neighbor.
Syntax neighbor { ip-address | peer-group-name } default-originate [ route-map map-name ]
To remove a default route, use the no neighbor { ip-address | peer-group-name } default-originate command.
Parameters ip-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to set the default route of all routers in that peer group.
route-map map-name (OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.
Defaults
Command Modes
Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor distribute-list c e t
s Distribute BGP information via an established prefix list.
Syntax neighbor [ ip-address | peer-group-name ] distribute-list prefix-list-name [ in | out ]
To delete a neighbor distribution list, use the no neighbor [ ip-address | peer-group-name ] distribute-list prefix-list-name [ in | out ] command.
Parameters ip-address peer-group-name prefix-list-name in out
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to apply the distribute list filter to all routers in the peer group.
Enter the name of an established prefix list.
If the prefix list is not configured, the default is permit (to allow all routes).
Enter the keyword in to distribute only inbound traffic.
Enter the keyword out to distribute only outbound traffic.
344 | Border Gateway Protocol IPv4(BGPv4)
Defaults
Command Modes
Usage
Information
Related
Commands
Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
Other BGP filtering commands include:
,
.
Configure IP AS-Path ACL.
Assign a AS-PATH list to a neighbor or peer group.
Assign a route map to a neighbor or peer group.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor filter-list c e t
s Configure a BGP filter based on the AS-PATH attribute.
Syntax neighbor [ ip-address | peer-group-name ] filter-list aspath access-list-name [ in | out ]
To delete a BGP filter, use the no neighbor [ ip-address | peer-group-name ] filter-list aspath access-list-name [ in | out ] command.
Parameters ip-address peer-group-name
Enter the IP address of the neighbor in dotted decimal format.
Enter the name of the peer group to apply the filter to all routers in the peer group.
access-list-name Enter the name of an established AS-PATH access list (up to 140 characters).
If the AS-PATH access list is not configured, the default is permit (to allow routes).
in Enter out Enter the keyword out to filter outbound BGP routes.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
Use the ip as-path access-list
command syntax in the CONFIGURATION mode to enter the AS-PATH
ACL mode and configure AS-PATH filters to deny or permit BGP routes based on information in their
AS-PATH attribute.
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Enter AS-PATH ACL mode and configure AS-PATH filters.
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series
Border Gateway Protocol IPv4(BGPv4) | 345
neighbor maximum-prefix c e t
s Control the number of network prefixes received.
Syntax neighbor ip-address | peer-group-name maximum-prefix maximum [ threshold ] [ warning-only ]
To return to the default values, use the no neighbor ip-address | peer-group-name maximum-prefix maximum command.
Parameters ip-address peer-group-name maximum threshold warning-only
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the name of the peer group.
Enter a number as the maximum number of prefixes allowed for this BGP router.
Range: 1 to 4294967295.
(OPTIONAL) Enter a number to be used as a percentage of the maximum value.
When the number of prefixes reaches this percentage of the maximum value,
FTOS sends a message.
Range: 1 to 100 percent.
Default: 75
(OPTIONAL) Enter the keyword warning-only to set the router to send a log message when the maximum value is reached. If this parameter is not set, the router stops peering when the maximum number of prefixes is reached.
Defaults
Command Modes threshold = 75
ROUTER BGP Address Family (conf-router_bgp_af)
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor next-hop-self c e t
s Enables you to configure the router as the next hop for a BGP neighbor.
Syntax neighbor ip-address | peer-group-name next-hop-self
To return to the default setting, use the no neighbor ip-address | peer-group-name next-hop-self command.
Parameters ip-address peer-group-name
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the name of the peer group.
Defaults
Command Modes
Usage
Information
Disabled.
ROUTER BGP Address Family (conf-router_bgp_af)
If the set next-hop command in the ROUTE-MAP mode is configured, its configuration takes
precedence over the neighbor next-hop-self
command.
346 | Border Gateway Protocol IPv4(BGPv4)
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor remove-private-as c e t
s Remove private AS numbers from the AS-PATH of outgoing updates.
Syntax neighbor ip-address | peer-group-name remove-private-as
To return to the default, use the no neighbor ip-address | peer-group-name remove-private-as command.
Parameters ip-address peer-group-name
(OPTIONAL) Enter the IP address of the neighbor to remove the private AS numbers.
(OPTIONAL) Enter the name of the peer group to remove the private AS numbers
Defaults
Command Modes
Command
History
Disabled (that is, private AS number are not removed).
ROUTER BGP Address Family (conf-router_bgp_af)
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor route-map c e t
s Apply an established route map to either incoming or outbound routes of a BGP neighbor or c peer group.
Syntax neighbor [ ip-address | peer-group-name ] route-map map-name [ in | out ]
To remove the route map, use the no neighbor [ ip-address | peer-group-name ] route-map map-name [ in | out ] command.
Parameters ip-address peer-group-name map-name in out
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the name of the peer group.
Enter the name of an established route map.
If the Route map is not configured, the default is deny (to drop all routes).
Enter the keyword in to filter inbound routes.
Enter the keyword out to filter outbound routes.
Defaults
Command Modes
Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
Border Gateway Protocol IPv4(BGPv4) | 347
Usage
Information
When you apply a route map to outbound routes, only routes that match at least one section of the route map are permitted.
If you identify a peer group by name, the peers in that peer group inherit the characteristics in the
Route map used in this command. If you identify a peer by IP address, the Route map overwrites either the inbound or outbound policies on that peer.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series neighbor route-reflector-client c e t
s Configure a neighbor as a member of a route reflector cluster.
Syntax neighbor ip-address | peer-group-name route-reflector-client
To indicate that the neighbor is not a route reflector client or to delete a route reflector configuration, use the no neighbor ip-address | peer-group-name route-reflector-client command.
Parameters ip-address peer-group-name
(OPTIONAL) Enter the IP address of the neighbor in dotted decimal format.
(OPTIONAL) Enter the name of the peer group.
All routers in the peer group receive routes from a route reflector.
Defaults
Command Modes
Usage
Information
Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
The first time you enter this command it configures the neighbor as a route reflector and members of the route-reflector cluster. Internal BGP (IBGP) speakers do not need to be fully meshed if you configure a route reflector.
When all clients of a route reflector are disabled, the neighbor is no longer a route reflector.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series network c e t
s Specify the networks for the BGP process and enter them in the BGP routing table.
Syntax network ip-address mask [ route-map map-name ]
To remove a network, use the no network ip-address mask [ route-map map-name ] command.
348 | Border Gateway Protocol IPv4(BGPv4)
Parameters
Defaults
Command Modes
Usage
Information
Related
Commands
Command
History ip-address mask route-map map-name
Enter an IP address in dotted decimal format of the network.
Enter the mask of the IP address in the slash prefix length format (for example, /24).
The mask appears in command outputs in dotted decimal format (A.B.C.D).
(OPTIONAL) Enter the keyword route-map followed by the name of an established route map.
Only the following ROUTE-MAP mode commands are supported:
•
•
•
•
•
•
•
If the route map is not configured, the default is deny (to drop all routes).
Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
FTOS
resolves the network address configured by the network
command with the routes in the main routing table to ensure that the networks are reachable via non-BGP routes and non-default routes.
Redistribute routes into BGP.
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series redistribute c e t
s Redistribute routes into BGP.
Syntax redistribute [ connected | static ] [ route-map map-name ]
To disable redistribution, use the no redistribution [ connected | static ] [ route-map map-name ] command.
Parameters connected Enter the keyword connected to redistribute routes from physically connected interfaces.
Border Gateway Protocol IPv4(BGPv4) | 349
Defaults
Command Modes
Usage
Information static route-map map-name
Enter the keyword static to redistribute manually configured routes.
These routes are treated as incomplete routes.
(OPTIONAL) Enter the keyword route-map followed by the name of an established route map.
Only the following ROUTE-MAP mode commands are supported:
•
•
•
•
•
•
•
If the route map is not configured, the default is deny (to drop all routes).
Not configured.
ROUTER BGP Address Family (conf-router_bgp_af)
If you do not configure default-metric
command, in addition to the redistribute command, or there is no
route map to set the metric, the metric for redistributed static and connected is “0”.
To redistribute the default route (0.0.0.0/0) configure the
neighbor default-originate command.
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Inject the default route.
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series redistribute ospf c e t
s Redistribute OSPF routes into BGP.
Syntax redistribute ospf process-id [[ match external { 1 | 2 }] [ match internal ]] [ route-map map-name ]
To stop redistribution of OSPF routes, use the no redistribute ospf process-id command.
Parameters process-id match external
{ 1 | 2 } match internal route-map map-name
Enter the number of the OSPF process.
Range: 1 to 65535
(OPTIONAL) Enter the keywords match external to redistribute OSPF external routes.
You can specify 1 or 2 to redistribute those routes only.
(OPTIONAL) Enter the keywords match internal to redistribute OSPF internal routes only.
(OPTIONAL) Enter the keywords route-map followed by the name of a configured
Route map.
Defaults Not configured.
350 | Border Gateway Protocol IPv4(BGPv4)
Command Modes
Usage
Information
ROUTER BGP Address Family (conf-router_bgp_af)
When you enter
process-id command without any other parameters, FTOS redistributes all OSPF internal routes, external type 1 routes, and external type 2 routes.
This feature is not supported by an RFC.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series show ip bgp ipv4 multicast c e t
s View the current MBGP routing table for the system.
Syntax
Parameters show ip bgp ipv4 multicast [ detail | network [ network-mask ] [ length ]] detail network network-mask longer-prefixes
(OPTIONAL) Enter the keyword detail to display BGP internal information for the IPv4 Multicast address family.
(OPTIONAL) Enter the network address (in dotted decimal format) of the BGP network to view information only on that network.
(OPTIONAL) Enter the network mask (in slash prefix format) of the BGP network address.
(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
Command Modes
Example
EXEC
EXEC Privilege
Figure 7-27.
Command Example: show ip bgp
FTOS#show ip bgp ipv4 multicast
BGP table version is 14, local router ID is 100.10.10.1
Status codes: s suppressed, S stale, d damped, h history, * valid, > best
Path source: I - internal, a - aggregate, c - confed-external, r - redistributed, n - network
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>I 25.1.0.0/16 25.25.25.25 0 100 0 i
*>I 25.2.0.0/16 25.25.25.26 0 100 0 ?
*>I 25.3.0.0/16 211.1.1.165 0 100 0 ?
*>r 144.1.0.0/16 0.0.0.0 0 32768 ?
*>r 144.2.0.0/16 100.10.10.10 0 32768 ?
*>r 144.3.0.0/16 211.1.1.135 0 32768 ?
*>n 145.1.0.0/16 0.0.0.0 0 32768 i
FTOS#
Border Gateway Protocol IPv4(BGPv4) | 351
Table 7-17.
Command Example Fields: show ip bgp
Field
Network
Next Hop
Metric
LocPrf
Weight
Path
Description
Displays the destination network prefix of each BGP route.
Displays the next hop address of the BGP router.
If 0.0.0.0 is listed in this column, then local routes exist in the routing table.
Displays the BGP route’s metric, if assigned.
Displays the BGP LOCAL_PREF attribute for the route.
Displays the route’s weight
Lists all the ASs the route passed through to reach the destination network.
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 7.8.1.0
View BGP communities.
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series
Introduced support on S-Series show ip bgp cluster-list c e t
s View BGP neighbors in a specific cluster.
Syntax show ip bgp ipv4 multicast cluster-list [ cluster-id ]
Parameters cluster-id (OPTIONAL) Enter the cluster id in dotted decimal format.
Command Modes EXEC
EXEC Privilege
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series show ip bgp community c e s View information on all routes with Community attributes or view specific BGP community groups.
Syntax show ip bgp ipv4 multicast community [ community-number ] [ local-as ] [ no-export ]
[ no-advertise ]
352 | Border Gateway Protocol IPv4(BGPv4)
Parameters
Command Modes
Usage
Information community-number local-AS no-advertise no-export
Enter the community number in AA:NN format where AA is the AS number (2 bytes) and NN is a value specific to that autonomous system.
You can specify up to eight community numbers to view information on those community groups.
Enter the keywords local-AS to view all routes with the COMMUNITY attribute of NO_EXPORT_SUBCONFED.
All routes with the NO_EXPORT_SUBCONFED (0xFFFFFF03) community attribute must not be advertised to external BGP peers.
Enter the keywords no-advertise to view all routes containing the well-known community attribute of NO_ADVERTISE.
All routes with the NO_ADVERTISE (0xFFFFFF02) community attribute must not be advertised to other BGP peers.
Enter the keywords no-export to view all routes containing the well-known community attribute of NO_EXPORT.
All routes with the NO_EXPORT (0xFFFFFF01) community attribute must not be advertised outside a BGP confederation boundary.
EXEC
EXEC Privilege
To view the total number of COMMUNITY attributes found, use the
The text line above the route table states the number of COMMUNITY attributes found.
The show ip bgp community command without any parameters lists BGP routes with at least one BGP
community attribute and the output is the same as for the
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series show ip bgp community-list c e t
s View routes that are affected by a specific community list.
Syntax show ip bgp ipv4 multicast community-list community-list-name
Parameters community-list-name Enter the name of a configured IP community list.
Command Modes EXEC
EXEC Privilege
Command
History
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series
Introduced support on C-Series
Border Gateway Protocol IPv4(BGPv4) | 353
show ip bgp dampened-paths c e t
s View BGP routes that are dampened (non-active).
Syntax show ip bgp ipv4 multicast dampened-paths
Command Modes EXEC
EXEC Privilege
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series show ip bgp filter-list c e t
s View the routes that match the filter lists.
Syntax show ip bgp ipv4 multicast filter-list as-path-name
Parameters as-path-name Enter the name of an AS-PATH.
Command Modes EXEC
EXEC Privilege
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series show ip bgp flap-statistics c e t
s View flap statistics on BGP routes.
Syntax show ip bgp ipv4 multicast flap-statistics [ ip-address [ mask ]] [ filter-list as-path-name ]
[ regexp regular-expression ]
Parameters ip-address mask
(OPTIONAL) Enter the IP address (in dotted decimal format) of the BGP network to view information only on that network.
(OPTIONAL) Enter the network mask (in slash prefix (/x) format) of the
BGP network address.
354 | Border Gateway Protocol IPv4(BGPv4)
Command Modes filter-list as-path-name (OPTIONAL) Enter the keyword filter-list followed by the name of a configured AS-PATH ACL.
regexp regular-expression Enter a regular expression then use one or a combination of the following characters to match:
• .
= (period) any single character (including a white space)
• * = (asterisk) the sequences in a pattern (0 or more sequences)
• + = (plus) the sequences in a pattern (1 or more sequences)
• ?
= (question mark) sequences in a pattern (either 0 or 1 sequences). You must enter an escape sequence (CTRL+v) prior to entering the ? regular expression.
• [ ] = (brackets) a range of single-character patterns.
• ( ) = (parenthesis) groups a series of pattern elements to a single element
• { } = (braces) minimum and the maximum match count
• ^ = (caret) the beginning of the input string. If the caret is used at the beginning of a sequence or range, it matches on everything BUT the characters specified.
• $ = (dollar sign) the end of the output string.
EXEC
EXEC Privilege
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series show ip bgp inconsistent-as c e t
s View routes with inconsistent originating Autonomous System (AS) numbers, that is, prefixes that are announced from the same neighbor AS but with a different AS-Path.
Syntax show ip bgp ipv4 multicast inconsistent-as
Command Modes EXEC
EXEC Privilege
Command
History
Version 7.8.1.0
Version 7.7.1.0
Introduced support on S-Series
Introduced support on C-Series
Border Gateway Protocol IPv4(BGPv4) | 355
show ip bgp ipv4 multicast neighbors c e t
s Enables you to view the information exchanged by BGP neighbors.
Syntax show ip bgp ipv4 multicast neighbors [ ip-address [ advertised-routes | dampened-routes | detail | flap-statistics | routes ]]
Parameters ip-address advertised-routes dampened-routes detail flap-statistics routes
(OPTIONAL) Enter the IP address, in either IPv4 or IPv6 format, of the neighbor to view only BGP information exchanged with that neighbor.
(OPTIONAL) Enter the keywords advertised-routes to view only the routes the neighbor sent.
(OPTIONAL) Enter the keyword dampened-routes to view information on dampened routes from the BGP neighbor.
(OPTIONAL) Display detailed neighbor information.
(OPTIONAL) Enter the keyword flap-statistics to view flap statistics on the neighbor’s routes.
(OPTIONAL) Enter the keywords routes to view only the neighbor’s feasible routes.
Command Modes EXEC
EXEC Privilege
356 | Border Gateway Protocol IPv4(BGPv4)
Example Figure 7-28.
Command Example: show ip bgp ipv4 multicast neighbors
FTOS#show ip bgp ipv4 multicast neighbors
BGP neighbor is 25.25.25.25, remote AS 6400, internal link
BGP version 4, remote router ID 25.25.25.25
BGP state ESTABLISHED, in this state for 00:02:18
Last read 00:00:16, hold time is 180, keepalive interval is 60 seconds
Received 1404 messages, 0 in queue
3 opens, 1 notifications, 1394 updates
6 keepalives, 0 route refresh requests
Sent 48 messages, 0 in queue
3 opens, 2 notifications, 0 updates
43 keepalives, 0 route refresh requests
Minimum time between advertisement runs is 5 seconds
Minimum time before advertisements start is 0 seconds
Capabilities received from neighbor for IPv4 unicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
Capabilities advertised to neighbor for IPv4 Multicast :
MULTIPROTO_EXT(1)
ROUTE_REFRESH(2)
CISCO_ROUTE_REFRESH(128)
Update source set to Loopback 0
For address family: IPv4 Multicast
BGP table version 14, neighbor version 14
3 accepted prefixes consume 12 bytes
Prefixes accepted 1 (consume 4 bytes), withdrawn 0 by peer
Prefixes advertised 0, rejected 0, withdrawn 0 from peer
Connections established 2; dropped 1
Last reset 00:03:17, due to user reset
Notification History
'Connection Reset' Sent : 1 Recv: 0
Local host: 100.10.10.1, Local port: 179
Foreign host: 25.25.25.25, Foreign port: 2290
BGP neighbor is 211.1.1.129, remote AS 640, external link
BGP version 4, remote router ID 0.0.0.0
BGP state ACTIVE, in this state for 00:00:36
Last read 00:00:41, hold time is 180, keepalive interval is 60 seconds
Received 28 messages, 0 notifications, 0 in queue
Sent 6 messages, 3 notifications, 0 in queue
Received 18 updates, Sent 6 updates
Route refresh request: received 0, sent 0
Minimum time between advertisement runs is 30 seconds
For address family: IPv4 Multicast
BGP table version 14, neighbor version 0
0 accepted prefixes consume 0 bytes
Prefix advertised 0, rejected 0, withdrawn 0
Connections established 3; dropped 3
Last reset 00:00:37, due to user reset
Notification History
'Connection Reset' Sent : 3 Recv: 0
No active TCP connection
FTOS#
Table 7-18.
Command Example Fields: show ip bgp ipv4 multicast neighbors
Lines beginning with
BGP neighbor
BGP version
Description
Displays the BGP neighbor address and its AS number. The last phrase in the line indicates whether the link between the BGP router and its neighbor is an external or internal one. If they are located in the same AS, then the link is internal; otherwise the link is external.
Displays the BGP version (always version 4) and the remote router ID.
Border Gateway Protocol IPv4(BGPv4) | 357
Table 7-18.
Command Example Fields: show ip bgp ipv4 multicast neighbors
Lines beginning with
BGP state
Last read
Received messages
Sent messages
Received updates
Minimum time
(list of inbound and outbound policies)
For address family:
BGP table version accepted prefixes
Prefix advertised
Connections established
Last reset
Local host:
Foreign host:
Description
Displays the neighbor’s BGP state and the amount of time in hours:minutes:seconds it has been in that state.
This line displays the following information:
• last read is the time (hours:minutes:seconds) the router read a message from its neighbor
• hold time is the number of seconds configured between messages from its neighbor
• keepalive interval is the number of seconds between keepalive messages to help ensure that the TCP session is still alive.
This line displays the number of BGP messages received, the number of notifications (error messages) and the number of messages waiting in a queue for processing.
The line displays the number of BGP messages sent, the number of notifications (error messages) and the number of messages waiting in a queue for processing.
This line displays the number of BGP updates received and sent.
Displays the minimum time, in seconds, between advertisements.
Displays the policy commands configured and the names of the Route map, AS-PATH ACL or Prefix list configured for the policy.
Displays IPv4 Unicast as the address family.
Displays the which version of the primary BGP routing table the router and the neighbor are using.
Displays the number of network prefixes accepted by the router and the amount of memory used to process those prefixes.
Displays the number of network prefixes advertised, the number rejected and the number withdrawn from the BGP routing table.
Displays the number of TCP connections established and dropped between the two peers to exchange BGP information.
Displays the amount of time since the peering session was last reset. Also states if the peer resets the peering session.
If the peering session was never reset, the word never is displayed.
Displays the peering address of the local router and the TCP port number.
Displays the peering address of the neighbor and the TCP port number.
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
View the current BGP routing table.
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series
358 | Border Gateway Protocol IPv4(BGPv4)
show ip bgp peer-group c e t
s Enables you to view information on the BGP peers in a peer group.
Syntax show ip bgp ipv4 multicast peer-group [ peer-group-name [ detail | summary ]]
Parameters peer-group-name detail summary
(OPTIONAL) Enter the name of a peer group to view information about that peer group only.
(OPTIONAL) Enter the keyword detail to view detailed status information of the peers in that peer group.
(OPTIONAL) Enter the keyword summary to view status information of the peers in that peer group.
The output is the same as that found in show ip bgp summary command
Command Modes
Related
Commands
EXEC
EXEC Privilege
neighbor peer-group (assigning peers)
neighbor peer-group (creating group)
Assign peer to a peer-group.
Create a peer group.
View information on the BGP peers in a peer group.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series
Modified: added detail option show ip bgp summary c e t
s Enables you to view the status of all BGP connections.
Syntax show ip bgp ipv4 multicast summary
Command Modes
Example
EXEC
EXEC Privilege
Figure 7-29.
Command Example: show ip bgp ipv4 multicast summary
FTOS#sho ip bgp ipv4 multicast summary
BGP router identifier 100.10.10.1, local AS number 6400
BGP table version is 14, main routing table version 14
7 network entrie(s) and 7 paths using 972 bytes of memory
2 BGP path attribute entrie(s) using 112 bytes of memory
1 BGP AS-PATH entrie(s) using 35 bytes of memory
Neighbor AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/Pfx
25.25.25.25 6400 21 9 14 0 0 00:02:04 3
211.1.1.129 640 28 6 0 0 0 00:00:21 Active
FTOS#
Border Gateway Protocol IPv4(BGPv4) | 359
Table 7-19.
Command Example Fields: show ip bgp ipv4 multicast summary
Field
BGP router identifier
BGP table version network entries
BGP path attribute entries
BGP AS-PATH entries
BGP community entries
Dampening enabled
Neighbor
AS
MsgRcvd
MsgSent
TblVer
InQ
OutQ
Up/Down
State/Pfx
Description
Displays the local router ID and the AS number.
Displays the BGP table version and the main routing table version.
Displays the number of network entries and route paths and the amount of memory used to process those entries.
Displays the number of BGP path attributes and the amount of memory used to process them.
Displays the number of BGP AS_PATH attributes processed and the amount of memory used to process them.
Displays the number of BGP COMMUNITY attributes processed and the
amount of memory used to process them. The show ip bgp community
command provides more details on the COMMUNITY attributes.
Displayed only when dampening is enabled. Displays the number of paths designated as history, dampened, or penalized.
Displays the BGP neighbor address.
Displays the AS number of the neighbor.
Displays the number of BGP messages that neighbor received.
Displays the number of BGP messages that neighbor sent.
Displays the version of the BGP table that was sent to that neighbor.
Displays the number of messages from that neighbor waiting to be processed.
Displays the number of messages waiting to be sent to that neighbor.
If a number appears in parentheses, the number represents the number of messages waiting to be sent to the peer group.
Displays the amount of time (in hours:minutes:seconds) that the neighbor is in the Established stage.
If the neighbor has never moved into the Established stage, the word never is displayed.
If the neighbor is in Established stage, the number of network prefixes received.
If a maximum limit was configured with the
command, (prfxd) appears in this column.
If the neighbor is not in Established stage, the current stage is displayed (Idle,
Connect, Active, OpenSent, OpenConfirm) When the peer is transitioning between states and clearing the routes received, the phrase (Purging) may appear in this column.
If the neighbor is disabled, the phrase (Admin shut) appears in this column.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced support on S-Series
Introduced support on C-Series
Introduced IPv6 MGBP support for E-Series
360 | Border Gateway Protocol IPv4(BGPv4)
BGP Extended Communities (RFC 4360)
BGP Extended Communities, as defined in RFC 4360, is an optional transitive BGP attribute. It provides two major advantages over Standard Communities:
• The range is extended from 4-octet (AA:NN) to 8-octet (Type : Value) to provide enough number communities.
• Communities are structured using a new “Type” field (1 or 2-octets), allowing you to provide granular control/filter routing information based on the type of extended communities.
The BGP Extended Community commands are:
•
•
•
•
•
•
•
•
•
•
show ip bgp ipv4 extcommunity-list
•
show ip bgp paths extcommunity
•
•
show running-config extcommunity-list
deny c e s Use this feature to reject (deny) from the two types of extended communities, Route Origin (rt) or
Site-of-Origin (soo).
Syntax deny { rt | soo } { as4 ASN4:NN | ASN:NNNN | IPADDR:NN }
To remove (delete) the rule, use the no deny { rt | soo } { as4 ASN4:NN | ASN:NNNN | IPADDR:NN } command.
Parameters rt soo as4 ASN4:NN
ASN:NNNN
IPADDR:NN
Enter the keyword rt to designate a Route Origin community
Enter the keyword soo to designate a Site-of-Origin community (also known as
Route Origin).
Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value) .
Enter the 2-octet AS specific extended community number in the format
ASN:NNNN (2-byte AS number:4-byte community value) .
Enter the IP address specific extended community in the format IPADDR:NN
(4-byte IPv4 Unicast Address:2-byte community value)
Defaults
Command Modes
Not configured
CONFIGURATION (conf-ext-community-list)
Border Gateway Protocol IPv4(BGPv4) | 361
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Configure to add (permit) rules
Display the Extended Community list
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series deny regex c e s This features enables you to specify an extended communities to reject (deny) using a regular expressions (regex).
Syntax deny regex { regex }
To remove, use the no deny regex { regex } command.
Parameters regex Enter a regular expression.
Defaults
Command Modes
Usage
Information
Example
Not configured
CONFIGURATION (conf-ext-community-list)
Duplicate commands are silently accepted.
Figure 7-30.
Commands Example: deny regexp
FTOS(conf-ext-community-list)#deny regexp 123
FTOS(conf-ext-community-list)#
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Permit a community using a regular expression
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series description c e s Use this feature to designate a meaningful description to the extended community.
Syntax description { line }
To remove the description, use the no description { line } command.
Parameters line Enter a description (maximum 80 characters).
Defaults Not configured
362 | Border Gateway Protocol IPv4(BGPv4)
Command Modes
Command
History
CONFIGURATION (conf-ext-community-list)
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series ip extcommunity-list c e s Use this feature to enter the Extended Community-list mode.
Syntax ip extcommunity-list word
To exit from this mode, use the exit command.
Parameters word Enter a community list name (maximum 16 characters).
Defaults
Command Modes
Usage
Information
Example
No defaults values or behavior
CONFIGURATION (conf-ext-community-list)
This new mode will change the prompt. See the example below.
Figure 7-31.
Command Example: ip extcommunity-list
FTOS(conf)#ip extcommunity-list test
FTOS(conf-ext-community-list)#
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series match extcommunity c e s Use this feature to match an extended community in the Route Map mode.
Syntax match extcommunity { extended community list name }
To change the match, use the no match extcommunity { extended community list name } command.
Parameters extended community list name Enter the name of the extended community list.
Defaults
Command Modes
Usage
Information
No defaults values or behavior
ROUTE MAP (config-route-map)
Like standard communities, extended communities can be used in route-map to match the attribute.
Border Gateway Protocol IPv4(BGPv4) | 363
Example Figure 7-32.
Command Example: match extcommunity
FTOS(config-route-map)#match extcommunity Freedombird
FTOS(config-route-map)#
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series permit c e s Use this feature to add rules (permit) from the two types of extended communities, Route Origin (rt) or
Site-of-Origin (soo).
Syntax permit { rt | soo } { as4 ASN4:NN | ASN:NNNN | IPADDR:NN }
To change the rules, use the no permit { rt | soo } { as4 ASN4:NN | ASN:NNNN | IPADDR:NN } command.
Parameters rt soo as4 ASN4:NN
ASN:NNNN
IPADDR:NN
Enter the keyword rt to designate a Route Origin community
Enter the keyword soo to designate a Site-of-Origin community (also known as
Route Origin).
Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value) .
Enter the 2-octet AS specific extended community number in the format
ASN:NNNN (2-byte AS number:4-byte community value) .
Enter the IP address specific extended community in the format IPADDR:NN (4-byte
IPv4 Unicast Address:2-byte community value)
Defaults
Command Modes
Related
Commands
Not Configured
CONFIGURATION (conf-ext-community-list)
Configure to delete (deny) rules
Display the Extended Community list
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series permit regex c e s This features enables you specify an extended communities to forward (permit) using a regular expressions (regex).
Syntax permit regex { regex }
To remove, use the no permit regex { regex } command.
364 | Border Gateway Protocol IPv4(BGPv4)
Parameters
Defaults
Command Modes
Usage
Information
Example regex Enter a regular expression.
Not configured
CONFIGURATION (conf-ext-community-list)
Duplicate commands are silently accepted.
Figure 7-33.
Command Example: permit regexp
FTOS(conf-ext-community-list)#permit regexp 123
FTOS(conf-ext-community-list)#
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Deny a community using a regular expression
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series set extcommunity rt c e s Use this feature to set Route Origin community attributes in Route Map.
Syntax set extcommunity rt { as4 ASN4:NN [ non-trans ] | ASN:NNNN [ non-trans ] | IPADDR:NN
[ non-trans ]} [ additive ]
To delete the Route Origin community, use the no set extcommunity command.
Parameters as4 ASN4:NN
ASN:NNNN
IPADDR:NN additive non-trans
Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value) .
Enter the 2-octet AS specific extended community number in the format
ASN:NNNN (2-byte AS number:4-byte community value) .
Enter the IP address specific extended community in the format IPADDR:NN (4-byte
IPv4 Unicast Address:2-byte community value)
(OPTIONAL) Enter the keyword additive to add to the existing extended community.
(OPTIONAL) Enter the keyword non-trans to indicate a non-transitive BGP extended community.
Defaults
Command Modes
Usage
Information
No default values or behavior
ROUTE MAP (config-route-map)
If the set community rt and soo are in the same route-map entry, we can define the behavior as:
• If rt option comes before soo , with or without additive option, then soo overrides the communities set by rt
Border Gateway Protocol IPv4(BGPv4) | 365
• If rt options comes after soo, without the additive option, then rt overrides the communities set by soo
• If rt with additive option comes after soo , then rt adds the communities set by soo
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Set extended community site-of-origin in route-map.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series set extcommunity soo c e s Use this feature to set extended community site-of-origin in Route Map.
Syntax set extcommunity soo { as4 ASN4:NN | ASN:NNNN | IPADDR:NN [ non-trans ]}
To delete the site-of-origin community, use the no set extcommunity command.
Parameters as4 ASN4:NN
ASN:NNNN
IPADDR:NN non-trans
Enter the keyword as4 followed by the 4-octet AS specific extended community number in the format ASN4:NN (4-byte AS number:2-byte community value) .
Enter the 2-octet AS specific extended community number in the format
ASN:NNNN (2-byte AS number:4-byte community value) .
Enter the IP address specific extended community in the format IPADDR:NN (4-byte
IPv4 Unicast Address:2-byte community value)
(OPTIONAL) Enter the keyword non-trans to indicate a non-transitive BGP extended community.
Defaults
Command Modes
Usage
Information
No default behavior or values
ROUTE MAP (config-route-map)
If the set community rt and soo are in the same route-map entry, we can define the behavior as:
• If rt option comes before soo , with or without additive option, then soo overrides the communities set by rt
• If rt options comes after soo, without the additive option, then rt overrides the communities set by soo
• If rt with additive option comes after soo , then rt adds the communities set by soo
Related
Commands
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Set extended community route origins via the route-map
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
366 | Border Gateway Protocol IPv4(BGPv4)
show ip bgp ipv4 extcommunity-list c e s Use this feature to display IPv4 routes matching the extended community list name.
Syntax show ip bgp [ipv4 [ multicast | unicast ] | ipv6 unicast ] extcommunity-list name
Parameters multicast unicast ipv6 unicast name
Enter the keyword multicast to display the multicast route information.
Enter the keyword unicast to display the unicast route information.
Enter the keywords ipv6 unicast to display the IPv6 unicast route information.
(OPTIONALLY) Enter the name of the extcommunity-list.
Defaults
Command Modes
Usage
Information
No default values or behavior
EXEC
EXEC Privilege
If there is a type or sub-type that is not well-known, it will be displayed as:
TTSS:XX:YYYY
Where TT is type, SS is sub-type displayed in hexadecimal format, XX:YYYY is the value divided into 2-byte and 4-byte values in decimal format. This format is consistent with other vendors.
For example, if the extended community has type 0x04, sub-type 0x05, value
0x20 00 00 00 10 00, it will be displayed as:
Example
0x0405:8192:4096
Non-transitive extended communities are marked with an asterisk, as shown in the figure below.
Figure 7-34.
Command Example: show ip bgp ipv4 multicast extcommunity-list
FTOS#show ip bgp ipv4 multicast extcommunity-list
BGP routing table entry for 192.168.1.0/24, version 2
Paths: (1 available, table Default-IP-Routing-Table.)
Not advertised to any peer
Received from :
100.100.1.2 (2.4.0.1) Best
AS_PATH : 200
Next-Hop : 100.100.1.2, Cost : 0
Origin IGP, Metric 4294967295 (Default), LocalPref 100, Weight 0, external
Communities :
300:400 500:600
Extended Communities :
RT:1111:4278080 SoO:35:4 SoO:36:50529043 SoO:37:50529044
SoO:38:50529045 SoO:0.0.0.2:33 SoO:506.62106:34 0x0303:254:11223*
FTOS#
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Border Gateway Protocol IPv4(BGPv4) | 367
show ip bgp paths extcommunity c e s Use this feature to display all BGP paths having extended community attributes.
Syntax show ip bgp paths extcommunity
Command Modes
Example
EXEC
EXEC Privilege
Figure 7-35.
Command Example: show ip bgp paths community (Partial)
FTOS#show ip bgp paths extcommunity
Total 1 Extended Communities
Address Hash Refcount Extended Community
0x41d57024 12272 1 RT:7:200 SoO:5:300 SoO:0.0.0.3:1285
FTOS#
Table 7-20.
Command Example Fields: show ip bgp paths community
Field
Address
Hash
Refcount
Community
Description
Displays the internal address where the path attribute is stored.
Displays the hash bucket where the path attribute is stored.
Displays the number of BGP routes using these extended communities.
Displays the extended community attributes in this BGP path.
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series show ip extcommunity-list c e s Display the IP extended community list.
Syntax show ip extcommunity-list [ word ]
Parameters word Enter the name of the extended community list you want to view.
Defaults
Command Modes
Defaults.
EXEC
EXEC Privilege
368 | Border Gateway Protocol IPv4(BGPv4)
Example Figure 7-36.
Command Example: show ip extcommunity-list
FTOS#show ip extcommunity-list test ip extcommunity-list test
deny RT:1234:12
permit regexp 123
deny regexp 234
deny regexp 123
FTOS#
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series show running-config extcommunity-list c e s Use this feature to display the current configuration of the extended community lists.
Syntax show running-config extcommunity-list [ word ]
Parameters word Enter the name of the extended community list you want to view.
Defaults
Command Modes
Example
No default values or behavior
EXEC Privilege
Figure 7-37.
Command Example: show running-config extcommunity-list
FTOS#show running-config extcommunity-list test ip extcommunity-list test
permit rt 65033:200
deny soo 101.11.11.2:23
permit rt as4 110212:340
deny regex ^(65001_)$
FTOS#
Command
History
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Border Gateway Protocol IPv4(BGPv4) | 369
370 | Border Gateway Protocol IPv4(BGPv4)
8
Bare Metal Provisioning
Overview
Bare Metal Provisioning version 2.0 is supported on the following platforms: z
In a data center network, Bare Metal Provisioning (BMP) automates the configuration and updating of switches, ensuring standard configurations across installed devices.
You can configure auto-configuration on a single switch or on multiple switches. BMP allows you to set up a group of switches with a minimum of effort, but is also useful for quick configuration of a single switch.
For additional information on BMP in an auto-configuration mode, refer to the Open
Automation Guide .
Note: BMP 2.0 does not support stacking in this release.
BMP eases configuration by automating the following steps:
• Boot images and running configurations are specified in a DHCP server.
• Switch boots up in Layer 3 mode with interfaces already in no shutdown mode and only enabling some basic protocols to protect the switch and the network.
• The first port that receives the DHCP server response retains the IP address provided by the DHCP server during the BMP process. All other management and user ports are shut down.
• Files are automatically downloaded from a file server.
• After the BMP process is complete, the IP address is released and the configuration is applied by the switch.
Commands
•
•
reload factory-default dhcp-client-mode
•
reload factory-default dhcp-client-only-mode
•
reload factory-default dhcp-server-mode
•
Bare Metal Provisioning | 371
•
•
reload factory-default
BMP 1.5 auto-configuration mode A: Reload the switch with the FTOS image stored in the local flash and apply the factory-default startup configuration. A temporary management IP address (192.168.0.1) is created.
Note: This command has been deprecated in FTOS software version 8.3.3.9.
Syntax
Defaults
Command Modes
Command
History reload factory-default
Loads the factory-default startup configuration file (see Example below).
EXEC Privilege
Usage
Information
Example
Version 8.3.3.9
Version 8.3.5.0
Version 8.3.3.1
Deprecated command.
Introduced on the S55.
Introduced on the S60.
This is the reload mode when a new Dell Networking switch (without BMP) arrives.
You can replace the temporary management IP address with a user-configured management IP address. The IP address 192.168.0.1 continues to be active for ten minutes. After ten minutes, a user-configured IP address is applied to the management interface.
The factory-default startup configuration file is as follows: interface range GigabitEthernet 0/0 - 47
no shutdown
switchport
!
interface range TenGigabitEthernet 0/48 - 51
no shutdown
switchport
!
interface ManagementEthernet 0/0
ip address 192.168.0.1/24
no shutdown
!
ip telnet server enable
!
ip ssh server enable
!
protocol spanning-tree rstp
no disable
!
protocol lldp
no disable
advertise dot1-tlv port-vlan-id
372 | Bare Metal Provisioning
advertise dot3-tlv max-frame-size
advertise management-tlv system-description system-name
advertise med no disable
!
reload factory-default dhcp-client-mode
BMP 1.5 auto-configuration mode C: Reload a switch in DHCP-client mode with a specified FTOS image and a startup configuration file.
Note: This command has been deprecated in FTOS software version 8.3.3.9.
Syntax
Parameters
Defaults
Command Modes reload factory-default dhcp-client-mode [ honor-startup-config ] honor-startup-config Honor the startup configuration file stored in the local flash. If this option is not entered, retrieve the configuration file from the configured file server.
This is the default reload mode when a new Dell Networking switch configured with
BMP arrives. The switch contacts a DHCP server to download an FTOS image and configuration file. If no DHCP server responds, the system reloads in factory-default mode.
EXEC Privilege
Command
History
Version 8.3.3.9
Deprecated command.
Version 8.3.5.0
Introduced on the S55.
Version 8.3.3.1
Introduced on the S60.
Bare Metal Provisioning | 373
reload factory-default dhcp-client-only-mode
BMP 1.5 auto-configuration mode D: Reload the switch in DHCP-client-only mode with a specified FTOS image and startup configuration file for a specified number of discovery attempts.
Note: This command has been deprecated in FTOS software version 8.3.3.9.
Syntax
Parameters
Defaults
Command Modes reload factory-default dhcp-client-only-mode [ retries ] [ honor-startup-config ] retries honor-startup-config
Enter the number of times that the switch attempts to reach a DHCP server. If no number of retries is entered, the switch continues to try to locate a DHCP server an infinite number of times and does not complete reloading. Range: 2 - 214748364
Default: Infinite number of retry attempts.
Honor the startup configuration file stored in the local flash. If this option is not entered, retrieve the configuration file from the configured file server.
The switch reloads by attempting to contact a DHCP server to download the FTOS image and startup configuration file. By default, an infinite number of retries are attempted.
When a switch that is reloading in DHCP-client-only mode cannot reach a DHCP server and has a number of retries configured, the switch attempts to reach the DHCP server only the specified number of times. If a DHCP server cannot be reached within the configured number of retries, the switch reloads in factory-default mode.
EXEC Privilege
Command
History
Usage
Information
Version 8.3.3.9
Deprecated command.
Version 8.3.5.0
Introduced on the S55.
Version 8.3.3.1
Introduced on the S60.
Important : Do not use Mode D unless the DHCP, DNS, and file servers are already configured. If the servers are not configured in the network, a switch endlessly attempts to discover the DHCP and other servers and does not complete the reload.
374 | Bare Metal Provisioning
reload factory-default dhcp-server-mode
BMP 1.5 auto-configuration mode B: Reload the switch using the FTOS image stored in the local flash and apply the factory-default and DHCP server configurations. The switch boots up with a temporary management IP address (192.168.0.1/24) and functions as a DHCP server.
Note: This command has been deprecated in FTOS software version 8.3.3.9.
Syntax
Defaults
Command Modes
Command
History reload factory-default dhcp-server-mode
None
EXEC Privilege
Usage
Information
Version 8.3.3.9
Deprecated command.
]Version 8.3.5.0
Introduced on the S55.
Version 8.3.3.1
Introduced on the S60.
You must replace the temporary management IP address within ten minutes with a user-configured, permanent management IP address in order to secure the switch.
During the first ten minutes, after authentication is enabled, access to the switch does not require a password.
reload-type
Configure a switch to reload in normal mode or as a DHCP client with all ports configured for z Layer 3 traffic.
Syntax reload-type { normal-reload | jump-start [ config-download { enable | disable }] [ dhcp-timeout minutes ]}
Parameters
Defaults normal-reload jump-start config-download { enable | disable } dhcp-timeout minutes
The switch reloads in normal mode using the FTOS image and startup configuration file stored in the local flash.
The switch reloads in JumpStart mode as a DHCP client.
(Optional) Configure whether the switch boots up using the configuration file downloaded from the DHCP/file servers ( enable )
OR if the downloaded file will be discarded and the startup configuration file stored in the local flash will be used ( disable ).
Default: None
(Optional) Configure the DHCP timeout (in minutes) after which the
JumpStart reload stops.
Range: 1 to 50.
Default: Infinite number of retries.
A switch running BMP 2.0 reloads in JumpStart mode as a DHCP client with all ports configured for Layer 3 traffic.
Bare Metal Provisioning | 375
Command Modes EXEC Privilege
Command
History
Usage
Information
Version 8.3.5.3
Introduced on S55
Version 8.3.3.8 Introduced on S60
Version 8.3.11.4
Introduced on Z9000
Version 8.3.10.1
Introduced on S4810.
For an initial setup, the config-download parameter of the reload-type command is enabled.
After the configuration file is successfully downloaded, the config-download parameter is automatically disabled. You can enable it again using the reload-type command.
After you set the auto-configuration mode (JumpStart or Normal reload) using the reload-type command, you must enter the reload command to reload the switch in the configured mode.
When a switch reloads in JumpStart mode, all ports, including the management port, are automatically configured as Layer 3 physical ports. The switch acts as a DHCP client on the ports for a user-configured time ( dhcp-timeout option). You can reconfigure the default startup configuration and DHCP timeout values.
If a switch enters a loop while reloading in JumpStart mode because the switch continuously tries to contact a DHCP server and a DHCP server is not found, connect to the switch using
the console terminal and enter the stop jump-start
command to interrupt the reload and boot up in normal mode. The startup configuration is then loaded from the local flash on the switch and the auto-configuration mode is automatically changed to Normal reload.
Use the reload-type command in BMP 2.0 to toggle between Normal and JumpStart auto-configuration modes. The reload settings for the auto-configuration mode that you configure are stored in memory and retained for future reboots and BMP software upgrades.
You can enter the reload command at any time to reload the switch in the last configured mode: Normal reload or JumpStart mode.
Related
Commands
Display the current reload mode (Normal or jump-start mode)
Stops the JumpStart process to prevent a loop if the DHCP server is not found.
show reload-type
Display the currently configured reload mode.
z
Syntax
Defaults
Command Modes show reload-type
None
EXEC Privilege
376 | Bare Metal Provisioning
Command
History
Usage
Information
Example
Version 8.3.5.3 Introduced on S55
Version 8.3.3.8 Introduced on S60
Version 8.3.11.4
Introduced on Z9000
Version 8.3.10.1
Introduced on S4810.
command to check the currently configured auto-configuration mode (JumpStart or Normal reload) on a switch running BMP 2.0.
You can also use the show bootvar command to display the current reload mode for BMP 2.0 with the path of the FTOS image file retrieved from a DHCP server.
FTOS#show reload-type
Reload-Type : normal-reload [Next boot : normal-reload]
Related
Commands
Configure the reload mode as normal or JumpStart.
stop jump-start
Stop the switch from reloading in JumpStart mode to prevent an infinite loop.
z
Syntax
Defaults
Command Modes stop jump-start
None
EXEC Privilege
Command
History
Version 8.3.5.3
Version 8.3.3.8
Introduced on S55
Introduced on S60
Version 8.3.11.4
Introduced on Z9000
Version 8.3.10.1
Introduced on S4810.
Related
Commands
Usage
Information
Configure the reload mode as normal or JumpStart.
Use the
command from the console of a switch running BMP 2.0 if the switch enters a loop while reloading in JumpStart mode because it is continuously trying to contact a
default reload type will be a normal reload. This will be indicated in the show reload-type command.
Bare Metal Provisioning | 377
378 | Bare Metal Provisioning
9
Content Addressable Memory (CAM)
Overview
Content Addressable Memory (CAM) commands are supported C-Series, E-Series TeraScale and
S-Series, as indicated by the symbols under each command heading: c e t
s
This chapter includes information relating to the E-Series TeraScale platform. Refer to Chapter 11,
“Content Addressable Memory (CAM) for ExaScale for information on the commands for the E-Series
ExaScale platform.
Note: Not all CAM commands are supported on all platforms. Be sure to note the platform symbol when looking for a command.
Warning: If you are using these features for the first time, contact Dell Networking
Technical Assistance Center (TAC) for guidance. For information on contacting Dell
Networking TAC, visit the Dell Networking website at http://support.dell.com/force10
This chapter includes the following sections:
•
CAM Profile Commands
The CAM profiling feature enables you to partition the CAM to best suit your application. For example:
• Configure more Layer 2 FIB entries when the system is deployed as a switch.
• Configure more Layer 3 FIB entries when the system is deployed as a router.
• Configure more ACLs (when IPv6 is not employed).
• Hash MPLS packets based on source and destination IP addresses for LAGs.
• Hash based on bidirectional flow for LAGs.
• Optimize the VLAN ACL Group feature, which permits group VLANs for IP egress ACLs.
Content Addressable Memory (CAM) | 379
Important Points to Remember
• CAM Profiles are available on FTOS versions 6.3.1.1 and later for the E-Series TeraScale.
• FTOS versions 7.8.1.0 and later support CAM allocations on the C-Series and S-Series.
• All line cards within a single system must have the same CAM profile (including CAM sub-region configurations); this profile must match the system CAM profile (the profile on the primary
RPM).
• FTOS automatically reconfigures the CAM profile on line cards and the secondary RPM to match the system CAM profile by saving the correct profile on the card and then rebooting it.
• The CAM configuration is applied to entire system when you use CONFIGURATION mode commands. You must save the running-configuration to affect the change.
• When budgeting your CAM allocations for ACLs and QoS configurations, remember that ACL and QoS rules might consume more than one CAM entry depending on complexity. For example,
TCP and UDP rules with port range options might require more than one CAM entry.
• After you install a secondary RPM, copy the running-configuration to the startup-configuration so that the new RPM has the correct CAM profile.
• You MUST save your changes and reboot the system for CAM profiling or allocations to take effect.
The CAM Profiling commands are:
•
•
•
•
•
•
•
•
cam-acl c s Allocate CAM for IPv4 and IPv6 ACLs
Syntax cam-acl { default | l2acl number ipv4acl number ipv6acl number , ipv4qos number l2qos number , l2pt number ipmacacl number ecfmacl number [ vman-qos | vman-dual-qos number }
Parameters default l2acl number ipv4acl number ipv6acl number , ipv4qos number l2qos number , l2pt number ipmacacl number ecfmacl number
[ vman-qos | vman-dual-qos number
Use the default CAM profile settings, and set the CAM as follows.
L3 ACL (ipv4acl): 6
L2 ACL(l2acl): 5
IPv6 L3 ACL (ipv6acl): 0
L3 QoS (ipv4qos): 1
L2 QoS (l2qos): 1
Allocate space to each CAM region.
Enter the CAM profile name followed by the amount to be allotted.
The total space allocated must equal 13.
The ipv6acl range must be a factor of 2.
380 | Content Addressable Memory (CAM)
Command Modes
Command
History
Usage
Information
CONFIGURATION
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 7.8.1.0
Introduced on the S60.
Added ecfmacl , vman-qos , and vman-dual-qos keywords.
Introduced on the S-Series
Introduced on the C-Series
You must save the new CAM settings to the startup-config ( write-mem or copy run start ) then reload the system for the new settings to take effect.
The total amount of space allowed is 16 FP Blocks. System flow requires 3 blocks and these cannot be reallocated.
When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.
Ranges for the CAM profiles are 1-10, except for the ipv6acl profile which is 0-10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).
cam-acl-egress
Allocate CAM for egress ACLs
Syntax
Parameters cam-acl egress default | l2acl default l2acl number
Command Modes
Command
History
CONFIGURATION
Version 8.3.3.4
Introduced on the S60.
Reset egress CAM ACL entries to default settings.
Allocate space for Layer 2 egress ACL.
Range: 1-4 FP blocks
Content Addressable Memory (CAM) | 381
cam-optimization c s Optimize CAM utilization for QoS Entries by minimizing require policy-map CAM space.
Syntax cam-optimization [qos]
Parameters qos Optimize CAM usage for Quality of Service (QoS)
Command Modes
Defaults
CONFIGURATION
Disabled
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Introduced on the S60.
Introduced on the s-Series
Introduced on the C-Series and S-Series
Usage
Information
When this command is enabled, if a Policy Map containing classification rules (ACL and/or dscp/ ip-precedence rules) is applied to more than one physical interface on the same port pipe, only a single copy of the policy will be written (only 1 FP entry will be used).
Note that an ACL itself may still require more that a single FP entry, regardless of the number of interfaces. Refer to IP Access Control Lists, Prefix Lists, and Route-map in the FTOS
Configuration Guide for complete discussion.
cam-profile e Set the default CAM profile and the required microcode.
Syntax cam-profile profile microcode microcode
382 | Content Addressable Memory (CAM)
Parameters
Defaults
Command Modes
Command
History profile Choose one of the following CAM profiles:
• Enter the keyword default to specify the default CAM profile.
• Enter the keyword eg-default to specify the default CAM profile for EG
(dual-CAM) line cards.
• Enter the keyword ipv4-320k to specify the CAM profile that provides
320K entries for the IPv4 Forwarding Information Base (FIB) .
• Enter the keyword ipv4-egacl-16k to specify the CAM profile that provides 16K entries for egress ACLs.
• Enter the keyword ipv6-extacl to specify the CAM profile that provides IPv6 functionality.
• Enter the keyword l2-ipv4-inacl to specify the CAM profile that provides 32K entries for ingress ACLs.
• Enter the keyword unified-default to specify the CAM profile that maintains the CAM allocations for the IPv6 and IPv4 FIB while allocating more CAM space for the Ingress and Egress Layer 2 ACL, and IPv4 ACL regions.
• Enter the keyword ipv4-vrf to specify the CAM profile that maintains the
CAM allocations for the IPv4 FIB while allocating CAM space for VRF.
• Enter the keyword ipv4-v6-vrf to specify the CAM profile that maintains the CAM allocations for the IPv4 and IPv6FIB while allocating CAM space for VRF.
• Enter the keyword ipv4-64k-ipv6 to specify the CAM profile that provides an alternate to ipv6-extacl that redistributes CAM space from the IPv4FIB to
IPv4Flow and IPv6FIB.
microcode microcode Choose a microcode based on the CAM profile you chose. Not all microcodes are available to be paired with a CAM profile.
• Enter the keyword default to select the microcode that distributes CAM space for a typical deployment.
• Enter the keyword lag-hash-align to select the microcode for applications that require the same hashing for bi-directional traffic.
• Enter the keyword lag-hash-mpls to select the microcode for hashing based on MPLS labels (up to five labels deep).
• Enter the keyword ipv6-extacl to select the microcode for IPv6.
• Enter the keyword acl-group to select the microcode for applications that need 16k egress IPv4 ACLs.
• Enter the keyword ipv4-vrf to select the microcode for IPv4 VRF applications.
• Enter the keyword ipv4-v6-vrf to select the microcode forIPv4 and IPv6
VRF applications.
cam-profile default microcode default
CONFIGURATION
Version 8.2.1.0
Version 7.9.1.0
Version 7.5.1.0
Version 7.4.2.0
Version 7.4.1.0
Version 6.5.1.0
Version 6.3.1.0
Added support for ipv4-64k-ipv6 profile
Added support for VRF protocols.
Added the l2-ipv4-inacl CAM profile
Added the unified-default CAM profile and lag-hash-align microcode
Added the lag-hash-mpls microcode
Added the eg-default and ipv4-320k CAM profiles
Introduced on E-Series
Content Addressable Memory (CAM) | 383
Usage
Information
You must save the running configuration using the command copy running-config startup-config after changing the CAM profile from CONFIGURATION mode. CAM profile changes take effect after the next chassis reboot.
Note: Do not use the ipv4-egacl-16 CAM profile for Layer 2 egress ACLs.
Note: Do not make any changes to the CAM profile after you change the profile to ipv4-320K and save the configuration until after you reload the chassis; any changes lead to unexpected behavior. After you reload the chassis, you may make changes to the IPv4 Flow partition.
show cam-acl c Display the details of the CAM profiles on the chassis and all line cards.
Syntax show cam-acl
Defaults None
Command Modes EXEC Privilege
Command
History
Usage
Information
Version 7.8.1.0
Introduced on C-Series
The display reflects the settings implemented with the cam-acl command.
Example Figure 9-1.
Command Output: show cam-acl (default)
FTOS# show cam-acl
-- Chassis Cam ACL --
Current Settings(in block sizes)
L2Acl : 5
Ipv4Acl : 6
Ipv6Acl : 0
Ipv4Qos : 1
L2Qos : 1
-- Line card 4 --
Current Settings(in block sizes)
L2Acl : 5
Ipv4Acl : 6
Ipv6Acl : 0
Ipv4Qos : 1
L2Qos : 1
FTOS#
384 | Content Addressable Memory (CAM)
Figure 9-2.
Command Output: show cam-acl (non-default)
FTOS# show cam-acl
-- Chassis Cam ACL --
Current Settings(in block sizes)
L2Acl : 2
Ipv4Acl : 2
Ipv6Acl : 4
Ipv4Qos : 2
L2Qos : 3
-- Line card 4 --
Current Settings(in block sizes)
L2Acl : 2
Ipv4Acl : 2
Ipv6Acl : 4
Ipv4Qos : 2
L2Qos : 3
FTOS# show cam-profile e Display the details of the CAM profiles on the chassis and all line cards.
Syntax show cam-profile [ profile microcode microcode | summary ]
Content Addressable Memory (CAM) | 385
Parameters profile microcode microcode summary
(OPTIONAL) Choose a single CAM profile to display:
• Enter the keyword default to specify the default CAM profile.
• Enter the keyword eg-default to specify the default CAM profile for EG
(dual-CAM) line cards.
• Enter the keyword ipv4-320k to specify the CAM profile that provides 320K entries for the IPv4 Forwarding Information Base (FIB) .
• Enter the keyword ipv4-egacl-16k to specify the CAM profile that provides
16K entries for egress ACLs.
• Enter the keyword ipv6-extacl to specify the CAM profile that provides
IPv6 functionality.
• Enter the keyword l2-ipv4-inacl to specify the CAM profile that provides
32K entries for ingress ACLs.
• Enter the keyword unified-default to specify the CAM profile that maintains the
CAM allocations for the IPv6 and IPv4 FIB while allocating more CAM space for the
Ingress and Egress Layer 2 ACL, and IPv4 ACL regions.
• Enter the keyword ipv4-vrf to specify the CAM profile that maintains the CAM allocations for the IPv4 FIB while allocating CAM space for VRF.
• Enter the keyword ipv4-v6-vrf to specify the CAM profile that maintains the CAM allocations for the IPv4 and IPv6FIB while allocating CAM space for VRF.
Choose the microcode to display. Not all microcodes are available to be paired with a
CAM profile.
• Enter the keyword default to select the microcode that distributes CAM space for a typical deployment.
• Enter the keyword lag-hash-align to select the microcode for applications that require the same hashing for bi-directional traffic.
• Enter the keyword lag-hash-mpls to select the microcode for hashing based on
MPLS labels (up to five labels deep).
• Enter the keyword ipv6-extacl to select the microcode for IPv6.
• Enter the keyword acl-group to select the microcode for applications that need 16k egress IPv4 ACLs.
• Enter the keyword ipv4-vrf to select the microcode for IPv4 VRF applications.
• Enter the keyword ipv4-v6-vrf to select the microcode forIPv4 and IPv6 VRF applications.
• Enter the keyword ipv4-64k-ipv6 to specify the CAM profile that provides an alternate to ipv6-extacl that redistributes CAM space from the IPv4FIB to IPv4Flow and IPv6FIB.
(OPTIONAL) Enter this keyword to view a summary listing of the CAM profile and microcode on the chassis and all line cards.
Defaults
Command Modes
Command
History
None
EXEC Privilege
Usage
Information
Version 8.2.1.0
Version 7.9.1.0
Version 6.3.1.0
Added support for ipv4-64k-ipv6 profile
Added support for VRF protocols.
Introduced on E-Series
If the CAM profile has been changed, this command displays the current CAM profile setting in one column and in the other column displays the CAM profile and the microcode that will be configured for the chassis and all online line cards after the next reboot .
386 | Content Addressable Memory (CAM)
Example 1 Figure 9-3.
Command Output: show cam-profile summary
FTOS# show cam-profile summary
-- Chassis CAM Profile --
: Current Settings : Next Boot
Profile Name : Default : Default
MicroCode Name : Default : Default
: Current Settings : Next Boot
-- Line card 1 --
Profile Name : Default : Default
MicroCode Name : Default : Default
: Current Settings : Next Boot
-- Line card 6 --
Profile Name : Default : Default
MicroCode Name : Default : Default
FTOS#
Example 2 Figure 9-4.
Command Output: show cam-profile
FTOS# show cam-profile
-- Chassis Cam Profile --
CamSize : 18-Meg
: Current Settings : Next Boot
Profile Name : DEFAULT : DEFAULT
L2FIB : 32K entries : 32K entries
L2ACL : 1K entries : 1K entries
IPv4FIB : 256K entries : 256K entries
IPv4ACL : 12K entries : 12K entries
IPv4Flow : 24K entries : 24K entries
EgL2ACL : 1K entries : 1K entries
EgIPv4ACL : 1K entries : 1K entries
Reserved : 8K entries : 8K entries
IPv6FIB : 0 entries : 0 entries
IPv6ACL : 0 entries : 0 entries
IPv6Flow : 0 entries : 0 entries
EgIPv6ACL : 0 entries : 0 entries
MicroCode Name : Default : Default
-- Line card 0 --
CamSize : 18-Meg
: Current Settings : Next Boot
Profile Name : DEFAULT : DEFAULT
L2FIB : 32K entries : 32K entries
L2ACL : 1K entries : 1K entries
IPv4FIB : 256K entries : 256K entries
IPv4ACL : 12K entries : 12K entries
IPv4Flow : 24K entries : 24K entries
EgL2ACL : 1K entries : 1K entries
EgIPv4ACL : 1K entries : 1K entries
Reserved : 8K entries : 8K entries
IPv6FIB : 0 entries : 0 entries
IPv6ACL : 0 entries : 0 entries
IPv6Flow : 0 entries : 0 entries
EgIPv6ACL : 0 entries : 0 entries
MicroCode Name : Default : Default
FTOS# show cam-usage e Display Layer 2, Layer 3, ACL, or all CAM usage statistics.
Syntax show cam-usage [ acl | router | switch ]
Content Addressable Memory (CAM) | 387
Parameters acl router switch
None
EXEC Privilege
(OPTIONAL) Enter this keyword to display Layer 2 and Layer 3 ACL CAM usage.
(OPTIONAL) Enter this keyword to display Layer 3 CAM usage.
(OPTIONAL) Enter this keyword to display Layer 2 CAM usage.
Defaults
Command Modes
Command
History
Example
Version 6.5.1.0
Introduced on E-Series
Figure 9-5.
Command Example: show cam-usage
FTOS# show cam-usage
Linecard|Portpipe| CAM Partition | Total CAM | Used CAM |Available CAM
========|========|=================|=============|=============|==============
1 | 0 | IN-L2 ACL | 1008 | 320 | 688
| | IN-L2 FIB | 32768 | 1132 | 31636
| | IN-L3 ACL | 12288 | 2 | 12286
| | IN-L3 FIB | 262141 | 14 | 262127
| | IN-L3-SysFlow | 2878 | 45 | 2833
| | IN-L3-TrcList | 1024 | 0 | 1024
| | IN-L3-McastFib | 9215 | 0 | 9215
| | IN-L3-Qos | 8192 | 0 | 8192
| | IN-L3-PBR | 1024 | 0 | 1024
| | IN-V6 ACL | 0 | 0 | 0
| | IN-V6 FIB | 0 | 0 | 0
| | IN-V6-SysFlow | 0 | 0 | 0
| | IN-V6-McastFib | 0 | 0 | 0
| | OUT-L2 ACL | 1024 | 0 | 1024
| | OUT-L3 ACL | 1024 | 0 | 1024
| | OUT-V6 ACL | 0 | 0 | 0
1 | 1 | IN-L2 ACL | 320 | 0 | 320
| | IN-L2 FIB | 32768 | 1136 | 31632
| | IN-L3 ACL | 12288 | 2 | 12286
| | IN-L3 FIB | 262141 | 14 | 262127
| | IN-L3-SysFlow | 2878 | 44 | 2834
--More--
Example Figure 9-6.
Command Example: show cam-usage acl
FTOS# show cam-usage acl
Linecard|Portpipe| CAM Partition | Total CAM | Used CAM |Available CAM
========|========|=================|=============|=============|==============
11 | 0 | IN-L2 ACL | 1008 | 0 | 1008
| | IN-L3 ACL | 12288 | 2 | 12286
| | OUT-L2 ACL | 1024 | 2 | 1022
| | OUT-L3 ACL | 1024 | 0 | 1024
FTOS#
388 | Content Addressable Memory (CAM)
Example Figure 9-7.
Command Example: show cam-usage router
FTOS# show cam-usage router
Linecard|Portpipe| CAM Partition | Total CAM | Used CAM |Available CAM
========|========|=================|=============|=============|==============
11 | 0 | IN-L3 ACL | 8192 | 3 | 8189
| | IN-L3 FIB | 196607 | 1 | 196606
| | IN-L3-SysFlow | 2878 | 0 | 2878
| | IN-L3-TrcList | 1024 | 0 | 1024
| | IN-L3-McastFib | 9215 | 0 | 9215
| | IN-L3-Qos | 8192 | 0 | 8192
| | IN-L3-PBR | 1024 | 0 | 1024
| | OUT-L3 ACL | 16384 | 0 | 16384
11 | 1 | IN-L3 ACL | 8192 | 3 | 8189
| | IN-L3 FIB | 196607 | 1 | 196606
| | IN-L3-SysFlow | 2878 | 0 | 2878
| | IN-L3-TrcList | 1024 | 0 | 1024
| | IN-L3-McastFib | 9215 | 0 | 9215
| | IN-L3-Qos | 8192 | 0 | 8192
| | IN-L3-PBR | 1024 | 0 | 1024
| | OUT-L3 ACL | 16384 | 0 | 16384
FTOS#
Example Figure 9-8.
Command Example: show cam-usage switch
FTOS# show cam-usage switch
Linecard|Portpipe| CAM Partition | Total CAM | Used CAM |Available CAM
========|========|=================|=============|=============|==============
11 | 0 | IN-L2 ACL | 7152 | 0 | 7152
| | IN-L2 FIB | 32768 | 1081 | 31687
| | OUT-L2 ACL | 0 | 0 | 0
11 | 1 | IN-L2 ACL | 7152 | 0 | 7152
| | IN-L2 FIB | 32768 | 1081 | 31687
| | OUT-L2 ACL | 0 | 0 | 0
FTOS# test cam-usage c e s Verify that enough CAM space is available for the IPv6 ACLs you have created.
Syntax test cam-usage service-policy input input policy name linecard { number | all }
Parameters policy-map name Enter the name of the policy-map to verify.
number Enter all to get information for all the linecards/stack-units, or enter the linecard/ stack-unit number to get information for a specific card.
Range : 0-6 for E-Series, 0-7 for C-Series, 0-11 for S60; 0-7 for all other S-Series
Defaults
Command Modes
Command
History
None
EXEC Privilege
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced
This command applies to both IPv4 and IPv6 CAM Profiles, but is best used when verifying QoS optimization for IPv6 ACLs.
Content Addressable Memory (CAM) | 389
QoS Optimization for IPv6 ACLs does not impact the CAM usage for applying a policy on a single (or the first of several) interfaces. It is most useful when a policy is applied across multiple interfaces; it can reduce the impact to CAM usage across subsequent interfaces.
Example The following examples show some sample output when using the test cam-usage command.
Figure 9-9.
Command Example: test cam-usage (C-Series)
FTOS# test cam-usage service-policy input LauraMapTest linecard all
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
------------------------------------------------------------------------------------------
2 | 1 | IPv4Flow | 232 | 0 | Allowed
2 | 1 | IPv6Flow | 0 | 0 | Allowed
4 | 0 | IPv4Flow | 232 | 0 | Allowed
4 | 0 | IPv6Flow | 0 | 0 | Allowed
FTOS#
FTOS #test cam-usage service-policy input LauraMapTest linecard 4 port-set 0
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
------------------------------------------------------------------------------------------
4 | 0 | IPv4Flow | 232 | 0 | Allowed
4 | 0 | IPv6Flow | 0 | 0 | Allowed
FTOS#
FTOS# test cam-usage service-policy input LauraMapTest linecard 2 port-set 1
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
------------------------------------------------------------------------------------------
2 | 1 | IPv4Flow | 232 | 0 | Allowed
2 | 1 | IPv6Flow | 0 | 0 | Allowed
FTOS#
Table 9-1.
Output Explanations: test cam-usage (C-Series)
Term
Linecard
Portpipe
CAM Partition
Available CAM
Estimated CAM per Port
Status
Explanation
Lists the line card or linecards that are checked. Entering all shows the status for linecards in the chassis
Lists the portpipe (port-set) or port pipes (port-sets) that are checked.
Entering all shows the status for linecards and port-pipes in the chassis.
Shows the CAM profile of the CAM
Identifies the amount of CAM space remaining for that profile
Estimates the amount of CAM space the listed policy will require.
Indicates whether or not the policy will be allowed in the CAM
390 | Content Addressable Memory (CAM)
Figure 9-10.
Command Example: test cam-usage (S-Series)
FTOS# test cam-usage service-policy input LauraIn stack-unit all
Stack-Unit | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
------------------------------------------------------------------------------------------
0 | 0 | IPv4Flow | 102 | 0 | Allowed
0 | 1 | IPv4Flow | 102 | 0 | Allowed
FTOS#
!
FTOS# test cam-usage service-policy input LauraIn stack-unit 0 port-set 1
Stack-Unit | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
------------------------------------------------------------------------------------------
0 | 1 | IPv4Flow | 102 | 0 | Allowed
FTOS#
Table 9-2.
Output Explanations: test cam-usage (S-Series)
Term
Stack-Unit
Portpipe
CAM Partition
Available CAM
Estimated CAM per Port
Status
Explanation
Lists the stack unit or units that are checked. Entering all shows the status for all stacks.
Lists the portpipe (port-set) or port pipes (port-sets) that are checked.
Entering all shows the status for linecards and port-pipes in the chassis.
Shows the CAM profile of the CAM
Identifies the amount of CAM space remaining for that profile
Estimates the amount of CAM space the listed policy will require.
Indicates whether or not the policy will be allowed in the CAM
Content Addressable Memory (CAM) | 391
392 | Content Addressable Memory (CAM)
10
Dynamic Host Configuration Protocol (DHCP)
Overview
Dynamic Host Configuration Protocol (DHCP) is an application layer protocol that dynamically assigns IP addresses and other configuration parameters to network end-stations (hosts) based on configuration policies determined by network administrators.
•
Commands to Configure the System to be a DHCP Server
•
Commands to Configure Secure DHCP
Commands to Configure the System to be a DHCP Server
•
•
•
•
•
•
•
•
•
•
ip dhcp relay information-option remote-id
•
•
•
•
•
•
•
•
•
•
Dynamic Host Configuration Protocol (DHCP) | 393
clear ip dhcp c s Reset DHCP counters.
Syntax clear ip dhcp [binding { address} | conflict | server statistics]
Parameters binding address conflict server statistics
Enter this keyword to delete all entries in the binding table.
Enter the IP address to clear the binding entry for a single IP address.
Enter this keyword to delete all of the log entries created for IP address conflicts.
Enter this keyword to clear all the server counter information.
Command Mode
Default
Command
History
EXEC Privilege
None
Usage
Information
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
Entering <CR> after clear ip dhcp binding , clears all the IPs from the binding table.
debug ip dhcp server c s Display FTOS debugging messages for DHCP.
debug ip dhcp server [events | packets] Syntax
Parameters events packet
Enter this keyword to display DHCP state changes.
Enter this keyword to display packet transmission/reception.
Command Mode
Default
Command
History
EXEC Privilege
None
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
default-router c s Assign a default gateway to clients based on address pool.
Syntax default-router address [ address2 ...
address8 ]
Parameters address Enter the a list of routers that may be the default gateway for clients on the subnet. You may specify up to 8. List them in order of preference.
394 | Dynamic Host Configuration Protocol (DHCP)
Command Mode
Default
Command
History
DHCP <POOL>
None
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
disable c s Disable DHCP Server.
DHCP Server is disabled by default. Enable the system to be a DHCP server using the no form of the disable command.
Syntax disable
Command Mode
Default
DHCP
Disabled
Command
History
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
dns-server c s Assign a DNS server to clients based on address pool.
Syntax dns-server address [ address2 ...
address8 ]
Parameters address Enter the a list of DNS servers that may service clients on the subnet. You may list up to 8 servers, in order of preference.
Command Mode
Default
DHCP <POOL>
None
Command
History
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
domain-name c s Assign a domain to clients based on address pool.
Syntax domain-name name
Parameters name Give a name to the group of addresses in a pool.
Dynamic Host Configuration Protocol (DHCP) | 395
Command Mode
Default
Command
History
DHCP <POOL>
None
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
excluded-address c s Prevent the server from leasing an address or range of addresses in the pool.
Syntax excluded-address [ address | low-address high-address ]
Parameters address low-address high-address
Enter a single address to be excluded from the pool.
Enter the lowest address in a range of addresses to be excluded from the pool.
Enter the highest address in a range of addresses to be excluded from the pool.
Command Mode
Default
Command
History
DHCP
None
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
hardware-address c s For manual configurations, specify the client hardware address.
Syntax hardware-address address
Parameters address Enter the hardware address of the client.
Command Mode
Default
DHCP <POOL>
None
Command
History
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
host c s For manual (rather than automatic) configurations, assign a host to a single-address pool.
Syntax host address
396 | Dynamic Host Configuration Protocol (DHCP)
Parameters
Command Mode
Default
Command
History address/mask
DHCP <POOL>
None
Version 8.3.5.0
Version 8.2.1.0
Enter the host IP address and subnet mask.
Introduced on the S55.
Introduced on C-Series and S-Series.
ip dhcp relay information-option remote-id
Manually re-set the remote-id (MAC address) for Option 82.
Syntax
Parameters ip dhcp relay information-option [remote-id { hostname | remote-id } ] hostname remote-id
Set the hostname of the switch as the remote-id for Option 82.
Configure the system to enable the remote-id (MAC address) for Option 82.
Enter the name of the remote-id, maximum 64 characters.
Command Mode
Default
Command
History
CONFIGURATION
Disabled
Usage
Information
Version 9.0.0.0
Version 8.3.7.0
Version 8.3.5.3
Version 8.3.3.8
Version 8.2.1.0
Introduced on the Z9000.
Introduced on the S4810.
Introduced on the S55.
Introduced on the S60.
Introduced on C-Series and S-Series (S25/S50).
Option 82 is comprised of two sub-options, circuit id and remote id . Remote id uses the MAC address of the relay information which adds Option 82 to identify the host sending the message. Use the ip dhcp relay information-option remote-id command to change the default remote-id value of the switch.
lease c s Specify a lease time for the addresses in a pool.
Syntax lease { days [ hours ] [ minutes ] | infinite }
Parameters days hours
Enter the number of days of the lease.
Range: 0-31
Enter the number of hours of the lease.
Range: 0-23
Dynamic Host Configuration Protocol (DHCP) | 397
minutes Enter the number of minutes of the lease.
Range: 0-59
Specify that the lease never expires.
Command Mode
Default
Command
History infinite
DHCP <POOL>
24 hours
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
netbios-name-server c s Specify the NetBIOS Windows Internet Naming Service (WINS) name servers, in order of preference, that are available to Microsoft Dynamic Host Configuration Protocol (DHCP) clients.
Syntax netbios-name-server address [ address2 ...
address8 ]
Parameters address Enter the address of the NETBIOS name server. You may enter up to 8, in order of preference.
Command Mode
Default
Command
History
DHCP <POOL>
None
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
netbios-node-type c s Specify the NetBIOS node type for a Microsoft DHCP client. Dell Networking recommends specifying clients as hybrid.
Syntax netbios-node-type type
Parameters type Enter the NETBIOS node type.
Broadcast: Enter the keyword b-node.
Hybrid: Enter the keyword h-node.
Mixed: Enter the keyword m-node.
Peer-to-peer: Enter the keyword p-node.
Command Mode
Default
Command
History
DHCP <POOL>
Hybrid
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
398 | Dynamic Host Configuration Protocol (DHCP)
network c s Specify the range of addresses in an address pool.
Syntax network network / prefix-length
Parameters network/ prefix-length
Specify a range of addresses.
Prefix-length Range: 17-31
Command Mode
Default
Command
History
DHCP <POOL>
None
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
pool c s Create an address pool
Syntax pool name
Parameters name Enter the address pool’s identifying name
Command Mode
Default
DHCP
None
Command
History
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
show ip dhcp binding c s Display the DHCP binding table.
Syntax show ip dhcp binding
Command Mode
Default
EXEC Privilege
None
Command
History
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
Dynamic Host Configuration Protocol (DHCP) | 399
show ip dhcp configuration c s Display the DHCP configuration.
Syntax show ip dhcp configuration [global | pool name ]
Parameters pool name global
Display the configuration for a DHCP pool.
Display the DHCP configuration for the entire system.
Command Mode
Default
Command
History
EXEC Privilege
None
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
show ip dhcp conflict c s Display the address conflict log.
Syntax show ip dhcp conflict address
Parameters address Display a particular conflict log entry.
Command Mode
Default
Command
History
EXEC Privilege
None
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
show ip dhcp server c s Display the DHCP server statistics.
Syntax
Command Mode
Default show ip dhcp server statistics
EXEC Privilege
None
Command
History
Version 8.3.5.0
Version 8.2.1.0
Introduced on the S55.
Introduced on C-Series and S-Series.
400 | Dynamic Host Configuration Protocol (DHCP)
Commands to Configure Secure DHCP
DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks.
•
•
•
•
•
•
•
ip dhcp snooping database renew
•
•
ip dhcp source-address-validation
•
•
•
ip dhcp snooping verify mac-address
•
arp inspection c e s Enable Dynamic Arp Inspection (DAI) on a VLAN.
Syntax arp inspection
Command Modes
Default
INTERFACE VLAN
Disabled
Command
History
Version 8.3.5.0
Version 8.3.1.0
Version 8.2.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series
Related
Commands
Specify a port as trusted so that ARP frames are not validated against the binding table.
arp inspection-trust c e s Specify a port as trusted so that ARP frames are not validated against the binding table.
Syntax
Command Modes
Default arp inspection-trust
INTERFACE
INTERFACE PORT-CHANNEL
Disabled
Dynamic Host Configuration Protocol (DHCP) | 401
Command
History
Related
Commands
Version 8.3.5.0
Version 8.3.1.0
Version 8.2.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series
Enable Dynamic ARP Inspection on a VLAN.
clear ip dhcp snooping c e s Clear the DHCP binding table.
Syntax clear ip dhcp snooping binding
Command Modes
Default
EXEC Privilege
None
Command
History
Version 8.3.5.0
Version 8.3.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series
Related
Commands
Display the contents of the DHCP binding table.
ip dhcp snooping c e s Enable DHCP Snooping globally.
Syntax
Command Modes
Default
[no] ip dhcp snooping
CONFIGURATION
Disabled
Command
History
Version 8.3.5.0
Version 8.3.1.0
Version 8.2.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series for Layer 2 interfaces.
Introduced on C-Series and S-Series on Layer 3 interfaces.
Usage
Information
When enabled, no learning takes place until snooping is enabled on a VLAN. Upon disabling DHCP
Snooping the binding table is deleted, and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled.
Introduced in FTOS version 7.8.1.0, DHCP Snooping was available for Layer 3 only and dependent on
DHCP Relay Agent ( ip helper-address ). FTOS version 8.2.1.0 extends DHCP Snooping to Layer 2, and you do not have to enable relay agent to snoop on Layer 2 interfaces.
Related
Commands
Enable DHCP Snooping on one or more VLANs.
402 | Dynamic Host Configuration Protocol (DHCP)
ip dhcp snooping database c e s Delay writing the binding table for a specified time.
Syntax ip dhcp snooping database write-delay minutes
Parameters minutes Range: 5-21600
Command Modes
Default
Command
History
CONFIGURATION
None
Version 8.3.5.0
Version 8.3.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series ip dhcp snooping binding c e s Create a static entry in the DHCP binding table.
Syntax [no] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/ port lease number
Parameters mac address vlan-id vlan-id ip ip-address interface type slot/port lease number
Enter the keyword mac followed by the MAC address of the host to which the server is leasing the IP address.
Enter the keyword vlan-id followed by the VLAN to which the host belongs.
Range: 2-4094
Enter the keyword ip followed by the IP address that the server is leasing.
Enter the keyword interface followed by the type of interface to which the host is connected.
• For an 10/100 Ethernet interface, enter the keyword fastethernet .
• For a Gigabit Ethernet interface, enter the keyword gigabitethernet .
• For a SONET interface, enter the keyword sonet .
• For a Ten Gigabit Ethernet interface, enter the keyword tengigabitethernet .
Enter the slot and port number of the interface.
Enter the keyword lease followed by the amount of time the IP address will be leased.
Range: 1-4294967295
Command Modes
Default
EXEC
EXEC Privilege
None
Dynamic Host Configuration Protocol (DHCP) | 403
Command
History
Related
Commands
Version 8.3.5.0
Version 8.3.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series
Display the contents of the DHCP binding table.
ip dhcp snooping database renew c e s Renew the binding table.
Syntax ip dhcp snooping database renew
Command Modes
Default
EXEC
EXEC Privilege
None
Command
History
Version 8.3.5.0
Version 8.3.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series ip dhcp snooping trust c e s Configure an interface as trusted.
Syntax
Command Modes
Default
[no] ip dhcp snooping trust
INTERFACE
Untrusted
Command
History
Version 8.3.5.0
Version 8.3.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series ip dhcp source-address-validation c e s Enable IP Source Guard.
Syntax [no] ip dhcp source-address-validation [ ipmac ]
Parameters ipmac Enable IP+MAC Source Address Validation (Not available on E-Series).
Command Modes INTERFACE
404 | Dynamic Host Configuration Protocol (DHCP)
Default
Command
History
Disabled
Usage
Information
Version 8.3.5.0
Version 8.3.1.0
Version 8.2.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Added keyword ipmac .
Introduced on C-Series and S-Series
You must allocate at least one FP block to ipmacacl before you can enable IP+MAC Source Address
Validation.
1 Use the command cam-acl l2acl from CONFIGURATION mode
2 Save the running-config to the startup-config
3 Reload the system.
ip dhcp snooping vlan c e s Enable DHCP Snooping on one or more VLANs.
Syntax [no] ip dhcp snooping vlan name
Parameters name Enter the name of a VLAN on which to enable DHCP Snooping.
Command Modes
Default
CONFIGURATION
Disabled
Command
History
Version 8.3.5.0
Version 8.3.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series
Usage
Information
When enabled the system begins creating entries in the binding table for the specified VLAN(s). Note that learning only happens if there is a trusted port in the VLAN.
Related
Commands
Configure an interface as trusted.
ip dhcp relay c e s Enable Option 82.
Syntax ip dhcp relay information-option [trust-downstream]
Parameters trust-downstream Configure the system to trust Option 82 when it is received from the previous-hop router.
Command Modes CONFIGURATION
Dynamic Host Configuration Protocol (DHCP) | 405
Default
Command
History
Disabled
Version 8.3.5.0
Version 8.3.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series show ip dhcp snooping c e s Display the contents of the DHCP binding table or display the interfaces configured with IP Source
Guard.
show ip dhcp snooping [binding | source-address-validation] Syntax
Parameters binding source-address-validation
Display the binding table.
Display the interfaces configured with IP Source Guard.
Command Modes EXEC
EXEC Privilege
None Default
Command
History
Version 8.3.5.0
Version 8.3.1.0
Version 7.8.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series
Related
Commands
Clear the contents of the DHCP binding table.
ip dhcp snooping verify mac-address c e s Validate a DHCP packet’s source hardware address against the client hardware address field
(CHADDR) in the payload.
Syntax
Command Modes
Default
[no] ip dhcp snooping verify mac-address
CONFIGURATION
Disabled
Command
History
Version 8.3.5.0
Version 8.3.1.0
Version 8.2.1.0
Introduced on the S55.
Introduced on E-Series.
Introduced on C-Series and S-Series
406 | Dynamic Host Configuration Protocol (DHCP)
11
Force10 Resilient Ring Protocol (FRRP)
Overview
Force10 Resilient Ring Protocol (FRRP) is supported on platforms c e s
FRRP is a proprietary protocol for that offers fast convergence in a Layer 2 network without having to run the Spanning Tree Protocol. The Resilient Ring Protocol is an efficient protocol that transmits a high-speed token across a ring to verify the link status. All the intelligence is contained in the master node with practically no intelligence required of the transit mode.
Commands
The FRRP commands are:
•
•
•
•
•
•
•
•
•
•
Important Points to Remember
• FRRP is media- and speed-independent.
• FRRP is a Dell Networking proprietary protocol that does not interoperate with any other vendor.
• Spanning Tree must be disabled on both primary and secondary interfaces before Resilient Ring protocol is enabled.
• A VLAN configured as control VLAN for a ring cannot be configured as control or member
VLAN for any other ring.
• Member VLANs across multiple rings are not supported in Master nodes.
• If multiple rings share one or more member VLANs, they cannot share any links between them.
• Each ring can have only one Master node; all others are Transit nodes.
Force10 Resilient Ring Protocol (FRRP) | 407
clear frrp c e s Clear the FRRP statistics counters.
Syntax clear frrp [ ring-id ]
Parameters ring-id (Optional) Enter the ring identification number.
Range: 1 to 255
Defaults
Command Modes
No default values or behavior
EXEC
Command
History
Example
Version 8.3.3.1
Version 8.2.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced for the C-Series
Introduced
Figure 11-1.
clear frrp Command Examples
FTOS#clear frrp clears the frrp counters for all the available rings
Clear frrp statistics counter on all ring [confirm] yes confirmation required
FTOS#clear frrp 4 clears the frrp counters on the specified ring
Clear frrp statistics counter for ring 4 [confirm] yes
FTOS# confirmation required
Usage
Information
Related
Commands
Executing this command, without the optional ring-id, will clear statistics counters on all the available rings. FTOS requires a command line confirmation before the command is executed. This commands clears the following counters:
• hello Rx and Tx counters
• Topology change Rx and Tx counters
• The number of state change counters
Display the Resilient Ring Protocol configuration debug frrp c es Enable FRRP debugging.
Syntax debug frrp { event | packet | detail } [ ring-id ] [ count number ]
To disable debugging, use the no debug frrp { event | packet | detail } { ring-id } [ count number ] command.
408 | Force10 Resilient Ring Protocol (FRRP)
Parameters event packet detail ring-id count number
Enter the keyword event to display debug information related to ring protocol transitions.
Enter the keyword packet to display brief debug information related to control packets.
Enter the keyword detail to display detailed debug information related to the entire ring protocol packets.
(Optional) Enter the ring identification number.
Range: 1 to 255
Enter the keyword count followed by the number of debug outputs.
Range: 1 to 65534
Defaults
Command Modes
Command
History
Disabled
CONFIGURATION (conf-frrp)
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced for the C-Series
Introduced
Since the Resilient Ring Protocol can potentially transmit 20 packets per interface, debug information must be restricted.
description c e s Enter an identifying description of the ring.
Syntax description Word
To remove the ring description, use the no description [ Word ] command.
Parameters
Word Enter a description of the ring.
Maximum: 255 characters
Defaults
Command Modes
No default values or behavior
CONFIGURATION (conf-frrp)
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced for the C-Series
Introduced disable c e s Disable the Resilient Ring Protocol.
Syntax disable
To enable the Resilient Ring Protocol, use the no disable command.
Force10 Resilient Ring Protocol (FRRP) | 409
Defaults
Command Modes
Command
History
Disabled
CONFIGURATION (conf-frrp)
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced for the C-Series
Introduced interface c e s Configure the primary, secondary, and control-vlan interfaces.
Syntax interface { primary interface secondary interface control-vlan vlan-id }
To return to the default, use the no interface { primary interface secondary interface control-vlan vlan-id } command.
Parameters primary interface secondary interface control-vlan vlan-id
Enter the keyword primary to configure the primary interface followed by one of the following interfaces and slot/port information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel interface types, enter the keyword port-channel followed by a number from 1 to 255.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Enter the keyword secondary to configure the secondary interface followed by one of the following interfaces and slot/port information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel interface types, enter the keyword port-channel followed by a number from 1 to 255.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Enter the keyword control-vlan followed by the VLAN ID.
Range: 1 to 4094
Defaults
Command Modes
No default values or behavior
CONFIGURATION (conf-frrp)
Command
History
Version 8.3.3.1
Introduced on the S60.
410 | Force10 Resilient Ring Protocol (FRRP)
Usage
Information
Related
Commands
Version 8.2.1.0
Version 7.4.1.0
Introduced for the C-Series
Introduced
This command causes the Ring Manager to take ownership of these two ports after the configuration is validated by the IFM. Ownership is relinquished for a port only when the interface does not play a part in any control VLAN, that is, the interface does not belong to any ring.
Display the Resilient Ring Protocol configuration information member-vlan c e s Specify the member VLAN identification numbers.
Syntax member-vlan { vlan-range }
To return to the default, use the no member-vlan [ vlan-range ] command.
Parameters vlan-range Enter the member VLANs using comma separated VLAN IDs, a range of VLAN IDs, a single VLAN ID, or a combination. For example:
Comma separated: 3, 4, 6
Range: 5-10
Combination: 3, 4, 5-10, 8
Defaults
Command Modes
No default values or behavior
CONFIGURATION (conf-frrp)
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced for the C-Series
Introduced mode c e s Set the Master or Transit mode of the ring.
Syntax mode { master | transit }
To reset the mode, use the no mode { master | transit } command.
Parameters master transit
Enter the keyword master to set the Ring node to Master mode.
Enter the keyword transit to set the Ring node to Transit mode.
Defaults
Command Modes
Command
History
Mode None
CONFIGURATION (conf-frrp)
Version 8.3.3.1
Introduced on the S60.
Force10 Resilient Ring Protocol (FRRP) | 411
Version 8.2.1.0
Version 7.4.1.0
Introduced for the C-Series
Introduced protocol frrp c e s Enter the Resilient Ring Protocol and designate a ring identification.
Syntax protocol frrp { ring-id }
To exit the ring protocol, use the no protocol frrp { ring-id } command.
Parameters ring-id Enter the ring identification number.
Range: 1 to 255
Defaults
Command Modes
No default values or behavior
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced for the C-Series
Introduced
Usage
Information
This command places you into the Resilient Ring Protocol. After executing this command, the command line prompt changes to conf-frrp. show frrp c e s Display the Resilient Ring Protocol configuration.
Syntax show frrp [ ring-id [ summary ]] | [ summary ]
Parameters ring-id summary
Enter the ring identification number.
Range: 1 to 255
(OPTIONAL) Enter the keyword summary to view just a summarized version of the Ring configuration.
Defaults
Command Modes
No default values or behavior
EXEC
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced for the C-Series
Introduced
412 | Force10 Resilient Ring Protocol (FRRP)
Example 1 Figure 11-2.
show frrp summary Command Example
FTOS#show frrp summary
Ring-ID State Mode Ctrl_Vlan Member_Vlans
-----------------------------------------------------------------
2 UP Master 2 11-20, 25,27-30
31 UP Transit 31 40-41
50 Down Transit 50 32
FTOS#
Example 2 Figure 11-3.
show frrp ring-id Command Example
FTOS#show frrp 1
Ring protocol 1 is in Master mode
Ring Protocol Interface:
Primary : GigabitEthernet 0/16 State: Forwarding
Secondary: Port-channel 100 State: Blocking
Control Vlan: 1
Ring protocol Timers: Hello-Interval 50 msec Dead-Interval 150 msec
Ring Master's MAC Address is 00:01:e8:13:a3:19
Topology Change Statistics: Tx:110 Rx:45
Hello Statistics: Tx:13028 Rx:12348
Number of state Changes: 34
Member Vlans: 1000-1009
FTOS#
Example 3 Figure 11-4.
show frrp ring-id summary Command Example
FTOS#show frrp 2 summary
Ring-ID State Mode Ctrl_Vlan Member_Vlans
-----------------------------------------------------------------
2 Up Master 2 11-20, 25, 27-30
FTOS#
Related
Commands
Enter the Resilient Ring Protocol and designate a ring identification timer c e s Set the hello or dead interval for the Ring control packets.
Syntax timer { hello-interval milliseconds }| { dead-interval milliseconds }
To remove the timer, use the no timer { hello-interval [ milliseconds ] }| { dead-interval milliseconds } command.
Force10 Resilient Ring Protocol (FRRP) | 413
Parameters hello-interval milliseconds dead-interval milliseconds
Enter the keyword hello-interval followed by the time, in milliseconds, to set the hello interval of the control packets. The milliseconds must be enter in increments of 50 milliseconds, for example 50, 100, 150 and so on. If an invalid value is enter, an error message is generated.
Range: 50 to 2000ms
Default: 500 ms
Enter the keyword dead-interval followed by the time, in milliseconds, to set the dead interval of the control packets.
Range: 50 to 6000ms
Default: 1500ms
Note: The configured dead interval should be at least three times the hello interval
Defaults
Command Modes
Command
History
Default as shown
CONFIGURATION (conf-frrp)
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced for the C-Series
Introduced
The hello interval is the interval at which ring frames are generated from the primary interface of the master node. The dead interval is the time that elapses before a timeout occurs.
414 | Force10 Resilient Ring Protocol (FRRP)
12
GARP VLAN Registration (GVRP)
Overview
is supported on platforms c e s
Commands
The GVRP commands are:
•
•
•
•
•
•
•
•
•
•
•
• show gvrp statistics on page 27
The GARP (Generic Attribute Registration Protocol) mechanism allows the configuration of a GARP participant to propagate through a network quickly. A GARP participant registers or de-registers its attributes with other participants by making or withdrawing declarations of attributes. At the same time, based on received declarations or withdrawals, GARP handles attributes of other participants.
GVRP enables a device to propagate local VLAN registration information to other participant devices and dynamically update the VLAN registration information from other devices. The registration information updates local databases regarding active VLAN members and through which port the
VLANs can be reached.
GVRP ensures that all participants on a bridged LAN maintain the same VLAN registration information. The VLAN registration information propagated by GVRP include both manually configured local static entries and dynamic entries from other devices.
GVRP participants have the following components:
• The GVRP application
• GARP Information Propagation (GIP)
• GARP Information Declaration (GID)
GARP VLAN Registration (GVRP) | 415
Important Points to Remember
• GVRP is supported on Layer 2 ports only.
• All VLAN ports added by GVRP are tagged.
• GVRP is supported on untagged ports belonging to a default VLAN, and tagged ports.
• GVRP cannot be enabled on untagged ports belonging to a non-default VLAN unless native
VLAN is turned on.
• GVRP requires end stations with dynamic access NICs.
• Based on updates from GVRP-enabled devices, GVRP allows the system to dynamically create a port-based VLAN (unspecified) with a specific VLAN ID and a specific port.
• On a port-by-port basis, GVRP allows the system to learn about GVRP updates to an existing port-based VLAN with that VLAN ID and IEEE 802.1Q tagging.
• GVRP allows the system to send dynamic GVRP updates about your existing port-based VLAN.
• GVRP updates are not sent to any blocked Spanning Tree Protocol (STP) ports. GVRP operates only on ports that are in the forwarding state.
• GVRP operates only on ports that are in the STP forwarding state. If GVRP is enabled, a port that changes to the STP forwarding state automatically begins to participate in GVRP. A port that changes to an STP state other than forwarding no longer participates in GVRP.
• VLANs created dynamically with GVRP exist only as long as a GVRP-enabled device is sending updates. If the devices no longer send updates, or GVRP is disabled, or the system is rebooted, all dynamic VLANs are removed.
• GVRP manages the active topology, not non-topological data such as VLAN protocols. If a local bridge needs to classify and analyze packets by VLAN protocols, you must manually configure protocol-based VLANs, and simply rely on GVRP for VLAN updates. But if the local bridge needs to know only how to reach a given VLAN, then GVRP provides all necessary information.
• The VLAN topologies that GVRP learns are treated differently from VLANs that are statically configured. The GVRP dynamic updates are not saved in NVRAM, while static updates are saved in NVRAM. When GVRP is disabled, the system deletes all VLAN interfaces that were learned through GVRP and leaves unchanged all VLANs that were manually configured. clear gvrp statistics c e s Clear GVRP statistics on an interface.
Syntax clear gvrp statistics interface interface
Parameters interface interface Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by the Port Channel number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Defaults No default values or behavior
416 | GARP VLAN Registration (GVRP)
Command Modes
Command
History
Related
Commands
EXEC
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Display the GVRP statistics debug gvrp c e s Enable debugging on GVRP.
Syntax
Parameters debug gvrp { config | events | pdu }
To disable debugging, use the no debug gvrp { config | events | pdu } command.
config event pdu
Enter the keyword config to enable debugging on the GVRP configuration.
Enter the keyword event to enable debugging on the JOIN/LEAVE events.
Enter the keyword pdu followed one of the following Interface keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by the Port
Channel number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Command
History
Disabled
EXEC Privilege
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series disable c e s Globally disable GVRP.
Syntax
Defaults
Command Modes disable
To re-enable GVRP, use the no disable command.
Enabled
CONFIGURATION-GVRP
GARP VLAN Registration (GVRP) | 417
Command
History
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Enable GVRP on physical interfaces and LAGs.
Access GVRP protocol garp timers c e s Set the intervals (in milliseconds) for sending GARP messages.
Syntax garp timers { join | leave | leave-all }
To return to the previous setting, use the no garp timers { join | leave | leave-all } command.
Parameters join leave leave-all
Enter the keyword join followed by the number of milliseconds to configure the join time.
Range: 100-2147483647 milliseconds
Default: 200 milliseconds
Note : Designate the milliseconds in multiples of 100
Enter the keyword leave followed by the number of milliseconds to configure the leave time.
Range: 100-2147483647 milliseconds
Default: 600 milliseconds
Note : Designate the milliseconds in multiples of 100
Enter the keyword leave-all followed by the number of milliseconds to configure the leave-all time.
Range: 100-2147483647 milliseconds
Default: 1000 milliseconds
Note : Designate the milliseconds in multiples of 100
Defaults
Command Modes
Command
History
Default as above
CONFIGURATION-GVRP
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Join Timer —Join messages announce the willingness to register some attributes with other participants. Each GARP application entity sends a Join message twice, for reliability, and uses a join timer to set the sending interval.
Leave Timer —Leave announces the willingness to de-register with other participants. Together with the Join, Leave messages help GARP participants complete attribute reregistration and de-registration.
Leave Timer starts upon receipt of a leave message sent for de-registering some attribute information.
If a join message is not received before the leave time expires, the GARP application entity removes the attribute information as requested.
418 | GARP VLAN Registration (GVRP)
Related
Commands
Leave All Timer —The Leave All Timer starts when a GARP application entity starts. When this timer expires, the entity sends a leave-all message so that other entities can re-register their attribute information. Then, the leave-all time begins again.
Display the current GARP times gvrp enable c e s Enable GVRP on physical interfaces and LAGs.
Syntax gvrp enable
Defaults
Command Modes
To disable GVRP on the interface, use the no gvrp enable command.
Disabled
CONFIGURATION-INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Related
Commands
Globally disable GVRP.
gvrp registration c e s Configure the GVRP register type.
Syntax
Parameters gvrp registration { fixed | normal | forbidden }
To return to the default, use the gvrp register normal command.
fixed normal forbidden
Enter the keyword fixed followed by the VLAN range in a comma separated VLAN ID set.
Enter the keyword normal followed by the VLAN range in a comma separated VLAN ID set.
This is the default
Enter the keyword forbidden followed by the VLAN range in a comma separated VLAN ID set.
Defaults
Command Modes
Default registration is normal
CONFIGURATION-INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
GARP VLAN Registration (GVRP) | 419
Usage
Information
Related
Commands
The fixed registration prevents an interface, configured via the command line to belong to a VLAN
(static configuration), from being un-configured when it receives a Leave message. Therefore, the registration mode on that interface is fixed.
The normal registration is the default registration. The port’s membership in the VLANs depends on
GVRP. The interface becomes a member of VLANs after learning about the VLAN through GVRP. If the VLAN is removed from the port that sends GVRP advertisements to this device, then the port will stop being a member of the VLAN.
The forbidden is used when you do not want the interface to advertise or learn about VLANs through
GVRP.
Display the GVRP configuration including the registration protocol gvrp c e s Access GVRP protocol — (config-gvrp)#.
Syntax protocol gvrp
Defaults
Command Modes
Disabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Related
Commands
Globally disable GVRP.
show config c e s Display the global GVRP configuration.
Syntax
Command Modes show config
CONFIGURATION-GVRP
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Related
Commands
Enable GVRP on physical interfaces and LAGs.
Access GVRP protocol.
420 | GARP VLAN Registration (GVRP)
show garp timers c e s Display the GARP timer settings for sending GARP messages.
Syntax show garp timers
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Figure 12-1.
show garp timers Command Example
FTOS#show garp timers
GARP Timers Value (milliseconds)
----------------------------------------
Join Timer 200
Leave Timer 600
LeaveAll Timer 10000
FTOS#
Related
Commands
Set the intervals (in milliseconds) for sending GARP messages.
show gvrp c e s Display the GVRP configuration.
Syntax
Parameters show gvrp [ brief | interface ] brief interface
(OPTIONAL) Enter the keyword brief to display a brief summary of the GVRP configuration.
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by the
Port Channel number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
GARP VLAN Registration (GVRP) | 421
Command
History
Example
Version 8.3.3.1
Version7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Figure 12-2.
show gvrp brief Command Example
R3#show gvrp brief
GVRP Feature is currently enabled.
Port GVRP Status Edge-Port
-------------------------------------------------------
Gi 3/0 Disabled No
Gi 3/1 Disabled No
Gi 3/2 Enabled No
Gi 3/3 Disabled No
Gi 3/4 Disabled No
Gi 3/5 Disabled No
Gi 3/6 Disabled No
Gi 3/7 Disabled No
Gi 3/8 Disabled No
R3#show gvrp brief
Usage
Information
Related
Commands
If no ports are GVRP participants, the message output changes from:
GVRP Participants running on <port_list> to
GVRP Participants running on no ports
Display the GVRP statistics show gvrp statistics c e s Display the GVRP configuration statistics.
Syntax show gvrp statistics { interface interface | summary }
Parameters interface interface summary
Enter the keyword interface followed by one of the interface keywords and slot/ port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by the Port Channel number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Enter the keyword summary to display just a summary of the GVRP statistics.
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
422 | GARP VLAN Registration (GVRP)
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on C, E, and S-Series
Figure 12-3.
show gvrp statistics Command Example
FTOS#show gvrp statistics int gi 1/0
Join Empty Received: 0
Join In Received: 0
Empty Received: 0
LeaveIn Received: 0
Leave Empty Received: 0
Leave All Received: 40
Join Empty Transmitted: 156
Join In Transmitted: 0
Empty Transmitted: 0
Leave In Transmitted: 0
Leave Empty Transmitted: 0
Leave All Transmitted: 41
Invalid Messages/Attributes skipped: 0
Failed Registrations: 0
FTOS#
Usage
Information
Related
Commands
Invalid messages/attributes skipped can occur in the following cases:
• The incoming GVRP PDU has an incorrect length.
• “End of PDU” was reached before the complete attribute could be parsed.
• The Attribute Type of the attribute that was being parsed was not the GVRP VID Attribute Type
(0x01).
• The attribute that was being parsed had an invalid attribute length.
• The attribute that was being parsed had an invalid GARP event.
• The attribute that was being parsed had an invalid VLAN ID. The valid range is 1 - 4095.
A failed registration can occur for the following reasons:
• Join requests were received on a port that was blocked from learning dynamic VLANs (GVRP
Blocking state).
• An entry for a new GVRP VLAN could not be created in the GVRP database.
Display the GVRP configuration
GARP VLAN Registration (GVRP) | 423
424 | GARP VLAN Registration (GVRP)
13
Internet Group Management Protocol (IGMP)
Overview
The platforms on which a command is supported is indicated by the character — e
for the E-Series, c for the C-Series, and s
for the S-Series — that appears below each command heading.
This chapter contains the following sections:
•
•
IGMP Commands
FTOS supports IGMPv1/v2/v3 and is compliant with RFC-3376.
Important Points to Remember
• FTOS supports PIM-SM and PIM-SSM include and exclude modes.
• IGMPv2 is the default version of IGMP on interfaces. IGMPv3 can be configured on interfaces, and is backward compatible with IGMPv2.
• The maximum number of interfaces supported is 512 on the E-Series. On the C-Series and
S-Series 31 interfaces are supported.
Note: The S60 supports up to 95 interfaces.
• Maximum number of groups supported – no hard limit
• IGMPv3 router interoperability with IGMPv2 and IGMPv1 routers on the same subnet is not supported.
• An administrative command ( ip igmp version ) is added to manually set the IGMP version.
• All commands, previously used for IGMPv2, are compatible with IGMPv3.
The commands include:
•
•
•
•
•
•
ip igmp last-member-query-interval
Internet Group Management Protocol (IGMP) | 425
•
•
•
•
•
•
•
•
•
clear ip igmp groups c e s Clear entries from the group cache table.
Syntax clear ip igmp groups [ group-address | interface ]
Parameters group-address interface
(OPTIONAL) Enter the IP multicast group address in dotted decimal format.
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For an 100/1000 Base-T Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series legacy command
Usage
Information
IGMP commands accept only non-VLAN interfaces—specifying VLAN will not yield a results.
Note: The S60 supports up to 95 interfaces.
debug ip igmp c e s Enable debugging of IGMP packets.
Syntax debug ip igmp [ group address | interface ]
To disable IGMP debugging, enter no debug ip igmp [ group address | interface ]. To disable all debugging, enter undebug all .
426 | Internet Group Management Protocol (IGMP)
Parameters group-address interface
(OPTIONAL) Enter the IP multicast group address in dotted decimal format.
(OPTIONAL) Enter the following keywords and slot/port or number information:
Defaults
Command Modes
Command
History
Disabled
EXEC Privilege
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series legacy command
Usage
Information
IGMP commands accept only non-VLAN interfaces—specifying VLAN will not yield a results. This command displays packets for IGMP and IGMP Snooping.
Note: The S60 supports up to 95 interfaces.
ip igmp access-group c e s Use this feature to specify access control for packets.
Syntax ip igmp access-group access-list
To remove the feature, use the no ip igmp access-group access-list command.
Parameters access-list Enter the name of the extended ACL (16 characters maximum).
Defaults
Command Modes
Command
History
Not configured
INTERFACE (conf-ifinterface slot/port )
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on C-Series and S-Series
Introduced on E-Series
The access list accepted is an extended ACL. This feature is used to block IGMP reports from hosts, on a per-interface basis; based on the group address and source address specified in the access list.
Internet Group Management Protocol (IGMP) | 427
ip igmp group-join-limit c e s Use this feature to limit the number of IGMP groups that can be joined in a second.
Syntax ip igmp group-join-limit number
Parameters number Enter the number of IGMP groups permitted to join in a second.
Range: 1 to 10000
Defaults
Command Modes
No default values or behavior
CONFIGURATION (conf-ifinterface slot/port )
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on C-Series and S-Series
Introduced on E-Series ip igmp immediate-leave c e s Enable IGMP immediate leave.
Syntax ip igmp immediate-leave [ group-list prefix-list-name ]
To disable ip igmp immediate leave, use the no ip igmp immediate-leave command.
Parameters group-list prefix-list-name Enter the keyword group-list followed by a string up to 16 characters long of the prefix-list-name .
Defaults
Command Modes
Not configured
INTERFACE
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series
Version 7.7.1.0
Introduced on C-Series
E-Series legacy command
Usage
Information
Querier normally send a certain number of group specific queries when a leave message is received, for a group, prior to deleting a group from the membership database. There may be situations in which immediate deletion of a group from the membership database is required. This command provides a way to achieve the immediate deletion. In addition, this command provides a way to enable immediate-leave processing for specified groups.
428 | Internet Group Management Protocol (IGMP)
ip igmp last-member-query-interval c e s Change the last member query interval, which is the Max Response Time inserted into Group-Specific
Queries sent in response to Leave Group messages. This interval is also the interval between
Group-Specific Query messages.
Syntax ip igmp last-member-query-interval milliseconds
To return to the default value, enter no ip igmp last-member-query-interval .
Parameters milliseconds Enter the number of milliseconds as the interval.
Default: 1000 milliseconds
Range: 100 to 65535
Defaults
Command Modes
Command
History
1000 milliseconds
INTERFACE
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series legacy command ip igmp querier-timeout c e s Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier.
Syntax ip igmp querier-timeout seconds
To return to the default value, enter no ip igmp querier-timeout .
Parameters seconds Enter the number of seconds the router must wait to become the new querier.
Default: 125 seconds
Range: 60 to 300
Defaults
Command Modes
125 seconds
INTERFACE
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series
Version 7.7.1.0
Version 7.6.1.0
Introduced on C-Series
Introduced on S-Series in Interface VLAN mode only to enable that system to act as an
IGMP Proxy Querier.
Version 7.5.1.0
Introduced on C-Series in Interface VLAN mode only to enable that system to act as an
IGMP Proxy Querier.
E-Series legacy command
Internet Group Management Protocol (IGMP) | 429
ip igmp query-interval c e s Change the transmission frequency of IGMP general queries sent by the Querier.
Syntax ip igmp query-interval seconds
To return to the default values, enter no ip igmp query-interval .
Parameters seconds Enter the number of seconds between queries sent out.
Default: 60 seconds
Range: 1 to 18000
Defaults
Command Modes
Command
History
60 seconds
INTERFACE
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series in Interface VLAN mode only to enable that system to act as an
IGMP Proxy Querier.
Introduced on C-Series in Interface VLAN mode only to enable that system to act as an
IGMP Proxy Querier.
E-Series legacy command ip igmp query-max-resp-time c e s Set the maximum query response time advertised in general queries.
Syntax ip igmp query-max-resp-time seconds
To return to the default values, enter no ip igmp query-max-resp-time .
Parameters seconds Enter the number of seconds for the maximum response time.
Default: 10 seconds
Range: 1 to 25
Defaults
Command Modes
10 seconds
INTERFACE
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series
Version 7.7.1.0
Version 7.6.1.0
Introduced on C-Series
Introduced on S-Series in Interface VLAN mode only to enable that system to act as an
IGMP Proxy Querier.
Version 7.5.1.0
Introduced on C-Series in Interface VLAN mode only to enable that system to act as an
IGMP Proxy Querier.
E-Series legacy command
430 | Internet Group Management Protocol (IGMP)
ip igmp ssm-map c e s Use a statically configured list to translate (*,G) memberships to (S,G) memberships.
Syntax ip igmp ssm-map std-access-list source-address
Undo this configuration, that is, remove SSM map (S,G) states and replace them with (*,G) states using the command ip igmp ssm-map std-access-list source-address command.
Parameters std-access-list Specify the standard IP access list that contains the mapping rules for multicast groups.
Specify the multicast source address to which the groups are mapped.
source-address
CONFIGURATION Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced on C-Series and S-Series
Introduced on E-Series
Mapping applies to both v1 and v2 IGMP joins; any updates to the ACL are reflected in the IGMP groups. You may not use extended access lists with this command. When a static SSM map is configured and the router cannot find any matching access lists, the router continues to accept (*,G) groups.
Related
Commands
Create a standard access list to filter based on IP address.
ip igmp static-group c e s Configure an IGMP static group.
Syntax ip igmp static-group { group address [ exclude [ source address ]] | [ include { source address }]}
To delete a static address, use the no ip igmp static-group { group address [ exclude [ source address ]] | [ include { source address }]} command.
Parameters group address exclude source address include source address
Enter the group address in dotted decimal format (A.B.C.D)
(OPTIONAL) Enter the keyword exclude followed by the source address, in dotted decimal format (A.B.C.D), for which a static entry needs to be added.
(OPTIONAL) Enter the keyword include followed by the source address, in dotted decimal format (A.B.C.D), for which a static entry needs to be added.
Note: A group in include mode must have at least one source address defined.
Defaults
Command Modes
Command
History
No default values or behavior
INTERFACE
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series
Internet Group Management Protocol (IGMP) | 431
Usage
Information
Related
Commands
Version 7.7.1.0
Version 7.5.1.0
Introduced on C-Series
Expanded to support the exclude and include options
E-Series legacy command
A group in the include mode should have at least one source address defined. In exclude mode if no source address is specified, FTOS implicitly assumes all sources are included. If neither include or exclude is specified, FTOS implicitly assumes a IGMPv2 static join.
Command Limitations
• Only one mode ( include or exclude ) is permitted per multicast group per interface. To configure another mode, all sources belonging to the original mode must be unconfigured.
• If a static configuration is present and a packet for the same group arrives on an interface, the dynamic entry will completely overwrite all the static configuration for the group.
Display IGMP group information ip igmp version c e s Manually set the version of the router to IGMPv2 or IGMPv3.
Syntax ip igmp version { 2 | 3 }
Parameters
2
3
Enter the number 2 to set the IGMP version number to IGMPv2.
Enter the number 3 to set the IGMP version number to IGMPv3.
Defaults
Command Modes
2 (that is IGMPv2)
INTERFACE
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series show ip igmp groups c e s View the IGMP groups.
Syntax show ip igmp groups [ group-address [ detail ] | detail | interface [ group-address [ detail ]]]
432 | Internet Group Management Protocol (IGMP)
Parameters group-address interface
(OPTIONAL) Enter the group address in dotted decimal format to view information on that group only.
(OPTIONAL) Enter the interface type and slot/port information:
• For a 100/1000 Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
• For a port-channel interface, enter the keyword port-channel followed by the port-channel number.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.
• For a VLAN interface enter the keyword vlan followed by a number from 1 to
4094.
(OPTIONAL) Enter the keyword detail to display the IGMPv3 source information.
Command Modes detail
EXEC
EXEC Privilege
Command
History
Usage
Information
Version 8.3.3.1
Introduced on the S60.
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series and on C-Series
Expanded to support the detail option.
E-Series legacy command
This command displays the IGMP database including configured entries for either all groups on all interfaces, or all groups on specific interfaces, or specific groups on specific interfaces.
Note: The S60 supports up to 95 interfaces.
Example Figure 13-1.
show ip igmp groups Command Example
FTOS#show ip igmp groups
IGMP Connected Group Membership
Group Address Interface Uptime Expires Last Reporter
224.0.1.40 GigabitEthernet 13/6 09:45:23 00:02:08 10.87.7.5
FTOS#
Table 13-1.
show ip igmp groups Command Example Fields
Field
Group Address
Interface
Uptime
Expires
Last Reporter
Description
Lists the multicast address for the IGMP group.
Lists the interface type, slot and port number.
Displays the amount of time the group has been operational.
Displays the amount of time until the entry expires.
Displays the IP address of the last host to be a member of the IGMP group.
Internet Group Management Protocol (IGMP) | 433
show ip igmp interface c e s View information on the interfaces participating in IGMP.
Syntax show ip igmp interface [ interface ]
Parameters interface (OPTIONAL) Enter the interface type and slot/port information:
• For a 100/1000 Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
• For a port-channel interface, enter the keyword port-channel followed by the port-channel number.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to
16383.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.
• For a VLAN interface enter the keyword vlan followed by a number from 1 to 4094.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series legacy command
Usage
Information
IGMP commands accept only non-VLAN interfaces—specifying VLAN will not yield a results.
Note: The S60 supports up to 95 interfaces.
Example Figure 13-2.
show ip igmp interface Command Example
FTOS#show ip igmp interface
GigabitEthernet 0/0 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/5 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/6 is down, line protocol is down
Internet protocol processing disabled
GigabitEthernet 0/7 is up, line protocol is down
Internet protocol processing disabled
GigabitEthernet 7/9 is up, line protocol is up
Internet address is 10.87.5.250/24
IGMP is enabled on interface
IGMP query interval is 60 seconds
IGMP querier timeout is 120 seconds
IGMP max query response time is 10 seconds
IGMP last member query response interval is 1000 ms
IGMP activity: 0 joins, 0 leaves
IGMP querying router is 10.87.5.250 (this system)
IGMP version is 2
434 | Internet Group Management Protocol (IGMP)
show ip igmp ssm-map c e s Display is a list of groups that are currently in the IGMP group table and contain SSM mapped sources.
Syntax show ip igmp ssm-map [ group ]
Parameters group (OPTIONAL) Enter the multicast group address in the form A.B.C.D to display the list of sources to which this group is mapped .
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced on C-Series and S-Series
Introduced on E-Series
Related
Commands
Use a statically configured list to translate (*,G) memberships to (S,G) memberships.
IGMP Snooping Commands
FTOS supports IGMP Snooping version 2 and 3 on all Dell Networking systems:
•
•
•
•
ip igmp snooping last-member-query-interval
•
•
•
Important Points to Remember for IGMP Snooping
• FTOS supports version 1, version 2, and version 3 hosts.
• FTOS IGMP snooping implementation is based on IP multicast address (not based on Layer 2 multicast mac-address) and the IGMP snooping entries are in Layer 3 flow table not in Layer 2
FIB.
• FTOS IGMP snooping implementation is based on draft-ietf-magma-snoop-10.
• FTOS supports IGMP snooping on JUMBO enabled cards.
• IGMP snooping is not enabled by default on the switch.
• A maximum of 1800 groups and 600 VLAN are supported.
• IGMP snooping is not supported on default VLAN interface.
• IGMP snooping is not supported over VLAN-Stack-enabled VLAN interfaces (you must disable
IGMP snooping on a VLAN interface before configuring VLAN-Stack-related commands).
• IGMP snooping does not react to Layer 2 topology changes triggered by STP.
Internet Group Management Protocol (IGMP) | 435
• IGMP snooping reacts to Layer 2 topology changes triggered by MSTP by sending a general query on the interface that comes in FWD state.
Important Points to Remember for IGMP Querier
• The IGMP snooping Querier supports version 2.
• You must configure an IP address to the VLAN interface for IGMP snooping Querier to begin.
The IGMP snooping Querier disables itself when a VLAN IP address is cleared, and then it restarts itself when an IP address is re-assigned to the VLAN interface.
• When enabled, IGMP snooping Querier will not start if there is a statically configured multicast router interface in the VLAN.
• When enabled, IGMP snooping Querier starts after one query interval in case no IGMP general query (with IP SA lower than its VLAN IP address) is received on any of its VLAN members.
• When enabled, IGMP snooping Querier periodically sends general queries with an IP source address of the VLAN interface. If it receives a general query on any of its VLAN member, it will check the IP source address of the incoming frame.
If the IP SA in the incoming IGMP general query frame is lower than the IP address of the VLAN interface, then the switch disables its IGMP snooping Querier functionality.
If the IP SA of the incoming IGMP general query is higher than the VLAN IP address, the switch will continue to work as an IGMP snooping Querier.
ip igmp snooping enable c e s Enable IGMP snooping on all or a single VLAN. This is the master on/off switch to enable IGMP snooping.
Syntax ip igmp snooping enable
To disable IGMP snooping, enter no ip igmp snooping enable command.
Defaults
Command Modes
Disabled
CONFIGURATION
INTERFACE VLAN
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series legacy command
Usage
Information
You must enter this command to enable IGMP snooping. When enabled from CONFIGURATION mode, IGMP snooping is enabled on all VLAN interfaces (except default VLAN).
Note: You must execute the no shutdown command on the VLAN interface for IGMP
Snooping to function.
Related
Commands
Activate an interface
436 | Internet Group Management Protocol (IGMP)
ip igmp snooping fast-leave c e s Enable IGMP snooping fast leave for this VLAN.
Syntax ip igmp snooping fast-leave
To disable IGMP snooping fast leave, use the no igmp snooping fast-leave command.
Defaults Not configured
Command Modes INTERFACE VLAN—(conf-if-vln )
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series legacy command
Usage
Information
Queriers normally send a certain number of queries when a leave message is received prior to deleting a group from the membership database. There may be situations in which fast deletion of a group is required. When IGMP fast leave processing is enabled, the switch will remove an interface from the multicast group as soon as it detects an IGMP version 2 leave message on the interface.
ip igmp snooping flood c e s This command controls the flooding behavior of unregistered multicast data packets. On the E-Series, when flooding is enabled (the default), unregistered multicast data traffic is flooded to all ports in a
VLAN. When flooding is disabled, unregistered multicast data traffic is forwarded to only multicast router ports, both static and dynamic, in a VLAN. If there is no multicast router port in a VLAN, then unregistered multicast data traffic is dropped. On the
C-Series and S-Series, unregistered multicast data traffic is dropped when flooding is disabled; they do not forward the packets to multicast router ports. On the C-Series and S-Series, Layer 3 multicast must be disabled ( no ip multicast-routing ) in order to disable Layer 2 multicast flooding.
Syntax
Defaults ip igmp snooping flood
Enabled
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.7.1.1
Introduced on the S60.
Introduced on the C-Series and S-Series.
Introduced on E-Series.
Internet Group Management Protocol (IGMP) | 437
ip igmp snooping last-member-query-interval c e s The last member query interval is the “maximum response time” inserted into Group-Specific queries sent in response to Group-Leave messages. This interval is also the interval between successive
Group-Specific Query messages. Use this command to change the last member query interval.
Syntax ip igmp snooping last-member-query-interval milliseconds
To return to the default value, enter no ip igmp snooping last-member-query-interval .
Parameters milliseconds Enter the interval in milliseconds.
Default: 1000 milliseconds
Range: 100 to 65535
Defaults
Command Modes
Command
History
1000 milliseconds
INTERFACE VLAN
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series legacy command ip igmp snooping mrouter c e s Statically configure a VLAN member port as a multicast router interface.
Syntax ip igmp snooping mrouter interface interface
To delete a specific multicast router interface, use the no igmp snooping mrouter interface interface command.
Parameters interface interface
Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
Defaults
Command Modes
Command
History
Not configured
INTERFACE VLAN—(conf-if-vln )
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
438 | Internet Group Management Protocol (IGMP)
Version 7.5.1.0
Introduced on C-Series
E-Series legacy command
Usage
Information
FTOS provides the capability of statically configuring interface to which a multicast router is attached.
To configure a static connection to the multicast router, enter the ip igmp snooping mrouter interface command in the VLAN context. The interface to the router must be a part of the VLAN where you are entering the command.
Note: The S60 supports up to 95 interfaces.
ip igmp snooping querier c e s Enable IGMP querier processing for the VLAN interface.
Syntax ip igmp snooping querier
To disable IGMP querier processing for the VLAN interface, enter no ip igmp snooping querier command.
Defaults
Command Modes
Not configured
INTERFACE VLAN—(conf-if-vln )
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
E-Series legacy command
Usage
Information
This command enables the IGMP switch to send General Queries periodically. This is useful when there is no multicast router present in the VLAN because the multicast traffic does not need to be routed. An IP address must be assigned to the VLAN interface for the switch to act as a querier for this
VLAN.
show ip igmp snooping mrouter c e s Display multicast router interfaces.
Syntax show ip igmp snooping mrouter [ vlan number ]
Parameters vlan number Enter the keyword vlan followed by the vlan number.
Range: 1-4094
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60
Introduced on S-Series
Internet Group Management Protocol (IGMP) | 439
Example
Version 7.5.1.0
Introduced on C-Series
E-Series legacy command
Figure 13-3.
show ip igmp snooping mrouter Command Example
FTOS#show ip igmp snooping mrouter
Interface Router Ports
Vlan 2 Gi 13/3, Po 1
FTOS#
Related
Commands
Use this IGMP command to view groups
440 | Internet Group Management Protocol (IGMP)
\ 14
Interfaces
Overview
This chapter defines interface commands and is divided into the following sections:
•
•
•
The symbols c e s under command headings indicate which Dell Networking platforms —
C-Series, E-Series, or S-Series, respectively — support the command.
Although all interfaces are supported on E-Series ExaScale, some interface functionality is supported on E-Series ExaScale ex with FTOS 8.2.1.0. and later. When this is the case that is noted in the command history.
Basic Interface Commands
The following commands are for physical, Loopback, and Null interfaces:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
interface range macro (define)
•
•
•
ipg (10 Gigabit Ethernet interfaces)
Interfaces | 441
•
•
•
•
•
•
•
•
•
•
show config (from INTERFACE RANGE mode)
•
•
•
•
•
•
•
•
•
•
•
•
•
speed (for 10/100/1000 interfaces)
•
•
•
•
auto-mdix
Enable Auto-MDIX on copper ports.
Syntax
Defaults
Command Modes
Command
History
[no] auto-mdix
Enabled
INTERFACE
Usage
Information
Version 8.3.5.3
Version 8.3.3.3
Introduced on the S55.
Introduced on the S60.
With Auto-MDIX enabled, you can connect two network devices irrespective of the cable type
(straight-through or crossover) and the MDI mode of the peer device. When Auto-MDIX is disabled at both ends, the copper ports behave as MDI. In this case, you need a crossover cable to connect the port to another MDI port, or a straight-through cable to connect the port to a MDIX port. The link will not come up when wrong cables are used.
442 | Interfaces
clear counters c e s Clear the counters used in the show interfaces commands for all VRRP groups, VLANs, and physical interfaces, or selected ones.
Syntax clear counters [ interface ] [ vrrp [ vrid ] | learning-limit ]
Parameters interface vrrp vrid learning-limit
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
• For a port channel interface, enter the keyword port-channel followed by the number of the port channel:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
• For the management interface on the RPM, enter the keyword
ManagementEthernet followed by slot/port information. The slot range is
0-1, and the port range is 0.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword vrrp to clear statistics for all VRRP groups configured. Enter a number from 1 to 255 as the vrid .
(OPTIONAL) Enter the keyword learning-limit to clear unknown source address
(SA) drop counters when MAC learning limit is configured on the interface.
Note: This option is not supported on the S-Series, as the MAC learning limit is not supported
Defaults
Command Modes
Command
History
Without an interface specified, the command clears all interface counters.
EXEC Privilege
Example
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Support for 4093 VLANs on E-Series ExaScale. Prior to release supported 2094.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Updated definition of the learning-limit option for clarity.
Figure 14-1.
clear counters Command Example
FTOS#clear counters
Clear counters on all interfaces [confirm]
Related
Commands
Allow aging of MACs even though a learning-limit is configured or disallow station move on learnt MACs.
Displays information on the interfaces.
Interfaces | 443
clear dampening c e s Clear the dampening counters on all the interfaces or just the specified interface.
Syntax clear dampening [ interface ]
Parameters interface (Optional) Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a port channel interface, enter the keyword port-channel followed by a number:
C-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Without a specific interface specified, the command clears all interface dampening counters
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Example
FTOS#clear dampening gigabitethernet 1/2
Clear dampening counters on Gi 1/2 [confirm] y
FTOS#
Related
Commands
Display interface dampening information.
Configure dampening on an interface.
cx4-cable-length s Configure the length of the cable to be connected to the selected CX4 port.
Syntax [ no ] cx4-cable-length { long | medium | short }
Parameters long | medium | short Enter the keyword that matches the cable length to be used at the selected port: short = For 1-meter and 3-meter cable lengths medium = For 5-meter cable length long = For 10-meter and 15-meter cable lengths
444 | Interfaces
Defaults
Mode
Command
History medium
Interface
Usage
Information
Version 8.3.3.1
Version 7.7.1.0
Introduced on the S60.
Introduced on S-Series
This command only works on ports that the system recognizes as CX4 ports. So, for example,
Figure 14-2 shows an attempt to configure an XFP port in an S25P with the command after inserting a
CX4 converter into the port:
Note: When using a long CX4 cable between the C-Series and the S-Series, configure the cable using the cx4-cable-length short command only to avoid any errors.
Example Figure 14-2.
Example of Unsuccessful CX4 Cable Length Configuration
FTOS#show interfaces tengigabitethernet 0/26 | grep "XFP type"
Pluggable media present, XFP type is 10GBASE-CX4
FTOS(conf-if-te-0/26)#cx4-cable-length short
% Error: Unsupported command.
FTOS(conf-if-te-0/26)#cx4-cable-length medium
% Error: Unsupported command.
FTOS(conf-if-te-0/26)#cx4-cable-length long
% Error: Unsupported command.
FTOS(conf-if-te-0/26)#
Example
Figure 14-3 shows a successful CX4 cable length configuration.
Figure 14-3.
Example of CX4 Cable Length Configuration
FTOS#config
FTOS(config)#interface tengigabitethernet 0/52
FTOS(conf-if-0/52)#cx4-cable-length long
FTOS(conf-if-0/52)#show config
!
interface TenGigabitEthernet 0/51
no ip address
cx4-cable-length long
shutdown
FTOS(conf-if-0/52)#exit
FTOS(config)#
Related
Commands
For details on using XFP ports with CX4 cables, see your S-Series hardware guide.
Display the configuration of the selected interface.
Interfaces | 445
dampening c e s Configure dampening on an interface.
Syntax dampening [[[[h alf-life ] [ reuse threshold ]] [ suppress-threshold ]] [ max-suppress-time ]]
To disable dampening, use the no dampening [[[[ half-life ] [ reuse threshold ]] [ suppress-threshold ]]
[ max-suppress-time ]] command syntax.
Parameters half-life reuse threshold suppress-threshold max-suppress-time
Enter the number of seconds after which the penalty is decreased. The penalty is decreased by half after the half-life period expires.
Range: 1 to 30 seconds
Default: 5 seconds
Enter a number as the reuse threshold, the penalty value below which the interface state is changed to “up”.
Range: 1 to 20000
Default: 750
Enter a number as the suppress threshold, the penalty value above which the interface state is changed to “error disabled”.
Range: 1 to 20000
Default: 2500
Enter the maximum number for which a route can be suppressed. The default is four times the half-life value.
Range: 1 to 86400
Default: 20 seconds
Defaults
Command Modes
Command
History
Disabled
INTERFACE (conf-if-)
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Example
FTOS(conf-if-gi-3/2)#dampening 20 800 4500 120
FTOS(conf-if-gi-3/2)#
Usage
Information
With each flap, FTOS penalizes the interface by assigning a penalty (1024) that decays exponentially depending on the configured half-life. Once the accumulated penalty exceeds the suppress threshold value, the interface is moved to the error-disabled state. This interface state is deemed as “down” by all static/dynamic Layer 2 and Layer 3 protocols. The penalty is exponentially decayed based on the half-life timer. Once the penalty decays below the reuse threshold, the interface is enabled. The configured parameters should follow:
• suppress-threshold should be greater than reuse threshold
• max-suppress-time should be at least 4 times half-life
446 | Interfaces
Note: Dampening cannot be applied on an interface that is monitoring traffic for other interfaces .
Related
Commands
Clear the dampening counters on all the interfaces or just the specified interface.
Display interface dampening information.
description c e s Assign a descriptive text string to the interface.
Syntax description desc_text
To delete a description, enter no description .
Parameters desc_text Enter a text string up to 240 characters long.
Defaults
Command Modes
Command
History
No description is defined.
INTERFACE
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Modified for E-Series: Revised from 78 to 240 characters.
Entering a text string after the
command overwrites any previous text string configured as the description. The
description commands are the only commands that you can
configure on an interface that is a member of a port channel. Use the show interfaces description
command to display descriptions configured for each interface.
Related
Commands
Display description field of interfaces.
disable-on-sfm-failure e Disable select ports on E300 systems when a single SFM is available.
Syntax disable-on-sfm-failure
To delete a description, enter no disable-on-sfm-failure .
Defaults Port is not disabled
Command Modes INTERFACE
Command
History
Version 7.7.1.0
Introduced on E300 systems only
Interfaces | 447
Usage
Information
When an E300 system boots up and a single SFM is active this configuration, any ports configured with this feature will be shut down. If an SFM fails (or is removed) in an E300 system with two SFM, ports configured with this feature will be shut down. All other ports are treated normally.
When a second SFM is installed or replaced, all ports are booted up and treated as normally. This feature does not take affect until a single SFM is active in the E300 system.
duplex (Management) c e Set the mode of the Management interface.
Syntax duplex { half | full }
To return to the default setting, enter no duplex .
Parameters half full
Enter the keyword half to set the Management interface to transmit only in one direction.
Enter the keyword full to set the Management interface to transmit in both directions.
Defaults
Command Modes
Command
History
Not configured
INTERFACE
Version 8.1.1.0
Version 7.5.1.0
Version 6.4.1.0
Introduced on E-Series ExaScale
Introduced on C-Series
Documentation modified—added Management to distinguish from duplex (10/100
This command applies only to the Management interface on the RPMs.
Usage
Information
Related
Commands
Configure the Management port on the system (either the Primary or Standby RPM).
Set the mode of the Management interface.
Configure a static route that points to the Management interface or a forwarding router.
Set the speed on the Management interface.
duplex (10/100 Interfaces) c e s Configure duplex mode on any physical interfaces where the speed is set to 10/100.Syntax duplex { half | full }
To return to the default setting, enter no duplex .
Parameters half full
Enter the keyword half to set the physical interface to transmit only in one direction.
Enter the keyword full to set the physical interface to transmit in both directions.
Defaults Not configured
448 | Interfaces
Command Modes
Command
History
INTERFACE
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
This command applies to any physical interface with speed set to 10/100.
Note: Starting with FTOS 7.8.1.0, when a copper SFP2 module with catalog number
GP-SFP2-1T is used in the S25P model of the S-Series, its speed can be manually set with the speed command. When the speed is set to 10 or 100 Mbps, the duplex command can also be executed.
Related
Commands
speed (for 10/100/1000 interfaces)
Set the speed on the Base-T Ethernet interface.
Enable or disable auto-negotiation on an interface.
flowcontrol c e s Control how the system responds to and generates 802.3x pause frames on 1Gig and 10Gig line cards.
Syntax flowcontrol rx { off | on } tx { off | on } threshold {<1-2047> <1-2013> <1-2013>}
The threshold keyword is supported on C-Series and S-Series only.
Parameters
To return to the default, use the no flowcontrol rx { off | on } tx { off | on } threshold command.
rx on rx off tx on tx off threshold
(C-Series and
S-Series only )
Enter the keywords rx on to process the received flow control frames on this port. This is the default value for the receive side.
Enter the keywords rx off to ignore the received flow control frames on this port.
Enter the keywords tx on to send control frames from this port to the connected device when a higher rate of traffic is received. This is the default value on the send side.
Enter the keywords tx off so that flow control frames are not sent from this port to the connected device when a higher rate of traffic is received.
When tx on is configured, you can set the threshold values for:
Number of flow-control packet pointers: 1-2047 (default = 75)
Flow-control buffer threshold in KB: 1-2013 (default = 49KB)
Flow-control discard threshold in KB: 1-2013 (default= 75KB)
Defaults
Command Modes
C-Series: rx off tx off
E-Series: rx on tx on
S-Series (S25/S50): rx off tx off
S60: rx on
INTERFACE
Interfaces | 449
Command
History
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 6.5.1.9 and 7.4.1.0
Version 7.8.1.0
Introduced on the S60, rx only.
Introduced on E-Series ExaScale
Introduced on E-Series
Introduced on C-Series and S-Series with thresholds
The globally assigned 48-bit Multicast address 01-80-C2-00-00-01 is used to send and receive pause frames. To allow full duplex flow control, stations implementing the pause operation instruct the MAC to enable reception of frames with a destination address equal to this multicast address.
The pause:
• Starts when either the packet pointer or the buffer threshold is met (whichever is met first). When the discard threshold is met, packets are dropped.
• Ends when both the packet pointer and the buffer threshold fall below 50% of the threshold settings.
The discard threshold defines when the interface starts dropping the packet on the interface. This may be necessary when a connected device does not honor the flow control frame sent by the S-Series. The discard threshold should be larger than the buffer threshold so that the buffer holds at least hold at least
3 packets.
Note: The S60 supports only the rx control option. The S60 does not transmit pause frames.
Important Points to Remember
• Do not enable tx pause when buffer carving is enabled. Consult Dell Networking TAC for information and assistance.
• Asymmetric flow control ( rx on tx off or rx off tx on ) setting for the interface port less than 100
Mb/s speed is not permitted. The following error is returned:
Can’t configure Asymmetric flowcontrol when speed <1G, config ignored
• The only configuration applicable to half duplex ports is rx off tx off . The following error is returned:
Can’t configure flowcontrol when half duplex is configure, config ignored
• Half duplex cannot be configured when the flow control configuration is on (default is rx on tx on ). The following error is returned:
Can’t configure half duplex when flowcontrol is on, config ignored
Note: The flow control must be off ( rx off tx off ) before configuring the half duplex.
450 | Interfaces
Example
• Speeds less than 1 Gig cannot be configured when the asymmetric flow control configuration is on. The following error is returned:
Can’t configure speed <1G when Asymmetric flowcontrol is on, config ignored
• FTOS only supports rx on tx on and rx off tx off for speeds less than 1 Gig (Symmetric).
• On the C-Series and S-Series systems, the flow-control sender and receiver must be on the same port-pipe. Flow control is not supported across different port-pipes on the C-Series or S-Series system.
Figure 14-4.
show running config (partial)
FTOS(conf-if-gi-0/1)#show config
!
interface GigabitEthernet 0/1 no ip address switchport no negotiation auto flowcontrol rx off tx on no shutdown
...
The table below displays how FTOS negotiates the flow control values between two Dell Networking chassis connected back-to-back using 1G copper ports.
Table 14-1.
Negotiated Flow Control Values
Configured Negotiated
LocRxConf LocTxConf RemoteRxConf RemoteTxConf LocNegRx off off off off on on off on off on off off off off
LocNegTx off off off off
RemNegRx off off off off
RemNegTx off off off off off on on off on on off off on on
Related
Commands
off off on on off off on on off on off on off on off on off on off on off on on on off off off off off off on on off off on on off off on off off off on on off off on on off off on off off off on on
Display the flow configuration parameters (non-default values only).
Display the negotiated flow control parameters.
off on on on off off off off off off on on
Interfaces | 451
interface c e s Configure a physical interface on the switch.
Syntax interface interface
Parameters interface Enter one of the following keywords and slot/port or number information:
• For 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For SONET interfaces, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Not configured.
CONFIGURATION
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
Figure 14-5.
interface Command Example
FTOS(conf)#interface gig 0/0
FTOS(conf-if-gi-0/0)#exit#
Usage
Information
You cannot delete a physical interface.
By default, physical interfaces are disabled (
) and are in Layer 3 mode. To place an interface in mode, ensure that the interface’s configuration does not contain an IP address and enter the
Related
Commands
interface sonet
Configure a Loopback interface.
Configure a Null interface.
Configure a port channel.
Configure a SONET interface.
Configure a VLAN.
Display interface configuration.
452 | Interfaces
interface loopback c e s Configure a Loopback interface.
Syntax interface loopback number
To remove a loopback interface, use the no interface loopback number command.
Parameters number Enter a number as the interface number.
Range: 0 to 16383.
Defaults
Command Modes
Not configured.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
Example Figure 14-6.
interface loopback Command Example
FTOS(conf)#interface loopback 1655
FTOS(conf-if-lo-1655)#
Related
Commands
Configure a physical interface.
Configure a Null interface.
Configure a port channel.
Configure a VLAN.
interface ManagementEthernet
Configure the Management port on the system (either the Primary or Standby RPM).
c e
Syntax
Parameters interface ManagementEthernet slot/port slot/port Enter the keyword number zero (0).
ManagementEthernet followed by slot number (0-1) and port
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Version 8.3.3.1
Version 8.1.1.0
Version 7.5.1.0
Version 6.4.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced for C-Series
Introduced for E-Series
Interfaces | 453
Example Figure 14-7.
interface ManagementEthernet Command Example
FTOS(conf)#interface managementethernet 0/0
FTOS(conf-if-ma-0/0)#
Usage
Information
You cannot delete a Management port.
The Management port is enabled by default (
). Use the ip address command to assign an
IP address to the Management port.
If two RPMs are installed in your system, use the show redundancy command to display which RPM is the Primary RPM.
Related
Commands
Configure a static route that points to the Management interface or a forwarding router.
Clear FIB entries on a specified line card.
Clear FIB entries on a specified line card.
interface null c e s Configure a Null interface on the switch.
Syntax interface null number
Parameters number Enter zero (0) as the Null interface number.
Defaults
Command Modes
Command
History
Not configured; number = 0
CONFIGURATION
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
Figure 14-8.
interface null Command Example
FTOS(conf)#interface null 0
FTOS(conf-if-nu-0)#
Usage
Information
Related
Commands
Configure a physical interface.
Configure a Loopback interface.
Configure a port channel.
454 | Interfaces
Configure a VLAN.
Enable generation of ICMP unreachable messages.
interface range c e s This command permits configuration of a range of interfaces to which subsequent commands are applied (bulk configuration). Using the interface range command, identical commands can be entered for a range of interface.
Syntax interface range interface , interface , ...
Parameters interface , interface , ...
Enter the keyword interface range and one of the interfaces — slot/port, port-channel or VLAN number. Select the range of interfaces for bulk configuration.
You can enter up to six comma separated ranges—spaces are not required between the commas. Comma-separated ranges can include VLANs, port-channels and physical interfaces.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a port channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Defaults This command has no default behavior or values.
CONFIGURATION Command Modes
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Usage
Information
When creating an interface range, interfaces appear in the order they are entered; they are not sorted.
The command verifies that interfaces are present (physical) or configured (logical). Important things to remember:
• Bulk configuration is created if at least one interface is valid.
• Non-existing interfaces are excluded from the bulk configuration with a warning message
• The interface range prompt includes interface types with slot/port information for valid interfaces.
The prompt allows for a maximum of 32 characters. If the bulk configuration exceeds 32 characters, it is represented by an ellipsis ( ... ).
Interfaces | 455
Example
• When the interface range prompt has multiple port ranges, the smaller port range is excluded from
).
• If overlapping port ranges are specified, the port range is extended to the smallest start port and the biggest end port (
).
Figure 14-9.
Bulk Configuration Warning Message
FTOS(conf)#interface range so 2/0 - 1 , te 10/0 , gi 3/0 , fa 0/0
% Warning: Non-existing ports (not configured) are ignored by interface-range
Example Figure 14-10.
Interface Range prompt with Multiple Ports
FTOS(conf)#interface range gi 2/0 - 23 , gi 2/1 - 10
FTOS(conf-if-range-gi-2/0-23#
Example Figure 14-11.
Interface Range prompt Overlapping Port Ranges
FTOS(conf)#interface range gi 2/1 - 11 , gi 2/1 - 23
FTOS(conf-if-range-gi-2/1-23#
Only VLAN and port-channel interfaces created using the
commands can be used in the interface range command.
Use the
command can not be used with the bulk configuration feature of the interface range command. You cannot create virtual interfaces (VLAN, Port-channel) using the interface range command.
Note: If a range has VLAN, physical, port-channel, and SONET interfaces, only commands related to physical interfaces can be bulk configured. To configure commands specific to VLAN, port-channel or SONET, only those respective interfaces should be configured in a particular range.
Example
is an example of a single range bulk configuration.
Figure 14-12.
Single Range Bulk Configuration
FTOS(config)# interface range gigabitethernet 5/1 - 23
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#
Example
shows how to use commas to add different interface types to the range enabling all
Gigabit Ethernet interfaces in the range 5/1 to 5/23 and both Ten Gigabit Ethernet interfaces 1/1 and 1/
2.
Figure 14-13.
Multiple Range Bulk Configuration Gigabit Ethernet and Ten Gigabit
Ethernet
FTOS(config-if)# interface range gigabitethernet 5/1 - 23, tengigabitethernet 1/1 - 2
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#
456 | Interfaces
Example
shows how to use commas to add SONET, VLAN, and port-channel interfaces to the range.
Figure 14-14.
Multiple Range Bulk Configuration with SONET, VLAN, and port channel
FTOS(config-if)# interface range gigabitethernet 5/1 - 23, tengigabitethernet 1/1 – 2,
Vlan 2 – 100 , Port 1 – 25
FTOS(config-if-range)# no shutdown
FTOS(config-if-range)#
Related
Commands
show config (from INTERFACE RANGE mode)
interface range macro (define)
Configure a port channel group.
Configure a VLAN interface.
Show the bulk configuration interfaces.
Show the bulk configuration ranges.
Define a macro for an interface-range.
interface range macro (define) c e s Defines a macro for an interface range and then saves the macro in the running configuration.
Syntax define interface range macro name interface , interface , ...
Parameters name interface , interface , ...
Enter up to 16 characters for the macro name.
Enter the interface keyword (see below) and one of the interfaces slot/port, port-channel or VLAN numbers. Select the range of interfaces for bulk configuration. You can enter up to six comma separated ranges—spaces are not required between the commas.
Comma-separated ranges can include VLANs, port-channels and physical interfaces.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a port channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
This command has no default behavior or value
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
Interfaces | 457
Example Figure 14-15.
define interface-range macro C ommand Example
FTOS(config)# define interface-range test tengigabitethernet 0/0 - 3 , gigabitethernet 5/0 - 47 , gigabitethernet 13/0 - 89
FTOS# show running-config | grep define define interface-range test tengigabitethernet 0/0 - 3 , gigabitethernet 5/0 - 47 , gigabitethernet 13/0 - 89
FTOS(config)#interface range macro test
FTOS(config-if-range-te-0/0-3,gi-5/0-47,gi-13/0-89)#
Usage
Information
Related
Commands
is an example of how to define an interface range macro named test . Execute the show running-config command to display the macro definition. Applying the macro is shown in
.
Configure a range of command (bulk configuration)
Run an interface range macro.
interface range macro name c e s Run the interface-range macro to automatically configure the pre-defined range of interfaces.
Syntax interface range macro name
Parameters name Enter the name of an existing macro.
Defaults
Command Modes
Command
History
This command has no default behavior or value
CONFIGURATION
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
runs the macro named test that was defined in
.
Usage
Information
Example Figure 14-16.
interface-range macro Command Example
FTOS(config)#interface range macro test
FTOS(config-if-range-te-0/0-3,gi-5/0-47,gi-13/0-89)#
FTOS
Related
Commands
interface range macro (define)
Configure a range of command (bulk configuration)
Define a macro for an interface range (bulk configuration)
458 | Interfaces
interface vlan c e s Configure a VLAN. You can configure up to 4094 VLANs.
Syntax interface vlan vlan-id
To delete a VLAN, use the no interface vlan vlan-id command.
Parameters vlan-id Enter a number as the VLAN Identifier.
Range: 1 to 4094.
Defaults
Command Modes
Not configured, except for the Default VLAN, which is configured as VLAN 1.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Example Figure 14-17.
interface vlan Command Example
FTOS(conf)#int vlan 3
FTOS(conf-if-vl-3)#
Usage
Information
Related
Commands
For more information on VLANs and the commands to configure them, refer to
FTP, TFTP, and SNMP operations are not supported on a VLAN. MAC ACLs are not supported in
VLANs. IP ACLs are supported. See Chapter 6, Access Control Lists (ACL) .
Configure a physical interface.
Configure a loopback interface.
Configure a null interface.
Configure a port channel group.
Display the current VLAN configuration on the switch.
Disable/Enable the VLAN.
Add a Layer 2 interface to a VLAN as a tagged interface.
Add a Layer 2 interface to a VLAN as an untagged interface.
ipg (10 Gigabit Ethernet interfaces) e Set the Inter-packet Gap for traffic on 10 Gigabit Ethernet interface.
Syntax ipg { ieee-802.3ae
| shrink }
To return to the default of averaging the IPG, enter no ipg { shrink | ieee-802.3ae
}
Interfaces | 459
Parameters ieee-802.3ae
Enter the keyword ieee-802.3ae
to set the IPG to 12 (12-15) bytes (packet size dependent)
Enter the keyword shrink to set the IPG to 8 (8-11) bytes (packet size dependent).
Defaults
Command Modes
Command
History
Usage
Information shrink averaging the IPG
INTERFACE pre-Version 6.1.1.0
Introduced for E-Series
For 10 Gigabit Ethernet interfaces only.
IPG equals 96 bits times from end of the previous packet to start of the pre-amble of the next packet. keepalive c e s On SONET interfaces, send keepalive packets periodically to keep an interface alive when it is not transmitting data.
Syntax keepalive [ seconds ]
To stop sending SONET keepalive packets, enter no keepalive .
Parameters seconds (OPTIONAL) For SONET interfaces with PPP encapsulation enabled, enter the number of seconds between keepalive packets.
Range: 0 to 23767
Default: 10 seconds
Defaults
Command Modes
Enabled
INTERFACE
Command
History
Usage
Information
Version 8.3.3.1
Version 8.1.1.2
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
When you configure keepalive , the system sends a self-addressed packet out of the configured interface to verify that the far end of a WAN link is up. When you configure no keepalive , the system does not send keepalive packets and so the local end of a WAN link remains up even if the remote end is down.
460 | Interfaces
lfs enable e Enable Link Fault Signaling (LFS) on 10 Gigabit Ethernet interfaces only.
Syntax lfs enable
To disable LFS, enter no lfs enable .
Defaults
Command Modes
Enabled.
INTERFACE (10 Gigabit Ethernet interfaces only)
Command
History
Usage
Information pre-Version 6.1.1.0
Introduced for E-Series
If there is a failure on the link, FTOS brings down the interface. The interface will stay down until the link failure signal stops.
Note: On TeraScale line cards, LFS is always enabled by default.
link debounce-timer e Assign the debounce time for link change notification on this interface.
Syntax link debounce [ milliseconds ]
Parameters milliseconds Enter the time to delay link status change notification on this interface.
Range: 100-5000 ms
• Default for copper is 3100 ms
• Default for fiber is 100 ms
INTERFACE Command Modes
Command
History
Usage
Information
Version 8.2.1.0
Version 7.6.1.0
Introduced on E-Series ExaScale
Introduced on E-Series
Changes do not affect any ongoing debounces. The timer changes take affect from the next debounce onward.
monitor c e s Monitor counters on a single interface or all interfaces on a line card. The screen is refreshed every 5 seconds and the CLI prompt disappears.
Syntax monitor interface [ interface ]
To disable monitoring and return to the CLI prompt, press the q key.
Interfaces | 461
Parameters interface (OPTIONAL) Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For the management port, enter the keyword managementethernet followed by the slot (0-1) and the port (0).
• For SONET interface types, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
The delta column displays changes since the last screen refresh.
Usage
Information
Example Figure 14-18.
monitor Command Example of a Single Interface
systest-3 Monitor time: 00:00:06 Refresh Intvl.: 2s Time: 03:26:26
Interface: Gi 0/3, Enabled, Link is Up, Linespeed is 1000 Mbit
Traffic statistics: Current Rate Delta
Input bytes: 9069828 43 Bps 86
Output bytes: 606915800 43 Bps 86
Input packets: 54001 0 pps 1
Output packets: 9401589 0 pps 1
64B packets: 67 0 pps 0
Over 64B packets: 49166 0 pps 1
Over 127B packets: 350 0 pps 0
Over 255B packets: 1351 0 pps 0
Over 511B packets: 286 0 pps 0
Over 1023B packets: 2781 0 pps 0
Error statistics:
Input underruns: 0 0 pps 0
Input giants: 0 0 pps 0
Input throttles: 0 0 pps 0
Input CRC: 0 0 pps 0
Input IP checksum: 0 0 pps 0
Input overrun: 0 0 pps 0
Output underruns: 0 0 pps 0
Output throttles: 0 0 pps 0
m - Change mode c - Clear screen
l - Page up a - Page down
T - Increase refresh interval t - Decrease refresh interval
q - Quit
462 | Interfaces
Figure 14-19.
monitor Command Example of All Interfaces on a Line Card
systest-3 Monitor time: 00:01:31 Refresh Intvl.: 2s Time: 03:54:14
Interface Link In Packets [delta] Out Packets
[delta]
Gi 0/0 Down 0 0 0 0
Gi 0/1 Down 0 0 0 0
Gi 0/2 Up 61512 52 66160 42
Gi 0/3 Up 63086 20 9405888 24
Gi 0/4 Up 14697471418 2661481 13392989657
2661385
Gi 0/5 Up 3759 3 161959604 832816
Gi 0/6 Up 4070 3 8680346 5
Gi 0/7 Up 61934 34 138734357 72
Gi 0/8 Up 61427 1 59960 1
Gi 0/9 Up 62039 53 104239232 3
Gi 0/10 Up 17740044091 372 7373849244 79
Gi 0/11 Up 18182889225 44 7184747584 138
Gi 0/12 Up 18182682056 0 3682 1
Gi 0/13 Up 18182681434 43 6592378911 144
Gi 0/14 Up 61349 55 86281941 15
Gi 0/15 Up 59808 58 62060 27
Gi 0/16 Up 59889 1 61616 1
Gi 0/17 Up 0 0 14950126 81293
Gi 0/18 Up 0 0 0 0
Gi 0/19 Down 0 0 0 0
Gi 0/20 Up 62734 54 62766 18
Gi 0/21 Up 60198 9 200899 9
Gi 0/22 Up 17304741100 3157554 10102508511
1114221
Gi 0/23 Up 17304769659 3139507 7133354895
523329
m - Change mode c - Clear screen
b - Display bytes r - Display pkts/bytes per sec
l - Page up a - Page down
T - Increase refresh interval t - Decrease refresh interval
q - Quit
Table 14-2.
monitor Command Menu Options
Key Description systest-3 monitor time time m c b r l a
T t q
Displays the host name assigned to the system.
Displays the amount of time since the monitor
command was entered.
Displays the amount of time the chassis is up (since last reboot).
Change the view from a single interface to all interfaces on the line card or visa-versa.
Refresh the view.
Change the counters displayed from Packets on the interface to Bytes.
Change the [delta] column from change in the number of packets/bytes in the last interval to rate per second.
Change the view to next interface on the line card, or if in the line card mode, the next line card in the chassis.
Change the view to the previous interface on the line card, or if the line card mode, the previous line card in the chassis.
Increase the screen refresh rate.
Decrease the screen refresh rate.
Return to the CLI prompt.
Interfaces | 463
mtu c e s Set the maximum Link MTU (frame size) for an Ethernet interface.
Syntax mtu value
To return to the default MTU value, enter no mtu .
Parameters value Enter a maximum frame size in bytes.
Range: 594 to 9252
Default: 1554
Defaults
Command Modes
Command
History
1554
INTERFACE
Usage
Information
Example
Version 8.3.3.4
Version 8.1.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on S-Series
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced for E-Series
If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU ( ip mtu command) must be enough bytes to include the Layer 2 header:
• On C-Series, the IP MTU will get adjusted automatically when the Layer 2 MTU is configured with the mtu command.
• On the E-Series, you must compensate for a Layer 2 header when configuring IP MTU and link
MTU on an Ethernet interface. Use the ip mtu command.
When you enter the no
mtu command, FTOS reduces the IP MTU value to 1536 bytes. On the
E-Series, to return the IP MTU value to the default, enter no ip mtu .
Link MTU and IP MTU considerations for port channels and VLANs are as follows.
port channels:
• All members must have the same link MTU value and the same IP MTU value.
• The port channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members.
Example: if the members have a link MTU of 2100 and an IP MTU 2000, the port channel’s MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.
VLANs:
• All members of a VLAN must have same IP MTU value.
• Members can have different Link MTU values. Tagged members must have a link MTU 4 bytes higher than untagged members to account for the packet tag.
• The VLAN link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the VLAN members.
The VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500 and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN’s Link MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes.
464 | Interfaces
Table 14-3.
Difference between Link MTU and IP MTU
Layer 2 Overhead
Ethernet (untagged)
VLAN Tag
Untagged Packet with VLAN-Stack Header
Tagged Packet with VLAN-Stack Header
Link MTU and IP MTU Delta
18 bytes
22 bytes
22 bytes
26 bytes negotiation auto c e s Enable auto-negotiation on an interface.
Syntax negotiation auto
To disable auto-negotiation, enter no negotiation auto .
Defaults
Command Modes
Enabled.
INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Usage
Information
This command is available on C-Series and S-Series 10/100/1000 Base-T Ethernet interfaces, and on
TeraScale 10/100/1000 Base-T Ethernet line cards.
The no negotiation auto command is only available if you first manually set the speed of a port to
10Mbits or 100Mbits.
The negotiation auto command provides a mode option for configuring an individual port to forced-master/forced slave once auto-negotiation is enabled
Note: The mode option is not available on non-10/100/1000 Base-T Ethernet line cards.
Figure 14-20.
negotiation auto Master/Slave Example
FTOS(conf)# int gi 0/0
FTOS(conf-if)#neg auto
FTOS(conf-if-autoneg)# ?
end Exit from configuration mode exit Exit from autoneg configuration mode mode Specify autoneg mode no Negate a command or set its defaults show Show autoneg configuration information
FTOS(conf-if-autoneg)# mode ?
forced-master Force port to master mode forced-slave Force port to slave mode
FTOS(conf-if-autoneg)#
Interfaces | 465
466 | Interfaces
If the mode option is not used, the default setting is slave. If you do not configure forced-master or forced slave on a port, the port negotiates to either a master or a slave state. Port status is one of the following:
• Forced-master
• Force-slave
• Master
• Slave
• Auto-neg Error—typically indicates that both ends of the node are configured with forced-master or forced-slave.
Caution: Ensure that one end of your node is configured as forced-master and one is configured as forced-slave. If both are configured the same (that is forced-master or forced-slave), the show interfaces command will flap between an auto-neg-error and forced-master/slave states
You can display master/slave settings with the show interfaces command.
Figure 14-21.
D isplay Auto-negotiation Master/Slave Setting (partial)
FTOS#show interfaces configured
GigabitEthernet 13/18 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:05:f7:fc
Current address is 00:01:e8:05:f7:fc
Interface index is 474791997
Internet address is 1.1.1.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit, Mode full duplex, Master
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of “show interfaces” counters 00:12:42
Queueing strategy: fifo
Input Statistics:
...
Both sides of the link must have auto-negotiation enabled or disabled for the link to come up.
The following table details the possible speed and auto-negotiation combinations for a line between two 10/100/1000 Base-T Ethernet interfaces.
Table 14-4.
Auto-negotiation and Link Speed Combinations
Port 0 Port 1
Link Status between
Port 1 and Port 2 auto-negotiation enabled * speed 1000 or auto auto-negotiation enabled speed 100 auto-negotiation disabled speed 100 auto-negotiation disabled speed 100 auto-negotiation enabled * speed 1000 or auto auto-negotiation enabled speed 100 auto-negotiation disabled speed 100 auto-negotiation enabled speed 100
Up at 1000 Mb/s
Up at 100 Mb/s
Up at 100 Mb/s
Down
Table 14-4.
Auto-negotiation and Link Speed Combinations
Port 0 Port 1
Link Status between
Port 1 and Port 2 auto-negotiation enabled * speed 1000 or auto auto-negotiation disabled speed 100
* You cannot disable auto-negotiation when the speed is set to 1000 or auto.
Down
Related
Commands
speed (for 10/100/1000 interfaces)
Set the link speed to 10, 100, 1000 or auto-negotiate the speed.
portmode hybrid c e s Set a physical port or port-channel to accept both tagged and untagged frames. A port configured this way is identified as a hybrid port in report displays.
Syntax portmode hybrid
To return a port to accept either tagged or untagged frames (non-hybrid), use the no portmode hybrid command.
Defaults non-hybrid
Command Modes INTERFACE (conf-ifinterface slot/port )
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on E-Series and S-Series
Introduced on C-Series only
Example Figure 14-22.
portmode hybrid configuration example
FTOS(conf)#interface gi 7/0
FTOS(conf-if-gi-7/0)#portmode hybrid
FTOS(conf-if-gi-7/0)#interface vlan 10
FTOS(conf-if-vl-10)#untagged gi 7/0
FTOS(conf-if-vl-10)#interface vlan 20
FTOS(conf-if-vl-20)#tagged gi 7/0
FTOS(conf-if-vl-20)#
Usage
Information
The figure above sets a port as hybrid, makes the port a tagged member of VLAN 20, and an untagged member of VLAN 10, which becomes the native VLAN of the port. The port will now accept:
• untagged frames and classify them as VLAN 10 frames
• VLAN 20 tagged frames
The next figure is an example show output with “Hybrid” as the newly added value for 802.1QTagged.
The options for this field are:
• True—port is tagged
• False—port is untagged
• Hybrid—port accepts both tagged and untagged frames
Interfaces | 467
Example Figure 14-23.
Display the Tagged Hybrid Interface
FTOS(conf-if-vl-20)#do show interfaces switchport
Name: GigabitEthernet 7/0
802.1QTagged: Hybrid
Vlan membership:
Vlan 10, Vlan 20
Native VlanId: 10
FTOS(conf-if-vl-20)#
The figure below is an example unconfiguration of the hybrid port using the no portmode hybrid command.
Note: You must remove all other configurations on the port before you can remove the hybrid configuration from the port.
Example Figure 14-24.
Unconfigure the hybrid port
FTOS(conf-if-vl-20)#interface vlan 10
FTOS(conf-if-vl-10)#no untagged gi 7/0
FTOS(conf-if-vl-10)#interface vlan 20
FTOS(conf-if-vl-20)#no tagged gi 7/0
FTOS(conf-if-vl-20)#interface gi 7/0
FTOS(conf-if-gi-7/0)#no portmode hybrid
FTOS(conf-if-vl-20)#
Related
Commands
Display the configuration of switchport (Layer 2) interfaces on the switch.
Place the interface in a Layer 2 mode.
Specify an interface as a trunk port to the Stackable VLAN network.
rate-interval c e s Configure the traffic sampling interval on the selected interface.
Syntax rate-interval seconds
Parameters seconds Enter the number of seconds for which to collect traffic data.
Range: 30 to 299 seconds
Note: Since polling occurs every 15 seconds, the number of seconds designated here will round to the multiple of 15 seconds lower than the entered value. For example, if 44 seconds is designated it will round to 30; 45 to 59 seconds will round to 45, and so forth.
Defaults
Command Modes
Command
History
299 seconds
INTERFACE
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
468 | Interfaces
Usage
Information
Related
Commands
The configured rate interval is displayed, along with the collected traffic data, in the output of show interfaces commands.
Display information on physical and virtual interfaces.
show config c e s Display the interface configuration.
Syntax show config
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Example Figure 14-25.
show config Command Example for the INTERFACE Mode
FTOS(conf-if)#show conf
!
interface GigabitEthernet 1/7
no ip address
switchport
no shutdown
FTOS(conf-if)# show config (from INTERFACE RANGE mode) c e s Display
the bulk configured interfaces ( interface range ).
Syntax show config
Command Modes CONFIGURATION INTERFACE (conf-if-range)
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Interfaces | 469
Example Figure 14-26.
show config (Bulk Configuration) Command Example
FTOS(conf)#interface range gigabitethernet 1/1 - 2
FTOS(conf-if-range-gi-1/1-2)#show config
!
interface GigabitEthernet 1/1
no ip address
switchport
no shutdown
!
interface GigabitEthernet 1/2
no ip address
switchport
no shutdown
FTOS(conf-if-range-gi-1/1-2)# show interfaces c e s Display information on a specific physical interface or virtual interface.
Syntax show interfaces interface
Parameters interface Enter one of the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to
16383.
• For the management interface on an RPM, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.
• For a Null interface, enter the keywords null 0 .
• For a port channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
• For a SONET interface, enter the keyword sonet followed by the slot/port.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.2.1.2
Version 8.2.1.0
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
SFP and SFP+ optics power detail is included the S60.
Include SFP and SFP+ optics power detail in E-Series and C-Series output.
Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.
Introduced on E-Series ExaScale
Output expanded to include SFP+ media in C-Series
Introduced on S-Series
Introduced on C-Series
470 | Interfaces
Usage
Example
Version 6.4.1.0
Version 6.3.1.0
Changed organization of display output
Added Pluggable Media Type field in E-Series TeraScale output
Use this show interfaces command for details on a specific interface. Use the show interfaces linecard command for details on all interfaces on the designated line card.
Figure 14-27.
show interfaces Command Example for 10G Port (E-Series)
FTOS#show interfaces tengigabitethernet 2/0
TenGigabitEthernet 2/0 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:05:f7:3a
Interface index is 100990998
Internet address is 213.121.22.45/28
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 10000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interfaces" counters 02:31:45
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
Input 0 IP Packets, 0 Vlans 0 MPLS
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 symbol errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 IP Checksum, 0 overrun, 0 discarded
Output Statistics:
1 packets, 64 bytes, 0 underruns
0 Multicasts, 2 Broadcasts, 0 Unicasts
0 IP Packets, 0 Vlans, 0 MPLS
0 throttles, 0 discarded
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Time since last interface status change: 00:00:27
Table 14-5.
Lines in show interfaces Command Example
Line
TenGigabitEthernet 2/0...
Hardware is...
Interface index...
Internet address...
MTU 1554...
LineSpeed
ARP type:...
Last clearing...
Queuing strategy...
Description
Displays the interface’s type, slot/port, and administrative and line protocol status.
Displays the interface’s hardware information and its assigned MAC address.
Displays the interface index number used by SNMP to identify the interface.
States whether an IP address is assigned to the interface. If one is, that address is displayed.
Displays link and IP MTU information.
If the chassis is in Jumbo mode, this number can range from 576 to 9252.
Displays the interface’s line speed.
Displays the ARP type and the ARP timeout value for the interface.
Displays the time when the show interfaces counters where cleared.
States the packet queuing strategy. FIFO means first in first out.
Interfaces | 471
472 | Interfaces
Table 14-5.
Lines in show interfaces Command Example (continued)
Line
Input Statistics:
Output Statistics:
Rate information...
Time since...
Description
Displays all the input statistics including:
• Number of packets and bytes into the interface
• Number of packets with IP headers, VLAN tagged headers and MPLS headers
Note: The sum of the number of packets may not be as expected since a VLAN tagged IP packet counts as both a VLAN packet and an IP packet.
• Packet size and the number of those packets inbound to the interface
• Number of symbol errors, runts, giants, and throttles packets: runts = number of packets that are less than 64B giants = packets that are greater than the MTU size throttles = packets containing PAUSE frames
• Number of CRC, IP Checksum, overrun, and discarded packets:
CRC = packets with CRC/FCS errors
IP Checksum = packets with IP Checksum errors overrun = number of packets discarded due to FIFO overrun conditions discarded = the sum of input symbol errors, runts, giants, CRC, IP
Checksum, and overrun packets discarded without any processing
Displays output statistics sent out of the interface including:
• Number of packets, bytes and underruns out of the interface packets = total number of packets bytes = total number of bytes underruns = number of packets with FIFO underrun conditions
• Number of Multicast, Broadcast and Unicast packets:
Multicasts = number of MAC multicast packets
Broadcasts = number of MAC broadcast packets
Unicasts = number of MAC unicast packets
• Number of IP, VLAN and MPLs packets:
IP Packets = number of IP packets
Vlans = number of VLAN tagged packets
MPLS = number of MPLS packets (found on a LSR interface)
• Number of throttles and discards packets: throttles = packets containing PAUSE frames discarded = number of packets discarded without any processing
Estimate of the input and output traffic rate over a designated interval (30 to
299 seconds).
Traffic rate is displayed in bits, packets per second, and percent of line rate.
Elapsed time since the last interface status change (hh:mm:ss format).
Example Figure 14-28.
show interfaces Command Example for 10G (TeraScale)
FTOS#show interfaces tengigabitethernet 0/0
TenGigabitEthernet 3/0 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:41:77:c5
Current address is 00:01:e8:41:77:c5
Pluggable media present, XFP type is 10GBASE-SR
Medium is MultiRate, Wavelength is 850.00nm
XFP receive power reading is -2.4834
Interface index is 134545468
Port will not be disabled on partial SFM failure
MTU 9252 bytes, IP MTU 9234 bytes
LineSpeed 10000 Mbit
Flowcontrol rx on tx on
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 00:15:14
Queueing strategy: fifo
Input Statistics:
4410013700 packets, 282240876800 bytes
0 Vlans
4410013700 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
857732 packets, 54894848 bytes, 0 underruns
857732 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
24 Multicasts, 0 Broadcasts, 857708 Unicasts
0 Vlans,0 throttles, 0 discarded, 0 collisions, 4409143619 wredDrops
Rate info (interval 30 seconds):
Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Time since last interface status change: 00:12:14
FTOS#
Table 14-6.
Fields in show interfaces Command Example (TeraScale)
Line
TenGigabitEthernet 0/0...
Hardware is...
Pluggable media present...
Interface index...
Internet address...
MTU 1554...
LineSpeed
ARP type:...
Last clearing...
Description
Interface type, slot/port and administrative and line protocol status.
Interface hardware information, assigned MAC address, and current address.
Present pluggable media wavelength, type, and rate. The error scenarios are:
• Wavelength, Non-qualified — FTOS ID is not present, but wavelength information is available from XFP or SFP serial data
• Wavelength, F10 unknown— FTOS ID is present, but not able to determine the optics type
• Unknown, Non-qualified— if wavelength is reading error, and F10 ID is not present
Dell Networking allows unsupported SFP and XFP transceivers to be used, but FTOS might not be able to retrieve some data about them. In that case, typically when the output of this field is “Pluggable media present, Media type is unknown”, the Medium and the XFP/SFP receive power reading data might not be present in the output.
Displays the interface index number used by SNMP to identify the interface.
States whether an IP address is assigned to the interface. If one is, that address is displayed.
Displays link and IP MTU information.
Displays the interface’s line speed, duplex mode, and Slave
Displays the ARP type and the ARP timeout value for the interface.
Displays the time when the show interfaces counters where cleared.
Interfaces | 473
474 | Interfaces
Table 14-6.
Fields in show interfaces Command Example (TeraScale)
Line
Queuing strategy...
Input Statistics:
Output Statistics:
Rate information...
Time since...
Description
States the packet queuing strategy. FIFO means first in first out.
Displays all the input statistics including:
• Number of packets and bytes into the interface
• Number of packets with VLAN tagged headers
• Packet size and the number of those packets inbound to the interface
• Number of Multicast and Broadcast packets:
Multicasts = number of MAC multicast packets
Broadcasts = number of MAC broadcast packets
• Number of runts, giants, and throttles packets: runts = number of packets that are less than 64B giants = packets that are greater than the MTU size throttles = packets containing PAUSE frames
• Number of CRC, overrun, and discarded packets:
CRC = packets with CRC/FCS errors overrun = number of packets discarded due to FIFO overrun conditions discarded = the sum of runts, giants, CRC, and overrun packets discarded without any processing
Displays output statistics sent out the interface including:
• Number of packets, bytes and underruns out of the interface
• Packet size and the number of those packets outbound to the interface
• Number of Multicast, Broadcast and Unicast packets:
Multicasts = number of MAC multicast packets
Broadcasts = number of MAC broadcast packets
Unicasts = number of MAC unicast packets
• Number of VLANs, throttles, discards, and collisions:
Vlans = number of VLAN tagged packets throttles = packets containing PAUSE frames discarded = number of packets discarded without any processing collisions = number of packet collisions wred=count both packets discarded in the MAC and in the hardware-based queues
Estimate of the input and output traffic rate over a designated interval (30 to
299 seconds)
Traffic rate is displayed in bits, packets per second, and percent of line rate.
Elapsed time since the last interface status change (hh:mm:ss format).
Example Figure 14-29.
show interfaces Command Example for 1G SFP Interface
FTOS#show interfaces gigabitethernet 2/0
GigabitEthernet 2/0 is up, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:41:77:95
Current address is 00:01:e8:41:77:95
Pluggable media present, SFP type is 1000BASE-SX
Wavelength is 850nm
Interface index is 100974648
Port will not be disabled on partial SFM failure
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
Flowcontrol rx on tx on
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 1w0d5h
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
0 Vlans
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts, 0 Unicasts
0 Vlans, 0 throttles, 0 discarded, 0 collisions, 0 wreddrops
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Time since last interface status change: 1w0d5h
FTOS#
Example Figure 14-30.
show interfaces Command Example for 10G SFP+ Interface in C-Series
FTOS#show interfaces tengigabitethernet 0/44
TenGigabitEthernet 0/44 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:32:44:26
Current address is 00:01:e8:32:44:26
Pluggable media present, SFP+ type is 10GBASE-CU5M
Medium is MultiRate
Interface index is 45417732
FTOS#
Usage
Information
Related
Commands
On the C-Series and S-Series, the interface counter “over 1023-byte pkts” does not increment for packets in the range 9216 > x < 1023.
Display any interface with a non-default configuration.
Display information on all interfaces on a specific line card.
Display information of either rate limiting or rate policing on the interface.
Display Layer 2 information about the interfaces.
Display the chassis type, components (including media), FTOS version including hardware identification numbers and configured protocols.
Display the S-Series switch type, components (including media), FTOS version including hardware identification numbers and configured protocols.
Display Layer 3 information about the interfaces.
Interfaces | 475
Display the line card(s) status.
Display all interfaces configured using the interface range command.
show interfaces configured c e s Display any interface with a non-default configuration.
Syntax show interfaces configured
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Changed organization of display output
Example Figure 14-31.
show interfaces configured Command Output
FTOS#show interfaces configured
GigabitEthernet 13/18 is up, line protocol is up
Hardware is Force10Eth, address is 00:01:e8:05:f7:fc
Current address is 00:01:e8:05:f7:fc
Interface index is 474791997
Internet address is 1.1.1.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit, Mode full duplex, Master
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interfaces" counters 00:12:42
Queueing strategy: fifo
Input Statistics:
10 packets, 10000 bytes
0 Vlans
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 10 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
1 packets, 64 bytes, 0 underruns
1 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 1 Broadcasts, 0 Unicasts
0 Vlans, 0 throttles, 0 discarded, 0 collisions
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Time since last interface status change: 00:04:59
FTOS#
Related
Commands
Display information on a specific physical interface or virtual interface.
476 | Interfaces
show interfaces dampening c e s Display interface dampening information.
Syntax show interfaces dampening [[ interface ] [ summary ] [ detail ]]
Parameters interface summary detail
(Optional) Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a port channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
• E-Series Range: 1 to 255 for TeraScale and ExaScale
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword summary to display the current summary of dampening data, including the number of interfaces configured and the number of interfaces suppressed, if any.
(OPTIONAL) Enter the keyword detail to display detailed interface dampening data.
Defaults
Command Modes
No default values or behavior
EXEC
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
Example Figure 14-32.
show interfaces dampening Command Example
FTOS#show interfaces dampening
Interface Supp Flaps Penalty Half-Life Reuse Suppress Max-Sup
State
Gi 3/2 Up 0 0 20 800 4500 120
Gi 3/10 Up 0 0 5 750 2500 20
FTOS#
Related
Commands
Configure dampening on an interface
Display information on a specific physical interface or virtual interface.
Display any interface with a non-default configuration.
Interfaces | 477
show interfaces debounce e Display information on interfaces with debounce timer configured.
Syntax show interfaces debounce interface
Parameters interface Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Command Modes
Command
History
EXEC
EXEC Privilege
Version 8.2.1.0
Version 7.7.1.0
Introduced on E-Series ExaScale
Introduced on E-Series
Related
Commands
Display information on a specific physical interface or virtual interface.
show interfaces description c e s Display the descriptions configured on the interface.
Syntax show interfaces [ interface ] description
Parameters interface Enter one of the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from 0 to
16383.
• For the management interface on the RPM, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.
• For the Null interface, enter the keywords null 0 .
• For a port channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
• For SONET interfaces, enter the keyword sonet followed by the slot/port.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For VLAN interfaces, enter the keyword vlan followed by a number from 1 to 4094.
Command Modes EXEC
EXEC Privilege
478 | Interfaces
Command
History
Example
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Support for 4093 VLANs on E-Series ExaScale. Prior releases supported 2094.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 14-33.
show interfaces description Command Example
FTOS>
Interface OK? Status Protocol Description
GigabitEthernet 4/17 NO admin down down ***connected-to-host***
GigabitEthernet 4/18 NO admin down down ***connected-to-Tom***
GigabitEthernet 4/19 NO admin down down ***connected-to-marketing***
GigabitEthernet 4/20 NO admin down down ***connected-to-Bill***
GigabitEthernet 4/21 NO up down ***connected-to-Radius-Server***
GigabitEthernet 4/22 NO admin down down ***connected-to-Web-Server***
GigabitEthernet 4/23 NO admin down down ***connected-to-PC-client***
TenGigabitEthernet 6/0 NO admin down down
GigabitEthernet 8/0 YES up up
GigabitEthernet 8/1 YES up up
GigabitEthernet 8/2 YES up up
GigabitEthernet 8/3 YES up up
GigabitEthernet 8/4 YES up up
GigabitEthernet 8/5 YES up up
GigabitEthernet 8/6 YES up up
GigabitEthernet 8/7 YES up up
GigabitEthernet 8/8 YES up up
GigabitEthernet 8/9 YES up up
GigabitEthernet 8/10 YES up up
GigabitEthernet 8/11 YES up up
FTOS>
Table 14-7.
show interfaces description Command Example Fields
Field
Interface
OK?
Description
Displays type of interface and associated slot and port number.
Indicates if the hardware is functioning properly.
Status
Protocol
States whether the interface is enabled (up) or disabled (administratively down).
States whether IP is enabled (up) or disabled (down) on the interface.
Description Displays the description (if any) manually configured for the interface.
Related
Commands
Display information on a specific physical interface or virtual interface.
Interfaces | 479
show interfaces linecard c e Display information on all interfaces on a specific line card.
Syntax show interfaces linecard slot-number
Parameters slot-number Enter a number for the line card slot.
C-Series Range: 0-7 for C300; 0–3 for C150
E-Series Range: 0 to 13 on the E1200/1200i, 0 to 6 on the E600/600i, 0 to 5 on the
E300
Command Modes
Command
History
EXEC
EXEC Privilege
Version 8.1.1.2
Version 8.1.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced support on E-Series ExaScale E600i
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced on E-Series
Usage
Example
shows a line card that has an XFP interface. The type, medium, wavelength, and receive power details are displayed. When a device that is not certified by Dell Networking is inserted, it might work, but its details might not be readable by FTOS and not displayed here.
Figure 14-34.
show interfaces linecard Command Example (in C150)
FTOS#show interfaces linecard 0
TenGigabitEthernet 0/0 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:51:b2:d4
Current address is 00:01:e8:51:b2:d4
Pluggable media present, XFP type is 10GBASE-SR
Medium is MultiRate, Wavelength is 850.00nm
XFP receive power reading is -2.3538
Interface index is 33883138
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 10000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 20:16:29
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
--More--
Related
Commands
Display information on a specific physical interface or virtual interface.
480 | Interfaces
show interfaces phy ces Display auto-negotiation and link partner information.
Syntax show interfaces gigabitethernet slot/port phy
Parameters gigabitethernet Enter the keyword gigabitethernet followed by the slot/port information.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 6.5.4.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on C-Series and S-Series
Introduced on E-Series
Figure 14-35.
show interfaces gigabitethernet phy Command Example (Partial)
FTOS#show int gigabitethernet 1/0 phy
Mode Control:
SpeedSelection: 10b
AutoNeg: ON
Loopback: False
PowerDown: False
Isolate: False
DuplexMode: Full
Mode Status:
AutoNegComplete: False
RemoteFault: False
LinkStatus: False
JabberDetect: False
AutoNegotation Advertise:
100MegFullDplx: True
100MegHalfDplx: True
10MegFullDplx: False
10MegHalfDplx: True
Asym Pause: False
Sym Pause: False
AutoNegotiation Remote Partner's Ability:
100MegFullDplx: False
100MegHalfDplx: False
10MegFullDplx: False
10MegHalfDplx: False
Asym Pause: False
Sym Pause: False
AutoNegotiation Expansion:
ParallelDetectionFault: False
...
Table 14-8.
Lines in show interfaces gigabitethernet Command Example
Line
Mode Control
Mode Status
AutoNegotiation Advertise
Description
Indicates if auto negotiation is enabled. If so, indicates the selected speed and duplex.
Displays auto negotiation fault information. When the interface completes auto negotiation successfully, the autoNegComplete field and the linkstatus field read “True.”
Displays the control words advertised by the local interface during negotiation. Duplex is either half or full. Asym- and Sym Pause is the types of flow control supported by the local interface.
Interfaces | 481
Table 14-8.
Lines in show interfaces gigabitethernet Command Example
Line
AutoNegotiation Remote
Partner’s Ability
AutoNegotiation Expansion
1000Base-T Control
Phy Specific Control
Phy Specific Status
Description
Displays the control words advertised by the remote interface during negotiation. Duplex is either half or full. Asym- and Sym Pause is the types of flow control supported by the remote interface
ParallelDetectionFault is the handshaking scheme in which the link partner continuously transmit an “idle” data packet using the Fast Ethernet MLT-3 waveform. Equipment that does not support auto-negotiation must be configured to exactly match the mode of operation as the link partner or else no link can be established.
1000Base-T requires auto-negotiation. The IEEE Ethernet standard does not support setting a speed to 1000 Mbps with the speed command without auto-negotiation. E-Series line cards support both full-duplex and half-duplex
1000BaseT.
Values are:
0 - Manual MDI
1 - Manual MDIX
2 - N/A
3 - Auto MDI/MDIX
Displays PHY-specific status information. Cable length represents a rough estimate in meters:
0 - < 50 meters
1 - 50 - 80 meters
2 - 80 - 110 meters
3 - 110 - 140 meters
4 - 140 meters.
Link Status:
Up or Down
Speed:
Auto
1000MB
100MB
10MB
Related
Commands
Display information on a specific physical interface or virtual interface.
show interfaces stack-unit s Display information on all interfaces on a specific S-Series stack member.
Syntax
Parameters show interfaces stack-unit unit-number unit-number Enter the stack member number
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
482 | Interfaces
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
Introduced for S-Series only
Figure 14-36.
show interfaces status Command Example
FTOS#show interfaces stack-unit 0
GigabitEthernet 0/1 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:4c:f2:82
Current address is 00:01:e8:4c:f2:82
Pluggable media not present
Interface index is 34129154
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed auto, Mode auto
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 3w0d17h
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
5144 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
0 packets, 0 bytes, 0 underruns
0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts
0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pkts
0 Multicasts, 0 Broadcasts, 0 Unicasts
0 throttles, 0 discarded, 0 collisions
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Output 00.00 Mbits/sec, 0 packets/sec, 0.00% of line-rate
Time since last interface status change: 3w0d17h
GigabitEthernet 0/2 is down, line protocol is down
Hardware is Force10Eth, address is 00:01:e8:4c:f2:83
Current address is 00:01:e8:4c:f2:83
!-------------output truncated ----------------!
Related
Commands
Display data plane and management plane input/output statistics.
Display information on a specific physical interface or virtual interface.
Interfaces | 483
show interfaces status c e s Display a summary of interface information or specify a line card slot and interface to display status information on that specific interface only.
Syntax show interfaces [ interface | linecard slot-number ] status
Parameters interface linecard slot-number
(OPTIONAL) Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword linecard followed by the slot number.
C-Series Range: 0 to 7 for C300; 0–3 for C150
E-Series Range: 0 to 13 on the E1200, 0 to 6 on the E600, 0 to 5 on the E300
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 14-37.
show interfaces status Command Example
FTOS#show interfaces status
Port Description Status Speed Duplex Vlan
Gi 0/0 Up 1000 Mbit Auto --
Gi 0/1 Down Auto Auto 1
Gi 0/2 Down Auto Auto 1
Gi 0/3 Down Auto Auto --
Gi 0/4 Force10Port Up 1000 Mbit Auto 30-130
Gi 0/5 Down Auto Auto --
Gi 0/6 Down Auto Auto --
Gi 0/7 Up 1000 Mbit Auto 1502,1504,1506-1508,1602
Gi 0/8 Down Auto Auto --
Gi 0/9 Down Auto Auto --
Gi 0/10 Down Auto Auto --
Gi 0/11 Down Auto Auto --
Gi 0/12 Down Auto Auto --
Gi 0/13 Down Auto Auto --
Gi 0/14 Down Auto Auto --
Gi 0/15 Down Auto Auto --
FTOS#
Related
Commands
Display information on a specific physical interface or virtual interface.
484 | Interfaces
show interfaces switchport c e s Display only virtual and physical interfaces in Layer 2 mode. This command displays the Layer 2 mode interfaces’ IEEE 802.1Q tag status and VLAN membership.
Syntax show interfaces switchport [ interface [ linecard slot-number ] | stack-unit unit-id ]
Parameters interface linecard slot-number stack-unit unit-id
Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a port channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
• For SONET interfaces, enter the keyword sonet followed by the slot/port information. This keyword is only available on E-Series and C-Series.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• Enter the keyword backup to view the backup interface for this interface.
(OPTIONAL) Enter the keyword linecard followed by the slot number. This option is available only on E-Series and C-Series.
C-Series Range: 0-7 for C300; 0–3 for C150
E-Series Range: 0 to 13 on the E1200, 0 to 6 on the E600, 0 to 5 on the E300
(OPTIONAL) Enter the keyword stack-unit followed by the stack member number.
This option is available only on S-Series.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Introduced on the S60.
Support for 4093 VLANs on E-Series ExaScale
Introduced on E-Series ExaScale
Version 7.6.1.0
Version 7.5.1.0
Support added for hybrid port/native VLAN, introduced on S-Series
Introduced on C-Series
E-Series legacy command
Interfaces | 485
Example Figure 14-38.
show interfaces switchport Command Example
FTOS#show interfaces switchport
Name: GigabitEthernet 13/0
802.1QTagged: Hybrid
Vlan membership:
Vlan 2, Vlan 20
Native VlanId: 20
Name: GigabitEthernet 13/1
802.1QTagged: True
Vlan membership:
Vlan 2
Name: GigabitEthernet 13/2
802.1QTagged: True
Vlan membership:
Vlan 2
Name: GigabitEthernet 13/3
802.1QTagged: True
Vlan membership:
Vlan 2
--More--
Table 14-9.
Items in show interfaces switchport Command Example
Items
Name
802.1QTagged
Vlan membership
Description
Displays the interface’s type, slot and port number.
Displays whether if the VLAN tagged (“True”), untagged (“False”), or hybrid
(“Hybrid”, which supports both untagged and tagged VLANs by port 13/0.
Lists the VLANs to which the interface is a member. Starting with FTOS 7.6.1, this field can display native VLAN membership by port 13/0.
Related
Commands
Configure a physical interface on the switch.
Displays Layer 3 information about the interfaces.
Display information on a specific physical interface or virtual interface.
Display the physical status and operational status of an installed transceiver.
The output also displays the transceiver’s serial number.
show interfaces transceiver ces Display the physical status and operational status of an installed transceiver. The output also displays the transceiver’s serial number.
Syntax show interfaces [ gigabitethernet | tengigabitethernet ] slot/port transceiver
Parameters gigabitethernet tengigabitethernet
For a 10/100/1000 interface, enter the keyword gigabitethernet followed by the slot/port information.
For a 10G interface, enter the keyword tengigabitethernet followed by the slot/port information.
486 | Interfaces
Command Modes EXEC
EXEC Privilege
Command
History
Usage
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.5.4.0
Introduced on the S60.
Introduced on E-Series ExaScale
Output augmented with diagnostic data for pluggable media
Removed three fields in output: Vendor Name, Vendor OUI, Vendor PN
Introduced on C-Series and S-Series
Introduced on E-Series
See the figure below for an example screenshot, and see the following table or a description of the output fields.
For related commands, see the Related Commands section, below, and see the Debugging and
Diagnostics chapter for your platform at the end of this book.
Interfaces | 487
Example Figure 14-39.
show interfaces gigabitethernet transceiver Command Example
FTOS#show interfaces gigabitethernet 1/0 transceiver
SFP is present.
SFP 0 Serial Base ID fields
SFP 0 Id = 0x03
SFP 0 Ext Id = 0x04
SFP 0 Connector = 0x07
SFP 0 Transciever Code = 0x00 0x00 0x00 0x01 0x20 0x40 0x0c 0x05
SFP 0 Encoding = 0x01
SFP 0 BR Nominal = 0x15
SFP 0 Length(9um) Km = 0x00
SFP 0 Length(9um) 100m = 0x00
SFP 0 Length(50um) 10m = 0x1e
SFP 0 Length(62.5um) 10m = 0x0f
SFP 0 Length(Copper) 10m = 0x00
SFP 0 Vendor Rev = A
SFP 0 Laser Wavelength = 850 nm
SFP 0 CheckCodeBase = 0x66
SFP 0 Serial Extended ID fields
SFP 0 Options= 0x00 0x12
SFP 0 BR max= 0
SFP 0 BR min= 0
SFP 0 Vendor SN= P5N1ACE
SFP 0 Datecode = 040528
SFP 0 CheckCodeExt = 0x5b
SFP 1 Diagnostic Information
===================================
SFP 1 Rx Power measurement type = Average
===================================
SFP 1 Temp High Alarm threshold = 95.000C
SFP 1 Voltage High Alarm threshold = 3.900V
SFP 1 Bias High Alarm threshold = 17.000mA
SFP 1 TX Power High Alarm threshold = 0.631mW
SFP 1 RX Power High Alarm threshold = 1.259mW
SFP 1 Temp Low Alarm threshold = -25.000C
SFP 1 Voltage Low Alarm threshold = 2.700V
SFP 1 Bias Low Alarm threshold = 1.000mA
SFP 1 TX Power Low Alarm threshold = 0.067mW
SFP 1 RX Power Low Alarm threshold = 0.010mW
===================================
SFP 1 Temp High Warning threshold = 90.000C
SFP 1 Voltage High Warning threshold = 3.700V
SFP 1 Bias High Warning threshold = 14.000mA
SFP 1 TX Power High Warning threshold = 0.631mW
SFP 1 RX Power High Warning threshold = 0.794mW
SFP 1 Temp Low Warning threshold = -20.000C
SFP 1 Voltage Low Warning threshold = 2.900V
SFP 1 Bias Low Warning threshold = 2.000mA
SFP 1 TX Power Low Warning threshold = 0.079mW
SFP 1 RX Power Low Warning threshold = 0.016mW
===================================
SFP 1 Temperature = 39.930C
SFP 1 Voltage = 3.293V
SFP 1 Tx Bias Current = 6.894mA
SFP 1 Tx Power = 0.328mW
SFP 1 Rx Power = 0.000mW
===================================
SFP 1 Data Ready state Bar = False
SFP 1 Rx LOS state = True
SFP 1 Tx Fault state = False
SFP 1 Rate Select state = False
SFP 1 RS state = False
SFP 1 Tx Disable state = False
===================================
SFP 1 Temperature High Alarm Flag = False
SFP 1 Voltage High Alarm Flag = False
SFP 1 Tx Bias High Alarm Flag = False
SFP 1 Tx Power High Alarm Flag = False
SFP 1 Rx Power High Alarm Flag = False
SFP 1 Temperature Low Alarm Flag = False
SFP 1 Voltage Low Alarm Flag = False
SFP 1 Tx Bias Low Alarm Flag = False
SFP 1 Tx Power Low Alarm Flag = False
SFP 1 Rx Power Low Alarm Flag = True
===================================
!-------output truncated -------------------------!
488 | Interfaces
Table 14-10.
Diagnostic Data in show interfaces transceiver
Line Description
Rx Power measurement type
Temp High Alarm threshold
Output depends on the vendor, typically either “Average” or “OMA”
(Receiver optical modulation amplitude).
Factory-defined setting, typically in Centigrade. Value differs between SFPs and SFP+.
Voltage High Alarm threshold Displays the interface index number used by SNMP to identify the interface.
Bias High Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
Factory-defined setting. Value can differ between SFP and SFP+.
TX Power High Alarm threshold
RX Power High Alarm threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Temp Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
Voltage Low Alarm threshold Factory-defined setting. Value can differ between SFP and SFP+.
Bias Low Alarm threshold
TX Power Low Alarm threshold
RX Power Low Alarm threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Factory-defined setting. Value can differ between SFP and SFP+.
Factory-defined setting. Value can differ between SFP and SFP+.
Temp High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Voltage High Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Bias High Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
TX Power High Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
RX Power High Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Temp Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Voltage Low Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Bias Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
TX Power Low Warning threshold
Factory-defined setting. Value can differ between SFP and SFP+.
Power Low Warning threshold Factory-defined setting. Value can differ between SFP and SFP+.
Temperature Current temperature of the sfps.If this temperature crosses Temp High alarm/ warning thresholds, then the temperature high alarm/warning flag is set to true.
Voltage
Tx Bias Current
Current voltage of the sfps.If this voltage crosses voltage high alarm/warning thresholds, then the voltage high alarm/warning flag is set to true.
Present Tx bias current of the SFP. If this crosses bias high alarm/warning thresholds, then the tx bias high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, then the tx bias low alarm/warning flag is set to true.
Interfaces | 489
490 | Interfaces
Table 14-10.
Diagnostic Data in show interfaces transceiver (continued)
Line Description
Tx Power
Rx Power
Data Ready state Bar
Rx LOS state
Present Tx power of the SFP. If this crosses Tx power alarm/warning thresholds, then the Tx power high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, then the Tx power low alarm/ warning flag is set to true.
Present Rx power of the SFP.
This value is either average Rx power or
OMA.This depends upon on the Rx Power measurement type displayed above. If this crosses Rx power alarm/warning thresholds, then the Rx power high alarm/warning flag is set to true. If it falls below the low alarm/warning thresholds, then the Rx power low alarm/warning flag is set to true.
This field indicates that the transceiver has achieved power up and data is ready. This is set to true if data is ready to be sent, false if data is being transmitted.
This is the digital state of the Rx_LOS output pin.This is set to true if the operating status is down.
Tx Fault state
Rate Select state
RS state This is the reserved digital state of the pin AS(1) per SFF-8079 and RS(1) per
SFF-8431.
If the admin status of the port is down then this flag will be set to true.
Tx Disable state
Temperature High Alarm Flag This can be either true/False and it depends on the Current Temperature value displayed above.
Voltage High Alarm Flag This can be either true or false, depending on the Current voltage value displayed above.
Tx Bias High Alarm Flag
This is the digital state of the Tx Fault output pin.
This is the digital state of the SFP rate_select input pin.
Tx Power High Alarm Flag
This can be either true or false, depending on the present Tx bias current value displayed above.
This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power High Alarm Flag
Temperature Low Alarm Flag This can be either true or false, depending on the Current Temperature value displayed above.
Voltage Low Alarm Flag This can be either true or false, depending on the Current voltage value displayed above.
Tx Bias Low Alarm Flag
This can be either true or false, depending on the Current Rx power value displayed above.
Tx Power Low Alarm Flag
Rx Power Low Alarm Flag
This can be either true or false, depending on the Tx bias current value displayed above.
This can be either true or false, depending on the Current Tx power value displayed above.
This can be either true or false, depending on the Current Rx power value displayed above.
Temperature High Warning
Flag
Voltage High Warning Flag
Tx Bias High Warning Flag
This can be either true or false, depending on the Current Temperature value displayed above.
This can be either true or false, depending on the Current voltage value displayed above.
This can be either true or false, depending on the Tx bias current value displayed above.
Table 14-10.
Diagnostic Data in show interfaces transceiver (continued)
Line Description
Tx Power High Warning Flag This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power High Warning Flag This can be either true or false, depending on the Current Tx power value displayed above.
Temperature Low Warning
Flag
Voltage Low Warning Flag
This can be either true or false, depending on the Current Temperature value displayed above.
This can be either true or false, depending on the Current voltage value displayed above.
Tx Bias Low Warning Flag This can be either true or false, depending on the present Tx bias current value displayed above.
Tx Power Low Warning Flag This can be either true or false, depending on the Current Tx power value displayed above.
Rx Power Low Warning Flag This can be either true or false, depending on the Current Rx power value displayed above.
Related
Commands
show inventory (C-Series and E-Series)
Configure a physical interface on the switch.
Displays Layer 3 information about the interfaces.
Display information on a specific physical interface or virtual interface.
Display the chassis type, components (including media), FTOS version including hardware identification numbers and configured protocols.
Display the S-Series switch type, components (including media), FTOS version including hardware identification numbers and configured protocols.
show range c e s Display all interfaces configured using the
command.
Syntax show range
Command Mode INTERFACE RANGE (config-if-range)
Command
History
Example
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on the S60.
Support for 4093 VLANs on E-Series ExaScale
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced
Figure 14-40.
show range Command Example
FTOS(conf-if-range-so-2/0-1,fa-0/0)#show range interface sonet 2/0 - 1 interface fastethernet 0/0
FTOS(conf-if-range-so-2/0-1,fa-0/0)#
Interfaces | 491
Related
Commands
Configure a physical interface on the switch.
Displays Layer 3 information about the interfaces.
Display information on a specific physical interface or virtual interface.
shutdown c e s Disable an interface.
Syntax shutdown
To activate an interface, enter no shutdown .
Defaults
Command Modes
The interface is disabled.
INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
E-Series legacy command
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Usage
Information
The shutdown command marks a physical interface as unavailable for traffic. To discover if an
interface is disabled, use the
brief command. Disabled interfaces are listed as down.
Disabling a VLAN or a port channel causes different behavior. When a VLAN is disabled, the Layer 3
functions within that VLAN are disabled. Layer 2 traffic continues to flow. Entering the shutdown
command on a port channel disables all traffic on the port channel and the individual interfaces within the port channel. To enable a port channel, you must enter no
on the port channel interface and at least one interface within that port channel.
description commands are the only commands that you can configure on an
interface that is a member of a port channel.
Related
Commands
Create a port channel interface.
Create a VLAN.
Displays the interface routing status. Add the keyword brief to display a table of interfaces and their status.
492 | Interfaces
speed (for 10/100/1000 interfaces) c e s Set the speed for 10/100/1000 Base-T Ethernet interfaces. Both sides of a link must be set to the same speed (10/100/1000) or to auto or the link may not come upSyntax speed { 10 | 100 | 1000 | auto }
To return to the default setting, use the no speed { 10 | 100 | 1000 } command.
Parameters
10
100
1000 auto
Enter the keyword 10 to set the interface’s speed to 10 Mb/s.
Note: This speed is not supported on the LC-EH-GE-50P or the LC-EJ-GE-50P card. If the command is entered for these interfaces, an error message appears.
Enter the keyword 100 to set the interface’s speed to 10/100 Mb/s.
Note: When this setting is enabled, only 100Base-FX optics are supported on the
LC-EH-GE-50P or the LC-EJ-GE-50P card.
Enter the keyword 1000 to set the interface’s speed to 1000 Mb/s.
(Auto-negotiation is enabled. See
negotiation auto for more information)
Note: When this setting is enabled, only 100oBase-FX optics are supported on the LC-EH-GE-50P or the LC-EJ-GE-50P card.
Enter the keyword auto to set the interface to auto-negotiate its speed.
(Auto-negotiation is enabled. See
negotiation auto for more information)
Defaults
Command Modes
Command
History auto
INTERFACE
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
E-Series legacy command
Introduced on the S60.
Supported on LC-EH-GE-50P or the LC-EJ-GE-50P cards
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
This command is found on the 10/100/1000 Base-T Ethernet interfaces.
With speed 1000 configured on a copper interface, the speed is not auto-negotiated. The interface will operate only at 1000 Mbps.
With speed 100 configured on a copper interface, the speed is auto-negotiated. The interface will operate at 10 Mbps or at 100 Mbps.
When auto is enabled, the system performs and automatic discovery to determine the optics installed and configure the appropriate speed.
Interfaces | 493
When you configure a speed for the 10/100/1000 interface, you should confirm
command setting. Both sides of the link should have auto-negotiation either enabled or disabled. For speed settings of 1000 or auto, the software sets the link to auto-negotiation, and you cannot change that setting.
Note: Starting with FTOS 7.8.1.0, when a copper SFP2 module with catalog number
GP-SFP2-1T is used in the S25P model of the S-Series, its speed can be manually set with the speed command. When the speed is set to 10 or 100 Mbps, the duplex command can also be executed.
Related
Commands
Configure duplex mode on physical interfaces with the speed set to 10/100.
Enable or disable auto-negotiation on an interface.
speed (Management interface) c e Set the speed for the Management interface.
Syntax speed { 10 | 100 | auto }
To return to the default setting, use the no speed { 10 | 100 } command.
Parameters
10
100 auto
Enter the keyword 10 to set the interface’s speed to 10 Mb/s.
Enter the keyword 100 to set the interface’s speed to 100 Mb/s.
Enter the keyword auto to set the interface to auto-negotiate its speed.
Defaults
Command Modes
Command
History auto
INTERFACE
Version 8.1.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced for E-Series
This command is found on the Management interface only.
Usage
Information
Related
Commands
Configure the Management port on the system (either the Primary or
Standby RPM).
Set the mode of the Management interface.
Configure a static route that points to the Management interface or a forwarding router.
494 | Interfaces
stack-unit module s Pre-configure ports on 10G optical modules in optional slots to preserve configuration.
Syntax stack-unit { stack-unit id } module { module id }
Parameters stack-unit id module id
Enter the unit number of the stacked unit.
Range: 0 - 11
Enter the module id number of the optional slot.
Range: 0 - 1
Defaults
Command Modes
Command
History
Usage
Information
None
Configuration
Version 8.3.3.7
Introduced on S-Series S60
Pre-configuring the interfaces for the optical module preserves the configuration if/when an optical module is removed. The optional 10G optical module is automatically recognized and the interfaces are created when the module is inserted into the slot. However, if the system is not already configured for the interfaces, when the module is removed the interfaces and their configurations are removed as well. switchport c e s Place the interface in Layer 2 mode.
Syntax switchport [ backup interface { gigabit | tengigabit } slot / port ]
To remove the interface from Layer 2 mode and place it in Layer 3 mode, enter no switchport . If a switchport backup relationship exists, remove that relationship first.
To remove a switchport backup relationship created on this port, enter no switchport backup interface { gigabit | tengigabit } slot / port ].
Parameters backup interface gigabit tengigabit slot / port
Use this option to configure a redundant Layer 2 link without using Spanning Tree. This keyword configures a backup port so that if the primary port fails the backup port changes to the up state. If the primary later comes up, it becomes the backup.
Enter this keyword if the backup port is a 1G port.
Enter this keyword if the backup port is a 10G port.
Specify the line card and port number of the backup port.
Defaults
Command Modes
Disabled (The interface is in Layer 3 mode.)
INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.7.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Added backup interface option.
Interfaces | 495
Usage
Information
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
If an IP address or VRRP group is assigned to the interface, you cannot use the switchport command for that interface. To use the switchport command on an interface, only the no ip address and no shutdown statements must be listed in the show config for that command.
When you enable the switchport command, the interface is automatically added to the Default
VLAN.
To use the switchport backup interface command on a port, first execute the switchport command on the port. For details, see the section Configuring Redundant Links in the Layer 2 chapter of the FTOS Configuration Guide .
Related
Commands
Create a port channel interface.
Display information about switchport interfaces.
wanport e Enable the WAN mode on a TenGigabitEthernet interface.
Syntax wanport
To disable the WAN Port, enter no wanport .
Defaults Not configured.
Command Modes CONFIGURATION
Command
History
Version 8.1.1.2
pre-Version 6.2.1.0
Introduced on E-Series ExaScale
Introduced for E-Series
Usage
Information
Example
The port must be in a shutdown state to change from LAN mode to WAN mode and vice-versa as shown in the figure below.
For E-Series ExaScale systems, you must configure all the ports in a port-pipe to either WANPHY or non-WANPHY. They cannot be mixed on the same port-pipe.
Figure 14-41.
wanport Command with shutdown Command Example interface TenGigabitEthernet 13/0
no ip address
no shutdown
FTOS(conf-if-te-13/0)#
FTOS(conf-if-te-13/0)#wanport
% Error: Port should be in shutdown mode, config ignored Te 13/0.
FTOS(conf-if-te-13/0)#
FTOS(conf-if-te-13/0)#shutdown
FTOS(conf-if-te-13/0)#
FTOS(conf-if-te-13/0)#wanport
FTOS(conf-if-te-13/0)#
496 | Interfaces
Related
Commands
The following related commands are valid for E-Series only.
ais-shut alarm-report clock source down-when-looped flag framing keepalive loopback
Send LAIS on shutdown
Enable reporting of a selected alarm
Configure a clock source
Send a message when a loopback condition is detected
Set flags to ensure interoperability
Set framing type
Enable keepalive
Troubleshoot a SONET loopback
Port Channel Commands
A Link Aggregation Group (LAG) is a group of links that appear to a MAC client as if they were a single link according to IEEE 802.3ad. In FTOS, a LAG is referred to as a Port Channel.
Table 14-11.
Port Channel Limits
Platform
Maximum Port Channel
IDs
E-Series ExaScale
E-Series TeraScale
C-Series
S-Series
255
255
128
128
Maximum Members per Port
Channel
64
16
8
8
Because each port can be assigned to only one Port Channel, and each Port Channel must have at least one port, some of those nominally available Port Channels might have no function because they could have no members if there are not enough ports installed. In the S-Series, those ports could be provided by stack members.
The commands in this section are specific to Port Channel interfaces:
•
•
•
•
•
•
•
•
Note: The FTOS implementation of LAG or Port Channel requires that you configure a LAG on both switches manually. For information on FTOS Link Aggregation Control Protocol
(LACP) for dynamic LAGs, refer to Chapter 19, Link Aggregation Control Protocol (LACP) .
For more information on configuring and using Port Channels, refer to the FTOS
Configuration Guide .
Interfaces | 497
channel-member c e s Add an interface to the Port Channel, while in the INTERFACE PORTCHANNEL mode.
Syntax channel-member interface
To delete an interface from a Port Channel, use the no channel-member interface command.
Parameters interface Enter the following keywords and slot/port or number information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Not configured.
INTERFACE PORTCHANNEL
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Usage
Information
Use the
command to access this command.
You cannot add an interface to a Port Channel if the interface contains an IP address in its
configuration. Only the shutdown ,
commands can be configured on an interface if it is to be added to a Port Channel. The
mtu and ip mtu commands are only available when
the chassis is in Jumbo mode.
Link MTU and IP MTU considerations for Port Channels are:
• All members must have the same link MTU value and the same IP MTU value.
• The Port Channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members.
Example: If the members have a link MTU of 2100 and an IP MTU 2000, the Port Channel’s MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.
When an interface is removed from a Port Channel with the no
channel-member command syntax, the
interface reverts to its configuration prior to joining the Port Channel.
An interface can belong to only one Port Channel.
On the E-Series TeraScale, you can add up to 16 interfaces to a Port Channel; E-Series ExaScale can have up to 64. You can have eight interfaces per Port Channel on the C-Series and S-Series. The interfaces can be located on different line cards but must be the same physical type and speed (for example, all 1-Gigabit Ethernet interfaces). However, you can combine 100/1000 interfaces and GE interfaces in the same Port Channel.
498 | Interfaces
Related
Commands
If the Port Channel contains a mix of interfaces with 100 Mb/s speed and 1000 Mb/s speed, the software disables those interfaces whose speed does not match the speed of the first interface configured and enabled in the Port Channel. If that first interface goes down, the Port Channel does not change its designated speed; you must disable and re-enable the Port Channel or change the order of the channel members configuration to change the designated speed. Refer to the FTOS Configuration
Guide for more information on Port Channels.
Assign a descriptive text string to the interface.
Create a Port Channel interface.
Disable/Enable the port channel.
group c e s Group two LAGs in a supergroup (“fate-sharing group” or “failover group”).
Syntax group group_number port-channel number port-channel number
To remove an existing LAG supergroup, use the no group group_number command.
Parameters group_number port-channel number
Enter an integer from 1 to 32 that will uniquely identify this LAG fate-sharing group.
Enter the keyword port-channel followed by an existing LAG number .
Enter this keyword/variable combination twice, identifying the two LAGs to be paired.
Defaults No default values or behavior
PORT-CHANNEL FAILOVER-GROUP (conf-po-failover-grp) Command Modes
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced for C-Series, E-Series, and S-Series
Example
FTOS(conf)#port-channel failover-group
FTOS(conf-po-failover-grp)#group 1 port-channel 1 port-channel 2
FTOS(conf-po-failover-grp)#
Related
Commands
Access the PORT-CHANNEL FAILOVER-GROUP mode to configure a
LAG failover group.
Display information on configured Port Channel groups.
Interfaces | 499
interface port-channel c e s Create a Port Channel interface, which is a link aggregation group containing up to 16 physical interfaces on E-Series, eight physical interfaces on C-Series and S-Series.
Syntax interface port-channel channel-number
To delete a Port Channel, use the no interface port-channel channel-number command.
Parameters channel-number Enter a number as the interface number.
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Figure 14-42.
interface port-channel Command Example
FTOS(conf)#int port-channel 2
FTOS(conf-if-po-2)#
Usage
Information
Port Channel interfaces are logical interfaces and can be either in Layer 2 mode (by using the
switchport command) or Layer 3 mode (by configuring an IP address). You can add a Port Channel in
Layer 2 mode to a VLAN.
commands are the only commands that you can configure on an interface while it is a member of a Port Channel. To add a physical interface to a Port Channel, the interface can only have the
commands configured. The Port
Channel’s configuration is applied to the interfaces within the Port Channel.
A Port Channel can contain both 100/1000 interfaces and GE interfaces. Based on the first interface configured in the Port Channel and enabled, FTOS determines if the Port Channel uses 100 Mb/s or
1000 Mb/s as the common speed. Refer to channel-member
for more information.
The Link MTU and IP MTU values configured on the channel members must be greater than the Link
MTU and IP MTU values configured on the Port Channel interface.
Note: In a Jumbo-enabled system, all members of a Port Channel must be configured with the same link MTU values and the same IP MTU values.
Related
Commands
Add a physical interface to the LAG.
Configure a physical interface.
Configure a Loopback interface.
Configure a null interface.
500 | Interfaces
Configure a VLAN.
Disable/Enable the port channel.
minimum-links c e s Configure the minimum number of links in a LAG (Port Channel) that must be in “oper up” status for the LAG to be also in “oper up” status.
Syntax minimum-links number
Parameters number Enter the number of links in a LAG that must be in “oper up” status.
Range: 1 to 16
Default: 1
Defaults
Command Modes
Command
History
1
INTERFACE
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
If you use this command to configure the minimum number of links in a LAG that must be in “oper up” status, then the LAG must have at least that number of “oper up” links before it can be declared as up.
For example, if the required minimum is four, and only three are up, then the LAG will be considered down.
port-channel failover-group c e s Access the PORT-CHANNEL FAILOVER-GROUP mode to configure a LAG failover group.
Syntax port-channel failover-group
To remove all LAG failover groups, use the no port-channel failover-group command.
Defaults
Command Modes
No default values or behavior
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced for C-Series, E-Series, and S-Series
Interfaces | 501
Usage
Information
Related
Commands
This feature groups two LAGs to work in tandem as a supergroup, so that, for example, if one LAG goes down, the other LAG is taken down automatically, providing an alternate path to reroute traffic, avoiding oversubscription on the other LAG. You can use both static and dynamic (LACP) LAGs to configure failover groups. For details, see the Port Channel chapter in the FTOS Configuration Guide .
Group two LAGs in a supergroup (“fate-sharing group”).
Display information on configured Port Channel groups.
show config c e s Display the current configuration of the selected LAG.
Syntax show config
Command Modes
Example
INTERFACE PORTCHANNEL
Figure 14-43.
show config Command Sample Output for a Selected LAG
FTOS(conf-if-po-1)#show config
!
interface Port-channel 1
no ip address
shutdown
FTOS(conf-if-po-1)#
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series show interfaces port-channel c e s Display information on configured Port Channel groups.
Syntax show interfaces port-channel [ channel-number ] [ brief ]
Parameters channel-number brief
(OPTIONAL) Enter the number of the port channel to display information on that port channel:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale
(OPTIONAL) Enter the keyword brief to display only the port channel number, the state of the port channel, and the number of interfaces in the port channel.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
502 | Interfaces
Example
Version 7.6.1.0
Version 7.5.1.0
Introduced for S-Series; Modified to display LAG failover group status
Introduced for C-Series
E-Series legacy command
Figure 14-44.
show interfaces port-channel Command Example
FTOS#show interfaces port-channel 20
Port-channel 20 is up, line protocol is up (Failover-group 1 is down)
Hardware address is 00:01:e8:01:46:fa
Port-channel is part of failover-group 1
Internet address is 1.1.120.1/24
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 2000 Mbit
Members in this channel: Gi 0/5 Gi 0/18
ARP type: ARPA, ARP timeout 04:00:00
Last clearing of "show interfaces" counters 00:00:00
Queueing strategy: fifo
44507301 packets input, 3563070343 bytes
Input 44506754 IP Packets, 0 Vlans 0 MPLS
41 64-byte pkts, 44502871 over 64-byte pkts, 249 over 127-byte pkts
407 over 255-byte pkts, 3127 over 511-byte pkts, 606 over 1023-byte pkts
Received 0 input symbol errors, 0 runts, 0 giants, 0 throttles
0 CRC, 0 IP Checksum, 0 overrun, 0 discarded
1218120 packets output, 100745130 bytes, 0 underruns
Output 5428 Multicasts, 4 Broadcasts, 1212688 Unicasts
1216142 IP Packets, 0 Vlans, 0 MPLS
0 throttles, 0 discarded
Rate info (interval 299 sec):
Input 01.50Mbits/sec, 2433 packets/sec
Output 00.02Mbits/sec, 4 packets/sec
Time since last interface status change: 00:22:34
FTOS#
Table 14-12.
show interfaces port-channel Command Example Fields
Field
Port-Channel 1...
Hardware is...
Port-channel is part...
Internet address...
MTU 1554...
LineSpeed
Members in this...
ARP type:...
Last clearing...
Queueing strategy.
packets input...
Input 0 IP packets...
Description
Displays the LAG’s status. In the example, the status of the LAG’s LAG fate-sharing group (“Failover-group”) is listed.
Displays the interface’s hardware information and its assigned MAC address.
Indicates whether the LAG is part of a LAG fate-sharing group
(“Failover-group”).
States whether an IP address is assigned to the interface. If one is, that address is displayed.
Displays link and IP MTU.
Displays the interface’s line speed. For a port channel interface, it is the line speed of the interfaces in the port channel.
Displays the interfaces belonging to this port channel.
Displays the ARP type and the ARP timeout value for the interface.
Displays the time when the show interfaces counters were cleared.
States the packet queuing strategy. FIFO means first in first out.
Displays the number of packets and bytes into the interface.
Displays the number of packets with IP headers, VLAN tagged headers and MPLS headers.
The number of packets may not add correctly because a VLAN tagged IP packet counts as both a VLAN packet and an IP packet.
Interfaces | 503
Table 14-12.
show interfaces port-channel Command Example Fields (continued)
Field
0 64-byte...
Received 0...
Output 0...
Rate information...
Time since...
Description
Displays the size of packets and the number of those packets entering that interface. This information is displayed over two lines.
Displays the type and number of errors or other specific packets received.
This information is displayed over three lines.
Displays the type and number of packets sent out the interface. This information is displayed over three lines.
Displays the traffic rate information into and out of the interface. Traffic rate is displayed in bits and packets per second.
Displays the time since the last change in the configuration of this interface.
Figure 14-45.
show interfaces port-channel brief Command Example
FTOS#sh int por 1 br
LAG Mode Status Uptime Ports
1 L2 up 00:00:08 Gi 3/0 (Up) *
Gi 3/1 (Down)
Gi 3/2 (Up)
FTOS#
Table 14-13.
show interfaces port-channel brief Command Example Fields
Field
LAG
Mode
Status
Uptime
Ports
(untitled)
Description
Lists the port channel number.
Lists the mode:
• L3 - for Layer 3
• L2 - for Layer 2
Displays the status of the port channel.
• down - if the port channel is disabled (shutdown)
• up - if the port channel is enabled (no shutdown)
Displays the age of the port channel in hours:minutes:seconds.
Lists the interfaces assigned to this port channel.
Displays the status of the physical interfaces ( up or down ).
In Layer 2 port channels, an * (asterisk) indicates which interface is the primary port of the port channel. The primary port sends out interface
PDU.
In Layer 3 port channels, the primary port is not indicated.
Related
Commands
Display the LACP matrix.
504 | Interfaces
show port-channel-flow c e s Display an egress port in a given port-channel flow.
Syntax show port-channel-flow outgoing-port-channel number incoming-interface interface
{ source-ip address destination-ip address } | { protocol number | icmp | tcp | udp } |
{ source-port number destination-port number } | { source-mac address destination-mac address }
Parameters outgoing-port-channel number incoming-interface interface Enter the keyword incoming-interface followed by the interface type and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information. source-ip address
Enter the keyword outgoing-port-channel followed by the number of the port channel to display flow information.
• For a port channel interface, enter the keyword port-channel followed by a number:
C-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale and ExaScale destination-ip address
Enter the keyword source-ip followed by the IP source address in IP address format.
Enter the keyword destination-ip followed by the IP destination address in IP address format.
protocol
| udp number | icmp | tcp On the E-Series only, enter the keyword protocol followed by one of the protocol type keywords: tcp , udp , icmp or protocol number
Note: The protocol number keyword applies to E-Series only.
source-port number destination-port number source-mac address destination-mac address
Enter the keyword source-port followed by the source port number.
Range: 1-65536
Default: None
Enter the keyword destination-port followed by the destination port number.
Range: 1-65536
Default: None
Enter the keyword source-mac followed by the MAC source address in the nn:nn:nn:nn:nn:nn format.
Enter the keyword destination-mac followed by the MAC destination address in the nn:nn:nn:nn:nn:nn format.
Command Modes
Usage
Information
EXEC
Since this command calculates based on a Layer 2 hash algorithm, use this command to display flows for switched Layer 2 packets, not for routed packets (use the show ip flow command to display routed packets).
Interfaces | 505
Example
The show port-channel-flow command returns the egress port identification in a given port-channel, if a valid flow is entered. A mismatched flow error occurs if MAC-based hashing is configured for a Layer 2 interface and the user is trying to display a Layer 3 flow.
The output will display three entries:
• Egress port for unfragmented packets.
• In the event of fragmented packets, egress port of the first fragment.
• In the event of fragmented packets, egress port of the subsequent fragments.
show port-channel-flow outgoing-port-channel number incoming-interface interface source-mac address destination-mac address
• Load-balance is configured for MAC
• Load balance is configured for IP 4-tuple/2-tuple for the C-Series and S-Series
• A non-IP payload is going out of Layer 2 LAG interface that is a member of VLAN with an IP address.
Figure 14-46.
show port-channel-flow Command for MAC Addresses
FTOS#show port-channel-flow outgoing-port-channel 1 incoming-interface gi 3/0 source-mac 00:00:50:00:00:00 destination-mac 00:00:a0:00:00:00
Egress Port for port-channel 1, for the given flow, is Te 13/0 1
Example
Related
Commands
On the E-Series only: show port-channel-flow outgoing-port-channel number incoming-interface interface source-ip address destination-ip address { protocol number [ icmp / tcp / udp ]} { source-port number destination-port number }
• Load balance is configured for IP 5-tuple/3-tuple.
• An IP payload is going out of a Layer 2 LAG interface that is a member of a VLAN with an IP address.
FTOS#show port-channel-flow outgoing-port-channel 2 incoming-interface gi 3/0 source-ip 2.2.2.0 destination-ip 3.2.3.1 protocol tcp source-port 5 destination-port 6
Egress Port for port-channel 2, for the given flow:
Unfragmented packet: Gi 1/6
Fragmented packets (first fragment): Gi 1/12
Fragmented packets (remaining fragments): Gi 1/12
Balance traffic over E-Series port channel members.
506 | Interfaces
UDP Broadcast
The User Datagram Protocol (UDP) broadcast feature is a software-based method to forward low throughput (not to exceed 200 pps) IP/UDP broadcast traffic arriving on a physical or
VLAN interface.
Important Points to Remember
• This feature is available only on the E-Series platform, as noted by this symbol under each command heading: e
• This feature applies only to E-Series Layer 3 physical or VLAN interfaces.
• Routing Information Protocol (RIP) is not supported with the UDP Broadcast feature.
• If this feature is configured on an interface using
, then the command ip directed-broadcast becomes ineffective on that interface.
• The existing command show interface has been modified to display the configured broadcast address.
The commands for UDP Broadcast are:
•
•
•
debug ip udp-helper
Enable UDP debug and display the debug information on a console.
e
Syntax
Defaults
Command Modes
Example debug ip udp-helper
To disable debug information, use the no debug ip udp-helper command.
Debug disabled
EXEC
EXEC Privilege
FTOS#debug ip udp-helper
UDP helper debugging is on
01:20:22: Pkt rcvd on Gi 5/0 with IP DA (0xffffffff) will be sent on Gi 5/1 Gi 5/2 Vlan 3
01:44:54: Pkt rcvd on Gi 7/0 is handed over for DHCP processing.
Interfaces | 507
Related
Commands
Command
History
Version 8.3.3.9
Version 8.3.7.0
Pre-version 8.3.7.0
Enable the UDP broadcast feature on an interface.
Display the configured UDP helper(s) on all interfaces.
Introduced on S60
Introduced on S4810
Introduced on E-Series ExaScale ip udp-helper udp-port
Enable the UDP broadcast feature on an interface either for all UDP ports or a specified list of e
UDP ports.
Syntax
Parameters
Defaults
Command Modes
Usage
Information ip udp-helper udp-port [ udp-port-list ]
To disable the UDP broadcast on a port, use the no ip udp-helper udp-port [ udp-port-list ] command.
udp-port-list (OPTIONAL) Enter up to 16 comma separated UDP port numbers.
Note: If this option is not used, all UDP Ports are considered by default.
No default behavior or values
INTERFACE (config-if)
If the ip helper-address command and ip udp-helper udp-port command are configured, the behavior is that the UDP broadcast traffic with port numbers 67/68 will be unicast relayed to the DHCP server per the ip helper-address configuration. This will occur regardless if the ip udp-helper udp-port command contains port numbers 67/68 or not.
If only the ip udp-helper udp-port command is configured, all the UDP broadcast traffic is flooded, including ports 67/68 traffic if those ports are part of the udp-port-list.
Command
History
Related
Commands
Version 8.3.3.9
Version 8.3.7.0
Pre-version 8.3.7.0
Introduced on S60
Introduced on S4810
Introduced on E-Series ExaScale
Configure the destination broadcast or host address for DHCP server.
Enable debug and display the debug information on a console.
Display the configured UDP helper(s) on all interfaces.
508 | Interfaces
show ip udp-helper
Display the configured UDP helper(s) on all interfaces.
e
Syntax
Defaults
Command Modes
Example show ip udp-helper
No default configuration or values
EXEC
FTOS#show ip udp-helper
--------------------------------------------------
Port UDP port list
--------------------------------------------------
Gi 10/0 656, 658
Gi 10/1 All
Command
History
Related
Commands
Version 8.3.3.9
Version 8.3.7.0
Pre-version 8.3.7.0
Introduced on S60
Introduced on S4810
Introduced on E-Series ExaScale
Enable debug and display the debug information on a console.
Enable the UDP broadcast feature on an interface either for all UDP ports or a specified list of UDP ports.
Interfaces | 509
15
IPv4 Routing
Overview
The characters that appear below command headings indicate support for the associated Dell
Networking platform, as follows:
• C-Series: c
• E-Series: e
• S-Series: s
Commands
IPv4-related commands are described in this chapter. They are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
ip helper-address hop-count disable
•
•
•
IPv4 Routing | 511
•
•
•
•
•
•
•
•
load-balance (C-Series and S-Series)
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
show protocol-termination-table
•
arp ces Use Address Resolution Protocol (ARP) to associate an IP address with a MAC address in the switch.
Syntax arp vrf {vrf name} ip-address mac-address interface
To remove an ARP address, use the no arp ip-address command.
Parameters vrf name ip-address
E-Series Only : Enter the VRF process identifier to tie the static route to the VRF process.
Enter an IP address in dotted decimal format.
512 | IPv4 Routing
mac-address interface
Enter a MAC address in nnnn.nnnn.nnnn format.
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For the Management interface, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
You cannot use Class D or Class E IP addresses or zero IP address (0.0.0.0) when creating a static ARP.
Zero MAC addresses (00:00:00:00:00:00) are also invalid.
Clear dynamic ARP entries from the ARP table.
Display ARP table.
arp learn-enable c e s Enable ARP learning via Gratuitous ARP.
Syntax
Defaults
Command Modes arp learn-enable
Disabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced
Usage
Information
In FTOS versions prior to 8.3.1.0, if a gratuitous ARP is received some time after an ARP request is sent, only RP2 installs the ARP information. For example:
1 At time t=0 FTOS sends an ARP request for IP A.B.C.D
2 At time t=1 FTOS receives an ARP request for IP A.B.C.D
IPv4 Routing | 513
3 At time t=2 FTOS installs an ARP entry for A.B.C.D
only on RP2.
Beginning with version 8.3.1.0, when a Gratuitous ARP is received, FTOS installs an ARP entry on all
3 CPUs.
arp retries c e s Set the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request.
Syntax arp retries number
Parameters number Enter the number of retries.
Range: 5 to 20.
Default: 5
Defaults
Command Modes
5
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced
Usage
Information
Related
Commands
Retries are 20 seconds apart.
Display the configured number of ARP retries.
arp timeout ces Set the time interval for an ARP entry to remain in the ARP cache.
Syntax arp timeout minutes
To return to the default value, enter no arp timeout .
Parameters seconds Enter the number of minutes.
Range: 0 to 35790.
Default: 240 minutes.
Defaults
Command Modes
240 minutes (4 hours)
INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
514 | IPv4 Routing
Related
Commands
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on C-Series
Introduced on E-Series
Displays the ARP timeout value for all available interfaces.
clear arp-cache c e s Clear the dynamic ARP entries from a specific interface or optionally delete ( no-refresh ) ARP entries from CAM.
Syntax clear arp-cache [ vrf name | interface | ip ip-address ] [ no-refresh ]
Parameters vrf name interface ip ip-address no-refresh
E-Series Only : Clear only the ARP cache entries tied to the VRF process.
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For the Management interface, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0-1 and the port range is
0.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword ip followed by the IP address of the ARP entry you wish to clear.
(OPTIONAL) Enter the keyword no-refresh to delete the ARP entry from CAM.
Or use this option with interface or ip ip-address to specify which dynamic
ARP entries you want to delete.
Note: Transit traffic may not be forwarded during the period when deleted
ARP entries are resolved again and re-installed in CAM. Use this option with extreme caution.
Command Modes
Command
History
EXEC Privilege
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
IPv4 Routing | 515
clear host c e s Remove one or all dynamically learnt host table entries.
Syntax clear host name
Parameters name Enter the name of the host to delete.
Enter * to delete all host table entries.
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series clear ip fib linecard c e s Clear all Forwarding Information Base (fib) entries in the specified line card (use this command with caution, see
Syntax clear ip fib linecard slot-number | vrf vrf instance
Parameters slot-number vrf instance
Enter the number of the line card slot.
C-Series and S-Series Range: 0-7
E-Series Range: 0 to 13 on E12001200i, 0 to 6 on E600/E600i; 0 to 5 on E300
(Optional) E-Series Only : Clear only the FIB entries on the specified card associated with the VRF instance.
Command Mode EXEC
EXEC Privilege
Command
History
Usage
Information
Version 8.3.3.1
Version 8.1.1.2
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced support on E-Series ExaScale E600i
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Use this command to clear Layer 3 CAM inconsistencies.
Caution: Executing this command will cause traffic disruption.
Related
Commands
Show FIB entries.
516 | IPv4 Routing
clear ip route c e s Clear one or all routes in the routing table.
Syntax clear ip route {* | ip-address mask | vrf vrf instance }
Parameters
* ip-address mask vrf instance
Enter an asterisk ( * ) to clear all learned IP routes.
Enter a specific IP address and mask in dotted decimal format to clear that IP address from the routing table.
(Optional) E-Series Only : Clear only the routes tied to the VRF instance.
EXEC Privilege Command Modes
Command
History
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced VRF
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Assign an IP route to the switch.
View the routing table.
View a summary of the routing table.
clear tcp statistics c e s Clear TCP counters.
Syntax clear tcp statistics [ all | cp | rp1 | rp2 ]
Note: These options are supported only on the E-Series.
Parameters all cp rp1 rp2
Enter the keyword all to clear all TCP statistics maintained on all switch processors.
(OPTIONAL) Enter the cp to clear only statistics from the Control Processor.
(OPTIONAL) Enter the keyword rp1 to clear only the statistics from Route Processor 1.
(OPTIONAL) Enter the keyword rp2 to clear only the statistics from Route Processor 2.
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
IPv4 Routing | 517
debug arp c e s View information on ARP transactions.
Syntax debug arp [ interface ] [ count value ]
To stop debugging ARP transactions, enter no debug arp .
Parameters interface count value
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
• For the Management interface, enter the keyword managementethernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword count followed by the count value.
Range: 1 to 65534
EXEC Privilege Command Modes
Command
History
Defaults
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on the S60.
Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Added the count option
No default behavior or values
Use the count option to stop packets from flooding the user terminal when debugging is turned on.
debug ip dhcp c e s Enable debug information for DHCP relay transactions and display the information on the console.
Syntax debug ip dhcp
To disable debug, use the no debug ip dhcp command.
Defaults
Command Modes
Debug disabled
EXEC Privilege
518 | IPv4 Routing
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.10
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Introduced on C-Series
Introduced on E-Series
Example Figure 15-1.
debug ip dhcp Command Example
FTOS#debug ip dhcp
00:12:21 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP
Request, hops = 0, XID = 0xbf05140f, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:21 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2
00:12:26 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP
Request, hops = 0, XID = 0xbf05140f, secs = 5, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:26 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2
00:12:40 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP
Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:40 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2
00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface 14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 113.3.3.17
00:12:42 : %RELAY-I-BOOTREPLY: Forwarded BOOTREPLY for 00:60:CF:20:7B:8C to 113.3.3.254
00:12:42 : %RELAY-I-PACKET: BOOTP REQUEST (Unicast) received at interface 113.3.3.17 BOOTP
Request, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 0.0.0.0
00:12:42 : %RELAY-I-BOOTREQUEST: Forwarded BOOTREQUEST for 00:60:CF:20:7B:8C to 14.4.4.2
00:12:42 : %RELAY-I-PACKET: BOOTP REPLY (Unicast) received at interface 14.4.4.1 BOOTP Reply, hops = 0, XID = 0xda4f9503, secs = 0, hwaddr = 00:60:CF:20:7B:8C, giaddr = 113.3.3.17
00:12:42 : %RELAY-I-BOOTREPLY: Forwarded BOOTREPLY for 00:60:CF:20:7B:8C to 113.3.3.254
FTOS#
Related
Commands
ip helper-address hop-count disable
Specify the destination broadcast or host address for DHCP server request.
Disable hop-count increment for DHCP relay agent.
debug ip icmp c e s View information on the Internal Control Message Protocol (ICMP).
Syntax debug ip icmp [ interface ] [ count value ]
To disable debugging, use the no debug ip icmp command.
IPv4 Routing | 519
Parameters interface count value
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For the Management interface, enter the keyword ManagementEthernet followed by the slot/port information. The slot range is 0 and the port range is 0-1.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword count followed by the count value.
Range: 1 to 65534
Default: Infinity
Command Modes
Command
History
Example
EXEC Privilege
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on the S60.
Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Added the count option
Figure 15-2.
debug ip icmp Command Example (Partial)
ICMP: echo request rcvd from src 40.40.40.40
ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply
ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply
ICMP: echo request sent to dst 40.40.40.40
ICMP: echo request rcvd from src 40.40.40.40
ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply
ICMP: src 40.40.40.40, dst 40.40.40.40, echo reply
ICMP: echo request sent to dst 40.40.40.40
Usage
Information
Use the count option to stop packets from flooding the user terminal when debugging is turned on.
debug ip packet c e s View a log of IP packets sent and received.
Syntax debug ip packet [ access-group name ] [ count value ] [ interface ]
To disable debugging, use the no debug ip packet [ access-group name ] [ count value ]
[ interface ] command.
520 | IPv4 Routing
Parameters access-group name count value interface
Enter the keyword access-group followed by the access list name
(maximum 16 characters) to limit the debug output based on the defined rules in the ACL.
(OPTIONAL) Enter the keyword count followed by the count value.
Range: 1 to 65534
Default: Infinity
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitethernet followed by the slot/port information.
• For the management interface on the RPM, enter the keyword managementethernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tengigabitethernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.
Command Mode
Command
History
EXEC Privilege
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.6.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on the S60.
Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)
Introduced on E-Series ExaScale
Added the access-group option
Introduced on S-Series
Introduced on C-Series
Added the count option
IPv4 Routing | 521
Example Figure 15-3.
debug ip packet Command Example (Partial)
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 54, sending
TCP src=23, dst=40869, seq=2112994894, ack=606901739, win=8191 ACK PUSH
IP: s=10.1.2.206 (Ma 0/0), d=10.1.2.62, len 40, rcvd
TCP src=0, dst=0, seq=0, ack=0, win=0
IP: s=10.1.2.62 (local), d=10.1.2.206 (Ma 0/0), len 226, sending
TCP src=23, dst=40869, seq=2112994896, ack=606901739, win=8192 ACK PUSH
IP: s=10.1.2.216 (Ma 0/0), d=10.1.2.255, len 78, rcvd
UDP src=0, dst=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 0/0), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 0
ICMP type=0, code=0
IP: s=10.1.2.62 (local), d=10.1.2.3 (Ma 0/0), len 1500, sending fragment
IP Fragment, Ident = 4741, fragment offset = 1480
IP: s=40.40.40.40 (local), d=224.0.0.5 (Gi 4/11), len 64, sending broad/multicast proto=89
IP: s=40.40.40.40 (local), d=224.0.0.6 (Gi 4/11), len 28, sending broad/multicast proto=2
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
IP: s=0.0.0.0, d=30.30.30.30, len 100, unroutable
ICMP type=8, code=0
Table 15-1.
debug ip packet Command Example Fields
Field s= d=
Description
Lists the source address of the packet and the name of the interface (in parentheses) that received the packet.
Lists the destination address of the packet and the name of the interface
(in parentheses) through which the packet is being sent out on the network.
Displays the packet’s length.
The last part of each line lists the status of the packet. len sending rcvd fragment sending broad/multicast proto unroutable
TCP src=
UDP src=
ICMP type=
IP Fragment
Displays the source and destination ports, the sequence number, the acknowledgement number, and the window size of the packets in that
TCP packets.
Displays the source and destination ports for the UDP packets.
Displays the ICMP type and code.
States that it is a fragment and displays the unique number identifying the fragment (Ident) and the offset (in 8-byte units) of this fragment
(fragment offset) from the beginning of original datagram.
Usage
Information
Use the count option to stop packets from flooding the user terminal when debugging is turned on.
The access-group option supports only the equal to ( eq ) operator in TCP ACL rules. Port operators not equal to ( neq ), greater than ( gt ), less than ( lt ), or range are not supported in access-group
option (see Figure 15-4 ). ARP packets (
arp ) and Ether-type ( ether-type) are also not supported in access-group option. The entire rule is skipped to compose the filter.
The access-group option pertains to:
• IP Protocol Number 0 to 255
522 | IPv4 Routing
Example
• Internet Control Message Protocol *
* but not the ICMP message type (0-255)
• Any Internet Protocol
• Transmission Control Protocol*
* but not on the rst, syn, or urg bit
• User Datagram Protocol icmp ip tcp udp
In the case of ambiguous access control list rules, the debug ip packet access-control command will be disabled. A message appears identifying the error (see
).
Figure 15-4.
debug ip packet access-group Command Errors
FTOS#debug ip packet access-group test
%Error: port operator GT not supported in access-list debug
%Error: port operator LT not supported in access-list debug
%Error: port operator RANGE not supported in access-list debug
%Error: port operator NEQ not supported in access-list debug
FTOS#00:10:45: %RPM0-P:CP
%IPMGR-3-DEBUG_IP_PACKET_ACL_AMBIGUOUS_EXP: Ambiguous rules not supported in access-list debug, access-list debugging is turned off
FTOS# ip address c e s Assign a primary and secondary IP address to the interface.
Syntax ip address ip-address mask [ secondary ]
To delete an IP address from an interface, use the no ip address [ ip-address ] command.
Parameters ip-address mask
Enter an IP address in dotted decimal format.
Enter the mask of the IP address in slash prefix format (for example, /24).
secondary (OPTIONAL) secondary address. secondary to designate the IP address as the
Defaults
Command Modes
Command
History
Not configured.
INTERFACE
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
You must be in the INTERFACE mode before you add an IP address to an interface. Assign an IP address to an interface prior to entering the ROUTER OSPF mode.
IPv4 Routing | 523
ip directed-broadcast c e s Enables the interface to receive directed broadcast packets.
Syntax ip directed-broadcast
To disable the interface from receiving directed broadcast packets, enter no ip directed-broadcast.
Defaults Disabled (that is, the interface does not receive directed broadcast packets)
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series ip domain-list c e s Configure names to complete unqualified host names.
Syntax ip domain-list name
To remove the name, use the no ip domain-list name command.
Parameters name Enter a domain name to be used to complete unqualified names (that is, incomplete domain names that cannot be resolved).
Defaults
Command Modes
Disabled.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Usage
Information
Configure the ip domain-list command up to 6 times to configure a list of possible domain names.
If both the
and
commands are configured, the software will try to resolve the name using the
ip domain-name command. If the name is not resolved, the software goes
through the list of names configured with the ip domain-list
command to find a match.
Use the following steps to enable dynamic resolution of hosts:
• specify a domain name server with the
command.
•
enable DNS with the ip domain-lookup
command.
To view current bindings, use the
command. To view DNS related configuration, use the show running-config resolve command.
524 | IPv4 Routing
Related
Commands
Specify a DNS server.
ip domain-lookup c e s Enable dynamic host-name to address resolution (that is, DNS).
Syntax ip domain-lookup
To disable DNS lookup, use the no ip domain-lookup .
Defaults Disabled.
Command Mode CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Usage
Information
Related
Commands
To fully enable DNS, also specify one or more domain name servers with the
command.
FTOS does not support sending DNS queries over a VLAN. DNS queries are sent out all other interfaces, including the Management port.
To view current bindings, use the
command.
Specify a DNS server.
View current bindings.
ip domain-name c e s Configure one domain name for the switch.
Syntax ip domain-name name
To remove the domain name, enter no ip domain-name .
Parameters name Enter one domain name to be used to complete unqualified names (that is, incomplete domain names that cannot be resolved).
Defaults
Command Modes
Not configured.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
IPv4 Routing | 525
Usage
Information
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series
Introduced on C-Series
You can only configure one domain name with the ip domain-name command. To configure more than
one domain name, configure the
command up to 6 times.
Use the following steps to enable dynamic resolution of hosts:
• specify a domain name server with the
command.
•
enable DNS with the ip domain-lookup
command.
To view current bindings, use the
command.
Related
Commands
Configure additional names.
ip fib download-igp-only e Configure the E-Series to download only IGP routes (for example, OSPF) on to line cards. When the
command is configured or removed, it clears the routing table (similar to clear ip route
command) and only IGP routes populate the table.
Syntax ip fib download-igp-only [ small-fib ]
To return to default setting, use the no ip fib download-igp-only [ small-fib ] command.
Parameters small-fib (OPTIONAL) Enter the keyword small-fib to download a smaller FIB table. This option is useful on line cards with a limited FIB size.
Defaults
Command Modes
Command
History
Disabled
CONFIGURATION
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Introduced on E-Series ip helper-address c e s Specify the address of a DHCP server so that DHCP broadcast messages can be forwarded when the
DHCP server is not on the same subnet as the client.
Syntax ip helper-address ip-address | default-vrf
To remove a DHCP server address, enter no ip helper-address .
Parameters ip-address default-vrf
Enter an IP address in dotted decimal format (A.B.C.D).
(Optional) E-Series Only : Enter default-vrf for the DHCP server VRF is using.
526 | IPv4 Routing
Defaults
Command Modes
Command
History
Not configured.
INTERFACE
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
Added support for S-Series
Added support for C-Series
Introduced on E-Series
You can add multiple DHCP servers by entering the
command multiple times. If multiple servers are defined, an incoming request is sent simultaneously to all configured servers and the reply is forwarded to the DHCP client.
FTOS uses standard DHCP ports, that is UDP ports 67 (server) and 68 (client) for DHCP relay services. It listens on port 67 and if it receives a broadcast, the software converts it to unicast, and forwards to it to the DHCP-server with source port=68 and destination port=67.
The server replies with source port=67, destination port=67 and FTOS forwards to the client with source port=67, destination port=68.
ip helper-address hop-count disable c e s Disable the hop-count increment for the DHCP relay agent.
Syntax ip helper-address hop-count disable
To reenable the hop-count increment, use the no ip helper-address hop-count disable command.
Defaults
Command Modes
Command
History
Enabled; the hops field in the DHCP message header is incremented by default
CONFIGURATION
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Introduced for E-Series
Usage
Information
Related
Commands
This command disables the incrementing of the hops field when boot requests are relayed to a DHCP server through FTOS. If the incoming boot request already has a non-zero hops field, the message will be relayed with the same value for hops. However, the message will be discarded if the hops field exceeds 16, to comply with the relay agent behavior specified in RFC 1542.
Specify the destination broadcast or host address for DHCP server requests.
Display the current configuration and changes from default values.
IPv4 Routing | 527
ip host c e s Assign a name and IP address to be used by the host-to-IP address mapping table.
Syntax ip host name ip-address
To remove an IP host, use the no ip host name [ ip-address ] command.
Parameters name ip-address
Enter a text string to associate with one IP address.
Enter an IP address, in dotted decimal format, to be mapped to the name.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Introduced for E-Series ip max-frag-count c e s Set the maximum number of fragments allowed in one packet for packet re-assembly.
Syntax ip max-frag-count count
To place no limit on the number of fragments allowed, enter no ip max-frag-count .
Parameters count Enter a number for the number of fragments allowed for re-assembly.
Range: 2 to 256
Defaults
Command Modes
No limit is set on number of fragments allowed.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Introduced for E-Series
Usage
Information
To avoid Denial of Service (DOS) attacks, keep the number of fragments allowed for re-assembly low.
528 | IPv4 Routing
ip mtu e Set the IP MTU (frame size) of the packet transmitted by the RPM for the line card interface. If the packet must be fragmented, FTOS sets the size of the fragmented packets to the size specified in this command.
Syntax ip mtu value
To return to the default IP MTU value, enter no ip mtu .
Parameters value Enter the maximum MTU size if the IP packet is fragmented.
Default: 1500 bytes
Range: 576 to 9234
Defaults
Command Modes
Command
History
1500 bytes
INTERFACE (Gigabit Ethernet and 10 Gigabit Ethernet interfaces)
Usage
Information
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series
When you enter no
ip mtu value to 1536 bytes. To return the IP MTU
value to the default, enter no ip mtu .
You must compensate for Layer 2 header when configuring link MTU on an Ethernet interface or
FTOS may not fragment packets. If the packet includes a Layer 2 header, the difference between the link MTU and IP MTU (
ip mtu command) must be enough bytes to include for the Layer 2 header.
Link MTU and IP MTU considerations for Port Channels and VLANs are as follows.
Port Channels:
All members must have the same link MTU value and the same IP MTU value.
• The Port Channel link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the channel members.
Example: if the members have a link MTU of 2100 and an IP MTU 2000, the Port Channel’s MTU values cannot be higher than 2100 for link MTU or 2000 bytes for IP MTU.
VLANs:
• All members of a VLAN must have same IP MTU value.
• Members can have different Link MTU values. Tagged members must have a link MTU 4 bytes higher than untagged members to account for the packet tag.
• The VLAN link MTU and IP MTU must be less than or equal to the link MTU and IP MTU values configured on the VLAN members.
Example: The VLAN contains tagged members with Link MTU of 1522 and IP MTU of 1500 and untagged members with Link MTU of 1518 and IP MTU of 1500. The VLAN’s Link MTU cannot be higher than 1518 bytes and its IP MTU cannot be higher than 1500 bytes.
IPv4 Routing | 529
Table 15-2.
Difference between Link MTU and IP MTU
Layer 2 Overhead
Ethernet (untagged)
VLAN Tag
Untagged Packet with VLAN-Stack Header
Tagged Packet with VLAN-Stack Header
Difference between Link MTU and IP MTU
18 bytes
22 bytes
22 bytes
26 bytes
Related
Commands
Set the link MTU for an Ethernet interface.
ip name-server c e s Enter up to 6 IP addresses of name servers. The order you enter the addresses determines the order of their use.
Syntax ip name-server ip-address [ ip-address2 ...
ip-address6 ]
To remove a name server, use the no ip name-server ip-address command.
Parameters ip-address ip-address2... ip-address6
Enter the IP address, in dotted decimal format, of the name server to be used.
(OPTIONAL) Enter up five more IP addresses, in dotted decimal format, of name servers to be used.
Separate the IP addresses with a space.
Defaults
Command Modes
No name servers are configured.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Introduced for E-Series
Usage
Information
FTOS does not support sending DNS queries over a VLAN. DNS queries are sent out all other interfaces, including the Management port.
ip proxy-arp c e s Enable Proxy ARP on an interface.
Syntax ip proxy arp
To disable Proxy ARP, enter no ip proxy-arp .
Defaults Enabled.
530 | IPv4 Routing
Command Modes
Command
History
INTERFACE
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Related
Commands
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Introduced for E-Series
Displays the interface routing status and configuration.
ip redirects e Enable the interface to send ICMP redirect messages.
Syntax ip redirects
To return to default, enter no ip redirects .
Defaults
Command Modes
Disabled
INTERFACE
Command
History
Version 8.1.1.0
pre-Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series
Usage
Information
This command is available for physical interfaces and port-channel interfaces on the E-Series.
Note:
This command is not supported on default VLAN ( default vlan-id
command).
ip route c e s Assign a static route to the switch.
Syntax ip route vrf {vrf instance} destination mask { ipaddress | interface [ ip-address ]} [ distance ]
[ permanent ] [ tag tag-value ]
To delete a specific static route, use the no ip route destination mask { address | interface
[ ip-address ]} command.
To delete all routes matching a certain route, use the no ip route destination mask command.
Parameters vrf name destination mask ip-address
(OPTIONAL) E-Series Only : Enter the keyword vrf followed by the VRF Instances name to tie the static route to the VRF instance.
Enter the IP address in dotted decimal format of the destination device.
Enter the mask in slash prefix formation (/x) of the destination device’s IP address.
Enter the IP address in dotted decimal format of the forwarding router.
IPv4 Routing | 531
interface distance permanent tag tag-value
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a loopback interface, enter the keyword loopback followed by a number from zero (0) to 16383.
• For the null interface, enter the keyword null followed by zero (0).
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter a number as the distance metric assigned to the route.
Range: 1 to 255
(OPTIONAL) Enter the keyword permanent to specify the route is not removed, even if the interface assigned to that route goes down. The route must be up initially to install it in the routing table.
If you disable the interface with an IP address associated with the keyword permanent , the route disappears from the routing table.
(OPTIONAL) Enter the keyword tag followed by a number to assign to the route.
Range: 1 to 4294967295
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Using the following example of a static route: ip route 33.33.33.0 /24 gigabitethernet 0/0 172.31.5.43
• The software installs a next hop that is not on the directly connected subnet but which recursively resolves to a next hop on the interface’s configured subnet. In the example, if gig 0/0 has ip address on subnet 2.2.2.0 and if 172.31.5.43 recursively resolves to 2.2.2.0, FTOS installs the static route.
• When the interface goes down, FTOS withdraws the route.
• When the interface comes up, FTOS re-installs the route.
• When recursive resolution is “broken,” FTOS withdraws the route.
• When recursive resolution is satisfied, FTOS re-installs the route.
532 | IPv4 Routing
Related
Commands
View the switch routing table.
ip source-route c e s Enable FTOS to forward IP packets with source route information in the header.
Syntax ip source-route
To drop packets with source route information, enter no ip route-source .
Defaults Enabled.
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Added support for S-Series
Added support for C-Series
Introduced for E-Series ip unreachables c e s Enable the generation of Internet Control Message Protocol (ICMP) unreachable messages.
Syntax ip unreachables
To disable the generation of ICMP messages, enter no ip unreachables .
Defaults Disabled
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series ip vlan-flooding e Enable unicast data traffic flooding on VLAN member ports.
Syntax ip vlan-flooding
To disable, use the no ip vlan-flooding command.
Defaults disabled
IPv4 Routing | 533
Command Modes
Command
History
CONFIGURATION
Usage
Information
Version 8.1.1.0
Version 7.4.1.0
Introduced on E-Series ExaScale
Introduced on E-Series
By default this command is disabled. When enabled, all the Layer 3 unicast routed data traffic going through a VLAN member port is flooded across all the member ports of that VLAN. There might be some ARP table entries which are resolved through ARP packets which had Ethernet MAC SA different from MAC information inside the ARP packet. This unicast data traffic flooding occurs only for those packets which use these ARP entries.
load-balance (C-Series and S-Series) c s By default for C-Series and S-Series, FTOS uses an IP 4-tuple (IP SA, IP DA, Source Port, and
Destination Port) to distribute IP traffic over members of a Port Channel as well as equal-cost paths. To designate another method to balance traffic over Port Channel members, use the load-balance command.
Syntax load-balance { ip-selection [ dest-ip | source-ip ]} | { mac [ dest-mac | source-dest-mac | source-mac ]} | { tcp-udp [ enable ]}
To return to the default setting (IP 4-tuple), use the no version of the command.
Parameters ip-selection {dest-ip | source-ip } mac {dest-mac | source-dest-mac | source-mac } tcp-udp enable
Enter the keywords to distribute IP traffic based on the following criteria:
• dest-ip —Uses destination IP address and destination port fields to hash.
The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.
• source-ip —Uses source IP address and source port fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.
Enter the keywords to distribute MAC traffic based on the following criteria:
• dest-mac —Uses the destination MAC address, VLAN, Ethertype, source module ID and source port ID fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.
• source-dest-mac —Uses the destination and source MAC address,
VLAN, Ethertype, source module ID and source port ID fields to hash.
The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.
• source-mac —Uses the source MAC address, VLAN, Ethertype, source module ID and source port ID fields to hash. The hashing mechanism returns a 3-bit index indicating which port the packet should be forwarded to.
Enter the keywords to distribute traffic based on the following:
• enable —Takes the TCP/UDP source and destination ports into consideration when doing hash computations. (By default, this is enabled )
Defaults
Command Modes
IP 4-tuple (IP SA, IP DA, Source Port, Destination Port)
CONFIGURATION
534 | IPv4 Routing
Command
History
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Added support for S-Series
Introduced on C-Series
By default, FTOS distributes incoming traffic based on a hash algorithm using the following criteria:
• IP source address
• IP destination address
• TCP/UDP source port
• TCP/UDP destination port load-balance (E-Series) e By default, for E-Series chassis, FTOS uses an IP 5-tuple to distribute IP traffic over members of a Port
Channel as well as equal cost paths. To designate another method to balance traffic over Port Channel members, use the load-balance command.
Syntax load-balance [ ip-selection 3-tuple | ip-selection packet-based] [ mac ]
To return to the default setting (IP 5-tuple), use one of the following commands:
• no load-balance ip-selection 3-tuple
• no load-balance ip-selection packet-based
• no load-balance mac
Parameters ip-selection 3-tuple Enter the keywords ip-selection 3-tuple to distribute IP traffic based on the following criteria:
• IP source address
• IP destination address
• IP Protocol type
Note: For IPV6, only the first 32 bits (LSB) of IP SA and IP DA are used for hash generation.
ip-selection packet-based Enter the keywords ip-selection packet-based to distribute IPV4 traffic based on the IP Identification field in the IPV4 header.
This option does not affect IPV6 traffic; that is, IPV6 traffic is not distributed when this command is executed.
Note: Hash-based load-balancing on MPLS does not work when packet-based hashing ( load-balance ip-selection packet-based ) is enabled.
mac Enter
• MAC source address, and
• MAC destination address.
Defaults
Command Modes
IP 5-tuple (IP SA, IP DA, IP Protocol Type, Source Port and Destination Port)
CONFIGURATION
Command
History
Version 8.1.1.0
Version 6.1.1.0
Introduced on E-Series ExaScale
Introduced for E-Series
IPv4 Routing | 535
Usage
Information
By default, FTOS distributes incoming traffic based on a hash algorithm using the following criteria:
• IP source address
• IP destination address
• IP Protocol type
• TCP/UDP source port
• TCP/UDP destination port
Note: For IPV6, only the first 32 bits (LSB) of IP Source Address and IP Destination
Address are used for hash generation.
The table below lists the load balance command options and how the command combinations effect the distribution of traffic.
Table 15-3.
Configurations of the load-balance Command
Configuration
Default (IP 5-tuple) ip-selection 3-tuple mac ip-selection 3-tuple and mac ip-selection packet-based ip-selection packet-based and mac
Switched IP Traffic
IP 5-tuple
IP 3-tuple
MAC based
MAC based
Packet based: IPV4
No distribution: IPV6
MAC based
Routed IP Traffic
(IPV4 Only)
IP 5-tuple
IP 3-tuple
IP 5-tuple
IP 3-tuple
Packet based: IPV4
Packet based: IPV4
Switched Non-IP
Traffic
MAC based
MAC based
MAC based
MAC based
MAC based
MAC based
Related
Commands
Change the algorithm used to distribute traffic on an E-Series chassis.
management route c e Configure a static route that points to the Management interface or a forwarding router.
Syntax management route ip-address mask { forwarding-router-address | managementethernet }
To remove a static route, use the no management route ip-address mask
{ forwarding-router-address | managementethernet } command.
Parameters
Defaults
Command Modes ip-address mask Enter an IP address (dotted decimal format) and mask (/prefix format) as the IP address for the Management interface.
Enter an IP address (dotted decimal format) of a forwarding router.
forwarding-router-address managementethernet Enter for the
Management interface on the Primary RPM.
Not configured.
CONFIGURATION
536 | IPv4 Routing
Command
History
Usage
Information
Version 8.3.5.0
Version 8.3.3.1
Version 8.1.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S55.
Introduced on S60
Introduced on E-Series ExaScale
Support added for C-Series
Introduced for E-Series
When a static route (or a protocol route) overlaps with Management static route, the static route (or a protocol route) is preferred over the Management Static route. Also, Management static routes and the
Management Connected prefix are not reflected in the hardware routing tables.
Related
Commands
Configure the Management port on the system (either the Primary or
Standby RPM).
Set the mode of the Management interface.
Set the speed for the Management interface.
show arp c e s Display the ARP table.
Syntax show arp [vrf vrf name ] [ interface interface | ip ip-address [ mask ] | macaddress mac-address
[ mac-address mask ]] [ cpu { cp | rp1 | rp2 }] [ static | dynamic ] [ summary ]
Parameters vrf name cpu interface interface ip ip-address mask
E-Series Only : Show only the ARP cache entries tied to the VRF process.
•
•
•
(OPTIONAL) Enter the keyword cpu with one of the following keywords to view ARP entries on that CPU: cp - view ARP entries on the control processer.
rp1 - view ARP entries on Routing Processor 1.
rp2 - view ARP entries on Routing Processor 2.
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For the Management interface, enter the keyword managementethernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword ip followed by an IP address in the dotted decimal format. Enter the optional IP address mask in the slash prefix format (/ x).
IPv4 Routing | 537
macaddress mac-address static dynamic summary mask
(OPTIONAL) Enter the keyword macaddress followed by a MAC address in nn:nn:nn:nn:nn:nn format. Enter the optional MAC address mask in nn:nn:nn:nn:nn format also.
(OPTIONAL) Enter the keyword static to view entries entered manually.
(OPTIONAL) Enter the keyword dynamic to view dynamic entries.
(OPTIONAL) Enter the keyword summary to view a summary of ARP entries.
Command Modes
Command
History
EXEC Privilege
Usage
Information
Example
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.9.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Support 4094 VLANs on E-Series ExaScale (prior limit was 2094)
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
Augmented to display local ARP entries learned from private VLANs (PVLANs)
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
The following figure shows two VLAN s that are associated with a private VLAN (PVLAN) (see
Chapter 29, Private VLAN (PVLAN)
), a feature added for C-Series and S-Series in FTOS
7.8.1.0.
Figure 15-5.
show arp Command Example (Partial)
FTOS>show arp
Protocol Address Age(min) Hardware Address Interface VLAN CPU
--------------------------------------------------------------------------------
Internet 192.2.1.254 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.253 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.252 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.251 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.250 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.251 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.250 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.249 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.248 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.247 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.246 1 00:00:c0:02:01:02 Gi 9/13 - CP
Internet 192.2.1.245 1 00:00:c0:02:01:02 Gi 9/13 - CP
538 | IPv4 Routing
Figure 15-6.
show arp Command Example with Private VLAN data
FTOS#show arp
Protocol Address Age(min) Hardware Address Interface VLAN CPU
-----------------------------------------------------------------------------------
Internet 5.5.5.1 - 00:01:e8:43:96:5e - Vl 10 pv 200 CP
Internet 5.5.5.10 - 00:01:e8:44:99:55 - Vl 10 CP
Internet 10.1.2.4 1 00:01:e8:d5:9e:e2 Ma 0/0 - CP
Internet 10.10.10.4 1 00:01:e8:d5:9e:e2 Ma 0/0 - CP
Internet 10.16.127.53 1 00:01:e8:d5:9e:e2 Ma 0/0 - CP
Internet 10.16.134.254 20 00:01:e8:d5:9e:e2 Ma 0/0 - CP
Internet 133.33.33.4 1 00:01:e8:d5:9e:e2 Ma 0/0 - CP
Line 1 shows community VLAN 200 (in primary VLAN 10) in a PVLAN.
Line 2 shows primary VLAN 10.
Figure 15-7.
show arp cpu cp Command Example
FTOS#sho arp cpu cp
Protocol Address Age(min) Hardware Address Interface VLAN CPU
--------------------------------------------------------------------------------
Internet 10.1.2.206 0 00:a0:80:00:15:b8 Ma 0/0 - CP
Internet 182.16.1.20 0 00:30:19:24:2d:70 Gi 8/0 - CP
Internet 100.10.10.10 0 00:30:19:4f:d3:80 Gi 8/12 - CP
Internet 10.1.2.209 12 00:a0:80:00:12:6c Ma 0/0 - CP
FTOS#
Table 15-4.
show arp Command Example Fields
Row Heading
Protocol
Address
Age(min)
Hardware Address
Interface
VLAN
CPU
Description
Displays the protocol type.
Displays the IP address of the ARP entry.
Displays the age in minutes of the ARP entry.
Displays the MAC address associated with the ARP entry.
Displays the first two letters of the interfaces type and the slot/port associated with the ARP entry.
Displays the VLAN ID, if any, associated with the ARP entry.
Lists which CPU the entries are stored on.
Figure 15-8.
show arp summary Command Example
FTOS# show arp summary
Total Entries Static Entries Dynamic Entries CPU
------------------------------------------------------
83 0 83 CP
FTOS
IPv4 Routing | 539
Table 15-5.
show arp summary Command Example Fields
Row Heading
Total Entries
Static Entries
Dynamic Entries
CPU
Description
Lists the total number of ARP entries in the ARP table.
Lists the total number of configured or static ARP entries.
Lists the total number of learned or dynamic ARP entries.
Lists which CPU the entries are stored on.
Related
Commands
Enable/disable Layer 3 communication in secondary VLANs.
Set the PVLAN mode of the selected port.
show arp retries c e s Display the configured number of ARP retries.
Syntax
Command Modes show arp retries
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced
Related
Commands
Set the number of ARP retries in case the system does not receive an ARP reply in response to an ARP request.
show hosts c e s View the host table and DNS configuration.
Syntax show hosts
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
540 | IPv4 Routing
Example Figure 15-9.
show hosts Command Example
FTOS#show hosts
Default domain is not set
Name/address lookup uses static mappings
Name servers are not set
Host Flags TTL Type Address
-------- ----- ---- ---- ------ks (perm, OK) - IP 2.2.2.2
4200-1 (perm, OK) - IP 192.68.69.2
1230-3 (perm, OK) - IP 192.68.99.2
ZZr (perm, OK) - IP 192.71.18.2
Z10-3 (perm, OK) - IP 192.71.23.1
FTOS#
Table 15-6.
show hosts Command Example Fields
Field
Default domain...
Name/address lookup...
Name servers are...
Host
Flags
TTL
Type
Address
Description
Displays the domain name (if configured).
States if DNS is enabled on the system.
If DNS is enabled, the Name/Address lookup is domain service.
If DNS is not enabled, the Name/Address lookup is static mapping.
Lists the name servers, if configured.
Displays the host name assigned to the IP address.
Classifies the entry as one of the following:
• perm - the entry was manually configured and will not time out
• temp - the entry was learned and will time out after 72 hours of inactivity.
Also included in the flag is an indication of the validity of the route:
• ok - the entry is valid.
• ex - the entry expired.
• ?? - the entry is suspect.
Displays the amount of time until the entry ages out of the cache. For dynamically learnt entries only.
Displays IP as the type of entry.
Displays the IP address(es) assigned to the host.
Related
Commands
View DNS resolution
Configure a host.
show ip cam linecard c e View CAM entries for a port pipe on a line card.
Syntax show ip cam linecard number port-set pipe-number [ ip-address mask [ longer-prefixes ] | index index-number | summary | vrf vrf instance ]
IPv4 Routing | 541
Parameters
[ number pipe-number ip-address longer-prefix ] index vrf instance mask index-number summary
Enter the number of the line card.
Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600600i, and 0 to 5 on a E300.
Enter the number of the line card’s port-pipe.
Range: 0 to 1
(OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only.
Enter the keyword longer-prefixes to view routes with a common prefix.
(OPTIONAL) Enter the keyword index followed by the CAM index number.
Range: depends on CAM size
(OPTIONAL) Enter the keyword summary to view a table listing route prefixes and the total number of routes that can be entered into the CAM.
(OPTIONAL) E-Series Only : Enter the keyword vrf following by the VRF Instance name to show CAM information as it applies to that VRF instance.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.1.1.2
Version 8.1.1.0
Version 7.9.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
E-Series ExaScale E600i supported
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
Introduced on C-Series
Introduced for E-Series
Figure 15-10.
show ip cam Command Example on E-Series
FTOS#show ip cam linecard 13 port-set 0
Index Destination EC CG V C Next-Hop VId Mac-Addr Port
------ --------------- -- -- - - --------------- ---- ---------------- -------
3276 6.6.6.2 0 0 1 1 0.0.0.0 0 00:00:00:00:00:00 17c1 CP
3277 5.5.5.2 0 0 1 1 0.0.0.0 0 00:00:00:00:00:00 17c1 CP
3278 4.4.4.2 0 0 1 1 0.0.0.0 0 00:00:00:00:00:00 17c1 CP
3279 3.3.3.2 0 0 1 1 0.0.0.0 0 00:00:00:00:00:00 17c1 CP
3280 2.2.2.2 0 0 1 1 0.0.0.0 0 00:00:00:00:00:00 17c1 CP
11144 6.6.6.0 0 0 1 1 0.0.0.0 6 00:00:00:00:00:00 17c5 RP2
11145 5.5.5.0 0 0 1 1 0.0.0.0 5 00:00:00:00:00:00 17c5 RP2
11146 4.4.4.0 0 0 1 1 0.0.0.0 4 00:00:00:00:00:00 17c5 RP2
11147 3.3.3.0 0 0 1 1 0.0.0.0 3 00:00:00:00:00:00 17c5 RP2
11148 2.2.2.0 0 0 1 1 0.0.0.0 2 00:00:00:00:00:00 17c5 RP2
65535 0.0.0.0 0 0 1 1 0.0.0.0 0 00:00:00:00:00:00 17c5 RP2
FTOS#
Table 15-7.
show ip cam Command Example Fields
Field
Index
Destination
EC
CG
V
Description
Displays the CAM index number of the entry.
Displays the destination route of the index.
Displays the number of equal cost multipaths (ECMP) available for the default route for non-Jumbo line cards.
Displays 0,1 when ECMP is more than 8, for Jumbo line cards.
Displays 0.
Displays a 1 if the entry is valid and a 0 if the entry is for a line card with Catalog number beginning with LC-EF.
542 | IPv4 Routing
Table 15-7.
show ip cam Command Example Fields (continued)
Field
C
Next-Hop
VId
Mac Addr
Port
Description
Displays the CPU bit.
1 indicates that a packet hitting this entry is forwarded to the CP or RP2, depending on
Egress port.
Displays the next hop IP address of the entry.
Displays the VLAN ID. If the entry is 0, the entry is not part of a VLAN.
Displays the next-hop router’s MAC address.
Displays the egress interface. Use the second half of the entry to determine the interface.
For example, in the entry 17cl CP, the CP is the pertinent portion.
CP = control processor
RP2 = route processor 2
Gi = Gigabit Ethernet interface
So = SONET interface
Te = 10 Gigabit Ethernet interface
Example Figure 15-11.
show ip cam summary Command Example
FTOS#show ip cam linecard 4 port-set 0 summary
Total Number of Routes in the CAM is 13
Total Number of Routes which can be entered in CAM is 131072
Prefix Len Current Use Initial Sz
---------- ----------- ----------
32 7 37994
31 0 1312
30 0 3932
29 0 1312
28 0 1312
27 0 1312
26 0 1312
25 0 1312
24 6 40610
23 0 3932
22 0 2622
21 0 2622
20 0 2622
19 0 2622
18 0 1312
17 0 1312
16 0 3932
15 0 1312
14 0 1312
13 0 1312
12 0 1312
11 0 1312
10 0 1312
9 0 1312
8 0 1312
7 0 1312
6 0 1312
5 0 1312
4 0 1312
3 0 1312
2 0 1312
1 0 1312
0 0 8
FTOS#
IPv4 Routing | 543
Table 15-8.
show ip cam summary Command Example Fields
Field
Prefix Length
Current Use
Initial Size
Description
Displays the prefix-length or mask for the IP address configured on the linecard 0 port pipe
0.
Displays the number of routes currently configured for the corresponding prefix or mask on the linecard 0 port pipe 0.
Displays the CAM size allocated by FTOS for the corresponding mask. The CAM size is adjusted by FTOS if the number of routes for the mask exceeds the initial allocation.
show ip cam stack-unit s Display content-addressable memory (CAM) entries for an S-Series switch.
Syntax show ip cam stack-unit id port-set pipe-number [ ip-address mask [ longer-prefixes ] | summary ]
Parameters id pipe-number ip-address mask
[ longer-prefix ] summary
Enter the stack-unit ID.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Enter the number of the Port-Pipe number.
S50n, S50V range: 0 to 1; S25N, S25P, S25V range: 0 to 0
(OPTIONAL) Enter the IP address and mask of a route to CAM entries for that route only.
Enter the keyword longer-prefixes to view routes with a common prefix.
(OPTIONAL) Enter the keyword summary to view a table listing route prefixes and the total number routes which can be entered in to CAM.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Modified: Added support for up to seven stack members.
Introduced on S-Series
Figure 15-12.
show ip cam stack-unit Command Example
FTOS#show ip cam stack-unit 0 port-set 0 10.10.10.10/32 longer-prefixes
Destination EC CG V C VId Mac-Addr Port
----------------- -- -- - - ----- ----------------- -------------
10.10.10.10 0 0 1 1 0 00:00:00:00:00:00 3f01 CP
FTOS#
544 | IPv4 Routing
Table 15-9.
show ip cam Command Example Fields
Field
Destination
EC
CG
V
C
V Id
Mac Addr
Port
Description
Displays the destination route of the index.
Displays the number of equal cost multipaths (ECMP) available for the default route for non-Jumbo line cards.
Displays 0,1 when ECMP is more than 8, for Jumbo line cards.
Displays 0.
Displays a 1 if the entry is valid and a 0 otherwise.
Displays the CPU bit.
1 indicates that a packet hitting this entry is forwarded to the control processor, depending on Egress port.
Displays the VLAN ID. If the entry is 0, the entry is not part of a VLAN.
Displays the next-hop router’s MAC address.
Displays the egress interface. Use the second half of the entry to determine the interface.
For example, in the entry 17cl CP, the CP is the pertinent portion.
CP = control processor
Gi = Gigabit Ethernet interface
Te = 10 Gigabit Ethernet interface show ip fib linecard c e View all Forwarding Information Base (FIB) entries.
Syntax show ip fib linecard slot-number [ vrf vrf instance | ip-address / prefix-list | summary ]
Parameters vrf instance slot-number ip-address mask longer-prefixes summary
(OPTIONAL) E-Series Only : Enter the keyword vrf followed by the VRF INstance name to show the FIB cache entries tied to that VRF instance.
Enter the number of the line card slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, 0 to 5 on a E300
(OPTIONAL) Enter the IP address of the network destination to view only information on that destination.
You must enter the IP address is dotted decimal format (A.B.C.D). You must enter the mask in slash prefix format (/X).
(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
(OPTIONAL) Enter the keyword summary to view the total number of prefixes in the FIB.
Command Mode EXEC
EXEC Privilege
Command
History
Version 8.1.1.0
Version 7.9.1.0
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
IPv4 Routing | 545
Example
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on C-Series
Introduced for E-Series
Figure 15-13.
show ip fib linecard Command Example
FTOS>show ip fib linecard 12
Destination Gateway First-Hop Mac-Addr Port VId Index EC
-------------------- -------------------------- -------------- ---------------- ------- ------------
3.0.0.0/8 via 100.10.10.10, So 2/8 100.10.10.10 00:01:e8:00:03:ff So 2/8 0 60260
3.0.0.0/8 via 101.10.10.10, So 2/9
100.10.10.0/24 Direct, So 2/8 0.0.0.0 00:01:e8:00:03:ff So 2/8 0 11144
100.10.10.1/32 via 127.0.0.1 127.0.0.1 00:00:00:00:00:00 CP 0 3276
100.10.10.10/32 via 100.10.10.10, So 2/8 100.10.10.10 00:01:e8:00:03:ff So 2/8 0 0
101.10.10.0/24 Direct, So 2/9 0.0.0.0 00:00:00:00:00:00 RP2 0 11145
101.10.10.1/32 via 127.0.0.1 127.0.0.1 00:00:00:00:00:00 CP 0 3277
101.10.10.10/32 via 101.10.10.10, So 2/9 101.10.10.10 00:01:e8:01:62:32 So 2/9 0 1
FTOS>
Table 15-10.
show ip fib linecard Command Example Fields
Field
Destination
Gateway
First-Hop
Mac-Addr
Port
VId
Index
EC
Description
Lists the destination IP address.
Displays either the word direct and an interface for a directly connected route or the remote IP address to be used to forward the traffic.
Displays the first hop IP address.
Displays the MAC address.
Displays the egress-port information.
Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed.
Displays the internal interface number.
Displays the number of ECMP paths.
Related
Commands
Clear FIB entries on a specified line card.
show ip fib stack-unit s View all Forwarding Information Base (FIB) entries.
Syntax show ip fib stack-unit id [ ip-address [ mask ] [ longer-prefixes ] | summary ]
Parameters id ip-address mask
Enter the S-Series stack unit ID.Unit ID range:
S60 : 0-11 all other S-Series : 0-7
(OPTIONAL) Enter the IP address of the network destination to view only information on that destination.
Enter the IP address in dotted decimal format (A.B.C.D). You must enter the mask in slash prefix format (/X).
546 | IPv4 Routing
longer-prefixes summary
(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
(OPTIONAL) Enter the keyword summary to view the total number of prefixes in the FIB.
Command Mode EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Modified: Added support for up to seven stack members.
Introduced on S-Series
Figure 15-14.
show ip fib linecard Command Example
FTOS#show ip fib stack-unit 0
Destination Gateway First-Hop Mac-Addr Port VId EC
------------------ --------------------------- ----------------- ------------------- -------- ----- --
10.10.10.10/32 Direct, Nu 0 0.0.0.0 00:00:00:00:00:00 BLK HOLE 0 0
FTOS>
Table 15-11.
show ip fib linecard Command Example Fields
Field
Destination
Gateway
First-Hop
Mac-Addr
Port
VId
EC
Description
Lists the destination IP address.
Displays either the word Direct and an interface for a directly connected route or the remote IP address to be used to forward the traffic.
Displays the first hop IP address.
Displays the MAC address.
Displays the egress-port information.
Displays the VLAN ID. If no VLAN is assigned, zero (0) is listed.
Displays the number of ECMP paths.
Related
Commands
Clear FIB entries on a specified line card.
show ip flow c e s Show how a Layer 3 packet is forwarded when it arrives at a particular interface.
Syntax show ip flow interface [ vrf vrf instance ] interface { source-ip address destination-ip address }
{ protocol number [ tcp | udp ] | icmp } { src-port number destination-port number }
IPv4 Routing | 547
Parameters
Command Modes
Command
History vrf instance interface interface source-ip address destination-ip address
E-Series Only : Show only the L3 flow as they apply to that VRF process.
Enter the keyword interface followed by of the following interface keywords.
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter an in or out parameter in conjunction with the optional interface:
Enter the keyword source-ip followed by the IP source address in IP address format.
Enter the keyword destination-ip followed by the IP destination address in IP address format.
protocol udp ] | number icmp
[ tcp | E-Series only: Enter the keyword protocol followed by one of the protocol type keywords: tcp , udp , icmp or protocol number src-port number Enter the keyword src-port followed by the source port number.
destination-port number Enter the keyword destination-port followed by the destination port number.
EXEC
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
Introduced on S-Series
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
This command provides egress port information for a given IP flow. This is useful in identifying which interface the packet will follow in the case of Port-channel and Equal Cost Multi Paths. Use this
command for routed packed only. For switched packets use the show port-channel-flow command
show ip flow does not compute the egress port information when load-balance mac hashing is also configured due to insufficient information (the egress MAC is not available).
S-Series produces the following error message:
%Error: Unable to read IP route table
C-Series produces the message:
%Error: FIB cannot compute the egress port with the current trunk hash setting.
548 | IPv4 Routing
Example Figure 15-15.
Command Example show ip flow on E-Series
FTOS#show ip flow interface Gi 1/8 189.1.1.1 63.0.0.1 protocol tcp source-port 7898 destination-port 8976 flow: 189.1.1.1 63.0.0.1 protocol 6 7868 8976
Ingress interface: Gi 1/20
Egress interface: Gi 1/14 to 1.7.1.2[CAM hit 103710] unfragmented packet
Gi 1/10 to 1.2.1.2[CAM hit 103710] fragmented packet show ip interface c e s View IP-related information on all interfaces.
Syntax show ip interface [ interface | brief | linecard slot-number ] [ configuration ]
Parameter interface brief linecard slot-number configuration
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword Loopback followed by a number from 0 to 16383.
• For the Management interface, enter the keyword ManagementEthernet followed by zero (0).
• For the Null interface, enter the keyword null followed by zero (0).
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword brief to view a brief summary of the interfaces and whether an IP address is assigned.
(OPTIONAL) Enter the keyword linecard followed by the number of the line card slot.
C-Series Range: 0-7
E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300
Note: This keyword is not available on the S-Series.
(OPTIONAL) Enter the keyword configuration to display the physical interfaces with non-default configurations only.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.2
Version 8.1.1.0
Introduced on the S60.
Supported on E-Series ExaScale E600i
Introduced on E-Series ExaScale
IPv4 Routing | 549
Example
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Figure 15-16.
show ip interface Command Example
FTOS#show ip int te 0/0
TenGigabitEthernet 0/0 is down, line protocol is down
Internet address is not set
IP MTU is 1500 bytes
Inbound access list is not set
Proxy ARP is enabled
Split Horizon is enabled
Poison Reverse is disabled
ICMP redirects are not sent
ICMP unreachables are not sent
FTOS#
Table 15-12.
show ip interface Command Example Items
Lines
TenGigabitEthernet 0/0...
Internet address...
IP MTU is...
Inbound access...
Proxy ARP...
Split horizon...
Poison Reverse...
ICMP redirects...
ICMP unreachables...
Description
Displays the interface’s type, slot/port and physical and line protocol status.
States whether an IP address is assigned to the interface. If one is, that address is displayed.
Displays IP MTU value.
Displays the name of the any configured incoming access list. If none is configured, the phrase “not set” is displayed.
States whether proxy ARP is enabled on the interface.
States whether split horizon for RIP is enabled on the interface.
States whether poison for RIP is enabled on the interface
States if ICMP redirects are sent.
States if ICMP unreachable messages are sent.
Figure 15-17.
show ip interface brief Command Example (Partial)
FTOS#show ip int brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet 1/0 unassigned NO Manual administratively down down
GigabitEthernet 1/1 unassigned NO Manual administratively down down
GigabitEthernet 1/2 unassigned YES Manual up up
GigabitEthernet 1/3 unassigned YES Manual up up
GigabitEthernet 1/4 unassigned YES Manual up up
GigabitEthernet 1/5 10.10.10.1 YES Manual up up
GigabitEthernet 1/6 unassigned NO Manual administratively down down
550 | IPv4 Routing
Table 15-13.
show ip interface brief Column Headings
Field
Interface
IP-Address
Ok?
Method
Status
Protocol
Description
Displays type of interface and the associated slot and port number.
Displays the IP address for the interface, if configured.
Indicates if the hardware is functioning properly.
Displays Manual if the configuration is read from the saved configuration.
States whether the interface is enabled ( up ) or disabled ( administratively down ).
States whether IP is enabled ( up ) or disabled ( down ) on the interface.
show ip management-route c e View the IP addresses assigned to the Management interface.
Syntax
Parameters show ip management-route [ all | connected | summary | static ] all connected summary
(OPTIONAL) Enter the keyword all to view all IP addresses assigned to all
Management interfaces on the switch.
(OPTIONAL) Enter the keyword connected to view only routes directly connected to the Management interface.
(OPTIONAL) Enter the keyword summary to view a table listing the number of active and non-active routes and their sources.
(OPTIONAL) Enter the keyword static to view non-active routes also.
Command Modes static
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.5.0
Version 8.3.3.1
Version 8.1.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S55.
Introduced on S60.
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced for E-Series
Figure 15-18.
show ip management route Command Example
FTOS#show ip management-route
Destination Gateway State
----------- ------- -----
10.1.2.0/24 ManagementEthernet 0/0 Connected
172.16.1.0/24 10.1.2.4 Active
FTOS#
IPv4 Routing | 551
show ip protocols c e s View information on all routing protocols enabled and active on the switch.
Syntax show ip protocols
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Regular evaluation optimization enabled/disabled added to display output
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series pre-Version 6.1.1.0
Introduced for E-Series
Example Figure 15-19.
show ip protocols Command Example
FTOS#show ip protocols
Routing Protocol is "bgp 1"
Cluster Id is set to 20.20.20.3
Router Id is set to 20.20.20.3
Fast-external-fallover enabled
Regular expression evaluation optimization enabled
Capable of ROUTE_REFRESH
For Address Family IPv4 Unicast
BGP table version is 0, main routing table version 0
Distance: external 20 internal 200 local 200
Neighbor(s):
Address : 20.20.20.2
Filter-list in : foo
Route-map in : foo
Weight : 0
Address : 5::6
Weight : 0
FTOS# show ip route c e s View information, including how they were learned, about the IP routes on the switch.
Syntax show ip route [vrf [vrf name] hostname | ip-address [ mask ] [ longer-prefixes ] | list prefix-list | protocol [ process-id | routing-tag ] | all | connected | static | summary ]
Parameter vrf name ip-address mask longer-prefixes list prefix-list
E-Series Only : Clear only the route entries tied to the VRF process.
(OPTIONAL) Specify a name of a device or the IP address of the device to view more detailed information about the route.
(OPTIONAL) Specify the network mask of the route. Use this parameter with the IP address parameter.
(OPTIONAL) Enter the keyword longer-prefixes to view all routes with a common prefix.
(OPTIONAL) Enter the keyword list and the name of a configured prefix list.
See
.
552 | IPv4 Routing
protocol process-id routing-tag connected all static
(OPTIONAL) Enter the name of a routing protocol ( bgp , isis , ospf , rip ) or the keywords connected or static . bgp , isis , ospf , rip are E-Series-only options.
If you enter bgp, you can include the BGP as-number . (E-Series only)
If you enter isis , you can include the ISIS routing-tag . (E-Series only)
If you enter ospf , you can include the OSPF process-id .
(OPTIONAL) Specify that only OSPF routes with a certain process ID must be displayed.
(OPTIONAL) Specify that only ISIS routes with a certain routing tag must be displayed.
(OPTIONAL) Enter the keyword connected to view only the directly connected routes.
(OPTIONAL) Enter the keyword all to view both active and non-active routes.
(OPTIONAL) Enter the keyword static to view only routes configured by the
(OPTIONAL) Enter the keyword summary.
.
Command Modes summary
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced VRF on the E-Series
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Figure 15-20.
show ip route all Command Example
FTOS#show ip route all
Codes: C - connected, S - static, R - RIP
B - BGP, IN - internal BGP, EX - external BGP, LO - Locally Originated
O - OSPF, IA - OSPF inter area N1 - OSPF NSSA external type 1
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default
> - non-active route + - summary route
Gateway of last resort is not set
Destination Gateway Dist/Metric Last Change
----------- ------- ----------- -----------
R 3.0.0.0/8 via 100.10.10.10, So 2/8 120/1 00:07:12
via 101.10.10.10, So 2/9
C 100.10.10.0/24 Direct, So 2/8 0/0 00:08:54
> R 100.10.10.0/24 Direct, So 2/8 120/0 00:08:54
C 101.10.10.0/24 Direct, So 2/9 0/0 00:09:15
> R 101.10.10.0/24 Direct, So 2/9 120/0 00:09:15
FTOS#
IPv4 Routing | 553
Example Figure 15-21.
show ip route summary and show ip route static Command Examples
FTOS#show ip route summary
Route Source Active Routes Non-active Routes connected 2 0 static 1 0
Total 3 0
Total 3 active route(s) using 612 bytes
R1_E600i>show ip route static ?
| Pipe through a command
<cr>
R1_E600i>show ip route static
Destination Gateway Dist/Metric Last Change
----------- ------- ----------- -----------
*S 0.0.0.0/0 via 10.10.91.9, Gi 1/2 1/0 3d2h
FTOS>
Table 15-14.
show ip route all Command Example Fields
Field
(undefined)
Destination
Gateway
Dist/Metric
Last Change
Description
Identifies the type of route:
•
•
•
•
•
•
•
C = connected
S = static
R = RIP
B = BGP
IN = internal BGP
EX = external BGP
LO = Locally Originated
•
•
•
•
•
•
O = OSPF
IA = OSPF inter area
N1 = OSPF NSSA external type 1
N2 = OSPF NSSA external type 2
E1 = OSPF external type 1
E2 = OSPF external type 2 i = IS-IS
L1 = IS-IS level-1
•
•
•
•
L2 = IS-IS level-2
IA = IS-IS inter-area
• * = candidate default
• > = non-active route
• + = summary routes
Identifies the route’s destination IP address.
Identifies whether the route is directly connected and on which interface the route is configured.
Identifies if the route has a specified distance or metric.
Identifies when the route was last changed or configured.
show ip route list c e s Display IP routes in an IP prefix list.
Syntax show ip route list prefix-list
554 | IPv4 Routing
Parameters
Command Modes prefix-list
EXEC
EXEC Privilege
Enter the name of a configured prefix list.
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
Related
Commands
Example
Enter the CONFIGURATION-IP PREFIX-LIST mode and configure a prefix list.
Display a summary of the configured prefix lists.
Figure 15-22.
show ip route summary Command Example
FTOS#show ip route list test
Codes: C - connected, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
> - non-active route, + - summary route
Gateway of last resort is not set
Destination Gateway Dist/Metric Last Change
----------- ------- ----------- -----------
R 2.1.0.0/24 via 2.1.4.1, Gi 4/43 120/2 3d0h
R 2.1.1.0/24 via 2.1.4.1, Gi 4/43 120/2 3d1h
R 2.1.2.0/24 via 2.1.4.1, Gi 4/43 120/1 3d0h
R 2.1.3.0/24 via 2.1.4.1, Gi 4/43 120/1 3d1h
C 2.1.4.0/24 Direct, Gi 4/43 0/0 3d1h show ip route summary c e s View a table summarizing the IP routes in the switch.
Syntax show ip route summary
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced for E-Series
IPv4 Routing | 555
Example Figure 15-23.
show ip route summary Command Example
FTOS>show ip route summary
Route Source Active Routes Non-active Routes connected 17 0 static 3 0 ospf 100 1368 2
Intra-area: 762 Inter-area: 1 External-1: 600 External-2: 5
Total 1388 2
Total 1388 active route(s) using 222440 bytes
Total 2 non-active route(s) using 128 bytes
FTOS>
Table 15-15.
show ip route summary Column Headings
Description
Column Heading
Route Source
Active Routes
Non-active Routes ospf 100
Total 1388 active...
Identifies how the route is configured in FTOS.
Identifies the best route if a route is learned from two protocol sources.
Identifies the back-up routes when a route is learned by two different protocols. If the best route or active route goes down, the non-active route will become the best route.
If routing protocols (OSPF, RIP) are configured and routes are advertised, then information on those routes is displayed.
Displays the number of active and non-active routes and the memory usage of those routes.
If there are no routes configured in the FTOS, this line does not appear.
Related
Commands
Display information about the routes found in switch.
show ip traffic c e s View IP, ICMP, UDP, TCP and ARP traffic statistics.
Syntax show ip traffic [ all | cp | rp1 | rp2 ]
Note: These options are supported only on the E-Series.
Parameters all cp rp1 rp2
(OPTIONAL) Enter the keyword all to view statistics from all processors.
If you do not enter a keyword, you also view all statistics from all processors.
(OPTIONAL) Enter the cp to view only statistics from the Control Processor.
(OPTIONAL) Enter the keyword rp1 to view only the statistics from Route Processor 1.
(OPTIONAL) Enter the keyword rp2 to view only the statistics from Route Processor 2.
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
556 | IPv4 Routing
Example
Version 6.5.1.0
pre-Version 6.1.1.0
F10 Monitoring MIB available for ip traffic statistics
Introduced for E-Series
Figure 15-24.
show ip traffic Command Example (partial)
FTOS#show ip traffic
Control Processor IP Traffic:
IP statistics:
Rcvd: 23857 total, 23829 local destination
0 format errors, 0 checksum errors, 0 bad hop count
0 unknown protocol, 0 not a gateway
0 security failures, 0 bad options
Frags: 0 reassembled, 0 timeouts, 0 too big
0 fragmented, 0 couldn't fragment
Bcast: 28 received, 0 sent; Mcast: 0 received, 0 sent
Sent: 16048 generated, 0 forwarded
21 encapsulation failed, 0 no route
ICMP statistics:
Rcvd: 0 format errors, 0 checksum errors, 0 redirects, 0 unreachable
0 echo, 0 echo reply, 0 mask requests, 0 mask replies, 0 quench
0 parameter, 0 timestamp, 0 info request, 0 other
Sent: 0 redirects, 0 unreachable, 0 echo, 0 echo reply
0 mask requests, 0 mask replies, 0 quench, 0 timestamp
0 info reply, 0 time exceeded, 0 parameter problem
UDP statistics:
Rcvd: 0 total, 0 checksum errors, 0 no port
0 short packets, 0 bad length, 0 no port broadcasts, 0 socket full
Sent: 0 total, 0 forwarded broadcasts
TCP statistics:
Rcvd: 23829 total, 0 checksum errors, 0 no port
Sent: 16048 total
ARP statistics:
Rcvd: 156 requests, 11 replies
Sent: 21 requests, 10 replies (0 proxy)
Routing Processor1 IP Traffic:
Table 15-16.
show ip traffic output definitions
Keyword unknown protocol...
not a gateway...
security failures...
bad options...
Frags:
... reassembled
... timeouts
... too big
... couldn’t fragment
...encapsulation failed
Definition
No receiver for these packets. Counts those packets whose protocol type field is not recognized by FTOS.
Packets can not be routed; host/network is unreachable.
Counts the number of received unicast/multicast packets that could not be forwarded due to:
• route not found for unicast/multicast; ingress interfaces do not belong to the destination multicast group
• destination IP address belongs to reserved prefixes; host/network unreachable
Unrecognized IP option on a received packet.
IP fragments received.
Number of IP fragments that were reassembled.
Number of times a timer expired on a reassembled queue.
Number of invalid IP fragments received.
Number of packets that could not be fragmented and forwarded.
Counts those packets which could not be forwarded due to ARP resolution failure.
FTOS sends an arp request prior to forwarding an IP packet. If a reply is not received, FTOS repeats the request three times. These packets are counted in encapsulation failed.
Rcvd:
IPv4 Routing | 557
Table 15-16.
show ip traffic output definitions
Keyword
...short packets
...bad length
...no port broadcasts
...socket full
Definition
The number of bytes in the packet are too small.
The length of the packet was not correct.
The incoming broadcast/multicast packet did not have any listener.
The applications buffer was full and the incoming packet had to be dropped.
Usage
Information
The F10 Monitoring MIB provides access to the statistics described below.
Table 15-17.
F10 Monitoring MIB
Object Command Display
IP statistics:
Bcast:
Received
Sent
Mcast:
Received
Sent
ARP statistics:
Rcvd:
Request
Replies
Sent:
Request
Replies
Proxy f10BcastPktRecv f10BcastPktSent f10McastPktRecv f10McastPktSent f10ArpReqRecv f10ArpReplyRecv f10ArpReqSent f10ArpReplySent f10ArpProxySent
OIDs
1.3.6.1.4.1.6027.3.3.5.1.1
1.3.6.1.4.1.6027.3.3.5.1.2
1.3.6.1.4.1.6027.3.3.5.1.3
1.3.6.1.4.1.6027.3.3.5.1.4
1.3.6.1.4.1.6027.3.3.5.2.1
1.3.6.1.4.1.6027.3.3.5.2.3
1.3.6.1.4.1.6027.3.3.5.2.2
1.3.6.1.4.1.6027.3.3.5.2.4
1.3.6.1.4.1.6027.3.3.5.2.5
show protocol-termination-table e Display the IP Packet Termination Table (IPPTT).
Syntax show protocol-termination-table linecard number port-set port-pipe-number
Parameters linecard number Enter the keyword linecard followed by slot number of the line card.
E-Series Range: 0 to 13 on a E1200/1200i, 0 to 6 on a E600/E600i, and 0 to 5 on a E300 port-set followed by the line card’s Port-Pipe port-set port-pipe-number Enter number.
Range: 0 to 1
Defaults No default behavior or values
558 | IPv4 Routing
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.1.1.2
Version 8.1.1.0
Version 6.4.1.0
Introduced support for E-Series ExaScale E600i
Introduced on E-Series ExaScale
Introduced
Figure 15-25.
show protocol-termination-table Command Output
FTOS#show protocol-termination-table linecard 2 port-set 0
Index Protocol Src-Port Dst-Port Queue DP Blk-Hole VlanCPU EgPort
----- -------- -------- -------- ----- -- -------- ---------- ------
0 ICMP any any Q0 0 No - CP
1 UDP any 1812 Q7 6 No - CP
2 UDP any 68 Q7 6 No - CP
3 UDP any 67 Q7 6 No - CP
4 TCP any 22 Q7 6 No - CP
5 TCP 22 any Q7 6 No - CP
6 TCP 639 any Q7 6 No - RP2
7 TCP any 639 Q7 6 No - RP2
8 TCP 646 any Q7 6 No - RP1
9 TCP any 646 Q7 6 No - RP1
10 UDP 646 any Q7 6 No - RP1
11 UDP any 646 Q7 6 No - RP1
12 TCP 23 any Q7 6 No - CP
13 TCP any 23 Q7 6 No - CP
14 UDP any 123 Q7 6 No - CP
15 TCP any 21 Q7 6 No - CP
16 TCP any 20 Q7 6 No - CP
17 UDP any 21 Q7 6 No - CP
18 UDP any 20 Q7 6 No - CP
19 TCP 21 any Q7 6 No - CP
20 TCP 20 any Q7 6 No - CP
21 UDP 21 any Q7 6 No - CP
22 UDP 20 any Q7 6 No - CP
23 UDP any 69 Q7 6 No - CP
24 UDP 69 any Q7 6 No - CP
25 TCP any 161 Q7 6 No - CP
26 TCP 161 any Q7 6 No - CP
27 TCP 162 any Q7 6 No - CP
28 TCP any 162 Q7 6 No - CP
29 UDP any 161 Q7 6 No - CP
30 UDP 161 any Q7 6 No - CP
31 UDP any 162 Q7 6 No - CP
32 UDP 162 any Q7 6 No - CP
33 PIM-SM any any Q6 0 No - RP2
34 IGMP any any Q7 6 No - RP2
35 OSPF any any Q7 6 No - RP1
36 RSVP any any Q7 6 No - RP1
FTOS#
Usage
Information
Related
Commands
The IPPTT table is used for looking up forwarding information for IP control traffic destined to the router. For the listed control traffic types, IPPTT contains the information for the following:
• Which CPU to send the traffic (CP, RP1, or RP2)
• What QoS parameters to set
Display the CAM table show tcp statistics c e s View information on TCP traffic through the switch.
Syntax show tcp statistics { all | cp | rp1 | rp2 }
IPv4 Routing | 559
Parameters all Enter the keyword all to view all TCP information.
cp Enter to view only TCP information from the Control Processor.
rp1 rp2
Enter the keyword rp1 to view only TCP statistics from Route Processor 1.
Enter the keyword rp2 to view only TCP statistics from Route Processor 2.
EXEC Privilege Command Modes
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 6.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced
Figure 15-26.
show tcp statistics cp Command Example
FTOS#show tcp stat cp
Control Processor TCP:
Rcvd: 10585 Total, 0 no port
0 checksum error, 0 bad offset, 0 too short
329 packets (1263 bytes) in sequence
17 dup packets (6 bytes)
0 partially dup packets (0 bytes)
7 out-of-order packets (0 bytes)
0 packets ( 0 bytes) with data after window
0 packets after close
0 window probe packets, 41 window update packets
41 dup ack packets, 0 ack packets with unsend data
10184 ack packets (12439508 bytes)
Sent: 12007 Total, 0 urgent packets
25 control packets (including 24 retransmitted)
11603 data packets (12439677 bytes)
24 data packets (7638 bytes) retransmitted
355 ack only packets (41 delayed)
0 window probe packets, 0 window update packets
7 Connections initiated, 8 connections accepted, 15 connections established
14 Connections closed (including 0 dropped, 0 embryonic dropped)
20 Total rxmt timeout, 0 connections dropped in rxmt timeout
0 Keepalive timeout, 0 keepalive probe, 0 Connections dropped in keepalive
FTOS#
Table 15-18.
show tcp statistics cp Command Example Fields
Field
Rcvd:
0 checksum error...
329 packets...
17 dup...
0 partially...
7 out-of-order...
0 packets with data after window
0 packets after close
Description
Displays the number and types of TCP packets received by the switch.
• Total = total packets received
• no port = number of packets received with no designated port.
Displays the number of packets received with the following:
• checksum errors
• bad offset to data
• too short
Displays the number of packets and bytes received in sequence.
Displays the number of duplicate packets and bytes received.
Displays the number of partially duplicated packets and bytes received.
Displays the number of packets and bytes received out of order.
Displays the number of packets and bytes received that exceed the switch’s window size.
Displays the number of packet received after the TCP connection was closed.
560 | IPv4 Routing
Table 15-18.
show tcp statistics cp Command Example Fields (continued)
Field Description
0 window probe packets...
41 dup ack...
Displays the number of window probe and update packets received.
Displays the number of duplicate acknowledgement packets and acknowledgement packets with data received.
Displays the number of acknowledgement packets and bytes received.
10184 ack...
Sent:
25 control packets...
11603 data packets...
Displays the total number of TCP packets sent and the number of urgent packets sent.
Displays the number of control packets sent and the number retransmitted.
Displays the number of data packets sent.
24 data packets retransmitted Displays the number of data packets resent.
355 ack...
Displays the number of acknowledgement packets sent and the number of packet delayed.
0 window probe...
7 Connections initiated...
14 Connections closed...
20 Total rxmt...
0 Keepalive....
Displays the number of window probe and update packets sent.
Displays the number of TCP connections initiated, accepted, and established.
Displays the number of TCP connections closed, dropped.
Displays the number of times the switch tried to resend data and the number of connections dropped during the TCP retransmit timeout period.
Lists the number of keepalive packets in timeout, the number keepalive probes and the number of TCP connections dropped during keepalive.
IPv4 Routing | 561
562 | IPv4 Routing
16
IPv6 Access Control Lists (IPv6 ACLs)
Overview
IPv6 ACLs and IPv6 Route Map commands are supported on platforms c e s
•
•
Note:
For IPv4 ACL commands, see Chapter 6, Access Control Lists (ACL)
.
Important Points to Remember
• S-Series systems support Ingress IPv6 ACLs.
• The S60 supports both Ingress and Egress IPv6 ACLs.E-Series platforms require IPv6-ExtACL
CAM profile to support IPv6 ACLs.
• C-Series platforms require manual CAM usage space allotment. Refer to
document.
• Egress IPv6 ACL and IPv6 ACL on Loopback interface is not supported.
• Reference to an empty ACL will permit any traffic.
• ACLs are not applied to self-originated traffic (e.g. Control Protocol traffic not affected by IPv6
ACL since the routed bit is not set for Control Protocol traffic and for egress ACLs the routed bit must be set).
• The same access list name can be used for both IPv4 and IPv6 ACLs.
• Both IPv4 and IPv6 ACLs can be applied on an interface at the same time.
• IPv6 ACLs can be applied on physical interfaces and a logical interfaces (Port-channel/VLAN).
• Non-contiguous masks are not supported in source or destination addresses in IPv6 ACL entries.
• Since prefix mask is specified in /x format in IPv6 ACLs, inverse mask is not supported.
IPv6 ACL Commands
The following commands configure IPv6 ACLs:
•
•
clear counters ipv6 access-group
•
•
•
•
IPv6 Access Control Lists (IPv6 ACLs) | 563
•
•
•
•
•
•
•
•
•
•
•
•
•
show ipv6 accounting access-list
•
•
cam-acl c s Allocate space for IPv6 ACLs.
Syntax cam-acl { default | l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10 }
Parameters default l2acl 1-10 ipv4acl 1-10 ipv6acl 0-10 ipv4qos 1-10 l2qos 1-10
Use the default CAM profile settings, and set the CAM as follows.
L3 ACL (ipv4acl): 6
L2 ACL(l2acl) : 5
IPv6 L3 ACL (ipv6acl): 0
L3 QoS (ipv4qos): 1
L2 QoS (l2qos): 1
Allocate space to support IPv6 ACLs. You must enter all of the profiles and a range.
Enter the CAM profile name followed by the amount to be allotted.
The total space allocated must equal 13.
The ipv6acl range must be a factor of 2.
Command Modes
Command
History
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Introduced on the S60.
Introduced on the S-Series
Introduced on the C-Series
You must save the new CAM settings to the startup-config ( write-mem or copy run start ) then reload the system for the new settings to take effect.
The total amount of space allowed is 16 FP Blocks. System flow requires 3 blocks and these cannot be reallocated.
When configuring space for IPv6 ACLs, the total number of Blocks must equal 13.
564 | IPv6 Access Control Lists (IPv6 ACLs)
Ranges for the CAM profiles are 1-10, except for the ipv6acl profile which is 0-10. The ipv6acl allocation must be a factor of 2 (2, 4, 6, 8, 10).
clear counters ipv6 access-group c e s Erase all counters maintained for the IPv6 access lists.
Syntax clear counters ipv6 access-group [ access-list-name ]
Parameters access-list-name (OPTIONAL) Enter the name of a configured access-list, up to 140 characters.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Added monitor option
Usage
Information
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
deny c e s Configure a filter that drops IPv6 packets that match the filter criteria.
Syntax deny { ipv6-protocol-number | icmp | ipv6 | tcp | udp }
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny { ipv6-protocol-number | icmp | ipv6 | tcp | udp } command.
Parameters ip-protocol-number icmp ipv6 tcp udp
Enter an IPv6 protocol number.
Range: 0 to 255
Enter the keyword icmp to deny Internet Control Message Protocol version 6.
Enter the keyword ipv6 to deny any Internet Protocol version 6.
Enter the keyword tcp to deny the Transmission Control protocol.
Enter the keyword udp to deny the User Datagram Protocol.
Defaults
Command Modes
Command
History
Not configured.
ACCESS-LIST
Version 8.2.1.0
Introduced support on the E-Series ExaScale
IPv6 Access Control Lists (IPv6 ACLs) | 565
Usage
Information
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the C-Series
Introduced support on the E-Series
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
deny icmp c e s Configure a filter to drop all or specific ICMP messages.
Syntax deny icmp { source address mask | any | host ipv6-address } { destination address | any | host ipv6-address } [ message-type ] [ count [ byte ]] | [ log ] [ monitor ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny icmp { source address mask | any | host ipv6-address } { destination address
| any | host ipv6-address } command.
Parameters source address mask any host ipv6-address destination address message-type count byte log monitor
Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
Enter a network mask in /prefix format ( /x ).
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
On the E-Series, enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type.
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults
Command Modes
Not configured
ACCESS-LIST
566 | IPv6 Access Control Lists (IPv6 ACLs)
Command
History
Usage
Information
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Added monitor option
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
The following table lists the keywords displayed in the CLI help and their corresponding ICMP
Message Type Name.
Table 16-1.
ICMP Message Type Keywords
Keyword dest-unreachable echo
ICMP Message Type Name
Destination unreachable
Echo request (ping) inverse-nd-na inverse-nd-ns log mobile-advertisement mobile-solicitation mrouter-advertisement mrouter-solicitation mrouter-termination nd-na nd-ns packet-too-big parameter-problem
Inverse neighbor discovery advertisement
Inverse neighbor discovery solicitation
Log matches against this entry
Mobile prefix advertisement
Mobile prefix solicitation
Multicast router advertisement
Multicast router solicitation
Multicast router termination
Neighbor advertisement
Neighbor solicitation
Packet is too big
Parameter problems router-renumbering router-solicitation time-exceeded
All routers renumbering
Neighbor discovery router solicitation
All time exceeded deny tcp c e s Configure a filter that drops TCP packets that match the filter criteria.
Syntax deny tcp { source address mask | any | host ipv6-address } [ operator port [ port ]] { destination address | any | host ipv6-address } [ bit ] [ operator port [ port ]] [ count [ byte ]] | [ log ] [ monitor ]
IPv6 Access Control Lists (IPv6 ACLs) | 567
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny tcp { source address mask | any | host ipv6-address } { destination address | any | host ipv6-address } command.
source address mask any host ipv6-address operator port destination address bit byte port count
Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
Enter a network mask in /prefix format ( /x ).
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
•
•
•
•
•
(OPTIONAL) Enter one of the following logical operand: eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port command parameter.
Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP
Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
Enter a flag or combination of bits: ack: acknowledgement field fin : finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
568 | IPv6 Access Control Lists (IPv6 ACLs)
log monitor
(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults
Command Modes
Command
History
Not configured.
ACCESS-LIST
Usage
Information
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Added monitor option
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators ( gt , lt , range ) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
Assign a filter to deny IP traffic.
Assign a filter to deny UDP traffic.
IPv6 Access Control Lists (IPv6 ACLs) | 569
deny udp c e s Configure a filter to drop UDP packets meeting the filter criteria.
Syntax deny udp { source address mask | any | host ipv6-address } [ operator port [ port ]] { destination address | any | host ipv6-address } [ operator port [ port ]] [ count [ byte ]] | [ log ] [ monitor ]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no deny udp { source address mask | any | host ipv6-address } { destination address
| any | host ipv6-address } command.
source address mask any host ipv6-address operator port byte log port destination address count monitor
Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
Enter a network mask in /prefix format ( /x ).
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
•
•
•
•
•
(OPTIONAL) Enter one of the following logical operand: eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports
(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535
Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults
Command Modes
Not configured.
ACCESS-LIST
570 | IPv6 Access Control Lists (IPv6 ACLs)
Command
History
Usage
Information
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Added monitor option
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators ( gt , lt , range ) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.
For example, an ACL rule with TCP port range 4000 - 8000 will use 8 entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
Assign a deny filter for IP traffic.
Assign a deny filter for TCP traffic.
ipv6 access-group c e s Assign an IPv6 access-group to an interface.
Syntax ipv6 access-group access-list-name { in | out } [ implicit-permit ] [ vlan range ]
To delete an IPv6 access-group configuration, use the no ipv6 access-group access-list-name { in }
[ implicit-permit ] [ vlan range ] command.
Parameters access-list-name in | out
Enter the name of a configured access list, up to 140 characters.
Enter either the keyword in or out to apply the IPv6 ACL to incoming traffic
(ingress) or outgoing traffic (egress).
IPv6 Access Control Lists (IPv6 ACLs) | 571
implicit-permit vlan range
(OPTIONAL) Enter the keyword implicit-permit to change the default action of the IPv6 ACL from implicit-deny to implicit-permit (that is, if the traffic does not match the filters in the IPv6 ACL, the traffic is permitted instead of dropped).
(OPTIONAL) Enter the keyword vlan followed by the VLAN range in a comma separated format.
Range: 1 to 4094
Defaults
Command Modes
Command
History
Disabled
INTERFACE
Usage
Information
Example
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced support on the E-Series
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
You can assign an IPv6 access group to a physical, LAG, or VLAN interface context.
Figure 16-1.
Command Example: ipv6 access-group
FTOS(conf-if-gi-9/0)# ipv6 access-group AclList1 in implicit-permit vlan 10-20
FTOS(conf-if-gi-9/0)#show config
!
interface GigabitEthernet 9/0
no ip address
ipv6 access-group AclList1 in implicit-permit Vlan 10-20
no shutdown
FTOSconf-if-gi-9/0)# ipv6 access-list c e s Configure an access list based on IPv6 addresses or protocols.
Syntax ipv6 access-list access-list-name
To delete an access list, use the no ipv6 access-list access-list-name command.
Parameters access-list-name Enter the as the access list name as a string, up to 140 characters.
Defaults
Command Modes
Command
History
All access lists contain an implicit “deny any”; that is, if no match occurs, the packet is dropped.
CONFIGURATION
Version 8.3.3.1
Version 8.2.1.0
Introduced support on the S60.
Introduced support on the E-Series ExaScale
572 | IPv6 Access Control Lists (IPv6 ACLs)
Usage
Information
Related
Commands
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced support on the E-Series
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
The number of entries allowed per ACL is hardware-dependent. Refer to your line card documentation for detailed specification on entries allowed per ACL.
View the current configuration.
permit c e s Select an IPv6 protocol number, ICMP, IPv6, TCP, or UDP to configure a filter that match the filter criteria.
Syntax permit { ipv6-protocol-number | icmp | ipv6 | tcp | udp }
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit { ipv6-protocol-number | icmp | ipv6 | tcp | udp } command.
Parameters ip-protocol-number
Defaults
Command Modes
Command
History icmp ipv6 tcp udp
Not configured.
ACCESS-LIST
Enter an IPv6 protocol number.
Range: 0 to 255
Enter the keyword icmp to filter Internet Control Message Protocol version 6.
Enter the keyword ipv6 to filter any Internet Protocol version 6.
Enter the keyword tcp to filter the Transmission Control protocol.
Enter the keyword udp to filter the User Datagram Protocol.
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the S60.
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced support on the E-Series
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
IPv6 Access Control Lists (IPv6 ACLs) | 573
permit icmp c e s Configure a filter to allow all or specific ICMP messages.
Syntax permit icmp { source address mask | any | host ipv6-address } { destination address | any | host ipv6-address } [ message-type ] [ count [ byte ]] | [ log ] [ monitor ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit icmp { source address mask | any | host ipv6-address } { destination address | any | host ipv6-address } command.
Parameters source address mask any host ipv6-address destination address message-type count byte log monitor
Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
Enter a network mask in /prefix format ( /x ).
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type.
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword log to have the information kept in an ACL log file.
(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults
Command Modes
Command
History
Not configured
ACCESS-LIST
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Added monitor option
Usage
Information
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
574 | IPv6 Access Control Lists (IPv6 ACLs)
The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
permit tcp c e s Configure a filter to pass TCP packets that match the filter criteria.
Syntax permit tcp { source address mask | any | host ipv6-address } [ operator port [ port ]] { destination address | any | host ipv6-address } [ bit ] [ operator port [ port ]] [ count [ byte ]] | [ log ] [ monitor ]
Parameters
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit tcp { source address mask | any | host ipv6-address } { destination address
| any | host ipv6-address } command.
source address mask any host ipv6-address operator port port destination address
Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
Enter a network mask in /prefix format ( /x ).
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
•
•
•
•
•
(OPTIONAL) Enter one of the following logical operand: eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two port for the port parameter.)
Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535.
The following list includes some common TCP port numbers:
23 = Telnet
20 and 21 = FTP
25 = SMTP
169 = SNMP
Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
IPv6 Access Control Lists (IPv6 ACLs) | 575
bit count byte log monitor
Enter a flag or combination of bits: ack: acknowledgement field fin : finish (no more data from the user) psh: push function rst: reset the connection syn: synchronize sequence numbers urg: urgent field
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults
Command Modes
Command
History
Not configured.
ACCESS-LIST
Usage
Information
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Added monitor option
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators ( gt , lt , range ) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.
576 | IPv6 Access Control Lists (IPv6 ACLs)
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
Assign a permit filter for IPv6 packets.
Assign a permit filter for UDP packets.
permit udp c e s Configure a filter to pass UDP packets meeting the filter criteria.
Syntax permit udp { source address mask | any | host ipv6-address } [ operator port [ port ]] { destination address | any | host ipv6-address } [ operator port [ port ]] [ count [ byte ]] | [ log ] [ monitor ]
To remove this filter, you have two choices:
• Use the no seq sequence-number command syntax if you know the filter’s sequence number or
• Use the no permit udp { source address mask | any | host ipv6-address } { destination address | any | host ipv6-address } command.
Parameters source address mask any host ipv6-address
Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
Enter a network mask in /prefix format ( /x ).
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
IPv6 Access Control Lists (IPv6 ACLs) | 577
operator port destination address count byte log port monitor
•
•
•
•
•
(OPTIONAL) Enter one of the following logical operand: eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port parameter.)
(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535
Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults
Command Modes
Command
History
Not configured.
ACCESS-LIST
Usage
Information
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Added monitor option
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
The C-Series cannot count both packets and bytes, so when you enter the count byte options, only bytes are incremented.
Most ACL rules require one entry in the CAM. However, rules with TCP and UDP port operators ( gt , lt , range ) may require more than one entry. The range of ports is configured in the CAM based on bitmask boundaries; the space required depends on exactly what ports are included in the range.
578 | IPv6 Access Control Lists (IPv6 ACLs)
For example, an ACL rule with TCP port range 4000 - 8000 uses 8 entries in the CAM:
Rule# Data Mask From To #Covered
1 0000111110100000 1111111111100000 4000 4031 32
2 0000111111000000 1111111111000000 4032 4095 64
3 0001000000000000 1111100000000000 4096 6143 2048
4 0001100000000000 1111110000000000 6144 7167 1024
5 0001110000000000 1111111000000000 7168 7679 512
6 0001111000000000 1111111100000000 7680 7935 256
7 0001111100000000 1111111111000000 7936 7999 64
8 0001111101000000 1111111111111111 8000 8000 1
Total Ports: 4001
But an ACL rule with TCP port lt 1023 takes only one entry in the CAM:
Rule# Data Mask From To #Covered
1 0000000000000000 1111110000000000 0 1023 1024
Total Ports: 1024
Related
Commands
Assign a permit filter for IP packets.
Assign a permit filter for TCP packets.
remark c e s Enter a description for an IPv6 ACL entry.
Syntax remark remark number [ description ]
To delete the description, use the no remark remark number command (it is not necessary to include the remark description that you are deleting).
Parameters remark number description
Enter the remark number. Note that the same sequence number can be used for the remark and an ACL rule.
Range: 0 to 4294967290
Enter a description of up to 80 characters.
Defaults
Command Modes
Command
History
Not configured
ACCESS-LIST
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
IPv6 Access Control Lists (IPv6 ACLs) | 579
Example Figure 16-2.
Command Example: remark
FTOS(config-ipv6-acl)# remark 10 Remark for Entry # 10
FTOS(config-ipv6-acl)#show config
!
ipv6 access-list Acl1
description IPV6 Access-list
seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes remark 10 Remark for Entry # 10
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 100 count
!FTOS(config-ipv6-acl)#
Usage
Information
Related
Commands
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
As shown in the example above, the same sequence number is used for the remark and an ACL rule.
The remark will precede the rule in the running-configuration because it is assumed that the remark is for that rule or that group of rules that follow the remark. You can configure up to 4294967290 remarks in a given ACL.
Display the current ACL configuration.
resequence access-list c e s Re-assign sequence numbers to entries of an existing access-list.
Syntax resequence access-list { ipv4 | ipv6 | mac } { access-list-name StartingSeqNum
Step-to-Increment }
Parameters ipv4 |ipv6 | mac access-list-name
StartingSeqNum
Step-to-Increment
Enter the keyword ipv4, ipv6 or mac to identify the access list type to resequence.
Enter the name of a configured IP access list, up to 140 characters.
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Enter the starting sequence number to resequence.
Range: 0 - 4294967290
Enter the step to increment the sequence number.
Range: 1 - 4294967290
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
580 | IPv6 Access Control Lists (IPv6 ACLs)
Usage
Information
Related
Commands
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing access-list.
Resequence a prefix list resequence prefix-list ipv6 c e s Re-assign sequence numbers to entries of an existing prefix list.
Syntax resequence prefix-list ipv6 { prefix-list-name StartingSeqNum Step-to-increment }
Parameters prefix-list-name
StartingSeqNum
Step-to-Increment
Enter the name of configured prefix list, up to 140 characters.
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Enter the starting sequence number to resequence.
Range: 0 – 65535
Enter the step to increment the sequence number.
Range: 1 – 65535
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Usage
Information
Related
Commands
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
When all sequence numbers have been exhausted, this feature permits re-assigning new sequence number to entries of an existing prefix list.
Resequence an access-list
IPv6 Access Control Lists (IPv6 ACLs) | 581
seq c e s Assign a sequence number to a deny or permit filter in an IPv6 access list while creating the filter.
Syntax seq sequence-number { deny | permit } { ipv6-protocol-number | icmp | ip | tcp | udp } { source address mask | any | host ipv6-address } { destination address | any | host ipv6-address }
[ operator port [ port ]] [ count [ byte ]] | [ log ] [ monitor ]
To delete a filter, use the no seq sequence-number command.
Parameters sequence-number deny permit ipv6-protocol-number icmp ipv6 tcp udp source address mask any host ipv6-address operator port port
Enter a number from 0 to 4294967290.
Enter the keyword deny to configure a filter to drop packets meeting this condition.
Enter the keyword permit to configure a filter to forward packets meeting this criteria.
Enter an IPv6 protocol number.
Range: 0 to 255
Enter the keyword icmp to configure an Internet Control Message Protocol version 6 filter.
Enter the keyword ipv6 to configure any Internet Protocol version 6 filter.
Enter the keyword tcp to configure a Transmission Control protocol filter.
Enter the keyword udp to configure a User Datagram Protocol filter.
Enter the IPv6 address of the network or host from which the packets were sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
Enter a network mask in /prefix format ( /x ).
Enter the keyword any to specify that all routes are subject to the filter.
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
•
•
•
(OPTIONAL) Enter one of the following logical operands:
•
• eq = equal to neq = not equal to gt = greater than lt = less than range = inclusive range of ports (you must specify two ports for the port parameter.)
(OPTIONAL) Enter the application layer port number. Enter two port numbers if using the range logical operand.
Range: 0 to 65535
The following list includes some common TCP port numbers:
• 23 = Telnet
• 20 and 21 = FTP
• 25 = SMTP
• 169 = SNMP
582 | IPv6 Access Control Lists (IPv6 ACLs)
destination address message-type count byte log monitor
Enter the IPv6 address of the network or host to which the packets are sent in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zero.
(OPTIONAL) Enter an ICMP message type, either with the type (and code, if necessary) numbers or with the name of the message type.
Range: 0 to 255 for ICMP type; 0 to 255 for ICMP code
(OPTIONAL) Enter the keyword count to count packets processed by the filter.
(OPTIONAL) Enter the keyword byte to count bytes processed by the filter.
(OPTIONAL) Enter the keyword log to enter ACL matches in the log.
Supported on Jumbo-enabled line cards only.
(OPTIONAL) Enter the keyword monitor to monitor traffic on the monitoring interface specified in the flow-based monitoring session along with the filter operation.
Defaults
Command Modes
Command
History
Not configured.
ACCESS-LIST
Usage
Information
Related
Commands
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Added monitor option
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
Configure a filter to drop packets.
Configure a filter to forward packets.
show cam-acl c s Show space allocated for IPv6 ACLs.
Syntax show cam-acl
Command Modes EXEC
EXEC Privileged
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on the C-Series
Related
Commands
Configure CAM profiles to support IPv6 ACLs
IPv6 Access Control Lists (IPv6 ACLs) | 583
Examples Figure 16-3.
Command Example: show cam-acl (default profile)
FTOS# show cam-acl
-- Chassis Cam ACL --
Current Settings(in block sizes)
L2Acl : 5
Ipv4Acl : 6
Ipv6Acl : 0
Ipv4Qos : 1
L2Qos : 1
-- Line card 4 --
Current Settings(in block sizes)
L2Acl : 5
Ipv4Acl : 6
Ipv6Acl : 0
Ipv4Qos : 1
L2Qos : 1
FTOS#show cam-acl
Figure 16-4.
Command Example: show cam-acl (manually set profiles)
FTOS# show cam-acl
-- Chassis Cam ACL --
Current Settings(in block sizes)
L2Acl : 2
Ipv4Acl : 2
Ipv6Acl : 4
Ipv4Qos : 2
L2Qos : 3
-- Line card 4 --
Current Settings(in block sizes)
L2Acl : 2
Ipv4Acl : 2
Ipv6Acl : 4
Ipv4Qos : 2
L2Qos : 3
FTOS#show cam-acl show config c e s View the current IPv6 ACL configuration.
Syntax show config
Command Modes ACCESS-LIST
Command
History
Version 8.2.1.0
Version 7.8.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Usage
Information
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
584 | IPv6 Access Control Lists (IPv6 ACLs)
Example Figure 16-5.
Command Example: show config
FTOS(conf-ipv6-acl)# show config
!
ipv6 access-list Acl1
seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 100 count
FTOS(conf-ipv6-acl)# show ipv6 accounting access-list c e s View the IPv6 access-lists created on the E-Series and the sequence of filters.
Syntax show ipv6 accounting {access-list access-list-name | cam_count} interface interface
Parameters access-list-name cam_count interface interface
Enter the name of the ACL to be displayed, up to 140 characters.
List the count of the CAM rules for this ACL.
Enter the keyword interface followed by the interface type and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 255 for TeraScale and ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Command Modes EXEC
EXEC Privilege
Command
History
Usage
Information
Example
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced support on the E-Series
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
Figure 16-6.
Command Example: show ipv6 accounting access-lists
FTOS# show ipv6 accounting access-list
!
Ingress IPv6 access list AclList1 on GigabitEthernet 9/0
Total cam count 15
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 101 count (0 packets)
!
FTOS#
IPv6 Access Control Lists (IPv6 ACLs) | 585
Table 16-2.
show ip accounting access-lists Command Example Field
Field
“Ingress IPv6...”
“seq 10 ...”
Description
Displays the name of the IPv6 ACL, in this example “AclList1”.
Displays the filter. If the keywords count or byte were configured in the filter, the number of packets or bytes processed by the filter is displayed at the end of the line.
show running-config acl c e s Display the ACL running configuration.
Syntax show running-config acl
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Usage
Information
Example
The S-Series supports Ingress IPv6 ACLs.
The S60 supports both Ingress and Egress IPv6 ACLs.
Figure 16-7.
Command Example: show running-config acl
FTOS# show running-config acl
!
ip access-list extended ext-acl1
!
ip access-list standard std-acl1
!
ipv6 access-list Acl1
description IPV6 Access-list
seq 5 permit ipv6 1111::2222/127 host 3333::1111 log count bytes
remark 10 Remark for Entry # 10
seq 10 permit icmp host 3333:: any mobile-advertisement log
seq 15 deny tcp any any rst
seq 20 permit udp any any gt 100 count
!FTOS# test cam-usage c e Verify that enough ACL CAM space is available for the IPv6 ACLs you have created.
Syntax test cam-usage service-policy input input policy name linecard { number | all }
586 | IPv6 Access Control Lists (IPv6 ACLs)
Parameters policy-map name number
Enter the name of the policy-map to verify.
Enter all to get information for all the linecards, or enter the linecard number to get information for a specific card.
Range : 0-6 for E-Series, 0-7 for C-Series
Defaults
Command Modes
None
EXEC Privilege
Command
History
Version 8.2.1.0
Version 7.8.1.0
Introduced support on the E-Series ExaScale
Introduced on C-Series and E-Series
Usage
Information
This command applies to both IPv4 and IPv6 CAM Profiles, but is best used when verifying QoS optimization for IPv6 ACLs.
QoS Optimization for IPv6 ACLs does not impact the CAM usage for applying a policy on a single (or the first of several) interfaces. It is most useful when a policy is applied across multiple interfaces; it can reduce the impact to CAM usage across subsequent interfaces.
Example The following example shows the output shown when using the test cam-usage command.
Figure 16-8.
Command Example: test cam-usage (C-Series)
FTOS# test cam-usage service-policy input LauraMapTest linecard all
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
------------------------------------------------------------------------------------------
2 | 1 | IPv4Flow | 232 | 0 | Allowed
2 | 1 | IPv6Flow | 0 | 0 | Allowed
4 | 0 | IPv4Flow | 232 | 0 | Allowed
4 | 0 | IPv6Flow | 0 | 0 | Allowed
FTOS#
FTOS# test cam-usage service-policy input LauraMapTest linecard 4 port-set 0
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
------------------------------------------------------------------------------------------
4 | 0 | IPv4Flow | 232 | 0 | Allowed
4 | 0 | IPv6Flow | 0 | 0 | Allowed
FTOS#
FTOS0#test cam-usage service-policy input LauraMapTest linecard 2 port-set 1
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM per Port | Status
------------------------------------------------------------------------------------------
2 | 1 | IPv4Flow | 232 | 0 | Allowed
2 | 1 | IPv6Flow | 0 | 0 | Allowed
FTOS#
IPv6 Access Control Lists (IPv6 ACLs) | 587
Table 16-3.
Output Explanations: test cam-usage
Term
Linecard
Portpipe
CAM Partition
Available CAM
Estimated CAM per Port
Status
Explanation
Lists the line card or line cards that are checked. Entering all shows the status for line cards in the chassis
Lists the portpipe (port-set) or port pipes (port-sets) that are checked.
Entering all shows the status for line cards and port-pipes in the chassis.
Shows the CAM profile of the CAM
Identifies the amount of CAM space remaining for that profile
Estimates the amount of CAM space the listed policy will require.
Indicates whether or not the policy will be allowed in the CAM
IPv6 Route Map Commands
The following commands allow you to configure route maps and their redistribution criteria.
•
•
•
•
•
•
•
match ipv6 address c e Configure a filter to match routes based on IPv6 addresses specified in an access list.
Syntax match ipv6 address prefix-list-name
To delete a match, use the no match ipv6 address prefix-list-name command.
Parameters prefix-list-name Enter the name of IPv6 prefix list, up to 140 characters.
Defaults
Command Modes
Not configured.
ROUTE-MAP
Command
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced support on the E-Series
588 | IPv6 Access Control Lists (IPv6 ACLs)
Related
Commands
match ipv6 next-hop match ipv6 route-source
Redistribute routes that match the next-hop IP address.
Redistribute routes that match routes advertised by other routers.
match ipv6 next-hop c e Configure a filter which matches based on the next-hop IPv6 addresses specified in the IPv6 prefix list.
Syntax match ipv6 next-hop prefix-list prefix-list-name
To delete a match, use the no match ipv6 next-hop prefix-list prefix-list-name command.
Parameters prefix-list prefix-list-name Enter the keywords prefix-list followed by the name of configured prefix list, up to 140 characters.
Defaults
Command Modes
Not configured.
ROUTE-MAP
Command
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced support on the E-Series
Related
Commands
Redistribute routes that match an IP address.
Redistribute routes that match routes advertised by other routers.
match ipv6 route-source c e Configure a filter which matches based on the routes advertised in the IPv6 prefix lists.
Syntax match ipv6 route-source prefix-list prefix-list-name
To delete a match, use the no match ipv6 route-source prefix-list prefix-list-name command.
Parameters prefix-list prefix-list-name Enter the keywords prefix-list followed by the name of configured prefix list, up to 140 characters.
Defaults
Command Modes
Command
History
Not configured.
ROUTE-MAP
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced support on the E-Series
IPv6 Access Control Lists (IPv6 ACLs) | 589
Related
Commands
Redistribute routes that match an IP address.
Redistribute routes that match the next-hop IP address.
route-map c e Designate a IPv6 route map name and enter the ROUTE-MAP mode.
Syntax route-map map-name
To delete a route map, use the no route-map map-name command.
Parameters map-name Enter a text string to name the route map, up to 140 characters.
Defaults
Command Modes
Command
History
Not configured
ROUTE-MAP
Example
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to 16 characters long.
Introduced support on the E-Series
Figure 16-9.
Command Example: route-map
FTOS(conf)# route-map Rmap1
FTOS(config-route-map)#match ?
… ip IP specific information ipv6 IPv6 specific information
…
Related
Commands
View the current configuration.
set ipv6 next-hop c e Configure a filter that specifies IPv6 address as the next hop.
Syntax set ipv6 next-hop ipv6-address
To delete the setting, use the no set ipv6 next-hop ipv6-address command.
Parameters ipv6-address Enter the IPv6 address in the x:x:x:x::x format.
Note: The :: notation specifies successive hexadecimal fields of zeros
Defaults
Command Modes
Not configured.
ROUTE-MAP
590 | IPv6 Access Control Lists (IPv6 ACLs)
Command
History
Usage
Information
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
The set ipv6 next-hop command is the only way to set an IPv6 Next-Hop.
show config c e View the current route map configuration.
Syntax show config
Command Modes ROUTE-MAP
Command
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
Example Figure 16-10.
Command Example: show config
FTOS(config-route-map)# show config
!
route-map Rmap1 permit 10
match ip address v4plist
match ipv6 address plist1
match ipv6 next-hop prefix-list plist2
match ipv6 route-source prefix-list plist3
set next-hop 1.1.1.1
set ipv6 next-hop 3333:2222::
FTOS(config-route-map)# show route-map c e View the current route map configurations.
Syntax show route-map
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced support on the E-Series ExaScale
Introduced support on the C-Series
Introduced support on the E-Series
IPv6 Access Control Lists (IPv6 ACLs) | 591
Example Figure 16-11.
Command Example: show route-map
FTOS# show route-map
!
route-map Rmap1, permit, sequence 10
Match clauses:
ip address: v4plist
ipv6 address: plist1
ipv6 next-hop prefix-lists: plist2
ipv6 route-source prefix-lists: plist3
Set clauses:
next-hop 1.1.1.1
ipv6 next-hop 3333:2222::
FTOS#
Related
Commands
Configure a route map.
592 | IPv6 Access Control Lists (IPv6 ACLs)
17
IPv6 Basics
Overview
IPv6 Basic Commands are supported on platforms c e and s as designated by the symbols beneath the commands
E-Series ExaScale supports IPv6 with FTOS 8.2.1.0 and later.
Note: The IPv6 basic commands are supported on all platforms. However, not all features are supported on all platforms. See the table in the FTOS Configuration guide to determine the
FTOS version that supports which features and platforms.
Commands
The IPv6 commands in the chapter are:
•
•
•
•
•
•
•
•
•
•
•
clear ipv6 fib c e s Clear (refresh) all FIB entries on a line card.
Syntax clear ipv6 fib linecard slot
Parameters slot Enter the slot number to clear the FIB for a line card.
Command Mode EXEC Privilege
IPv6 Basics | 593
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on C-Series and S-Series
Introduced clear ipv6 route c e s Clear (refresh) all or a specific route from the IPv6 routing table.
Syntax clear ipv6 route { * | ipv6-address prefix-length }
Parameters
* ipv6-address prefix-length
Enter the * to clear (refresh) all routes from the IPv6 routing table.
Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros
Command Mode EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on C-Series and S-Series
Introduced on E-Series ipv6 address c e s Configure an IPv6 address to an interface.
Syntax ipv6 address { ipv6-address prefix-length }
To remove the IPv6 address, use the no ipv6 address { ipv6-address prefix-length } command.
Parameters ipv6-address prefix-length
Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros
Defaults
Command Modes
Command
History
No default values or behavior
INTERFACE
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on C-Series and S-Series
Introduced
594 | IPv6 Basics
Example Figure 17-1.
Command Example: ipv6 address
FTOS(conf)#interface gigabitethernet 10/0
FTOS(conf-if-gi-10/0)#ipv6 address ?
X:X:X:X::X IPv6 address
FTOS(conf-if-gi-10/0)#ipv6 address 2002:1:2::3 ?
<0-128> Prefix length in bits
FTOS(conf-if-gi-10/0)#ipv6 address 2002:1:2::3 /96 ?
<cr>
FTOS(conf-if-gi-10/0)# ipv6 address 2002:1:2::3 /96
FTOS(conf-if-gi-10/0)#show config
!
interface GigabitEthernet 10/0
no ip address
ipv6 address 2002:1:2::3 /96
no shutdown
FTOS(conf-if-gi-10/0)#
Usage
Information
FTOS allows multiple IPv6 addresses to be configured on an interface. When the no ipv6 address command is issued without specifying a particular IPv6 address, all IPv6 addresses on that interface are deleted.
ipv6 route c e s Establish a static IPv6 route.
Syntax ipv6 route ipv6-address prefix-length { ipv6-address | interface | interface ipv6-address } [ distance ]
[ tag value ] [ permanent ]
To remove the IPv6 route, use the no ipv6 route ipv6-address prefix-length { ipv6-address | interface | interface ipv6-address } [ distance ] [ tag value ] [ permanent ] command.
Parameters ipv6-address prefix-length interface ipv6-address distance tag value permanent
Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a loopback interface, enter the keyword loopback followed by a number from zero (0) to 16383.
• For the null interface, enter the keyword null followed by zero (0).
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the forwarding router IPv6 address in the x:x:x:x::x format.
Note: The :: notation specifies successive hexadecimal fields of zeros
(OPTIONAL) Enter a number as the distance metric assigned to the route.
Range: 1 to 255
(OPTIONAL) Enter the keyword tag followed by a tag value number.
Range: 1 to 4294967295
(OPTIONAL) Enter the keyword permanent to specify that the route is not to be removed, even if the interface assigned to that route goes down.
Note: If you disable the interface with an IPv6 address associated with the keyword permanent , the route disappears from the routing table.
IPv6 Basics | 595
Defaults
Command Modes
Command
History
No default values or behavior
CONFIGURATION
Example
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on C-Series and S-Series
Introduced
Figure 17-2.
Command Example: ipv6 route
FTOS(conf)# ipv6 route 44::0 /64 33::1 ?
<1-255> Distance metric for this route permanent Permanent route tag Set tag for this route
FTOS(conf)#ipv6 route 55::0 /64 ?
X:X:X:X::X Forwarding router's address gigabitethernet Gigabit Ethernet interface loopback Loopback interface null Null interface port-channel Port channel interface sonet Sonet interface tenGigabitethernet TenGigabit Ethernet interface vlan VLAN interface
FTOS(conf)#ipv6 route 55::0 /64 gigabitethernet 9/0 ?
<1-255> Distance metric for this route
X:X:X:X::X Forwarding router's address permanent Permanent route tag Set tag for this route
FTOS(conf)#ipv6 route 55::0 /64 gigabitethernet 9/0 66::1 ?
<1-255> Distance metric for this route permanent Permanent route tag Set tag for this route
FTOS#
Usage
Information
Related
Commands
When the interface goes down, FTOS withdraws the route. The route is re-installed, by FTOS, when the interface comes back up. When a recursive resolution is “broken,” FTOS withdraws the route. The route is re-installed, by FTOS, when the recursive resolution is satisfied.
View the IPv6 configured routes.
ipv6 unicast-routing c e Enable IPv6 Unicast routing.
Syntax ipv6 unicast-routing
To disable unicast routing, use the no ipv6 unicast-routing command.
Defaults Enabled
596 | IPv6 Basics
Command Modes
Command
History
CONFIGURATION
Usage
Information
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced
Since this command is enabled by default, it does not appear in the running configuration. When unicast routing is disabled, the no ipv6 unicast-routing command is included in the running configuration. Whenever unicast routing is disabled or re-enabled, FTOS generates a syslog message indicating the action.
Disabling unicast routing on an E-Series chassis causes the following behavior:
• static and protocol learnt routes are removed from RTM and from the CAM; packet forwarding to these routes is terminated.
• connected routes and resolved neighbors remain in the CAM and new IPv6 neighbors are still discoverable
• additional protocol adjacencies (OSPFv3 and BGP4) are brought down and no new adjacencies are formed
• the IPv6 address family configuration (under router bgp ) is deleted
• IPv6 Multicast traffic continues to flow unhindered show ipv6 cam linecard c e Displays the IPv6 CAM entries for the specified line card.
Syntax show ipv6 cam linecard slot-number port-set { 0-1 } [summary | index | ipv6 address]
Parameters slot-number port-set summary index ipv6-address
Enter the line card slot ID number.
Range: 0 to 13 on the E1200; 0 on 6 for E600, and 0 to 5 on the E300.
Enter the Port Set to
(OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM.
(OPTIONAL) Enter the index in the IPv6 CAM
Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros.
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 8.2.1.0
Version 7.4.1.0
Version 7.8.1.0
Introduced on E-Series ExaScale
Introduced
Introduced on C-Series
IPv6 Basics | 597
Usage
Information
Examples
The forwarding table displays host route first, then displays route originated by routing protocol including static route.
The egress port section displays the egress port of the forwarding entry which is designated as:
C for the Control Processor
1 for the Route Processor 1
2 for the Route Processor 2
Figure 17-3.
Command Example: show ipv6 cam linecard fib (C or E-Series)
FTOS# show ipv6 cam linecard 13 fib
Neighbor Mac-Addr Port VId
---------------------------------------------- ----------------- --------- ----
[ 31] 2002:44:1:1::11 00:00:01:1a:1e:d5 Gi 13/2 0
Prefix Next-Hop Mac-Addr Port VId EC
------------------------------- ------------------------------- ----------------- --------- ---- --
[ 3147] 100::/64 [ 0] 2002:44:1:1::11 - Gi 0/0 0 1
[ 0] 2002:44:1:24::11 - Gi 0/0 0 1
[ 0] 2002:44:1:23::11 - Gi 0/0 0 1
[ 0] 2002:44:1:21::11 - Gi 0/0 0 1
[ 0] 2002:44:1:20::11 - Gi 0/0 0 1
[ 0] 2002:44:1:19::11 - Gi 0/0 0 1
FTOS#
Figure 17-4.
Command Example: show ipv6 cam linecard (C or E-Series)
FTOS# show ipv6 cam linecard 1 port-set 0
Neighbor Mac-Addr Port VId
--------------------------------------------------- ----------------- --------- ----
[ 0] fe80::201:e8ff:fe17:5cae 00:01:e8:17:5c:ae BLK 100
[ 1] fe80::201:e8ff:fe17:5bbe 00:01:e8:17:5b:be BLK 0
[ 2] fe80::201:e8ff:fe17:5bbd 00:01:e8:17:5b:bd BLK 0
[ 3] fe80::201:e8ff:fe17:5cb0 00:01:e8:17:5c:b0 BLK 0
[ 4] fe80::201:e8ff:fe17:5cae 00:01:e8:17:5c:ae BLK 1000
[ 5] fe80::201:e8ff:fe17:5caf 00:01:e8:17:5c:af BLK 0
Prefix First-Hop Mac-Addr Port VId EC
------------------------------------ ------------------------ ----------------- --------- ----
--
[ 80] 2222::2/128 [ 2] : 00:00:00:00:00:00 RP2 0 0
[ 81] 3333::2/128 [ 2] ::1 00:00:00:00:00:00 RP2 0 0
FTOS# show ipv6 cam stack-unit s Displays the IPv6 CAM entries for the specified stack-unit.
Syntax show ipv6 cam stack-unit unit-number port-set { 0-1 } [summary | index | ipv6 address]
598 | IPv6 Basics
Parameters
Defaults
Command Modes unit-number port-set summary index ipv6-address
Enter the stack unit’s ID number.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Enter the Port Set to
(OPTIONAL) Enter the keyword summary to display a table listing network prefixes and the total number prefixes which can be entered into the IPv6 CAM.
(OPTIONAL) Enter the index in the IPv6 CAM
Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros.
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced show ipv6 fib linecard c e View all Forwarding Information Base entries.
Syntax show ipv6 fib linecard slot-number { summary | ipv6-address}
Parameters slot-number summary ipv6-address
Enter the number of the line card slot.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300
(OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam.
Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros.
Command Mode EXEC
EXEC Privilege
Command
History
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on E-Series ExaScale
Introduced on C-Series and S-Series
Introduced
IPv6 Basics | 599
show ipv6 fib stack-unit s View all Forwarding Information Base entries.
Syntax show ipv6 fib stack-unit unit-number [ summary ] ipv6-address
Parameters slot-number summary ipv6-address
Enter the number of the stack unit.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
(OPTIONAL) Enter the keyword summary to view a summary of entries in IPv6 cam.
Enter the IPv6 address in the x:x:x:x::x/n format to display networks that have more specific prefixes.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros.
Command Mode EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on C-Series
Introduced show ipv6 interface c e s Display the status of interfaces configured for IPv6.
Syntax show ipv6 interface interface [brief] [configured] [gigabitethernet slot | slot/port ] [linecard slot-number ] [loopback interface-number ] [port-channel number ] [tengigabitethernet slot | slot/ port ] [vlan vlan-id ]
Parameters interface brief configured gigabitethernet linecard slot-number
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword Loopback followed by a number from 0 to 16383.
• For the Null interface, enter the keyword null followed by zero (0).
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) View a summary of IPv6 interfaces.
(OPTIONAL) View information on all IPv6 configured interfaces
(OPTIONAL) View information for an IPv6 gigabitethernet interface.
(OPTIONAL) View information for a specific IPv6 line card or S-Series stack-unit
Range: 0 to 13 on a E1200, 0 to 6 on a E600, and 0 to 5 on a E300.
Range: 0-7 for C-Series
Range 0-11 for S60, 0-7 for all other S-Series
600 | IPv6 Basics
Defaults
Command Modes loopback port-channel tengigabitethernet vlan
No default values or behavior
EXEC
EXEC Privilege
(OPTIONAL) View information for IPv6 loopback interfaces.
(OPTIONAL) View information for IPv6 port channels.
(OPTIONAL) View information for an IPv6 tengigabitethernet interface.
(OPTIONAL) View information for IPv6 VLANs.
Command
History
Example
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on C-Series
Introduced
Figure 17-5.
Command Example: show ipv6 interface
FTOS# show ipv6 interface gigabitethernet 1/1
GigabitEthernet 1/1 is up, line protocol is up
IPV6 is enabled
Link Local address: fe80::201:e8ff:fe04:62c4
Global Unicast address(es):
2001::1, subnet is 2001::/64
2002::1, subnet is 2002::/120
2003::1, subnet is 2003::/120
2004::1, subnet is 2004::/32
Global Anycast address(es):
Joined Group address(es):
ff02::1
ff02::2
ff02::1:ff00:1
ff02::1:ff04:62c4
MTU is 1500
ICMP redirects are not sent
DAD is enabled: number of DAD attempts: 1
ND reachable time is 30 seconds
ND advertised reachable time is 30 seconds
ND advertised retransmit interval is 30 seconds show ipv6 route c e s Displays the IPv6 routes.
Syntax show ipv6 route [ ipv6-address prefix-length ] [ hostname ] [ all ] [ bgp as number ] [ connected ]
[ isis tag ] [ list prefix-list name ] [ ospf process-id ] [ rip ] [ static ] [ summary ]
Parameter ipv6-address prefix-length hostname
(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros.
(OPTIONAL) View information for this IPv6 routes with Host Name
IPv6 Basics | 601
Defaults
Command Modes all bgp connected isis list ospf rip static summary
(OPTIONAL) View information for all IPv6 routes
(OPTIONAL) View information for all IPv6 BGP routes
(OPTIONAL) View only the directly connected IPv6 routes.
(OPTIONAL) View information for all IPv6 IS-IS routes
(OPTIONAL) View the IPv6 prefix list
(OPTIONAL) View information for all IPv6 OSPF routes
(OPTIONAL) View information for all IPv6 RIP routes
(OPTIONAL) View only routes configured by the ipv6 route
command.
(OPTIONAL) View a brief list of the configured IPv6 routes.
No default values or behavior
EXEC
EXEC Privilege
Command
History
Example
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on E-Series ExaScale
Introduced on C-Series and S=-Series
Introduced
Figure 17-6.
Command Example: show ipv6 route
FTOS# show ipv6 route
Codes: C - connected, L - local, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
Gateway of last resort is not set
Destination Dist/Metric, Gateway, Last Change
-----------------------------------------------------
C 2001::/64 [0/0]
Direct, Gi 1/1, 00:28:49
C 2002::/120 [0/0]
Direct, Gi 1/1, 00:28:49
C 2003::/120 [0/0]
Direct, Gi 1/1, 00:28:49
C 2004::/32 [0/0]
Direct, Gi 1/1, 00:28:49
L fe80::/10 [0/0]
Direct, Nu 0, 00:29:09
Example Figure 17-7.
Command Example: show ipv6 route summary
FTOS# show ipv6 route summary
Route Source Active Routes Non-active Routes connected 5 0 static 0 0
Total 5 0
Total 5 active route(s) using 952 bytes
602 | IPv6 Basics
Table 17-1.
show ipv6 route Command Example Fields
Field
(undefined)
Destination
Gateway
Dist/Metric
Last Change
Description
Identifies the type of route:
•
•
•
•
•
•
• L = Local
C = connected
S = static
R = RIP
B = BGP
IN = internal BGP
EX = external BGP
•
•
•
•
•
•
LO = Locally Originated
O = OSPF
IA = OSPF inter area
N1 = OSPF NSSA external type 1
N2 = OSPF NSSA external type 2
E1 = OSPF external type 1
E2 = OSPF external type 2 i = IS-IS
•
•
•
•
•
•
L1 = IS-IS level-1
L2 = IS-IS level-2
IA
*
= IS-IS inter-area
= candidate default
• > = non-active route
• + = summary routes
Identifies the route’s destination IPv6 address.
Identifies whether the route is directly connected and on which interface the route is configured.
Identifies if the route has a specified distance or metric.
Identifies when the route was last changed or configured.
trust ipv6-diffserv c e s Allows the dynamic classification of IPv6 DSCP.
Syntax trust ipv6-diffserv
To remove the definition, use the no trust ipv6-diffserv command.
Defaults This command has no default behavior or values.
Command Modes CONFIGURATION-POLICY-MAP-IN
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on E-Series ExaScale
Introduced on C-Series and S-Series
Introduced
IPv6 Basics | 603
Usage
Information
When trust IPv6 diffserv is configured, matched bytes/packets counters are not incremented in the show qos statistics command.
Trust diffserv (IPv4) can co-exist with trust ipv6-diffserv in an Input Policy Map. Dynamic classification happens based on the mapping detailed in the following table.
Table 17-2.
IPv6 -Diffserv Mapping
IPv6 Service Class Field
111XXXXX
110XXXXX
101XXXXX
100XXXXX
011XXXXX
010XXXXX
001XXXXX
000XXXXX
Queue ID
7
6
3
2
5
4
1
0
604 | IPv6 Basics
18
iSCSI Optimization
Overview
Internet Small Computer System Interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic on the following platforms as indicated: .
The following FTOS commands are used to configure and verify the iSCSI Optimization feature:
•
•
•
•
•
•
•
•
•
•
iscsi aging time
Set the aging time for iSCSI sessions.
Syntax
Parameters
Defaults
Command Mode
Command
History iscsi aging time time
To remove the iSCSI session aging time, use the no iscsi aging time command.
time Enter the aging time for the iSCSI session.
Range: 5 to 43,200 minutes.
10 minutes.
CONFIGURATION
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module iSCSI Optimization | 605
iscsi cos
Set the QoS policy that will be applied to the iSCSI flows.
Syntax
Parameters
Defaults
Command Modes
Command
History iscsi cos {enable | disable | dot1p vlan-priority-value [remark] | dscp dscp-value [remark]}
To disable the QoS policy, use the iscsi cos disable command. enable disable dot1p vlan-priority-value dscp dscp-value remark
Enter the keyword enable to allow the application of preferential QoS treatment to iSCSI traffic so that the iSCSI packets are scheduled in the switch with a dot1p priority 4 regardless of the VLAN priority tag in the packet.
Default: iSCSI packets are handled with dotp1 priority 4 without remark.
Enter the keyword disable to disable the application of preferential QoS treatment to iSCSI frames.
Enter the dot1p value of the VLAN priority tag assigned to the incoming packets in an iSCSI session.
Range: 0 to 7.
Default: The dot1p value in ingress iSCSI frames is not changed and is used in iSCSI TLV advertisements if you did not enter the iscsi priority-bits command.
Enter the DSCP value assigned to the incoming packets in an iSCSI session.
The valid range is 0 to 63.
Default: The DSCP value in ingress packets is not changed.
Marks the incoming iSCSI packets with the configured dot1p or DSCP value when they egress to the switch.
Default: The dot1and DSCP values in egress packets are not changed.
See above.
CONFIGURATION
Usage
Information
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module
By default, iSCSI flows are assigned to dot1p priority 4. Dell Networking recommends changing the dot1p priority-queue setting to 0 (zero). iscsi enable
Globally enable iSCSI optimization.
Syntax iscsi enable
To disable iSCSI optimization, use the no iscsi enable command.
Parameters enable Enter the keyword enable to enable the iSCSI optimization feature.
Defaults
Command Modes
Disabled.
CONFIGURATION
606 | iSCSI Optimization
Command
History
Usage
Information
Version 8.3.3.8
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S60
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module
• LLDP must be enabled before using this command.
• LLDP cannot be disabled if iSCSI is enabled.
iscsi priority-bits
Configure the priority bitmap to be advertised in iSCSI application TLVs.
Syntax
Defaults
Command Modes
Command
History iscsi priority-bits
To remove the configured priority bitmap, use the no iscsi priority-bits command.
4 (0x10 in the bitmap)
PROTOCOL LLDP (only on global, not on interface)
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module iscsi profile-compellent
Configure the auto-detection of Compellent arrays on a port.
Syntax
Defaults
Command Modes
Command
History iscsi profile-compellent
Compellent disk arrays are not detected.
INTERFACE
Version 8.3.5.3
Version 8.3.3.8
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S55
Introduced on the S60
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module iSCSI Optimization | 607
iscsi target port
Configure the iSCSI target ports and optionally, the IP addresses on which iSCSI communication will be monitored.
Syntax
Parameters iscsi target port [ tcp-port-2...tcp-port-16 ]ip-address [ ip-address ]
To remove the configured iSCSI target ports or IP addresses, use the no iscsi target port command.
tcp-port-2...tcpport-16 ip-address
Enter the tcp-port number of the iSCSI target ports.
The tcp-port-n is the TCP port number or a list of TCP port numbers on which the iSCSI target listens to requests. Separate port numbers with a comma.
Default: 860, 3260.
(Optional) Enter the ip-address that the iSCSI will monitor.
The ip-address specifies the IP address of the iSCSI target.
860, 3260.
CONFIGURATION
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module
You can configure up to 16 target TCP ports on the switch in one command or multiple commands.
When you use the no iscsi target port command and the TCP port to be deleted is one bound to a specific IP address, the IP address value must be included in the command.
show iscsi
Display the currently configured iSCSI settings.
Syntax
Command Mode show iscsi
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S4810. Support added for cam modification.
Introduced on MXL 10/40GbE Switch IO Module
FTOS#show iscsi iSCSI is enabled iSCSI session monitoring is disabled iSCSI COS : dot1p is 4 no-remark
Session aging time: 10
Maximum number of connections is 256
-----------------------------------------------iSCSI Targets and TCP Ports:
608 | iSCSI Optimization
Related
Commands
------------------------------------------------
TCP Port Target IP Address
3260
860
Display information on active iSCSI sessions on the switch.
Display detailed information on active iSCSI sessions on the switch.
show run iscsi show iscsi session
Display information on active iSCSI sessions on the switch.
Syntax
Command Mode show iscsi session
EXEC
EXEC Privilege
Command
History
Usage
Information
Example
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module
Only sessions observed by the switch will be learnt; sessions flowing through an adjacent switch will not be learnt. Session monitoring learns sessions that actually flow through the switch, it does not learn all sessions in the entire topology.
After a switch is reloaded, any information exchanged during the initial handshake is not available. If the switch picks up the communication after reloading, it would detect a session was in progress but could not obtain complete information for it. Any incomplete information of this type would not be available in the “show” commands.
FTOS# show isci session
Session 0:
-------------------------------------------------------------------------------------
Target: iqn.2001-05.com.equallogic:0-8a0906-0e70c2002-10a0018426a48c94-iom010
Initiator: iqn.1991-05.com.microsoft:win-x9l8v27yajg
ISID: 400001370000
Session 1:
-------------------------------------------------------------------------------------
Target: iqn.2001-05.com.equallogic:0-8a0906-0f60c2002-0360018428d48c94-iom011
Initiator: iqn.1991-05.com.microsoft:win-x9l8v27yajg
ISID: 400001370000.
Related
Commands
Display the currently configured iSCSI settings.
Display detailed information on active iSCSI sessions on the switch.
show run iscsi iSCSI Optimization | 609
show iscsi session detailed
Display detailed information on active iSCSI sessions on the switch.
Syntax
Parameters
Command Mode show iscsi session detailed [session isid ] isid Enter the session’s iSCSi ID to display detailed information on specified iSCSi session.
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module
FTOS# show isci session detailed
Session 0 :
-----------------------------------------------------------------------------
Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1
Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-2c
Up Time:00:00:01:28(DD:HH:MM:SS)
Time for aging out:00:00:09:34(DD:HH:MM:SS)
ISID:806978696102
Initiator Initiator Target Target Connection
IP Address TCP Port IP Address TCPPort ID
10.10.0.44 33345 10.10.0.101 3260 0
Session 1 :
-----------------------------------------------------------------------------
Target:iqn.2010-11.com.ixia:ixload:iscsi-TG1
Initiator:iqn.2010-11.com.ixia.ixload:initiator-iscsi-35
Up Time:00:00:01:22(DD:HH:MM:SS)
Time for aging out:00:00:09:31(DD:HH:MM:SS)
ISID:806978696102
Initiator Initiator Target Target Connection
IP Address TCP Port IP Address TCPPort ID
10.10.0.53 33432 10.10.0.101 3260 0
Related
Commands
Display the currently configured iSCSI settings.
Display information on active iSCSI sessions on the switch.
show run iscsi show run iscsi
Display all globally-configured non-default iSCSI settings in the current FTOS session.
Syntax
Command Mode
Command
History show run iscsi
EXEC Privilege
Version 8.3.3.8
Version 8.3.12.0
Version 8.3.16.0
Introduced on the S60.
Introduced on the S4810.
Introduced on MXL 10/40GbE Switch IO Module
610 | iSCSI Optimization
Example FTOS(conf) # show run iscsi
!
iscsi enable
FTOS(conf) # iSCSI Optimization | 611
612 | iSCSI Optimization
Link Aggregation Control Protocol (LACP)
19
Overview
This chapter contains commands for Dell Networking’s implementation of Link Aggregation Control
Protocol (LACP) for the creation of dynamic link aggregation groups (LAGs — called port-channels
in FTOS parlance). For static LAG commands, see the section Port Channel Commands
in the
Interfaces chapter), based on the standards specified in the IEEE 802.3 Carrier sense multiple access with collision detection (CSMA/CD) access method and physical layer specifications.
Commands in this chapter generally are supported on all three Dell Networking platforms — C-Series,
E-Series, and S-Series — as indicated by the following symbols under command headings: c e s
Commands
Use the following commands for LACP:
•
•
•
•
•
•
lacp ungroup member-independent
•
•
•
In addition, an FTOS option provides hitless dynamic LACP states (no noticeable impact to dynamic
LACP states after an RPM failover) on E-Series. clear lacp counters c e s Clear Port Channel counters.
Syntax clear lacp port channel-number counters
Parameters port channel-number Enter the Port Channel number to clear the counters.
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
Link Aggregation Control Protocol (LACP) | 613
Defaults
Command Modes
Without a Port Channel specified, the command clears all Port Channel counters.
EXEC
EXEC Privilege
Command
History
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Support added for S-Series
Support added for C-Series
Introduced on E-Series
Display the lacp configuration debug lacp c e s Debug LACP (configuration, events etc.)
Syntax debug lacp [config | events | pdu [in | out | [ interface [in | out]]]]
To disable LACP debugging, use the no debug lacp [config | events | pdu [in | out | [interface
[in | out]]]] command.
Parameters config events pdu in | out interface in | out
(OPTIONAL) Enter the keyword config to debug the LACP configuration.
(OPTIONAL) Enter the keyword events to debug LACP event information.
(OPTIONAL) Enter the keyword pdu to debug LACP Protocol Data Unit information. Optionally, enter an in or out parameter to:
• Receive enter in
• Transmit enter out
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Optionally, enter an in or out parameter:
• Receive enter in
• Transmit enter out
Defaults
Command Modes
Command
History
This command has no default values or behavior
EXEC
EXEC Privilege
Version 7.6.1.0
Support added for S-Series
614 | Link Aggregation Control Protocol (LACP)
Version 7.5.1.0
Version 6.2.1.1
Support added for C-Series
Introduced on E-Series lacp long-timeout c e Configure a long timeout period (30 seconds) for an LACP session.
Syntax lacp long-timeout
To reset the timeout period to a short timeout (1 second), use the no lacp long-timeout command.
Defaults 1 second
Command Modes INTERFACE (conf-if-ponumber )
Command
History
Version 7.6.1.0
Version 7.5.1.0
Version 7.5.1.0
Support added for S-Series
Support added for C-Series
Introduced on E-Series
Usage
Information
Related
Commands
This command applies to dynamic port-channel interfaces only. When applied on a static port-channel, the command has no effect.
Display the lacp configuration lacp port-priority c e s Configure the port priority to influence which ports will be put in standby mode when there is a hardware limitation that prevents all compatible ports from aggregating.
Syntax lacp port-priority priority-value
To return to the default setting, use the no lacp port-priority priority-value command.
Parameters priority-value Enter the port-priority value. The higher the value number the lower the priority.
Range: 1 to 65535
Default: 32768
Defaults
Command Modes
Command
History
32768
INTERFACE
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Support added for S-Series
Support added for C-Series
Introduced on E-Series
Link Aggregation Control Protocol (LACP) | 615
lacp system-priority c e s Configure the LACP system priority.
Syntax lacp system-priority priority-value
To return to the default setting, use the no lacp system-priority priority-value command.
Parameters priority-value Enter the port-priority value. The higher the value, the lower the priority.
Range: 1 to 65535
Default: 32768
Defaults
Command Modes
Command
History
32768
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Support added for S-Series
Support added for C-Series
Introduced on E-Series lacp ungroup member-independent
Enable BMP boot for the device connected to the LACP LAG.
Syntax
Defaults
Command Modes
Usage
Information
Command
History lacp ungroup member-independent {port-channel port-channel-id }
Not configured.
CONFIGURATION
During boot-up in a stacking configuration, the system must be able to reach the DHCP server with the image and configuration image. During bootup, only untagged DHCP requests are sent to the DHCP server to receive an offer on static LAGs between switches. The DHCP server must be configured to start in JumpStart mode. If switches are connected using LACP port-channel like ToR, use the port-channel parameter on the TOR side of the configuration to allow member ports of a completely un-grouped lacp port-channel to inherit vlan membership of that port channel to ensure untagged packets reach the DHCP server located on the TOR. To ungroup the port-channel configurations, use the no lacp ungroup member-independent command.
Version 8.3.5.3
Version 8.3.3.8
Version 8.3.12.0
Version 8.3.8.0
Introduced on S55
Introduced on S60
Added port-channel parameter.
Introduced on S4810
616 | Link Aggregation Control Protocol (LACP)
port-channel mode c e s Configure the LACP port channel mode.
Syntax port-channel number mode [ active ] [ passive ] [ off ]
Parameters
Defaults
Command Modes number active passive off
Enter the port-channel number.
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
Enter the keyword active to set the mode to the active state.*
Enter the keyword passive to set the mode to the passive state.*
Enter the keyword off to set the mode to the off state.*
* The LACP modes are defined in the table below.
off
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Support added for S-Series
Support added for C-Series
Introduced
Usage
Information
The LACP modes are defined in the following table.
Table 19-1.
LACP Modes
Mode active passive off
Function
An interface is in an active negotiating state in this mode. LACP runs on any link configured in the active state and also automatically initiates negotiation with other ports by initiating LACP packets.
An interface is not in an active negotiating state in this mode. LACP runs on any link configured in the passive state. Ports in a passive state respond to negotiation requests from other ports that are in active states. Ports in a passive state respond to LACP packets.
An interface can not be part of a dynamic port channel in the off mode. LACP will not run on a port configured in the off mode. port-channel-protocol lacp c e s Enable LACP on any LAN port.
Syntax port-channel-protocol lacp
To disable LACP on a LAN port, use the no port-channel-protocol lacp command.
Command Modes INTERFACE
Link Aggregation Control Protocol (LACP) | 617
Command
History
Related
Commands
Version 8.3.3.1
Version 6.2.1.1
Introduced on the S60.
Introduced
Display the LACP information.
Display information on configured Port Channel groups.
show lacp c e s Display the LACP matrix.
Syntax show lacp port-channel-number [ sys-id | counters ]
Parameters port channel-number sys-id counters
Enter the port-channel number to display the LACP matrix.
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
(OPTIONAL) Enter the keyword sys-id and the value that identifies a system.
(OPTIONAL) Enter the keyword counters to display the LACP counters.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on the S60.
Support added for S-Series
Support added for C-Series
Introduced
Example 1 Figure 19-1.
show lacp port-channel-number command
FTOS#show lacp 1
Port-channel 1 admin up, oper up, mode lacp
Actor System ID: Priority 32768, Address 0001.e800.a12b
Partner System ID: Priority 32768, Address 0001.e801.45a5
Actor Admin Key 1, Oper Key 1, Partner Oper Key 1
LACP LAG 1 is an aggregatable link
A - Active LACP, B - Passive LACP, C - Short Timeout, D - Long Timeout
E - Aggregatable Link, F - Individual Link, G - IN_SYNC, H - OUT_OF_SYNC
I - Collection enabled, J - Collection disabled, K - Distribution enabled L - Distribution disabled,
M - Partner Defaulted, N - Partner Non-defaulted, O - Receiver is in expired state,
P - Receiver is not in expired state
Port Gi 10/6 is enabled, LACP is enabled and mode is lacp
Actor Admin: State ACEHJLMP Key 1 Priority 128
Oper: State ACEGIKNP Key 1 Priority 128
Partner Admin: State BDFHJLMP Key 0 Priority 0
Oper: State BCEGIKNP Key 1 Priority 128
FTOS#
618 | Link Aggregation Control Protocol (LACP)
Example 2 Figure 19-2.
show lacp sys-id command Example
FTOS#show lacp 1 sys-id
Actor System ID: Priority 32768, Address 0001.e800.a12b
Partner System ID: Priority 32768, Address 0001.e801.45a5
FTOS#
Example 3 Figure 19-3.
show lacp counter command Example
FTOS#show lacp 1 counters
----------------------------------------------------------------------
LACP PDU Marker PDU Unknown Illegal
Port Xmit Recv Xmit Recv Pkts Rx Pkts Rx
----------------------------------------------------------------------
Gi 10/6 200 200 0 0 0 0
FTOS#
Related
Commands
Clear the LACP counters.
Display information on configured Port Channel groups.
Link Aggregation Control Protocol (LACP) | 619
620 | Link Aggregation Control Protocol (LACP)
20
Layer 2
Overview
This chapter describes commands to configure Layer 2 features. It contains the following sections:
•
•
Some MAC addressing commands are supported only on the E-Series, some on all three Dell
Networking platforms, and some on two Dell Networking platforms. Support is indicated by these characters, where appropriate, under each command heading: c e s
The VLAN commands are supported on all three Dell Networking platforms — c e s
MAC Addressing Commands
The following commands are related to configuring, managing, and viewing MAC addresses:
•
clear mac-address-table dynamic
•
•
•
•
mac-address-table station-move threshold
•
mac-address-table station-move time-interval
•
mac-address-table station-move refresh-arp
•
•
•
mac learning-limit learn-limit-violation
•
mac learning-limit station-move-violation
•
•
•
•
show cam mac linecard (dynamic or static)
•
•
•
show mac-address-table aging-time
•
show mac accounting destination
•
•
Layer 2 | 621
clear mac-address-table dynamic c e s Clear the MAC address table of all MAC address learned dynamically.
Syntax clear mac-address-table dynamic { address mac-address | all | interface interface | vlan vlan-id }
Parameters address mac-address all interface interface vlan vlan-id
Enter the keyword address followed by a MAC address in nn:nn:nn:nn:nn:nn format.
Enter the keyword all to delete all MAC address entries in the MAC address table.
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Enter the keyword vlan followed by a VLAN ID number from 1 to 4094.
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series mac accounting destination e Configure a destination counter for Layer 2 traffic.
Syntax mac accounting destination { mac-address vlan vlan-id | vlan} [ bytes | packets ]
To delete a destination counter, enter no mac accounting destination .
Parameters mac-address vlan vlan-id bytes packets
Enter the MAC address in the nn:nn:nn:nn:nn:nn format to count Layer 2 packets or bytes sent to that MAC address.
Enter the keyword vlan followed by the VLAN ID to count Layer 2 packets or bytes sent to the VLAN.
Range: 1 to 4094.
(OPTIONAL) Enter the keyword bytes to count only bytes
(OPTIONAL) Enter the keyword packets to count only packets.
622 | Layer 2
Defaults
Command Modes
Command
History
Usage
Information
Not configured.
INTERFACE (available on physical interfaces only)
Version 7.4.1.0
Introduced on E-Series
You must place the interface in Layer 2 mode (using the switchport command) prior to configuring the
mac accounting destination command.
mac-address-table aging-time c e s Specify an aging time for MAC addresses to be removed from the MAC Address Table.
Syntax
Parameters mac-address-table aging-time seconds seconds Enter either zero (0) or a number as the number of seconds before MAC addresses are relearned. To disable aging of the MAC address table, enter 0.
E-Series Range from CONFIGURATION mode: 10 - 1000000
E-Series Range from INTERFACE VLAN mode: 1 - 1000000
C-Series and S-Series Range: 10 - 1000000
Default: 1800 seconds
Defaults
Command Modes
1800 seconds
CONFIGURATION
INTERFACE VLAN (E-Series only)
Command
History
Version 8.3.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
On the E-Series, available in INTERFACE VLAN context and reduced minimum aging time in INTERFACE VLAN context from 10 seconds to 1 second.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Related
Commands
show mac-address-table aging-time
Set the MAC address learning limits for a selected interface.
Display the MAC aging time.
mac-address-table static c e s Associate specific MAC or hardware addresses to an interface and VLANs.
Syntax mac-address-table static mac-address output interface vlan vlan-id
To remove a MAC address, use the no mac-address-table static mac-address output interface vlan vlan-id command.
Layer 2 | 623
Parameters mac-address output interface
Enter the 48-bit hexidecimal address in nn:nn:nn:nn:nn:nn format.
Enter the keyword output followed by one of the following interfaces:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
vlan vlan-id Enter
Range:1 to 4094.
Not configured.
CONFIGURATION
Defaults
Command Modes
Command
History
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Displays the MAC address table.
mac-address-table station-move threshold c e Change the frequency with which the MAC address station-move trap is sent after a MAC address changes in a VLAN. A trap is sent if a station move is detected above a threshold number of times in a given interval.
Syntax [ no ] mac-address-table station-move threshold number interval count
Parameters threshold number interval seconds
Enter the keyword threshold followed by the number of times MAC addresses in VLANs can change before an SNMP trap is sent.
Range: 1 to 10
Enter the keyword interval followed by the number of seconds.
Range: 5 to 60
Defaults
Command Modes
Not configured.
CONFIGURATION
Command
History
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on C-Series
Introduced on E-Series
624 | Layer 2
Usage
Information
For information on the specific trap sent and the corresponding Syslog refer to
mac-address-table station-move time-interval e Reduce the amount of time FTOS takes to detect aged entries and station moves.
Syntax [ no ] mac-address-table station-move time-interval number
Parameters time-interval number Select the interval of the successive scans of the MAC address table that are used to detect a aged entries and station moves.
Range: 500 to 5000ms
Defaults
Command Modes
5000ms
CONFIGURATION
Command
History
Usage
Information
Version 7.8.1.0
Introduced on E-Series
FTOS takes 4 to 5 seconds to detect aged entries and station moves because the MAC address table scanning routine runs every 5000 ms by default. To achieve faster detection, reduce the scanning interval. mac-address-table station-move refresh-arp c e s Ensure that ARP refreshes the egress interface when a station move occurs due to a topology change.
Syntax [ no ] mac-address-table station-move refresh-arp
Defaults No default values or behavior
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
See the “NIC Teaming” section of the Layer 2 chapter in the FTOS Configuration Guide for details on using this command. mac cam fib-partition e Reapportion the amount of Content Addressable Memory (CAM) available for MAC address learning
(FIB) versus the amount available for MAC ACLs on a line card.
Syntax mac cam fib-partition { 25 | 50 | 75 | 100 } slot-number
Layer 2 | 625
To return to the default setting, enter no mac cam fib-partition .
Parameters
Defaults
Command Modes
Usage
Information
Related
Commands
25
50
75
100 slot-number
Enter the keyword 25 to set aside 25% of the CAM for MAC address learning.
Enter the keyword 50 to set aside 50% of the CAM for MAC address learning.
Enter the keyword 75 to set aside 75% of the CAM for MAC address learning.
Enter the keyword 100 to set aside 100% of the MAC CAM for MAC address learning.
With this configuration, no MAC ACLs are processed.
Enter the line card slot number.
Range: 0 to 13 for the E1200
0 to 6 for the E600
0 to 5 for the E300
75 (75% of the MAC CAM for MAC address learning)
CONFIGURATION
After setting the CAM partition size, the line card resets.
Display the current MAC CAM partition values.
mac learning-limit c e s Limit the maximum number of MAC addresses (static + dynamic) learned on a selected interface.
Syntax mac learning-limit address_limit [ vlan vlan-id ] [ station-move [ dynamic ]] [ no-station-move
[ dynamic ]] | [ dynamic [ no-station-move | station-move ]]
Parameters address_limit vlan vlan-id dynamic no-station-move station-move
Enter the maximum number of MAC addresses learned.
Range: 1 to 1000000
On the E-Series only, enter the keyword followed by the VLAN ID.
Range: 1-4094
(OPTIONAL) Enter the keyword dynamic to allow aging of MACs even though a learning limit is configured.
(OPTIONAL) Enter the keyword no-station-move to disallow a station move (associate the learned MAC address with the most recently accessed port) on learned MAC addresses.
(OPTIONAL) Enter the keyword station-move to allow a station move on learned MAC addresses.
Defaults
Command Modes
On C-Series, the default behavior is no-station-move + static.
On E-Series, the default behavior is station-move + static.
“Static” means manually entered addresses, which do not age.
INTERFACE
626 | Layer 2
Command
History
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 7.7.1.0
Version 6.5.1.0
Introduced on the S60.
Added vlan option on E-Series.
Introduced on S-Series
Introduced on C-Series; added station-move option
Added support for MAC Learning-Limit on LAG
This command and its options are supported on physical interfaces, static LAGs, LACP LAGs, and
VLANs.
If the vlan option is not specified, then the MAC address counters is not VLAN-based. That is, the sum of the addresses learned on all VLANs (not having any learning limit configuration) is counted against the MAC learning limit.
MAC Learning Limit violation logs and actions are not available on a per-VLAN basis.
With the keyword no-station-move option, MAC addresses learned through this feature on the selected interface will persist o n a per-VLAN basis, even if received on another interface. Enabling or disabling this option has no effect on already learned MAC addresses.
Once the MAC address learning limit is reached, the MAC addresses do not age out unless you add the dynamic option. To clear statistics on MAC address learning, use the
command with the learning-limit parameter.
Note: If you configure this command on an interface in a routed VLAN, and once the MAC addresses learned reaches the limit set in the
command, IP protocols are affected. For example, VRRP sets multiple VRRP Masters, and OSPF may not come up.
Related
Commands
When a channel member is added to a port-channel and there is not enough ACL CAM space, then the
MAC limit functionality on that port-channel is undefined. When this occurs, unconfigure the existing configuration first and then reapply the limit with a lower value.
clear mac-address-table dynamic
Clear counters used in the show interface command
Clear the MAC address table of all MAC address learned dynamically.
Display MAC learning-limit configuration.
mac learning-limit learn-limit-violation c e s Configure an action for a MAC address learning-limit violation.
Syntax mac learning-limit learn-limit-violation { log | shutdown }
To return to the default, use the no mac learning-limit learn-limit-violation { log | shutdown } command.
Parameters log shutdown
Enter the keyword log to generate a syslog message on a learning-limit violation.
Enter the keyword shutdown to shut down the port on a learning-limit violation.
Layer 2 | 627
Defaults
Command Modes
Command
History
No default behavior or values
INTERFACE (conf-ifinterface slot/port )
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
This is supported on physical interfaces, static LAGs, and LACP LAGs.
Usage
Information
Related
Commands
Display details of the mac learning-limit mac learning-limit station-move-violation c e s Specify the actions for a station move violation.
Syntax mac learning-limit station-move-violation { log | shutdown-both | shutdown-offending | shutdown-original }
To disable a configuration, use the no mac learning-limit station-move-violation command, followed by the configured keyword.
Parameters log shutdown-both shutdown-offending shutdown-original
Enter the keyword log to generate a syslog message on a station move violation.
Enter the keyword shutdown to shut down both the original and offending interface and generate a syslog message.
Enter the keyword shutdown-offending to shut down the offending interface and generate a syslog message.
Enter the keyword shutdown-original to shut down the original interface and generate a syslog message.
Defaults
Command Modes
No default behavior or values
INTERFACE (conf-ifinterface slot/port )
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands
This is supported on physical interfaces, static LAGs, and LACP LAGs.
Display details of the mac learning-limit
628 | Layer 2
mac learning-limit reset c e s Reset the MAC address learning-limit error-disabled state.
Syntax mac learning-limit reset
Defaults No default behavior or values
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series show cam mac linecard (count) e Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax show cam mac linecard slot port-set port-pipe count [ vlan vlan-id ] [ interface interface ]
Parameters linecard slot port-set port-pipe count interface interface vlan vlan-id
(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.
E-Series range: 0 to 6.
(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
E-Series range: 0 or 1
(REQUIRED) Enter the keyword count to display CAM usage by interface type.
(OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.
Range: 1 to 4094.
Command Modes EXEC
EXEC Privilege
Layer 2 | 629
Command
History pre-Version 6.2.1.1
Introduced on E-Series show cam maccheck linecard c Display the results of the BCMI2 check command.
Note: This command was deprecated in FTOS version 8.3.3.9.
Syntax show cam maccheck linecard slot port-set port-pipe
Parameters linecard slot port-set port-pipe
(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.
C300 range: 0 to 7; C150 range: 0 to 4
(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
Range: 0 or 1
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.9
Version 7.6.1.0
Deprecated command
Introduced on C-Series
Figure 20-1.
show cam maccheck linecard Command Output Example
FTOS#show cam maccheck linecard 2 port-set 0
Dumping entries. From 0 to 16383.
Progress . marks 100 memory table entries.
............................Index 5576 (0x15c8) has valid entries (H: 2b9, E: 0)
<MAC_ADDR=0xffffffffffff,VLAN_ID=0xfff,PRI=0,CPU=0,DST_DISCARD=0,SRC_DISCARD=0,SCP
=0,TGID_LO=0,PORT_TGID=0,TGID_PORT=0,T=0,TGID_HI=0,L2MC_PTR=0,MODULE_ID=0,REMOTE_T
RUNK=0,L3=0,MAC_BLOCK_INDEX=0,STATIC_BIT=1,RPE=0,MIRROR=0,VALID=1,EVEN_PARITY=0,HI
TDA=0,HITSA=0>
..........Index 6592 (0x19c0) has valid entries (H: 338, E: 0)
<MAC_ADDR=0xa0000000,VLAN_ID=0xffe,PRI=0,CPU=0,DST_DISCARD=0,SRC_DISCARD=0,SCP=0,T
GID_LO=0,PORT_TGID=0,TGID_PORT=0,T=0,TGID_HI=0,L2MC_PTR=0,MODULE_ID=0x10,REMOTE_TR
UNK=0,L3=0,MAC_BLOCK_INDEX=0,STATIC_BIT=0,RPE=0,MIRROR=0,VALID=1,EVEN_PARITY=1,HIT
DA=1,HITSA=1>
!-------------output truncated-------------------!
Usage
Information
Use this command to check various flags associated with each MAC address in the CAM.
Figure 20-1 shows information for two MAC addresses. The second entry is for MAC address
00:00:a0:00:00:00 (leading 0s are not shown), which is shown as learned on VLAN ID 4094
( 0xfff
), as shown below in Figure 20-2 and Figure 20-3
. Above, “ STATIC_BIT=0 ” means that the address is dynamically learned.
When an entry is listed as STATIC_BIT=1 , its HIT_SA is 0, which signifies that this address is not getting continuously learned trough traffic. The HIT_DA is set when a new learn happens, and after the first age sweep, it gets reset.
630 | Layer 2
Example Figure 20-2.
show mac-address-table Command Output Example
FTOS#show mac-address-table
VlanId Mac Address Type Interface State
4094 00:00:a0:00:00:00 Dynamic Gi 2/0 Active
!-------------output truncated-------------------!
Example Figure 20-3.
show cam mac linecard Command Output Example
FTOS#show cam mac linecard 2 port-set 0
VlanId Mac Address Region Interface
0 ff:ff:ff:ff:ff:ff STATIC 00001
4094 00:00:a0:00:00:00 DYNAMIC Gi 2/0
!-------------output truncated-------------------!
show cam mac linecard (dynamic or static) c e Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax show cam mac linecard slot port-set port-pipe [ address mac_addr | dynamic | interface interface | static | vlan vlan-id ]
Parameters linecard slot port-set port-pipe address mac-addr dynamic interface interface static vlan vlan-id
(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.
C-Series Range: 0 to 4 (C150); 0 to 8 (C300)
E-Series Range: 0 to 6
(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
Range: 0 or 1
(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch.
(OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword static to display only those MAC address specifically configured on the switch.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.
Range: 1 to 4094.
Layer 2 | 631
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 7.5.1.0
pre-Version 6.2.1.1
Added support for C-Series
Introduced on E-Series
Figure 20-4.
show cam mac linecard Command Example
FTOS#show cam mac linecard 1 port-set 0
Port - (TableID) assignments:
00(01) 01(01) 02(01) 03(01) 04(01) 05(01) 06(01) 07(01) 08(01) 09(01) 10(01) 11(01)
12(01) 13(01) 14(01) 15(01) 16(01) 17(01) 18(01) 19(01) 20(01) 21(01) 22(01) 23(01)
Index Table ID VlanId Mac Address Region Interface
0 1 0 00:01:e8:0d:b7:3b LOCAL_DA 1e000
1 1 0 00:01:e8:0d:b7:3a LOCAL_DA 1e000
101 0 0 00:01:e8:00:04:00 SYSTEM_STATIC 01c05
102 0 0 01:80:00:00:00:00 SYSTEM_STATIC 01c05
103 0 0 01:00:0c:cc:cc:cc SYSTEM_STATIC 01c01
104 0 0 01:80:c2:00:00:02 SYSTEM_STATIC 01c02
105 0 0 01:80:c2:00:00:0e SYSTEM_STATIC 01c01
106 0 0 00:01:e8:0d:b7:68 SYSTEM_STATIC DROP
107 0 0 00:01:e8:0d:b7:67 SYSTEM_STATIC DROP
108 0 0 00:01:e8:0d:b7:66 SYSTEM_STATIC DROP
109 0 0 00:01:e8:0d:b7:65 SYSTEM_STATIC DROP
110 0 0 00:01:e8:0d:b7:64 SYSTEM_STATIC DROP
111 0 0 00:01:e8:0d:b7:63 SYSTEM_STATIC DROP
112 0 0 00:01:e8:0d:b7:62 SYSTEM_STATIC DROP
113 0 0 00:01:e8:0d:b7:61 SYSTEM_STATIC DROP
114 0 0 00:01:e8:0d:b7:60 SYSTEM_STATIC DROP
115 0 0 00:01:e8:0d:b7:5f SYSTEM_STATIC DROP
116 0 0 00:01:e8:0d:b7:5e SYSTEM_STATIC DROP
117 0 0 00:01:e8:0d:b7:5d SYSTEM_STATIC DROP
FTOS# show cam mac stack-unit s Display the Content Addressable Memory (CAM) size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax show cam mac stack-unit unit_number port-set port-pipe count [ vlan vlan-id ] [ interface interface ]
Parameters stack-unit unit_number port-set port-pipe address mac-addr dynamic static
(REQUIRED) Enter the keyword linecard followed by a stack member number to select the linecard for which to gather information.
S-Series Range: 0 to 1
(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch.
(OPTIONAL) Enter the keyword static to display only those MAC address specifically configured on the switch.
632 | Layer 2
interface vlan interface vlan-id
(OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
S-Series Range: 1-128
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.
Range: 1 to 4094.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
This version of the command introduced for S-Series show mac-address-table c e s Display the MAC address table.
Syntax show mac-address-table [ dynamic | static ] [ address mac-address | interface interface | vlan vlan-id ] [ count [ vlan vlan-id ] [ interface interface-type [ slot [/ port ]]]]
Parameters dynamic static address mac-address interface interface
(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch. Optionally, you can also add one of these combinations: address/ mac-address , interface/ interface , or vlan vlan-id.
(OPTIONAL) Enter the keyword static to display only those MAC address specifically configured on the switch. Optionally, you can also add one of these combinations: address/ mac-address , interface/ interface , or vlan vlan-id.
(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Layer 2 | 633
interface vlan count interface-type vlan-id
(OPTIONAL) Instead of entering the keyword interface followed by the interface type, slot and port information, as above, you can enter the interface type, followed by just a slot number.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.
Range: 1 to 4094.
(OPTIONAL) Enter the keyword count , followed optionally, by an interface or VLAN ID, to display total or interface-specific static addresses, dynamic addresses, and MAC addresses in use.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 20-5.
show mac-address-table Command Example
FTOS#show mac-address-table
VlanId Mac Address Type Interface State
999 00:00:00:00:00:19 Dynamic Gi 0/1 Active
999 00:00:00:00:00:29 Dynamic Gi 0/2 Active
FTOS#
Table 20-1.
show mac-address-table Information
Column Heading Description
VlanId
Mac Address
Type
Interface
State
Displays the VLAN ID number.
Displays the MAC address in nn:nn:nn:nn:nn:nn format.
Lists whether the MAC address was manually configured (Static) or learned
(Dynamic).
Displays the interface type and slot/port information. The following abbreviations describe the interface types:
• gi—Gigabit Ethernet followed by a slot/port.
• po—Port Channel followed by a number. Range: 1 to 255 for TeraScale
• so—Sonet followed by a slot/port.
• te—10-Gigabit Ethernet followed by a slot/port.
Lists if the MAC address is in use (Active) or not in use (Inactive).
Figure 20-6.
show mac-address-table count Command Example
FTOS#show mac-address-table count
MAC Entries for all vlans :
Dynamic Address Count : 5
Static Address (User-defined) Count : 0
Total MAC Addresses in Use: 5
FTOS#
634 | Layer 2
Table 20-2.
show mac-address-table count Information
Line Beginning with
MAC Entries...
Dynamic Address...
Static Address...
Total MAC...
Description
Displays the number of MAC entries learnt per VLAN.
Lists the number of dynamically learned MAC addresses.
Lists the number of user-defined MAC addresses.
Lists the total number of MAC addresses used by the switch.
Related
Commands
show mac-address-table aging-time
Display MAC aging time.
show mac-address-table aging-time c e s Display the aging times assigned to the MAC addresses on the switch.
Syntax show mac-address-table aging-time [ vlan vlan-id ]
Parameters vlan vlan-id On the E-Series, enter the keyword vlan followed by the VLAN ID to display the MAC address aging time for MAC addresses on the VLAN.
Range: 1 to 4094.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.3.1.0
Version 7.7.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Added the vlan option on the E-Series.
Introduced on C-Series and S-Series
Introduced on E-Series
Figure 20-7.
show mac-address-table aging-time Command Example
FTOS#show mac-address-table aging-time
Mac-address-table aging time : 1800
FTOS#
Related
Commands
Display the current MAC address configuration.
show mac accounting destination e Display destination counters for Layer 2 traffic (available on physical interfaces only).
Syntax show mac accounting destination [ mac-address vlan vlan-id ] [ interface interface
[ mac-address vlan vlan-id ] [ vlan vlan-id ]] [ vlan vlan-id ]
Layer 2 | 635
Parameters mac-address interface vlan interface vlan-id
(OPTIONAL) Enter the MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword interface followed by the interface type, slot and port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to that VLAN.
Range: 1 to 4094.
Command Modes EXEC
EXEC Privilege
Command
History
Usage
Information pre-Version 6.2.1.1
Introduced on E-Series
MAC Accounting information can be accessed using SNMP via the Force10 Monitor MIB. For more information on enabling SNMP, refer to Chapter 3 of the FTOS Configuration Guide .
Note: Currently, the Force10 MONITOR MIB does not return the MAC addresses in an increasing order via SNMP. As a workaround, you can use the -C c option in snmpwalk or snmpbulkwalk to access the Force10 MONITOR MIB. For example:
% snmpwalk -C c -v 2c -c public 133.33.33.131 enterprise.6027.3.3.3
Example Figure 20-8.
show mac accounting destination Command Example
FTOS#show mac accounting destination interface gigabitethernet 2/1
Destination Out Port VLAN Packets Bytes
00:44:00:00:00:02 Te 11/0 1000 10000 5120000
00:44:00:00:00:01 Te 11/0 1000 10000 5120000
00:22:00:00:00:00 Te 11/0 1000 10000 5120000
00:44:00:00:00:02 Te 11/0 2000 10000 5120000
00:44:00:00:00:01 Te 11/0 2000 10000 5120000
FTOS#
Related
Commands
show mac accounting access-list
Display MAC access list configurations and counters (if configured).
show mac cam e Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax show mac cam
Command Modes EXEC
EXEC Privilege
Command
History pre-Version 6.2.1.1
Introduced on E-Series
636 | Layer 2
Example Figure 20-9.
show mac cam Command Example
FTOS#show mac cam
Slot Type MAC CAM Size MAC FIB Entries MAC ACL Entries
0 E24PD 64K entries 48K (75%) 8K (25%)
2 E24PD2 128K entries 64K (50%) 32K (50%)
11 EX2YD 64K entries 16K (25%) 24K (75%)
Note: All CAM entries are per portpipe.
FTOS#
Table 20-3.
show mac cam Information
Field
Slot
Type
MAC CAM Size
MAC FIB Entries
MAC ACL Entries
Description
Lists the active line card slots.
Lists the type of line card present in the slot.
Displays the total CAM size available.
Note : A portion of the MAC CAM is used for system operations, therefore adding the MAC FIB and MAC ACL will be less than the MAC CAM.
Displays the amount and percentage of CAM available for MAC addresses.
Displays the amount and percentage of CAM available for MAC ACLs.
show mac learning-limit c e Display MAC address learning limits set for various interfaces.
Syntax show mac learning-limit [ violate-action ] [ detail ] [ interface interface [ vlan vlan-id ]]
Parameters violate-action detail interface interface vlan vlan-id
(OPTIONALY) Enter the keyword violate-action to display the MAC learning limit violation status.
(OPTIONAL) Enter the keyword detail to display the MAC learning limit in detail.
(OPTIONAL) Enter the keyword interface with the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For SONET interfaces, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a Port Channel ID between 1 and 255.
On the E-Series, enter the keyword vlan followed by the VLAN ID.
Range: 1-4094
Command Modes EXEC
EXEC Privilege
Layer 2 | 637
Command
History
Example
Example
Version 8.3.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 6.5.1.0
Added vlan option on E-Series.
Introduced on C-Series
Added support for violate-action and detail options
Added support for Port Channel
E-Series output:
FTOS#show mac learning-limit
Interface Vlan Learning Dynamic Static Unknown SA
Slot/port Id Limit MAC count MAC count Drops
Gi 5/84 2 2 0 0 0
Gi 5/84 * 5 0 0 0
Gi 5/85 3 3 0 0 0
Gi 5/85 * 10 0 0 0
FTOS#show mac learning-limit interface gig 5/84
Interface Vlan Learning Dynamic Static Unknown SA
Slot/port Id Limit MAC count MAC count Drops
Gi 5/84 2 2 0 0 0
Gi 5/84 * 5 0 0 0
FTOS#show mac learning-limit interface gig 5/84 vlan 2
Interface Vlan Learning Dynamic Static Unknown SA
Slot/port Id Limit MAC count MAC count Drops
Gi 5/84 2 2 0 0 0
C-Series/S-Series output:
FTOS#show mac learning-limit
Interface Learning Dynamic Static Unknown SA
Slot/port Limit MAC count MAC count Drops
Gi 1/0 10 0 0 0
Gi 1/1 5 0 0 0
FTOS#show mac learning-limit interface gig 1/0
Interface Learning Dynamic Static Unknown SA
Slot/port Limit MAC count MAC count Drops
Gi 1/0 10 0 0 0
Virtual LAN (VLAN) Commands
The following commands configure and monitor Virtual LANs (VLANs). VLANs are a virtual interface and use many of the same commands as physical interfaces.
You can configure an IP address and Layer 3 protocols on a VLAN called Inter-VLAN routing. FTP,
TFTP, ACLs and SNMP are not supported on a VLAN.
Occasionally, while sending broadcast traffic over multiple Layer 3 VLANs, the VRRP state of a
VLAN interface may continually switch between Master and Backup.
•
•
•
•
•
•
•
•
•
•
638 | Layer 2
See also
and see VLAN-related commands, such as portmode hybrid , in
description c e s Add a description about the selected VLAN.
Syntax description description
To remove the description from the VLAN, use the no description command.
Parameters description Enter a text string description to identify the VLAN (80 characters maximum).
Defaults
Command Modes
Command
History
Related
Commands
No default behavior or values
INTERFACE VLAN
Version 8.3.3.1
Version 7.6.1.0
Version 6.3.1.0
Introduced on the S60.
Introduced on C-Series and S-Series
Introduced on E-Series
Display VLAN configuration.
default vlan-id c e s Specify a VLAN as the Default VLAN.
Syntax default vlan-id vlan-id
To remove the default VLAN status from a VLAN and VLAN 1 does not exist, use the no default vlan-id vlan-id syntax.
Parameters vlan-id Enter the VLAN ID number of the VLAN to become the new Default VLAN.
Range: 1 to 4094.
Default: 1
Defaults
Command Modes
The Default VLAN is VLAN 1.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Layer 2 | 639
Usage
Information
Related
Commands
To return VLAN 1 as the Default VLAN, use this command syntax ( default-vlan-id 1 ).
The Default VLAN contains only untagged interfaces.
Configure a VLAN.
default-vlan disable c e s Disable the default VLAN so that all switchports are placed in the Null VLAN until they are explicitly configured as a member of another VLAN.
Defaults The default VLAN is enabled.
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced
Usage
Information no default vlan disable is not listed in the running-configuration, but when the default VLAN is disabled, default-vlan disable is listed in the running-configuration.
enable vlan-counters e x
Display VLAN counters for ingress and/or egress hardware. You must be in restricted mode to use this command.
Syntax
Defaults
Command Modes enable vlan-output-counters [ingress | egress | all]
To return to the default (disabled), use the no enable vlan-output-counters command.
Disabled—VLAN counters are disabled in hardware (all linecards/port-pipes) by default.
CONFIGURATION
Command
History
Version 8.1.1.2
Version 8.1.1.0
Introduced on E-Series ExaScale E600i
Introduced on E-Series ExaScale E1200i
640 | Layer 2
Example
FTOS(conf)#enable vlan-output-counters
FTOS(conf)#exit
FTOS#show interface vlan 101
Vlan 101 is down, line protocol is down
Address is 00:01:e8:26:e0:5b, Current address is 00:01:e8:26:e0:5b
Interface index is 1107787877
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 01:12:44
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
Output Statistics:
0 packets, 0 bytes
Enabling VLAN output reveals the output statistics counters for the VLAN
Time since last interface status change: 01:12:44
FTOS#
FTOS#show interfaces vlan 1
Vlan 1 is down, line protocol is down
Address is 00:01:e8:13:a5:aa, Current address is 00:01:e8:13:a5:aa
Interface index is 1107787777
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 01:36:01
Queueing strategy: fifo
Input Statistics:
100000 packets, 10000000 bytes
Output Statistics:
200000 packets, 20800000 bytes
Time since last interface status change: 01:36:01
FTOS#
Usage
Information
FTOS supports a command to enable viewing of the VLAN input/output counters. This command also applies to SNMP requests. If the command is not enabled, IFM returns zero values for VLAN output counters.
SNMP counters differ from show interface counters as SNMP counters must maintain history. At any point, the value of SNMP counters reflect the amount of traffic being carried on the VLAN.
VLAN output counters may show higher than expected values because source-suppression drops are counted.
During an RPM failover event, all SNMP counters remain intact. The counters will sync over to the secondary RPM.
name c e s Assign a name to the VLAN.
Syntax name vlan-name
To remove the name from the VLAN, enter no name .
Parameters vlan-name Enter up to 32 characters as the name of the VLAN.
Defaults Not configured.
Layer 2 | 641
Command Modes
Command
History
INTERFACE VLAN
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
To display information about a named VLAN, enter the
show vlan command with the name parameter
or the
show interfaces description command.
Assign a descriptive text string to the interface.
Configure a VLAN.
Display the current VLAN configurations on the switch.
show config c e s Display the current configuration of the selected VLAN.
Syntax show config
Command Modes
Example
INTERFACE VLAN
Figure 20-10.
show config Command Sample Output for a Selected VLAN
FTOS(conf-if-vl-100)#show config
!
interface Vlan 100
no ip address
no shutdown
FTOS(conf-if-vl-100)#
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series show vlan c e s Display the current VLAN configurations on the switch.
Syntax show vlan [ brief | id vlan-id | name vlan-name ]
642 | Layer 2
Parameters
Command Modes brief id vlan-id name vlan-name
EXEC
EXEC Privilege
(OPTIONAL) Enter the keyword brief to display the following information:
• VLAN ID
• VLAN name (left blank if none is configured.)
• Spanning Tree Group ID
• MAC address aging time
• IP address
(OPTIONAL) Enter the keyword id followed by a number from 1 to 4094. Only information on the VLAN specified is displayed.
(OPTIONAL) Enter the keyword name followed by the name configured for the VLAN.
Only information on the VLAN named is displayed.
Command
History
Example
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Augmented to display PVLAN data for C-Series and S-Series; revised output to include Description field to display user-entered VLAN description
Introduced on S-Series; revised output to display Native VLAN
Introduced on C-Series
Introduced on E-Series
Figure 20-11.
show vlan Command Example
FTOS#show vlan
Codes: * - Default VLAN, G - GVRP VLANs, P - Primary, C - Community, I - Isolated
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
* 1 Inactive
2 Active U Po1(Gi 13/0)
T Po20(Gi 13/6), Gi 13/25
3 Active
T Gi 13/7
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/1
4 Active
5 Active
6 Active
U Po2(Gi 13/2)
T Po20(Gi 13/6)
T Gi 13/7
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/3
U Po3(Gi 13/4)
T Po20(Gi 13/6)
7 Active
T Gi 13/7
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/5
P 100 Active T Po1(Gi 0/1)
T Gi 0/2
C 101 Inactive T Gi 0/3
I 102 Inactive T Gi 0/4
FTOS#
Layer 2 | 643
644 | Layer 2
Table 20-4.
show vlan Information
Column Heading
(Column 1 — no heading)
NUM
Status
Q
Ports
Description asterisk symbol (*) = Default VLAN
G = GVRP VLAN
P = primary VLAN
C = community VLAN
I = isolated VLAN
Displays existing VLAN IDs.
Displays the word Inactive for inactive VLANs and the word
Active for active VLANs.
Displays G for GVRP tagged, M for member of a VLAN-Stack VLAN, T for tagged interface, U (for untagged interface), x (uncapitalized x) for
Dot1x untagged, or X (capitalized X) for Dot1x tagged.
Displays the type, slot, and port information. For the type, Po = port channel, Gi = gigabit ethernet, and Te = ten gigabit ethernet.
Figure 20-12.
Example of Output of show vlan id
FTOS# show vlan id 40
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
40 Active M Gi 13/47
FTOS#show vlan id 41
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
41 Active T Gi 13/47
FTOS#show vlan id 42
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
42 Active U Gi 13/47
FTOS#
Figure 20-13.
Example of Output of show vlan brief
FTOS#show vlan br
VLAN Name STG MAC Aging IP Address
---- -------------------------------- ---- --------- ------------------
1 0 1800 unassigned
2 0 1800 2.2.2.2/24
3 0 1800 3.3.3.2/24
FTOS#
Figure 20-14.
Using VLAN Name
FTOS(conf)#interface vlan 222
FTOS(conf-if-vl-222)#name test
FTOS(conf-if-vl-222)#do show vlan name test
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
222 Inactive U Gi 1/22
FTOS(conf-if-vl-222)#
Related
Commands
Enable the Stackable VLAN feature on the selected VLAN.
Configure a VLAN.
tagged c e s Add a Layer 2 interface to a VLAN as a tagged interface.
Syntax tagged interface
To remove a tagged interface from a VLAN, use no tagged interface command.
Parameters interface Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Command
History
All interfaces in Layer 2 mode are untagged.
INTERFACE VLAN
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Layer 2 | 645
Usage
Information
Related
Commands
When you use the no tagged command, the interface is automatically placed in the Default VLAN as an untagged interface unless the interface is a member of another VLAN. If the interface belongs to several VLANs, you must remove it from all VLANs to change it to an untagged interface.
Tagged interfaces can belong to multiple VLANs, while untagged interfaces can only belong to one
VLAN at a time.
Configure a VLAN.
Specify which interfaces in a VLAN are untagged.
track ip c e s Track the Layer 3 operational state of a Layer 3 VLAN, using a subset of the VLAN member interfaces.
Syntax track ip interface
To remove the tracking feature from the VLAN, use the no track ip interface command.
Parameters interface Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number:
C-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Not configured
INTERFACE VLAN
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
When this command is configured, the VLAN is operationally UP if any of the interfaces specified in the track ip command are operationally UP, and the VLAN is operationally DOWN if none of the tracking interfaces are operationally UP.
If the track ip command is not configured, the VLAN's Layer 3 operational state depends on all the members of the VLAN.
The Layer 2 state of the VLAN, and hence the Layer 2 traffic is not affected by the track ip command configuration.
646 | Layer 2
Related
Commands
Configure a VLAN.
Specify which interfaces in a VLAN are tagged.
untagged c e s Add a Layer 2 interface to a VLAN as an untagged interface.
Syntax
Parameters untagged interface
To remove an untagged interface from a VLAN, use the no untagged interface command.
interface Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel interface types, enter the keyword port-channel followed by a number from 1 to 255 for TeraScale.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Command
History
All interfaces in Layer 2 mode are untagged.
INTERFACE VLAN
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Untagged interfaces can only belong to one VLAN.
In the Default VLAN, you cannot use the no untagged interface command. To remove an untagged interface from all VLANs, including the Default VLAN, enter the INTERFACE mode and use the no
Configure a VLAN.
Specify which interfaces in a VLAN are tagged.
Layer 2 | 647
648 | Layer 2
21
Link Layer Detection Protocol (LLDP)
Overview
Link Layer Detection Protocol (LLDP) advertises connectivity and management from the local station to the adjacent stations on an IEEE 802 LAN. LLDP facilitates multi-vendor interoperability by using standard management tools to discover and make available a physical topology for network management. The FTOS implementation of LLDP is based on IEEE standard 801.1ab.
Commands
This chapter contains the following commands, in addition to the commands in the related section —
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
The starting point for using LLDP is invoking LLDP with the protocol lldp command in either the
CONFIGURATION or INTERFACE mode.
The information distributed by LLDP is stored by its recipients in a standard Management Information
Base (MIB). The information can be accessed by a network management system through a management protocol such as SNMP.
See the Link Layer Discovery Protocol chapter of the FTOS Configuration Guide for details on implementing LLDP/LLDP-MED.
Link Layer Detection Protocol (LLDP) | 649
advertise dot1-tlv c e s Advertise dot1 TLVs (Type, Length, Value).
Syntax advertise dot1-tlv { port-protocol-vlan-id | port-vlan-id | vlan-name }
To remove advertised dot1-tlv, use the no advertise dot1-tlv { port-protocol-vlan-id | port-vlan-id
| vlan-name } command.
Parameters port-protocol-vlan-id port-vlan-id vlan-name
Enter the keyword port-protocol-vlan-id to advertise the port protocol
VLAN identification TLV.
Enter the keyword port-vlan-id to advertise the port VLAN identification
TLV.
Enter the keyword vlan-name to advertise the vlan-name TLV. This keyword is only supported on C-Series and S-Series.
Defaults
Command Modes
Command
History
Disabled
CONFIGURATION (conf-lldp) and INTERFACE (conf-ifinterface -lldp)
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series, added vlan-name option.
Introduced on C-Series
Introduced on E-Series
Enable LLDP globally.
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration advertise dot3-tlv c e s Advertise dot3 TLVs (Type, Length, Value).
Syntax advertise dot3-tlv { max-frame-size }
To remove advertised dot3-tlv, use the no advertise dot3-tlv { max-frame-size } command.
Parameters max-frame-size Enter the keyword max-frame-size to advertise the dot3 maximum frame size.
Defaults
Command Modes
Command
History
No default values or behavior
CONFIGURATION (conf-lldp) and INTERFACE (conf-ifinterface -lldp)
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
650 | Link Layer Detection Protocol (LLDP)
advertise management c e s Advertise management TLVs (Type, Length, Value).
Syntax advertise management -tlv { system-capabilities | system-description | system-name }
To remove advertised management TLVs, use the no advertise management -tlv
{ system-capabilities | system-description | system-name } command.
Parameters system-capabilities system-description system-name
Enter the keyword system-capabilities to advertise the system capabilities TLVs.
Enter the keyword system-description to advertise the system description TLVs.
Enter the keyword system-name to advertise the system name TLVs.
Defaults
Command Modes
Command
History
No default values or behavior
CONFIGURATION (conf-lldp)
Usage
Information
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
All three command options — system-capabilities , system-description, and system-name —
-can be invoked individually or together, in any sequence.
advertise management-tlv
Z
Advertise management TLVs (Type, Length, Value).
Syntax
Parameters advertise management-tlv { management-address | system-capabilities | system-description| system-name }
To remove advertised management TLVs, use the no advertise management-tlv
{ management-address | system-capabilities | system-description | system-name } command.
management-address system-capabilities system-description system-name
Enter the keyword management-address to advertise the management
IP address TLVs to the LLDP peer.
Enter the keyword system-capabilities to advertise the system capabilities TLVs to the LLDP peer.
Enter the keyword system-description to advertise the system description TLVs to the LLDP peer.
Enter the keyword system-name to advertise the system name TLVs to the LLDP peer.
Link Layer Detection Protocol (LLDP) | 651
Defaults
Command Modes
Command
History
No default values or behavior
CONFIGURATION (conf-lldp)
Usage
Information
Version 8.3.3.9
Version 8.3.5.4
Version 9.1.(0.0)
Version 8.3.11.1
Version 8.3.7.0
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60
Introduced on the S55
Modified to support management-address parameter
Introduced on the Z9000
Introduced on the S4810
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
The command options — management-address, system-capabilities , system-description, and system-name —-can be invoked individually or together, in any sequence.
advertise management-tlv (Interface)
Z
Advertise management TLVs (Type, Length, Value) to the specified interface.
Syntax
Parameters
Defaults
Command Modes
Command
History advertise management-tlv { management-address | system-capabilities | system-description| system-name }
To remove advertised management TLVs, use the no advertise management-tlv
{ management-address | system-capabilities | system-description | system-name } command.
management-address system-capabilities system-description system-name
Enter the keyword management-address to advertise the management
IP address TLVs to the specified interface.
Enter the keyword system-capabilities to advertise the system capabilities TLVs to the specified interface.
Enter the keyword system-description to advertise the system description TLVs to the specified interface.
Enter the keyword system-name to advertise the system name TLVs to the specified interface.
No default values or behavior
CONFIGURATION (conf-interface-lldp)
Version 8.3.3.9
Version 8.3.5.4
Version 9.1.(0.0)
Introduced on the S60
Introduced on S55
Introduced on the Z9000 and S4810
652 | Link Layer Detection Protocol (LLDP)
Usage
Information
All three command options — system-capabilities , system-description, and system-name —
-can be invoked individually or together, in any sequence.
clear lldp counters c e s Clear LLDP transmitting and receiving counters for all physical interfaces or a specific physical interface.
Syntax clear lldp counters interface
Parameters interface Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/ port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
No default values or behavior
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series clear lldp neighbors c e s Clear LLDP neighbor information for all interfaces or a specific interfaces.
Syntax clear lldp neighbors { interface }
Parameters interface Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
Command
History
No default values or behavior
EXEC Privilege
Version 8.3.3.1
Version 7.7.1.0
Introduced on the S60.
Introduced on S-Series
Link Layer Detection Protocol (LLDP) | 653
Version 7.6.1.0
Version 7.4.1.0
Introduced on C-Series
Introduced on E-Series debug lldp interface c e s Enable LLDP debugging to display timer events, neighbor additions or deletions, and other information about incoming and outgoing packets.
Syntax debug lldp interface { interface | all }{ events | packet { brief | detail } { tx | rx | both }}
To disable debugging, use the no debug lldp interface { interface | all }{ events } { packet { brief | detail } { tx | rx | both }} command.
Parameters interface all events packet brief detail tx rx both
Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet followed by the slot/port information.
Note: The FastEthernet option is not supported on S-Series.
(OPTIONAL) Enter the keyword all to display information on all interfaces.
(OPTIONAL) Enter the keyword events to display major events such as timer events.
(OPTIONAL) Enter the keyword packet to display information regarding packets coming in or going out.
(OPTIONAL) Enter the keyword brief to display brief packet information.
(OPTIONAL) Enter the keyword detail to display detailed packet information.
(OPTIONAL) Enter the keyword tx to display transmit only packet information.
(OPTIONAL) Enter the keyword rx to display receive only packet information
(OPTIONAL) Enter the keyword both to display both receive and transmit packet information.
Defaults
Command Modes
No default values or behavior
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
654 | Link Layer Detection Protocol (LLDP)
disable c e s Enable or disable LLDP.
Syntax disable
To enable LLDP, use the no disable
Defaults
Command Modes
Enabled, that is no disable
CONFIGURATION (conf-lldp) and INTERFACE (conf-ifinterface -lldp)
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Related
Commands
Enable LLDP globally.
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration hello c e s Configure the rate at which the LLDP control packets are sent to its peer.
Syntax hello seconds
To revert to the default, use the no hello seconds command.
Parameters seconds Enter the rate, in seconds, at which the control packets are sent to its peer.
Rate: 5 - 180 seconds
Default: 30 seconds
Defaults
Command Modes
Command
History
30 seconds
CONFIGURATION (conf-lldp) and INTERFACE (conf-ifinterface -lldp)
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Link Layer Detection Protocol (LLDP) | 655
mode c e s Set LLDP to receive or transmit.
Syntax mode { tx | rx }
To return to the default, use the no mode { tx | rx } command.
Parameters tx rx
Enter the keyword tx to set the mode to transmit.
Enter the keyword rx to set the mode to receive.
Defaults
Command Modes
Command
History
Both transmit and receive
CONFIGURATION (conf-lldp) and INTERFACE (conf-ifinterface -lldp)
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
protocol lldp (Configuration) show lldp neighbors
Enable LLDP globally.
Display the LLDP neighbors multiplier c e s Set the number of consecutive misses before LLDP declares the interface dead.
Syntax multiplier integer
To return to the default, use the no multiplier integer command.
Parameters integer Enter the number of consecutive misses before the LLDP declares the interface dead.
Range: 2 - 10
Defaults
Command Modes
Command
History
4 x hello
CONFIGURATION (conf-lldp) and INTERFACE (conf-ifinterface -lldp)
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
656 | Link Layer Detection Protocol (LLDP)
protocol lldp (Configuration) c e s Enable LLDP globally on the switch.
Syntax protocol lldp
To disable LLDP globally on the chassis, use the no protocol lldp command.
Defaults Disabled
Command Modes CONFIGURATION (conf-lldp)
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series protocol lldp (Interface) c e s Enter the LLDP protocol in the INTERFACE mode.
Syntax [ no ] protocol lldp
To return to the global LLDP configuration mode, use the no protocol lldp command from the
Interface mode.
Defaults
Command Modes
LLDP is not enabled on the interface.
INTERFACE (conf-ifinterface -lldp)
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
When you enter the LLDP protocol in the Interface context, it overrides global configurations. When you execute the no protocol lldp from the INTERFACE mode, interfaces will begin to inherit the configuration from the global LLDP CONFIGURATION mode.
show lldp neighbors c e s Display LLDP neighbor information for all interfaces or a specified interface.
Syntax show lldp neighbors [ interface ] [ detail ]
Link Layer Detection Protocol (LLDP) | 657
Parameters interface detail
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/ port information.
• For a 1-Gigabit Ethernet interface, enter the keyword gigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword tenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword detail to display all the TLV information, timers, and
LLDP tx and rx counters.
No default values or behavior
EXEC Privilege
Defaults
Command Modes
Command
History
Example
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 21-1.
show lldp neighbors Command Output
R1(conf-if-gi-1/31)#do show lldp neighbors
Loc PortID Rem Host Name Rem Port Id Rem Chassis Id
-------------------------------------------------------------------------
Gi 1/21 R2 GigabitEthernet 2/11 00:01:e8:06:95:3e
Gi 1/31 R3 GigabitEthernet 3/11 00:01:e8:09:c2:4a
Usage
Information
Omitting the keyword detail displays only the remote chassis ID, Port ID, and Dead Interval.
show lldp statistics c e s Display the LLDP statistical information.
Syntax show lldp statistics
Defaults No default values or behavior
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
658 | Link Layer Detection Protocol (LLDP)
Example Figure 21-2.
show lldp statistics Command Output
FTOS#show lldp statistics
Total number of neighbors: 300
Last table change time : Mon Oct 02 16:00:52 2006
Number of Table Inserts : 1621
Number of Table Deletes : 200
Number of Table Drops : 0
Number of Table Age Outs : 400
FTOS# show running-config lldp c e s Display the current global LLDP configuration.
Syntax
Defaults show running-config lldp
No default values or behavior
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Example
FTOS#show running-config lldp
!
protocol lldp
advertise dot1-tlv port-protocol-vlan-id port-vlan-id
advertise dot3-tlv max-frame-size
advertise management-tlv system-capabilities system-description
hello 15
multiplier 3
no disable
FTOS#
LLDP-MED Commands
The LLDP-MED commands in this section are:
•
•
advertise med guest-voice-signaling
•
advertise med location-identification
•
•
•
•
advertise med video-conferencing
•
•
•
Link Layer Detection Protocol (LLDP) | 659
FTOS LLDP-MED (Media Endpoint Discovery) commands are an extension of the set of LLDP TLV advertisement commands. The C-Series and S-Series support all commands, as indicated by these symbols underneath the command headings: c s
The E-Series generally supports the commands, too, as indicated by the e symbol under command headings. However, LLDP-MED commands are more useful on the C-Series and the S50V model of the S-Series, because they support Power over Ethernet (PoE) devices.
As defined by ANSI/TIA-1057, LLDP-MED provides organizationally specific TLVs (Type Length
Value), so that endpoint devices and network connectivity devices can advertise their characteristics and configuration information. The Organizational Unique Identifier (OUI) for the
Telecommunications Industry Association (TIA) is 00-12-BB.
• LLDP-MED Endpoint Device —any device that is on an IEEE 802 LAN network edge, can communicate using IP, and uses the LLDP-MED framework.
• LLDP-MED Network Connectivity Device —any device that provides access to an IEEE 802
LAN to an LLDP-MED endpoint device, and supports IEEE 802.1AB (LLDP) and TIA-1057
(LLDP-MED). The Dell Networking system is an LLDP-MED network connectivity device.
With regard to connected endpoint devices, LLDP-MED provides network connectivity devices with the ability to:
• manage inventory
• manage Power over Ethernet (POE)
• identify physical location
• identify network policy advertise med guest-voice c e s Configure the system to advertise a separate limited voice service for a guest user with their own IP telephony handset or other appliances that support interactive voice services.
Syntax advertise med guest-voice { vlan-id layer2_priority DSCP_value } | { priority-tagged number }
To return to the default, use the no advertise med guest-voice { vlan-id layer2_priority
DSCP_value } | { priority-tagged number } command.
Parameters vlan-id layer2_priority
DSCP_value priority-tagged number
Enter the VLAN ID.
Range: 1 to 4094
Enter the Layer 2 priority.
Range: 0 to 7
Enter the DSCP value.
Range: 0 to 63
Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7
Defaults
Command Modes unconfigured
CONFIGURATION (conf-lldp)
660 | Link Layer Detection Protocol (LLDP)
Command
History
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Enable LLDP globally.
Debug LLDP.
Display the LLDP neighbors.
Display the LLDP running configuration. advertise med guest-voice-signaling c e s Configure the system to advertise a separate limited voice service for a guest user when the guest voice control packets use a separate network policy than the voice data.
Syntax advertise med guest-voice-signaling { vlan-id layer2_priority DSCP_value } | { priority-tagged number }
To return to the default, use the no advertise med guest-voice-signaling { vlan-id layer2_priority
DSCP_value } | { priority-tagged number } command.
Parameters vlan-id layer2_priority
DSCP_value priority-tagged number
Enter the VLAN ID.
Range: 1 to 4094
Enter the Layer 2 priority.
Range: 0 to 7
Enter the DSCP value.
Range: 0 to 63
Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7
Defaults
Command Modes
Command
History unconfigured
CONFIGURATION (conf-lldp)
\
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Related
Commands
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration
Link Layer Detection Protocol (LLDP) | 661
advertise med location-identification c e s Configure the system to advertise a location identifier.
Syntax advertise med location-identification { coordinate-based value | civic-based value | ecs-elin value }
To return to the default, use the no advertise med location-identification { coordinate-based value | civic-based value | ecs-elin value } command.
Parameters coordinate-based value civic-based value ecs-elin value
Enter the keyword coordinate-based followed by the coordinated based location in hexadecimal value of 16 bytes.
Enter the keyword civic-based followed by the civic based location in hexadecimal format.
Range: 6 to 255 bytes
Enter the keyword ecs-elin followed by the Emergency Call Service ( ecs )
Emergency Location Identification Number ( elin ) numeric location string.
Range: 10 to 25 characters
Defaults
Command Modes unconfigured
CONFIGURATION (conf-lldp)
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Usage
Information
ECS —Emergency Call Service such as defined by TIA or National Emergency Numbering
Association (NENA)
ELIN —Emergency Location Identification Number, a valid North America Numbering Plan format telephone number supplied for ECS purposes.
Related
Commands
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration advertise med power-via-mdi c s Configure the system to advertise the Extended Power via MDI TLV.
Syntax advertise med power-via-mdi
To return to the default, use the no advertise med power-via-mdi command.
Defaults
Command Modes unconfigured
CONFIGURATION (conf-lldp)
662 | Link Layer Detection Protocol (LLDP)
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Advertise the Extended Power via MDI on all ports that are connected to an 802.3af powered,
LLDP-MED endpoint device.
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration advertise med softphone-voice c e s Configure the system to advertise softphone to enable IP telephony on a computer so that the computer can be used as a phone.
Syntax advertise med softphone-voice { vlan-id layer2_priority DSCP_value } | { priority-tagged number }
To return to the default, use the no advertise med softphone-voice { vlan-id layer2_priority
DSCP_value } | { priority-tagged number } command.
Parameters vlan-id layer2_priority
DSCP_value priority-tagged number
Enter the VLAN ID.
Range: 1 to 4094
Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7
Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63
Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7
Defaults
Command Modes
Command
History unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Related
Commands
show lldp neighbors show lldp neighbors
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration
Link Layer Detection Protocol (LLDP) | 663
advertise med streaming-video c e s Configure the system to advertise streaming video services for broadcast or multicast-based video.
This does not include video applications that rely on TCP buffering.
Syntax advertise med streaming-video { vlan-id layer2_priority DSCP_value } | { priority-tagged number }
To return to the default, use the no advertise med streaming-video { vlan-id layer2_priority
DSCP_value } | { priority-tagged number } command.
Parameters vlan-id layer2_priority
DSCP_value priority-tagged number
Enter the VLAN ID.
Range: 1 to 4094
Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7
Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63
Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7
Defaults
Command Modes unconfigured
CONFIGURATION (conf-lldp)
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Related
Commands
show lldp neighbors show lldp neighbors
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration advertise med video-conferencing c e s Configure the system to advertise dedicated video conferencing and other similar appliances that support real-time interactive video.
Syntax advertise med video-conferencing { vlan-id layer2_priority DSCP_value } | { priority-tagged number }
To return to the default, use the no advertise med video-conferencing { vlan-id layer2_priority
DSCP_value } | { priority-tagged number } command.
Parameters vlan-id layer2_priority
Enter the VLAN ID.
Range: 1 to 4094
Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7
664 | Link Layer Detection Protocol (LLDP)
Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63
Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7
Defaults
Command Modes
Command
History unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Related
Commands
DSCP_value priority-tagged number
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration advertise med video-signaling c e s Configure the system to advertise video control packets that use a separate network policy than video data.
Syntax advertise med video-signaling { vlan-id layer2_priority DSCP_value } | { priority-tagged number }
To return to the default, use the no advertise med video-signaling { vlan-id layer2_priority
DSCP_value } | { priority-tagged number } command.
Parameters vlan-id layer2_priority
DSCP_value priority-tagged number
Enter the VLAN ID.
Range: 1 to 4094
Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7
Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63
Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7
Defaults
Command Modes
Command
History unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Related
Commands
Debug LLDP
Link Layer Detection Protocol (LLDP) | 665
show lldp neighbors show lldp neighbors
Display the LLDP neighbors
Display the LLDP running configuration advertise med voice c e s Configure the system to advertise a dedicated IP telephony handset or other appliances supporting interactive voice services.
Syntax advertise med voice { vlan-id layer2_priority DSCP_value } | { priority-tagged number }
To return to the default, use the no advertise med voice { vlan-id layer2_priority DSCP_value } |
{ priority-tagged number } command.
Parameters vlan-id layer2_priority
DSCP_value priority-tagged number
Enter the VLAN ID.
Range: 1 to 4094
Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7
Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63
Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7
Defaults
Command Modes unconfigured
CONFIGURATION (conf-lldp)
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Related
Commands
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration advertise med voice-signaling c e s Configure the system to advertise when voice control packets use a separate network policy than voice data.
Syntax advertise med voice-signaling { vlan-id layer2_priority DSCP_value } | { priority-tagged number }
To return to the default, use the no advertise med voice-signaling { vlan-id layer2_priority
DSCP_value } | { priority-tagged number } command.
666 | Link Layer Detection Protocol (LLDP)
Parameters
Enter the VLAN ID.
Range: 1 to 4094
Enter the Layer 2 priority (C-Series and E-Series only).
Range: 0 to 7
Enter the DSCP value (C-Series and E-Series only).
Range: 0 to 63
Enter the keyword priority-tagged followed the Layer 2 priority.
Range: 0 to 7
Defaults
Command Modes
Command
History unconfigured
CONFIGURATION (conf-lldp)
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series and E-Series
Related
Commands vlan-id layer2_priority
DSCP_value priority-tagged number
show lldp neighbors show lldp neighbors
Debug LLDP
Display the LLDP neighbors
Display the LLDP running configuration
Link Layer Detection Protocol (LLDP) | 667
668 | Link Layer Detection Protocol (LLDP)
22
Multiple Spanning Tree Protocol (MSTP)
Overview
Multiple Spanning Tree Protocol (MSTP), as implemented by FTOS, conforms to IEEE 802.1s. MSTP is supported by FTOS on all Dell Networking systems (C-Series, E-Series, and S-Series), as indicated by the characters that appear below each command heading:
• C-Series: c
• E-Series: e
• S-Series: s
Commands
The following commands configure and monitor MSTP:
•
•
•
•
•
•
•
•
•
•
•
•
show spanning-tree mst configuration
•
•
•
•
•
Multiple Spanning Tree Protocol (MSTP) | 669
debug spanning-tree mstp c e s Enable debugging of Multiple Spanning Tree Protocol and view information on the protocol.
Syntax debug spanning-tree mstp [all | bpdu interface { in | out } | events]
To disable debugging, enter no debug spanning-tree mstp .
Parameters all bpdu interface { in
| out } events
(OPTIONAL) Enter the keyword all to debug all spanning tree operations.
(OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units.
(OPTIONAL) Enter the interface keyword along with the type slot/port of the interface you want displayed. Type slot/port options are the following:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range:1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Optionally, enter an in or out parameter in conjunction with the optional interface:
•For Receive, enter in
•For Transmit, enter out
(OPTIONAL) Enter the keyword events to debug MSTP events.
Command Modes
Command
History
EXEC Privilege
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced on E-Series
Figure 22-1.
debug spanning-tree mstp bpdu Command Example
FTOS#debug spanning-tree mstp bpdu gigabitethernet 2/0 ?
in Receive (in) out Transmit (out)
670 | Multiple Spanning Tree Protocol (MSTP)
description c e s Enter a description of the Multiple Spanning Tree
Syntax description { description }
Parameters
To remove the description, use the no description { description } command.
description Enter a description to identify the Multiple Spanning Tree (80 characters maximum).
Defaults
Command Modes
Command
History
No default behavior or values
SPANNING TREE (The prompt is “config-mstp”.)
Version 8.3.3.1
pre-7.7.1.0
Introduced on the S60.
Introduced
Related
Commands
Enter Multiple SPANNING TREE mode on the switch.
disable c e s Globally disable Multiple Spanning Tree Protocol on the switch.
Syntax
Defaults
Command Modes disable
To enable Multiple Spanning Tree Protocol, enter no disable .
Multiple Spanning Tree Protocol is disabled
MULTIPLE SPANNING TREE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced
Related
Commands
Enter MULTIPLE SPANNING TREE mode.
forward-delay c e s The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
Syntax forward-delay seconds
To return to the default setting, enter no forward-delay.
Multiple Spanning Tree Protocol (MSTP) | 671
Parameters
Defaults
Command Modes
Command
History seconds
15 seconds
MULTIPLE SPANNING TREE
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Enter the number of seconds the interface waits in the Blocking State and the Learning
State before transiting to the Forwarding State.
Range: 4 to 30
Default: 15 seconds.
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced
Change the wait time before MSTP refreshes protocol configuration information.
Change the time interval between BPDUs.
hello-time c e s Set the time interval between generation of Multiple Spanning Tree Bridge Protocol Data Units
(BPDUs).
Syntax hello-time seconds
To return to the default value, enter no hello-time .
Parameters seconds Enter a number as the time interval between transmission of BPDUs.
Range: 1 to 10.
Default: 2 seconds.
Defaults
Command Modes
2 seconds
MULTIPLE SPANNING TREE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced
Related
Commands
The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
Change the wait time before MSTP refreshes protocol configuration information.
672 | Multiple Spanning Tree Protocol (MSTP)
max-age c e s Set the time interval for the Multiple Spanning Tree bridge to maintain configuration information before refreshing that information.
Syntax max-age seconds
To return to the default values, enter no max-age .
Parameters max-age Enter a number of seconds the FTOS waits before refreshing configuration information.
Range: 6 to 40
Default: 20 seconds.
Defaults
Command Modes
20 seconds
MULTIPLE SPANNING TREE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced
Related
Commands
The amount of time the interface waits in the Blocking State and the Learning State before transitioning to the Forwarding State.
Change the time interval between BPDUs.
max-hops c e s Configure the maximum hop count.
Syntax max-hops number
Parameters
To return to the default values, enter no max-hops .
range Enter a number for the maximum hop count.
Range: 1 to 40
Default: 20
Defaults
Command Modes
20 hops
MULTIPLE SPANNING TREE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced
Multiple Spanning Tree Protocol (MSTP) | 673
Usage
Information
The max-hops is a configuration command that applies to both the IST and all MST instances in the
MSTP region. The BPDUs sent out by the root switch set the remaining-hops parameter to the configured value of max-hops. When a switch receives the BPDU, it decrements the received value of the remaining hops and uses the resulting value as remaining-hops in the BPDUs. If the remaining-hops reaches zero, the switch discards the BPDU and ages out any information that it holds for the port.
msti c e s Configure Multiple Spanning Tree instance, bridge priority, and one or multiple VLANs mapped to the
MST instance.
Syntax msti instance { vlan range | bridge-priority priority }
To disable mapping or bridge priority no msti instance { vlan range | bridge-priority priority }
Parameters msti instance vlan range bridge-priority priority
Enter the Multiple Spanning Tree Protocol Instance
Range: zero (0) to 63
Enter the keyword vlan followed by the identifier range value.
Range: 1 to 4094
Enter the keyword bridge-priority followed by a value in increments of
4096 as the bridge priority.
Range: zero (0) to 61440
Valid priority values are: 0, 4096, 8192, 12288, 16384, 20480, 24576,
28672, 32768, 36864, 40960, 45056, 49152, 53248, 57344, and 61440. All other values are rejected.
Defaults
Command Modes default bridge-priority is 32768
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced on E-Series
Usage
Information
By default, all VLANs are mapped to MST instance zero (0) unless you use the vlan range command to map it to a non-zero instance.
name c e s The name you assign to the Multiple Spanning Tree region.
Syntax
Parameters name region-name
To remove the region name, enter no name region-name Enter the MST region name.
Range: 32 character limit
674 | Multiple Spanning Tree Protocol (MSTP)
Defaults
Command Modes
Command
History no default name
MULTIPLE SPANNING TREE
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced
For two MSTP switches to be within the same MSTP region, the switches must share the same region name (including matching case).
Map the VLAN(s) to an MST instance
Assign revision number to the MST configuration.
protocol spanning-tree mstp c e s Enter the MULTIPLE SPANNING TREE mode to enable and configure the Multiple Spanning Tree group.
Syntax
Defaults
Command Modes protocol spanning-tree mstp
To disable the Multiple Spanning Tree group, enter no protocol spanning-tree mstp command.
Not configured.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced on E-Series
Example Figure 22-2.
protocol spanning-tree mstp Command Example
FTOS(conf)#protocol spanning-tree mstp
FTOS(config-mstp)#no disable
Usage
Information
MSTP is not enabled when you enter the MULTIPLE SPANNING TREE mode. To enable MSTP globally on the switch, enter no
disable while in MULTIPLE SPANNING TREE mode.
Refer to the FTOS Configuration Guide for more information on Multiple Spanning Tree Protocol.
Related
Commands
Defaults
Command Modes
Disable.
Disable Multiple Spanning Tree.
MULTIPLE SPANNING TREE
Multiple Spanning Tree Protocol (MSTP) | 675
Usage
Information
Refer to the FTOS Configuration Guide for more information on Multiple Spanning Tree Protocol.
revision c e s The revision number for the Multiple Spanning Tree configuration
Syntax revision range
To return to the default values, enter no revision .
Parameters range Enter the revision number for the MST configuration.
Range: 0 to 65535
Default: 0
Defaults
Command Modes
Command
History
0
MULTIPLE SPANNING TREE
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced
For two MSTP switches to be within the same MST region, the switches must share the same revision number.
Related
Commands
Map the VLAN(s) to an MST instance
Assign the region name to the MST region.
show config c e s View the current configuration for the mode. Only non-default values are shown.
Syntax show config
Command Modes MULTIPLE SPANNING TREE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced on E-Series
676 | Multiple Spanning Tree Protocol (MSTP)
Example Figure 22-3.
show config Command for MULTIPLE SPANNING TREE Mode
FTOS(conf-mstp)#show config
!
protocol spanning-tree mstp
no disable
name CustomerSvc
revision 2
MSTI 10 VLAN 101-105
max-hops 5
FTOS(conf-mstp)# show spanning-tree mst configuration c e s View the Multiple Spanning Tree configuration.
Syntax show spanning-tree mst configuration
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced on E-Series
Example Figure 22-4.
show spanning-tree mst configuration Command Example
FTOS#show spanning-tree mst configuration
MST region name: CustomerSvc
Revision: 2
MSTI VID
10 101-105
FTOS#
Usage
Information
You must enable Multiple Spanning Tree Protocol prior to using this command.
Multiple Spanning Tree Protocol (MSTP) | 677
show spanning-tree msti c e s View the Multiple Spanning Tree instance.
Syntax show spanning-tree msti [ instance-number [ brief ]]
Parameters instance-number brief
[Optional] Enter the Multiple Spanning Tree Instance number
Range: 0 to 63
[Optional] Enter the keyword brief to view a synopsis of the MST instance.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Expanded to display port error disable state (EDS) caused by loopback BPDU
inconsistency (see Figure 22-6 )
Figure 22-5.
show spanning-tree msti [instance-number] Command Example
FTOS#show spanning-tree msti 10
MSTI 10 VLANs mapped 101-105
Bridge Identifier has priority 32768, Address 0001.e802.3506
Configured hello time 2, max age 20, forward delay 15, max hops 5
Current root has priority 16384, Address 0001.e800.0a5c
Number of topology changes 0, last change occurred 3058087
Port 82 (GigabitEthernet 2/0) is designated Forwarding
Port path cost 0, Port priority 128, Port Identifier 128.82
Designated root has priority 16384, address 0001.e800.0a:5c
Designated bridge has priority 32768, address 0001.e802.35:06
Designated port id is 128.82, designated path cost
Number of transitions to forwarding state 1
BPDU (Mrecords): sent 1109, received 0
The port is not in the portfast mode
Port 88 (GigabitEthernet 2/6) is root Forwarding
Port path cost 0, Port priority 128, Port Identifier 128.88
Designated root has priority 16384, address 0001.e800.0a:5c
Designated bridge has priority 16384, address 0001.e800.0a:5c
Designated port id is 128.88, designated path cost
Number of transitions to forwarding state 4
BPDU (Mrecords): sent 19, received 1103
The port is not in the portfast mode
Port 89 (GigabitEthernet 2/7) is alternate Discarding
Port path cost 0, Port priority 128, Port Identifier 128.89
Designated root has priority 16384, address 0001.e800.0a:5c
Designated bridge has priority 16384, address 0001.e800.0a:5c
Designated port id is 128.89, designated path cost
Number of transitions to forwarding state 3
BPDU (Mrecords): sent 7, received 1103
The port is not in the portfast mode
FTOS#
678 | Multiple Spanning Tree Protocol (MSTP)
Example 2 Figure 22-6.
show spanning-tree msti with EDS and LBK
FTOS#show spanning-tree msti 0 brief
MSTI 0 VLANs mapped 1-4094
Executing IEEE compatible Spanning Tree Protocol
Root ID Priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15, max hops 20
Bridge ID Priority 32768, Address 0001.e801.6aa8
We are the root of MSTI 0 (CIST)
Configured hello time 2, max age 20, forward delay 15, max hops 20
CIST regional root ID Priority 32768, Address 0001.e801.6aa8
CIST external path cost 0
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID PortID
---------- -------- ---- ------- --- ------- -------------------- --------
Gi 0/0 128.257 128 20000 EDS 0 32768 0001.e801.6aa8 128.257
Interface
Name Role PortID Prio Cost Sts Cost Link-type Edge Boundary
---------- ------ -------- ---- ------- --- ------- --------- ---- --------
Gi 0/0 ErrDis 128.257 128 20000 EDS 0 P2P No No
FTOS#show spanning-tree msti 0
MSTI 0 VLANs mapped 1-4094
Root Identifier has priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15, max hops 20
Bridge Identifier has priority 32768, Address 0001.e801.6aa8
Configured hello time 2, max age 20, forward delay 15, max hops 20
We are the root of MSTI 0 (CIST)
Current root has priority 32768, Address 0001.e801.6aa8
CIST regional root ID Priority 32768, Address 0001.e801.6aa8
CIST external path cost 0
Number of topology changes 1, last change occurred 00:00:15 ago on Gi 0/0
Port 257 (GigabitEthernet 0/0) is LBK_INC Discarding
Loopback BPDU
Port path cost 20000, Port priority 128, Port Identifier 128.257
Inconsistency
Designated root has priority 32768, address 0001.e801.6aa8
(LBK_INC)
Designated bridge has priority 32768, address 0001.e801.6aa8
Designated port id is 128.257, designated path cost 0
Number of transitions to forwarding state 1
BPDU (MRecords): sent 21, received 9
The port is not in the Edge port mode
Usage
Information
You must enable Multiple Spanning Tree Protocol prior to using this command.
spanning-tree c e s Enable Multiple Spanning Tree Protocol on the interface.
Syntax spanning-tree
To disable the Multiple Spanning Tree Protocol on the interface, use no spanning-tree
Parameters spanning-tree Enter the keyword spanning-tree to enable the MSTP on the interface.
Default: Enable
Defaults
Command Modes
Enable
INTERFACE
Multiple Spanning Tree Protocol (MSTP) | 679
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced on E-Series spanning-tree msti c e s Configure Multiple Spanning Tree instance cost and priority for an interface.
Syntax spanning-tree msti instance { cost cost | priority priority }
To remove the cost or priority for the MST instance, use no spanning-tree msti instance { cost cost | priority priority }
Parameters msti instance cost cost priority priority
Enter the keyword msti and the MST Instance number.
Range: zero (0) to 63
(OPTIONAL) Enter the keyword cost followed by the port cost value.
Range: 1 to 200000
Defaults:
100 Mb/s Ethernet interface = 200000
1-Gigabit Ethernet interface = 20000
10-Gigabit Ethernet interface = 2000
Port Channel interface with one 100 Mb/s Ethernet = 200000
Port Channel interface with one 1-Gigabit Ethernet = 20000
Port Channel interface with one 10-Gigabit Ethernet = 2000
Port Channel with two 1-Gigabit Ethernet = 18000
Port Channel with two 10-Gigabit Ethernet = 1800
Port Channel with two 100-Mbps Ethernet = 180000
Enter keyword priority followed by a value in increments of 16 as the priority.
Range: 0 to 240.
Default: 128
Defaults
Command Modes cost = depends on the interface type; priority = 128
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced on E-Series spanning-tree mstp edge-port c e s Configures the interface as an Multiple Spanning Tree edge port and optionally a Bridge Protocol Data
Unit (BPDU) guard.
Syntax spanning-tree mstp edge-port [ bpduguard [ shutdown-on-violation ]]
680 | Multiple Spanning Tree Protocol (MSTP)
Parameters mstp edge-port bpduguard shutdown-on-v iolation
Enter the keywords mstp followed by the keyword edge-port to configure the interface as a Multiple Spanning Tree edge port.
(OPTIONAL) Enter the keyword portfast to enable Portfast to move the interface into forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.
(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
INTERFACE Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on the S60.
Introduced hardware shutdown-on-violation option
Added support for S-Series
Added support for C-Series
Support for BPDU guard added
On an MSTP switch, a port configured as an edge port will immediately transition to the forwarding state. Only ports connected to end-hosts should be configured as an edge port. Consider an edge port similar to a port with spanning-tree portfast enabled.
If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.
tc-flush-standard c e s Enable the MAC address flushing upon receiving every topology change notification.
Syntax tc-flush-standard
To disable, use the no tc-flush-standard command.
Defaults
Command Modes
Disabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on the S60.
Added support for S-Series
Added support for C-Series
Introduced
Usage
Information
By default FTOS implements an optimized flush mechanism for MSTP. This helps in flushing the
MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses upon receiving every topology change notification.
Multiple Spanning Tree Protocol (MSTP) | 681
682 | Multiple Spanning Tree Protocol (MSTP)
23
Multicast
Overview
The platforms on which a command is supported is indicated by the character — e
for the E-Series, c for the C-Series, and s
for the S-Series — that appears below each command heading.
This chapter contains the following sections:
•
•
IPv4 Multicast Commands
The IPv4 Multicast commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
show queue backplane multicast
clear ip mroute c e s Clear learned multicast routes on the multicast forwarding table. To clear the PIM tree information
command.
Syntax clear ip mroute { group-address [ source-address ] | *}
Multicast | 683
Parameters
Command Modes
Command
History group-address
[ source-address ]
*
EXEC Privilege
Enter multicast group address and source address (if desired), in dotted decimal format, to clear information on a specific group.
Enter * to clear all multicast routes.
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series
E-Series legacy command
Related
Commands
Show the PIM Tree Information Base.
ip mroute c e s Assign a static mroute.
Syntax ip mroute destination mask { ip-address | null 0 | {{ bgp | ospf } process-id | isis | rip | static }
{ ip-address | tag | null 0 }} [ distance ]
To delete a specific static mroute, use the command ip mroute destination mask { ip-address | null 0 |
{{ bgp | ospf } process-id | isis | rip | static } { ip-address | tag | null 0 }} [ distance ].
Parameters
To delete all mroutes matching a certain mroute, use the no ip mroute destination mask command. destination mask null 0
[ protocol [ process-id | tag ] ip-address ] static ipdistance address ip-address
Enter the IP address in dotted decimal format of the destination device.
Enter the mask in slash prefix formation ( /x ) or in dotted decimal format.
(OPTIONAL) Enter the null followed by zero (0).
(OPTIONAL) Enter one of the routing protocols:
• Enter the BGP as-number followed by the IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.
Range:1-65535
• Enter the OSPF process identification number followed by the IP address in dotted decimal format of the reverse path forwarding
(RPF) neighbor.
Range: 1-65535
• Enter the IS-IS alphanumeric tag string followed by the IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.
• Enter the RIP IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.
(OPTIONAL) Enter the Static IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.
(OPTIONAL) Enter the IP address in dotted decimal format of the reverse path forwarding (RPF) neighbor.
(OPTIONAL) Enter a number as the distance metric assigned to the mroute.
Range: 0 to 255
684 | Multicast
Defaults
Command Modes
Command
History
Related
Commands
Not configured.
CONFIGURATION
Version 8.3.3.1
Introduced on S60
E-Series legacy command
View the E-Series routing table.
ip multicast-lag-hashing e Distribute multicast traffic among Port Channel members in a round-robin fashion.
Syntax ip multicast-lag-hashing
To revert to the default, enter no ip multicast-lag-hashing .
Defaults Disabled
Command Modes CONFIGURATION
Command
History
Usage
Information
Version 6.3.1.0
Introduced for E-Series
By default, one Port Channel member is chosen to forward multicast traffic. With this feature turned on, multicast traffic will be distributed among the Port Channel members in a round-robin fashion.
This feature applies to the routed multicast traffic. If IGMP Snooping is turned on, this feature also applies to switched multicast traffic.
Related
Commands
Enable IP multicast forwarding.
ip multicast-routing c e s Enable IP multicast forwarding.
Syntax ip multicast-routing
To disable multicast forwarding, enter no ip multicast-routing .
Defaults Disabled
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Introduced on S60
E-Series legacy command
Usage
Information
You must enter this command to enable multicast on the E-Series.
After you enable multicast, you can enable IGMP and PIM on an interface. In the INTERFACE mode,
command to enable IGMP and PIM on the interface.
Multicast | 685
Related
Commands
Enable IGMP and PIM on an interface.
ip multicast-limit c e s Use this feature to limit the number of multicast entries on the system.
Syntax
Parameters ip multicast-limit limit limit Enter the desired maximum number of multicast entries on the system.
E-Series Range: 1 to 50000
E-Series Default: 15000
C-Series Range: 1 to 10000
C-Series Default: 4000
S-Series Range: 1 to 2000
S-Series Default: 400
Defaults
Command Modes
Command
History
As above
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Introduced on S60
Introduced on C-Series
Introduced on E-Series
This features allows the user to limit the number of multicast entries on the system. This number is the sum total of all the multicast entries on all line cards in the system. On each line card, the multicast module will only install the maximum possible number of entries, depending on the configured CAM profile.
The IN-L3-McastFib CAM partition is used to store multicast routes and is a separate hardware limit that is exists per port-pipe. Any software-configured limit might be superseded by this hardware space limitation. The opposite is also true, the CAM partition might not be exhausted at the time the system-wide route limit set by the ip multicast-limit is reached.
mac-flood-list e Provide an exception to the restrict-flood configuration so that multicast frames within a specified
MAC address range to be flooded on all ports in a VLAN.
Syntax
Parameters mac-flood-list mac-address mask vlan vlan-list [ min-speed speed ] mac-address mac-mask
Enter a multicast MAC address in hexadecimal format.
Enter the MAC Address mask.
686 | Multicast
vlan vlan-list min-speed min-speed
Enter the VLAN(s) in which flooding will be restricted. Separate values by commas—no spaces ( 1,2,3 ) or indicate a list of values separated by a hyphen (1-3).
Range: 1 to 4094
(OPTIONAL) Enter the minimum link speed that ports must have to receive the specified flooded multicast traffic.
Defaults
Command Modes
Command
History
None
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Introduced on S60
Introduced on E-Series
When the mac-flood-list with the min-speed option is used in combination with the restrict-flood command, mac-flood-list command has higher priority than the restrict-flood command.
Therefore, all multicast frames matching the mac-address range specified using the mac-flood-list command are flooded according to the mac-flood-list command. Only the multicast frames not matching the mac-address range specified using the mac-flood-list command are flooded according to the restrict-flood command.
Prevent Layer 2 multicast traffic from being forwarded on ports below a specified speed.
mtrace e Trace a multicast route from the source to the receiver.
Syntax mtrace { source-address/hostname } { destination-address/hostname } { group-address }
Parameters source-address/ hostname destination-address/ hostname group-address
Enter the source IP address in dotted decimal format (A.B.C.D).
Enter the destination (receiver) IP address in dotted decimal format (A.B.C.D).
Enter the multicast group address in dotted decimal format (A.B.C.D).
EXEC Privilege Command Modes
Command
History
Usage
Information
Version 7.5.1.0
Version 7.4.1.0
Expanded to support originator
Expanded to support intermediate (transit) router
E-Series legacy command
Mtrace is an IGMP protocol based on the Multicast trace route facility and implemented according to the IETF draft “A trace route facility for IP Multicast” (draft-fenner-traceroute-ipm-01.txt). FTOS supports the Mtrace client and transmit functionality.
As an Mtrace client, FTOS transmits Mtrace queries, receives, parses and prints out the details in the response packet received.
Multicast | 687
As an Mtrace transit or intermediate router, FTOS returns the response to Mtrace queries. Upon receiving the Mtrace request, FTOS computes the RPF neighbor for the source, fills in the request and the forwards the request to the RPF neighbor. While computing the RPF neighbor, the static mroute and mBGP route is preferred over the unicast route.
multicast-buffering enable
Enable buffering for all multicast traffic on the buffering unit.
Syntax
Command Modes
Command
History
Usage
Information
[no] multicast-buffering enable
CONFIGURATION
Version 8.3.3.8
Introduced on S60.
Related
Commands
Use this command to enable backpressure messages for multicast traffic and allow the system to start buffering multicast traffic. If multicast traffic is buffered for one group on any port, all multicast,
Destination Lookup Failure (DLF) and broadcast traffic is buffered. Note that multicast packets might be dropped if either of the following occurs:
• continuous oversubscription at the egress
• if the packet is not drained for a long period because of slow draining rate at the egress port compared to high ingress rate.
You must reboot the switch to enable the command on a standalone unit. Buffering multicast units is not supported on stacked units.
Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
queue backplane multicast e Reallocate the amount of bandwidth dedicated to multicast traffic.
Syntax
Parameters queue backplane multicast bandwidth-percentage percentage percentage Enter the percentage of backplane bandwidth to be dedicated to multicast traffic.
Range: 5-95
Defaults
Command Modes
Command
History
80% of the scheduler weight is for unicast traffic and 20% is for multicast traffic by default.
CONFIGURATION
Version 7.7.1.0
Introduced on E-Series
688 | Multicast
Example Figure 23-1.
Command Example: queue backplane multicast
FTOS(conf)#queue backplane multicast bandwidth-percent 30
FTOS(conf)#exit
FTOS#00:14:04: %RPM0-P:CP %SYS-5-CONFIG_I: Configured from console by console show run | grep bandwidth queue backplane multicast bandwidth-percent 30
FTOS#
Related
Commands
show queue backplane multicast
Display the backplane bandwidth configuration about how much bandwidth is dedicated to multicast versus unicast.
restrict-flooding e Prevent Layer 2 multicast traffic from being flooded on ports below a specified link speed.
Syntax
Parameters restrict-flooding multicast min-speed speed min-speed min-speed Enter the minimum link speed that a port must have to receive flooded multicast traffic.
Range: 1000
Defaults
Command Modes
None
INTERFACE VLAN
Command
History
Usage
Information
Version 7.7.1.0
Introduced on E-Series
Related
Commands
This command restricts flooding for all unknown multicast traffic on ports below a certain speed. If you want some multicast traffic to be flooded on slower ports, use the command mac-flood-list without the min-speed option, in combination with restrict-flooding . With mac-flood-list you specify the traffic you want to be flooded using a MAC address range.
You may not use unicast MAC addresses when specifying MAC address ranges, and do not overlap
MAC addresses ranges, when creating multiple mac-flood-list entries for the same VLAN. Restricted
Layer 2 Flooding is not compatible with MAC accounting or VMANs.
Flood multicast frames with specified MAC addresses to all ports in a
VLAN.
show ip mroute c e s View the Multicast Routing Table.
Syntax show ip mroute [ static | group-address [ source-address ] | active [ rate ] | count | summary ]
Multicast | 689
Parameters static group-address
[ source-address ] active count
[ rate ]
(OPTIONAL) Enter the keyword static to view static multicast routes.
(OPTIONAL) Enter the multicast group-address to view only routes associated with that group.
Enter the source-address to view routes with that group-address and source-address.
(OPTIONAL) Enter the keyword active to view only active multicast routes.
Enter a rate to view active routes over the specified rate.
Range: 0 to 10000000
(OPTIONAL) Enter the keyword count to view the number of multicast routes and packets on the E-Series.
(OPTIONAL) Enter the keyword summary to view routes in a tabular format.
Command Modes summary
EXEC
EXEC Privilege
Command
History
Example 1
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series
E-Series legacy command
Figure 23-2.
Command Example: show ip mroute static
FTOS#show ip mroute static
Mroute: 23.23.23.0/24, interface: Lo 2
Protocol: static, distance: 0, route-map: none, last change: 00:00:23
FTOS#
Example 2 Figure 23-3.
Command Example: show ip mroute
FTOS#show ip mroute
IP Multicast Routing Table
(*, 224.10.10.1), uptime 00:05:12
Incoming interface: GigabitEthernet 3/12
Outgoing interface list:
GigabitEthernet 3/13
(1.13.1.100, 224.10.10.1), uptime 00:04:03
Incoming interface: GigabitEthernet 3/4
Outgoing interface list:
GigabitEthernet 3/12
GigabitEthernet 3/13
(*, 224.20.20.1), uptime 00:05:12
Incoming interface: GigabitEthernet 3/12
Outgoing interface list:
GigabitEthernet 3/4
FTOS#
690 | Multicast
Table 23-1.
Command Example Fields: show ip mroute
Field
(S,G) uptime
Incoming interface
Outgoing interface list:
Description
Displays the forwarding entry in the multicast route table.
Displays the amount of time the entry has been in the multicast forwarding table.
Displays the reverse path forwarding (RPF) information towards the the source for (S,G) entries and the RP for (*,G) entries.
Lists the interfaces that meet one of the following:
• a directly connected member of the Group
• statically configured member of the Group
• received a (*,G) or (S,G) Join message show ip rpf c e s View reverse path forwarding.
Syntax show ip rpf
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Introduced on S60
E-Series legacy command
Usage
Information
Example
Static mroutes are used by network administrators to control the reachability of the multicast sources.
If a PIM registered multicast source is reachable via static mroute as well as unicast route, the distance of each route is examined and the route with shorter distance is the one the PIM selects for reachability.
Note: The default distance of mroutes is zero (0) and is CLI configurable on a per route basis.
Figure 23-4.
Command Example: show ip rpf
FTOS#show ip rpf
RPF information for 10.10.10.9
RPF interface: Gi 3/4
RPF neighbor: 165.87.31.4
RPF route/mask: 10.10.10.9/255.255.255.255
RPF type: unicast show queue backplane multicast e Display the backplane bandwidth configuration about how much bandwidth is dedicated to multicast versus unicast.
Syntax
Defaults show queue backplane multicast bandwidth-percentage
None
Multicast | 691
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 7.7.1.0
Introduced on E-Series
Figure 23-5.
Command Example: show queue backplane multicast
FTOS#show queue backplane multicast bandwidth-percent
Configured multicast bandwidth percentage is 80
Related
Commands
Reallocate the amount of bandwidth dedicated to multicast traffic.
IPv6 Multicast Commands
IPv6 Multicast commands are:
•
•
•
•
•
•
clear ipv6 mroute e Clear learned multicast routes on the multicast forwarding table. To clear the PIM tib, use
command.
Syntax clear ipv6 mroute { group-address [ source-address ] | * }
Parameters group-address
[ source-address ]
*
Enter multicast group address and source address (if desired) to clear information on a specific group. Enter the addresses in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero.
Enter * to clear all multicast routes.
Defaults
Command Modes
No default behavior or values
EXEC Privilege
Command
History
Version 7.4.1.0
Introduced
692 | Multicast
ipv6 multicast-limit e Limit the number of multicast entries on the system.
Syntax ipv6 multicast-limit limit
Parameters limit Enter the desired maximum number of multicast entries on the system.
Range: 1 to 50000
Default: 15000
Defaults
Command Modes
15000 routes
CONFIGURATION
Command
History
Usage
Information
Version 8.3.1.0
Introduced
The maximum number of multicast entries allowed on each line card is determined by the CAM profile. Multicast routes are stored in the IN-V6-McastFib CAM region, which has a fixed number of entries. Any limit configured via the CLI is superseded by this hardware limit. The opposite is also true; the CAM might not be exhausted at the time the CLI-configured route limit is reached.
ipv6 multicast-routing e Enable IPv6 multicast forwarding.
Syntax ipv6 multicast-routing
To disable multicast forwarding, enter no ipv6 multicast-routing .
Defaults
Command Modes
Disabled
CONFIGURATION
Command
History
E-Series legacy command show ipv6 mroute e View IPv6 multicast routes.
Syntax show ipv6 mroute [ group-address [ source-address ]] [active rate ] [count group-address [source source-address ]]
Parameters group-address
[ source-address ]
(OPTIONAL) Enter the IPv6 multicast group-address to view only routes associated with that group. Optionally, enter the IPv6 source-address to view routes with that group-address and source-address.
Multicast | 693
Command Modes active [ rate ] count group-address [ source source-address ]}
(OPTIONAL) Enter the keyword active to view active multicast sources. Enter a rate to view active routes over the specified rate.
Range: 0 to 10000000 packets/second
(OPTIONAL) Enter the keyword count to view the number of IPv6 multicast routes and packets on the E-Series. Optionally, enter the IPv6 source-address count information.
EXEC
EXEC Privilege
Command
History
Example
Version 7.4.1.0
Introduced
Figure 23-6.
Command Example: show ipv6 mroute
FTOS#show ipv6 mroute
IP Multicast Routing Table
(165:87:32::30, ff05:100::1), uptime 00:01:11
Incoming interface: Vlan 200
Outgoing interface list:
GigabitEthernet 2/14
(165:87:37::30, ff05:200::1), uptime 00:01:04
Incoming interface: Port-channel 200
Outgoing interface list:
Vlan 200
(165:87:31::30, ff05:300::1), uptime 00:01:19
Incoming interface: GigabitEthernet 2/14
Outgoing interface list:
Port-channel 200
(165:87:32::30, ff05:1100::1), uptime 00:01:08
Incoming interface: Vlan 200
Outgoing interface list:
GigabitEthernet 2/14
(165:87:37::30, ff05:2200::1), uptime 00:01:01
Incoming interface: Port-channel 200
Outgoing interface list:
Vlan 200
FTOS#
Example Figure 23-7.
Command Example: show ipv6 mroute active
FTOS#show ipv6 mroute active 10
Active Multicast Sources - sending >= 10 pps
Group: ff05:300::1
Source: 165:87:31::30
Rate: 100 pps
Group: ff05:3300::1
Source: 165:87:31::30
Rate: 100 pps
Group: ff3e:300::4000:1
Source: 165:87:31::20
Rate: 100 pps
Group: ff3e:3300::4000:1
Source: 165:87:31::20
Rate: 100 pps
FTOS#
694 | Multicast
Example Figure 23-8.
Command Example: show ipv6 mroute count group
FTOS#show ipv6 mroute count group ff05:3300::1
IP Multicast Statistics
1 routes using 648 bytes of memory
1 groups, 1.00 average sources per group
Forwarding Counts: Pkt Count/Pkts per second
Group: ff05:3300::1, Source count: 1
Source: 165:87:31::30, Forwarding: 3997/0
FTOS#
Example Figure 23-9.
Command Example: show ipv6 mroute count source
FTOS#show ipv6 mroute count source 165:87:31::30
IP Multicast Statistics
2 routes using 1296 bytes of memory
2 groups, 1.00 average sources per group
Forwarding Counts: Pkt Count/Pkts per second
Group: ff05:300::1, Source count: 1
Source: 165:87:31::30, Forwarding: 3993/0
Group: ff05:3300::1, Source count: 1
Source: 165:87:31::30, Forwarding: 3997/0
FTOS# show ipv6 mroute mld e Display the Multicast MLD information.
Syntax show ipv6 mroute [ mld [ group-address | all | vlan vlan-id ]]
Parameters mld group-address all vlan vlan-id
(OPTIONAL) Enter the keyword mld to display Multicast MLD information.
(OPTIONAL) Enter the multicast group address in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero.
(OPTIONAL) Enter the keyword all to view all the MLD information.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to view
MLD VLAN information.
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 7.4.1.0
Introduced
Multicast | 695
Example Figure 23-10.
Command Example: show ipv6 mroute mld all
FTOS#show ipv6 mroute mld all
MLD SNOOPING MRTM Table
(*, ff05:100::1), uptime 00:04:21
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16
(*, ff05:200::1), uptime 00:04:15
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16
(*, ff05:1100::1), uptime 00:04:18
Incoming vlan: Vlan 200
Outgoing interface list:
GigabitEthernet 2/15
GigabitEthernet 2/16
FTOS# show ipv6 mroute summary e Display a summary of the Multicast routing table.
Syntax show ipv6 mroute summary
Defaults No default values or behavior
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 7.4.1.0
Introduced
Figure 23-11.
Command Example: show ipv6 mroute summary
FTOS#show ipv6 mroute summary
IP Multicast Routing Table
12 groups, 12 routes
(165:87:32::30, ff05:100::1), 00:00:24
(165:87:37::30, ff05:200::1), 00:00:24
(165:87:31::30, ff05:300::1), 00:00:24
(165:87:32::30, ff05:1100::1), 00:00:21
(165:87:37::30, ff05:2200::1), 00:00:21
(165:87:31::30, ff05:3300::1), 00:00:21
(165:87:32::20, ff3e:100::4000:1), 00:00:41
FTOS#
696 | Multicast
24
Neighbor Discovery Protocol (NDP)
Overview
Neighbor Discovery Protocol for IPv6 is defined in RFC 2461 as part of the Stateless Address
Autoconfiguration protocol. It replaces the Address Resolution Protocol used with IPv4. It defines mechanisms for solving the following problems:
• Router discovery: Hosts can locate routers residing on a link.
• Prefix discovery: Hosts can discover address prefixes for the link.
• Parameter discovery
• Address autoconfiguration — configuration of addresses for an interface
• Address resolution — mapping from IP address to link-layer address
• Next-hop determination
• Neighbor Unreachability Detection (NUD): Determine that a neighbor is no longer reachable on the link.
• Duplicate Address Detection (DAD): Allow a node to check whether a proposed address is already in use.
• Redirect: The router can inform a node about a better first-hop.
NDP makes use of the following five ICMPv6 packet types in its implementation:
• Router Solicitation
• Router Advertisement
• Neighbor Solicitation
• Neighbor Advertisement
• Redirect
Commands
The Neighbor Discovery Protocol (NDP) commands in this chapter are:
•
•
•
•
•
•
•
•
•
Neighbor Discovery Protocol (NDP) | 697
•
•
clear ipv6 neighbors e Delete all entries in the IPv6 neighbor discovery cache, or neighbors of a specific interface. Static entries will not be removed using this command.
Syntax clear ipv6 neighbors [ ipv6-address ] [ interface ]
Parameters ipv6-address interface interface
Enter the IPv6 address of the neighbor in the x:x:x:x::x format to remove a specific IPv6 neighbor.
The :: notation specifies successive hexadecimal fields of zero.
To remove all neighbor entries learned on a specific interface, enter the keyword interface followed by the interface type and slot/port or number information of the interface:
• For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 255.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by the VLAN ID. The range is from 1 to 4094.
Command Modes EXEC
EXEC Privilege ipv6 nd managed-config-flag e Set the managed address configuration flag in the IPv6 router advertisement. The description of this flag from RFC 2461 ( http://tools.ietf.org/html/rfc2461 ) is:
M : 1-bit “Managed address configuration” flag. When set, hosts use the administered (stateful) protocol for address autoconfiguration in addition to any addresses autoconfigured using stateless address autoconfiguration. The use of this flag is described in:
Thomson, S. and T. Narten, “IPv6 Address Autoconfiguration”, RFC 2462, December 1998.
Syntax ipv6 nd managed-config-flag
To clear the flag from the IPv6 router advertisements, use the no ipv6 nd managed-config-flag command.
Defaults
Command Modes
The default flag is 0.
INTERFACE
698 | Neighbor Discovery Protocol (NDP)
ipv6 nd max-ra-interval e Configure the interval between the IPv6 router advertisement (RA) transmissions on an interface.
Syntax ipv6 nd max-ra-interval { interval } min-ra-interval { interval }
To restore the default interval, use the no ipv6 nd max-ra-interval command.
Parameters max-ra-interval { interval } min-ra-interval { interval }
Enter the keyword max-ra-interval followed by the interval in seconds.
Range: 4 to 1800 seconds
Enter the keyword min-ra-interval followed by the interval in seconds.
Range: 3 to 1350 seconds
Defaults
Command Modes
Max RA interval: 600 seconds, Min RA interval: 200 seconds
INTERFACE ipv6 nd mtu c e s Configure an IPv6 neighbor discovery.
Syntax ipv6 nd mtu number
Parameters mtu number Set the MTU advertisement value in Routing Prefix
Advertisement packets. Range: 1280 to 9234
Defaults
Command Modes
Command
History
No default values or behavior
INTERFACE
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced
The ip nd mtu command sets the value advertised to routers. It does not set the actual MTU rate. For example, if ip nd mtu is set to 1280, the interface will still pass 1500-byte packets.
The mtu command sets the actual frame size passed, and can be larger than the advertised MTU. If the mtu setting is larger than the ip nd mtu, an error message is sent, but the configuration is accepted.
% Error: nd ra mtu is greater than link mtu, link mtu will be used.
Set the maximum link MTU (frame size) for an Ethernet interface .
Neighbor Discovery Protocol (NDP) | 699
ipv6 nd other-config-flag e Set the other stateful configuration flag in the IPv6 router advertisement. The description of this flag from RFC 2461 ( http://tools.ietf.org/html/rfc2461 ) is:
O: 1-bit “Other stateful configuration” flag. When set, hosts use the administered (stateful) protocol for autoconfiguration of other (non-address) information. The use of this flag is described in:
Thomson, S. and T. Narten, “IPv6 Address Autoconfiguration”, RFC 2462, December 1998.
Syntax ipv6 nd other-config-flag
To clear the flag from the IPv6 router advertisements, use the no ipv6 nd other-config-flag command.
Defaults The default flag is 0.
Command Modes INTERFACE ipv6 nd prefix e Configure how IPv6 prefixes are advertised in the IPv6 router advertisements. The description of an
IPv6 prefix from RFC 2461( http://tools.ietf.org/html/rfc2461 ) is a bit string that consists of some number of initial bits of an address.
Syntax ipv6 nd prefix { ipv6-address prefix-length | default } [ no-advertise ] | [ no-autoconfig | no-rtr-address | off-link ]
Parameters
To prevent a prefix (or prefixes) from being advertised, use the no ipv6 nd prefix { ipv6-address prefix-length | default } [ no-advertise { valid-lifetime seconds | preferred-lifetime seconds }] |
[ no-autoconfig | no-rtr-address | off-link ] command.
ipv6-address prefix-length default no-advertise no-autoconfig no-rtr-address off-link
Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
The :: notation specifies successive hexadecimal fields of zeros
(OPTIONAL) Enter the keyword default to specify the prefix default parameters.
(OPTIONAL) Enter the keyword no-advertise to not advertise prefixes.
(OPTIONAL) Enter the keyword no-autoconfig to not use prefixes for auto-configuration.
(OPTIONAL) Enter the keyword no-rtr-address to not send full router addresses in prefix advertisement.
(OPTIONAL) Enter the keyword off-link to not use prefixes for on-link determination.
Defaults
Command Modes
Not configured
INTERFACE
700 | Neighbor Discovery Protocol (NDP)
ipv6 nd ra-lifetime e Configure the router lifetime value in the IPv6 router advertisements on an interface. The description of router lifetime from RFC 2461( http://tools.ietf.org/html/rfc2461 ) is:
Router Lifetime : 16-bit unsigned integer. The lifetime associated with the default router in units of seconds. The maximum value corresponds to 18.2 hours. A Lifetime of 0 indicates that the router is not a default router and SHOULD NOT appear on the default router list. The Router Lifetime applies only to the router's usefulness as a default router; it does not apply to information contained in other message fields or options. Options that need time limits for their information include their own lifetime fields.
Syntax ipv6 nd ra-lifetime seconds
To restore the default values, use the no ipv6 nd ra-lifetime command.
Parameters seconds Enter the lifetime value in seconds.
Range: 0 to 9000
Defaults
Command Modes
9000 seconds
INTERFACE ipv6 nd reachable-time e Configure the amount of time that a remote IPv6 node is considered available after a reachability confirmation event has occurred. The description of reachable time from RFC 2461( http:// tools.ietf.org/html/rfc2461 ) is:
Reachable Time : 32-bit unsigned integer. The time, in milliseconds, that a node assumes a neighbor is reachable after having received a reachability confirmation. Used by the Neighbor Unreachability
Detection algorithm. A value of zero means unspecified (by this router).
Syntax ipv6 nd reachable-time { milliseconds }
To restore the default time, use the no ipv6 nd reachable-time command.
Parameters milliseconds Enter the leachability time in milliseconds.
Range: 0 to 3600000
Defaults
Command Modes
3600000 milliseconds
INTERFACE ipv6 nd suppress-ra e Suppress the IPv6 router advertisement transmissions on an interface.
Syntax ipv6 nd suppress-ra
To enable the sending of IPv6 router advertisement transmissions on an interface, use the no ipv6 nd suppress-ra command.
Neighbor Discovery Protocol (NDP) | 701
Defaults
Command Modes
Enabled
INTERFACE ipv6 neighbor e Configure a static entry in the IPv6 neighbor discovery.
Syntax
Parameters ipv6 neighbor { ipv6-address } { interface interface } { hardware_address }
To remove a static IPv6 entry from the IPv6 neighbor discovery, use the no ipv6 neighbor
{ ipv6-address } { interface interface } command.
ipv6-address interface interface hardware_address
Enter the IPv6 address of the neighbor in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
Enter the keyword interface followed by the interface type and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 255.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Enter a 48-bit hardware MAC address in nn:nn:nn:nn:nn:nn format.
Defaults
Command Modes
No default behavior or values
CONFIGURATION show ipv6 neighbors e Display IPv6 discovery information. Entering the command without options shows all IPv6 neighbor addresses stored on the CP (control processor).
Syntax show ipv6 neighbors [ ipv6-address ] [ cpu { rp1 [ ipv6-address ] | rp2 [ ipv6-address ]} ] [ interface interface ]
Parameters ipv6-address Enter the IPv6 address of the neighbor in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
702 | Neighbor Discovery Protocol (NDP)
Defaults
Command Modes
Example cpu interface interface
Enter the keyword cpu followed by either rp1 or rp2 (Route Processor 1 or 2), optionally followed by an IPv6 address to display the IPv6 neighbor entries stored on the designated RP.
• For a Fast Ethernet interface, enter the keyword fastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 255.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by the VLAN ID. The range is from 1 to 4094.
No default behavior or values
EXEC
EXEC Privilege
Figure 24-1.
Command Example: show ipv6 neighbors
FTOS#show ipv6 neighbors
IPv6 Address Expires(min) Hardware Address State Interface VLAN CPU
-----------------------------------------------------------------------------fe80::201:e8ff:fe17:5bc6
1439 00:01:e8:17:5b:c6 STALE Gi 1/9 - CP fe80::201:e8ff:fe17:5bc7
1439 00:01:e8:17:5b:c7 STALE Gi 1/10 - CP fe80::201:e8ff:fe17:5bc8
1439 00:01:e8:17:5b:c8 STALE Gi 1/11 - CP fe80::201:e8ff:fe17:5caf
0.3 00:01:e8:17:5c:af REACH Po 1 - CP fe80::201:e8ff:fe17:5cb0
1439 00:01:e8:17:5c:b0 STALE Po 32 - CP fe80::201:e8ff:fe17:5cb1
1439 00:01:e8:17:5c:b1 STALE Po 255 - CP fe80::201:e8ff:fe17:5cae
1439 00:01:e8:17:5c:ae STALE Gi 1/3 Vl 100 CP fe80::201:e8ff:fe17:5cae
1439 00:01:e8:17:5c:ae STALE Gi 1/5 Vl 1000 CP fe80::201:e8ff:fe17:5cae
1439 00:01:e8:17:5c:ae STALE Gi 1/7 Vl 2000 CP
FTOS#
Neighbor Discovery Protocol (NDP) | 703
704 | Neighbor Discovery Protocol (NDP)
25
Open Shortest Path First (OSPFv2 and OSPFv3)
Overview
Open Shortest Path First version 2 for IPv4 is supported on platforms c e s
Open Shortest Path First version 3 (OSPFv3) for IPv6 is supported on platforms c e
Note: The C-Series supports OSPFv3 with FTOS version 7.8.1.0 and later.
OSPF is an Interior Gateway Protocol (IGP), which means that it distributes routing information between routers in a single Autonomous System (AS). OSPF is also a link-state protocol in which all routers contain forwarding tables derived from information about their links to their neighbors.
The fundamental mechanisms of OSPF (flooding, DR election, area support, SPF calculations, etc.) are the same for OSPFv2 and OSPFv3. OSPFv3 runs on a per-link basis instead of on a per-IP-subnet basis.
This chapter is divided into 2 sections. There is no overlap between the two sets of commands. You cannot use an OSPFv2 command in the IPv6 OSPFv3 mode.
•
Note: FTOS version 7.8.1.0 introduces Multi-Process OSPF on IPv4 (OSPFv2) only. It is not supported on OSPFv3 (IPv6).
Note that the CLI now requires that the Process ID be included when entering the
ROUTER-OSPF mode. Each command entered applies to the specified OSPFv2 process only.
OSPFv2 Commands
The Dell Networking implementation of OSPFv2 is based on IETF RFC 2328. The following commands enable you to configure and enable OSPFv2.
•
•
•
•
•
•
Open Shortest Path First (OSPFv2 and OSPFv3) | 705
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
graceful-restart helper-reject
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
show ip ospf database asbr-summary
•
show ip ospf database external
•
•
show ip ospf database nssa-external
706 | Open Shortest Path First (OSPFv2 and OSPFv3)
•
show ip ospf database opaque-area
•
show ip ospf database opaque-as
•
show ip ospf database opaque-link
•
•
•
•
•
•
•
•
•
•
area default-cost c e s Set the metric for the summary default route generated by the area border router (ABR) into the stub area. Use this command on the border routers at the edge of a stub area.
Syntax area area-id default-cost cost
To return default values, use the no area area-id default-cost command.
Parameters area-id cost
Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero
(0) to 65535.
Specifies the stub area’s advertised external route metric.
Range: zero (0) to 65535.
Defaults
Command Modes
Command
History cost = 1; no areas are configured.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands
In FTOS, cost is defined as reference bandwidth/bandwidth.
Create a stub area.
Open Shortest Path First (OSPFv2 and OSPFv3) | 707
area nssa c e s Specify an area as a Not So Stubby Area (NSSA).
Syntax area area-id nssa [ default-information-originate ] [ no-redistribution ] [ no-summary ]
To delete an NSSA, enter no area area-id nssa .
Parameters area-id no-redistribution default-information-ori ginate no-summary
Specify the OSPF area in dotted decimal format (A.B.C.D) or enter a number from 0 and 65535.
(OPTIONAL) Specify that the redistribute command should not distribute
routes into the NSSA. You should only use this command in a NSSA Area
Border Router (ABR).
(OPTIONAL) Allows external routing information to be imported into the
NSSA by using Type 7 default.
(OPTIONAL) Specify that no summary LSAs should be sent into the NSSA.
Defaults
Command Mode
Command
History
Not configured
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series area range c e s Summarize routes matching an address/mask at an area border router (ABR).
Syntax area area-id range ip-address mask [ not-advertise ]
To disable route summarization, use the no area area-id range ip-address mask command.
Parameters area-id Specify the OSPF area in dotted decimal format (A.B.C.D.) or enter a number from zero (0) to 65535.
ip-address mask
Specify an IP address in dotted decimal format.
Specify a mask for the destination prefix. Enter the full mask (for example,
255.255.255.0).
not-advertise (OPTIONAL) not-advertise to set the status to DoNotAdvertise
(that is, the Type 3 summary-LSA is suppressed and the component networks remain hidden from other areas.)
Defaults
Command Modes
No range is configured.
ROUTER OSPF
708 | Open Shortest Path First (OSPFv2 and OSPFv3)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands
Only the routes within an area are summarized, and that summary is advertised to other areas by the
ABR. External routes are not summarized.
Create a stub area.
Enter the ROUTER OSPF mode to configure an OSPF instance.
area stub c e s Configure a stub area, which is an area not connected to other areas.
Syntax area area-id stub [ no-summary ]
To delete a stub area, enter no area area-id stub .
Parameters area-id no-summary
Specify the stub area in dotted decimal format (A.B.C.D.) or enter a number from zero
(0) to 65535.
(OPTIONAL) Enter the keyword no-summary to prevent the ABR from sending summary Link State Advertisements (LSAs) into the stub area.
Defaults
Command Modes
Disabled
ROUTER OSPF
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands
Use this command to configure all routers and access servers within a stub.
Enter the ROUTER OSPF mode to configure an OSPF instance.
Open Shortest Path First (OSPFv2 and OSPFv3) | 709
area virtual-link c e s Set a virtual link and its parameters.
Syntax area area-id virtual-link router-id [[ authentication-key [ encryption-type ] key ] |
[ message-digest-key keyid md5 [ encryption-type ] key ]] [ dead-interval seconds ]
[ hello-interval seconds ] [ retransmit-interval seconds ] [ transmit-delay seconds ]
To delete a virtual link, use the no area area-id virtual-link router-id command.
To delete a parameter of a virtual link, use the no area area-id virtual-link router-id
[[ authentication-key [ encryption-type ] key ] | [ message-digest-key keyid md5
[ encryption-type ] key ]] [ dead-interval seconds ] [ hello-interval seconds ] [ retransmit-interval seconds ] [ transmit-delay seconds ] command syntax.
Parameters area-id router-id authentication-key
[ encryption-type ] key | message-digest-key keyid md5 [ encryption-type ] key dead-interval seconds hello-interval seconds retransmit-interval seconds transmit-delay seconds
Specify the transit area for the virtual link in dotted decimal format
(A.B.C.D.) or enter a number from zero (0) to 65535.
Specify an ID (IP address in dotted decimal format) associated with a virtual link neighbor.
(OPTIONAL) Choose between two authentication methods:
• Enter the keyword authentication-key to enable simple authentication followed by an alphanumeric string up to 8 characters long. Optionally, for the encryption-type variable, enter the number 7 before entering the key string to indicate that an encrypted password will follow.
• Enter the keyword message-digest-key followed by a number from 1 to 255 as the keyid . After the keyid , enter the keyword md5 followed by the key . The key is an alphanumeric string up to
16 characters long. Optionally, for the encryption-type variable, enter the number 7 before entering the key string to indicate that an encrypted password will follow.
(OPTIONAL) Enter the keyword dead-interval followed by a number as the number of seconds for the interval.
Range: 1 to 8192.
Default: 40 seconds.
(OPTIONAL) Enter the keyword hello-interval followed by the number of seconds for the interval.
Range: 1 to 8192.
Default: 10 seconds.
(OPTIONAL) Enter the keyword retransmit-interval followed by the number of seconds for the interval.
Range: 1 to 8192.
Default: 5 seconds.
(OPTIONAL) Enter the keyword transmit-delay followed by the number of seconds for the interval.
Range: 1 to 8192.
Default: 1 second.
Defaults
Command Modes dead-interval seconds = 40 seconds; hello-interval seconds = 10 seconds; retransmit-interval seconds = 5 seconds; transmit-delay seconds = 1 second
ROUTER OSPF
710 | Open Shortest Path First (OSPFv2 and OSPFv3)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
All OSPF areas must be connected to a backbone area (usually Area 0). Virtual links connect broken or discontiguous areas.
You cannot enable both authentication options. Choose either the authentication-key or message-digest-key option.
auto-cost c e s Specify how the OSPF interface cost is calculated based on the reference bandwidth method.
Syntax auto-cost [ reference-bandwidth ref-bw ]
To return to the default bandwidth or to assign cost based on the interface type, use the no auto-cost
[ reference-bandwidth ] command.
Parameters ref-bw (OPTIONAL) Specify a reference bandwidth in megabits per second.
Range: 1 to 4294967
Default: 100 megabits per second.
Defaults
Command Modes
Command
History
100 megabits per second.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series clear ip ospf c e s Clear all OSPF routing tables.
Syntax clear ip ospf process-id [ process ]
Parameters process-id process
Enter the OSPF Process ID to clear a specific process.
If no Process ID is entered, all OSPF processes are cleared.
(OPTIONAL) Enter the keyword process to reset the OSPF process.
Command Modes EXEC Privilege
Open Shortest Path First (OSPFv2 and OSPFv3) | 711
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series clear ip ospf statistics c e s Clear the packet statistics in interfaces and neighbors.
Syntax
Parameters clear ip ospf process-id statistics [ interface name { neighbor router-id }] process-id interface neighbor name router-id
Enter the OSPF Process ID to clear statistics for a specific process.
If no Process ID is entered, all OSPF processes are cleared.
(OPTIONAL) Enter the keyword interface followed by one of the following interface keywords and slot/port or number information:
For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
For a SONET interface, enter the keyword sonet followed by the slot/port information.
For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword neighbor followed by the neighbor’s router-id in dotted decimal format (A.B.C.D.).
Defaults
Command Modes
Command
History
No defaults values or behavior
EXEC Privilege
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Display the OSPF statistics
712 | Open Shortest Path First (OSPFv2 and OSPFv3)
debug ip ospf c e s Display debug information on OSPF. Entering debug ip ospf enables OSPF debugging for the first
OSPF process,.
Syntax debug ip ospf process-id [ bfd | event | packet | spf ]
To cancel the debug command, enter no debug ip ospf .
Parameters process-id bfd event packet spf
Enter the OSPF Process ID to debug a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Enter the keyword bfd to debug only OSPF BFD information.
(OPTIONAL) Enter the keyword event to debug only OSPF event information.
(OPTIONAL) Enter the keyword packet to debug only OSPF packet information.
(OPTIONAL) Enter the keyword spf to display the Shortest Path First information.
Command Modes
Command
History
EXEC Privilege
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Example Figure 25-1.
Command example: debug ip ospf process-id packet
FTOS#debug ip ospf 1 packet
OSPF process 90, packet debugging is on
FTOS#
08:14:24 : OSPF(100:00):
Xmt. v:2 t:1(HELLO) l:44 rid:192.1.1.1
aid:0.0.0.1 chk:0xa098 aut:0 auk: keyid:0 to:Gi 4/3 dst:224.0.0.5
netmask:255.255.255.0 pri:1 N-, MC-, E+, T-,
hi:10 di:40 dr:90.1.1.1 bdr:0.0.0.0
Table 25-1.
Output Descriptions for debug ip ospf process-id packet
Field v: t:
8:14
OSPF l: rid:
Description
Displays the time stamp.
Displays the OSPF process ID: instance ID.
Displays the OSPF version. FTOS supports version 2 only.
Displays the type of packet sent:
• 1 - Hello packet
• 2 - database description
• 3 - link state request
• 4 - link state update
• 5 - link state acknowledgement
Displays the packet length.
Displays the OSPF router ID.
Open Shortest Path First (OSPFv2 and OSPFv3) | 713
Table 25-1.
Output Descriptions for debug ip ospf process-id packet hi: di: dr: bdr:
Field aid: chk: aut: auk: keyid: to: dst: netmask: pri:
N, MC, E, T
Description
Displays the Autonomous System ID.
Displays the OSPF checksum.
States if OSPF authentication is configured. One of the following is listed:
• 0 - no authentication configured
•
1 - simple authentication configured using the ip ospf authentication-key
command)
• 2 - MD5 authentication configured using the
ip ospf message-digest-key command.
If the ip ospf authentication-key command is configured, this field displays the key used.
If the ip ospf message-digest-key command is configured, this field displays the MD5 key
Displays the interface to which the packet is intended.
Displays the destination IP address.
Displays the destination IP address mask.
Displays the OSPF priority
Displays information available in the Options field of the HELLO packet:
• N + (N-bit is set)
• N - (N-bit is not set)
• MC+ (bit used by MOSPF is set and router is able to forward IP multicast packets)
• MC- (bit used by MOSPF is not set and router cannot forward IP multicast packets)
• E + (router is able to accept AS External LSAs)
• E - (router cannot accept AS External LSAs)
• T + (router can support TOS)
• T - (router cannot support TOS)
Displays the amount of time configured for the HELLO interval.
Displays the amount of time configured for the DEAD interval.
Displays the IP address of the designated router.
Displays the IP address of the Border Area Router.
default-information originate c e s Configure the FTOS to generate a default external route into an OSPF routing domain.
Syntax default-information originate [ always ] [ metric metric-value ] [ metric-type type-value ]
[ route-map map-name ]
To return to the default values, enter no default-information originate .
Parameters always metric metric-value
(OPTIONAL) Enter the keyword always to specify that default route information must always be advertised.
(OPTIONAL) Enter the keyword metric followed by a number to configure a metric value for the route.
Range: 1 to 16777214
714 | Open Shortest Path First (OSPFv2 and OSPFv3)
metric-type route-map type-value
map-name
(OPTIONAL) Enter the keyword metric-type followed by an OSPF link state type of 1 or 2 for default routes. The values are:
• 1 = Type 1 external route
• 2 = Type 2 external route.
(OPTIONAL) Enter the keyword route-map followed by the name of an established route map.
Defaults
Command Modes
Command
History
Disabled.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Related
Commands
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Redistribute routes from other routing protocols into OSPF.
default-metric c e s Change the metrics of redistributed routes to a value useful to OSPF. Use this command with the
command.
Syntax default-metric number
To return to the default values, enter no default-metric [ number ].
Parameters number Enter a number as the metric.
Range: 1 to 16777214.
Defaults
Command Modes
Command
History
Disabled.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Related
Commands
Redistribute routes from other routing protocols into OSPF.
description c e s Add a description about the selected OSPF configuration.
Open Shortest Path First (OSPFv2 and OSPFv3) | 715
Syntax
Parameters description description
To remove the OSPF description, use the no description command.
description Enter a text string description to identify the OSPF configuration (80 characters maximum).
No default behavior or values
ROUTER OSPF
Defaults
Command Modes
Command
History
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Display VLAN configuration.
distance c e s Define an administrative distance for particular routes to a specific IP address.
Syntax distance weight [ ip-address mask access-list-name ]
To delete the settings, use the no distance weight [ ip-address mask access-list-name ] command.
Parameters weight ip-address mask access-list-name
Specify an administrative distance.
Range: 1 to 255.
Default: 110
(OPTIONAL) Enter a router ID in the dotted decimal format.
If you enter a router ID, you must include the mask for that router address.
(OPTIONAL) Enter a mask in dotted decimal format or /n format.
(OPTIONAL) Enter the name of an IP standard access list, up to 140 characters.
Defaults
Command Modes
Command
History
110
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Increased name string to accept up to 140 characters. Prior to 7.8.1.0, names are up to
16 characters long.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
716 | Open Shortest Path First (OSPFv2 and OSPFv3)
distance ospf c e s Configure an OSPF distance metric for different types of routes.
Syntax distance ospf [ external dist3 ] [ inter-area dist2 ] [ intra-area dist1 ]
To delete these settings, enter no distance ospf .
Parameters external dist3 inter-area dist2 intra-area dist1
(OPTIONAL) Enter the keyword external followed by a number to specify a distance for external type 5 and 7 routes.
Range: 1 to 255
Default: 110.
(OPTIONAL) Enter the keyword inter-area followed by a number to specify a distance metric for routes between areas.
Range: 1 to 255
Default: 110.
(OPTIONAL) Enter the keyword intra-area followed by a number to specify a distance metric for all routes within an area.
Range: 1 to 255
Default: 110.
Defaults
Command Modes
Command
History external dist3 = 110; inter-area dist2 = 110; intra-area dist1 = 110.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
T
o specify a distance for routes learned from other routing domains, use the redistribute
command. distribute-list in c e s Apply a filter to incoming routing updates from OSPF to the routing table.
Syntax distribute-list prefix-list-name in [ interface ]
To delete a filter, use the no distribute-list prefix-list-name in [ interface ] command.
Open Shortest Path First (OSPFv2 and OSPFv3) | 717
Parameters prefix-list-name interface
Enter the name of a configured prefix list.
(OPTIONAL) Enter one of the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
Command
History
Not configured.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series distribute-list out c e s Apply a filter to restrict certain routes destined for the local routing table after the SPF calculation.
Syntax distribute-list prefix-list-name out [ bgp | connected | isis | rip | static ]
To remove a filter, use the no distribute-list prefix-list-name out [ bgp | connected | isis | rip | static ] command.
Parameters prefix-list-name bgp connected isis rip static
Enter the name of a configured prefix list.
(OPTIONAL) Enter the keyword bgp to specify that BGP routes are distributed.*
(OPTIONAL) Enter the keyword connected to specify that connected routes are distributed.
(OPTIONAL) Enter the keyword isis to specify that IS-IS routes are distributed.*
(OPTIONAL) Enter the keyword rip to specify that RIP routes are distributed.*
(OPTIONAL) Enter the keyword static to specify that only manually configured routes are distributed.
* BGP and ISIS routes are not available on the C-Series.
BGP, ISIS, and RIP routes are not available on the S-Series.
Defaults Not configured.
Command Modes ROUTER OSPF
718 | Open Shortest Path First (OSPFv2 and OSPFv3)
Command
History
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
The distribute-list out command applies to routes being redistributed by autonomous system boundary
routers (ASBRs) into OSPF. It can be applied to external type 2 and external type 1 routes, but not to intra-area and inter-area routes.
enable inverse mask c e FTOS, by default, permits the user to input OSPF network command with a net-mask. This command provides a choice between inverse-mask or net-mask (the default).
Syntax enable inverse mask
To return to the default net-mask, enter no enable inverse mask.
Defaults net-mask
Command Modes CONFIGURATION
Command
History
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on C-Series
Introduced on E-Series fast-convergence c e s This command sets the minimum LSA origination and arrival times to zero (0), allowing more rapid route computation so that convergence takes less time.
Syntax fast-convergence { number }
To cancel fast-convergence, enter no fast convergence.
Parameters number Enter the convergence level desired. The higher this parameter is set, the faster OSPF converge takes place.
Range: 1-4
Defaults
Command Modes
None.
ROUTER OSPF
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on all platforms.
Usage
Information
The higher this parameter is set, the faster OSPF converge takes place. Note that the faster the convergence, the more frequent the route calculations and updates. This will impact CPU utilization and may impact adjacency stability in larger topologies.
Open Shortest Path First (OSPFv2 and OSPFv3) | 719
Generally, convergence level 1 meets most convergence requirements. Higher convergence levels should only be selected following consultation with Dell Networking technical support.
flood-2328 c e s Enable RFC-2328 flooding behavior.
Syntax flood-2328
Defaults
Command Modes
To disable, use the no flood-2328 command.
Disabled
ROUTER OSPF
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series and E-Series
Usage
Information
In OSPF, flooding is the most resource-consuming task. The flooding algorithm, described in
RFC-2328, requires that OSPF flood LSAs (Link State Advertisements) on all interfaces, as governed by LSA’s flooding scope (see Section 13 of the RFC). When multiple direct links connect two routers, the RFC-2328 flooding algorithm generates significant redundant information across all links.
By default, FTOS implements an enhanced flooding procedure that dynamically and intelligently determines when to optimize flooding. Whenever possible, the OSPF task attempts to reduce flooding overhead by selectively flooding on a subset of the interfaces between two routers.
When flood-2328 is enabled, this command configures FTOS to flood LSAs on all interfaces. graceful-restart grace-period c e s Specifies the time duration, in seconds, that the router’s neighbors will continue to advertise the router as fully adjacent regardless of the synchronization state during a graceful restart.
Syntax graceful-restart grace-period seconds
To disable the grace period, enter no graceful-restart grace-period.
Parameters seconds Time duration, in seconds, that specifies the duration of the restart process before OSPF terminates the process.
Range: 40 to 3000 seconds
Defaults
Command Modes
Not Configured
ROUTER OSPF
720 | Open Shortest Path First (OSPFv2 and OSPFv3)
Command
History
Usage
Information
Version 8.3.3.4
Version 7.8.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced for S-Series
Introduced support for Multi-Process OSPF.
Introduced on C-Series
Introduced on E-Series
OSPF Graceful Restart is not supported on the S60 system.
graceful-restart helper-reject c e s Specify the OSPF router to not act as a helper during graceful restart.
Syntax graceful-restart helper-reject ip-address
To return to default value, enter no graceful-restart helper-reject .
Parameters ip-address Enter the OSPF router-id, in IP address format, of the restart router that will not act as a helper during graceful restart.
Defaults
Command Modes
Not Configured
ROUTER OSPF
Command
History
Version 8.3.3.4
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Restart role enabled on S-Series (Both Helper and Restart roles now supported on S-Series.
Helper-Role supported on S-Series
Introduced on C-Series
Introduced on E-Series graceful-restart mode c e s Enable the graceful restart mode.
Syntax graceful-restart mode [ planned-only | unplanned-only ]
To disable graceful restart mode, enter no graceful-restart mode .
Parameters planned-only unplanned-only
(OPTIONAL) Enter the keywords planned-only to indicate graceful restart is supported in a planned restart condition only.
(OPTIONAL) Enter the keywords unplanned-only to indicate graceful restart is supported in an unplanned restart condition only.
Defaults
Command Modes
Support for both planned and unplanned failures.
ROUTER OSPF
Open Shortest Path First (OSPFv2 and OSPFv3) | 721
Command
History
Version 8.3.3.4
Version 7.8.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series graceful-restart role c e s Specify the role for your OSPF router during graceful restart.
Syntax graceful-restart role [ helper-only | restart-only ]
To disable graceful restart role, enter no graceful-restart role .
Parameters role helper-only role restart-only
(OPTIONAL) Enter the keywords helper-only to specify the OSPF router is a helper only during graceful restart.
(OPTIONAL) Enter the keywords restart-only to specify the OSPF router is a restart only during graceful-restart.
Defaults
Command Modes
Command
History
OSPF routers are, by default, both helper and restart routers during a graceful restart.
ROUTER OSPF
Version 8.3.3.4
Version 7.8.1.0
Version 7.7.1
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Restart and helper roles supported on S-Series
Helper-Role supported on S-Series
Introduced on C-Series
Introduced on E-Series ip ospf auth-change-wait-time c e s OSPF provides a grace period while OSPF changes its interface authentication type. During the grace period, OSPF sends out packets with new and old authentication scheme till the grace period expires.
Syntax ip ospf auth-change-wait-time seconds
To return to the default, enter no ip ospf auth-change-wait-time .
Parameters seconds Enter seconds
Range: 0 to 300
Defaults
Command Modes
Command
History zero (0) seconds
INTERFACE
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on S-Series
722 | Open Shortest Path First (OSPFv2 and OSPFv3)
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on C-Series
Introduced on E-Series ip ospf authentication-key c e s Enable authentication and set an authentication key on OSPF traffic on an interface.
Syntax ip ospf authentication-key [ encryption-type ] key
To delete an authentication key, enter no ip ospf authentication-key .
Parameters encryption-type key
(OPTIONAL) Enter 7 to encrypt the key.
Enter an 8 character string. Strings longer than 8 characters are truncated.
Defaults
Command Modes
Command
History
Not configured.
INTERFACE
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
All neighboring routers in the same network must use the same password to exchange OSPF information.
ip ospf cost c e s Change the cost associated with the OSPF traffic on an interface.
Syntax ip ospf cost cost
To return to default value, enter no ip ospf cost .
Parameters cost Enter a number as the cost.
Range: 1 to 65535.
Defaults
Command Modes
The default cost is based on the reference bandwidth.
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
If this command is not configured, cost is based on the
Open Shortest Path First (OSPFv2 and OSPFv3) | 723
Related
Commands
When you configure OSPF over multiple vendors, use the
ip ospf cost command to ensure that all
routers use the same cost. Otherwise, OSPF routes improperly.
Control how the OSPF interface cost is calculated.
ip ospf dead-interval c e s Set the time interval since the last hello-packet was received from a router. After the interval elapses, the neighboring routers declare the router dead.
Syntax ip ospf dead-interval seconds
To return to the default values, enter no ip ospf dead-interval .
Parameters seconds Enter the number of seconds for the interval.
Range: 1 to 65535. Default: 40 seconds.
Defaults
Command Modes
40 seconds
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands
By default, the dead interval is four times the default hello-interval.
Set the time interval between hello packets.
ip ospf hello-interval c e s Specify the time interval between the hello packets sent on the interface.
Syntax ip ospf hello-interval seconds
To return to the default value, enter no ip ospf hello-interval .
Parameters seconds Enter a the number of second as the delay between hello packets.
Range: 1 to 65535.
Default: 10 seconds.
Defaults
Command Modes
10 seconds
INTERFACE
724 | Open Shortest Path First (OSPFv2 and OSPFv3)
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
The time interval between hello packets must be the same for routers in a network.
Usage
Information
Related
Commands
Set the time interval before a router is declared dead.
ip ospf message-digest-key c e s Enable OSPF MD5 authentication and send an OSPF message digest key on the interface.
Syntax ip ospf message-digest-key keyid md5 key
To delete a key, use the no ip ospf message-digest-key keyid command.
Parameters keyid key
Enter a number as the key ID.
Range: 1 to 255.
Enter a continuous character string as the password.
Defaults
Command Modes
Command
History
No MD5 authentication is configured.
INTERFACE
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
To change to a different key on the interface, enable the new key while the old key is still enabled. The
FTOS will send two packets: the first packet authenticated with the old key, and the second packet authenticated with the new key. This process ensures that the neighbors learn the new key and communication is not disrupted by keeping the old key enabled.
After the reply is received and the new key is authenticated, you must delete the old key. Dell
Networking recommends keeping only one key per interface.
Note: The MD5 secret is stored as plain text in the configuration file with service password encryption.
Open Shortest Path First (OSPFv2 and OSPFv3) | 725
ip ospf mtu-ignore c e s Disable OSPF MTU mismatch detection upon receipt of database description (DBD) packets.
Syntax ip ospf mtu-ignore
To return to the default, enter no ip ospf mtu-ignore .
Defaults Enabled
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series ip ospf network c e s Set the network type for the interface.
Syntax ip ospf network { broadcast | point-to-point }
To return to the default, enter no ip ospf network .
Parameters broadcast Enter to designate the interface as part of a broadcast network.
point-to-point Enter point-to-point to designate the interface as part of a point-to-point network.
Defaults
Command Modes
Command
History
Not configured.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series ip ospf priority c e s Set the priority of the interface to determine the Designated Router for the OSPF network.
Syntax ip ospf priority number
To return to the default setting, enter no ip ospf priority .
726 | Open Shortest Path First (OSPFv2 and OSPFv3)
Parameters number Enter a number as the priority.
Range: 0 to 255.
The default is 1.
Defaults
Command Modes
Command
History
1
INTERFACE
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Setting a priority of 0 makes the router ineligible for election as a Designated Router or Backup
Designated Router.
Use this command for interfaces connected to multi-access networks, not point-to-point networks.
ip ospf retransmit-interval c e s Set the retransmission time between lost link state advertisements (LSAs) for adjacencies belonging to the interface.
Syntax ip ospf retransmit-interval seconds
To return to the default values, enter no ip ospf retransmit-interva l.
Parameters seconds Enter the number of seconds as the interval between retransmission.
Range: 1 to 3600.
Default: 5 seconds.
This interval must be greater than the expected round-trip time for a packet to travel between two routers.
Defaults
Command Modes
5 seconds
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Set the time interval to a number large enough to prevent unnecessary retransmissions. For example, the interval should be larger for interfaces connected to virtual links.
Open Shortest Path First (OSPFv2 and OSPFv3) | 727
ip ospf transmit-delay c e s Set the estimated time elapsed to send a link state update packet on the interface.
Syntax ip ospf transmit-delay seconds
To return to the default value, enter no ip ospf transmit-delay .
Parameters seconds Enter the number of seconds as the transmission time. This value should be greater than the transmission and propagation delays for the interface.
Range: 1 to 3600.
Default: 1 second.
Defaults
Command Modes
1 second
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series log-adjacency-changes c e s Set FTOS to send a Syslog message about changes in the OSPF adjacency state.
Syntax log-adjacency-changes
To disable the Syslog messages, enter no log-adjacency-changes .
Defaults
Command Mode
Disabled.
ROUTER OSPF
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series maximum-paths c e s Enable the software to forward packets over multiple paths.
Syntax maximum-paths number
To disable packet forwarding over multiple paths, enter no maximum-paths .
728 | Open Shortest Path First (OSPFv2 and OSPFv3)
Parameters number
Defaults
Command Modes
Command
History
4
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Specify the number of paths.
Range: 1 to 16.
Default: 4 paths.
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series mib-binding c e s Enable this OSPF process ID to manage the SNMP traps and process SNMP queries.
Syntax mib-binding
To mib-binding on this OSPF process, enter no mib-binding .
Defaults
Command Modes
None.
ROUTER OSPF
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced to all platforms.
Usage
Information
This command is either enabled or disabled. If no OSPF process is identified as the MIB manager, the first OSPF process will be used.
If an OSPF process has been selected, it must be disabled prior to assigning new process ID the MIB responsibility.
network area c e s Define which interfaces run OSPF and the OSPF area for those interfaces.
Syntax network ip-address mask area area-id
To disable an OSPF area, use the no network ip-address mask area area-id command.
Parameters ip-address Specify a primary or secondary address in dotted decimal format. The primary address is required before adding the secondary address.
Open Shortest Path First (OSPFv2 and OSPFv3) | 729
mask area-id
Enter a network mask in /prefix format. (/x)
Enter the OSPF area ID as either a decimal value or in a valid IP address.
Decimal value range: 0 to 65535
IP address format: dotted decimal format A.B.C.D.
Note: If the area ID is smaller than 65535, it will be converted to a decimal value. For example, if you use an area ID of 0.0.0.1, it will be converted to 1.
Command Modes
Command
History
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
To enable OSPF on an interface, the
command must include, in its range of addresses, the primary IP address of an interface.
Note: An interface can be attached only to a single OSPF area.
If you delete all the network area
commands for Area 0, the show ip ospf
command output will not list
Area 0. passive-interface c e s Suppress both receiving and sending routing updates on an interface.
Syntax passive-interface { default | interface }
To enable both the receiving and sending routing, enter the no passive-interface interface command.
To return all OSPF interfaces (current and future) to active, enter the no passive-interface default command.
Parameters default interface
Enter the keyword default to make all OSPF interfaces (current and future) passive.
Enter the following keywords and slot/port or number information:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Command Modes ROUTER OSPF
730 | Open Shortest Path First (OSPFv2 and OSPFv3)
Command
History
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Modified to include the default keyword.
Introduced on E-Series
Although the passive interface will neither send nor receive routing updates, the network on that interface will still be included in OSPF updates sent via other interfaces.
The default keyword sets all interfaces as passive. You can then configure individual interfaces, where adjacencies are desired, using the no passive-interface interface command. The no form of this command is inserted into the configuration for individual interfaces when the no passive-interface interface command is issued while passive-interface default is configured.
This command behavior has changed as follows: passive-interface interface
• The previous no passive-interface interface is removed from the running configuration.
• The ABR status for the router is updated.
• Save passive-interface interface into the running configuration.
passive-interface default
• All present and future OSPF interface are marked as passive .
• Any adjacency are explicitly terminated from all OSPF interfaces.
• All previous passive-interface interface commands are removed from the running configuration.
• All previous no passive-interface interface commands are removed from the running configuration.
no passive-interface interface
• Remove the interface from the passive list.
• The ABR status for the router is updated.
• If passive-interface default is specified, then save no passive-interface interface into the running configuration.
No passive-interface default
• Clear everything and revert to the default behavior.
• All previously marked passive interfaces are removed.
• May update ABR status.
redistribute c e s Redistribute information from another routing protocol throughout the OSPF process.
Syntax redistribute { connected | rip | static } [ metric metric-value | metric-type type-value ]
[ route-map map-name ] [ tag tag-value ]
To disable redistribution, use the no redistribute { connected | isis | rip | static } command.
Open Shortest Path First (OSPFv2 and OSPFv3) | 731
Parameters connected rip static metric metric-value metric-type type-value route-map tag map-name tag-value
Enter the keyword connected to specify that information from active routes on interfaces is redistributed.
Enter the keyword rip to specify that RIP routing information is redistributed.
Enter the keyword static to specify that information from static routes is redistributed.
(OPTIONAL) Enter the keyword metric followed by a number.
Range: 0 (zero) to 16777214.
(OPTIONAL) Enter the keyword metric-type followed by one of the following:
• 1 = OSPF External type 1
• 2 = OSPF External type 2
(OPTIONAL) Enter the keyword route-map followed by the name of the route map.
(OPTIONAL) Enter the keyword tag followed by a number.
Range: 0 to 4294967295
Defaults
Command Modes
Command
History
Not configured.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands
To redistribute the default route (0.0.0.0/0), configure the default-information originate command.
Generate a default route into the OSPF routing domain.
redistribute bgp c e s Redistribute BGP routing information throughout the OSPF instance.
Syntax redistribute bgp as number [ metric metric-value ] | [ metric-type type-value ] | [ tag tag-value ]
To disable redistribution, use the no redistribute bgp as number [ metric metric-value ] |
[ metric-type type-value ] [ route-map map-name ] [ tag tag-value ] command.
Parameters as number metric metric-value
Enter the autonomous system number.
Range: 1 to 65535
(OPTIONAL) Enter the keyword metric followed by the metric-value number.
Range: 0 to16777214
732 | Open Shortest Path First (OSPFv2 and OSPFv3)
metric-type route-map tag map-name tag-value type-value (OPTIONAL) Enter the keyword metric-type followed by one of the following:
• 1 = for OSPF External type 1
• 2 = for OSPF External type 2
(OPTIONAL) Enter the keyword route-map followed by the name of the route map.
(OPTIONAL) Enter the keyword tag to set the tag for routes redistributed into OSPF.
Range: 0 to 4294967295
Defaults
Command Modes
Command
History
No default behavior or values
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.3
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced Route Map for BGP Redistribution to OSPF
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Modified to include the default keyword.
Introduced on E-Series redistribute isis c e s Redistribute IS-IS routing information throughout the OSPF instance.
Syntax redistribute isis [ tag ] [ level-1 | level-1-2 | level-2 ] [ metric metric-value | metric-type type-value ] [ route-map map-name ] [ tag tag-value ]
To disable redistribution, use the no redistribute isis [ tag ] [ level-1 | level-1-2 | level-2 ] [ metric metric-value | metric-type type-value ] [ route-map map-name ] [ tag tag-value ] command.
Parameters tag level-1 level-1-2 level-2 metric metric-value
(OPTIONAL) Enter the name of the IS-IS routing process.
(OPTIONAL) Enter the keyword level-1 to redistribute only IS-IS Level-1 routes.
(OPTIONAL) Enter the keyword level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes.
(OPTIONAL) Enter the keyword level-2 to redistribute only IS-IS Level-2 routes.
(OPTIONAL) Enter the keyword metric followed by a number.
Range: 0 (zero) to 4294967295.
metric-type type-value (OPTIONAL) Enter the keyword metric-type followed by one of the following:
• 1 = for OSPF External type 1
• 2 = for OSPF External type 2
Open Shortest Path First (OSPFv2 and OSPFv3) | 733
Defaults
Command Modes
Command
History
Usage
Information route-map map-name (OPTIONAL) Enter the keyword route-map followed by the name of the route map.
tag tag-value (OPTIONAL) Enter the keyword
Range: 0 to 4294967295 tag followed by a number.
Not configured.
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
IS-IS is not supported on S-Series platforms.
router-id c e s Use this command to configure a fixed router ID.
Syntax router-id ip-address
To remove the fixed router ID, use the no router-id ip-address command.
Parameters ip-address Enter the router ID in the IP address format
Defaults
Command Modes
This command has no default behavior or values.
ROUTER OSPF
Command
History
Example
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support for Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 25-2.
Command Example: router-id
FTOS(conf)#router ospf 100
FTOS(conf-router_ospf)#router-id 1.1.1.1
Changing router-id will bring down existing OSPF adjacency [y/n]:
FTOS(conf-router_ospf)#show config
!
router ospf 100 router-id 1.1.1.1
FTOS(conf-router_ospf)#no router-id
Changing router-id will bring down existing OSPF adjacency [y/n]:
FTOS#
734 | Open Shortest Path First (OSPFv2 and OSPFv3)
Usage
Information
You can configure an arbitrary value in the IP address format for each router. However, each router ID must be unique. If this command is used on an OSPF router process, which is already active (that is, has neighbors), a prompt reminding you that changing router-id will bring down the existing OSPF adjacency. The new router ID is effective at the next reload.
router ospf c e s Enter the ROUTER OSPF mode to configure an OSPF instance.
Syntax router ospf process-id [ vrf {vrf name} ]
To clear an OSPF instance, enter no router ospf process-id .
Parameters process-id vrf name
Enter a number for the OSPF instance.
Range: 1 to 65535.
(Optional) E-Series Only : Enter the VRF process identifier to tie the OSPF instance to the
VRF. All network commands under this OSPF instance are subsequently tied to the VRF instance.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Example
Version 8.3.3.1
Version 7.9.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced VRF
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 25-3.
Command Example: router ospf
FTOS(conf)#router ospf 2
FTOS(conf-router_ospf)#
Usage
Information
You must have an IP address assigned to an interface to enter the ROUTER OSPF mode and configure
OSPF.
Once the OSPF process and the VRF are tied together, the OSPF Process ID cannot be used again in the system. show config c e s Display the non-default values in the current OSPF configuration.
Syntax
Command Modes show config
ROUTER OSPF
Open Shortest Path First (OSPFv2 and OSPFv3) | 735
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 25-4.
Command Example: show config
FTOS(conf-router_ospf)#show config
!
router ospf 3
passive-interface FastEthernet 0/1
FTOS(conf-router_ospf)# show ip ospf c e s Display information on the OSPF process configured on the switch.
Syntax show ip ospf process-id [ vrf vrf name]
Parameters process-id vrf name
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
E-Series Only : Show only the OSPF information tied to the VRF process.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.9.1.0
Version 7.9.1.0
Version 7.8.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced VRF
Introduced VRF
Introduced support of Multi-Process OSPF.
Introduced process-id option, in support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Example
If you delete all the network area
commands for Area 0, the show ip ospf
command output will not list
Area 0.
Figure 25-5.
Command Example: show ip ospf process-id
FTOS>show ip ospf 1
Routing Process ospf 1 with ID 11.1.2.1
Supports only single TOS (TOS0) routes
It is an autonomous system boundaryrouter
SPF schedule delay 0 secs, Hold time between two SPFs 5 secs
Number of area in this router is 1, normal 1 stub 0 nssa 0
Area BACKBONE (0.0.0.0)
Number of interface in this area is 2
SPF algorithm executed 4 times
Area ranges are
FTOS>
736 | Open Shortest Path First (OSPFv2 and OSPFv3)
Table 25-2.
Command Output Descriptions: show ip ospf process-id
Line Beginning with
“Routing Process...”
“Supports only...”
“SPF schedule...”
“Number of...”
Description
Displays the OSPF process ID and the IP address associated with the process ID.
Displays the number of Type of Service (TOS) rouse supported.
Displays the delay and hold time configured for this process ID.
Displays the number and type of areas configured for this process ID.
Related
Commands
Displays information about the OSPF routes configured.
Displays the OSPF interfaces configured.
Displays the OSPF neighbors configured.
Displays the OSPF virtual links configured.
show ip ospf asbr c e s Display all ASBR routers visible to OSPF.
Syntax show ip ospf process-id asbr
Parameters process-id Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced process-id option, in support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series and E-Series
Usage
Information
Use this command to isolate problems with external routes. In OSPF, external routes are calculated by adding the LSA cost to the cost of reaching the ASBR router. If an external route does not have the correct cost, use this command to determine if the path to the originating router is correct. The display output is not sorted in any order.
Note: ASBRs that are not in directly connected areas are also displayed.
Open Shortest Path First (OSPFv2 and OSPFv3) | 737
Example Figure 25-6.
Command Example: show ip ospf process-id asbr
FTOS#show ip ospf 1asbr
RouterID Flags Cost Nexthop Interface Area
3.3.3.3 -/-/-/ 2 10.0.0.2 Gi 0/1 1
1.1.1.1 E/-/-/ 0 0.0.0.0 - 0 FTOS#
You can determine if an ASBR is in a directly connected area (or not) by the flags. For ASBRs in a directly connected area, E flags are set. In the figure above, router 1.1.1.1 is in a directly connected area since the Flag is E/-/-/. For remote ASBRs, the E flag is clear (-/-/-/) show ip ospf database c e s Display all LSA information. If OSPF is not enabled on the switch, no output is generated.
Syntax show ip ospf process-id database [ database-summary ]
Parameters process-id database-summary
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Enter the keywords database-summary to the display the number of LSA types in each area and the total number of LSAs.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
738 | Open Shortest Path First (OSPFv2 and OSPFv3)
Example Figure 25-7.
Command Example: show ip ospf process-id database
FTOS>show ip ospf 1 database
OSPF Router with ID (11.1.2.1) (Process ID 1)
Router (Area 0.0.0.0)
Link ID ADV Router Age Seq# Checksum Link count
11.1.2.1 11.1.2.1 673 0x80000005 0x707e 2
13.1.1.1 13.1.1.1 676 0x80000097 0x1035 2
192.68.135.2 192.68.135.2 1419 0x80000294 0x9cbd 1
Network (Area 0.0.0.0)
Link ID ADV Router Age Seq# Checksum
10.2.3.2 13.1.1.1 676 0x80000003 0x6592
10.2.4.2 192.68.135.2 908 0x80000055 0x683e
Type-5 AS External
Link ID ADV Router Age Seq# Checksum Tag
0.0.0.0 192.68.135.2 908 0x80000052 0xeb83 100
1.1.1.1 192.68.135.2 908 0x8000002a 0xbd27 0
10.1.1.0 11.1.2.1 718 0x80000002 0x9012 0
10.1.2.0 11.1.2.1 718 0x80000002 0x851c 0
10.2.2.0 11.1.2.1 718 0x80000002 0x7927 0
10.2.3.0 11.1.2.1 718 0x80000002 0x6e31 0
10.2.4.0 13.1.1.1 1184 0x80000068 0x45db 0
11.1.1.0 11.1.2.1 718 0x80000002 0x831e 0
11.1.2.0 11.1.2.1 718 0x80000002 0x7828 0
12.1.2.0 192.68.135.2 1663 0x80000054 0xd8d6 0
13.1.1.0 13.1.1.1 1192 0x8000006b 0x2718 0
13.1.2.0 13.1.1.1 1184 0x8000006b 0x1c22 0
172.16.1.0 13.1.1.1 148 0x8000006d 0x533b 0
FTOS>
Table 25-3.
Command Output Description: show ip ospf process-id database
Field
Link ID
ADV Router
Age
Seq#
Checksum
Link count
Description
Identifies the router ID.
Identifies the advertising router’s ID.
Displays the link state age.
Identifies the link state sequence number. This number enables you to identify old or duplicate link state advertisements.
Displays the Fletcher checksum of an LSA’s complete contents.
Displays the number of interfaces for that router.
Related
Commands
show ip ospf database asbr-summary
Displays only ASBR summary LSA information.
show ip ospf database asbr-summary c e s Display information about AS Boundary LSAs.
Syntax show ip ospf process-id database asbr-summary [ link-state-id ] [ adv-router ip-address ]
Open Shortest Path First (OSPFv2 and OSPFv3) | 739
Parameters process-id link-state-id
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes adv-router ip-address
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 25-8.
Command Example: show ip ospf database asbr-summary (Partial)
FTOS#show ip ospf 100 database asbr-summary
OSPF Router with ID (1.1.1.10) (Process ID 100)
Summary Asbr (Area 0.0.0.0)
LS age: 1437
Options: (No TOS-capability, No DC, E)
LS type: Summary Asbr
Link State ID: 103.1.50.1
Advertising Router: 1.1.1.10
LS Seq Number: 0x8000000f
Checksum: 0x8221
Length: 28
Network Mask: /0
TOS: 0 Metric: 2
LS age: 473
Options: (No TOS-capability, No DC, E)
LS type: Summary Asbr
Link State ID: 104.1.50.1
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000010
Checksum: 0x4198
Length: 28
--More--
740 | Open Shortest Path First (OSPFv2 and OSPFv3)
Table 25-4.
Command Output Descriptions: show ip ospf database asbr-summary
Item
LS Age
Options
LS Type
Link State ID
Advertising Router
Checksum
Length
Network Mask
TOS
Metric
Description
Displays the LSA’s age.
Displays the optional capabilities available on router. The following options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS
External LSAs.
Displays the LSA’s type.
Displays the Link State ID.
Identifies the advertising router’s ID.
Displays the Fletcher checksum of the an LSA’s complete contents.
Displays the length in bytes of the LSA.
Displays the network mask implemented on the area.
Displays the Type of Service (TOS) options. Option 0 is the only option.
Displays the LSA metric.
Related
Commands
Displays OSPF database information.
show ip ospf database external c e s Display information on the AS external (type 5) LSAs.
Syntax show ip ospf process-id database external [ link-state-id ] [ adv-router ip-address ]
Parameters process-id link-state-id adv-router ip-address
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced support of Multi-Process OSPF.
Open Shortest Path First (OSPFv2 and OSPFv3) | 741
Example
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 25-9.
Command Example: show ip ospf database external
FTOS#show ip ospf 1 database external
OSPF Router with ID (20.20.20.5) (Process ID 1)
Type-5 AS External
LS age: 612
Options: (No TOS-capability, No DC, E)
LS type: Type-5 AS External
Link State ID: 12.12.12.2
Advertising Router: 20.31.3.1
LS Seq Number: 0x80000007
Checksum: 0x4cde
Length: 36
Network Mask: /32
Metrics Type: 2
TOS: 0
Metrics: 25
Forward Address: 0.0.0.0
External Route Tag: 43
LS age: 1868
Options: (No TOS-capability, DC)
LS type: Type-5 AS External
Link State ID: 24.216.12.0
Advertising Router: 20.20.20.8
LS Seq Number: 0x80000005
Checksum: 0xa00e
Length: 36
Network Mask: /24
Metrics Type: 2
TOS: 0
Metrics: 1
Forward Address: 0.0.0.0
External Route Tag: 701
FTOS#
Table 25-5.
Command Example Descriptions: show ip ospf process-id database external
Item
LS Age
Options
LS Type
Link State ID
Advertising Router
LS Seq Number
Checksum
Description
Displays the LSA age.
Displays the optional capabilities available on router. The following options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS
External LSAs.
Displays the LSA’s type.
Displays the Link State ID.
Identifies the router ID of the LSA’s originating router.
Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
Displays the Fletcher checksum of an LSA’s complete contents.
742 | Open Shortest Path First (OSPFv2 and OSPFv3)
Table 25-5.
Command Example Descriptions: show ip ospf process-id database external
Item
Length
Network Mask
Metrics Type
TOS
Metrics
Forward Address
External Route Tag
Description
Displays the length in bytes of the LSA.
Displays the network mask implemented on the area.
Displays the external type.
Displays the TOS options. Option 0 is the only option.
Displays the LSA metric.
Identifies the address of the forwarding router. Data traffic is forwarded to this router. If the forwarding address is 0.0.0.0, data traffic is forwarded to the originating router.
Displays the 32-bit field attached to each external route. This field is not used by the OSPF protocol, but can be used for external route management.
Related
Commands
Displays OSPF database information.
show ip ospf database network c e s Display the network (type 2) LSA information.
Syntax show ip ospf process-id database network [ link-state-id ] [ adv-router ip-address ]
Parameters process-id link-state-id adv-router ip-address
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Open Shortest Path First (OSPFv2 and OSPFv3) | 743
Example Figure 25-10.
Command Example: show ip ospf process-id database network
FTOS#show ip ospf 1 data network
OSPF Router with ID (20.20.20.5) (Process ID 1)
Network (Area 0.0.0.0)
LS age: 1372
Options: (No TOS-capability, DC, E)
LS type: Network
Link State ID: 202.10.10.2
Advertising Router: 20.20.20.8
LS Seq Number: 0x80000006
Checksum: 0xa35
Length: 36
Network Mask: /24
Attached Router: 20.20.20.8
Attached Router: 20.20.20.9
Attached Router: 20.20.20.7
Network (Area 0.0.0.1)
LS age: 252
Options: (TOS-capability, No DC, E)
LS type: Network
Link State ID: 192.10.10.2
Advertising Router: 192.10.10.2
LS Seq Number: 0x80000007
Checksum: 0x4309
Length: 36
Network Mask: /24
Attached Router: 192.10.10.2
Attached Router: 20.20.20.1
Attached Router: 20.20.20.5
FTOS#
Table 25-6.
Command Example Descriptions: show ip ospf process-id database network
Item
LS Age
Options
LS Type
Link State ID
Advertising Router
Checksum
Length
Network Mask
Attached Router
Description
Displays the LSA age.
Displays the optional capabilities available on router. The following options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router can support
OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS External
LSAs.
Displays the LSA’s type.
Displays the Link State ID.
Identifies the router ID of the LSA’s originating router.
Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
Displays the Fletcher checksum of an LSA’s complete contents.
Displays the length in bytes of the LSA.
Identifies the IP address of routers attached to the network.
Related
Commands
Displays OSPF database information.
744 | Open Shortest Path First (OSPFv2 and OSPFv3)
show ip ospf database nssa-external c e s Display NSSA-External (type 7) LSA information.
Syntax show ip ospf database nssa-external [ link-state-id ] [ adv-router ip-address ]
Parameters link-state-id adv-router ip-address
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Related
Commands
Displays OSPF database information.
show ip ospf database opaque-area c e s Display the opaque-area (type 10) LSA information.
Syntax show ip ospf process-id database opaque-area [ link-state-id ] [ adv-router ip-address ]
Parameters process-id link-state-id adv-router ip-address
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced support of Multi-Process OSPF.
Open Shortest Path First (OSPFv2 and OSPFv3) | 745
Example
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 25-11.
Command Example: show ip ospf process-id database opaque-area
(Partial)
FTOS>show ip ospf 1 database opaque-area
OSPF Router with ID (3.3.3.3) (Process ID 1)
Type-10 Opaque Link Area (Area 0)
LS age: 1133
Options: (No TOS-capability, No DC, E)
LS type: Type-10 Opaque Link Area
Link State ID: 1.0.0.1
Advertising Router: 10.16.1.160
LS Seq Number: 0x80000416
Checksum: 0x376
Length: 28
Opaque Type: 1
Opaque ID: 1
Unable to display opaque data
LS age: 833
Options: (No TOS-capability, No DC, E)
LS type: Type-10 Opaque Link Area
Link State ID: 1.0.0.2
Advertising Router: 10.16.1.160
LS Seq Number: 0x80000002
Checksum: 0x19c2
--More--
Table 25-7.
Command Example Descriptions: show ip ospf process-id database opaque-area
Item Description
LS Age
Options
LS Type
Link State ID
Advertising Router
Checksum
Length
Opaque Type
Opaque ID
Displays the LSA’s age.
Displays the optional capabilities available on router. The following options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS
External LSAs.
Displays the LSA’s type.
Displays the Link State ID.
Identifies the advertising router’s ID.
Displays the Fletcher checksum of the an LSA’s complete contents.
Displays the length in bytes of the LSA.
Displays the Opaque type field (the first 8 bits of the Link State ID).
Displays the Opaque type-specific ID (the remaining 24 bits of the Link
State ID).
Related
Commands
Displays OSPF database information.
746 | Open Shortest Path First (OSPFv2 and OSPFv3)
show ip ospf database opaque-as c e s Display the opaque-as (type 11) LSA information.
Syntax show ip ospf process-id database opaque-as [ link-state-id ] [ adv-router ip-address ]
Parameters process-id link-state-id adv-router ip-address
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Related
Commands
Displays OSPF database information.
show ip ospf database opaque-link c e s Display the opaque-link (type 9) LSA information.
Syntax show ip ospf process-id database opaque-link [ link-state-id ] [ adv-router ip-address ]
Parameters process-id link-state-id adv-router ip-address
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keyword adv-router followed by the IP address of an
Advertising Router to display only the LSA information about that router.
Command Modes EXEC
EXEC Privilege
Open Shortest Path First (OSPFv2 and OSPFv3) | 747
Command
History
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Displays OSPF database information.
show ip ospf database router c e s Display the router (type 1) LSA information.
Syntax show ip ospf process-id database router [ link-state-id ] [ adv-router ip-address ]
Parameters process-id link-state-id adv-router ip-address
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
748 | Open Shortest Path First (OSPFv2 and OSPFv3)
Example Figure 25-12.
Command Example: show ip ospf process-id database router (Partial)
FTOS#show ip ospf 100 database router
OSPF Router with ID (1.1.1.10) (Process ID 100)
Router (Area 0)
LS age: 967
Options: (No TOS-capability, No DC, E)
LS type: Router
Link State ID: 1.1.1.10
Advertising Router: 1.1.1.10
LS Seq Number: 0x8000012f
Checksum: 0x3357
Length: 144
AS Boundary Router
Area Border Router
Number of Links: 10
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.129.1
(Link Data) Router Interface address: 192.68.129.1
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.130.1
(Link Data) Router Interface address: 192.68.130.1
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.142.2
(Link Data) Router Interface address: 192.68.142.2
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.141.2
(Link Data) Router Interface address: 192.68.141.2
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Transit Network
(Link ID) Designated Router address: 192.68.140.2
(Link Data) Router Interface address: 192.68.140.2
Number of TOS metric: 0
TOS 0 Metric: 1
Link connected to: a Stub Network
(Link ID) Network/subnet number: 11.1.5.0
--More--
Table 25-8.
Command Example Descriptions: show ip ospf process-id database router
Item
LS Age
Options
LS Type
Link State ID
Advertising Router
Description
Displays the LSA age.
Displays the optional capabilities available on router. The following options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router can support OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS
External LSAs.
Displays the LSA type.
Displays the Link State ID.
Identifies the router ID of the LSA’s originating router.
Open Shortest Path First (OSPFv2 and OSPFv3) | 749
Table 25-8.
Command Example Descriptions: show ip ospf process-id database router
Item
LS Seq Number
Checksum
Length
Number of Links
Link connected to:
(Link ID)
(Link Data)
Number of TOS Metric
TOS 0 Metric
Description
Displays the link state sequence number. This number detects duplicate or old
LSAs.
Displays the Fletcher checksum of an LSA’s complete contents.
Displays the length in bytes of the LSA.
Displays the number of active links to the type of router (Area Border Router or
AS Boundary Router) listed in the previous line.
Identifies the type of network to which the router is connected.
Identifies the link type and address.
Identifies the router interface address.
Lists the number of TOS metrics.
Lists the number of TOS 0 metrics.
Related
Commands
Displays OSPF database information.
show ip ospf database summary c e s Display the network summary (type 3) LSA routing information.
Syntax show ip ospf process-id database summary [ link-state-id ] [ adv-router ip-address ]
Parameters process-id link-state-id adv-router ip-address
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Specify LSA ID in dotted decimal format. The LSA ID value depends on the LSA type, and it can be one of the following:
• the network’s IP address for Type 3 LSAs or Type 5 LSAs
• the router’s OSPF router ID for Type 1 LSAs or Type 4 LSAs
• the default destination (0.0.0.0) for Type 5 LSAs
(OPTIONAL) Enter the keywords adv-router ip-address to display only the LSA information about that router.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
750 | Open Shortest Path First (OSPFv2 and OSPFv3)
Example Figure 25-13.
Command Example: show ip ospf process-id database summary
FTOS#show ip ospf 100 database summary
OSPF Router with ID (1.1.1.10) (Process ID 100)
Summary Network (Area 0.0.0.0)
LS age: 1551
Options: (No TOS-capability, DC, E)
LS type: Summary Network
Link State ID: 192.68.16.0
Advertising Router: 192.168.17.1
LS Seq Number: 0x80000054
Checksum: 0xb5a2
Length: 28
Network Mask: /24
TOS: 0 Metric: 1
LS age: 9
Options: (No TOS-capability, No DC, E)
LS type: Summary Network
Link State ID: 192.68.32.0
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000016
Checksum: 0x987c
Length: 28
Network Mask: /24
TOS: 0 Metric: 1
LS age: 7
Options: (No TOS-capability, No DC, E)
LS type: Summary Network
Link State ID: 192.68.33.0
Advertising Router: 1.1.1.10
LS Seq Number: 0x80000016
Checksum: 0x1241
Length: 28
Network Mask: /26
TOS: 0 Metric: 1
FTOS#
Table 25-9.
Command Example Descriptions: show ip ospf process-id database summary
Items
LS Age
Options
LS Type
Link State ID
Advertising Router
LS Seq Number
Checksum
Length
Description
Displays the LSA age.
Displays the optional capabilities available on router. The following options can be found in this item:
• TOS-capability or No TOS-capability is displayed depending on whether the router can support Type of Service.
• DC or No DC is displayed depending on whether the originating router can support
OSPF over demand circuits.
• E or No E is displayed on whether the originating router can accept AS External
LSAs.
Displays the LSA’s type.
Displays the Link State ID.
Identifies the router ID of the LSA’s originating router.
Identifies the link state sequence number. This number enables you to identify old or duplicate LSAs.
Displays the Fletcher checksum of an LSA’s complete contents.
Displays the length in bytes of the LSA.
Open Shortest Path First (OSPFv2 and OSPFv3) | 751
Table 25-9.
Command Example Descriptions: show ip ospf process-id database summary
Items
Network Mask
TOS
Metric
Description
Displays the network mask implemented on the area.
Displays the TOS options. Option 0 is the only option.
Displays the LSA metrics.
Related
Commands
Displays OSPF database information.
show ip ospf interface c e s Display the OSPF interfaces configured. If OSPF is not enabled on the switch, no output is generated.
Syntax show ip ospf process-id interface [ interface ]
Parameters process-id interface
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For the null interface, enter the keyword null followed by zero (0).
• For loopback interfaces, enter the keyword loopback followed by a number from 0 to 16383.
• For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by the VLAN ID. The range is from 1 to 4094.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced process-id option, in support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
752 | Open Shortest Path First (OSPFv2 and OSPFv3)
Example Figure 25-14.
Command Example: show ip ospf process-id interface
FTOS>show ip ospf int
GigabitEthernet 13/17 is up, line protocol is up
Internet Address 192.168.1.2/30, Area 0.0.0.1
Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DR, Priority 1
Designated Router (ID) 192.168.253.2, Interface address 192.168.1.2
Backup Designated Router (ID) 192.168.253.1, Interface address 192.168.1.1
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02
Neighbor Count is 1, Adjacent neighbor count is 1
Adjacent with neighbor 192.168.253.1 (Backup Designated Router)
GigabitEthernet 13/23 is up, line protocol is up
Internet Address 192.168.0.1/24, Area 0.0.0.1
Process ID 1, Router ID 192.168.253.2, Network Type BROADCAST, Cost: 1
Transmit Delay is 1 sec, State DROTHER, Priority 1
Designated Router (ID) 192.168.253.5, Interface address 192.168.0.4
Backup Designated Router (ID) 192.168.253.3, Interface address 192.168.0.2
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:08
Neighbor Count is 3, Adjacent neighbor count is 2
Adjacent with neighbor 192.168.253.5 (Designated Router)
Adjacent with neighbor 192.168.253.3 (Backup Designated Router)
Loopback 0 is up, line protocol is up
Internet Address 192.168.253.2/32, Area 0.0.0.1
Process ID 1, Router ID 192.168.253.2, Network Type LOOPBACK, Cost: 1
Loopback interface is treated as a stub Host.
FTOS>
Table 25-10.
Command Example Descriptions: show ip ospf process-id interface
Line beginning with
GigabitEthernet...
Internet Address...
Process ID...
Transmit Delay...
Designated Router...
Backup Designated...
Timer intervals...
Hello due...
Neighbor Count...
Description
This line identifies the interface type slot/port and the status of the OSPF protocol on that interface.
This line displays the IP address, network mask and area assigned to this interface.
This line displays the OSPF Process ID, Router ID, Network type and cost metric for this interface.
This line displays the interface’s settings for Transmit Delay, State, and Priority.
In the State setting, BDR is Backup Designated Router.
This line displays the ID of the Designated Router and its interface address.
This line displays the ID of the Backup Designated Router and its interface address.
This line displays the interface’s timer settings for Hello interval, Dead interval,
Transmit Delay (Wait), and Retransmit Interval.
This line displays the amount time till the next Hello packet is sent out this interface.
This line displays the number of neighbors and adjacent neighbors. Listed below this line are the details about each adjacent neighbor.
show ip ospf neighbor c e s Display the OSPF neighbors configured.
Open Shortest Path First (OSPFv2 and OSPFv3) | 753
Syntax
Parameters show ip ospf process-id neighbor process-id Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 25-15.
Command Example: show ip ospf process-id neighbor
FTOS#show ip ospf 34 neighbor
Neighbor ID Pri State Dead Time Address Interface Area
20.20.20.7 1 FULL/DR 00:00:32 182.10.10.3 Gi 0/0 0.0.0.2
192.10.10.2 1 FULL/DR 00:00:37 192.10.10.2 Gi 0/1 0.0.0.1
20.20.20.1 1 FULL/DROTHER00:00:36 192.10.10.4 Gi 0/1 0.0.0.1
FTOS#
Table 25-11.
Command Example Descriptions: show ip ospf process-id neighbor
Row Heading
Neighbor ID
Pri
State
Dead Time
Address
Interface
Area
Description
Displays the neighbor router ID.
Displays the priority assigned neighbor.
Displays the OSPF state of the neighbor.
Displays the expected time until FTOS declares the neighbor dead.
Displays the IP address of the neighbor.
Displays the interface type slot/port information.
Displays the neighbor’s area (process ID).
show ip ospf routes c e s Display routes as calculated by OSPF and stored in OSPF RIB.
Syntax show ip ospf process-id routes
Parameters process-id Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
Defaults
Command Modes
No default values or behavior
EXEC
754 | Open Shortest Path First (OSPFv2 and OSPFv3)
EXEC Privilege
Command
History
Usage
Information
Example
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series and E-Series
This command is useful in isolating routing problems between OSPF and RTM. For example, if a route is missing from the RTM/FIB but is visible from the display output of this command, then likely the problem is with downloading the route to the RTM.
This command has the following limitations:
• The display output is sorted by prefixes; intra-area ECMP routes are not displayed together.
• For Type 2 external routes, type1 cost is not displayed.
Figure 25-16.
Command Example: show ip ospf process-id routes
FTOS#show ip ospf 100 route
Prefix Cost Nexthop Interface Area Type
1.1.1.1 1 0.0.0.0 Lo 0 0 Intra-Area
3.3.3.3 2 13.0.0.3 Gi 0/47 1 Intra-Area
13.0.0.0 1 0.0.0.0 Gi 0/47 0 Intra-Area
150.150.150.0 2 13.0.0.3 Gi 0/47 - External
172.30.1.0 2 13.0.0.3 Gi 0/47 1 Intra-Area
FTOS# show ip ospf statistics c e s Display OSPF statistics.
Syntax show ip ospf process-id statistics global | [ interface name { neighbor router-id }]
Parameters process-id global
Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
Enter the keyword global to display the packet counts received on all running
OSPF interfaces and packet counts received and transmitted by all OSPF neighbors.
Open Shortest Path First (OSPFv2 and OSPFv3) | 755
Defaults
Command Modes interface neighbor name router-id
No default behavior or values
EXEC
EXEC Privilege
(OPTIONAL) Enter the keyword interface followed by one of the following interface keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword neighbor followed by the neighbor’s router-id in dotted decimal format (A.B.C.D.).
Command
History
Example
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 25-17.
Command Example: show ip ospf process-id statistics global
FTOS#show ip ospf 1 statistics global
OSPF Packet Count
Total Error Hello DDiscr LSReq LSUpd LSAck
RX 10 0 8 2 0 0 0
TX 10 0 10 0 0 0 0
OSPF Global Queue Length
TxQ-Len RxQ-Len Tx-Mark Rx-Mark
Hello-Q 0 0 0 2
LSR-Q 0 0 0 0
Other-Q 0 0 0 0
Error packets (Only for RX)
Intf-Down 0 Non-Dr 0 Self-Org 0
Wrong-Len 0 Invld-Nbr 0 Nbr-State 0
Auth-Err 0 MD5-Err 0 Chksum 0
Version 0 AreaMis 0 Conf-Issues 0
No-Buffer 0 Seq-No 0 Socket 0
Q-OverFlow 0 Unkown-Pkt 0
Error packets (Only for TX)
Socket Errors 0
FTOS#
756 | Open Shortest Path First (OSPFv2 and OSPFv3)
Table 25-12.
Command Example Descriptions: show ip ospf statistics process-id global
Row Heading Description
Total
Error
Hello
DDiscr
LSReq
LSUpd
LSAck
TxQ-Len
RxQ-Len
Tx-Mark
Rx-Mark
Hello-Q
LSR-Q
Other-Q
Displays the total number of packets received/transmitted by the OSPF process
Displays the error count while receiving and transmitting packets by the OSPF process
Number of OSPF Hello packets
Number of database description packets
Number of link state request packets
Number of link state update packets
Number of link state acknowledgement packets
The transmission queue length
The reception queue length
The highest number mark in the transmission queue
The highest number mark in the reception queue
The queue, for transmission or reception, for the hello packets
The queue, for transmission or reception, for the link state request packets.
The queue, for transmission or reception, for the link state acknowledgement, database description, and update packets.
Self-Org
Wrong_Len
Invld-Nbr
Nbr-State
Auth-Error
MD5-Error
Cksum-Err
Version
AreaMismatch
Conf-Issue
No-Buffer
Seq-no
Socket
Q-overflow
Unknown-Pkt
Table 25-13.
Error Definitions: show ip ospf statistics process-id global
Error Type
Intf_Down
Non-Dr
Description
Received packets on an interface that is either down or OSPF is not enabled.
Received packets with a destination address of ALL_DRS even though SELF is not a designated router
Receive the self originated packet
The received packet length is different to what was indicated in the OSPF header
LSA, LSR, LSU, and DDB are received from a peer which is not a neighbor peer
LSA, LSR, and LSU are received from a neighbor with stats less than the loading state
Simple authentication error
MD5 error
Checksum Error
Version mismatch
Area mismatch
The received hello packet has a different hello or dead interval than the configuration
Buffer allocation failure
A sequence no errors occurred during the database exchange process
Socket Read/Write operation error
Packet(s) dropped due to queue overflow
Received packet is not an OSPF packet
Open Shortest Path First (OSPFv2 and OSPFv3) | 757
Example
The show ip ospf process-id statistics command displays the error packet count received on each interface as:
• The hello-timer remaining value for each interface
• The wait-timer remaining value for each interface
• The grace-timer remaining value for each interface
• The packet count received and transmitted for each neighbor
• Dead timer remaining value for each neighbor
• Transmit timer remaining value for each neighbor
• The LSU Q length and its highest mark for each neighbor
• The LSR Q length and its highest mark for each neighbor
Figure 25-18.
Command Example: show ip ospf process-id statistics
FTOS#show ip ospf 100 statistics
Interface GigabitEthernet 0/8
Hello-Timer 9, Wait-Timer 0, Grace-Timer 0
Error packets (Only for RX)
Intf-Down 0 Non-Dr 0 Self-Org 0
Wrong-Len 0 Invld-Nbr 0 Nbr-State 0
Auth-Error 0 MD5-Error 0 Cksum-Err 0
Version 0 AreaMisMatch 0 Conf-Issue 0
SeqNo-Err 0 Unkown-Pkt 0
Neighbor ID 9.1.1.2
Hello DDiscr LSReq LSUpd LSAck
RX 59 3 1 1 1
TX 62 2 1 0 0
Dead-Timer 37, Transmit-Timer 0
LSU-Q-Len 0, LSU-Q-Wmark 0
LSR-Q-Len 0, LSR-Q-Wmark 1
Related
Commands
Clear the packet statistics in all interfaces and neighbors show ip ospf topology c e s Display routers in directly connected areas.
Syntax show ip ospf process-id topology
Parameters process-id Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced support of Multi-Process OSPF.
758 | Open Shortest Path First (OSPFv2 and OSPFv3)
Usage
Information
Example
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series
Introduced on C-Series and E-Series
This command can be used to isolate problems with inter-area and external routes. In OSPF inter-area and external routes are calculated by adding LSA cost to the cost of reaching the router. If an inter-area or external route is not of correct cost, the display can determine if the path to the originating router is correct or not.
Figure 25-19.
Command Example: show ip ospf process-id topology
FTOS#show ip ospf 1 topology
Router ID Flags Cost Nexthop Interface Area
3.3.3.3 E/B/-/ 1 20.0.0.3 Gi 13/1 0
1.1.1.1 E/-/-/ 1 10.0.0.1 Gi 7/1 1
FTOS# show ip ospf virtual-links c e s Display the OSPF virtual links configured and is useful for debugging OSPF routing operations. If no
OSPF virtual-links are enabled on the switch, no output is generated.
Syntax
Parameters show ip ospf process-id virtual-links process-id Enter the OSPF Process ID to show a specific process.
If no Process ID is entered, command applies only to the first OSPF process.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Example Figure 25-20.
Command Example: show ip ospf process-id virtual-links
FTOS#show ip ospf 1 virt
Virtual Link to router 192.168.253.5 is up
Run as demand circuit
Transit area 0.0.0.1, via interface GigabitEthernet 13/16, Cost of using 2
Transmit Delay is 1 sec, State POINT_TO_POINT,
Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5
Hello due in 00:00:02
FTOS#
Open Shortest Path First (OSPFv2 and OSPFv3) | 759
Table 25-14.
Command Example Descriptions: show ip ospf process-id virtual-links
Items
“Virtual Link...”
“Run as...”
“Transit area...”
“Transmit Delay...”
“Timer intervals...”
“Hello due...”
“Adjacency State...”
Description
This line specifies the OSPF neighbor to which the virtual link was created and the link’s status.
This line states the nature of the virtual link.
This line identifies the area through which the virtual link was created, the interface used, and the cost assigned to that link.
This line displays the transmit delay assigned to the link and the State of the OSPF neighbor.
This line displays the timer values assigned to the virtual link. The timers are Hello is hello-interval, Dead is dead-interval, Wait is transmit-delay, and Retransmit is retransmit-interval.
This line displays the amount of time until the next Hello packet is expected from the neighbor router.
This line displays the adjacency state between neighbors.
summary-address c e s Set the OSPF ASBR to advertise one external route.
Syntax summary-address ip-address mask [ not-advertise ] [ tag tag-value ]
To disable summary address, use the no summary-address ip-address mask command.
Parameters ip-address mask not-advertise tag tag-value
Specify the IP address in dotted decimal format of the address to be summarized.
Specify the mask in dotted decimal format of the address to be summarized.
(OPTIONAL) Enter the keyword not-advertise to suppress that match the network prefix/mask pair.
(OPTIONAL) Enter the keyword tag followed by a value to match on routes redistributed through a route map.
Range: 0 to 4294967295
Defaults Not configured.
ROUTER OSPF Command Modes
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
summarizes routes for the different areas.
760 | Open Shortest Path First (OSPFv2 and OSPFv3)
Related
Commands
With "not-advertise" parameter configured, this command can be used to filter out some external routes. For example, you want to redistribute static routes to OSPF, but you don't want OSPF to advertise routes with prefix 1.1.0.0. Then you can configure summary-address 1.1.0.0
255.255.0.0 not-advertise to filter out all the routes fall in range 1.1.0.0/16.
Summarizes routes within an area.
timers spf c e s Set the time interval between when the switch receives a topology change and starts a shortest path first
(SPF) calculation.
Syntax timers spf delay holdtime
To return to the default, enter no timers spf .
Parameters delay holdtime
Enter a number as the delay.
Range: 0 to 4294967295.
Default: 5 seconds
Enter a number as the hold time.
Range: 0 to 4294967295.
Default: 10 seconds.
Defaults
Command Modes
Command
History delay = 5 seconds; holdtime = 10 seconds
ROUTER OSPF
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced support of Multi-Process OSPF.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Setting the delay and holdtime parameters to a low number enables the switch to switch to an alternate path quickly but requires more CPU usage.
Open Shortest Path First (OSPFv2 and OSPFv3) | 761
762 | Open Shortest Path First (OSPFv2 and OSPFv3)
26
PIM-Sparse Mode (PIM-SM)
Overview
The platforms on which a command is supported is indicated by the character — e
for the E-Series, c for the C-Series, and s
for the S-Series — that appears below each command heading.
This chapter contains the following sections:
•
IPv4 PIM-Sparse Mode Commands
The IPv4 PIM-Sparse Mode (PIM-SM) commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
ip pim sparse-mode sg-expiry-timer
•
•
•
•
•
•
PIM-Sparse Mode (PIM-SM) | 763
clear ip pim rp-mapping c e s Used by the bootstrap router (BSR) to remove all or particular Rendezvous Point (RP) Advertisement.
Syntax clear ip pim rp-mapping rp-address
Parameters rp-address (OPTIONAL) Enter the RP address in dotted decimal format (A.B.C.D)
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series clear ip pim tib c e s Clear PIM tree information from the PIM database.
Syntax clear ip pim tib [ group ]
Parameters group (OPTIONAL) Enter the multicast group address in dotted decimal format (A.B.C.D)
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series debug ip pim c e s View IP PIM debugging messages.
Syntax debug ip pim [ bsr | events | group | packet [ in | out ] | register | state | timer [ assert | hello | joinprune | register ]]
To disable PIM debugging, enter no debug ip pim, or enter undebug all to disable all debugging.
Parameters bsr events group packet [ in | out ]
(OPTIONAL) Enter the keyword bsr to view PIM Candidate RP/BSR activities.
(OPTIONAL) Enter the keyword events to view PIM events.
(OPTIONAL) Enter the keyword group to view PIM messages for a specific group.
(OPTIONAL) Enter the keyword packet to view PIM packets. Enter one of the optional parameters
• in: to view incoming packets
• out: to view outgoing packets.
764 | PIM-Sparse Mode (PIM-SM)
register state timer [ assert | hello | joinprune | register ]
(OPTIONAL) Enter the keyword register to view PIM register address in dotted decimal format (A.B.C.D).
(OPTIONAL) Enter the keyword state to view PIM state changes.
(OPTIONAL) Enter the keyword timer to view PIM timers. Enter one of the optional parameters:
• assert: to view the assertion timer.
• hello: to view the PIM neighbor keepalive timer.
• joinprune: to view the expiry timer (join/prune timer)
• register: to view the register suppression timer.
Defaults
Command Modes
Command
History
Disabled
EXEC Privilege
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series ip pim bsr-border c e s Define the border of PIM domain by filtering inbound and outbound PIM-BSR messages per interface.
Syntax ip pim bsr-border
To return to the default value, enter no ip pim bsr-border .
Defaults Disabled
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on C-Series on port-channels and S-Series.
Usage
Information
This command is applied to the subsequent PIM-BSR. Existing BSR advertisements are cleaned up by time out. Candidate RP advertisements can be cleaned using the
command.
ip pim bsr-candidate c e s Configure the PIM router to join the Bootstrap election process.
Syntax ip pim bsr-candidate interface [ hash-mask-length ] [ priority ]
To return to the default value, enter no ip pim bsr-candidate .
PIM-Sparse Mode (PIM-SM) | 765
Parameters interface hash-mask-length priority
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
• For Port Channel interface types, enter the keyword port-channel followed by a number from 1 to 255.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the hash mask length.
Range: zero (0) to 32
Default: 30
(OPTIONAL) Enter the priority used in Bootstrap election process.
Range: zero (0) to 255
Default: zero (0)
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Version 8.3.3.1
Version 7.8.1.0
Version 6.1.1.0
Introduced on S60
Introduced on S-Series
Added support for VLAN interface ip pim dr-priority c e s Change the Designated Router (DR) priority for the interface.
Syntax ip pim dr-priority priority-value
To remove the DR priority value assigned, use the no ip pim dr-priority command.
Parameters priority-value Enter a number. Preference is given to larger/higher number.
Range: 0 to 4294967294
Default: 1
Defaults
Command Modes
Command
History
1
INTERFACE
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on C-Series on port-channels and S-Series
766 | PIM-Sparse Mode (PIM-SM)
Usage
Information
The router with the largest value assigned to an interface becomes the Designated Router. If two interfaces contain the same DR priority value, the interface with the largest interface IP address becomes the Designated Router. ip pim graceful-restart e This feature permits configuration of Nons top Forwarding (NFS or graceful restart) capability of a PIM router to its neighbors.
Syntax [ ipv6 ] ip pim graceful-restart { helper-only | nsf [ restart-time | stale-entry-time ]}
Parameters ipv6 helper-only nsf restart-time stale-entry-time
Enter this keyword to enable graceful-restart for IPv6 Multicast Routes.
Enter the keyword helper-only to configure as a receiver (helper) only by preserving the PIM status of a graceful restart PIM neighboring router.
Enter the keyword nfs to configure the N ons top F orwarding capability.
(OPTIONAL) Enter the keyword restart-time followed by the number of seconds estimated for the PIM speaker to restart.
Range: 30 to 300 seconds
Default: 180 seconds
(OPTIONAL) Enter the keyword stale-entry-time followed by the number of seconds for which entries are kept alive after restart.
Range: 30 to 300 seconds
Default: 60 seconds
Defaults
Command Modes
Command
History as above
CONFIGURATION
Usage
Information
Version 8.2.1.0
Version 7.6.1.0
Introduced on E-Series ExaScale. Added the ipv6 option for E-Series.
Introduced on E-Series
When an NSF-capable router comes up, it announces the graceful restart capability and restart duration as a Hello option. The receiving router notes the Hello option. Routers not NSF capable will discard the unknown Hello option and adjacency is not affected.
When an NSF-capable router goes down, neighboring PIM speaker preserves the states and continues the forwarding of multicast traffic while the neighbor router restarts.
ip pim join-filter c e s Permit or deny PIM Join/Prune messages on an interface using an extended IP access list. This command prevents the PIM SM router from creating state based on multicast source and/or group.
Syntax ip pim join-filter ext-access-list { in | out }
Remove the access list using the command no ip pim join-filter ext-access-list { in | out }
PIM-Sparse Mode (PIM-SM) | 767
Parameters
Defaults
Command Modes
Command
History
Example ext-access-list in out
None
INTERFACE
Enter the name of an extended access list.
Enter this keyword to apply the access list to inbound traffic.
Enter this keyword to apply the access list to outbound traffic.
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.7.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on C-Series on port-channels and S-Series
Introduced on E-Series.
Figure 26-1.
Command Example: ip pim join-filter
FTOS(conf)# ip access-list extended iptv-channels
FTOS(config-ext-nacl)# permit ip 10.1.2.3/24 225.1.1.0/24
FTOS(config-ext-nacl)# permit ip any 232.1.1.0/24
FTOS(config-ext-nacl)# permit ip 100.1.1.0/16 any
FTOS(config-if-gi-1/1)# ip pim join-filter iptv-channels in
FTOS(config-if-gi-1/1)# ip pim join-filter iptv-channels out
Related
Commands
Configure an access list based on IP addresses or protocols.
ip pim neighbor-filter c e s Configure this feature to prevent a router from participating in protocol independent Multicast (PIM).
Syntax ip pim neighbor-filter { access-list }
To remove the restriction, use the no ip pim neighbor-filter { access-list } command.
Parameters access-list Enter the name of a standard access list. Maximum 16 characters.
Defaults
Command Modes
Command
History
Defaults.
CONFIGURATION.
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.6.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on C-Series and S-Series
Introduced on the E-Series
Do not enter this command before creating the access-list.
768 | PIM-Sparse Mode (PIM-SM)
ip pim query-interval c e s Change the frequency of PIM Router-Query messages.
Syntax ip pim query-interval seconds
To return to the default value, enter no ip pim query-interval seconds command.
Parameters seconds Enter a number as the number of seconds between router query messages.
Default: 30 seconds
Range: 0 to 65535
Defaults
Command Modes
Command
History
30 seconds
INTERFACE
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on C-Series on port-channels and S-Series ip pim register-filter c e s Use this feature to prevent a PIM source DR from sending register packets to an RP for the specified multicast source and group.
Syntax ip pim register-filter access-list
To return to the default, use the no ip pim register-filter access-list command.
Parameters access-list Enter the name of an extended access list. Maximum 16 characters.
Defaults
Command Modes
Command
History
Not configured
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced
The access name is an extended IP access list that denies PIM register packets to RP at the source DR based on the multicast and group addresses. Do not enter this command before creating the access-list.
ip pim rp-address c e s Configure a static PIM Rendezvous Point (RP) address for a group or access-list.
Syntax ip pim rp-address address { group-address group-address mask } override
To remove an RP address, use the no ip pim rp-address address { group-address group-address mask } override command.
PIM-Sparse Mode (PIM-SM) | 769
Parameters address group-address group-address mask override
Enter the RP address in dotted decimal format (A.B.C.D).
Enter the keyword group-address followed by a group-address mask, in dotted decimal format (/xx), to assign that group address to the RP.
Enter the keyword override to override the BSR updates with static RP.
The override will take effect immediately during enable/disable.
Note: This option is applicable to multicast group range.
Defaults
Command Modes
Command
History
Not configured
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on E-Series
This address is used by first-hop routers to send Register packets on behalf of source multicast hosts.
The RP addresses are stored in the order in which they are entered. RP addresses learned via BSR take priority over static RP addresses. Without the override option, RPs advertised by the BSR updates take precedence over the statically configured RPs.
ip pim rp-candidate c e s Configure a PIM router to send out a Candidate-RP-Advertisement message to the Bootstrap (BS) router or define group prefixes that are defined with the RP address to PIM BSR.
Syntax ip pim rp-candidate { interface [ priority ]
To return to the default value, enter no ip pim rp-candidate { interface [ priority ] command.
Parameters interface priority
Enter the following keywords and slot/port or number information:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
• For Port Channel interface types, enter the keyword port-channel followed by a number from 1 to 255.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to
4094.
(OPTIONAL) Enter the priority used in Bootstrap election process.
Range: zero (0) to 255
Default: 192
Defaults
Command Modes
Not configured.
CONFIGURATION
770 | PIM-Sparse Mode (PIM-SM)
Command
History
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on E-Series
Priority is stored at BSR router when receiving a Candidate-RP-Advertisement.
ip pim sparse-mode c e s Enable PIM sparse mode and IGMP on the interface.
Syntax ip pim sparse-mode
To disable PIM sparse mode and IGMP, enter no ip pim sparse-mode .
Defaults
Command Modes
Disabled.
INTERFACE
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on C-Series on port-channels and S-Series
Usage
Information
C-Series supports a maximum of 31 PIM interfaces.
The interface must be enabled ( no shutdown command) and not have the switchport command
configured. Multicast must also be enabled globally (using the ip multicast-lag-hashing
command). PIM is supported on the port-channel interface.
Related
Commands
Enable multicast globally.
ip pim sparse-mode sg-expiry-timer c e s Enable expiry timers globally for all sources, or for a specific set of (S,G) pairs defined by an access list.
Syntax ip pim sparse-mode sg-expiry-timer seconds [access-list name]
To disable configured timers and return to default mode, enter no ip pim sparse-mode sg-expiry-timer .
Parameters seconds access-list name
Enter the number of seconds the S, G entries will be retained.
Range 211-86400
(OPTIONAL) Enter the name of a previously configured Extended ACL to enable the expiry time to specified S,G entries
Defaults Disabled. The default expiry timer (with no times configured) is 210 sec.
PIM-Sparse Mode (PIM-SM) | 771
Command Modes
Command
History
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.7.1.1
Introduced on S60
Introduced on E-Series ExaScale
Introduced
Introduced
This command configures an expiration timer for all S.G entries, unless they are assigned to an
Extended ACL.
ip pim spt-threshold c e Configure PIM router to switch to shortest path tree when the traffic reaches the specified threshold value.
Syntax ip pim spt-threshold value | infinity
To return to the default value, enter no ip pim spt-threshold .
Parameters value infinity
(OPTIONAL) Enter the traffic value in kilobits per second.
Default: 10 packets per second. A value of zero (0) will cause a switchover on the first packet.
(OPTIONAL) To never switch to the source-tree, enter the keyword infinity .
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on C-Series on port-channels and S-Series
This is applicable to last hop routers on the shared tree towards the Rendezvous Point (RP). show ip pim bsr-router c e s View information on the Bootstrap router.
Syntax show ip pim bsr-router
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
772 | PIM-Sparse Mode (PIM-SM)
Example Figure 26-2.
Command Example: show ip pim bsr-router
E600-7-rpm0#show ip pim bsr-router
PIMv2 Bootstrap information
This system is the Bootstrap Router (v2)
BSR address: 7.7.7.7 (?)
Uptime: 16:59:06, BSR Priority: 0, Hash mask length: 30
Next bootstrap message in 00:00:08
This system is a candidate BSR
Candidate BSR address: 7.7.7.7, priority: 0, hash mask length: 30 show ip pim interface c e s View information on the interfaces with IP PIM enabled.
Syntax show ip pim interface
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Example Figure 26-3.
Command Example: show ip pim interface
E600-7-RPM0#show ip pim interface
Address Interface Ver/ Nbr Query DR DR
Mode Count Intvl Prio
172.21.200.254 Gi 7/9 v2/S 0 30 1 172.21.200.254
172.60.1.2
192.3.1.1
Gi 7/11 v2/S 0 30 1 172.60.1.2
Gi 7/16 v2/S 1 30 1 192.3.1.1
192.4.1.1 Gi 13/5 v2/S 0 30 1 192.4.1.1
172.21.110.1 Gi 13/6 v2/S 0 30 1 172.21.110.1
172.21.203.1 Gi 13/7 v2/S 0 30 1 172.21.203.1
Table 26-1.
show ip pim interface Command Example Fields
Field
Address
Interface
Ver/Mode
Nbr Count
Query Intvl
Description
Lists the IP addresses of the interfaces participating in PIM.
List the interface type, with either slot/port information or ID (VLAN or
Port Channel), of the interfaces participating in PIM.
Displays the PIM version number and mode for each interface participating in PIM.
• v2 = PIM version 2
• S = PIM Sparse mode
Displays the number of PIM neighbors discovered over this interface.
Displays the query interval for Router Query messages on that interface
(configured with ip pim query-interval command).
PIM-Sparse Mode (PIM-SM) | 773
Table 26-1.
show ip pim interface Command Example Fields
Field
DR Prio
DR
Description
Displays the Designated Router priority value configured on the interface
command).
Displays the IP address of the Designated Router for that interface.
show ip pim neighbor c e s View PIM neighbors.
Syntax show ip pim neighbor
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Figure 26-4.
Command Example: show ip pim neighbor
FTOS#show ip pim neighbor
Neighbor Interface Uptime/Expires Ver DR
Address Prio/Mode
127.87.3.4 Gi 7/16 09:44:58/00:01:24 v2 1 / S
FTOS#
Table 26-2.
show ip pim neighbor Command Example Fields
Field
Neighbor address
Interface
Uptime/expires
Ver
DR prio/Mode
Description
Displays the IP address of the PIM neighbor.
List the interface type, with either slot/port information or ID (VLAN or
Port Channel), on which the PIM neighbor was found.
Displays the amount of time the neighbor has been up followed by the amount of time until the neighbor is removed from the multicast routing table (that is, until the neighbor hold time expires).
Displays the PIM version number.
• v2 = PIM version 2
Displays the Designated Router priority and the mode.
• 1 = default Designated Router priority (use
)
• DR = Designated Router
• S = source
774 | PIM-Sparse Mode (PIM-SM)
show ip pim rp c e s View all multicast groups-to-RP mappings.
Syntax show ip pim rp [mapping | group-address ]
Parameters mapping group-address
(OPTIONAL) Enter the keyword mapping to display the multicast groups-to-RP mapping and information on how RP is learnt.
(OPTIONAL) Enter the multicast group address mask in dotted decimal format to view RP for a specific group.
Command Modes EXEC
EXEC Privilege
Command
History
Example 1
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Figure 26-5.
Command Example 1: show ip pim rp mapping
FTOS#sh ip pim rp
Group RP
224.2.197.115 165.87.20.4
224.2.217.146 165.87.20.4
224.3.3.3 165.87.20.4
225.1.2.1 165.87.20.4
225.1.2.2 165.87.20.4
229.1.2.1 165.87.20.4
229.1.2.2 165.87.20.4
FTOS#
Example 2 Figure 26-6.
Command Example 2: show ip pim rp mapping
FTOS#sh ip pim rp mapping
Group(s): 224.0.0.0/4
RP: 165.87.20.4, v2
Info source: 165.87.20.5, via bootstrap, priority 0
Uptime: 00:03:11, expires: 00:02:46
RP: 165.87.20.3, v2
Info source: 165.87.20.5, via bootstrap, priority 0
Uptime: 00:03:11, expires: 00:03:03
FTOS#
Example 3 Figure 26-7.
Command Example 3: show ip pim rp group-address
FTOS#sh ip pim rp 229.1.2.1
Group RP
229.1.2.1 165.87.20.4
FTOS#
PIM-Sparse Mode (PIM-SM) | 775
show ip pim tib c e s View the PIM tree information base (TIB).
Syntax show ip pim tib [ group-address [ source-address ]]
Parameters group-address source-address
(OPTIONAL) Enter the group address in dotted decimal format (A.B.C.D)
(OPTIONAL) Enter the source address in dotted decimal format (A.B.C.D).
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Figure 26-8.
Command Example: show ip pim tib
FTOS#show ip pim tib
PIM Multicast Routing Table
Flags: D - Dense, S - Sparse, C - Connected, L - Local, P - Pruned,
R - RP-bit set, F - Register flag, T - SPT-bit set, J - Join SPT,
M - MSDP created entry, A - Candidate for MSDP Advertisement,
K - Ack-Pending State
Timers: Uptime/Expires
Interface state: Interface, next-Hop, State/Mode
(*, 226.1.1.1), uptime 01:29:19, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0
(*, 226.1.1.2), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0
(*, 226.1.1.3), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0
(*, 226.1.1.4), uptime 00:18:08, expires 00:00:52, RP 10.211.2.1, flags: SCJ
Incoming interface: GigabitEthernet 4/23, RPF neighbor 10.211.1.2
Outgoing interface list:
GigabitEthernet 8/0
FTOS#
Table 26-3.
show ip pim tib Command Example Fields
Field
(S, G) uptime expires
RP
Description
Displays the entry in the multicast PIM database.
Displays the amount of time the entry has been in the PIM route table.
Displays the amount of time until the entry expires and is removed from the database.
Displays the IP address of the RP/source for this entry.
776 | PIM-Sparse Mode (PIM-SM)
Table 26-3.
show ip pim tib Command Example Fields (continued)
Field flags
Incoming interface
RPF neighbor
Outgoing interface list:
Description
List the flags to define the entries:
• D = PIM Dense Mode
• S = PIM Sparse Mode
• C = directly connected
• L = local to the multicast group
• P = route was pruned
• R = the forwarding entry is pointing toward the RP
• F = FTOS is registering this entry for a multicast source
• T = packets were received via Shortest Tree Path
• J = first packet from the last hop router is received and the entry is ready to switch to SPT
• K= acknowledge pending state
Displays the reverse path forwarding (RPF) interface towards the RP/ source.
Displays the next hop from this interface towards the RP/source.
Lists the interfaces that meet one of the following criteria:
• a directly connect member of the Group.
• statically configured member of the Group.
• received a (*,G) Join message.
PIM-Sparse Mode (PIM-SM) | 777
778 | PIM-Sparse Mode (PIM-SM)
27
PIM-Source Specific Mode (PIM-SSM)
Overview
The platforms on which a command is supported is indicated by the character — e
for the E-Series, c for the C-Series, and s
for the S-Series — that appears below each command heading.
This chapter contains the following sections:
•
•
IPv4 PIM-Source Specific Mode COmmands
IPv4 PIM Commands
The following commands apply to IPv4 PIM-SM, PIM-SSM, and PIM-DM:
•
•
•
•
•
•
IPv4 PIM-Source Specific Mode COmmands
The IPv4 PIM-Source Specific Mode (PIM-SSM) commands are:
•
•
•
PIM-Source Specific Mode (PIM-SSM) | 779
ip pim ssm-range c e s Specify the SSM group range using an access-list.
Syntax ip pim ssm-range { access_list_name }
Parameters access_list_name Enter the name of the access list.
Defaults
Command Modes
Command
History
Default SSM range is 232/8 and ff3x/32
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series.
Introduced on E-Series.
FTOS supports standard access list for the SSM range. Extended ACL cannot be used for configuring
SSM range. If an Extended ACL is configured and then used in the ip pim ssm-range { access list name } configuration, an error is reported.
However, if ip pim ssm-range { access list name } is configured first and then the ACL is configured as an Extended ACL, an error is not reported and the ACL is not applied to the SSM range.
FTOS recommended best-practices are to configure the standard ACL, and then apply the ACL to the
SSM range. Once the SSM range is applied, the changes are applied internally without requiring clearing of the TIB.
When ACL rules change, the ACL and PIM modules apply the new rules automatically.
When SSM range is configured, FTOS supports SSM for configured group range as well as default
SSM range.
When the SSM ACL is removed, PIM SSM is supported for default SSM range only show ip pim ssm-range c e s Display the non-default groups added using the SSM range feature.
Syntax
Defaults show ip pim ssm-range
No default behavior or values
Command Modes EXEC
EXEC Privilege
780 | PIM-Source Specific Mode (PIM-SSM)
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.8.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series.
Introduced on E-Series.
PIM-Source Specific Mode (PIM-SSM) | 781
782 | PIM-Source Specific Mode (PIM-SSM)
28
Port Monitoring
Overview
The Port Monitoring feature enables you to monitor network traffic by forwarding a copy of each incoming or outgoing packet from one port to another port.
The commands in this chapter are generally supported on the C-Series, E-Series, and S-Series, with one exception, as noted in the Command History fields and by these symbols under the command headings: c e s
Commands
•
•
•
•
•
•
show running-config monitor session
•
Important Points to Remember
• On the E-Series, Port Monitoring is supported on TeraScale and ExaScale platforms.
• Port Monitoring is supported on physical ports only. Logical interfaces, such as Port Channels and
VLANs, are not supported.
• FTOS supports as many monitor sessions on a system as the number of port-pipes.
• A SONET port can only be configured as a monitored port.
• The monitoring (destination, “MG”) and monitored (source, “MD”) ports must be on the same switch.
• A monitoring port can monitor any physical port in the chassis.
• Only one MG and one MD may be in a single port-pipe.
• A monitoring port can monitor more than one port.
• More than one monitored port can have the same destination monitoring port.
• FTOS on the S-Series supports multiple source ports to be monitored by a single destination port in one monitor session.
Port Monitoring | 783
• On the S-Series, one monitor session can have only one MG port. There is no restriction on the number of source ports, or destination ports on the chassis.
Note: The monitoring port should not be a part of any other configuration.
description c e s Enter a description of this monitoring session
Syntax description { description }
To remove the description, use the no description { description } command.
Parameters description Enter a description regarding this session(80 characters maximum).
Defaults
Command Modes
Command
History
No default behavior or values
MONITOR SESSION (conf-mon-sesssession-ID )
Related
Commands
Version 8.3.3.1
Version 8.1.1.0
Version 7.7.1.0
Version 7.5.1.0
pre-7.7.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Enable a monitoring session.
flow-based enable e Enable flow-based monitoring.
Syntax flow-based enable
To disable flow-based monitoring, use the no flow-based enable command.
Defaults
Command Modes
Disabled, that is flow-based monitoring is not applied
MONITOR SESSION (conf-mon-sesssession-ID )
Command
History
Version 8.1.1.0
Version 7.4.1.0
Introduced on E-Series ExaScale
Introduced on E-Series
Usage
Information
Related
Commands
To monitoring traffic with particular flows ingressing/egressing the interface, appropriate ACLs can be applied in both ingress and egress direction.
Create a monitoring session.
784 | Port Monitoring
monitor session c e s Create a session for monitoring traffic.
Syntax monitor session session-ID
To delete a session, use the no monitor session session-ID command.
To delete all monitor sessions, use the no monitor session command.
Parameters session-ID Enter a session identification number.
Range: 0 to 65535
Defaults
Command Modes
No default values or behaviors
MONITOR SESSION (conf-mon-sesssession-ID )
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 28-1.
Command Example: monitor session
FTOS(conf)# monitor session 60
FTOS(conf-mon-sess-60)
Usage
Information
Related
Commands
All monitor sessions contain an implicit “mode interface,” that is, if no mode is designated, the mode is set to interface as shown in the example above.
The monitor command is saved in the running configuration at the Monitor Session mode level and can be restored after a chassis reload.
show running-config monitor session
Display the monitor session
Display the running configuration of a monitor session show config c e s Display the current monitor session configuration.
Syntax show config
Defaults No default values or behavior
Command Modes MONITOR SESSION (conf-mon-sesssession-ID )
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.7.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Port Monitoring | 785
Version 7.5.1.0
Version 7.4.1.0
Introduced on C-Series
Introduced on E-Series
Example
FTOS(conf-mon-sess-11)#show config
!
monitor session 11
source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rx
FTOS# show monitor session c e s Display the monitor information of a particular session or all sessions.
Syntax show monitor session { session-ID }
To display the monitor information for all sessions, use the show monitor session command.
Parameters session-ID (OPTIONAL) Enter a session identification number.
Range: 0 to 65535
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 28-2.
Commands Example: show monitor session
FTOS#show monitor session 11
SessionID Source Destination Direction Mode
----------- -------- ------------- ------------ -------
11 Gi 10/0 Gi 10/47 rx interface
FTOS#
Related
Commands
Create a session for monitoring.
786 | Port Monitoring
show running-config monitor session c e s Display the running configuration of all monitor sessions or a specific session.
Syntax show running-config monitor session { session-ID }
To display the running configuration for all monitor sessions, use just the show running-config monitor session command.
Parameters session-ID (OPTIONAL) Enter a session identification number.
Range: 0 to 65535
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.1.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Example
FTOS#show running-config monitor session
!
monitor session 8
source GigabitEthernet 10/46 destination GigabitEthernet 10/1 direction rx
!
monitor session 11
source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rx
FTOS#show running-config monitor session 11
!
monitor session 11
source GigabitEthernet 10/0 destination GigabitEthernet 10/47 direction rx
Usage
Information
Related
Commands
The monitoring command is saved in the running configuration at the Monitor Session mode level and can be restored after a chassis reload.
Create a session for monitoring.
Display a monitor session.
source c e s Configure a port monitor source.
Syntax source interface destination interface direction { rx | tx | both }
To disable a monitor source, use the no source interface destination interface direction { rx | tx | both } command .
Port Monitoring | 787
Parameters interface destination direction {rx | tx | both}
Enter the one of the following keywords and slot/port information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
Enter the keyword destination to indicate the interface destination.
Enter the keyword direction followed by one of the packet directional indicators. rx : to monitor receiving packets only tx : to monitor transmitting packets only both : to monitor both transmitting and receiving packets
No default behavior or values
MONITOR SESSION (conf-mon-sesssession-ID )
Defaults
Command Modes
Command
History
Example
Version 8.3.3.1
Version 8.1.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 28-3.
Command Example: Configuring a Port Monitor Source
FTOS(conf-mon-sess-11)#source gi 10/0 destination gi 10/47 direction rx
FTOS(conf-mon-sess-11)#
Usage
Information
Note: A SONET port can only be configured as a monitored port.
788 | Port Monitoring
29
Private VLAN (PVLAN)
Overview
Starting with FTOS 7.8.1.0, the Private VLAN (PVLAN) feature of FTOS is available for the C-Series and S-Series: c s
Commands
•
•
•
private-vlan mapping secondary-vlan
•
•
•
show vlan private-vlan mapping
•
See also the following commands. The command output is augmented in FTOS 7.8.1.0 to provide
PVLAN data:
•
•
Private VLANs extend the FTOS security suite by providing Layer 2 isolation between ports within the same private VLAN. A private VLAN partitions a traditional VLAN into subdomains identified by a primary and secondary VLAN pair.
The FTOS private VLAN implementation is based on RFC 3069.
Private VLAN Concepts
Primary VLAN :
The primary VLAN is the base VLAN and can have multiple secondary VLANs. There are two types of secondary VLAN — community VLAN and isolated VLAN :
• A primary VLAN can have any number of community VLANs and isolated VLANs.
• Private VLANs block all traffic to isolated ports except traffic from promiscuous ports. Traffic received from an isolated port is forwarded only to promiscuous ports or trunk ports.
Private VLAN (PVLAN) | 789
Community VLAN :
A community VLAN is a secondary VLAN of the primary VLAN:
• Ports in a community VLAN can talk to each other. Also, all ports in a community VLAN can talk to all promiscuous ports in the primary VLAN and vice-versa.
• Devices on a community VLAN can communicate with each other via member ports, while devices in an isolated VLAN cannot.
Isolated VLAN :
An isolated VLAN is a secondary VLAN of the primary VLAN:
• Ports in an isolated VLAN cannot talk to each other. Servers would be mostly connected to isolated VLAN ports.
• Isolated ports can talk to promiscuous ports in the primary VLAN, and vice-versa.
Port types :
• Community port: A community port is, by definition, a port that belongs to a community VLAN and is allowed to communicate with other ports in the same community VLAN and with promiscuous ports.
• Isolated port: An isolated port is, by definition, a port that, in Layer 2, can only communicate with promiscuous ports that are in the same PVLAN.
• Promiscuous port: A promiscuous port is, by definition, a port that is allowed to communicate with any other port type.
• Trunk port : A trunk port , by definition, carries VLAN traffic across switches:
• A trunk port in a PVLAN is always tagged.
• Primary or secondary VLAN traffic is carried by the trunk port in tagged mode. The tag on the packet helps identify the VLAN to which the packet belongs.
• A trunk port can also belong to a regular VLAN (non-private VLAN).
ip local-proxy-arp c s Enable/disable Layer 3 communication between secondary VLANs in a private VLAN.
Syntax [ no ] ip local-proxy-arp
Defaults
Command Modes
To disable Layer 3 communication between secondary VLANs in a private VLAN, use the no ip local-proxy-arp command in the INTERFACE VLAN mode for the primary VLAN.
To disable Layer 3 communication in a particular secondary VLAN, use the no ip local-proxy-arp command in the INTERFACE VLAN mode for the selected secondary VLAN.
Note : Even after ip-local-proxy-arp is disabled ( no ip-local-proxy-arp ) in a secondary VLAN,
Layer 3 communication may happen between some secondary VLAN hosts, until the ARP timeout happens on those secondary VLAN hosts.
Layer 3 communication is disabled between secondary VLANs in a private VLAN.
INTERFACE VLAN
790 | Private VLAN (PVLAN)
Command
History
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
private-vlan mapping secondary-vlan
Set the mode of the selected VLAN to community, isolated, or primary.
Map secondary VLANs to the selected primary VLAN.
Display the ARP table.
Display type and status of PVLAN interfaces.
Display PVLANs and/or interfaces that are part of a PVLAN.
Set the PVLAN mode of the selected port.
private-vlan mode c s Set the PVLAN mode of the selected VLAN to community, isolated, or primary.
Syntax [ no ] private-vlan mode { community | isolated | primary }
To remove the PVLAN configuration, use the no private-vlan mode { community | isolated | primary } command syntax.
Parameters community isolated primary
Enter community to set the VLAN as a community VLAN, as described above.
Enter isolated to configure the VLAN as an isolated VLAN, as described above.
Enter primary to configure the VLAN as a primary VLAN, as described above.
Defaults
Command Modes
Command
History none
INTERFACE VLAN
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
The VLAN:
• Can be in only one mode, either community, isolated, or primary.
• Mode can be set to community or isolated even before associating it to a primary VLAN. This secondary VLAN will continue to work normally as a normal VLAN even though it is not associated to a primary VLAN. (A syslog message indicates this.)
• Must not have a port in it when the VLAN mode is being set.
Only ports (and port channels) configured as promiscuous, host, or PVLAN trunk ports (as described above) can be added to the PVLAN. No other regular ports can be added to the PVLAN.
After using this command to configure a VLAN as a primary VLAN, use the private-vlan mapping secondary-vlan command to map secondary VLANs to this VLAN.
private-vlan mapping secondary-vlan show interfaces private-vlan
Set the mode of the selected VLAN to primary and then associate secondary VLANs to it.
Display type and status of PVLAN interfaces.
Private VLAN (PVLAN) | 791
show vlan private-vlan mapping
Display PVLANs and/or interfaces that are part of a PVLAN.
Display primary-secondary VLAN mapping.
Set the PVLAN mode of the selected port.
private-vlan mapping secondary-vlan c s Map secondary VLANs to the selected primary VLAN.
Syntax
Parameters
[ no ] private-vlan mapping secondary-vlan vlan-list
To remove specific secondary VLANs from the configuration, use the no private-vlan mapping secondary-vlan vlan-list command syntax. vlan-list Enter the list of secondary VLANs to associate with the selected primary VLAN, as described above. The list can be in comma-delimited or hyphenated-range format, following the convention for range input.
Defaults
Command Modes
Command
History none
INTERFACE VLAN
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
The list of secondary VLANs can be:
• Specified in comma-delimited or hyphenated-range format.
• Specified with this command even before they have been created.
• Amended by specifying the new secondary VLAN to be added to the list.
Related
Commands
show vlan private-vlan mapping
Set the mode of the selected VLAN to community, isolated, or primary.
Display type and status of PVLAN interfaces.
Display PVLANs and/or interfaces that are part of a PVLAN.
Display primary-secondary VLAN mapping.
Set the PVLAN mode of the selected port.
show interfaces private-vlan c s Display type and status of PVLAN interfaces.
Syntax
Parameters show interfaces private-vlan [ interface interface ] interface interface (OPTIONAL) Enter the keyword interface , followed by the ID of the specific interface for which to display PVLAN status.
792 | Private VLAN (PVLAN)
Defaults
Command Modes none
EXEC
EXEC Privilege
Command
History
Usage
Information
Examples
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
This command has two types of display — a list of all PVLAN interfaces or for a specific interface.
Examples of both types of output are shown below.
Figure 29-1.
show interfaces private-vlan Command Output
FTOS# show interfaces private-vlan
Interface Vlan PVLAN-Type Interface Type Status
--------- ---- ---------- -------------- --------
Gi 2/1 10 Primary Promiscuous Up
Gi 2/2 100 Isolated Host Down
Gi 2/3 10 Primary Trunk Up
Gi 2/4 101 Community Host Up
FTOS# show interfaces private-vlan Gi 2/2
Interface Vlan PVLAN-Type Interface Type Status
--------- ---- ---------- -------------- --------
Gi 2/2 100 Isolated Host Up
The table, below, defines the fields in the output, above.
Table 29-1.
show interfaces description Command Example Fields
Field
Interface
Vlan
PVLAN-Type
Interface Type
Status
Description
Displays type of interface and associated slot and port number
Displays the VLAN ID of the designated interface
Displays the type of VLAN in which the designated interface resides
Displays the PVLAN port type of the designated interface.
States whether the interface is operationally up or down.
Related
Commands
Set the mode of the selected VLAN to community, isolated, or primary.
Display PVLANs and/or interfaces that are part of a PVLAN.
show vlan private-vlan mapping
Display primary-secondary VLAN mapping.
Set the PVLAN mode of the selected port.
show vlan private-vlan c s Display PVLANs and/or interfaces that are part of a PVLAN.
Private VLAN (PVLAN) | 793
Syntax
Parameters
Defaults
Command Modes show vlan private-vlan [ community | interface | isolated | primary | primary_vlan | interface interface ] community interface isolated primary primary_vlan interface interface
(OPTIONAL) Enter the keyword community to display VLANs configured as community VLANs, along with their interfaces.
(OPTIONAL) Enter the keyword community to display VLANs configured as community VLANs, along with their interfaces.
(OPTIONAL) Enter the keyword isolated to display VLANs configured as isolated VLANs, along with their interfaces.
(OPTIONAL) Enter the keyword primary to display VLANs configured as primary VLANs, along with their interfaces.
(OPTIONAL) Enter a private VLAN ID or secondary VLAN ID to display interface details about the designated PVLAN.
(OPTIONAL) Enter the keyword interface and an interface ID to display the PVLAN configuration of the designated interface.
none
EXEC
EXEC Privilege
Command
History
Usage
Information
Examples
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
Examples of all types of command output are shown below. The first type of output is the result of not entering an optional keyword. It displays a detailed list of all PVLANs and their member VLANs and interfaces. The other types of output show details about PVLAN subsets.
Figure 29-2.
show vlan private-vlan Command Output
FTOS# show vlan private-vlan
Primary Secondary Type Active Ports
------- --------- --------- ------ ------------------------
10 primary Yes Gi 2/1,3
100 isolated Yes Gi 2/2
101 community Yes Gi 2/10
20 primary Yes Po 10, 12-13
Gi 3/1
200 isolated Yes Gi 3/2,4-6
201 community No
202 community Yes Gi 3/11-12
FTOS# show vlan private-vlan primary
Primary Secondary Type Active Ports
------- --------- --------- ------ ------------------------
10 primary Yes Gi 2/1,3
20 primary Yes Gi 3/1,3
794 | Private VLAN (PVLAN)
FTOS# show vlan private-vlan isolated
Primary Secondary Type Active Ports
------- --------- --------- ------ ------------------------
10 primary Yes Gi 2/1,3
100 isolated Yes Gi 2/2,4-6
200 isolated Yes Gi 3/2,4-6
FTOS# show vlan private-vlan community
Primary Secondary Type Active Ports
------- --------- --------- ------ ------------------------
10 primary Yes Gi 2/1,3
101 community Yes Gi 2/7-10
20 primary Yes Po 10, 12-13
Gi 3/1
201 community No
202 community Yes Gi 3/11-12
FTOS# show vlan private-vlan interface Gi 2/1
Primary Secondary Type Active Ports
------- --------- --------- ------ ------------------------
10 primary Yes Gi 2/1
If the VLAN ID is that of a primary VLAN, then the entire private VLAN output will be displayed, as shown in
. If the VLAN ID is a secondary VLAN, only its primary VLAN and its particular secondary VLAN properties will be displayed, as shown in
Figure 29-3.
Output of show vlan private-vlan (primary)
FTOS# show vlan private-vlan 10
Primary Secondary Type Active Ports
------- --------- --------- ------ ------------------------
10 primary Yes Gi 2/1,3
102 0
101 isolated Yes Gi 0/4 community Yes Gi 2/7-10
Figure 29-4.
Output of show vlan private-vlan (secondary)
FTOS#show vlan private-vlan 102
Primary Secondary Type Active Ports
------- --------- --------- ------ ------------------------------------------
10 Primary Yes Po 1
Gi 0/2
102 Isolated Yes o Gi
The table, below, defines the fields in the output, above.
Table 29-2.
show interfaces description Command Example Fields
Field
Primary
Secondary
Type
Description
Displays the VLAN ID of the designated or associated primary VLAN(s)
Displays the VLAN ID of the designated or associated secondary VLAN(s
Displays the type of VLAN in which the listed interfaces reside
Private VLAN (PVLAN) | 795
Table 29-2.
show interfaces description Command Example Fields
Field
Active
Ports
Description
States whether the interface is operationally up or down
Displays the interface IDs in the listed VLAN.
Related
Commands
Set the mode of the selected VLAN to either community or isolated.
Display type and status of PVLAN interfaces.
show vlan private-vlan mapping
Display primary-secondary VLAN mapping.
Set the PVLAN mode of the selected port.
show vlan private-vlan mapping c s Display primary-secondary VLAN mapping.
Syntax
Defaults
Command Modes show vlan private-vlan mapping none
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
Usage
Information
The output of this command, shown below, displays the community and isolated VLAN IDs that are associated with each primary VLAN.
Figure 29-5.
show vlan private-vlan mapping Command Output
FTOS# show vlan private-vlan mapping
Private Vlan:
Primary : 100
Isolated : 102
Community : 101
Unknown : 200
Related
Commands
Set the mode of the selected VLAN to either community or isolated.
Display type and status of PVLAN interfaces.
show vlan private-vlan mapping
Display primary-secondary VLAN mapping.
Set the PVLAN mode of the selected port.
796 | Private VLAN (PVLAN)
switchport mode private-vlan c s Set the PVLAN mode of the selected port.
Syntax [ no ] switchport mode private-vlan { host | promiscuous | trunk }
Parameters
To remove the PVLAN mode from the selected port, use the no switchport mode private-vlan command.
host promiscuous trunk
Enter host to configure the selected port or port channel as an isolated interface in a
PVLAN, as described above.
Enter promiscuous to configure the selected port or port channel as an promiscuous interface, as described above.
Enter trunk to configure the selected port or port channel as a trunk port in a PVLAN, as described above.
Defaults
Command Modes disabled
INTERFACE
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
Usage
Information
Example
The assignment of the various PVLAN port types to port and port channel (LAG) interfaces is demonstrated below.
Figure 29-6.
Examples of switchport mode private-vlan Command
FTOS#conf
FTOS(conf)#interface GigabitEthernet 2/1
FTOS(conf-if-gi-2/1)#switchport mode private-vlan promiscuous
FTOS(conf)#interface GigabitEthernet 2/2
FTOS(conf-if-gi-2/2)#switchport mode private-vlan host
FTOS(conf)#interface GigabitEthernet 2/3
FTOS(conf-if-gi-2/3)#switchport mode private-vlan trunk
FTOS(conf)#interface port-channel 10
FTOS(conf-if-gi-2/3)#switchport mode private-vlan promiscuous
Related
Commands
private-vlan mapping secondary-vlan show interfaces private-vlan
Set the mode of the selected VLAN to either community or isolated.
Set the mode of the selected VLAN to primary and then associate secondary VLANs to it.
Display type and status of PVLAN interfaces.
show vlan private-vlan mapping
Display primary-secondary VLAN mapping.
Private VLAN (PVLAN) | 797
798 | Private VLAN (PVLAN)
30
Per-VLAN Spanning Tree plus (PVST+)
Overview
The FTOS implementation of PVST+ (Per-VLAN Spanning Tree plus) is based on the IEEE 802.1d standard Spanning Tree Protocol, but it creates a separate spanning tree for each VLAN configured.
PVST+ (Per-VLAN Spanning Tree plus) is supported by FTOS on all Dell Networking systems, as indicated by the characters that appear below each command heading:
• C-Series: c
• E-Series: e
• S-Series: s
Commands
The FTOS PVST+ commands are:
•
•
•
•
•
•
•
spanning-tree pvst err-disable
•
•
•
•
•
Note: For easier command line entry, the plus (+) sign is not used at the command line.
disable c e s Disable PVST+ globally.
Syntax disable
To enable PVST+, enter no disable .
Per-VLAN Spanning Tree plus (PVST+) | 799
Defaults
Command Modes
Command
History
PVST+ is disabled
CONFIGURATION (conf-pvst)
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced on E-Series
Related
Commands
Enter PVST+ mode.
description c e s Enter a description of the PVST+
Syntax description { description }
Parameters
To remove the description, use the no description { description } command.
description Enter a description to identify the Spanning Tree (80 characters maximum).
Defaults
Command Modes
Command
History
No default behavior or values
SPANNING TREE PVST+ (The prompt is “config-pvst”.)
Version 8.3.3.1
pre-7.7.1.0
Introduced on S60
Introduced
Related
Commands
Enter SPANNING TREE mode on the switch.
extend system-id c e s Use Extend System ID to augment the Bridge ID with a VLAN ID so that PVST+ differentiate between BPDUs for each VLAN. If for some reason on VLAN receives a BPDU meant for another
VLAN, PVST+ will then not detect a loop, and both ports can remain in forwarding state.
Syntax
Defaults
Command Modes extend system-id
Disabled
PROTOCOL PVST
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced
800 | Per-VLAN Spanning Tree plus (PVST+)
Example
Related
Commands
FTOS(conf-pvst)#do show spanning-tree pvst vlan 5 brief
VLAN 5
Executing IEEE compatible Spanning Tree Protocol
Root ID Priority 32773, Address 0001.e832.73f7
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID Priority 32773 (priority 32768 sys-id-ext 5), Address 0001.e832.73f7
We are the root of Vlan 5
Configured hello time 2, max age 20, forward delay 15
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID PortID
---------- -------- ---- ------ --- ------- -------------------- --------
Gi 0/10 128.140 128 200000 FWD 0 32773 0001.e832.73f7 128.140
Gi 0/12 128.142 128 200000 DIS 0 32773 0001.e832.73f7 128.142
Interface
Name Role PortID Prio Cost Sts Cost Link-type Edge
---------- ------ -------- ---- ------- --- ------- --------- ------------------------
Gi 0/10 Desg 128.140 128 200000 FWD 0 P2P No
Gi 0/12 Dis 128.142 128 200000 DIS 0 P2P No
Enter SPANNING TREE mode on the switch.
protocol spanning-tree pvst c e s Enter the PVST+ mode to enable PVST+ on a device.
Syntax protocol spanning-tree pvst
To disable PVST+, use the disable command.
Defaults
Command Modes
This command has no default value or behavior.
CONFIGURATION
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced
Figure 30-1.
Configuring with protocol spanning-tree pvst Command
FTOS#conf
FTOS(conf)#protocol spanning-tree pvst
FTOS(conf-pvst)#no disable
FTOS(conf-pvst)#vlan 2 bridge-priority 4096
FTOS(conf-pvst)#vlan 3 bridge-priority 16384
FTOS(conf-pvst)#
FTOS(conf-pvst)#show config
!
protocol spanning-tree pvst
no disable
vlan 2 bridge-priority 4096
vlan 3 bridge-priority 16384
FTOS#
Usage
Information
Once PVST+ is enabled, the device runs an STP instance for each VLAN it supports.
Per-VLAN Spanning Tree plus (PVST+) | 801
Related
Commands
Disable PVST+.
Display the PVST+ configuration.
show spanning-tree pvst c e s View the Per-VLAN Spanning Tree configuration.
Syntax show spanning-tree pvst [ vlan vlan-id ] [ brief ] [ Interface ]
Parameters vlan vlan-id brief
Interface
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID.
Range: 1 to 4094
(OPTIONAL) Enter the keyword brief to view a synopsis of the PVST+ configuration information.
(OPTIONAL) Enter one of the interface keywords along with the slot/port information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Expanded to display port error disable state (EDS) caused by loopback BPDU inconsistency and Port VLAN ID inconsistency.
Introduced
802 | Per-VLAN Spanning Tree plus (PVST+)
Example 1 Figure 30-2.
show spanning-tree pvst brief Command
FTOS#show spanning-tree pvst vlan 3 brief
VLAN 3
Executing IEEE compatible Spanning Tree Protocol
Root ID Priority 4096, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID Priority 16384, Address 0001.e805.e306
Configured hello time 2, max age 20, forward delay 15
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID PortID
---------- -------- ---- ------ --- ------- -------------------- --------
Gi 1/0 128.130 128 20000 FWD 20000 4096 0001.e801.6aa8 128.426
Gi 1/1 128.131 128 20000 BLK 20000 4096 0001.e801.6aa8 128.427
Gi 1/16 128.146 128 20000 FWD 20000 16384 0001.e805.e306 128.146
Gi 1/17 128.147 128 20000 FWD 20000 16384 0001.e805.e306 128.147
Interface
Name Role PortID Prio Cost Sts Cost Link-type Edge
---------- ------ -------- ---- ------- --- ------- --------- ----
Gi 1/0 Root 128.130 128 20000 FWD 20000 P2P No
Gi 1/1 Altr 128.131 128 20000 BLK 20000 P2P No
Gi 1/16 Desg 128.146 128 20000 FWD 20000 P2P Yes
Gi 1/17 Desg 128.147 128 20000 FWD 20000 P2P Yes
Example 2 Figure 30-3.
show spanning-tree pvst vlan Command
FTOS#show spanning-tree pvst vlan 2
VLAN 2
Root Identifier has priority 4096, Address 0001.e805.e306
Root Bridge hello time 2, max age 20, forward delay 15
Bridge Identifier has priority 4096, Address 0001.e805.e306
Configured hello time 2, max age 20, forward delay 15
We are the root of VLAN 2
Current root has priority 4096, Address 0001.e805.e306
Number of topology changes 3, last change occured 00:57:00
Port 130 (GigabitEthernet 1/0) is designated Forwarding
Port path cost 20000, Port priority 128, Port Identifier 128.130
Designated root has priority 4096, address 0001.e805.e3:06
Designated bridge has priority 4096, address 0001.e805.e3:06
Designated port id is 128.130, designated path cost 0
Number of transitions to forwarding state 1
BPDU sent 1567, received 3
The port is not in the Edge port mode
Port 131 (GigabitEthernet 1/1) is designated Forwarding
Port path cost 20000, Port priority 128, Port Identifier 128.131
Designated root has priority 4096, address 0001.e805.e3:06
Designated bridge has priority 4096, address 0001.e805.e3:06
Designated port id is 128.131, designated path cost 0
Number of transitions to forwarding state 1
BPDU sent 1567, received 0
The port is not in the Edge port mode
Port 146 (GigabitEthernet 1/16) is designated Forwarding
Port path cost 20000, Port priority 128, Port Identifier 128.146
Designated root has priority 4096, address 0001.e805.e3:06
Designated bridge has priority 4096, address 0001.e805.e3:06
Designated port id is 128.146, designated path cost 0
Number of transitions to forwarding state 1
BPDU sent 1578, received 0
The port is in the Edge port mode
Port 147 (GigabitEthernet 1/17) is designated Forwarding
Port path cost 20000, Port priority 128, Port Identifier 128.147
Designated root has priority 4096, address 0001.e805.e3:06
Designated bridge has priority 4096, address 0001.e805.e3:06
Designated port id is 128.147, designated path cost 0
Number of transitions to forwarding state 1
BPDU sent 1579, received 0
The port is in the Edge port mode
Per-VLAN Spanning Tree plus (PVST+) | 803
Example 3 Figure 30-4.
show spanning-tree pvst command with EDS and LBK
FTOS#show spanning-tree pvst vlan 2 interface gigabitethernet 1/0
GigabitEthernet 1/0 of VLAN 2 is LBK_INC discarding
Loopback BPDU
Inconsistency
(LBK_INC) Edge port:no (default) port guard :none (default)
Link type: point-to-point (auto) bpdu filter:disable (default)
Bpdu guard :disable (default)
Bpdus sent 152, received 27562
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID PortID
--------- -------- ---- ------- --- ------- -------------------- --------
Gi 1/0 128.1223 128 20000 EDS 0 32768 0001.e800.a12b 128.1223
Example 4 Figure 30-5.
show spanning-tree pvst with EDS and PVID
FTOS#show spanning-tree pvst vlan 2 interface gigabitethernet 1/0
GigabitEthernet 1/0 of VLAN 2 is PVID_INC discarding
Port VLAN ID (PVID)
Inconsistency
Edge port:no (default) port guard :none (default)
Link type: point-to-point (auto) bpdu filter:disable (default)
Bpdu guard :disable (default)
Bpdus sent 1, received 0
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID PortID
--------- -------- ---- ------- --- ------- -------------------- --------
Gi 1/0 128.1223 128 20000 EDS 0 32768 0001.e800.a12b 128.1223
Related
Commands
Configure PVST+ on an interface.
spanning-tree pvst c e s Configure PVST+ edge port with optional Bridge Port Data Unit (BPDU) guard, VLAN, port priority, and port cost on an interface.
Syntax spanning-tree pvst [edge-port [ bpduguard [ shutdown-on-violation ]] | vlan vlan-range
{ cost number | priority value }]
To disable PVST+ on an interface, use the no spanning-tree pvst [edge-port [ bpduguard ]
[ shutdown-on-violation ] ] | vlan vlan-range { cost number | priority value }] command.
Parameters edge-port bpduguard
(OPTIONAL) Enter the keyword edge-port to configure the interface as a PVST+ edge port.
(OPTIONAL) Enter the keyword portfast to enable Portfast to move the interface into forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.
shutdown-on-v iolation
(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
vlan vlan-range (OPTIONAL) Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094
804 | Per-VLAN Spanning Tree plus (PVST+)
cost number priority value
(OPTIONAL) Enter the keyword cost followed by the port cost value.
Range: 1 to 200000
Defaults:
100 Mb/s Ethernet interface = 200000
1-Gigabit Ethernet interface = 20000
10-Gigabit Ethernet interface = 2000
Port Channel interface with one 100 Mb/s Ethernet = 200000
Port Channel interface with one 1-Gigabit Ethernet = 20000
Port Channel interface with one 10-Gigabit Ethernet = 2000
Port Channel with two 1-Gigabit Ethernet = 18000
Port Channel with two 10-Gigabit Ethernet = 1800
Port Channel with two 100-Mbps Ethernet = 180000
(OPTIONAL) Enter the keyword priority followed the Port priority value in increments of 16.
Range: 0 to 240
Default: 128
Defaults
Command Modes
Command
History
Not Configured
INTERFACE
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.2.1.1
Introduced on S60
Introduced hardware shutdown-on-violation option
Support added for S-Series
Support added for C-Series
Added the optional Bridge Port Data Unit (BPDU) guard
Introduced
The BPDU guard option prevents the port from participating in an active STP topology in case a
BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack. This option places the port into an error disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action.
Note: A port configured as an edge port, on a PVST switch, will immediately transition to the forwarding state. Only ports connected to end-hosts should be configured as an edge port.
Consider an edge port similar to a port with a spanning-tree portfast enabled.
Example
If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.
Figure 30-6.
spanning-tree pvst vlan Command Example
FTOS(conf-if-gi-1/1)#spanning-tree pvst vlan 3 cost 18000
FTOS(conf-if-gi-1/1)#end
FTOS(conf-if-gi-1/1)#show config
!
interface GigabitEthernet 1/1
no ip address
switchport
spanning-tree pvst vlan 3 cost 18000
no shutdown
FTOS(conf-if-gi-1/1)#end
FTOS#
Per-VLAN Spanning Tree plus (PVST+) | 805
Related
Commands
View PVST+ configuration spanning-tree pvst err-disable c e s Place ports in an err-disabled state if they receive a PVST+ BPDU when they are members an untagged
VLAN.
Syntax
Defaults spanning-tree pvst err-disable cause invalid-pvst-bpdu
Enabled; ports are placed in err-disabled state if they receive a PVST+ BPDU when they are members of an untagged VLAN.
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Introduced
Usage
Information
Related
Commands
Some non-Dell Networking systems which have hybrid ports participating in PVST+ transmit two kinds of BPDUs: an 802.1D BPDU and an untagged PVST+ BPDU.
Dell Networking systems do not expect PVST+ BPDU on an untagged port. If this happens, FTOS places the port in error-disable state. This behavior might result in the network not converging. To prevent FTOS from executing this action, use the command no spanning-tree pvst err-disable cause invalid-pvst-bpdu .
View the PVST+ configuration.
tc-flush-standard c e s Enable the MAC address flushing upon receiving every topology change notification.
Syntax tc-flush-standard
To disable, use the no tc-flush-standard command.
Defaults
Command Modes
Disabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced
Usage
Information
By default FTOS implements an optimized flush mechanism for PVST+. This helps in flushing the
MAC addresses only when necessary (and less often) allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses upon receiving every topology change notification.
806 | Per-VLAN Spanning Tree plus (PVST+)
vlan bridge-priority c e s Set the PVST+ bridge-priority for a VLAN or a set of VLANs.
Syntax vlan vlan-range bridge-priority value
To return to the default value, enter no vlan bridge-priority command.
Parameters vlan vlan-range bridge-priority value
Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094
Enter the keyword bridge-priority followed by the bridge priority value in increments of 4096.
Range: 0 to 61440
Default: 32768
Defaults
Command Modes
32768
CONFIGURATION (conf-pvst)
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced
Related
Commands
Change the time interval before FTOS transitions to the forwarding state
Change the time interval between BPDUs
Change the time interval before PVST+ refreshes
Display the PVST+ configuration vlan forward-delay c e s Set the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State.
Syntax vlan vlan-range forward-delay seconds
To return to the default setting, enter no vlan forward-delay command.
Parameters vlan vlan-range forward-delay seconds
Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094
Enter the keyword forward-delay followed by the time interval, in seconds, that
FTOS waits before transitioning PVST+ to the forwarding state.
Range: 4 to 30 seconds
Default: 15 seconds
Defaults 15 seconds
Per-VLAN Spanning Tree plus (PVST+) | 807
Command Modes
Command
History
Related
Commands
CONFIGURATION (conf-pvst)
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced
Set the bridge-priority value
Change the time interval between BPDUs
Change the time interval before PVST+ refreshes
Display the PVST+ configuration vlan hello-time c e s Set the time interval between generation of PVST+ Bridge Protocol Data Units (BPDUs).
Syntax
Parameters vlan vlan-range hello-time seconds
To return to the default value, enter no vlan hello-time command.
vlan vlan-range hello-time seconds
Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094
Enter the keyword hello-time followed by the time interval, in seconds, between transmission of BPDUs.
Range: 1 to 10 seconds
Default: 2 seconds
Defaults
Command Modes
Command
History
2 seconds
CONFIGURATION (conf-pvst)
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
vlan bridge-priority vlan forward-delay
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced
Set the bridge-priority value
Change the time interval before FTOS transitions to the forwarding state
Change the time interval before PVST+ refreshes
Display the PVST+ configuration
808 | Per-VLAN Spanning Tree plus (PVST+)
vlan max-age c e s Set the time interval for the PVST+ bridge to maintain configuration information before refreshing that information.
Syntax vlan vlan-range max-age seconds
To return to the default, use the no vlan max-age command.
Parameters vlan vlan-range max-age seconds
Enter the keyword vlan followed by the VLAN number(s).
Range: 1 to 4094
Enter the keyword max-age followed by the time interval, in seconds, that
FTOS waits before refreshing configuration information.
Range: 6 to 40 seconds
Default: 20 seconds
Defaults
Command Modes
Command
History
20 seconds
CONFIGURATION (conf-pvst)
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
vlan bridge-priority vlan forward-delay
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced
Set the bridge-priority value
Change the time interval before FTOS transitions to the forwarding state
Change the time interval between BPDUs
Display the PVST+ configuration
Per-VLAN Spanning Tree plus (PVST+) | 809
810 | Per-VLAN Spanning Tree plus (PVST+)
31
Quality of Service (QoS)
Overview
FTOS commands for Quality of Service (QoS) include traffic conditioning and congestion control.
QoS commands are not universally supported on all Dell Networking platforms. Support is indicated by the c
, e and s characters under command headings.
This chapter contains the following sections:
•
•
•
•
E-Series Only )
Global Configuration Commands
•
•
qos-rate-adjust c e s By default, while rate limiting, policing, and shaping, FTOS does not include the Preamble, SFD, or the IFG fields. These fields are overhead; only the fields from MAC Destination Address to the CRC are used for forwarding and are included in these rate metering calculations. You can optionally include overhead fields in rate metering calculations by enabling QoS Rate Adjustment.
Syntax qos-rate-adjustment overhead-bytes
Parameters overhead-bytes Include a specified number of bytes of packet overhead to include in rate limiting, policing, and shaping calculations.
C-Series and S-Series Range: 1-31
E-Series Range: 1-144
Defaults
Command Modes
QoS Rate Adjustment is disabled by default, and no qos-rate-adjust is listed in the running-configuration
CONFIGURATION
Quality of Service (QoS) | 811
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced qos-scheduling
Configure QoS scheduling priority by setting the scheduled interval for unicast and multicast packets.
Syntax
Parameters qos-scheduling [unicast packet-number || multicast packet-number ] unicast multicast packet-number
Enter the keyword unicast for unicast packet scheduling.
Enter the keyword multicast for multicast packet scheduling.
Enter the number of consecutive packets to schedule.
Range: 1 to 63.
Default: 1.
Defaults
Command Modes
Command
History
1
CONFIGURATION
Version 8.3.3.9
Introduced on the S60.
Per-Port QoS Commands
Per-port QoS (“port-based QoS”) allows users to defined QoS configuration on a per-physical-port basis. The commands include:
•
•
•
•
•
•
•
812 | Quality of Service (QoS)
dot1p-priority c e s Assign a value to the IEEE 802.1p bits on the traffic received by this interface.
Syntax dot1p-priority priority-value
To delete the IEEE 802.1p configuration on the interface, enter no dot1p-priority .
Parameters priority-value
5
6
7
3
4
1
2
Enter a value from 0 to 7.
dot1p
0
Queue Number
2
0
1
3
4
5
6
7
5
6
7
3
4
1
2
For the C-Series and S-Series , enter a value 0, 2, 4, or 6 dot1p
0
Queue Numbe
1 r
0
0
1
2
2
3
3
Defaults
Command Modes
No default behavior or values
INTERFACE
Command
History
Version 8.3.3.1
Version 7.5.1.0
Introduced on S60
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Usage
Information
The dot1p-priority command changes the priority of incoming traffic on the interface. The system
places traffic marked with a priority in the correct queue and processes that traffic according to its queue.
When you set the priority for a Port Channel, the physical interfaces assigned to the Port Channel are
configured with the same value. You cannot assign dot1p-priority command to individual interfaces in
a Port Channel.
Quality of Service (QoS) | 813
rate limit e Limit the outgoing traffic rate on the selected interface.
Syntax rate limit [ kbps ] committed-rate [ burst-KB ] [ peak [ kbps ] peak-rate [ burst-KB ]] [ vlan vlan-id ]
Parameters kbps committed-rate burst-KB peak peak-rate vlan vlan-id
Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On the
E-Series, Dell Networking recommends using a value greater than or equal to 512 as lower values does not yield accurate results.The default granularity is Megabits per second (Mbps).
Range: 0-10000000
Enter the bandwidth in Mbps
Range: 0 to 10000
(OPTIONAL) Enter the burst size in KB.
Range: 16 to 200000
Default: 50
(OPTIONAL) Enter the keyword peak followed by a number to specify the peak rate in Mbps.
Range: 0 to 10000
(OPTIONAL) Enter the keyword vlan followed by a VLAN ID to limit traffic to those specific VLANs.
Range: 1 to 4094
Defaults
Command Modes
Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.
INTERFACE
Command
History
Version 8.2.1.0
Version 7.7.1.0
Added kbps option on E-Series.
Removed from C-Series
Version 7.5.1.0
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Usage
Information
Note: Per Port rate limit and rate police is supported for Layer 2 tagged and untagged switched traffic and for Layer 3 traffic. Per VLAN rate limit and rate police is supported on only tagged ports with Layer 2 switched traffic.
On one interface, you can configure the
command for a VLAN or you can configure the
command for the interface. For each physical interface, you
can configure six rate limit commands specifying different VLANS.
If you receive the error message:
%Error: Specified VLANs overlap with existing config. after configuring VLANs in the
interfaces and re-apply the
configuration.
814 | Quality of Service (QoS)
rate police c e s Police the incoming traffic rate on the selected interface.
Syntax rate police [ kbps ] committed-rate [ burst-KB ] [ peak [ kbps ] peak-rate [ burst-KB ]] [ vlan vlan-id ]
Parameters kbps committed-rate burst-KB peak peak-rate vlan vlan-id
Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On
C-Series and S-Series make the following value a multiple of 64. On the E-Series,
Dell Networking recommends using a value greater than or equal to 512 as lower values does not yield accurate results. The default granularity is Megabits per second (Mbps).
Range: 0-10000000
Enter a number as the bandwidth in Mbps.
Range: 0 to 10000
(OPTIONAL) Enter a number as the burst size in KB.
Range: 16 to 200000
Default: 50
(OPTIONAL) Enter the keyword peak followed by a number to specify the peak rate in Mbps.
Range: 0 to 10000
(OPTIONAL) Enter the keyword vlan followed by a VLAN ID to police traffic to those specific VLANs.
Range: 1 to 4094
Defaults
Command Mode
Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.
INTERFACE
Command
History
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Added kbps option on C-Series, E-Series, and Series.
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Usage
Information
Note: Per Port rate limit and rate police is supported for Layer 2 tagged and untagged switched traffic and for Layer 3 traffic. Per VLAN rate limit and rate police is supported on only tagged ports with Layer 2 switched traffic.
C-Series and S-Series
On one interface, you can configure the
rate police command for a VLAN or you can configure the rate police
command for an interface. For each physical interface, you can configure three
commands specifying different VLANS.
Quality of Service (QoS) | 815
Related
Commands
E-Series
On one interface, you can configure the rate limit or
rate police command for a VLAN or you can
configure the rate limit or the
command for the interface.
For each physical interface, you can configure six rate police commands specifying different VLANS.
After configuring VLANs in the rate police
command, if this error message appears:
%Error: Specified VLANs overlap with existing config .
Check to see if the same VLANs are used with the rate limit command on other interfaces. To clear the problem, remove the rate limit configuration(s), and re-configure the
rate police command. After the rate police
command is configured, return to the other interfaces and re-apply the rate limit configuration.
Police traffic output as part of the designated policy. rate shape c e s Shape the traffic output on the selected interface.
Syntax rate shape [ kbps ] rate [ burst-KB ]
Parameters kbps rate burst-KB
Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On
C-Series and S-Series make the following value a multiple of 64. The default granularity is Megabits per second (Mbps).
Range: 0-10000000
Enter the outgoing rate in multiples of 10 Mbps.
Range: 0 to 10000
(OPTIONAL) Enter a number as the burst size in KB.
Range: 0 to 10000
Default: 10
Defaults
Command Modes
Command
History
Granularity for rate is Mbps unless the kbps option is used.
INTERFACE
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Added kbps option on C-Series, E-Series, and Series.
Version 7.6.1.0
Introduced on S-Series and on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Related
Commands
Shape traffic output as part of the designated policy.
816 | Quality of Service (QoS)
service-class dynamic dot1p c e s Honor all 802.1p markings on incoming switched traffic on an interface (from INTERFACE mode) or on all interfaces (from CONFIGURATION mode). A CONFIGURATION mode entry supercedes
INTERFACE mode entries.
Syntax service-class dynamic dot1p
To return to the default setting, enter no service-class dynamic dot1p .
Defaults All dot1p traffic is mapped to Queue 0 unless service-class dynamic dot1p is enabled. Then the default mapping is as follows:
Table 31-1.
Default dot1p to Queue Mapping dot1p
6
7
4
5
2
3
0
1
E-Series
Queue ID
6
7
4
5
1
3
2
0
C-Series
Queue ID
3
3
2
2
0
1
1
0
S-Series
Queue ID
3
3
2
2
0
1
1
0
Command Modes INTERFACE
CONFIGURATION (C-Series and S-Series only)
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Available globally on the C-Series and S-Series so that the configuration applies to all ports.
Introduced on S-Series
Introduced on C-Series
Expanded command to permit configuration on port channels
Introduced on E-Series
Enter this command to honor all incoming 802.1p markings, on incoming switched traffic, on the interface. By default, this facility is not enabled (that is, the 802.1p markings on incoming traffic are not honored).
This command can be applied on both physical interfaces and port channels. When you set the service-class dynamic for a port channel, the physical interfaces assigned to the port channel are automatically configured; you cannot assign the service-class dynamic command to individual interfaces in a port channel.
Quality of Service (QoS) | 817
On the C-Series and S-Series all traffic is by default mapped to the same queue, Queue 0. If you honor dot1p on ingress, then you can create service classes based the queueing strategy using the command service-class dynamic dot1p from INTERFACE mode. You may apply this queuing strategy to all interfaces by entering this command from CONFIGURATION mode.
• All dot1p traffic is mapped to Queue 0 unless service-class dynamic dot1p is enabled on an interface or globally.
• Layer 2 or Layer 3 service policies supercede dot1p service classes.
service-class bandwidth-weight c s Specify a minimum bandwidth for queues
Syntax service-class bandwidth-weight queue0 number queue1 number queue2 number queue3 number
Parameters number Enter the bandwidth-weight. The value must be a power of 2.
Range 1-1024.
Defaults
Command Modes
Command
History
None
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Introduced on C-Series and S-Series.
Guarantee a minimum bandwidth to different queues globally using the command service-class bandwidth-weight from CONFIGURATION mode. The command is applied in the same way as the bandwidth-weight command in an output QoS policy. The bandwidth-weight command in
QOS-POLICY-OUT mode supercedes the service-class bandwidth-weight command .
show interfaces rate e Display information of either rate limiting or rate policing on the interface.
Syntax show interfaces [ interface ] rate [ limit | police ]
Parameters interface limit police
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword limit to view the outgoing traffic rate.
(OPTIONAL) Enter the keyword police to view the incoming traffic rate.
818 | Quality of Service (QoS)
Command Mode EXEC
EXEC Privilege
Command
History
Example pre-Version 6.1.1.1
Introduced on E-Series
Figure 31-1.
show interfaces rate limit Command Example
FTOS#show interfaces gigabitEthernet 1/1 rate limit
Rate limit 300 (50) peak 800 (50)
Traffic Monitor 0: normal 300 (50) peak 800 (50)
Out of profile yellow 23386960 red 320605113
Traffic Monitor 1: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 2: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 3: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 4: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 5: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 6: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 7: normal NA peak NA
Out of profile yellow 0 red 0
Total: yellow 23386960 red 320605113
Table 31-2.
show interfaces Command Example Fields
Field
Rate limit peak
Traffic monitor 0
Normal peak
Out of profile Yellow
Out of profile Red
Traffic monitor 1
Traffic monitor 2
Traffic monitor 3
Traffic monitor 4
Traffic monitor 5
Traffic monitor 6
Traffic monitor 7
Total: yellow
Total: red
Description
Committed rate (Mbs) and burst size (KB) of the committed rate
Peak rate (Mbs) and burst size (KB) of the peak rate
Traffic coming to class 0
Committed rate (Mbs) and burst size (KB) of the committed rate
Peak rate (Mbs) and burst size (KB) of the peak rate
Number of packets that have exceeded the configured committed rate
Number of packets that have exceeded the configured peak rate
Traffic coming to class 1
Traffic coming to class 2
Traffic coming to class 3
Traffic coming to class 4
Traffic coming to class 5
Traffic coming to class 6
Traffic coming to class 7
Total number of packets that have exceeded the configured committed rate
Total number of packets that have exceeded the configured peak rate
Quality of Service (QoS) | 819
Figure 31-2.
show interfaces rate police Command Example
FTOS#show interfaces gigabitEthernet 1/2 rate police
Rate police 300 (50) peak 800 (50)
Traffic Monitor 0: normal 300 (50) peak 800 (50)
Out of profile yellow 23386960 red 320605113
Traffic Monitor 1: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 2: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 3: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 4: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 5: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 6: normal NA peak NA
Out of profile yellow 0 red 0
Traffic Monitor 7: normal NA peak NA
Out of profile yellow 0 red 0
Total: yellow 23386960 red 320605113
Table 31-3.
show interfaces police Command Example Fields
Field
Rate police peak
Traffic monitor 0
Normal peak
Out of profile Yellow
Out of profile Red
Traffic monitor 1
Traffic monitor 2
Traffic monitor 3
Traffic monitor 4
Traffic monitor 5
Traffic monitor 6
Traffic monitor 7
Total: yellow
Total: red
Description
Committed rate (Mbs) and burst size (KB) of the committed rate
Peak rate (Mbs) and burst size (KB) of the peak rate
Traffic coming to class 0
Committed rate (Mbs) and burst size (KB) of the committed rate
Peak rate (Mbs) and burst size (KB) of the peak rate
Number of packets that have exceeded the configured committed rate
Number of packets that have exceeded the configured peak rate
Traffic coming to class 1
Traffic coming to class 2
Traffic coming to class 3
Traffic coming to class 4
Traffic coming to class 5
Traffic coming to class 6
Traffic coming to class 7
Total number of packets that have exceeded the configured committed rate
Total number of packets that have exceeded the configured peak rate strict-priority queue c e s Configure a unicast queue as a strict-priority (SP) queue.
Syntax strict-priority queue unicast queue number
Parameters unicast queue number Enter the keywords unicast queue followed by the queue number.
C-Series and S-Series Range: 1 to 3
E-Series Range: 1 to 7
820 | Quality of Service (QoS)
Defaults
Command Modes
Command
History
No default behavior or value
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Usage
Information
Once a unicast queue is configured as strict-priority, that particular queue, on the entire chassis, is treated as strict-priority queue. Traffic for a strict priority is scheduled before any other queues are serviced. For example, if you send 100% line rate traffic over the SP queue, it will starve all other queues on the ports on which this traffic is flowing.
Policy-Based QoS Commands
Policy-based traffic classification is handled with class maps. These maps classify unicast traffic into one of eight classes in E-Series and one of four classes in C-Series and S-Series. FTOS enables you to match multiple class maps and specify multiple match criteria. Policy-based QoS is not supported on logical interfaces, such as port-channels, VLANS, or loopbacks. The commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
queue backplane ignore-backpressure
•
•
•
•
•
•
•
•
Quality of Service (QoS) | 821
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
bandwidth-percentage
Assign a percentage of weight to class/queue. e
Syntax
Parameters
Defaults
Command Modes
Command
History bandwidth-percentage percentage
To remove the bandwidth percentage, use the no bandwidth-percentage command.
percentage Enter the percentage assignment of weight to class/queue.
Range: 0 to 100% (granularity 1%)
No default behavior or values
CONFIGURATION (conf-qos-policy-out)
Version 8.3.3.1
Version 6.2.1.1
Introduced on S60
Introduced on E-Series
Usage
Information
Related
Commands
The unit of bandwidth percentage is 1%. A bandwidth percentage of 0 is allowed and will disable the scheduling of that class. If the sum of the bandwidth percentages given to all eight classes exceeds
100%, the bandwidth percentage will automatically scale down to 100%.
Create a QoS output policy.
822 | Quality of Service (QoS)
bandwidth-weight c s Assign a priority weight to a queue.
Syntax bandwidth-weight weight
To remove the bandwidth weight, use the no bandwidth-weight command.
Parameters weight Enter the weight assignment to queue.
Range: 1 to 1024 (in increments of powers of 2: 2, 4, 8, 16, 32, 64, 128, 256,
512, or 1024)
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION (conf-qos-policy-out)
Usage
Information
Related
Commands
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
This command is not supported on the S60.
This command provides a minimum bandwidth guarantee to traffic flows in a particular queue. The minimum bandwidth is provided by scheduling packets from that queue a certain number of times relative to scheduling packets from the other queues using the Deficit Round Robin method.
Create a QoS output policy.
class-map c e s Create/access a class map. Class maps differentiate traffic so that you can apply separate quality of service policies to each class.
Syntax class-map { match-all | match-any } class-map-name [ layer2 ]
Parameters match-all match-any class-map-name layer2
Determines how packets are evaluated when multiple match criteria exist.
Enter the keyword match-all to determine that the packets must meet all the match criteria in order to be considered a member of the class.
Determines how packets are evaluated when multiple match criteria exist.
Enter the keyword match-any to determine that the packets must meet at least one of the match criteria in order to be considered a member of the class.
Enter a name of the class for the class map in a character format (32 character maximum).
Enter the keyword layer2 to specify a Layer 2 Class Map.
Default: Layer 3
Defaults
Command Modes
Layer 3
CONFIGURATION
Quality of Service (QoS) | 823
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Class-map names can be 32 characters. layer2 available on C-Series and S-Series.
Introduced on S-Series
Introduced on C-Series
E-Series Only: Expanded to add support for Layer 2
Packets arriving at the input interface are checked against the match criteria, configured using this command, to determine if the packet belongs to that class. This command accesses the CLASS-MAP mode, where the configuration commands include match ip and match mac options.
Related
Commands
match mac dot1p match mac vlan
Configure an extended IP ACL.
Configure a standard IP ACL.
Configure the match criteria based on the access control list (ACL)
Identify IP precedence values as match criteria
Configure the match criteria based on the DSCP value
Configure a match criterion for a class map, based on the contents of the designated MAC ACL.
Configure a match criterion for a class map, based on a dot1p value.
Configure a match criterion for a class map based on VLAN ID.
Assign a class map and QoS policy to different queues.
View the current class map information.
clear qos statistics c e s Clears Matched Packets, Matched Bytes, and Dropped Packets. For TeraScale, clears Matched Packets,
Matched Bytes, Queued Packets, Queued Bytes, and Dropped Packets.
Syntax clear qos statistics interface-name .
Parameters interface-name Enter one of the following keywords:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
824 | Quality of Service (QoS)
Usage
Information
Related
Commands
E-Series Only Behavior
If a Policy QoS is applied on an interface when clear qos statistics is issued, it will clear the egress counters in show queue statistics and vice versa. This behavior is due to the values being read from the same hardware registers.
The clear qos statistics command clears both the queued and matched byte and packet counters if the queued counters incremented based on classification of packets to the queues because of policy-based QoS. If the queued counters were incremented because of some other reason and do not reflect a matching QoS entry in CAM, then this command clears the matched byte and packet counters only.
Display qos statistics.
match ip access-group c e s Configure match criteria for a class map, based on the access control list (ACL).
Syntax match ip access-group access-group-name [ set-ip-dscp value ]
To remove ACL match criteria from a class map, enter no match ip access-group access-group-name [ set-ip-dscp value ] command.
Parameters access-group-name set-ip-dscp value
Enter the ACL name whose contents are used as the match criteria in determining if packets belong to the class specified by class-map .
(OPTIONAL) Enter the keyword set-ip-dscp followed by the IP DSCP value. The matched traffic will be marked with the DSCP value.
Range: 0 to 63
Defaults
Command Modes
No default behavior or values
CLASS-MAP CONFIGURATION (config-class-map)
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Added DSCP Marking option support on S-Series
Introduced on S-Series
Introduced on C-Series
Added support for DSCP Marking option
Introduced on E-Series
Usage
Information
Related
Commands
You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria. For class-map match-any , a maximum of five ACL match criteria are allowed. For class-map match-all , only one ACL match criteria is allowed.
Identify the class map.
Quality of Service (QoS) | 825
description c e s Add a description to the selected policy map or QOS policy.
Syntax description { description }
Parameters
To remove the description, use the no description { description } command.
description Enter a description to identify the policies (80 characters maximum).
Defaults
Command Modes
No default behavior or values
CONFIGURATION (policy-map-input and policy-map-output; conf-qos-policy-in and conf-qos-policy-out; wred)
Command
History
Version 8.3.3.1
pre-Version 7.7.1.0
Introduced on S60
Introduced
Related
Commands
policy-map-output qos-policy-input
Create an input policy map.
Create an output policy map.
Create an input QOS-policy on the router.
Create an output QOS-policy on the router.
Create a WRED profile.
match ip dscp c e s Use a DSCP (Differentiated Services Code Point) value as a match criteria.
Syntax match ip dscp dscp-list [[ multicast ] set-ip-dscp value ]
To remove a DSCP value as a match criteria, enter no match ip dscp dscp-list [[ multicast ] set-ip-dscp value ] command.
Parameters dscp-list multicast set-ip-dscp value
Enter the IP DSCP value(s) that is to be the match criteria. Separate values by commas—no spaces ( 1,2,3 ) or indicate a list of values separated by a hyphen
(1-3).
Range: 0 to 63
(OPTIONAL) Enter the keyword multicast to match against multicast traffic.
Note : This option is not supported on C-Series or S-Series.
(OPTIONAL) Enter the keyword set-ip-dscp followed by the IP DSCP value.
The matched traffic will be marked with the DSCP value.
Range: 0 to 63
Note : This option is not supported on S-Series.
Defaults
Command Modes
No default behavior or values
CLASS-MAP CONFIGURATION (config-class-map)
826 | Quality of Service (QoS)
Command
History
Usage
Information
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Added keyword multicast .
Added DSCP Marking option support on S-Series
Introduced on S-Series
Introduced on C-Series
Added support for DSCP Marking option
Introduced on E-Series
You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria.
The match ip dscp and match ip precedence commands are mutually exclusive.
Up to 64 IP DSCP values can be matched in one match statement. For example, to indicate IP DCSP values 0 1 2 3 4 5 6 7, enter either the command match ip dscp 0,1,2,3,4,5,6,7 or match ip dscp
0-7.
Note: Only one of the IP DSCP values must be a successful match criterion, not all of the specified IP DSCP values need to match.
Related
Commands
Identify the class map.
match ip precedence c e s Use IP precedence values as a match criteria.
Syntax match ip precedence ipprecedence-list [[ multicast ] set-ip-dscp value ]
To remove IP precedence as a match criteria, enter no match ip precedence ipprecedence-list
[[ multicast ] set-ip-dscp value ] command.
Parameters ip-precedence-list multicast set-ip-dscp value
Enter the IP precedence value(s) as the match criteria. Separate values by commas—no spaces ( 1,2,3 ) or indicate a list of values separated by a hyphen (1-3).
Range: 0 to 7
(OPTIONAL) Enter the keyword multicast to match against multicast traffic.
Note : This option is not supported on C-Series or S-Series.
(OPTIONAL) Enter the keyword set-ip-dscp followed by the IP DSCP value. The matched traffic will be marked with the DSCP value.
Range: 0 to 63
Note : This option is not supported on S-Series.
Defaults
Command Modes
No default behavior or values
CLASS-MAP CONFIGURATION (conf-class-map)
Quality of Service (QoS) | 827
Command
History
Usage
Information
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Added keyword multicast .
Added DSCP marking option support for S-Series
Introduced on S-Series
Introduced on C-Series
Added support for DSCP Marking option
Introduced on E-Series
You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria.
The match ip precedence command and the match ip dscp command are mutually exclusive.
Up to eight precedence values can be matched in one match statement. For example, to indicate the IP precedence values 0 1 2 3 enter either the command match ip precedence 0-3 or match ip precedence 0,1,2,3 .
Related
Commands
Note: Only one of the IP precedence values must be a successful match criterion, not all of the specified IP precedence values need to match.
Identify the class map.
match mac access-group c e s Configure a match criterion for a class map, based on the contents of the designated MAC ACL.
Syntax
Parameters match mac access-group { mac-acl-name } mac-acl-name Enter a MAC ACL name. Its contents will be used as the match criteria in the class map.
Defaults
Command Modes
Command
History
No default values or behavior
CLASS-MAP
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Available on the C-Series and S-Series.
Added support for DSCP Marking option
Introduced
You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria.
Identify the class map.
828 | Quality of Service (QoS)
match mac dot1p c e s Configure a match criterion for a class map, based on a dot1p value.
Syntax match mac dot1p { dot1p-list }
Parameters dot1p-list Enter a dot1p value.
Range: 0–7
Defaults
Command Modes
Command
History
No default values or behavior
CLASS-MAP
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Available on the C-Series and S-Series.
Added support for DSCP Marking option
Introduced
You must enter the class-map command in order to access this command. Once the class map is identified, you can configure the match criteria.
Identify the class map.
match mac vlan c e s Configure a match criterion for a class map based on VLAN ID.
Syntax match mac vlan number
Parameters number Enter the VLAN ID.
Range: 1–4094
Defaults
Command Modes
Command
History
None
CLASS-MAP
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.0.1
Introduced on S60
Introduced
You must first enter the class-map command in order to access this command. You can match against only one VLAN ID.
Create/access a class map.
Quality of Service (QoS) | 829
policy-aggregate c e s Allow an aggregate method of configuring per-port QoS via policy maps. An aggregate QoS policy is part of the policy map (input/output) applied on an interface.
Syntax policy-aggregate qos-policy-name
To remove a policy aggregate configuration, use no policy-aggregate qos-policy-name command.
Parameters qos-policy-name Enter the name of the policy map in character format (32 characters maximum)
Defaults
Command Modes
No default behavior or values
CONFIGURATION (policy-map-input and policy-map-output)
This command is supported on C-Series, S-Series, and the S60 under policy-map-output only.
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on S60
Policy name character limit increased from 16 to 32.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
C-Series and S-Series
Aggregate input/output QoS policy applies to all the port ingoing/outgoing traffic. Aggregate input/ output QoS policy can co-exist with per queue input/output QoS policies.
1.
If only aggregate input QoS policy exists, input traffic conditioning configurations (rate-police) will apply. Any marking configurations in aggregate input QoS policy will be ignored.
2.
If aggregate input QoS policy and per class input QoS policy co-exist, then aggregate input QoS policy will preempt per class input QoS policy on input traffic conditioning (rate-police). In other words, if rate police configuration exists in aggregate QoS policy, the rate police configurations in per class QoS are ignored. Marking configurations in per class input QoS policy still apply to each queue.
E-Series
Aggregate input/output QoS policy applies to all the port ingoing/outgoing traffic. Aggregate input/ output QoS policy can co-exist with per queue input/output QoS policies.
1.
If only an aggregate input QoS policy exists, input traffic conditioning configurations (rate-police) will apply. Any marking configurations in the aggregate input QoS policy will be ignored.
2.
If an aggregate input QoS policy and a per-class input QoS policy co-exist, then the aggregate input QoS policy will preempt the per-class input QoS policy on input traffic conditioning
(rate-police). In other words, if a rate police configuration exists in the aggregate QoS policy, the rate police configurations in the per-class QoS are ignored. Marking configurations in the per-class input QoS policy still apply to each queue.
3.
If only an aggregate output QoS policy exists, egress traffic conditioning configurations (rate-limit and rate-shape) in the aggregate output QoS policy will apply. Scheduling and queuing configurations in the aggregate output QoS policy (if existing) are ignored. Each queue will use default scheduling and queuing configuration (Weighted Random Early Detection (WRED) and Bandwidth).
830 | Quality of Service (QoS)
4.
If the aggregate output QoS policy and per-queue output QoS policy co-exist, the aggregate output
QoS policy will preempt a per-queue output QoS policy on egress traffic conditioning (rate-limit).
In other words, if a rate limit configuration exists in the aggregate output QoS policy, the rate limit configurations in per-queue output QoS policies are ignored. Scheduling and queuing configurations (WRED and Bandwidth) in the per-queue output QoS policy still apply to each queue.
Related
Commands
Create an input policy map
Create an output policy map (E-Series Only) policy-map-input c e s Create an input policy map.
Syntax policy-map-input policy-map-name [ layer2 ]
To remove an input policy map, use the no policy-map-input policy-map-name [ layer2 ] command.
Parameters policy-map-name layer2
Enter the name for the policy map in character format (32 characters maximum).
(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map.
Default: Layer 3
Defaults
Command Modes
Command
History
Layer 3
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.1
Introduced on S60
Policy name character limit increased from 16 to 32.
Introduced on S-Series
Introduced on C-Series
Expanded to add support for Layer 2
Introduced on E-Series
Input policy map is used to classify incoming traffic to different flows using class-map, QoS policy, or simply using incoming packets DSCP. This command enables policy-map-input configuration mode
(conf-policy-map-in).
Assign a class map and QoS policy to different queues.
Allow an aggregate method of configuring per-port QoS via policy maps.
Apply an input policy map to the selected interface.
Quality of Service (QoS) | 831
policy-map-output c e s Create an output policy map.
Syntax policy-map-output policy-map-name
To remove a policy map, use the no policy-map-output policy-map-name command.
Parameters policy-map-name Enter the name for the policy map in character format (16 characters maximum).
Defaults
Command Modes
No default behavior or values
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
pre-Version 6.1.1.1
Introduced on S60
Policy name character limit increased from 16 to 32.
Introduced on C-Series and S-Series
Introduced on E-Series
Usage
Information
Related
Commands
Output policy map is used to assign traffic to different flows using QoS policy. This command enables the policy-map-output configuration mode (conf-policy-map-out).
Assign a class map and QoS policy to different queues.
Allow an aggregate method of configuring per-port QoS via policy maps.
Apply an output policy map to the selected interface.
qos-policy-input c e s Create a QoS input policy on the router.
Syntax qos-policy-input qos-policy-name [ layer2 ]
To remove an existing input QoS policy from the router, use no qos-policy-input qos-policy-name
[ layer2 ] command.
Parameters qos-policy-name layer2
Enter your input QoS policy name in character format (32 character maximum).
(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map.
Default: Layer 3
Defaults
Command Modes
Layer 3
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Introduced on S60
Policy name character limit increased from 16 to 32.
Introduced on S-Series
832 | Quality of Service (QoS)
Usage
Information
Version 7.5.1.0
Version 7.4.1.0
Introduced on C-Series
E-Series Only: Expanded to add support for Layer 2
Use this command to specify the name of the input QoS policy. Once input policy is specified, rate-police can be defined. This command enables the qos-policy-input configuration mode—
(conf-qos-policy-in).
When changing a “service-queue” configuration in a QoS policy map, all QoS rules are deleted and re-added automatically to ensure that the order of the rules is maintained. As a result, the Matched
Packets value shown in the “show qos statistics” command is reset.
Related
Commands
Note: On ExaScale, FTOS cannot classify IGMP packets on a Layer 2 interface using Layer 3 policy map. The packets always take the default queue, Queue 0, and cannot be rate-policed.
Incoming traffic policing function qos-policy-output c e s Create a QoS output policy.
Syntax qos-policy-output qos-policy-name
To remove an existing output QoS policy, use no qos-policy-output qos-policy-name command.
Parameters qos-policy-name Enter your output QoS policy name in character format (32 character maximum).
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Introduced on S60
Policy name character limit increased from 16 to 32.
Introduced on C-Series and S-Series pre-Version 6.1.1.1
Introduced on E-Series
Use this command to specify the name of the output QoS policy. Once output policy is specified, rate-limit, bandwidth-percentage, and WRED can be defined. This command enables the qos-policy-output configuration mode—(conf-qos-policy-out).
When changing a “service-queue” configuration in a QoS policy map, all QoS rules are deleted and re-added automatically to ensure that the order of the rules is maintained. As a result, the Matched
Packets value shown in the “show qos statistics” command is reset.
Outgoing traffic rate-limit functionality
Assign weight to class/queue percentage
Assign a priority weight to a queue.
Assign yellow or green drop precedence
Quality of Service (QoS) | 833
queue backplane ignore-backpressure e Reduce egress pressure by ignoring the ingress backpressure
Syntax queue backplane ignore-backpressure
To return to the default, use the no queue backplane ignore-backpressure command.
Defaults No default behavior or values
Command Modes CONFIGURATION
Command
History
Version 7.7.1.0
Introduced on E-Series queue egress e Assign a WRED Curve to all eight egress Multicast queues or designate the percentage for the
Multicast bandwidth queue.
Syntax queue egress multicast linecard { slot number port-set number | all } [ wred-profile name | multicast-bandwidth percentage ]
To return to the default, use the no queue egress multicast linecard { slot number port-set number | all } [ wred-profile name | multicast-bandwidth percentage ] command.
Parameters linecard number port-set number all wred-profile name multicast-bandwidth percentage
Enter the keyword linecard followed by the line card slot number.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
Enter the keyword port-set followed by the line card’s port pipe.
Range: 0 or 1
Enter the keyword all to apply to all line cards.
(OPTIONAL) Enter the keyword wred-profile followed by your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names.
Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g
(OPTIONAL) Enter the keyword multicast-bandwidth followed by the bandwidth percentage.
Range: 0 to 100%
Defaults
Command Modes
No default behavior or values
CONFIGURATION
Command
History
Version 7.5.1.0
Version 7.4.1.0 and 6.5.3.0
Added support for multicast-bandwidth
Introduced on E-Series
Usage
Information
This command does not uniquely identify a queue, but rather identifies only a set of queues. The
WRED curve is applied to all eight egress Multicast queues.
834 | Quality of Service (QoS)
Important Points to Remember—multicast-bandwidth option
Related
Commands
• A unique Multicast Weighted Fair Queuing (WFQ) setting can be applied only on a per port-pipe basis. The minimum percentage of the multicast bandwidth assigned to any of the ports in the port-pipe will take effect for the entire port-pipe.
• If the percentage of multicast bandwidth is 0, control traffic going through multicast queues are dropped.
• The no form of the command without multicast-bandwidth and wred-profile , will remove both the wred-profile and multicast-bandwidth configuration.
• On 10 Gigabit ports only, the multicast bandwidth option will work only if the total unicast bandwidth is more than the multicast bandwidth.
• If strict priority is applied along with multicast-bandwidth, the effect of strict priority is on all ports where unicast and multicast bandwidth are applied.
• When multicast bandwidth is assigned along with unicast bandwidth, first multicast bandwidth will be reserved for that port, then the remaining unicast bandwidth configured is adjusted according to the bandwidth available after reserving for multicast bandwidth.
Display the egress queue statistics queue ingress e Assign a WRED Curve to all eight ingress Multicast queues or designate the percentage for the
Multicast bandwidth queue.
Syntax queue ingress multicast {linecard slot number port-set number | all } [ wred-profile name ]
To return to the default, use the no queue ingress multicast {linecard slot number port-set number | all } [ wred-profile name ] command.
Parameters linecard number port-set number all wred-profile name
Enter the keyword linecard followed by the line card slot number.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
Enter the keyword port-set followed by the line card’s port pipe.
Range: 0 or 1
Enter the keyword all to apply to all line cards.
(OPTIONAL) Enter the keyword wred-profile followed by your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names.
Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g
Defaults
Command Modes
No default behavior or values
CONFIGURATION
Command
History
Version 7.4.1.0 and 6.5.3.0
Introduced on E-Series
Quality of Service (QoS) | 835
Usage
Information
This command does not uniquely identify a queue, but rather identifies only a set of queues. The
WRED Curve is applied to all eight ingress Multicast queues.
Note: The multicast-bandwidth option is not supported on queue ingress. If you attempt to use the multicast-bandwidth option, the following reject error message is generated:
% Error:Bandwidth-percent is not allowed for ingress multicast
Related
Commands
Display the ingress queue statistics rate-limit e Specify the rate-limit functionality on outgoing traffic as part of the selected policy.
Syntax rate-limit [ kbps ] committed-rate [ burst-KB ] [ peak [ kbps ] peak-rate [ burst-KB ]]
Parameters kbps committed-rate burst-KB peak peak-rate
Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On the E-Series, Dell Networking recommends using a value greater than or equal to 512 as lower values does not yield accurate results. The default granularity is Megabits per second (Mbps).
Range: 0-10000000
Enter the committed rate in Mbps.
Range: 0 to 10000 Mbps
(OPTIONAL) Enter the burst size in KB.
Range: 16 to 200000 KB
Default: 50 KB
(OPTIONAL) Enter the keyword peak followed by the peak rate in Mbps.
Range: 0 to 10000 Mbps
Default: Same as designated for committed-rate
Defaults Burst size is 50 KB. peak-rate is by default the same as committed-rate . Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.
QOS-POLICY-OUT Command Modes
Command
History
Version 8.2.1.0
Version 7.7.1.0
Added kbps option on E-Series.
Removed from C-Series
Version 7.5.1.0
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Related
Commands
Specify rate-limit functionality on the selected interface.
Create a QoS output policy.
836 | Quality of Service (QoS)
rate-police c e s Specify the policing functionality on incoming traffic.
Syntax rate-police [ kbps ] committed-rate [ burst-KB ] [ peak [ kbps ] peak-rate [ burst-KB ]]
Parameters kbps committed-rate burst-KB peak peak-rate
Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On
C-Series and S-Series make the following value a multiple of 64. On the E-Series,
Dell Networking recommends using a value greater than or equal to 512 as lower values does not yield accurate results. The default granularity is Megabits per second (Mbps).
Range: 0-10000000
Enter the committed rate in Mbps.
Range: 0 to 10000 Mbps
(OPTIONAL) Enter the burst size in KB.
Range: 16 to 200000 KB
Default: 50 KB
(OPTIONAL) Enter the keyword peak followed by the peak rate in Mbps.
Range: 0 to 10000 Mbps
Default: Same as designated for committed-rate
Defaults Burst size is 50 KB. peak-rate is by default the same as committed-rate . Granularity for committed-rate and peak-rate is Mbps unless the kbps option is used.
QOS-POLICY-IN Command Modes
Command
History
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Added kbps option on C-Series, E-Series, and Series.
Version 7.6.1.0
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Related
Commands
Specify traffic policing on the selected interface.
Create a QoS output policy.
rate-shape c e s Shape traffic output as part of the designated policy.
Syntax rate-shape [ kbps ] rate [ burst-KB ]
Parameters kbps Enter this keyword to specify the rate limit in Kilobits per second (Kbps). On
C-Series and S-Series make the following value a multiple of 64. The default granularity is Megabits per second (Mbps).
Range: 0-10000000
Quality of Service (QoS) | 837
Defaults
Command Modes
Command
History rate burst-KB
Enter the outgoing rate in multiples of 10 Mbps.
Range: 0 to 10000
(OPTIONAL) Enter a number as the burst size in KB.
Range: 0 to 10000
Default: 10
Burst size is 10 KB. Granularity for rate is Mbps unless the kbps option is used.
QOS-POLICY-OUT
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Added kbps option on C-Series, E-Series, and Series.
Version 7.6.1.0
Version 7.5.1.0
Introduced on S-Series
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Usage
Information
Related
Commands rate-shape can be applied only as an aggregate policy. If it is applied as a class-based policy, then rate-shape will not take effect.
Shape the traffic output of the selected interface.
Create a QoS output policy.
service-policy input c e s Apply an input policy map to the selected interface.
Syntax service-policy input policy-map-name [ layer2 ]
To remove the input policy map from the interface, use the no service-policy input policy-map-name [ layer2 ] command.
Parameters policy-map-name layer2
Enter the name for the policy map in character format (16 characters maximum). You can identify an existing policy map or name one that does not yet exist.
(OPTIONAL) Enter the keyword layer2 to specify a Layer 2 Class Map.
Default: Layer 3
Defaults
Command Modes
Layer 3
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
E-Series Only: Expanded to add support for Layer 2
Introduced on E-Series
838 | Quality of Service (QoS)
Usage
Information
A single policy-map can be attached to one or more interfaces to specify the service-policy for those interfaces. A policy map attached to an interface can be modified.
Related
Commands
Note: The service-policy commands are not allowed on a port channel.
The service-policy input policy-map-name command and the service-class dynamic dot1p command are not allowed simultaneously on an interface. However, the service-policy input command (without the policy-map-name option) and the service-class dynamic dot1p command are allowed on an interface.
Create an input policy map.
service-policy output c e s Apply an output policy map to the selected interface.
Syntax service-policy output policy-map-name
To remove the output policy map from the interface, use the no service-policy output policy-map-name command.
Parameters policy-map-name Enter the name for the policy map in character format (16 characters maximum). You can identify an existing policy map or name one that does not yet exist.
Defaults
Command Modes
Command
History
No default behavior or values
INTERFACE
Usage
Information
Related
Commands
Version 8.3.3.1
Introduced on S60
Version 7.6.1.0
Introduced on C-Series and S-Series pre-Version 6.1.1.1
Introduced on E-Series
A single policy-map can be attached to one or more interfaces to specify the service-policy for those interfaces. A policy map attached to an interface can be modified.
Create an output policy map.
service-queue c e s Assign a class map and QoS policy to different queues.
Syntax service-queue queue-id [ class-map class-map-name ] [ qos-policy qos-policy-name ]
To remove the queue assignment, use the no service-queue queue-id [ class-map class-map-name ] [ qos-policy qos-policy-name ] command.
Quality of Service (QoS) | 839
Parameters queue-id class-map class-map-name qos-policy qos-policy-name
Enter the value used to identify a queue.
Range: 0 to 7 on E-Series (eight queues per interface), 0-3 on C-Series and
S-Series (four queues per interface; four queues are reserved for control traffic.)
(OPTIONAL) Enter the keyword class-map followed by the class map name assigned to the queue in character format (16 character maximum).
Note : This option is available under policy-map-input only.
(OPTIONAL) Enter the keyword qos-policy followed by the QoS policy name assigned to the queue in text format (16 characters maximum). This
specifies the input QoS policy assigned to the queue under policy-map-input
and output QoS policy under policy-map-output context.
No default behavior or values
CONFIGURATION (conf-policy-map-in and conf-policy-map-out)
Defaults
Command Modes
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Usage
Information
Related
Commands
There are eight (8) queues per interface on the E-Series and four (4) queues per interface on the
C-Series and S-Series. This command assigns a class map or QoS policy to different queues.
Identify the class map.
Apply an input policy map to the selected interface.
Apply an output policy map to the selected interface.
set c e s Mark outgoing traffic with a Differentiated Service Code Point (DSCP) or dot1p value.
Syntax
Parameters set { ip-dscp value | mac-dot1p value } ip-dscp value mac-dot1p value
(OPTIONAL) Enter the keyword ip-dscp followed by the IP DSCP value.
Range: 0 to 63
Enter the keyword mac-dot1p followed by the dot1p value.
Range: 0 to 7
On the C-Series and S-Series allowed values are:0,2,4,6
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION (conf-qos-policy-in)
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Introduced on S60 mac-dot1p available on the C-Series and S-Series
Introduced on S-Series
840 | Quality of Service (QoS)
Usage
Information
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.1
Introduced on C-Series
E-Series Only: Expanded to add support for mac-dot1p
Introduced on E-Series
C-Series and S-Series
Once the IP DSCP bit is set, other QoS services can then operate on the bit settings.
E-Series
Once the IP DSCP bit is set, other QoS services can then operate on the bit settings. WRED (Weighted
Random Early Detection) ensures that high-precedence traffic has lower loss rates than other traffic during times of congestion.
show cam layer2-qos e Display the Layer 2 QoS CAM entries.
Syntax
Parameters show cam layer2-qos {[ linecard number port-set number ] | [ interface interface ]} [ summary ] linecard number port-set interface number summary interface
Enter the keyword linecard followed by the line card slot number.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
Enter the keyword port-set followed by the line card’s port pipe.
Range: 0 or 1
Enter the keyword interface followed by one of the keywords below and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword summary to display only the total number of CAM entries.
Defaults
Command Modes
Command
History
No default behavior or values
EXEC
Version 7.4.1.0
Introduced on E-Series
Quality of Service (QoS) | 841
Example Figure 31-3.
show cam layer2-qos interface Command Output
FTOS#show cam layer2-qos interface gigabitethernet 2/0
Cam Port Dot1p Proto SrcMac SrcMask DstMac DstMask Dot1p DSCP Queue
Index Marking Marking
-------------------------------------------------------------------------------------------------------------------------
-------
01817 0 - 0 00:00:00:00:cc:cc 00:00:00:00:ff:ff 00:00:00:00:dd:dd 00:00:00:00:ff:ff - - 7
01818 0 - 0 00:00:00:00:00:c0 00:00:00:00:00:f0 00:00:00:00:00:d0 00:00:00:00:00:f0 - 45 5
01819 0 4 0 00:00:00:a0:00:00 00:00:00:ff:00:00 00:00:00:b0:00:00 00:00:00:ff:00:00 4 - 4
01820 0 - 0x2000 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:b0 ff:ff:ff:ff:ff:ff - - 1
02047 0 - 0 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 - - 0
FTOS#
Example Figure 31-4.
show cam layer2-qos linecard Command Output
FTOS#show cam layer2-qos linecard 2 port-set 0
Cam Port Dot1p Proto SrcMac SrcMask DstMac DstMask Dot1p DSCP Queue
Index Marking Marking
----------------------------------------------------------------------------------------------------------------------=--
01817 0 - 0 00:00:00:00:cc:cc 00:00:00:00:ff:ff 00:00:00:00:dd:dd 00:00:00:00:ff:ff - - 7
01818 0 - 0 00:00:00:00:00:c0 00:00:00:00:00:f0 00:00:00:00:00:d0 00:00:00:00:00:f0 - 45 5
01819 0 4 0 00:00:00:a0:00:00 00:00:00:ff:00:00 00:00:00:b0:00:00 00:00:00:ff:00:00 4 - 4
01820 0 - 0x2000 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:b0 ff:ff:ff:ff:ff:ff - - 1
02047 0 - 0 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 00:00:00:00:00:00 - - 0
FTOS# show cam layer3-qos e Display the Layer 3 QoS CAM entries.
Syntax
Parameters show cam layer3-qos {[ linecard number port-set number ] | [ interface interface ]} [ summary ] linecard number port-set interface number summary interface
Enter the keyword linecard followed by the line card slot number.
E-Series Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a
E300.
Enter the keyword port-set followed by the line card’s port pipe.
Range: 0 or 1
Enter the keyword interface followed by one of the keywords below and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword summary to display only the total number of CAM entries.
Defaults
Command Modes
No default behavior or values
EXEC
Command
History
Version 6.5.1.0
Introduced on E-Series
842 | Quality of Service (QoS)
Example Figure 31-5.
show cam layer3-qos linecard interface Command Output
FTOS#sh cam layer3-qos interface gigabitethernet 2/1
Cam Port Dscp Proto Tcp Src Dst SrcIp DstIp DSCP Queue
Index Flag Port Port Marking
--------------------------------------------------------------------------------------------
----
23488 1 0 0 0x0 0 0 0.0.0.0/0 0.0.0.0/0 - TRUST-DSCP
FTOS#
Example
In these figures outputs, note that:
• The entry TRUST-DSCP in the Queue column indicates that the trust diffserv is configured on the policy-map.
• A hyphen ( ) entry in the DSCP Marking column indicates that there is no DSCP marking.
• In the Proto column (Protocol), IP, ICMP, UDP, and TCP strings are displayed. For other protocols, the corresponding protocol number is displayed.
Figure 31-6.
show cam layer3-qos linecard port-set Command Output
FTOS#show cam layer3-qos linecard 13 port-set 0
Cam Port Dscp Proto Tcp Src Dst SrcIp DstIp DSCP Queue
Index Flag Port Port Marking
----------------------------------------------------------------------------------------
24511 1 0 TCP 0x5 2 5 1.0.0.1/24 2.0.0.2/24 - TRUST-DSCP
24512 1 0 UDP 0x2 2 5 8.0.0.8/24 8.0.0.8/24 23 3
FTOS#
Example Figure 31-7.
show cam layer3-qos linecard interface Command without Trust Output
FTOS#sh cam layer3-qos interface gigabitethernet 2/1
Cam Port Dscp Proto Tcp Src Dst SrcIp DstIp DSCP Queue
Index Flag Port Port Marking
-----------------------------------------------------------------------------------------
-------
23488 1 56 0 0x0 0 0 0.0.0.0/0 0.0.0.0/0 - 7
23489 1 48 0 0x0 0 0 0.0.0.0/0 0.0.0.0/0 - 6
23490 1 40 0 0x0 0 0 0.0.0.0/0 0.0.0.0/0 - 5
23491 1 0 IP 0x0 0 0 10.1.1.1/32 20.1.1.1/32 - 0
23492 1 0 IP 0x0 0 0 10.1.1.1/32 20.1.1.2/32 - 0
24511 1 0 0 0x0 0 0 0.0.0.0/0 0.0.0.0/0 - 0
FTOS#
Example Figure 31-8.
show cam layer3-qos summary Command Output
FTOS#show cam layer3-qos linecard 13 port-set 0 summary
Total number of CAM entries for Port-Set 0 is 100
FTOS#
Quality of Service (QoS) | 843
show qos class-map c e s View the current class map information.
Syntax show qos class-map [ class-name ]
Parameters class-name (Optional) Enter the name of a configured class map.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Figure 31-9.
show qos class-map Command Output
FTOS#show qos class-map
Class-map match-any CM
Match ip access-group ACL
Related
Commands
Identify the class map show qos policy-map c e s View the QoS policy map information.
Syntax show qos policy-map { summary [ interface ] | detail [ interface ]}
Parameters summary interface
To view a policy map interface summary, enter the keyword summary and optionally one of the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/ port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
844 | Quality of Service (QoS)
Defaults
Command Modes detail interface
To view a policy map interface in detail, enter the keyword detail and optionally one of the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/ port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example 1
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
E-Series only: Added Trust IPv6 diffserv
Introduced on E-Series
Figure 31-10.
show qos policy-map detail (IPv4) Command Output
FTOS#show qos policy-map detail gigabitethernet 0/0
Interface GigabitEthernet 4/1
Policy-map-input policy
Trust diffserv
Queue# Class-map-name Qos-policy-name
0 - q0
1
2
3
4
CM1
CM2
CM3
CM4 q1 q2 q3 q4
5
6
7
FTOS#
CM5
CM6
CM7 q5 q6 q7
Example 2 Figure 31-11.
show qos policy-map detail (IPv6) Command Output (E-Series only)
FTOS# show qos policy-map detail gigabitethernet 0/0
Interface GigabitEthernet 8/29
Policy-map-input pmap1
Trust ipv6-diffserv
Queue# Class-map-name Qos-policy-name
0 c0 q0
1 c1 q1
2 c2 q2
3 c3 q3
4 c4 q4
5 c5 -
6 c6 q6
7 c7 q7
FTOS#
Quality of Service (QoS) | 845
Example 3 Figure 31-12.
show qos policy-map summary (IPv4) Command Output
FTOS#show qos policy-map summary
Interface policy-map-input policy-map-output
Gi 4/1 PM1 -
Gi 4/2 PM2
FTOS#
PMOut show qos policy-map-input c e s View the input QoS policy map details.
Syntax show qos policy-map-input [ policy-map-name ] [ class class-map-name ] [ qos-policy-input qos-policy-name ]
Parameters policy-map-name class class-map-name qos-policy-input qos-policy-name
Enter the policy map name.
Enter the keyword class followed by the class map name.
Enter the keyword qos-policy-input followed by the QoS policy name.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example 1
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
E-Series Only: Added Trust IPv6 diffserv
Introduced on E-Series
Figure 31-13.
show qos policy-map-input (IPv4) Command Output
FTOS#show qos policy-map-input
Policy-map-input PolicyMapInput
Aggregate Qos-policy-name AggPolicyIn
Queue# Class-map-name Qos-policy-name
0 ClassMap1 qosPolicyInput
FTOS#
846 | Quality of Service (QoS)
Example 2 Figure 31-14.
show qos policy-map-input (IPv6) Command Output
FTOS# show qos policy-map-input
Policy-map-input pmap1
Trust ipv6-diffserv
Queue# Class-map-name Qos-policy-name
0 c0 q0
1 c1 q1
2 c2 q2
3 c3 q3
4 c4 q4
5 c5 -
6 c6 q6
7 c7 q7
FTOS# show qos policy-map-output c e s View the output QoS policy map details.
Syntax show qos policy-map-output [ policy-map-name ] [ qos-policy-output qos-policy-name ]
Parameters policy-map-name qos-policy-output qos-policy-name
Enter the policy map name.
Enter the keyword qos-policy-output followed by the
QoS policy name.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Introduced on S60
Version 7.6.1.0
Introduced on C-Series and S-Series pre-Version 6.1.1.1
Introduced on E-Series
Figure 31-15.
show qos policy-map-output Command Output
FTOS#show qos policy-map-output
Policy-map-output PolicyMapOutput
Aggregate Qos-policy-name AggPolicyOut
Queue# Qos-policy-name
0 qosPolicyOutput
FTOS# show qos qos-policy-input c e s View the input QoS policy details.
Syntax show qos qos-policy-input [ qos-policy-name ]
Parameters qos-policy-name Enter the QoS policy name.
Defaults No default behavior or values
Quality of Service (QoS) | 847
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on S-Series
Version 7.5.1.0
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
Figure 31-16.
show qos qos-policy-input Command Output
FTOS#show qos qos-policy-input
Qos-policy-input QosInput
Rate-police 100 50 peak 100 50
Dscp 32
FTOS# show qos qos-policy-output c e s View the output QoS policy details.
Syntax show qos qos-policy-output [ qos-policy-name ]
Parameters qos-policy-name Enter the QoS policy name.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on C-Series and S-Series pre-Version 6.1.1.1
Introduced on E-Series
Figure 31-17.
show qos qos-policy-output Command Output
FTOS#show qos qos-policy-output
Qos-policy-output qosOut
Rate-limit 50 50 peak 50 50
Wred yellow 1
Wred green 1
848 | Quality of Service (QoS)
show qos statistics c e s View QoS statistics.
Syntax show qos statistics { wred-profile [ interface ]} | [ interface ]
Parameters wred-profile interface interface
Platform—E-Series Only : Enter the keyword wred-profile and optionally one of the following keywords and slot/port or number information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Enter one of the following keywords and slot/port or number information:
• On the C-Series and E-Series, For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Usage
Information
Version 8.3.3.1
Version 7.7.1.1
Version 7.5.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series pre-Version 6.1.1.1
Introduced on E-Series
The show qos statistics command can be used on the C-Series, but the wred-profile keyword must be omitted in the syntax. The show qos statistics output differs from the ED and EE series line cards and the EF series line cards. The QoS statistics for the EF series generates two extra columns, Queued
Pkts and Dropped Pkts, see Example 2.
Note: The show qos statistics command displays Matched Packets and Matched Bytes.
The show queue statistics egress
command (E-Series only) displays Queued Packets and Queued
Bytes. The following example explains how these two displays relate to each other.
• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
• Matched bytes on Interface A = matched packets *9000
• Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional header of 20 bytes.
Quality of Service (QoS) | 849
Example 1 Figure 31-18.
show qos statistics Command Output (ED and EE Series of E-Series)
FTOS#show qos statistics
Interface Gi 0/0
Queue# Queued Bytes Matched Pkts Matched Bytes
0 0 0 0
1 0 0 0
2 0 0 0
3 0 0 0
4 0 0 0
5 0 0 0
6 0 0 0
7 0 0 0
Interface Gi 0/1
Queue# Queued Bytes Matched Pkts Matched Bytes
0 0 0 0
1 0 0 0
2 0 0 0
3 0 0 0
4 0 0 0
5 0 0 0
6 0 0 0
7 0 0 0
Table 31-4.
show qos statistics Command Example Fields (ED and EE Series)
Field
Queue #
Queued Bytes
Matched Pkts
Matched Bytes
Description
Queue Number
Snapshot of the byte count in that queue.
The number of packets that matched the class-map criteria.
Note: When trust is configured, matched packet counters are not incremented in this field.
The number of bytes that matched the class-map criteria.
Note: When trust is configured, matched byte counters are not incremented in this field.
Example 2 Figure 31-19.
show qos statistics Command Output (EFSeries of E-Series)
FTOS#show qos statistics gig 0/1
Queue# Queued Queued Matched Matched Dropped
Bytes Pkts Pkts Bytes Pkts
(Cumulative) (Cumulative)
0 0 0 1883725 1883725000 0
1 0 0 1883725 1883725000 0
2 0 0 1883725 1883725000 0
3 0 0 1883725 1883725000 0
4 0 0 1883725 1883725000 0
5 0 0 1883724 1883724000 0
6 0 0 1883720 1883720000 0
7 0 0 1883720 1883720000 0
FTOS#
Table 31-5.
show qos statistics Command Example Fields (EF Series)
Field
Queue #
Queued Bytes
Description
Queue Number
Cumulative byte count in that queue
850 | Quality of Service (QoS)
Table 31-5.
show qos statistics Command Example Fields (EF Series) (continued)
Field
Queued Pkts
Matched Pkts
Matched Bytes
Dropped Pkts
Description
Cumulative packet count in that queue.
The number of packets that matched the class-map criteria.
Note: When trust is configured, matched packet counters are not incremented in this field.
The number of bytes that matched the class-map criteria.
Note: When trust is configured, matched byte counters are not incremented in this field.
The total of the number of packets dropped for green, yellow and out-of-profile.
Example 3 Figure 31-20.
show qos statistics wred-profile Command Output (ED, EE, and EF
Series)
FTOS#show qos statistics wred-profile
Interface Gi 5/11
Queue# Drop-statistic WRED-name Dropped Pkts
0 Green WRED1 51623
Yellow WRED2 51300
Out of Profile 0
1 Green WRED1 52082
Yellow WRED2 51004
Out of Profile 0
2 Green WRED1 50567
Yellow WRED2 49965
Out of Profile 0
3 Green WRED1 50477
Yellow WRED2 49815
Out of Profile 0
4 Green WRED1 50695
Yellow WRED2 49476
Out of Profile 0
5 Green WRED1 50245
Yellow WRED2 49535
Out of Profile 0
6 Green WRED1 50033
Yellow WRED2 49595
Out of Profile 0
7 Green WRED1 50474
Yellow WRED2 49522
Out of Profile 0
FTOS#
Table 31-6.
show qos statistics wred-profile Command Example Fields (ED, EE, and EF
Series)
Field
Queue #
Drop-statistic
WRED-name
Dropped Pkts
Description
Queue Number
Drop statistics for green, yellow and out-of-profile packets
WRED profile name
The number of packets dropped for green, yellow and out-of-profile
Related
Commands
Clears counters as shown in
Quality of Service (QoS) | 851
show qos wred-profile e View the WRED profile details.
Syntax show qos wred-profile wred-profile-name
Parameters wred-profile-name Enter the WRED profile name to view the profile details.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example pre-Version 6.1.1.1
Introduced on E-Series
Figure 31-21.
show qos wred-profile Command Output
FTOS#show qos wred-profile
Wred-profile-name min-threshold max-threshold wred_drop 0 0 wred_ge_y 1024 2048 wred_ge_g 2048 4096 wred_teng_y 4096 8192 wred_teng_g 8192 16384
WRED1 2000 7000 test cam-usage c e s Check the Input Policy Map configuration for the CAM usage.
Syntax test cam-usage service-policy input policy-map linecard { [ number port-set portpipe number ]
| [all ] }
Parameters policy-map linecard number port-set portpipe number
linecard all
Enter the policy map name.
(OPTIONAL) Enter the keyword linecard followed by the line card slot number.
Enter the keyword port-set followed by the line card’s port pipe number.
Range: 0 or 1
(OPTIONAL) Enter the keywords linecard all to indicate all line cards.
Defaults
Command Modes
No default values or behavior
EXEC
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series
852 | Quality of Service (QoS)
Example Figure 31-22.
test cam-usage service-policy input policy-map linecard all Example
Command
FTOS# test cam-usage service-policy input pmap_l2 linecard all
For a L2 Input Policy Map pmap_l2, the output must be as follows,
Linecard | Portpipe | CAM Partition | Available CAM | Estimated CAM | Status
| | | | per Port | (Allowed ports)
0 0 L2ACL 500 200 Allowed (2)
0 1 L2ACL 100 200 Exception
1 0 L2ACL 1000 200 Allowed (5)
1 1 L2ACL 0 200 Exception
…
…
…
13 1 L2ACL 400 200 Allowed (2)
FTOS#
Note: In a Layer 2 Policy Map, IPv4/IPv6 rules are not allowed and hence the output contains only L2ACL CAM partition entries.
Table 31-7.
test cam-usage Command Example Fields
Field
Linecard
Portpipe
CAM Partition
Available CAM
Estimated CAM per Port
Status (Allowed ports)
Description
Indicates the line card slot number.
Indicates the portpipe number.
The CAM space where the rules are added.
Indicates the free CAM space, in the partition, for the classification rules.
Note: The CAM entries reserved for the default rules are not included in the Available CAM column; free entries, from the default rules space, can not be used as a policy map for the classification rules.
Indicates the number of free CAM entries required (for the classification rules) to apply the input policy map on a single interface.
Note: The CAM entries for the default rule are not included in this column; a CAM entry for the default rule is always dedicated to a port and is always available for that interface.
Indicates if the input policy map configuration on an interface belonging to a line card/port-pipe is successful—Allowed ( n )—or not successful—
Exception.
The allowed number ( n ) indicates the number of ports in that port-pipe on which the Policy Map can be applied successfully.
Usage
Information
This features allows you to determine if the CAM has enough space available before applying the configuration on an interface.
An input policy map with both Trust and Class-map configuration, the Class-map rules are ignored and only the Trust rule is programmed in the CAM. In such an instance, the Estimated CAM output column will contain the size of the CAM space required for the Trust rule and not the Class-map rule.
Quality of Service (QoS) | 853
threshold e Specify the minimum and maximum threshold values for the configured WRED profiles.
Syntax threshold min number max number
Parameters
To remove the threshold values, use the no threshold min number max number command.
min number max number
Enter the keyword min followed by the minimum threshold number for the
WRED profile.
Range: 1024 to 77824 KB
Enter the keyword max followed by the maximum threshold number for the
WRED profile.
Range: 1024 to 77824 KB
Defaults
Command Modes
Command
History
Usage
Information
No default behavior or values
CONFIGURATION (config-wred) pre-Version 6.1.1.1
Introduced on E-Series
Use this command to configure minimum and maximum threshold values for user defined profiles.
Additionally, use this command to modify the minimum and maximum threshold values for the pre-defined WRED profiles. If you delete threshold values of the pre-defined WRED profiles, the profiles will revert to their original default values.
Table 31-8.
Pre-defined WRED Profile Threshold Values
Pre-defined WRED Profile Name Minimum Threshold wred_drop wred_ge_y wred_ge_g wred_teng_y wred_teng_g
0
1024
2048
4096
8192
Maximum Threshold
0
2048
4096
8192
16384
Related
Commands
Create a WRED profile.
trust c e s Specify dynamic classification (DSCP) or dot1p to trust.
Syntax
Parameters trust { diffserv [ fallback ]| dot1p [ fallback ]| ipv6-diffserv } diffserv dot1p fallback ipv6-diffserv
Enter the keyword
Enter the keyword diffserv to specify trust of DSCP markings.
dot1p to specify trust dot1p configuration.
Enter this keyword to classify packets according to their DSCP value as a secondary option in case no match occurs against the configured class maps.
On E-Series only, enter the keyword ipv6-diffserv to specify trust configuration of
IPv6 DSCP.
854 | Quality of Service (QoS)
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION (conf-policy-map-in)
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.1
Introduced on S60 fallback available on the E-Series.
dot1p available on the C-Series and S-Series.
Introduced on S-Series
Introduced on C-Series
Expanded to add support for dot1p and IPv6 DSCP
Introduced on E-Series
When trust is configured, matched bytes/packets counters are not incremented in the show qos statistics command.
The trust diffserv feature is not supported on E-Series ExaScale when an IPv6 microcode is enabled.
Dynamic mapping honors packets marked according to the standard definitions of DSCP. The default mapping table is detailed in the following table.
Table 31-9.
Standard Default DSCP Mapping Table
DSCP/CP hex range
(XXX)
111XXX
110XXX
101XXX
DSCP Definition Traditional IP Precedence E-Series
Internal Queue
ID
C-Series and
S-Series Internal
Queue ID
DSCP/CP decimal
EF (Expedited
Forwarding)
100XXX AF4 (Assured
Forwarding)
AF3 011XXX
010XXX
001XXX
AF2
AF1
000XXX BE (Best Effort)
Network Control
Internetwork Control
CRITIC/ECP
Flash Override
Flash
Immediate
Priority
Best Effort
7
6
5
4
3
2
1
0
3
3
2
2
1
1
0
0
48–63
32–47
16–31
0–15
Quality of Service (QoS) | 855
wred e Designate the WRED profile to yellow or green traffic.
Syntax wred { yellow | green } profile-name
To remove the WRED drop precedence, use the no wred { yellow | green } [ profile-name] command.
Parameters yellow | green profile-name
Enter the keyword yellow for yellow traffic. DSCP value of xxx110 and xxx100 maps to yellow.
Enter the keyword green for green traffic. DSCP value of xxx010 maps to green.
Enter your WRED profile name in character format (16 character maximum). Or use one of the 5 pre-defined WRED profile names.
Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION (conf-qos-policy-out)
Usage
Information
Related
Commands
Version 8.2.1.0
Profile name character limit increased from 16 to 32.
pre-Version 6.1.1.1
Introduced on E-Series
Use this command to assign drop precedence to green or yellow traffic. If there is no honoring enabled on the input, all the traffic defaults to green drop precedence.
Create a WRED profile and name that profile
Define the dynamic classification to trust DSCP wred-profile e Create a WRED profile and name that profile.
Syntax wred-profile wred-profile-name
To remove an existing WRED profile, use the no wred-profile command.
Parameters wred-profile-name Enter your WRED profile name in character format (16 character maximum). Or use one of the pre-defined WRED profile names. You can configure up to 26
WRED profiles plus the 5 pre-defined profiles, for a total of 31 WRED profiles.
Pre-defined Profiles: wred_drop, wred-ge_y, wred_ge_g, wred_teng_y, wred_teng_g
Defaults The five pre-defined WRED profiles. When a new profile is configured, the minimum and maximum threshold defaults to predefined wred_ge_g values
CONFIGURATION Command Modes
Command
History pre-Version 6.1.1.1
Introduced on E-Series
856 | Quality of Service (QoS)
Usage
Information
Related
Commands
Use the default pre-defined profiles or configure your own profile. You can not delete the pre-defined profiles or their default values. This command enables the WRED configuration mode—(conf-wred).
Specify the minimum and maximum threshold values of the WRED profile
Queue-Level Debugging
Queue-Level Debugging is an E-Series-only feature, as indicated by the
e
character that appears below each command heading.
The following queuing statistics are available on TeraScale versions of E-Series systems.
•
•
clear queue statistics ingress
•
•
clear queue statistics egress e Clear egress queue statistics.
Syntax
Parameters clear queue statistics egress [ unicast | multicast ] [ Interface ] unicast | multicast
Interface
(OPTIONAL) Enter the keyword multicast to clear only Multicast queue statistics. Enter the keyword unicast to clear only Unicast queue statistics.
Default: Both Unicast and Multicast queue statistics are cleared.
(OPTIONAL) Enter one of the following interfaces to display the interface specific queue statistics.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• Fast Ethernet is not supported
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Usage
Information
Version 6.2.1.1
Introduced
If a Policy QoS is applied on an interface when clear queue statistics egress is issued, it will clear the egress counters in show queue statistics and vice-versa. This behavior is due to the values being read from the same hardware registers.
Quality of Service (QoS) | 857
Related
Commands
Clear ingress queue statistics
Display egress queue statistics
Display ingress queue statistics clear queue statistics ingress e Clear ingress queue statistics.
Syntax clear queue statistics ingress [unicast [src-card ID [ dst-card ID ]] | [multicast] [src-card
ID ]]
Parameters unicast [src-card ID
[ dst-card ID ]] multicast [src-card ID ]
(OPTIONAL) Enter the keyword unicast to clear Unicast queue statistics. Optionally, enter the source card identification ( src-card ID ) and the destination card identification ( dst-card ID ) to clear the unicast statistics from the source card to the destination card.
(OPTIONAL) Enter the keyword multicast to clear only Multicast queue statistics. Optionally, enter the source card identification ( src-card
ID ) to clear the multicast statistics from the source card. Default: Both
Unicast and Multicast queue statistics are cleared.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Related
Commands
Version 6.2.1.1
Introduced
Clear egress queue statistics
Display egress queue statistics
Display ingress queue statistics show queue statistics egress e Display the egress queue statistics.
Syntax show queue statistics egress [ unicast | multicast ] [ Interface ] [ brief ]
858 | Quality of Service (QoS)
Parameters unicast | multicast
Interface brief
(OPTIONAL) Enter the keyword multicast to display only Multicast queue statistics. Enter the keyword unicast to display only Unicast queue statistics.
Default: Both Unicast and Multicast queue statistics are displayed.
(OPTIONAL) Enter one of the following interfaces to display the interface specific queue statistics.
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/ port information.
• Fast Ethernet is not supported.
(OPTIONAL) Enter the keyword brief to display only ingress per link buffering and egress per port buffering statistics.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Usage
Information
Version 6.2.1.1
Introduced for E-Series
TeraScale systems display cumulative queued bytes (in KB), cumulative queued packets (in KB), and cumulative dropped packets (in KB).
The display area is limited to 80 spaces to accommodate the screen and for optimal readability.
Numbers, that is values, are limited to 12 characters. The numbering conventions are detailed in the table below.
Table 31-10.
Numbering Conventions for show queue egress statistics Output
Value Divide the number by Quotient Display Examples
(10 ^ 11) - (10 ^ 14)
(10 ^ 14) - (10 ^ 17)
> (10 ^ 17)
1024
1024*1024
1024*1024*1024
K
M
T
12345678901 K
12345678901 M
12345678901 T
Note: The show queue statistics command displays Queued Packets and Queued Bytes.
command displays Matched Packets and Matched Bytes. The following example explains how these two outputs relate to each other.
• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
• Matched bytes on Interface A = matched packets *9000
• Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional header of 20 bytes.
Quality of Service (QoS) | 859
Example 1 Figure 31-23.
show queue statistics egress Command (TeraScale)
FTOS#show queue statistics egress unicast gigabitethernet 9/1
Interface Gi 9/1
Egress Queued Queued Packet Type Min Max Dropped
Port bytes packets KB KB packets
Queue#
0 281513847K 31959000 Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 30385770
1 99281660K 11271000 Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 9886100
2 99281660K 11271000 Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 9784600
3 38984440000 4322000 Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 3053753
4 99281660K 11271000 Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 9581600
5 39760160000 4408000 Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 3070671
6 39642900000 4395000 Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 3026100
7 99274410K 11270177 Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 9273402
FTOS#
Table 31-11.
show queue statistics egress Command Fields
Field
Egress Port Queue#
Queued bytes
Queued packets
Packet type
Min KB
Max KB
Dropped Pkts
Description
Egress Port Queue Number
Cumulative byte count in that queue
Cumulative packet count in that queue.
Green, yellow, and out-of-profile packets
Minimum threshold for WRED queue
Maximum threshold for WRED queue
The number of packets dropped for green, yellow and out-of-profile
860 | Quality of Service (QoS)
Example 2 Figure 31-24.
show queue statistics egress multicast Command Output
FTOS#sho queue statistics egress multicast
Linecard 3 port pipe 0, multicast
Packet Type Min Max Dropped
KB KB packets
Green 8192 16384 0
Yellow 4096 8192 0
Out of Profile 0
Linecard 3 port pipe 1, multicast
Packet Type Min Max Dropped
KB KB packets
Green 8192 16384 0
Yellow 4096 8192 0
Out of Profile 0
Linecard 7 port pipe 0, multicast
Packet Type Min Max Dropped
KB KB packets
Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 0
Linecard 7 port pipe 1, multicast
Packet Type Min Max Dropped
KB KB packets
Green 2048 4096 0
Yellow 1024 2048 0
Out of Profile 0
FTOS#
Table 31-12.
show queue statistics egress multicast Command Fields
Field
Packet type
Min KB
Max KB
Dropped Pkts
Description
Green, yellow, and out-of-profile packets
Minimum threshold for WRED queue
Maximum threshold for WRED queue
The number of packets dropped for green, yellow and out-of-profile
Quality of Service (QoS) | 861
Example 3 Figure 31-25.
show queue statistics egress brief Command Output
FTOS#show queue statistics egress brief
LC Portpipe Port Dropped
PortPipe packets
0 0 0 0
0 0 1 0
0 0 2 0
0 0 3 0
0 0 4 0
0 0 5 0
0 0 6 0
0 0 7 0
0 0 8 0
0 0 9 0
0 0 10 0
0 0 11 0
0 0 M 0
0 1 0 0
0 1 1 0
0 1 2 0
0 1 3 0
0 1 4 0
0 1 5 0
0 1 6 0
0 1 7 0
0 1 8 0
0 1 9 0
0 1 10 0
0 1 11 0
0 1 M 0
1 0 0 0
FTOS#
Table 31-13.
show queue statistics egress brief Command Fields
Field
LC
Portpipe
Port
Dropped Pkts
Description
Line Card
Portpipe number
Port Queue. Where M is Multicast queue
The number of packets dropped for green, yellow and out-of-profile
Related
Commands
clear queue statistics ingress
Clear egress queue statistics.
Clear ingress queue statistics.
Display ingress queue statistics show queue statistics ingress e Display the ingress queue statistics.
Syntax show queue statistics ingress [unicast [src-card ID [ dst-card ID ]] | [multicast] [src-card
ID ]] [ brief ]
862 | Quality of Service (QoS)
Parameters
[ unicast [src-card dst-card multicast brief
ID ]]
ID
[src-card ID ]
(OPTIONAL) Enter the keyword unicast to display Unicast queue statistics. Optionally, enter the source card identification ( src-card ID ) and the destination card identification ( dst-card ID ) to display the unicast statistics from the source card to the destination card.
Destination card Identification: Range 0 to 13 or RPM
(OPTIONAL) Enter the keyword multicast to display only Multicast queue statistics. Optionally, enter the source card identification
( src-card ID ) to display the multicast statistics from the source card.
Default: Both Unicast and Multicast queue statistics are displayed.
(OPTIONAL) Enter the keyword brief to display only ingress per link buffering and egress per port buffering statistics.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Usage
Information
Version 6.2.1.1
Introduced
TeraScale systems display cumulative queued bytes (in KB), cumulative queued packets (in KB), and cumulative dropped packets (in KB).
The display area is limited to 80 spaces to accommodate the screen and for optimal readability.
Numbers, that is values, are limited to 12 characters. The conventions are detailed in the following table.
Table 31-14.
Numbering Conventions for show queue statistics ingress Output
Value Divide the number by Quotient Display Examples
(10 ^ 11) - (10 ^ 14)
(10 ^ 14) - (10 ^ 17)
> (10 ^ 17)
1024
1024*1024
1024*1024*1024
K
M
T
12345678901 K
12345678901 M
12345678901 T
Note: The show queue statistics command displays Queued Packets and Queued Bytes.
command displays Matched Packets and Matched Bytes. The following example explains how these two displays relate to each other.
• 9000 byte size packets are sent from Interface A to Interface B.
• The Matched Packets on Interface A are equal to the Queued Packets on Interface B.
• Matched bytes on Interface A = matched packets *9000
• Queued bytes on Interface B = queued packets *(9020)—Each packet has an additional header of 20 bytes.
Quality of Service (QoS) | 863
Figure 31-26.
show queue statistics ingress Command Partial
FTOS#show queue statistics ingress unicast src-card 7 dst-card 3
Linecard 7 port pipe 0, to linecard 3 port pipe 0, unicast
SF Packet Type Min Max Dropped
Ingress KB KB packets
Queue#
0 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
1 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
2 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
3 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
4 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
5 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
6 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
7 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
Linecard 7 port pipe 0, to linecard 3 port pipe 1, unicast
SF Packet Type Min Max Dropped
Ingress KB KB packets
Queue#
0 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
1 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
2 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
3 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
4 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
5 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
6 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
7 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
4 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
5 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
6 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
7 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
864 | Quality of Service (QoS)
Table 31-15.
show queue statistics Command Fields
Field
SF Ingress Queue #
Packet type
Min KB
Max KB
Dropped Pkts
Description
Switch Fabric Queue Number
Green, yellow, and out-of-profile packets
Minimum threshold for WRED queue
Maximum threshold for WRED queue
The number of packets dropped for green, yellow and out-of-profile
Quality of Service (QoS) | 865
Example 2 Figure 31-27.
show queue statistics ingress Multicast Command Output
FTOS#show queue statistics ingress multicast src-card 7
Linecard 7 port pipe 0, multicast
SF Packet Type Min Max Dropped
Ingress KB KB packets
Queue#
0 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
1 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
2 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
3 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
4 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
5 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
6 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
7 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
Linecard 7 port pipe 1, multicast
SF Packet Type Min Max Dropped
Ingress KB KB packets
Queue#
0 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
1 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
2 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
3 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
4 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
5 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
6 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
7 Green 4096 4096 0
Yellow 3276 3276 0
Out of Profile 0
FTOS#
Table 31-16.
show queue statistics ingress Multicast Command Fields
Field
SF Ingress Queue #
Packet type
Min KB
Max KB
Dropped Pkts
Description
Switch Fabric Queue Number
Green, yellow, and out-of-profile packets
Minimum threshold for WRED queue
Maximum threshold for WRED queue
The number of packets dropped for green, yellow and out-of-profile
866 | Quality of Service (QoS)
Example 3 Figure 31-28.
show queue statistics ingress brief Command Output
FTOS#show queue statistics ingress src-card 0 brief
Source Linecard 0
Dest LC Src Dest Dropped
Port set Port set packets
0 0 0 0
0 0 1 100
0 1 0 0
0 1 1 100
1 0 0 0
1 0 1 100
1 1 0 0
1 1 1 100
2 0 0 0
2 0 1 100
2 1 0 0
2 1 1 100
3 0 0 0
3 0 1 100
3 1 0 0
3 1 1 100
4 0 0 0
4 0 1 100
4 1 0 0
4 1 1 100
5 0 0 0
5 0 1 100
5 1 0 0
5 1 1 100
6 0 0 0
6 0 1 100
6 1 0 0
6 1 1 100
RPM 0 0
RPM 1 100
Multicast 0 0
Multicast 1 0
FTOS#
Table 31-17.
show queue statistics ingress brief Command Fields
Field
Dest LC
Src Port Set
Dest Port Set
Dropped Pkts
Description
Destination Line Card
Source PortPipe Number
Destination PortPipe Number
The number of packets dropped
Related
Commands
clear queue statistics ingress
Clear egress queue statistics.
Clear ingress queue statistics.
Display egress queue statistics
Quality of Service (QoS) | 867
868 | Quality of Service (QoS)
32
Router Information Protocol (RIP)
Overview
Router Information Protocol (RIP) is a Distance Vector routing protocol. FTOS supports both RIP version 1 (RIPv1) and RIP version 2 (RIPv2) on C-Series and E-Series and S-Series systems, as indicated by the characters that appear below each command heading:
• C-Series: c
• E-Series:
e
• S-Series:
s
Note: The C-Series platform supports RIP with FTOS version 7.6.1.0 and later. The S-Series platform supports RIP with FTOS version 7.8.1.0 and later. Prior to 7.6.1.0, only the E-Series platform supported RIP.
The FTOS implementation of RIP is based on IETF RFCs 2453 and RFC 1058. For more information on configuring RIP, refer to FTOS Configuration Guide .
Commands
The following commands enable you to configure RIP:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Router Information Protocol (RIP) | 869
•
•
•
•
•
•
•
•
•
•
•
auto-summary c e s Restore the default behavior of automatic summarization of subnet routes into network routes. This command applies only to RIP version 2.
Syntax auto-summary
Default
Command Modes
To send sub-prefix routing information, enter no auto-summary .
Enabled.
ROUTER RIP
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series clear ip rip c e s Update all the RIP routes in the FTOS routing table.
Syntax clear ip rip
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
This command triggers updates of the main RIP routing tables.
870 | Router Information Protocol (RIP)
debug ip rip c e s Examine RIP routing information for troubleshooting.
Syntax debug ip rip [ interface | database | events [ interface ] | packet [ interface ] | trigger ]
To turn off debugging output, use the no debug ip rip command.
Parameters interface database events packet trigger
(OPTIONAL) Enter the interface type and ID as one of the following:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel, enter the keyword port-channel followed by a number from 1 to 255 for TeraScale, 1-128 on C-Series and S-Series.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Note: This option is available only on E-Series when entered as a standalone option. It is available on both C-Series and E-Series as a sub-option.
(OPTIONAL) Enter the keyword database to display messages when there is a change to the RIP database.
(OPTIONAL) Enter the keyword events to debug only RIP protocol changes.
(OPTIONAL) Enter the keyword events to debug only RIP protocol packets.
Note: This option is available only on C-Series.
(OPTIONAL) Enter the keyword trigger to debug only RIP trigger extensions.
EXEC Privilege Command Modes
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series default-information originate c e s Generate a default route for the RIP traffic.
Syntax default-information originate [ always ] [ metric metric-value ] [ route-map map-name ]
To return to the default values, enter no default-information originate .
Parameters always (OPTIONAL) Enter the keyword always to enable the switch software to always advertise the default route.
Router Information Protocol (RIP) | 871
metric metric-value route-map map-name
(OPTIONAL) Enter the keyword metric followed by a number as the metric value.
Range: 1 to 16
Default: 1
(OPTIONAL) Enter the keyword route-map followed by the name of a configured route-map.
Defaults Disabled. metric: 1
ROUTER RIP Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
The default route must be present in the switch routing table for the
command to take effect.
default-metric c e s Change the default metric for routes. Use this command with the redistribute command to ensure that all redistributed routes use the same metric value.
Syntax default-metric number
To return the default metric to the original values, enter no default-metric .
Parameters number Specify a number.
Range: 1 to 16.
The default is 1.
Default
Command Modes
Command
History
1
ROUTER RIP
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
This command ensures that route information being redistributed is converted to the same metric value.
Usage
Information
Related
Commands
Allows you to redistribute routes learned by other methods.
872 | Router Information Protocol (RIP)
description c e s Enter a description of the RIP routing protocol
Syntax description { description }
Parameters
To remove the description, use the no description { description } command.
description Enter a description to identify the RIP protocol (80 characters maximum).
Defaults
Command Modes
Command
History
No default behavior or values
ROUTER RIP
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-7.7.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Enter ROUTER mode on the switch.
distance c e s Assign a weight (for prioritization) to all routes in the RIP routing table or to a specific route. Lower weights (“administrative distance”) are preferred.
Syntax distance weight [ ip-address mask [ prefix-name ]]
To return to the default values, use the no distance weight [ ip-address mask ] command.
Parameters weight ip-address mask prefix-name
Enter a number from 1 to 255 for the weight (for prioritization) .
The default is 120.
(OPTIONAL) Enter the IP address, in dotted decimal format (A.B.C.D), of the host or network to receive the new distance metric.
If you enter an IP address, you must also enter a mask for that IP address, in either dotted decimal format or /prefix format (/x)
(OPTIONAL) Enter a configured prefix list name.
Defaults
Command Modes weight = 120
ROUTER RIP
Command
History
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Assign one distance metric to all routes learned using the redistribute
command.
Router Information Protocol (RIP) | 873
distribute-list in c e s Configure a filter for incoming routing updates.
Syntax distribute-list prefix-list-name in [ interface ]
To delete the filter, use the no distribute-list prefix-list-name in command.
Parameters prefix list-name interface
Enter the name of a configured prefix list.
(OPTIONAL) Identifies the interface type slot/port as one of the following:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel, enter the keyword port-channel followed by a number from 1 to 255 for TeraScale, 1-128 on C-Series and S-Series.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
Command
History
Not configured.
ROUTER RIP
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Enter the PREFIX-LIST mode and configure a prefix list.
distribute-list out c e s Configure a filter for outgoing routing updates.
Syntax distribute-list prefix-list-name out [ interface | bgp | connected | isis | ospf | static ]
To delete the filter, use the no distribute-list prefix-list-name out command.
874 | Router Information Protocol (RIP)
Parameters prefix list-name interface connected isis
Enter the name of a configured prefix list.
(OPTIONAL) Identifies the interface type slot/port as one of the following:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel, enter the keyword port-channel followed by a number from 1 to 255 for TeraScale, 1-128 on C-Series and S-Series.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter the keyword connected to filter only directly connected routes.
(OPTIONAL) Enter the keyword isis to filter only IS-IS routes.
Note: This option is only available on E-Series.
(OPTIONAL) Enter the keyword ospf to filter all OSPF routes.
(OPTIONAL) Enter the keyword static to filter manually configured routes.
Defaults
Command Modes
Command
History ospf static
Not configured.
ROUTER RIP
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Enter the PREFIX-LIST mode and configure a prefix list.
ip poison-reverse c e s Set the prefix of the RIP routing updates to the RIP infinity value.
Syntax
Defaults
Command Modes ip poison-reverse
To disable poison reverse, enter no ip poison-reverse .
Disabled.
INTERFACE
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Router Information Protocol (RIP) | 875
Related
Commands
Set RIP routing updates to exclude routing prefixes.
ip rip receive version c e s Set the interface to receive specific versions of RIP. The RIP version you set on the interface overrides
the version command in the ROUTER RIP mode.
Syntax ip rip receive version [ 1 ] [ 2 ]
Parameters
To return to the default, enter no ip rip receive version .
1
2
(OPTIONAL) Enter the number
(OPTIONAL) Enter the number
1 for RIP version 1.
2 for RIP version 2.
Defaults
Command Modes
Command
History
RIPv1 and RIPv2.
INTERFACE
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
If you want the interface to receive both versions of RIP, enter ip rip receive version 1 2 .
Usage
Information
Related
Commands
Sets the RIP version to be used for sending RIP traffic on an interface.
Sets the RIP version to be used for the switch software.
ip rip send version c e s Set the interface to send a specific version of RIP. The version you set on the interface overrides the
version command in the ROUTER RIP mode.
Syntax ip rip send version [ 1 ] [ 2 ]
To return to the default value, enter no ip rip send version .
Parameters
1
2
(OPTIONAL) Enter the number 1 for RIP version 1.
The default is RIPv1.
(OPTIONAL) Enter the number 2 for RIP version 2.
Defaults
Command Modes
RIPv1.
INTERFACE
876 | Router Information Protocol (RIP)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
To enable the interface to send both version of RIP packets, enter ip rip send version 1 2 .
Usage
Information
Related
Commands
Sets the RIP version for the interface to receive traffic.
Sets the RIP version to be used for the switch software.
ip split-horizon c e s Enable split-horizon for RIP data on the interface. As described in RFC 2453, the split-horizon scheme prevents any routes learned over a specific interface to be sent back out that interface.
Syntax ip split-horizon
To disable split-horizon, enter no ip split-horizon.
Defaults
Command Modes
Enabled
INTERFACE
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Related
Commands
Set the prefix for RIP routing updates.
maximum-paths c e s Set RIP to forward packets over multiple paths.
Syntax maximum-paths number
To return to the default values, enter no maximum-paths .
Parameters number Enter the number of paths.
Range: 1 to 16.
The default is 4 paths.
Defaults
Command Modes
4
ROUTER RIP
Router Information Protocol (RIP) | 877
Command
History
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
RIP supports a maximum of 16 ECMP paths.
neighbor c e s Define a neighbor router with which to exchange RIP information.
Syntax
Parameters neighbor ip-address
To delete a neighbor setting, use the no neighbor ip-address command.
ip-address Enter the IP address, in dotted decimal format, of a router with which to exchange information.
Defaults
Command Modes
Command
History
Not configured.
ROUTER RIP
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
When a neighbor router is identified, unicast data exchanges occur. Multiple neighbor routers are possible.
Use the
command in conjunction with the neighbor
command to ensure that only specific interfaces are receiving and sending data.
Sets the interface to only listen to RIP broadcasts. network c e s Enable RIP for a specified network. Use this command to enable RIP on all networks connected to the switch.
Syntax network ip-address
To disable RIP for a network, use the no network ip-address command.
Parameter ip-address Specify an IP network address in dotted decimal format. You cannot specify a subnet.
Defaults No RIP network is configured.
878 | Router Information Protocol (RIP)
Command Modes
Command
History
ROUTER RIP
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
You can enable an unlimited number of RIP networks.
RIP operates over interfaces configured with any address specified by the network command.
offset-list c e s Specify a number to add to the incoming or outgoing route metrics learned via RIP.
Syntax
Parameters offset-list prefix-list-name { in | out } offset [ interface ]
To delete an offset list, use the no offset-list prefix-list-name { in | out } offset [ interface ] command.
prefix-list-name offset interface
Enter the name of an established Prefix list to determine which incoming routes will be modified.
Enter a number from zero (0) to 16 to be applied to the incoming route metric matching the access list specified.
If you set an offset value to zero (0), no action is taken.
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a number from 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
Command
History
Not configured.
ROUTER RIP
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
When the offset metric is applied to an interface, that value takes precedence over an offset value that is not extended to an interface.
Enter the PREFIX-LIST mode and configure a prefix list.
Router Information Protocol (RIP) | 879
output-delay c e s Set the interpacket delay of successive packets to the same neighbor.
Syntax output-delay delay
To return to the switch software defaults for interpacket delay, enter no output-delay .
Parameters delay Specify a number of milliseconds as the delay interval.
Range: 8 to 50.
Default
Command Modes
Command
History
Not configured.
ROUTER RIP
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
This command is intended for low-speed interfaces.
passive-interface c e s Suppress routing updates on a specified interface.
Syntax passive-interface interface
Parameters
To delete a passive interface, use the no passive-interface interface command.
interface Enter the following information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel, enter the keyword port-channel followed by a number from 1 to 255 for TeraScale, 1-128 on C-Series and S-Series.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
Not configured.
ROUTER RIP
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on S-Series
880 | Router Information Protocol (RIP)
Usage
Information
Related
Commands
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on C-Series
Introduced on E-Series
Although the passive interface will neither send nor receive routing updates, the network on that interface will still be included in RIP updates sent via other interfaces.
Enable RIP for a specified network.
Define a neighbor.
redistribute c e s Redistribute information from other routing instances.
Syntax redistribute { connected | static }
To disable redistribution, use the no redistribute { connected | static } command.
Parameters connected static
Enter the keyword connected to specify that information from active routes on interfaces is redistributed.
Enter the keyword static to specify that information from static routes is redistributed.
Defaults
Command Modes
Command
History
Not configured.
ROUTER RIP
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
To redistribute the default route (0.0.0.0/0), configure the default-information originate command.
Usage
Information
Related
Commands
Generate a default route for RIP traffic.
redistribute isis e Redistribute routing information from an IS-IS instance.
Syntax redistribute isis [ tag ] [ level-1 | level-1-2 | level-2 ] [ metric metric-value ] [ route-map map-name ]
To disable redistribution, use the no redistribute isis [ tag ] [ level-1 | level-1-2 | level-2 ] [ metric metric-value ] [ route-map map-name ] command.
Router Information Protocol (RIP) | 881
Parameters
Defaults
Command Modes
Command
History
Usage
Information tag level-1 level-1-2 level-2 metric metric-value
(OPTIONAL) Enter the name of the IS-IS routing process.
(OPTIONAL) Enter the keyword level-1 to redistribute only IS-IS Level-1 routes.
(OPTIONAL) Enter the keyword level-1-2 to redistribute both IS-IS Level-1 and Level-2 routes.
(OPTIONAL) Enter the keyword level-2 to redistribute only IS-IS Level-2 routes.
(OPTIONAL) Enter the keyword metric followed by a number as the metric value.
Range: 0 to16 route-map map-name (OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.
Not configured.
ROUTER RIP pre-Version 6.2.1.1
Introduced on E-Series
IS-IS is not supported on S-Series systems.
redistribute ospf c e s Redistribute routing information from an OSPF process.
Syntax redistribute ospf process-id [ match external { 1 | 2 } | match internal | metric metric-value ]
[ route-map map-name ]
To disable redistribution, enter no redistribute ospf process-id [ match external { 1 | 2 } | match internal | metric metric-value ] [ route-map map-name ] command.
Parameters process-id match external { 1 |
2 } match internal
Enter a number that corresponds to the OSPF process ID to be redistributed.
Range: 1 to 65355.
(OPTIONAL) Enter the keywords match external followed by the numbers 1 or
2 to indicated that external 1 routes or external 2 routes should be redistributed.
metric metric-value (OPTIONAL) Enter the keyword metric followed by a number as the metric value.
Range: 0 to16 route-map map-name
(OPTIONAL) Enter the keywords match internal to indicate that internal routes should be redistributed.
(OPTIONAL) Enter the keyword route-map followed by the name of a configured route map.
Defaults
Command Modes
Not configured.
ROUTER RIP
882 | Router Information Protocol (RIP)
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series router rip c e s Enter the ROUTER RIP mode to configure and enable RIP.
Syntax router rip
To disable RIP, enter no router rip .
Defaults Disabled.
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
To enable RIP, you must assign a network address using the network command.
Usage
Information
Example Figure 32-1.
router rip Command Example
FTOS(conf)#router rip
FTOS(conf-router_rip)#
Related
Commands
exit
Enable RIP.
Return to the CONFIGURATION mode.
show config c e s Display the changes you made to the RIP configuration. Default values are not shown.
Syntax show config
Command Modes ROUTER RIP
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Router Information Protocol (RIP) | 883
Example Figure 32-2.
show config Command Example in ROUTER RIP Mode
FTOS(conf-router_rip)#show config
!
router rip
network 172.31.0.0
passive-interface GigabitEthernet 0/1
FTOS(conf-router_rip)# show ip rip database c e s Display the routes learned by RIP. If the switch learned no RIP routes, no output is generated.
Syntax show ip rip database [ ip-address mask ]
Parameters ip-address mask
(OPTIONAL) Specify an IP address in dotted decimal format to view RIP information on that network only.
If you enter an IP address, you must also enter a mask for that IP address.
(OPTIONAL) Specify a mask, in /network format, for the IP address.
EXEC Privilege Command Modes
Command
History
Example
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 32-3.
show ip rip database Command Example (partial)
FTOS#show ip rip database
Total number of routes in RIP database: 1624
204.250.54.0/24
[50/1] via 192.14.1.3, 00:00:12, GigabitEthernet 9/15
204.250.54.0/24 auto-summary
203.250.49.0/24
[50/1] via 192.13.1.3, 00:00:12, GigabitEthernet 9/14
203.250.49.0/24 auto-summary
210.250.40.0/24
[50/2] via 1.1.18.2, 00:00:14, Vlan 18
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
210.250.40.0/24 auto-summary
207.250.53.0/24
[50/2] via 1.1.120.2, 00:00:55, Port-channel 20
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
[50/2] via 1.1.10.2, 00:00:18, Vlan 10
207.250.53.0/24 auto-summary
208.250.42.0/24
[50/2] via 1.1.120.2, 00:00:55, Port-channel 20
[50/2] via 1.1.130.2, 00:00:12, Port-channel 30
[50/2] via 1.1.10.2, 00:00:18, Vlan 10
208.250.42.0/24 auto-summary
884 | Router Information Protocol (RIP)
Table 32-1.
Fields in show ip rip database Command Output
Field Description
Total number of routes in RIP database
100.10.10.0/24 directly connected
150.100.0.0 redistributed
209.9.16.0/24...
Displays the number of RIP routes stored in the RIP database.
Lists the route(s) directly connected.
Lists the routes learned through redistribution.
Lists the routes and the sources advertising those routes.
show running-config rip c e s Use this feature to display the current RIP configuration.
Syntax show running-config rip
Defaults
Command Modes
Example
No default values or behavior
EXEC Privilege
Figure 32-4.
show running-config rip Command Example show running-config rip
!
router rip
distribute-list Test1 in
distribute-list Test21 out
network 10.0.0.0
passive-interface GigabitEthernet 2/0
neighbor 20.20.20.20
redistribute ospf 999
version 2
Command
History
Version 8.3.3.1
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series timers basic c e s Manipulate the RIP timers for routing updates, invalid, holddown times and flush time.
Syntax timers basic update invalid holddown flush
To return to the default settings, enter no timers basic .
Router Information Protocol (RIP) | 885
Parameters update invalid holddown flush
Enter the number of seconds to specify the rate at which RIP routing updates are sent.
Range: zero (0) to 4294967295.
Default: 30 seconds.
Enter the number of seconds to specify the time interval before routing updates are declared invalid or expired. The invalid value should be at least three times the update timer value.
Range: zero (0) to 4294967295.
Default: 180 seconds.
Enter the number of seconds to specify a time interval during which the route is marked as unreachable but still sending RIP packets. The holddown value should be at least three times the update timer value.
Range: zero (0) to 4294967295.
Default: 180 seconds.
Enter the number of seconds to specify the time interval during which the route is advertised as unreachable. When this interval expires, the route is flushed from the routing table. The flush value should be greater than the update value.
Range: zero (0) to 4294967295.
Default is 240 seconds. update = 30 seconds; invalid = 180 seconds; holddown = 180 seconds; flush = 240 seconds.
ROUTER RIP
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
If the timers on one router are changed, the timers on all routers in the RIP domain must also be synchronized.
version c e s Specify either RIP version 1 or RIP version 2.
Syntax version { 1 | 2 }
To return to the default version setting, enter no version .
Parameters
1
2
Enter the keyword 1 to specify RIP version 1.
Enter the keyword 2 to specify RIP version 2.
Default
Command Modes
The FTOS sends RIPv1 and receives RIPv1 and RIPv2.
ROUTER RIP
886 | Router Information Protocol (RIP)
Command
History
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
pre-Version 6.2.1.1
ip rip receive version ip rip send version
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Set the RIP version to be received on the interface.
Set the RIP version to be sent out the interface.
Router Information Protocol (RIP) | 887
888 | Router Information Protocol (RIP)
33
Remote Monitoring (RMON)
Overview
FTOS RMON is implemented on all Dell Networking switching platforms (C-Series, E-Series, and
S-Series), as indicated by the characters that appear below each command heading:
• C-Series: c
• E-Series: e
• S-Series: s
FTOS RMON is based on IEEE standards, providing both 32-bit and 64-bit monitoring, and long-term statistics collection. FTOS RMON supports the following RMON groups, as defined in RFC-2819,
RFC-3273, and RFC-3434:
• Ethernet Statistics Table
• Ethernet Statistics High-Capacity Table
• Ethernet History Control Table
• Ethernet History Table
• Ethernet History High-Capacity Table
• Alarm Table
• High-Capacity Alarm Table (64bits)
• Event Table
• Log Table
FTOS RMON does not support the following statistics:
RFC-2819
RFC-3273, 64bits
RFC-2819
RFC-2819
RFC-3273, 64bits
RFC-2819
RFC-3434, 64bits
RFC-2819
RFC-2819
• etherStatsCollisions
• etherHistoryCollisions
• etherHistoryUtilization
Note: Only SNMP GET/GETNEXT access is supported. Configure RMON using the RMON commands. Collected data is lost during a chassis reboot.
Commands
The FTOS Remote Network Monitoring RMON commands are:
•
•
•
•
Remote Monitoring (RMON) | 889
•
•
•
•
•
•
•
•
rmon alarm c e s Set an alarm on any MIB object.
Syntax rmon alarm number variable interval { delta | absolute } rising-threshold value event-number falling-threshold value event-number [ owner string ]
To disable the alarm, use the no rmon alarm number command.
Parameters number variable interval
Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON Alarm Table.
The MIB object to monitor. The variable must be in the SNMP OID format, for example, 1.3.6.1.2.1.1.3 The object type must be a 32 bit integer.
Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON Alarm table.
Range: 5 to 3600 seconds delta Enter the alarmSampleType in the RMON Alarm table. absolute Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON Alarm table. rising-threshold value event-number
Enter the keyword rising-threshold followed by the value (32bit) the rising-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the rising threshold exceeds its limit.
This value is the same as the alarmRisingEventIndex or alarmTable of the RMON MIB. If there is no corresponding rising-threshold event, the value is zero.
falling-threshold value event-number owner string
Enter the keyword falling-threshold followed by the value (32bit) the falling-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the falling threshold exceeds its limit.
This value is the same as the alarmFallingEventIndex or the alarmTable of the RMON MIB. If there is no corresponding falling-threshold event, the value is zero.
(OPTIONAL) Enter the keyword owner followed by the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB.
Default
Command Modes owner
CONFIGURATION
890 | Remote Monitoring (RMON)
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series rmon collection history c e s Enable the RMON MIB history group of statistics collection on an interface.
Syntax rmon collection history { controlEntry integer } [ owner name ] [ buckets number ] [ interval seconds ]
To remove a specified RMON history group of statistics collection, use the no rmon collection history { controlEntry integer } command.
Parameters controlEntry integer owner name buckets number interval seconds
Enter the keyword controlEntry to specify the RMON group of statistics using a value. Then enter an integer value from 1 to 65535 that identifies the
RMON group of statistics. The integer value must be a unique index in the
RMON History Table.
(OPTIONAL) Enter the keyword owner followed by the owner name to record the owner of the RMON group of statistics.
(OPTIONAL) Enter the keyword buckets followed the number of buckets for the RMON collection history group of statistics.
Bucket Range: 1 to 1000
Default: 50
(OPTIONAL) Enter the keyword interval followed the number of seconds in each polling cycle.
Range: 5 to 3600 seconds
Default: 1800 seconds
Defaults
Command Modes
Command
History
No default behavior
CONFIGURATION INTERFACE (config-if)
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series rmon collection statistics c e s Enable RMON MIB statistics collection on an interface.
Syntax rmon collection statistics { controlEntry integer } [ owner name ]
To remove RMON MIB statistics collection on an interface, use the no rmon collection statistics
{ controlEntry integer } command.
Remote Monitoring (RMON) | 891
Parameters
Defaults
Command Modes
Command
History controlEntry owner name
integer Enter the keyword controlEntry to specify the RMON group of statistics using a value. Then enter an integer value from 1 to 65535 that identifies the
RMON Statistic Table. The integer value must be a unique in the RMON
Statistic Table.
(OPTIONAL) Enter the keyword owner followed by the owner name to record the owner of the RMON group of statistics.
No default behavior
CONFIGURATION INTERFACE (config-if)
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series rmon event c e s Add an event in the RMON event table.
Syntax rmon event number [ log ] [ trap community ] [ description string ] [ owner name ]
To disable RMON on an interface, use the no rmon event number [ log ] [ trap community ]
[ description string ] command.
Parameters number log trap community description string owner name
Assign an event number in integer format from 1 to 65535. The number value must be unique in the RMON Event Table.
(OPTIONAL) Enter the keyword log to generate an RMON log entry. The log entry is triggered and sets the eventType in the RMON MIB to log or log-and-trap.
Default: No log
(OPTIONAL) Enter the keyword trap followed by an SNMP community string to configure the eventType setting in the RMON MIB. This sets either snmp-trap or log-and-trap.
Default: public
(OPTIONAL) Enter the keyword description followed by a string describing the event.
(OPTIONAL) Enter the keyword owner followed by the name of the owner of this event.
Defaults
Command Modes
Command
History as described above
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
892 | Remote Monitoring (RMON)
rmon hc-alarm c e s Set an alarm on any MIB object.
Syntax rmon hc-alarm number variable interval { delta | absolute } rising-threshold value event-number falling-threshold value event-number [ owner string ]
To disable the alarm, use the no rmon hc-alarm number command.
Parameters number variable interval
Enter the alarm integer number from 1 to 65535. The value must be unique in the RMON Alarm Table.
The MIB object to monitor. The variable must be in the SNMP OID format, for example, 1.3.6.1.2.1.1.3 The object type must be a 64 bit integer.
Time, in seconds, the alarm monitors the MIB variables; this is the alarmSampleType in the RMON Alarm table.
Range: 5 to 3600 seconds delta Enter the alarmSampleType in the RMON Alarm table. absolute Enter the keyword absolute to test each MIB variable directly. This is the alarmSampleType in the RMON Alarm table. rising-threshold value event-number falling-threshold event-number owner string value
Enter the keyword rising-threshold followed by the value (64 bit) the rising-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the rising threshold exceeds its limit.
This value is the same as the alarmRisingEventIndex or alarmTable of the RMON MIB. If there is no corresponding rising-threshold event, the value is zero.
Enter the keyword falling-threshold followed by the value (64 bit) the falling-threshold alarm is either triggered or reset. Then enter the event-number to trigger when the falling threshold exceeds its limit.
This value is the same as the alarmFallingEventIndex or the alarmTable of the RMON MIB. If there is no corresponding falling-threshold event, the value is zero.
(OPTIONAL) Enter the keyword owner followed the owner name to specify an owner for the alarm. This is the alarmOwner object in the alarmTable of the RMON MIB.
Defaults
Command Modes
Command
History owner
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series show rmon c e s Display the RMON running status including the memory usage.
Syntax show rmon
Remote Monitoring (RMON) | 893
Defaults
Command Modes
Command
History
No default behavior
EXEC
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 33-1.
show rmon Command Example
FTOS# show rmon
RMON status
total memory used 218840 bytes.
ether statistics table: 8 entries, 4608 bytes
ether history table: 8 entries, 6000 bytes
alarm table: 390 entries, 102960 bytes
high-capacity alarm table: 5 entries, 1680 bytes
event table: 500 entries, 206000 bytes
log table: 2 entries, 552 bytes
FTOS# show rmon alarms c e s Display the contents of the RMON Alarm Table.
Syntax show rmon alarms [ index ] [ brief ]
Parameters index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON Alarm Table in an easy-to-read format.
Defaults
Command Modes
No default behavior
EXEC
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Example 1 Figure 33-2.
show rmon alarms index Command Example
FTOS#show rmon alarm 1
RMON alarm entry 1
sample Interval: 5
object: 1.3.6.1.2.1.1.3
sample type: absolute value.
value: 255161
alarm type: rising or falling alarm.
rising threshold: 1, RMON event index: 1
falling threshold: 501, RMON event index: 501
alarm owner: 1
alarm status: OK
FTOS#
894 | Remote Monitoring (RMON)
Example 2 Figure 33-3.
show rmon alarms brief Command Example
FTOS#show rmon alarm br index SNMP OID
--------------------------------------------------------------------
-
1 1.3.6.1.2.1.1.3
2 1.3.6.1.2.1.1.3
3 1.3.6.1.2.1.1.3
4 1.3.6.1.2.1.1.3
5 1.3.6.1.2.1.1.3
6 1.3.6.1.2.1.1.3
7 1.3.6.1.2.1.1.3
8 1.3.6.1.2.1.1.3
9 1.3.6.1.2.1.1.3
10 1.3.6.1.2.1.1.3
11 1.3.6.1.2.1.1.3
12 1.3.6.1.2.1.1.3
13 1.3.6.1.2.1.1.3
14 1.3.6.1.2.1.1.3
15 1.3.6.1.2.1.1.3
16 1.3.6.1.2.1.1.3
17 1.3.6.1.2.1.1.3
18 1.3.6.1.2.1.1.3
19 1.3.6.1.2.1.1.3
20 1.3.6.1.2.1.1.3
21 1.3.6.1.2.1.1.3
22 1.3.6.1.2.1.1.3
FTOS# show rmon events c e s Display the contents of RMON Event Table.
Syntax show rmon events [ index ] [ brief ]
Parameters index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON Event Table in an easy-to-read format.
Defaults
Command Modes
Command
History
No default behavior
EXEC
Example 1
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 33-4.
show rmon event index Command Example
FTOS#show rmon event 1
RMON event entry 1
description: 1
event type: LOG and SNMP TRAP.
event community: public
event last time sent: none
event owner: 1
event status: OK
FTOS#
Remote Monitoring (RMON) | 895
Example 2 Figure 33-5.
show rmon event brief Command Example
FTOS#show rmon event br index description
--------------------------------------------------------------------
1 1
2 2
3 3
4 4
5 5
6 6
7 7
8 8
9 9
10 10
11 11
12 12
13 13
14 14
15 15
16 16
17 17
18 18
19 19
20 20
21 21
22 22
FTOS# show rmon hc-alarm c e s Display the contents of RMON High-Capacity Alarm Table.
Syntax show rmon hc-alarm [ index ] [ brief ]
Parameters index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON
High-Capacity Alarm Table in an easy-to-read format.
Defaults
Command Modes
Command
History
No default behavior
EXEC
Example 1
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 33-6.
show rmon hc-alarm brief Command Example
FTOS#show rmon hc-alarm brief index SNMP OID
--------------------------------------------------------------------
1 1.3.6.1.2.1.1.3
2 1.3.6.1.2.1.1.3
3 1.3.6.1.2.1.1.3
4 1.3.6.1.2.1.1.3
5 1.3.6.1.2.1.1.3
FTOS#
896 | Remote Monitoring (RMON)
Example 2 Figure 33-7.
show rmon hc-alarm index Command Example
FTOS#show rmon hc-alarm 1
RMON high-capacity alarm entry 1
object: 1.3.6.1.2.1.1.3
sample interval: 5
sample type: absolute value.
value: 185638
alarm type: rising or falling alarm.
alarm rising threshold value: positive.
rising threshold: 1001, RMON event index: 1
alarm falling threshold value: positive.
falling threshold: 999, RMON event index: 6
alarm sampling failed 0 times.
alarm owner: 1
alarm storage type: non-volatile.
alarm status: OK
FTOS# show rmon history c e s Display the contents of the RMON Ethernet History table.
Syntax show rmon history [ index ] [ brief ]
Parameters index brief
(OPTIONAL) Enter the table index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON Ethernet
History table in an easy-to-read format.
Defaults
Command Modes
Command
History
No default behavior
EXEC
Example 1
Version 8.3.3.1
Version 7.6.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Introduced for E-Series
Figure 33-8.
show rmon history index Command Example
FTOS#show rmon history 6001
RMON history control entry 6001
interface: ifIndex.100974631 GigabitEthernet 2/0
bucket requested: 1
bucket granted: 1
sampling interval: 5 sec
owner: 1
status: OK
FTOS#
Remote Monitoring (RMON) | 897
Example 2 Figure 33-9.
show rmon history brief Command Example
FTOS#show rmon history brief index ifIndex interface
--------------------------------------------------------------------
-
6001 100974631 GigabitEthernet 2/0
6002 100974631 GigabitEthernet 2/0
6003 101236775 GigabitEthernet 2/1
6004 101236775 GigabitEthernet 2/1
9001 134529054 GigabitEthernet 3/0
9002 134529054 GigabitEthernet 3/0
9003 134791198 GigabitEthernet 3/1
9004 134791198 GigabitEthernet 3/1
FTOS# show rmon log c e s Display the contents of RMON Log Table.
Syntax show rmon log [ index ] [ brief ]
Parameters index brief
(OPTIONAL) Enter the log index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON Log Table in an easy-to-read format.
Defaults
Command Modes
No default behavior
EXEC
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Example 1 Figure 33-10.
show rmon log index Command Example
FTOS#show rmon log 2
RMON log entry, alarm table index 2, log index 1
log time: 14638 (THU AUG 12 22:10:40 2004)
description: 2
FTOS#
Example 2 Figure 33-11.
show rmon log brief Command Example
FTOS#show rmon log br eventIndex description
--------------------------------------------------------------------
-
2 2
4 4
FTOS#
Usage
Information
The log table has a maximum of 500 entries. If the log exceeds that maximum, the oldest log entry is purged to allow room for the new entry.
898 | Remote Monitoring (RMON)
show rmon statistics c e s Display the contents of RMON Ethernet Statistics table.
Syntax show rmon statistics [ index ] [ brief ]
Parameters index brief
(OPTIONAL) Enter the index number to display just that entry.
(OPTIONAL) Enter the keyword brief to display the RMON Ethernet
Statistics table in an easy-to-read format.
Defaults
Command Modes
Command
History
No default behavior
EXEC
Example 1
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 33-12.
show rmon statistics index Command Example
FTOS#show rmon statistics 6001
RMON statistics entry 6001
interface: ifIndex.100974631 GigabitEthernet 2/0
packets dropped: 0
bytes received: 0
packets received: 0
broadcast packets: 0
multicast packets: 0
CRC error: 0
under-size packets: 0
over-size packets: 0
fragment errors: 0
jabber errors: 0
collision: 0
64bytes packets: 0
65-127 bytes packets: 0
128-255 bytes packets: 0
256-511 bytes packets: 0
512-1023 bytes packets: 0
1024-1518 bytes packets: 0
owner: 1
status: OK
<high-capacity data>
HC packets received overflow: 0
HC packets received: 0
HC bytes received overflow: 0
HC bytes received: 0
HC 64bytes packets overflow: 0
HC 64bytes packets: 0
HC 65-127 bytes packets overflow: 0
HC 65-127 bytes packets: 0
HC 128-255 bytes packets overflow: 0
HC 128-255 bytes packets: 0
HC 256-511 bytes packets overflow: 0
HC 256-511 bytes packets: 0
HC 512-1023 bytes packets overflow: 0
HC 512-1023 bytes packets: 0
HC 1024-1518 bytes packets overflow: 0
HC 1024-1518 bytes packets: 0
FTOS#
Remote Monitoring (RMON) | 899
Example 2 Figure 33-13.
show rmon statistics brief Command Example
FTOS#show rmon statistics br index ifIndex interface
--------------------------------------------------------------------
6001 100974631 GigabitEthernet 2/0
6002 100974631 GigabitEthernet 2/0
6003 101236775 GigabitEthernet 2/1
6004 101236775 GigabitEthernet 2/1
9001 134529054 GigabitEthernet 3/0
9002 134529054 GigabitEthernet 3/0
9003 134791198 GigabitEthernet 3/1
9004 134791198 GigabitEthernet 3/1
FTOS#
900 | Remote Monitoring (RMON)
34
Rapid Spanning Tree Protocol (RSTP)
Overview
The FTOS implementation of RSTP (Rapid Spanning Tree Protocol) is based on the IEEE 802.1w standard spanning-tree protocol. The RSTP algorithm configures connectivity throughout a bridged
LAN that is comprised of LANs interconnected by bridges.
RSTP is supported by FTOS on all Dell Networking systems, as indicated by the characters that appear below each command heading:
• C-Series: c
• E-Series: e
• S-Series: s
Commands
The FTOS RSTP commands are:
•
•
•
•
•
•
•
•
•
•
•
•
bridge-priority c e s Set the bridge priority for RSTP.
Syntax bridge-priority priority-value
To return to the default value, enter no bridge-priority .
Rapid Spanning Tree Protocol (RSTP) | 901
Parameters
Defaults
Command Modes
Command
History priority-value Enter a number as the bridge priority value in increments of 4096.
Range: 0 to 61440.
Default: 32768
32768
CONFIGURATION RSTP (conf-rstp)
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Related
Commands
Enter the Rapid Spanning Tree mode debug spanning-tree rstp c e s Enable debugging of RSTP and view information on the protocol.
Syntax debug spanning-tree rstp [all | bpdu interface { in | out } | events]
To disable debugging, enter no debug spanning-tree rstp .
Parameters all bpdu interface { in | out } events
(OPTIONAL) Enter the keyword all to debug all spanning tree operations.
(OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units.
(OPTIONAL) Enter the interface keyword along with the type slot/port of the interface you want displayed. Type slot/port options are the following:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Optionally, enter an in or out parameter in conjunction with the optional interface:
• For Receive, enter in
• For Transmit, enter out
(OPTIONAL) Enter the keyword events to debug RSTP events.
Command Modes
Command
History
EXEC Privilege
Version 7.6.1.0
Support added for S-Series
902 | Rapid Spanning Tree Protocol (RSTP)
Example
Version 7.5.1.0
Version 6.2.1.1
Support added for C-Series
Introduced for E-Series
Figure 34-1.
debug spanning-tree rstp bpdu Command Example
FTOS#debug spanning-tree rstp bpdu gigabitethernet 2/0 ?
in Receive (in) out Transmit (out) description c e s Enter a description of the Rapid Spanning Tree
Syntax description { description }
Parameters
To remove the description, use the no description { description } command.
description Enter a description to identify the Rapid Spanning Tree (80 characters maximum).
Defaults
Command Modes
No default behavior or values
SPANNING TREE (The prompt is “config-rstp”.)
Command
History
Version 8.3.3.1
pre-7.7.1.0
Introduced on S60
Introduced
Related
Commands
Enter SPANNING TREE mode on the switch.
disable c e s Disable RSTP globally on the system.
Syntax
Defaults
Command Modes disable
To enable Rapid Spanning Tree Protocol, enter no disable .
RSTP is disabled
CONFIGURATION RSTP (conf-rstp)
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Related
Commands
Enter the Rapid Spanning Tree mode
Rapid Spanning Tree Protocol (RSTP) | 903
forward-delay c e s Configure the amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State.
Syntax forward-delay seconds
To return to the default setting, enter no forward-delay.
Parameters seconds Enter the number of seconds that FTOS waits before transitioning RSTP to the forwarding state.
Range: 4 to 30
Default: 15 seconds
Defaults
Command Modes
Command
History
15 seconds
CONFIGURATION RSTP (conf-rstp)
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Change the time interval between BPDUs.
Change the wait time before RSTP refreshes protocol configuration information.
hello-time c e s Set the time interval between generation of RSTP Data Units (BPDUs).
Syntax hello-time [ milli-second ] seconds
Parameters
To return to the default value, enter no hello-time .
seconds milli-second
Enter a number as the time interval between transmission of BPDUs.
Range: 1 to 10 seconds
Default: 2 seconds.
Enter this keyword to configure a hello time on the order of milliseconds.
Range: 50 - 950 milliseconds
Defaults
Command Modes
2 seconds
CONFIGURATION RSTP (conf-rstp)
Command
History
Version 8.3.3.1
Version 8.3.1.0
Version 7.6.1.0
Introduced on S60
Added milli-second to S-Series.
Support added for S-Series
904 | Rapid Spanning Tree Protocol (RSTP)
Usage
Information
Related
Commands
Version 7.5.1.0
Version 6.2.1.1
Support added for C-Series
Introduced for E-Series
The hello time is encoded in BPDUs in increments of 1/256ths of a second. The standard minimum hello time in seconds is 1 second, which is encoded as 256. Millisecond hello times are encoded using values less than 256; the millisecond hello time equals (x/1000)*256.
When millisecond hellos are configured, the default hello interval of 2 seconds is still used for edge ports; the millisecond hello interval is not used.
Change the wait time before RSTP transitions to the Forwarding state.
Change the wait time before RSTP refreshes protocol configuration information.
max-age c e s Set the time interval for the RSTP bridge to maintain configuration information before refreshing that information.
Syntax
Parameters max-age seconds
To return to the default values, enter no max-age .
max-age Enter a number of seconds the FTOS waits before refreshing configuration information.
Range: 6 to 40 seconds
Default: 20 seconds
Defaults
Command Modes
Command
History
20 seconds
CONFIGURATION RSTP (conf-rstp)
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Change the wait time before RSTP transitions to the Forwarding state.
Change the time interval between BPDUs.
protocol spanning-tree rstp c e s Enter the RSTP mode to configure RSTP.
Syntax protocol spanning-tree rstp
Defaults
To exit the RSTP mode, enter exit
Not configured
Rapid Spanning Tree Protocol (RSTP) | 905
Command Modes
Command
History
CONFIGURATION RSTP (conf-rstp)
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 34-2.
protocol spanning-tree rstp Command
FTOS(conf)#protocol spanning-tree rstp
FTOS(config-rstp)##no disable
Usage
Information
Related
Commands
RSTP is not enabled when you enter the RSTP mode. To enable RSTP globally on the system, enter no
description from the RSTP mode.
Disable RSTP globally on the system .
show config c e s View the current configuration for the mode. Only non-default values are displayed.
Syntax
Command Modes show config
CONFIGURATION RSTP (conf-rstp)
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Example Figure 34-3.
show config Command for the RSTP Mode
FTOS(conf-rstp)#show config
!
protocol spanning-tree rstp
no disable
bridge-priority 16384
FTOS(conf-rstp)# show spanning-tree rstp c e s Display the RSTP configuration.
Syntax show spanning-tree rstp [ brief ]
Parameters brief (OPTIONAL) Enter the keyword brief to view a synopsis of the RSTP configuration information.
906 | Rapid Spanning Tree Protocol (RSTP)
Command Modes EXEC
EXEC Privilege
Command
History
Example 1
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.4.1.0
Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Expanded to display port error disable state (EDS) caused by loopback BPDU inconsistency
Introduced for E-Series
Figure 34-4.
show spanning-tree rstp brief Command
FTOS#show spanning-tree rstp brief
Executing IEEE compatible Spanning Tree Protocol
Root ID Priority 8192, Address 0001.e805.e306
Root Bridge hello time 4, max age 20, forward delay 15
Bridge ID Priority 16384, Address 0001.e801.6aa8
Configured hello time 2, max age 20, forward delay 15
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID PortID
---------- -------- ---- ------- --- ------- -------------------- --------
Gi 4/0 128.418 128 20000 FWD 20000 16384 0001.e801.6aa8 128.418
Gi 4/1 128.419 128 20000 FWD 20000 16384 0001.e801.6aa8 128.419
Gi 4/8 128.426 128 20000 FWD 20000 8192 0001.e805.e306 128.130
Gi 4/9 128.427 128 20000 BLK 20000 8192 0001.e805.e306 128.131
Interface
Name Role PortID Prio Cost Sts Cost Link-type Edge
---------- ------ -------- ---- ------- --- ------- --------- ----
Gi 4/0 Desg 128.418 128 20000 FWD 20000 P2P Yes
Gi 4/1 Desg 128.419 128 20000 FWD 20000 P2P Yes
Gi 4/8 Root 128.426 128 20000 FWD 20000 P2P No
Gi 4/9 Altr 128.427 128 20000 BLK 20000 P2P No
FTOS#
Rapid Spanning Tree Protocol (RSTP) | 907
Example 2 Figure 34-5.
show spanning-tree rstp with EDS and LBK
FTOS#show spanning-tree rstp br
Executing IEEE compatible Spanning Tree Protocol
Root ID Priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID Priority 32768, Address 0001.e801.6aa8
We are the root
Configured hello time 2, max age 20, forward delay 15
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID PortID
---------- -------- ---- ------- --- ------- -------------------- --------
Gi 0/0 128.257 128 20000 EDS 0 32768 0001.e801.6aa8 128.257
Interface
Name Role PortID Prio Cost Sts Cost Link-type Edge
---------- ------ -------- ---- ------- --- ------- --------- ----
Gi 0/0 ErrDis 128.257 128 20000 EDS 0 P2P No
FTOS#show spanning-tree rstp
Root Identifier has priority 32768, Address 0001.e801.6aa8
Root Bridge hello time 2, max age 20, forward delay 15, max hops 0
Bridge Identifier has priority 32768, Address 0001.e801.6aa8
Configured hello time 2, max age 20, forward delay 15, max hops 0
We are the root
Current root has priority 32768, Address 0001.e801.6aa8
Number of topology changes 1, last change occurred 00:00:31 ago on Gi 0/0
Port 257 (GigabitEthernet 0/0) is LBK_INC Discarding
Port path cost 20000, Port priority 128, Port Identifier 128.257
Designated root has priority 32768, address 0001.e801.6aa8
Designated bridge has priority 32768, address 0001.e801.6aa8
Designated port id is 128.257, designated path cost 0
Number of transitions to forwarding state 1
BPDU : sent 27, received 9
The port is not in the Edge port mode
LBK_INC means
Loopback BPDU
Inconsistency
FTOS# spanning-tree rstp c e s Configure Port cost, Edge port with optional Bridge Port Data Unit (BPDU) guard, or Port priority on the RSTP.
Syntax spanning-tree rstp { cost Port cost | edge-port [ bpduguard [ shutdown-on-violation ]] | priority priority }
To remove the port cost, edge port with optional BPDU, or port priority, use the no spanning-tree rstp { cost Port cost | edge-port [ bpduguard ] | priority priority } command.
908 | Rapid Spanning Tree Protocol (RSTP)
Parameters cost Port edge-port cost bpduguard shutdown-on-v iolation priority priority
(OPTIONAL) Enter the keyword cost followed by the port cost value.
Range: 1 to 200000
Defaults:
100 Mb/s Ethernet interface = 200000
1-Gigabit Ethernet interface = 20000
10-Gigabit Ethernet interface = 2000
Port Channel interface with one 100 Mb/s Ethernet = 200000
Port Channel interface with one 1-Gigabit Ethernet = 20000
Port Channel interface with one 10-Gigabit Ethernet = 2000
Port Channel with two 1-Gigabit Ethernet = 18000
Port Channel with two 10-Gigabit Ethernet = 1800
Port Channel with two 100-Mbps Ethernet = 180000
Enter the keyword edge-port to configure the interface as a Rapid Spanning Tree edge port.
(OPTIONAL) Enter the keyword portfast to enable Portfast to move the interface into forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.
(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
(OPTIONAL) Enter keyword priority followed by a value in increments of 16 as the priority.
Range: 0 to 240.
Default: 128
Not configured
INTERFACE
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.2.1.1
Introduced on S60
Introduced hardware shutdown-on-violation options
Support added for S-Series
Support added for C-Series
Added the optional Bridge Port Data Unit (BPDU) guard.
Introduced for E-Series
The BPDU guard option prevents the port from participating in an active STP topology in case a
BPDU appears on a port unintentionally, or is misconfigured, or is subject to a DOS attack. This option places the port into an error disable state if a BPDU appears, and a message is logged so that the administrator can take corrective action.
Note: A port configured as an edge port, on an RSTP switch, will immediately transition to the forwarding state. Only ports connected to end-hosts should be configured as edge ports.
Consider an edge port similar to a port with a spanning-tree portfast enabled.
If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.
Rapid Spanning Tree Protocol (RSTP) | 909
Example Figure 34-6.
spanning-tree rstp edge-port Command
FTOS(conf)#interface gigabitethernet 4/0
FTOS(conf-if-gi-4/0)#spanning-tree rstp edge-port
FTOS(conf-if-gi-4/0)#show config
!
interface GigabitEthernet 4/0
no ip address
switchport
spanning-tree rstp edge-port
no shutdown
FTOS# tc-flush-standard c e s Enable the MAC address flushing upon receiving every topology change notification.
Syntax tc-flush-standard
To disable, use the no tc-flush-standard command.
Defaults
Command Modes
Disabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Usage
Information
By default FTOS implements an optimized flush mechanism for RSTP. This helps in flushing MAC addresses only when necessary (and less often), allowing for faster convergence during topology changes. However, if a standards-based flush mechanism is needed, this knob command can be turned on to enable flushing MAC addresses upon receiving every topology change notification.
910 | Rapid Spanning Tree Protocol (RSTP)
35
Security
Overview
Except for the Trace List feature (E-Series only), most of the commands in this chapter are available on all three Dell Networking platforms — C-Series, E-Series, and S-Series (the S-Series models that run
FTOS), as noted by the following icons that appear under each command icon: c e s
Commands
This chapter contains various types of security commands in FTOS, in the following sections:
•
•
Authorization and Privilege Commands
•
Authentication and Password Commands
•
•
•
Port Authentication (802.1X) Commands
•
•
For configuration details, see the Security chapter in the FTOS Configuration Guide.
Note: Starting with FTOS v7.2.1.0, LEAP with MSCHAP v2 supplicant is implemented.
AAA Accounting Commands
AAA Accounting enables tracking of services that users are accessing and the amount of network resources being consumed by those services.When AAA Accounting is enabled, the network server reports user activity to the TACACS+ security server in the form of accounting records. Each accounting record is comprised of accounting AV pairs and is stored on the access control server.
As with authentication and authorization, you must configure AAA Accounting by defining named list of accounting methods, and then apply that list to various interfaces. The commands are:
•
•
•
•
Security | 911
aaa accounting c e s Enable AAA Accounting and create a record for monitoring the accounting function.
Syntax aaa accounting { system | exec | commands level } { name | default }{ start-stop | wait-start | stop-only } { tacacs+ }
To disable AAA Accounting, use the no aaa accounting { system | exec | command level } { name
| default }{ start-stop | wait-start | stop-only } { tacacs+ } command.
Parameters system Enter the keyword system to send accounting information of any other AAA configuration.
exec Enter the keyword exec to send accounting information when a user has logged in to the EXEC mode.
commands level Enter the keyword command followed by a privilege level for accounting of commands executed at that privilege level. name | default start-stop wait-start
Enter one of the following:
• For name , a user-defined name of a list of accounting methods
• default for the default accounting methods
Enter the keyword start-stop to send a tart accounting” notice at the beginning of the requested event and a “stop accounting” notice at the end of the event.
Enter the keyword wait-start to ensure that the TACACS+ security server acknowledges the start notice before granting the user’s process request.
stop-only tacacs+
Enter the keyword stop-only to instruct the TACACS+ security server to send a
“stop record accounting” notice at the end of the requested user process.
Enter the keyword tacacs+ to use TACACS+ data for accounting. FTOS currently only supports TACACS+ accounting.
Defaults
Command Modes
Command
History
No default configuration or behavior
CONFIGURATION
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Figure 35-1.
aaa accounting Command Examples
FTOS(conf)# aaa accounting exec default start-stop tacacs+
FTOS(conf)# aaa accounting command 15 default start-stop tacacs+
FTOS (config)#
Usage
Information
In the example above, TACACS+ accounting is used to track all usage of EXEC command and commands on privilege level 15.
Privilege level 15 is the default. If you want to track usage at privilege level 1, for example, use aaa accounting command 1 .
912 | Security
Related
Commands
Change the password for the enable command.
Enable AAA login authentication on terminal lines.
Create a password.
Specify a TACACS+ server host.
aaa accounting suppress c e s Prevent the generation of accounting records of users with user name value of NULL.
Syntax aaa accounting suppress null-username
To permit accounting records to users with user name value of NULL, use the no aaa accounting suppress null-username command
Defaults
Command Modes
Accounting records are recorded for all users.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced
Usage
Information
FTOS issues accounting records for all users on the system, including users whose username string, due to protocol translation, is NULL. For example, a user who comes on line with the aaa authentication login method-list none command is applied. Use aaa accounting suppress command to prevent accounting records from being generated for sessions that do not have user names associated to them. accounting c e s Apply an accounting method list to terminal lines.
Syntax
Parameters accounting { exec | commands level } method-list exec commands level method-list
Enter this keyword to apply an EXEC level accounting method list.
Enter this keyword to apply an EXEC and CONFIGURATION level accounting method list.
Enter a method list that you defined using the command aaa accounting exec or aaa accounting commands .
Defaults
Command Modes
None
LINE
Security | 913
Command
History
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series
Enable AAA Accounting and create a record for monitoring the accounting function.
show accounting c e s Display the active accounting sessions for each online user.
Syntax show accounting
Defaults No default configuration or behavior
Command Modes EXEC
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced
Figure 35-2.
show accounting Command Example
FTOS#show accounting
Active accounted actions on tty2, User admin Priv 1
Task ID 1, EXEC Accounting record, 00:00:39 Elapsed, service=shell
Active accounted actions on tty3, User admin Priv 1
Task ID 2, EXEC Accounting record, 00:00:26 Elapsed, service=shell
FTOS#
Usage
Information
This command steps through all active sessions and then displays the accounting records for the active account functions.
Authorization and Privilege Commands
Set command line authorization and privilege levels with the following commands:
•
•
•
aaa authorization config-commands
•
•
privilege level (CONFIGURATION mode)
•
914 | Security
authorization c e s Apply an authorization method list to terminal lines.
Syntax authorization { exec | commands level } method-list
Parameters exec commands level method-list
Enter this keyword to apply an EXEC level authorization method list.
Enter this keyword to apply an EXEC and CONFIGURATION level authorization method list.
Enter a method list that you defined using the command aaa authorization exec or aaa authorization commands .
Defaults
Command Modes
Command
History
None
LINE
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.3.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series
Usage
Information
Set parameters that restrict (or permit) a user’s access to EXEC and
CONFIGURATION level commands
Set parameters that restrict (or permit) a user’s access to EXEC level commands.
aaa authorization commands c e s Set parameters that restrict (or permit) a user’s access to EXEC and CONFIGURATION level commands
Syntax aaa authorization commands level { name | default } { local || tacacs+ || none }
Parameters
Undo a configuration with the no aaa authorization commands level { name | default } { local || tacacs+ || none } command syntax.
commands level name default local tacacs+ none
Enter the keyword commands followed by the command privilege level for command level authorization.
Define a name for the list of authorization methods.
Define the default list of authorization methods.
Use the authorization parameters on the system to perform authorization.
Use the TACACS+ protocol to perform authorization.
Enter this keyword to apply no authorization.
Defaults
Command Modes
None
CONFIGURATION
Security | 915
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Added support for RADIUS aaa authorization config-commands e Set parameters that restrict (or permit) a user’s access to EXEC level commands.
Syntax aaa authorization config-commands
Disable authorization checking for CONFIGURATION level commands using the command no aaa authorization config-commands .
Defaults Enabled when you configure aaa authorization commands
Command Modes CONFIGURATION
Command
History
Usage
Information
Version 7.5.1.0
Introduced for E-Series
By default, the command aaa authorization commands configures the system to check both EXEC level and CONFIGURATION level commands. Use the command no aaa authorization config-commands to enable only EXEC-level command checking.
aaa authorization exec c e s Set parameters that restrict (or permit) a user’s access to EXEC-level commands.
Syntax aaa authorization exec { name | default } { local || tacacs+ || if-authenticated || none }
Parameters
Disable authorization checking for EXEC level commands using the command no aaa authorization exec .
name default local tacacs+ none
Define a name for the list of authorization methods.
Define the default list of authorization methods.
Use the authorization parameters on the system to perform authorization.
Use the TACACS+ protocol to perform authorization.
Enter this keyword to apply no authorization.
Defaults
Command Modes
None
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced for S-Series
916 | Security
Version 7.5.1.0
Version 6.1.1.0
Introduced for C-Series
Added support for RADIUS privilege level (CONFIGURATION mode) c e s Change the access or privilege level of one or more commands.
Syntax privilege mode { level level command | reset command }
To delete access to a level and command, use the no privilege mode level level command command.
Parameters mode level level reset command
•
•
•
•
•
•
Enter one of the following keywords as the mode for which you are controlling access: configure for the CONFIGURATION mode exec for the EXEC mode interface for the INTERFACE modes line for the LINE mode route-map for the ROUTE-MAP router for the ROUTER OSPF, ROUTER RIP, ROUTER ISIS and ROUTER BGP modes.
Enter the keyword level followed by a number for the access level.
Range: 0 to 15.
Level 1 is the EXEC mode and Level 15 allows access to all CLI modes and commands.
Enter the keyword reset to return the security level to the default setting.
Enter the command’s keywords to assign the command to a certain access level. You can enter one or all of the keywords
Defaults
Command Modes
Not configured.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Usage
Information
Use the
enable password command to define a password for the level to which you are assigning
privilege or access.
privilege level (LINE mode) c e s Change the access level for users on the terminal lines.
Syntax privilege level level
To delete access to a terminal line, use the no privilege level level command.
Security | 917
Parameters level level
Defaults
Command Modes
Command
History level = 15
LINE
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Enter the keyword level followed by a number for the access level.
Range: 0 to 15.
Level 1 is the EXEC mode and Level 15 allows access to all CLI modes.
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Authentication and Password Commands
This section contains the following commands controlling management access to the system:
•
•
•
•
•
•
•
•
•
•
privilege level (CONFIGURATION mode)
•
•
•
•
•
•
aaa authentication enable c e s Configure AAA Authentication method lists for user access to the EXEC privilege mode (the “Enable” access).
Syntax aaa authentication enable { default | method-list-name } method [ ... method2 ]
To return to the default setting, use the no aaa authentication enable { default | method-list-name } method [ ... method2 ] command.
918 | Security
Parameters default method-list-name method
... method2
Enter the keyword default followed by the authentication methods to use as the default sequence of methods to be used for the Enable log-in.
Default: default enable
Enter a text string (up to 16 characters long) to name the list of enabled authentication methods activated at log in.
•
•
Enter one of the following methods:
•
•
• enable - use the password defined by the
command in the CONFIGURATION mode.
line
- use the password defined by the password
command in the LINE mode.
none - no authentication.
radius
- use the RADIUS server(s) configured with the radius-server host
command.
tacacs+ - use the TACACS+ server(s) configured with the
(OPTIONAL) In the event of a “no response” from the first method, FTOS applies the next configured method.
Defaults
Command Modes
Command
History
Use the enable password.
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced
By default, the Enable password is used. If aaa authentication enable default is configured, FTOS will use the methods defined for Enable access instead.
Methods configured with the aaa authentication enable command are evaluated in the order they are configured. If authentication fails using the primary method, FTOS employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, FTOS proceeds to the next authentication method. The TACACS+ is incorrect, but the user is still authenticated by the secondary method.
Change the password for the enable command.
Enable AAA login authentication on terminal lines.
Create a password.
Specify a RADIUS server host.
Specify a TACACS+ server host.
Security | 919
aaa authentication login c e s Configure AAA Authentication method lists for user access to the EXEC mode (Enable log-in).
Syntax aaa authentication login { method-list-name | default } method [ ... method4 ]
To return to the default setting, use the no aaa authentication login { method-list-name | default } command.
Parameters method-list-name default method
... method4
•
•
•
Enter a text string (up to 16 characters long) as the name of a user-configured method list that can be applied to different lines.
Enter the keyword default to specify that the method list specified is the default method for all terminal lines.
Enter one of the following methods:
•
•
• enable
- use the password defined by the enable password command in the
CONFIGURATION mode.
line - use the password defined by the
mode.
local - use the user name/password defined by the in the local configuration.
none - no authentication.
radius
- use the RADIUS server(s) configured with the radius-server host
command.
tacacs+
- use the TACACS+ server(s) configured with the tacacs-server host command.
(OPTIONAL) Enter up to four additional methods. In the event of a “no response” from the first method, FTOS applies the next configured method (up to four configured methods).
Default
Command Modes
Command
History
Not configured (that is, no authentication is performed)
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series
Usage
Information
By default, the locally configured username password will be used. If
default is configured, FTOS will use the methods defined by this command for login instead.
Methods configured with the
aaa authentication login command are evaluated in the order they are
configured. If users encounter an error with the first method listed, FTOS applies the next method configured. If users fail the first method listed, no other methods are applied. The only exception is the local method. If the user’s name is not listed in the local database, the next method is applied. If the correct user name/password combination are not entered, the user is not allowed access to the switch.
Note: If authentication fails using the primary method, FTOS employs the second method (or third method, if necessary) automatically. For example, if the TACACS+ server is reachable, but the server key is invalid, FTOS proceeds to the next authentication method. The
TACACS+ is incorrect, but the user is still authenticated by the secondary method.
920 | Security
Related
Commands
After configuring the
command, configure the login authentication command
to enable the authentication scheme on terminal lines.
Connections to the SSH server will work with the following login mechanisms: local, radius and tacacs.
Apply an authentication method list to designated terminal lines.
Create a password.
Specify a RADIUS server host.
Specify a TACACS+ server host.
access-class c e s Restrict incoming connections to a particular IP address in a defined IP access control list (ACL).
Syntax access-class access-list-name
To delete a setting, use the no access-class command.
Parameters access-list-name Enter the name of an established IP Standard ACL.
Defaults
Command Modes
Command
History
Not configured.
LINE
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series
Related
Commands
Apply an authentication method list to designated terminal lines.
Name (or select) a standard access list to filter based on IP address.
Name (or select) an extended access list based on IP addresses or protocols.
enable password c e s Change the password for the
Syntax enable password [ level level ] [ encryption-type ] password
To delete a password, use the no enable password [ encryption-type ] password [ level level ] command.
Security | 921
Parameters
Defaults
Command Modes
Command
History level level encryption-type password
(OPTIONAL) Enter the keyword level followed by a number as the level of access.
Range: 1 to 15
(OPTIONAL) Enter the number 7 or 0 as the encryption type.
Enter a 7 followed by a text string as the hidden password. The text string must be a password that was already encrypted by a Force10 Networks router.
Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router.
Enter a text string, up to 32 characters long, as the clear text password.
No password is configured. level = 15
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Passwords must meet the following criteria:
• Start with a letter, not a number.
• Passwords can have a regular expression as the password. To create a password with a regular expression in it, you must use CNTL + v prior to entering regular expression. For example, to create the password abcd]e , you type “ abcd CNTL v ]e ”. When the password is created, you do not use the CNTL + v key combination and enter “ abcd]e ”.
Note: The question mark (?) and the tilde (~) are not supported characters.
Related
Commands
privilege level (CONFIGURATION mode)
View the current configuration.
Control access to command modes within the switch.
enable restricted c e s Allows Dell Networking technical support to access restricted commands.
Syntax enable restricted [ encryption-type ] password
To disallow access to restricted commands, enter no enable restricted .
922 | Security
Parameters encryption-type (OPTIONAL) Enter the number 7 as the encryption type.
Enter 7 followed a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Networking router.
Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router.
Enter a text string, up to 32 characters long, as the clear text password.
Command Modes
Command
History password
Not configured.
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Only Dell Networking Technical Support staff use this command. enable secret c e s Change the password for the
Syntax enable secret [ level level ] [ encryption-type ] password
To delete a password, use the no enable secret [ encryption-type ] password [ level level ] command.
Parameters level level encryption-type password
(OPTIONAL) Enter the keyword level followed by a number as the level of access.
Range: 1 to 15
(OPTIONAL) Enter the number 5 or 0 as the encryption type.
Enter a 5 followed a text string as the hidden password. The text string must be a password that was already encrypted by a Dell Networking router.
Use this parameter only with a password that you copied from the show running-config file of another Dell Networking router.
Enter a text string, up to 32 characters long, as the clear text password.
Defaults
Command Modes
Command
History
No password is configured. level = 15
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Usage
Information
Security | 923
Passwords must meet the following criteria:
• Start with a letter, not a number.
• Passwords can have a regular expression as the password. To create a password with a regular expression in it, you must use CNTL + v prior to entering regular expression. For example, to create the password abcd]e , you type abcd CNTL v ]e and when the password is created, you do not use the CNTL + v key combination and enter abcd]e .
Note: The question mark (?) and the tilde (~) are not supported characters.
Related
Commands
privilege level (CONFIGURATION mode)
View the current configuration.
Control access to command modes within the E-Series.
login authentication c e s Apply an authentication method list to designated terminal lines.
Syntax login authentication { method-list-name | default }
To use the local user/password database for login authentication, enter no login authentication .
Parameters method-list-name default
Enter the method-list-name
to specify that method list, created in the aaa authentication login
command, to be applied to the designated terminal line.
Enter the keyword default to specify that the default method list, created in the
aaa authentication login command, is applied to the terminal line.
Defaults
Command Modes
No authentication is performed on the console lines, and local authentication is performed on the virtual terminal and auxiliary lines.
LINE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series
Usage
Information
Related
Commands
If you configure the
default
command, then the login authentication
default command automatically is applied to all terminal lines.
Select login authentication methods.
password c e s Specify a password for users on terminal lines.
Syntax password [ encryption-type ] password
To delete a password, use the no password password command.
924 | Security
Parameters
Defaults
Command Modes
Command
History encryption-type password
(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the password entered. The options are:
• 0 is the default and means the password is not encrypted and stored as clear text.
• 7 means that the password is encrypted and hidden.
Enter a text string up to 32 characters long. The first character of the password must be a letter.
You cannot use spaces in the password.
No password is configured.
LINE
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Usage
Information
Related
Commands
FTOS prompts users for these passwords when the method for authentication or authorization used is
“line”.
Set the password for the enable command.
Configure an authentication method to log in to the switch.
Encrypt all passwords configured in FTOS.
Configure a key for all RADIUS communications between the switch and the
RADIUS host server.
Configure a key for communication between a TACACS+ server and client.
Establish an authentication system based on user names. password-attributes c e s Configure the password attributes (strong password).
Syntax password-attributes [ min-length number ] [ max-retry number ] [ character-restriction [ upper number ] [ lower number ] [ numeric number ] [ special-char number ]]
To return to the default, use the no password-attributes [ min-length number ] [ max-retry number ]
[ character-restriction [ upper number ] [ lower number ] [ numeric number ] [ special-char number ]] command.
Parameters min-length number max-retry number character-restriction
(OPTIONAL) Enter the keyword min-length followed by the number of characters.
Range: 0 - 32 characters
(OPTIONAL) Enter the keyword max-retry followed by the number of maximum password retries.
Range: 0 - 16
(OPTIONAL) Enter the keyword character-restriction to indicate a character restriction for the password.
Security | 925
upper lower number number numeric number special-char number
(OPTIONAL) Enter the keyword upper followed the upper number.
Range: 0 - 31
(OPTIONAL) Enter the keyword lower followed the lower number.
Range: 0 - 31
(OPTIONAL) Enter the keyword numeric followed the numeric number.
Range: 0 - 31
(OPTIONAL) Enter the keyword special-char followed the number of special characters permitted.
Range: 0 - 31
Defaults
Command Modes
Command
History
No default values or behavior
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced
Related
Commands
Specify a password for users on terminal lines.
service password-encryption c e s Encrypt all passwords configured in FTOS.
Syntax service password-encryption
To store new passwords as clear text, enter no service password-encryption .
Defaults Enabled.
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Caution: Encrypting passwords with this command does not provide a high level of security. When the passwords are encrypted, you cannot return them to plain text unless you re-configure them. To remove an encrypted password, use the no password password command.
Usage
Information
command. This command encrypts the clear-text passwords created for user name passwords, authentication key passwords, the privileged command password, and console and virtual terminal line access passwords.
926 | Security
To view passwords, use the show running-config command.
show privilege c e s View your access level.
Syntax
Command Modes show privilege
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Example Figure 35-3.
show privilege Command Output
FTOS#show privilege
Current privilege level is 15
FTOS#
Related
Commands
privilege level (CONFIGURATION mode)
Assign access control to different command modes.
show users c e s View information on all users logged into the switch.
Syntax show users [ all ]
Parameters all (OPTIONAL) Enter the keyword all to view all terminal lines in the switch.
EXEC Privilege Command Modes
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Figure 35-4.
show users Command Example
FTOS#show user
Line User Host(s) Location
0 console 0 admin idle
* 3 vty 1 admin idle 172.31.1.4
FTOS#
Security | 927
Table 1 describes the information in the
show users command example.
Table 1 show users Command Example Fields
Field
(untitled)
Line
User
Host(s)
Location
Description
Indicates with a * which terminal line you are using.
Displays the terminal lines currently in use.
Displays the user name of all users logged in.
Displays the terminal line status.
Displays the IP address of the user.
Related
Commands
Enable a user.
timeout login response c e s Specify how long the software will wait for login input (for example, user name and password) before timing out.
Syntax timeout login response seconds
To return to the default values, enter no timeout login response .
Parameters seconds Enter a number of seconds the software will wait before logging you out.
Range: 1 to 300.
Default: 300 seconds.
Defaults
Command Modes seconds = 300 seconds
LINE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Usage
Information
The software measures the period of inactivity defined in this command as the period between consecutive keystrokes. For example, if your password is “password” you can enter “p” and wait 29 seconds to enter the next letter.
928 | Security
username c e s Establish an authentication system based on user names.
Syntax username name [ access-class access-list-name ] [ nopassword | { password | secret }
[ encryption-type ] password ] [ privilege level ]
If you do not want a specific user to enter a password, use the nopassword option.
To delete authentication for a user, use the no username name command.
Parameters name Enter a text string for the name of the user up to 63 characters.
access-class access-list-name nopassword password secret encryption-type password privilege level secret
Note: If the entered username is longer than 16 characters, the BSD username and password are not created. This is a BSD limitation, not an FTOS limitation. FTOS supports up to 63 characters for the username and password.
Enter the keyword access-class followed by the name of a configured access control list (either a IP access control list or MAC access control list).
Enter the keyword nopassword to specify that the user should not enter a password.
Enter the keyword password followed by the encryption-type or the password.
Enter the keyword secret followed by the encryption-type or the password.
Enter an encryption type for the password that you will enter.
• 0 directs FTOS to store the password as clear text. It is the default encryption type when using the password option.
• 7 to indicate that a password ecrypted using a DES hashing algorithm will follow. This encryption type is available with the password option only.
• 5 to indicate that a password ecrypted using an MD5 hashing algorithm will follow. This encryption type is available with the secret option only, and is the default encryption type for this option.
Enter a string up to 32 characters long.
Enter the keyword privilege followed by a number from zero (0) to 15.
Enter the keyword secret followed by the encryption type.
Defaults The default encryption type for the password option is 0. The default encryption type for the secret option is 5.
CONFIGURATION Command Modes
Command
History
Usage
Information
Version 8.3.3.4
Version 8.3.3.1
Version 7.7.1.0
Enhanced BSD encryption
Introduced on S60
Added BSD encryption to MD5 passwords
Added support for secret option and MD5 password encryption. Extended name from 25 characters to 63.
Introduced for S-Series Version 7.6.1.0
Version 7.5.1.0
Introduced for C-Series
E-Series original Command
To view the defined user names, use the
user command.
Security | 929
When creating a username and secret password, a new userID is also created: bsd-username . This additional username and password is automatically created on all systems, but is applicable to the
Automations features SmartScripts and HyperLink (still in Beta phase).
When you create a username and secret password (for example, username qsmythe secret q12lmo) , the system creates bsd-username qsmyth secret random-password . The random password is assigned by the system for BSD shell access for the automation features. When you show your configuration, both passwords appear.
FTOS#: show run
.
.
.
username <username> secret 5 <password> bsd-username <username> secret <password>
.
.
FTOS#
When you save the configuration, and reload the system, both new passwords are applied to the configuration. If you downgrade to a release prior to FTOS 8.3.3.4, the BSD username and password are removed from the configuration.
The BSD username is created when you enter a new username in the CLI. It is not created from a pre- existing username. Following an upgrade to FTOS 8.3.3.3, you must enter a new (or re-enter the old) username and password to get the BSD username.
Note: If the entered username is longer than 16 characters, the BSD username and password are not created. This is a BSD limitation, not an FTOS limitation. FTOS supports up to 63 characters for the username and password.
Related
Commands
Specify a password for users on terminal lines.
View the current configuration.
RADIUS Commands
The RADIUS commands supported by FTOS. are:
•
•
•
•
•
•
•
930 | Security
debug radius c e s View RADIUS transactions to assist with troubleshooting.
Syntax debug radius
To disable debugging of RADIUS, enter no debug radius .
Defaults Disabled.
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced on E-Series ip radius source-interface c e s Specify an interface’s IP address as the source IP address for RADIUS connections.
Syntax
Parameters ip radius source-interface interface
To delete a source interface, enter no ip radius source-interface .
interface Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from zero (0) to 16838.
• For the Null interface, enter the keywords null 0 .
• For the Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Mode
Command
History
Not configured.
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced on E-Series
Security | 931
radius-server deadtime c e s Configure a time interval during which non-responsive RADIUS servers to authentication requests are skipped.
Syntax radius-server deadtime seconds
To disable this function or return to the default value, enter no radius-server deadtime .
Parameters seconds Enter a number of seconds during which non-responsive RADIUS servers are skipped.
Range: 0 to 2147483647 seconds.
Default: 0 seconds.
Defaults
Command Modes
0 seconds
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series radius-server host c e s Configure a RADIUS server host.
Syntax radius-server host { hostname | ip-address } [ auth-port port-number ] [ retransmit retries ]
[ timeout seconds ] [ key [ encryption-type ] key ]
To delete a RADIUS server host or return to the default values, use the no radius-server host
{ hostname | ip-address } [ auth-port ] [ retransmit ] [ timeout ] command.
Parameters hostname ip-address auth-port port-number retransmit retries
Enter the name of the RADIUS server host.
Enter the IP address, in dotted decimal format, of the RADIUS server host.
(OPTIONAL) Enter the keyword auth-port followed by a number as the port number.
Range: zero (0) to 65535
The default port-number is 1812.
(OPTIONAL) Enter the keyword retransmit followed by a number as
the number of attempts. This parameter overwrites the radius-server retransmit command.
Range: zero (0) to 100
Default: 3 attempts
932 | Security
timeout key [ seconds encryption-type ] key
(OPTIONAL) Enter the keyword timeout followed by the seconds the time interval the switch waits for a reply from the RADIUS server. This
parameter overwrites the radius-server timeout
command.
Range: 0 to 1000
Default: 5 seconds
(OPTIONAL) Enter the keyword key followed by an optional encryption-type and a string up to 42 characters long as the authentication key. This authentication key is used by the RADIUS host server and the RADIUS daemon operating on this switch.
For the encryption-type, enter either zero (0) or 7 as the encryption type for the key entered. The options are:
• 0 is the default and means the password is not encrypted and stored as clear text.
• 7 means that the password is encrypted and hidden.
Configure this parameter last because leading spaces are ignored.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Authentication key length increased to 42 characters
Support added for S-Series
Support added for C-Series
Introduced on E-Series
Configure up to six RADIUS server hosts by using this command for each server host configured.
FTOS searches for the RADIUS hosts in the order they are configured in the software.
The global default values for timeout, retransmit, and key optional parameters are applied, unless those values are specified in the
radius-server host or other commands. If you configure timeout, retransmit,
or key values, you must include those keywords when entering the
command syntax to return to the global default values.
Set the database to be checked when a user logs in.
Set a authentication key for RADIUS communications.
Set the number of times the RADIUS server will attempt to send information.
Set the time interval before the RADIUS server times out.
radius-server key c e s Configure a key for all RADIUS communications between the switch and the RADIUS host server.
Syntax radius-server key [ encryption-type ] key
To delete a password, enter no radius-server key .
Security | 933
Parameters encryption-type key
(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered.
The options are:
• 0 is the default and means the key is not encrypted and stored as clear text.
• 7 means that the key is encrypted and hidden.
Enter a string that is the key to be exchanged between the switch and RADIUS servers. It can be up to 42 characters long.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Authentication key length increased to 42 characters
Support added for S-Series
Support added for C-Series
Introduced on E-Series
The key configured on the switch must match the key configured on the RADIUS server daemon.
If the key parameter in the
radius-server host command is configured, the key configured with the
command is the default key for all RADIUS communications.
Configure a RADIUS host.
radius-server retransmit c e s Configure the number of times the switch attempts to connect with the configured RADIUS host server before declaring the RADIUS host server unreachable.
Syntax radius-server retransmit retries
Parameters
To configure zero retransmit attempts, enter no radius-server retransmit . To return to the default setting, enter radius-server retransmit 3 .
retries Enter a number of attempts that FTOS tries to locate a RADIUS server.
Range: zero (0) to 100.
Default: 3 retries.
Defaults
Command Modes
Command
History
3 retries
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced on E-Series
934 | Security
Related
Commands
Configure a RADIUS host.
radius-server timeout c e s Configure the amount of time the RADIUS client (the switch) waits for a RADIUS host server to reply to a request.
Syntax radius-server timeout seconds
To return to the default value, enter no radius-server timeout .
Parameters seconds Enter the number of seconds between an unsuccessful attempt and the FTOS times out.
Range: zero (0) to 1000 seconds.
Default: 5 seconds.
Defaults
Command Modes
5 seconds
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced on E-Series
Related
Commands
Configure a RADIUS host.
TACACS+ Commands
FTOS supports TACACS+ as an alternate method for login authentication.
•
•
•
•
debug tacacs+ c e s View TACACS+ transactions to assist with troubleshooting.
Syntax debug tacacs+
To disable debugging of TACACS+, enter no debug tacacs+ .
Defaults Disabled.
Security | 935
Command Modes
Command
History
EXEC Privilege
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series ip tacacs source-interface c e s Specify an interface’s IP address as the source IP address for TACACS+ connections.
Syntax ip tacacs source-interface interface
To delete a source interface, enter no ip tacacs source-interface .
Parameters interface Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from zero (0) to 16838.
• For the Null interface, enter the keywords null 0 .
• For the Port Channel interface, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to
4094.
Defaults
Command Mode
Command
History
Not configured.
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series
936 | Security
tacacs-server host c e s Specify a TACACS+ host.
Syntax tacacs-server host { hostname | ip-address } [ port number ] [ timeout seconds ] [ key key ]
To remove a TACACS+ server host, use the no tacacs-server host { hostname | ip-address } command.
Parameters hostname ip-address port number timeout seconds key key
Enter the name of the TACACS+ server host.
Enter the IP address, in dotted decimal format, of the TACACS+ server host.
(OPTIONAL) Enter the keyword port followed by a number as the port to be used by the TACACS+ server.
Range: zero (0) to 65535
Default: 49
(OPTIONAL) Enter the keyword timeout followed by the number of seconds the switch waits for a reply from the TACACS+ server.
Range: 0 to 1000
Default: 10 seconds
(OPTIONAL) Enter the keyword key followed by a string up to 42 characters long as the authentication key. This authentication key must match the key
specified in the tacacs-server key
for the TACACS+ daemon.
Configure this parameter last because leading spaces are ignored.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Authentication key length increased to 42 characters
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series
To list multiple TACACS+ servers to be used by the aaa authentication login
command, configure this command multiple times.
If you are not configuring the switch as a TACACS+ server, you do not need to configure the port, timeout and key optional parameters. If you do not configure a key, the key assigned in the
tacacs-server key command is used.
Related
Commands
Specify the login authentication method.
Configure a TACACS+ key for the TACACS server.
Security | 937
tacacs-server key c e s Configure a key for communication between a TACACS+ server and client.
Syntax tacacs-server key [ encryption-type ] key
To delete a key, use the no tacacs-server key key
Parameters encryption-type key
(OPTIONAL) Enter either zero (0) or 7 as the encryption type for the key entered.
The options are:
• 0 is the default and means the key is not encrypted and stored as clear text.
• 7 means that the key is encrypted and hidden.
Enter a text string, up to 42 characters long, as the clear text password.
Leading spaces are ignored.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Authentication key length increased to 42 characters
Introduced for S-Series
Introduced for C-Series
Introduced on E-Series
The key configured with this command must match the key configured on the TACACS+ daemon.
Port Authentication (802.1X) Commands
The 802.1X Port Authentication commands are:
•
dot1x authentication (Configuration)
•
dot1x authentication (Interface)
•
•
•
•
•
•
•
•
•
•
•
•
938 | Security
An authentication server must authenticate a client connected to an 802.1X switch port. Until the authentication, only EAPOL (Extensible Authentication Protocol over LAN) traffic is allowed through the port to which a client is connected. Once authentication is successful, normal traffic passes through the port.
FTOS supports RADIUS and Active Directory environments using 802.1X Port Authentication.
Important Points to Remember
FTOS limits network access for certain users by using VLAN assignments. 802.1X with VLAN assignment has these characteristics when configured on the switch and the RADIUS server.
• 802.1X is supported on C-Series, E-Series, and S-Series.
• 802.1X is not supported on the LAG or the channel members of a LAG.
• If no VLAN is supplied by the RADIUS server or if 802.1X authorization is disabled, the port is configured in its access VLAN after successful authentication.
• If 802.1X authorization is enabled but the VLAN information from the RADIUS server is not valid, the port returns to the unauthorized state and remains in the configured access VLAN. This prevents ports from appearing unexpectedly in an inappropriate VLAN due to a configuration error. Configuration errors create an entry in Syslog.
• If 802.1X authorization is enabled and all information from the RADIUS server is valid, the port is placed in the specified VLAN after authentication.
• If port security is enabled on an 802.1X port with VLAN assignment, the port is placed in the
RADIUS server assigned VLAN.
• If 802.1X is disabled on the port, it is returned to the configured access VLAN.
• When the port is in the force authorized, force unauthorized, or shutdown state, it is placed in the configured access VLAN.
• If an 802.1X port is authenticated and put in the RADIUS server assigned VLAN, any change to the port access VLAN configuration will not take effect.
• The 802.1X with VLAN assignment feature is not supported on trunk ports, dynamic ports, or with dynamic-access port assignment through a VLAN membership.
dot1x authentication (Configuration) c e s Enable dot1x globally; dot1x must be enabled both globally and at the interface level.
Syntax dot1x authentication
To disable dot1x on an globally, use the no dot1x authentication command.
Defaults
Command Modes
Disabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series
Related
Commands
dot1x authentication (Interface)
Enable dot1x on an interface
Security | 939
dot1x authentication (Interface) c e s Enable dot1x on an interface; dot1x must be enabled both globally and at the interface level.
Syntax dot1x authentication
To disable dot1x on an interface, use the no dot1x authentication command.
Defaults Disabled
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series
Related
Commands
dot1x authentication (Configuration)
Enable dot1x globally dot1x auth-fail-vlan c e s Configure a authentication failure VLAN for users and devices that fail 802.1X authentication.
Syntax dot1x auth-fail-vlan vlan-id [ max-attempts number ]
To delete the authentication failure VLAN, use the no dot1x auth-fail-vlan vlan-id [ max-attempts number ] command.
Parameters vlan-id max-attempts number
Enter the VLAN Identifier.
Range: 1 to 4094
(OPTIONAL) Enter the keyword max-attempts followed number of attempts desired before authentication fails.
Range: 1 to 5
Default: 3
Defaults
Command Modes
3 attempts
CONFIGURATION (conf-ifinterface slot/port )
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on C-Series, E-Series and S-Series
Usage
Information
Related
Commands
If the host responds to 802.1X with an incorrect login/password, the login fails. The switch will attempt to authenticate again until the maximum attempts configured is reached. If the authentication fails after all allowed attempts, the interface is moved to the authentication failed VLAN.
Once the authentication VLAN is assigned, the port-state must be toggled to restart authentication.
Authentication will occur at the next re-authentication interval ( dot1x reauthentication ).
Enable port-control on an interface
940 | Security
Configure a guest VLAN for non-dot1x devices
Display the 802.1X information on an interface dot1x auth-server c e s Configure the authentication server to RADIUS.
Syntax
Defaults dot1x auth-server radius
No default behavior or values
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series dot1x guest-vlan c e s Configure a guest VLAN for limited access users or for devices that are not 802.1X capable.
Syntax dot1x guest-vlan vlan-id
To disable the guest VLAN, use the no dot1x guest-vlan vlan-id command.
Parameters vlan-id Enter the VLAN Identifier.
Range: 1 to 4094
Defaults
Command Modes
Command
History
Not configured
CONFIGURATION (conf-ifinterface slot/port )
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on C-Series, E-Series, and S-Series
802.1X authentication is enabled when an interface is connected to the switch. If the host fails to respond within a designated amount of time, the authenticator places the port in the guest VLAN.
If a device does not respond within 30 seconds, it is assumed that the device is not 802.1X capable.
Therefore, a guest VLAN is allocated to the interface and authentication, for the device, will occur at
the next re-authentication interval ( dot1x reauthentication
).
If the host fails authentication for the designated amount of times, the authenticator places the port in
authentication failed VLAN ( dot1x auth-fail-vlan ).
Note: Layer 3 portion of guest VLAN and authentication fail VLANs can be created regardless if the VLAN is assigned to an interface or not. Once an interface is assigned a guest
VLAN (which has an IP address), then routing through the guest VLAN is the same as any other traffic. However, interface may join/leave a VLAN dynamically.
Security | 941
Related
Commands
Configure a VLAN for authentication failures
Enable periodic re-authentication
Display the 802.1X information on an interface dot1x max-eap-req c e s Configure the maximum number of times an EAP (Extensive Authentication Protocol) request is transmitted before the session times out.
Syntax dot1x max-eap-req number
To return to the default, use the no dot1x max-eap-req command.
Parameters number Enter the number of times an EAP request is transmitted before a session time-out.
Range: 1 to 10
Default: 2
Defaults
Command Modes
2
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series
Related
Commands
Configure a range of interfaces dot1x port-control c e s Enable port control on an interface.
Syntax dot1x port-control { force-authorized | auto | force-unauthorized }
Parameters force-authorized auto force-unauthorized
Enter the keyword force-authorized to forcibly authorize a port.
Enter the keyword auto to authorize a port based on the 802.1X operation result.
Enter the keyword force-unauthorized to forcibly de-authorize a port.
Defaults
Command Modes
Command
History
No default behavior or values
INTERFACE
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series
942 | Security
Usage
Information
The authenticator performs authentication only when port-control is set to auto .
dot1x quiet-period c e s Set the number of seconds that the authenticator remains quiet after a failed authentication with a client.
Syntax dot1x quiet-period seconds
To disable quiet time, use the no dot1x quiet-time command.
Parameters seconds Enter the number of seconds.
Range: 1 to 65535
Default: 30
Defaults
Command Modes
Command
History
30 seconds
INTERFACE
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series dot1x reauthentication c e s Enable periodic re-authentication of the client.
Syntax dot1x reauthentication [ interval seconds ]
To disable periodic re-authentication, use the no dot1x reauthentication command.
Parameters interval seconds (Optional) Enter the keyword interval followed by the interval time, in seconds, after which re-authentication will be initiated.
Range: 1 to 31536000 (1 year)
Default: 3600 (1 hour)
Defaults
Command Modes
3600 seconds (1 hour)
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series
Related
Commands
Configure a range of interfaces
Security | 943
dot1x reauth-max c e s Configure the maximum number of times a port can re-authenticate before the port becomes unauthorized.
Syntax dot1x reauth-max number
To return to the default, use the no dot1x reauth-max command.
Parameters number Enter the permitted number of re-authentications.
Range: 1 - 10
Default: 2
Defaults
Command Modes
Command
History
2
INTERFACE
Version 7.6.1.0
Version 7.4.1.0
Introduced on C-Series and S-Series
Introduced on E-Series dot1x server-timeout c e s Configure the amount of time after which exchanges with the server time out.
Syntax dot1x server-timeout seconds
To return to the default, use the no dot1x server-timeout command.
Parameters seconds Enter a time-out value in seconds.
Range: 1 to 300, where 300 is implementation dependant.
Default: 30
Defaults
Command Modes
Command
History
30 seconds
INTERFACE
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series dot1x supplicant-timeout c e s Configure the amount of time after which exchanges with the supplicant time out.
Syntax dot1x supplicant-timeout seconds
To return to the default, use the no dot1x supplicant-timeout command.
944 | Security
Parameters seconds Enter a time-out value in seconds.
Range: 1 to 300, where 300 is implementation dependant.
Default: 30
Defaults
Command Modes
Command
History
30 seconds
INTERFACE
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series dot1x tx-period c e s Configure the intervals at which EAPOL PDUs are transmitted by the Authenticator PAE.
Syntax dot1x tx-period seconds
To return to the default, use the no dot1x tx-period command.
Parameters seconds Enter the interval time, in seconds, that EAPOL PDUs are transmitted.
Range: 1 to 31536000 (1 year)
Default: 30
Defaults
Command Modes
30 seconds
INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduced on C-Series and S-Series
Introduced on E-Series show dot1x interface c e s Display the 802.1X information on an interface.
Syntax show dot1x interface interface
Parameters interface Enter one of the following keywords and slot/port or number information:
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/ port information.
• For a Ten Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Defaults No default values or behavior
Security | 945
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on C-Series, E-Series, and S-Series
Figure 35-5.
show dot1x interface command Example
FTOS#show dot1x int Gi 2/32
802.1x information on Gi 2/32:
-----------------------------
Dot1x Status: Enable
Port Control: AUTO
Port Auth Status: UNAUTHORIZED
Re-Authentication: Disable
Untagged VLAN id: None
Guest VLAN: Enable
Guest VLAN id: 10
Auth-Fail VLAN: Enable
Auth-Fail VLAN id: 11
Auth-Fail Max-Attempts: 3
Tx Period: 30 seconds
Quiet Period: 60 seconds
ReAuth Max: 2
Supplicant Timeout: 30 seconds
Server Timeout: 30 seconds
Re-Auth Interval: 3600 seconds
Max-EAP-Req: 2
Auth Type: SINGLE_HOST
Auth PAE State: Initialize
Backend State: Initialize
FTOS#
SSH Server and SCP Commands
FTOS supports SSH Protocol versions 1.5 and 2.0. Secure Shell (SSH) is a protocol for secure remote login over an insecure network. SSH sessions are encrypted and use authentication.
•
•
•
•
•
•
ip ssh hostbased-authentication
•
•
ip ssh password-authentication
•
•
•
ip ssh rsa-authentication (Config)
•
ip ssh rsa-authentication (EXEC)
•
•
•
946 | Security
•
•
show ip ssh rsa-authentication
•
crypto key generate c e s Generate keys for the SSH server.
Syntax crypto key generate { rsa | rsa1 }
Parameters rsa rsa1
Enter the keyword rsa followed by the key size to generate a SSHv2 RSA host keys.
Range: 1024 to 2048
Default: 1024
Enter the keyword rsa1 followed by the key size to generate a SSHv1 RSA host keys.
Range: 1024 to 2048
Default: 1024
Defaults
Command Modes
Command
History
Key size 1024
CONFIGURATION
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Figure 35-6.
crypto key generate rsa1 command example
FTOS#conf
FTOS(conf)#crypto key generate rsa1
Enter key size <1024-2048>. Default<1024>: 1024
Host key already exists. Do you want to replace. [y/n] :y
FTOS(conf)#
Usage
Information
The host keys are required for key-exchange by the SSH server. If the keys are not found when the server is enabled ( ip ssh server enable ), the keys are automatically generated.
This command requires user interaction and will generate a prompt prior to overwriting any existing host keys.
Note: Only a user with superuser permissions should generate host-keys.
Related
Commands
Enable the SSH server.
Display SSH host public keys
Security | 947
debug ip ssh c e s Enables collecting SSH debug information.
Syntax debug ip ssh { client | server }
To disable debugging, use the no debug ip ssh { client | server } command.
Parameters client server
Enter the keyword client to enable collecting debug information on the client.
Enter the keyword server to enable collecting debug information on the server.
Defaults
Command Modes
Command
History
Disabled on both client and server
EXEC
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Usage
Information
Debug information includes details for key-exchange, authentication, and established session for each connection.
ip scp topdir c e s Identify a location for files used in secure copy transfer.
Syntax ip scp topdir directory
To return to the default setting, enter no ip scp topdir command.
Parameters directory Enter a directory name.
Defaults
Command Modes
Command
History
The internal flash ( flash: ) is the default directory.
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Usage
Information
Related
Commands
To configure the switch as a SCP server, use the ip ssh server ip ssh server
command.
Enable SSH and SCP server on the switch.
948 | Security
ip ssh authentication-retries c e s Configure the maximum number of attempts that should be used to authenticate a user.
Syntax ip ssh authentication-retries 1-10
Parameters
1-10 Enter the number of maximum retries to authenticate a user.
Range: 1 to 10
Default: 3
Defaults
Command Modes
3
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Usage
Information
This command specifies the maximum number of attempts to authenticate a user on a SSH connection with the remote host for password authentication. SSH will disconnect when the number of password failures exceeds authentication-retries.
ip ssh connection-rate-limit c e s Configure the maximum number of incoming SSH connections per minute.
Syntax ip ssh connection-rate-limit 1-10
Parameters
1-10 Enter the number of maximum number of incoming SSH connections allowed per minute.
Range: 1 to 10 per minute
Default: 10 per minute
Defaults
Command Modes
10 per minute
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Security | 949
ip ssh hostbased-authentication c e s Enable hostbased-authentication for the SSHv2 server.
Syntax ip ssh hostbased-authentication enable
To disable hostbased-authentication for SSHv2 server, use the no ip ssh hostbased-authentication enable command.
Parameters enable Enter the keyword enable to enable hostbased-authentication for SSHv2 server.
Defaults
Command Modes
Command
History
Disable by default
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
If this command is enabled, clients can login without a password prompt. This provides two levels of authentication:
• rhost-authentication is done with the file specified in the ip ssh rhostfile command
• checking client host-keys is done with the file specified in the ip ssh pub-key-file command
If no ip ssh rsa-authentication enable is executed, host-based authentication is disabled.
Note: Administrators must specify the two files (rhosts and pub-key-file) to configure host-based authentication.
Related
Commands
Public keys of trusted hosts from a file.
Trusted hosts and users for rhost authentication.
ip ssh key-size c e s Configure the size of the server-generated RSA SSHv1 key.
Syntax ip ssh key-size 512-869
Parameters
512-869 Enter the key-size number for the server-generated RSA SSHv1 key.
Range: 512 to 869
Default: 768
Defaults
Command Modes
Command
History
Key size 768
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced for S-Series
950 | Security
Usage
Information
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced for C-Series
Introduced for E-Series
The server-generated key is used for SSHv1 key-exchange.
ip ssh password-authentication c e s Enable password authentication for the SSH server.
Syntax ip ssh password-authentication enable
To disable password-authentication, use the no ip ssh password-authentication enable .
Parameters enable Enter the keyword enable to enable password-authentication for the SSH server.
Defaults
Command Modes
Command
History enabled
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
With password authentication enabled, users can authenticate using local, RADIUS, or TACACS+ password fallback order as configured.
ip ssh pub-key-file c e s Specify the file to be used for host-based authentication.
Syntax ip ssh pub-key-file { WORD }
Parameters
WORD Enter the file name for the host-based authentication.
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Security | 951
Example Figure 35-7.
ip ssh pub-key-file Command Example
FTOS#conf
FTOS(conf)# ip ssh pub-key-file flash://knownhosts
FTOS(conf)#
Usage
Information
This command specifies the file to be used for the host-based authentication. The file creates/ overwrites the file flash://ADMIN_DIR/ssh/knownhosts and deletes the user specified file. Even though this is a global configuration command, it will not appear in the running configuration since this command needs to be run just once.
The file contains the OpenSSH compatible public keys of the host for which host-based authentication is allowed. An example known host file format: poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/
QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui+DWEc3cgYAcU5Lai1MU2ODrzhCwyDNp05tKBU3t
ReG1o8AxLi6+S4hyEMqHzkzBFNVqHzpQc+Rs4p2urzV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNxPDpEn
WIMPJi0ds= ashwani@poclab4
Note: For rhostfile and pub-key-file , the administrator must FTP the file to the chassis.
Related
Commands
Display the client-public keys used for the host-based authentication.
ip ssh rhostsfile c e s Specify the rhost file to be used for host-based authorization.
Syntax ip ssh rhostsfile { WORD }
Parameters
WORD Enter the rhost file name for the host-based authentication.
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Figure 35-8.
ip ssh rhostsfile Command Example
FTOS#conf
FTOS(conf)# ip ssh rhostsfile flash://shosts
FTOS(conf)#
Usage
Information
This command specifies the rhost file to be used for host-based authentication. This file creates/ overwrites the file flash:/ADMIN_DIR/ssh/shosts and deletes the user specified file. Even though this is a global configuration command, it will not appear in the running configuration since this command needs to be run just once.
952 | Security
This file contains hostnames and usernames, for which hosts and users, rhost-authentication can be allowed.
Note: For rhostfile and pub-key-file , the administrator must FTP the file to the switch.
ip ssh rsa-authentication (Config) c e s Enable RSA authentication for the SSHv2 server.
Syntax ip ssh rsa-authentication enable
To disable RSA authentication, use the no ip ssh rsa-authentication enable command.
Parameters enable Enter the keyword enable to enable RSA authentication for the SSHv2 server.
Defaults
Command Modes
RSA authentication is disabled by default
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Usage
Information
Related
Commands
Enabling RSA authentication allows the user to login without being prompted for a password. In addition, the OpenSSH compatible SSHv2 RSA public key must be added to the list of authorized keys
( ip ssh rsa-authentication my-authorized-keys device://filename command).
ip ssh rsa-authentication (EXEC)
Add keys for RSA authentication.
ip ssh rsa-authentication (EXEC) c e s Add keys for the RSA authentication.
Syntax ip ssh rsa-authentication { my-authorized-keys WORD }
To delete the authorized keys, use the no ip ssh rsa-authentication { my-authorized-keys } command.
Parameters my-authorized-keys WORD Enter the keyword my-authorized-keys followed by the file name of the RSA authorized-keys.
Defaults
Command Modes
Command
History
No default behavior or values
EXEC
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced for S-Series
Security | 953
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced for C-Series
Introduced for E-Series
Usage
Information
If you want to log in without being prompted for a password, log in through RSA authentication. To do that, you must first add the SSHv2 RSA public keys to the list of authorized keys. This command adds the specified RSA keys to the following file: flash://ADMIN_DIR/ssh/authorized-keys username (where username is the user associated with this terminal).
Note: The no form of this command deletes the file flash://ADMIN_DIR/ssh/ authorized-keysusername
Related
Commands
show ip ssh rsa-authentication
ip ssh rsa-authentication (Config)
Display RSA authorized keys.
Enable RSA authentication.
ip ssh server c e s Configure an SSH server.
Syntax ip ssh server {enable | port port-number } [ version { 1 | 2 }]
To disable SSH server functions, enter no ip ssh server enable command.
Parameters enable port port-number
[ version { 1 | 2 }]
Enter the key word enable to start the SSH server.
(OPTIONAL) Enter the keyword port followed by the port number of the listening port of the SSH server.
Range: 1 to 65535
Default: 22
(OPTIONAL) Enter the keyword version followed by the SSH version 1 or 2 to specify only SSHv1 or SSHv2.
Defaults
Command Modes
Default listening port is 22
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Expanded to include specifying SSHv1 or SSHv2; Introduced for C-Series
Introduced for E-Series
Usage
Information
Example
This command enables the SSH server and begins listening on a port. If a port is not specified, listening is on SSH default port 22.
Figure 35-9.
ip ssh server port Command Example
FTOS# conf
FTOS(conf)# ip ssh server port 45
FTOS(conf)# ip ssh server enable
FTOS#
954 | Security
Related
Commands
Display the ssh information show crypto c e s Display the public part of the SSH host-keys.
Syntax show crypto key mypubkey { rsa | rsa1 }
Parameters
Key mypubkey rsa rsa1
Enter the keyword key to display the host public key.
Enter the keyword mypubkey to display the host public key.
Enter the keyword rsa to display the host SSHv2 RSA public key.
Enter the keyword rsa1 to display the host SSHv1 RSA public key.
Defaults
Command Modes
Command
History
No default behavior or values
EXEC
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Example Figure 35-10.
show crypto Command Examples
FTOS#show crypto key mypubkey rsa ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAtzkZME/ e8V8smnXR22EJGQhCMkEOkuisa+OILVoMYU1ZKGfj0W5BPCSvF/ x5ifqYFFwUzJNOcsJK7vjSsnmMhChF2YSvXlvTJ6h971FJAQlOsgd0ycpocsF+DNLKfJnx7SAjhakFQMwG g/g78ZkDT3Ydr8KKjfSI4Bg/WS8B740=
FTOS#show crypto key mypubkey rsa1
1024 35
1310600154808733989532575153972496578500722064442949636740809356830889610203172266
7988956754966765265006379622189779927609278523638839223055081819166009928132616408
6643457746022192295189039929663345791173742247431553750501676929660273790601494434
050000015179864425629613385774919236081771341059533760063913083
FTOS#
Usage
Information
Related
Commands
This command is useful if the remote SSH client implements Strict Host Key Checking. You can copy the host key to your list of known hosts.
Generate SSH keys.
show ip ssh c e s Display information about established SSH sessions.
Syntax show ip ssh
Security | 955
Command Modes
Example
EXEC
EXEC Privilege
Figure 35-11.
show ip ssh Command Example
FTOS#show ip ssh
SSH server : enabled.
SSH server version : v1 and v2.
Password Authentication : enabled.
Hostbased Authentication : disabled.
RSA Authentication : disabled.
Vty Encryption Remote IP
0 3DES 172.16.1.162
1 3DES 172.16.1.162
2 3DES 172.16.1.162
FTOS
Related
Commands
Configure an SSH server.
Display the client-public keys.
show ip ssh client-pub-keys c e s Display the client public keys used in host-based authentication.
Syntax show ip ssh client-pub-keys
Defaults No default behavior or values
Command Modes EXEC
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Example Figure 35-12.
show ip ssh client-pub-keys Command Example
FTOS#show ip ssh client-pub-keys poclab4,123.12.1.123 ssh-rsa AAAAB3NzaC1yc2EAAAABIwAAAIEAox/
QQp8xYhzOxn07yh4VGPAoUfgKoieTHO9G4sNV+ui+DWEc3cgYAcU5Lai1MU2ODrzhCwyDNp05tKBU3tReG1 o8AxLi6+S4hyEMqHzkzBFNVqHzpQc+Rs4p2urzV0F4pRKnaXdHf3Lk4D460HZRhhVrxqeNxPDpEnWIMPJi0 ds= ashwani@poclab4
FTOS#
Usage
Information
Related
Commands
This command displays the contents of the file flash://ADMIN_DIRssh/knownhosts
Configure the file name for the host-based authentication
956 | Security
show ip ssh rsa-authentication c e s Display the authorized-keys for the RSA authentication.
Syntax show ip ssh rsa-authentication { my-authorized-keys }
Parameters my-authorized-keys Display the RSA authorized keys.
Defaults
Command Modes
Command
History
No default behavior or values
EXEC
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced for S-Series
Introduced for C-Series
Introduced for E-Series
Figure 35-13.
show ip ssh rsa-authentication Command Example
FTOS#show ip ssh rsa-authentication my-authorized-keys ssh-rsa
AAAAB3NzaC1yc2EAAAABIwAAAIEAyB17l4gFp4r2DRHIvMc1VZd0Sg5GQxRV1y1X1JOMeO6Nd0WuYyzrQMM
4qJAoBwtneOXfLBcHF3V2hcMIqaZN+CRCnw/ zCMlnCf0+qVTd1oofsea5r09kS0xTp0CNfHXZ3NuGCq9Ov33m9+U9tMwhS8vy8AVxdH4x4km3c3t5Jvc= freedom@poclab4
FTOS#
Usage
Information
Related
Commands
This command displays the contents of the file flash:/ADMIN_DIR/ssh/authorized-keys.
ip ssh rsa-authentication (Config)
Configure the RSA authorized keys.
username.
ssh c e s Open an SSH connection specifying the hostname, username, port number and version of the SSH client.
Syntax ssh { hostname | ipv4 address | ipv6 address } [ -l username | -p port-number | -v { 1 | 2 }]
Parameters hostname vrf instance ipv4 address ipv6-address prefix-length
-l username
(OPTIONAL) Enter the IP address or the hostname of the remote device.
(OPTIONAL) E-Series Only : Enter the keyword vrf following by the VRF
Instance name to open a SSH connection to that instance.
(OPTIONAL) Enter the IP address in dotted decimal format A.B.C.D.
(OPTIONAL) Enter the IPv6 address in the x:x:x:x::x format followed by the prefix length in the /x format.
Range: /0 to /128
Note: The :: notation specifies successive hexadecimal fields of zeros
(OPTIONAL) Enter the keyword -l followed by the user name used in this SSH session.
Default: The user name of the user associated with the terminal.
Security | 957
-p
-v port-number
{ 1 | 2 }
(OPTIONAL) Enter the keyword -p followed by the port number.
Range: 1 to 65536
Default: 22
(OPTIONAL) Enter the keyword -v followed by the SSH version 1 or 2.
Default: The version from the protocol negotiation
Defaults
Command Modes
Command
History
As above.
EXEC Privilege
Example
Version 8.3.3.1
Version 7.9.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Introduced VRF
Introduced for S-Series
Added IPv6 support; Introduced for C-Series
Introduced for E-Series
Figure 35-14.
ssh Command Example
FTOS#ssh 123.12.1.123 -l ashwani -p 5005 -v 2
Secure DHCP Commands
DHCP as defined by RFC 2131 provides no authentication or security mechanisms. Secure DHCP is a suite of features that protects networks that use dynamic address allocation from spoofing and attacks.
•
•
•
•
•
•
ip dhcp snooping database renew
•
•
ip dhcp source-address-validation
•
•
clear ip dhcp snooping c s Clear the DHCP binding table.
Syntax
Command Modes
Default clear ip dhcp snooping binding
EXEC Privilege
None
958 | Security
Command
History
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
Display the contents of the DHCP binding table.
ip dhcp relay c s Enable Option 82.
Syntax i p dhcp relay information-option [ trust-downstream ]
Parameters trust-downstream Configure the system to trust Option 82 when it is received from the previous-hop router.
Command Modes
Default
CONFIGURATION
Disabled
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series ip dhcp snooping c s Enable DHCP Snooping globally.
Syntax [ no ] ip dhcp snooping
Command Modes CONFIGURATION
Default Disabled
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
Usage
Information
When enabled, no learning takes place until snooping is enabled on a VLAN. Upon disabling DHCP
Snooping the binding table is deleted, and Option 82, IP Source Guard, and Dynamic ARP Inspection are disabled.
Related
Commands
Enable DHCP Snooping on one or more VLANs.
ip dhcp snooping database c s Delay writing the binding table for a specified time.
Syntax ip dhcp snooping database write-delay minutes
Security | 959
Parameters
Command Modes
Default
Command
History minutes
CONFIGURATION
None
Version 8.3.3.1
Version 7.8.1.0
Range: 5-21600
Introduced on S60
Introduced on C-Series and S-Series ip dhcp snooping binding c s Create a static entry in the DHCP binding table.
Syntax [ no ] ip dhcp snooping binding mac address vlan-id vlan-id ip ip-address interface type slot/ port lease number
Parameters mac address vlan-id vlan-id ip ip-address interface type slot/port lease time
Enter the keyword mac followed by the MAC address of the host to which the server is leasing the IP address.
Enter the keyword vlan-id followed by the VLAN to which the host belongs.
Range: 2-4094
Enter the keyword ip followed by the IP address that the server is leasing.
Enter the keyword interface followed by the type of interface to which the host is connected.
• For an 10/100 Ethernet interface, enter the keyword fastethernet .
• For a Gigabit Ethernet interface, enter the keyword gigabitethernet .
• For a SONET interface, enter the keyword sonet .
• For a Ten Gigabit Ethernet interface, enter the keyword tengigabitethernet .
Enter the slot and port number of the interface.
Enter the keyword lease followed by the amount of time the IP address will be leased.
Range: 1-4294967295
Command Modes
Default
EXEC
EXEC Privilege
None
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
Related
Commands
Display the contents of the DHCP binding table.
960 | Security
ip dhcp snooping database renew c s Renew the binding table.
Syntax
Command Modes ip dhcp snooping database renew
EXEC
Default
EXEC Privilege
None
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series ip dhcp snooping trust c s Configure an interface as trusted.
Syntax
Command Modes
Default
[ no ] ip dhcp snooping trust
INTERFACE
Untrusted
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series ip dhcp source-address-validation c s Enable IP Source Guard.
Syntax
Command Modes
Default
[ no ] ip dhcp source-address-validation
INTERFACE
Disabled
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series ip dhcp snooping vlan c s Enable DHCP Snooping on one or more VLANs.
Syntax [ no ] ip dhcp snooping vlan name
Security | 961
Parameters
Command Modes
Default
Command
History
Usage
Information
Related
Commands name
CONFIGURATION
Disabled
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
When enabled the system begins creating entries in the binding table for the specified VLAN(s). Note that learning only happens if there is a trusted port in the VLAN.
Enter the name of a VLAN on which to enable DHCP Snooping.
Configure an interface as trusted.
show ip dhcp snooping c s Display the contents of the DHCP binding table.
Syntax
Command Modes
Default show ip dhcp snooping binding
EXEC
EXEC Privilege
None
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on S60
Introduced on C-Series and S-Series
Related
Commands
Clear the contents of the DHCP binding table.
962 | Security
36
Service Provider Bridging
Overview
Service Provider Bridging is composed of VLAN Stacking, Layer 2 Protocol Tunneling, and Provider
Backbone Bridging as described in the FTOS Configuration Guide Service Provider Bridging chapter.
This chapter includes CLI information for FTOS Layer 2 Protocol Tunneling (L2PT). L2PT enables protocols to tunnel through an 802.1q tunnel. L2PT is available in FTOS for the C-Series c
, E-Series e
, and S-Series s
.
L2PT is supported on E-Series ExaScale e x
with FTOS 8.2.1.0. and later.
Refer to
or Chapter 41, Spanning Tree Protocol (STP)
for further information related to those features.
Commands
The L2PT commands are:
•
•
•
protocol-tunnel destination-mac
•
•
•
Important Points to Remember
• L2PT is enabled at the interface VLAN-Stack VLAN level. For details on Stackable VLAN
(VLAN-Stacking) commands, see Chapter 45, VLAN Stacking .
• The default behavior is to disable protocol packet tunneling through the 802.1q tunnel.
• Rate-limiting is required to protect against BPDU attacks.
• A port channel (including through LACP) can be configured as a VLAN-Stack access or trunk port.
• ARP packets work as expected across the tunnel.
• FEFD works the same as with Layer 2 links.
• Protocols that use Multicast MAC addresses (OSPF for example) work as expected and carry over to the other end of the VLAN-Stack VLAN.
Service Provider Bridging | 963
debug protocol-tunnel c e s Enable debugging to ensure incoming packets are received and rewritten to a new MAC address.
Syntax debug protocol-tunnel interface {in | out | both} [ vlan vlan-id ] [ count value ]
To disable debugging, use the no debug protocol-tunnel interface {in | out | both} [ vlan vlan-id ]
[ count value ] command.
Parameters interface Enter one of the following interfaces and slot/port information:
• For a Fast Ethernet interface, enter the keyword FastEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel interface types, enter the keyword port-channel followed by a number from 1 to 255 for TeraScale and ExaScale.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
in | out | both Enter the keyword in , out , or both to debug incoming interfaces, outgoing interfaces, or both incoming and outgoing interfaces. vlan vlan-id Enter
Range: 1 to 4094 vlan followed by the VLAN ID. count value Enter the keyword count followed by the number of debug outputs.
Range: 1 to 100
Defaults
Command Modes
Debug Disabled
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on S60
Introduced on the C-Series, E-Series and E-Series ExaScale.
Introduced protocol-tunnel c e s Enable protocol tunneling per VLAN-Stack VLAN.
Syntax protocol-tunnel stp
To disable protocol tunneling, use the no protocol-tunnel stp command.
Parameters stp Enter the keyword stp to enable protocol tunneling on a spanning tree, including STP, MSTP, RSTP, and PVST.
Defaults
Command Modes
No default values or behavior
CONF-IF-VLAN
964 | Service Provider Bridging
Command
History
Example
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on S60
Introduced on the C-Series, E-Series and E-Series ExaScale.
Introduced
Figure 36-1.
Protocol-tunneling Command Example
FTOS#conf
FTOS(conf)#interface vlan 2
FTOS(conf-if-vl-2)#vlan-stack compatible
FTOS(conf-if-vl-2)#member Gi1/2-3
FTOS(conf-if-vl-2)#protocol-tunnel stp
FTOS(conf-if-vl-2)#
Usage
Information Note: When VLAN-Stacking is enabled, no protocol packets are tunneled.
Related
Commands
Display tunneling information for all VLANs protocol-tunnel destination-mac c e s Overwrite the BPDU destination MAC address with a specific value.
Syntax protocol-tunnel destination-mac xstp address
Parameters stp Change the default destination MAC address used for L2PT to another value.
Defaults
Command Modes
Command
History
The default destination MAC is 01:01:e8:00:00:00.
CONFIGURATION
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on S60
Introduced on the C-Series and S-Series.
Introduced
When VLAN-Stacking is enabled, no protocol packets are tunneled.
Usage
Information
Related
Commands
Display tunneling information for all VLANs protocol-tunnel enable c e s Enable protocol tunneling globally on the system.
Syntax protocol-tunnel enable
To disable protocol tunneling, use the no protocol-tunnel enable command.
Defaults Disabled
Service Provider Bridging | 965
Command Modes
Command
History
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.4.1.0
Introduced on S60
Introduced
FTOS must have the default CAM profile with the default microcode before you enable L2PT.
protocol-tunnel rate-limit c e s Enable traffic rate limiting per box.
Syntax protocol-tunnel rate-limit rate
To reset the rate limit to the default, use the no protocol-tunnel rate-limit rate command.
Parameters rate Enter the rate in frames per second.
Range: 75 to 3000
Default: 75
Defaults
Command Modes
75 Frames per second
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on S60
Introduced on the C-Series, E-Series Terascale, and E-Series ExaScale. Maximum rate limit on E-Series reduced from 4000 to 3000.
Introduced
Example Figure 36-2.
protocol-tunnel rate-limit Command Example
FTOS#
FTOS#conf
FTOS(conf)#protocol-tunnel rate-limit 1000
FTOS(conf)#
Related
Commands
Display tunneling information for all VLANs
Display the current configuration.
show protocol-tunnel c e s Display protocol tunnel information for all or a specified VLAN-Stack VLAN.
Syntax show protocol-tunnel [ vlan vlan-id ]
Parameters vlan vlan-id (OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display information for the one VLAN.
Range: 1 to 4094
966 | Service Provider Bridging
Defaults
Command Modes
Command
History
Example
No default values or behavior
EXEC
Version 8.3.3.1
Version 8.2.1.0
Version 7.4.1.0
Introduced on S60
Introduced on the C-Series, E-Series and E-Series ExaScale.
Introduced
Figure 36-3.
show protocol-tunnel Command Example
FTOS#show protocol-tunnel
System Rate-Limit: 1000 Frames/second
Interface Vlan Protocol(s)
Gi1/2 2 STP, PVST
Gi1/3 3 STP, PVST
Po35 4 STP, PVST
FTOS#
Example Figure 36-4.
show protocol-tunnel command example for a specific VLAN
FTOS#show protocol-tunnel vlan 2
System Rate-Limit: 1000 Frames/second
Interface Vlan Protocol(s)
Gi1/2 2 STP, PVST
FTOS#
Related
Commands
Display the current configuration.
Service Provider Bridging | 967
968 | Service Provider Bridging
37
sFlow
Overview sFlow commands are supported on these platforms: c e s
.
FTOS sFlow monitoring system includes an sFlow Agent and an sFlow Collector. The sFlow Agent combines the flow samples and interface counters into sFlow datagrams and forwards them to the sFlow Collector. The sFlow Collector analyses the sFlow Datagrams received from the different devices and produces a network-wide view of traffic flows.
Important Points to Remember
• Dell Networking recommends that the sFlow Collector be connected to the Dell Networking chassis through a line card port rather than the RPM Management Ethernet port.
• FTOS exports all sFlow packets to the sFlow Collector. A small sampling rate can equate to a large number of exported packets. A backoff mechanism will automatically be applied to reduce this amount. Some sampled packets may be dropped when the exported packet rate is high and the backoff mechanism is about to or is starting to take effect. The dropEvent counter, in the sFlow packet, will always be zero.
• sFlow sampling is done on a per-port basis.
• Community list and local preference fields are not filled up in the extended gateway element in the sFlow datagram.
• The 802.1P source priority field is not filled up in the extended switch element in the sFlow datagram.
• Only Destination and Destination Peer AS numbers are packed in the dst-as-path field in the extended gateway element.
• If the packet being sampled is redirected using PBR (Policy-Based Routing), the sFlow datagram may contain incorrect extended gateway/router information.
• sFlow does not support packing extended information for IPv6 packets. Only the first 128 bytes of the IPv6 packet is shipped in the datagram.
• The source VLAN field in the extended switch element will not be packed in case of a routed packet.
• The destination VLAN field in the extended switch element will not be packed in case of a multicast packet.
• The maximum number of packets that can be sampled and processed per second is:
— 7500 packets when no extended information packing is enabled
— 1600 packets when extended-router and/or extended-gateway information packing is enabled
(see Figure and sflow extended-gateway enable
)
• There is no limit on the number of interfaces where sFlow can be enabled.
sFlow | 969
Commands
The sFlow commands are:
•
•
•
•
•
•
•
sflow polling-interval (Global)
•
sflow polling-interval (Interface)
•
•
•
•
sflow collector c e s Specify a collector(s) to which sFlow datagrams are forwarded.
Syntax sflow collector ip-address agent-addr ip-address [ number [ max-datagram-size number ]] |
[ max-datagram-size number ]
To delete the specified collector(s), use the no sflow collector ip-address agent-addr ip-address
[ number [ max-datagram-size number ]] | [ max-datagram-size number ] command
Parameters ip-address agent-addr ip-address number max-datagram-size number
Enter the ip address of the collector in dotted decimal format.
Enter the keyword agent-addr followed by the sFlow agent IP address in dotted decimal format.
(OPTIONAL) Enter the udp port number (User Datagram
Protocol).
Range: 0 to 65535
Default: 6343
(OPTIONAL) Enter the keyword max-datagram-size followed by the size number in bytes.
Range: 400 to 1500
Default: 1400
Defaults
Command Modes
Not configured
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
970 | sFlow
Usage
Information
Version 6.5.1.0
Version 6.2.1.1
Expanded the no form of the command to mirror the syntax used to configure
Introduced on E-Series
You can specify up to 2 sFlow collectors. If 2 collectors are specified, the samples are sent to both.
As part of the sFlow-MIB, if the SNMP request originates from a configured collector, FTOS will return the corresponding configured agent IP in MIB requests. FTOS checks to ensure that two entries are not configured for the same collector IP with a different agent IP. Should that happen, FTOS generates the following error:
%Error: Different agent-addr attempted for an existing collector sflow enable (Global) c e s Enable sFlow globally.
Syntax sflow enable
To disable sFlow, use the no sflow enable command.
Defaults sFlow is disabled by default
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.2.1.1
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands sFlow is disabled by default. In addition to this command, sFlow needs to be enable on individual interfaces where sFlow sampling is desired.
Enable sFlow on Interfaces.
sflow enable (Interface) c e s Enable sFlow on Interfaces.
Syntax sflow enable
To disable sFlow, use the no sflow enable command.
Defaults sFlow is disabled by default on all interfaces
Command Modes INTERFACE sFlow | 971
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.2.1.1
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
When sFlow is enable on an interface, flow sampling is done on any traffic going out of the interface.
Note: Once a physical port is a member of a LAG, it will inherit the sFlow configuration from the LAG port.
Related
Commands
Turn sFlow on globally sflow extended-gateway enable e Enable packing information on an extended gateway.
Syntax sflow extended-gateway [ extended-router ] [ extended-switch ] enable
To disable packing information, use the no sflow extended-gateway [ extended-router ]
[ extended-switch ] enable command.
Parameters extended-router extended-switch enable
Enter the keyword extended-router to collect extended router information.
Enter the keyword extended-switch to collect extended switch information.
Enter the keyword enable to enable global extended information.
Defaults
Command Modes
Command
History
Disabled
CONFIGURATION
Usage
Information
Version 8.1.1.0
Version 7.4.1.0
Introduced on E-Series ExaScale
Introduced on E-Series
The show sflow command displays the configured global extended information.
FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on the
E-Series to provide extended gateway information in cases where the destination IP addresses are learned by different routing protocols, and for cases where the destination is reachable over ECMP.
972 | sFlow
Example Figure 37-1.
show sflow Command Output
FTOS#show sflow sFlow services are enabled
Global default sampling rate: 64
Global default counter polling interval: 1000
Global extended information enabled: gateway, router, switch
1 collectors configured
Collector IP addr: 20.20.20.2, Agent IP addr: 10.11.201.7, UDP port: 6343
1732336 UDP packets exported
0 UDP packets dropped
12510225 sFlow samples collected
0 sFlow samples dropped due to sub-sampling
FTOS#
Related
Commands
Display the sFlow configuration sflow extended-router enable e Enable packing information on a router and switch.
Syntax sflow extended-router [ extended-switch ] enable
To disable packing information, use the no sflow extended-router [ extended-switch ] enable command.
Parameters extended-switch enable
Enter the keyword extended-switch to collect extended switch information.
Enter the keyword enable to enable global extended information.
Defaults
Command Modes
Command
History
Disabled
CONFIGURATION
Usage
Information
Related
Commands
Version 8.1.1.0
Version 7.4.1.0
Introduced on E-Series ExaScale
Introduced on E-Series
FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on the
E-Series to provide extended gateway information in cases where the destination IP addresses are learned by different routing protocols, and for cases where the destination is reachable over ECMP.
Enable packing information on an extended gateway
Enable packing information on a switch.
Display the sFlow configuration sflow extended-switch enable c e s Enable packing information on a switch only.
Syntax sflow extended-switch enable
To disable packing information, use the no sflow extended-switch [ enable ] command.
sFlow | 973
Parameters
Defaults
Command Modes
Command
History
Usage
Information
Related
Commands enable
Disabled
CONFIGURATION
Enter the keyword enable to enable global extended information.
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
FTOS 7.8.1.0 and later enhances the sFlow implementation for real time traffic analysis on the
E-Series to provide extended gateway information in cases where the destination IP addresses are learned by different routing protocols, and for cases where the destination is reachable over ECMP.
Enable packing information on an extended gateway.
Enable packing information on a router.
Display the sFlow configuration sflow polling-interval (Global) c e s Set the sFlow polling interval at a global level.
Syntax sflow polling-interval interval value
To return to the default, use the no sflow polling-interval interval command.
Parameters interval value Enter the interval value in seconds.
Range: 15 to 86400 seconds
Default: 20 seconds
Defaults
Command Modes
Command
History
20 seconds
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.2.1.1
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
The polling interval for an interface is the maximum number of seconds between successive samples of counters to be sent to the collector. This command changes the global default counter polling (20 seconds) interval. You can configure an interface to use a different polling interval.
974 | sFlow
Related
Commands
sflow polling-interval (Interface)
Set the polling interval for an interface sflow polling-interval (Interface) c e s Set the sFlow polling interval at an interface (overrides the global-level setting.)
Syntax sflow polling-interval interval value
To return to the default, use the no sflow polling-interval interval command.
Parameters interval value Enter the interval value in seconds.
Range: 15 to 86400 seconds
Default: The global counter polling interval
Defaults
Command Modes
Command
History
The same value as the current global default counter polling interval
INTERFACE
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.2.1.1
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
This command sets the counter polling interval for an interface.
Usage
Information
Related
Commands
sflow polling-interval (Global)
Globally set the polling interval sflow sample-rate (Global) c e s Change the global default sampling rate.
Syntax sflow sample-rate value
To return to the default sampling rate, enter the no sflow sample-rate .
Parameters value Enter the sampling rate value.
Range: C-Series and S-Series : 256 to 8388608 packets
E-Series TeraScale and ExaScale : 2 to 8388608
Defaults
Command Modes
Enter values in powers of 2 only, for example 4096, 8192, 16384 etc.
Default: 32768 packets
32768
CONFIGURATION sFlow | 975
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.2.1.1
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Sample-rate is the average number of packets skipped before the sample is taken. This command changes the global default sampling rate. You can configure an interface to use a different sampling rate than the global sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power of 2 value. Select one of these two packet numbers and re-enter the command.
Change the Interface sampling rate.
sflow sample-rate (Interface) c e s Change the Interface default sampling rate.
Syntax sflow sample-rate value
To return to the default sampling rate, enter the no sflow sample-rate .
Parameters value Enter the sampling rate value.
Range: C-Series and S-Series : 256 to 8388608 packets
E-Series TeraScale and ExaScale : 2 to 8388608 packets
Defaults
Command Modes
Command
History
Enter values in powers of 2 only, for example 4096, 8192, 16384 etc.
Default: 32768 packets
The Global default sampling
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.2.1.1
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
This command changes the sampling rate for an Interface. By default, the sampling rate of an interface is set to the same value as the current global default sampling rate. If the value entered is not a correct power of 2, the command generates an error message with the previous and next power-of-2 value.
Select one of these two number and re-enter the command.
Change the sampling rate globally.
976 | sFlow
show sflow c e s Display the current sFlow configuration
Syntax show sflow [ interface ]
Parameters interface (OPTIONAL) Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.2.1.1
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 37-2.
show sflow Command Example
FTOS#show sflow sFlow services are enabled
Global default sampling rate: 32768
Global default counter polling interval: 20
1 collectors configured
Collector IP addr: 133.33.33.53, Agent IP addr: 133.33.33.116, UDP port: 6343
0 UDP packets exported
0 UDP packets dropped
165 sFlow samples collected
0 sFlow samples dropped due to sub-sampling This count is always zero (0)
Linecard 1 Port set 0 H/W sampling rate 8192
Gi 1/16: configured rate 8192, actual rate 8192, sub-sampling rate 1
Gi 1/17: configured rate 16384, actual rate 16384, sub-sampling rate 2
Linecard 3 Port set 1 H/W sampling rate 16384
Gi 3/40: configured rate 16384, actual rate 16384, sub-sampling rate 1
FTOS#
Usage
Information
The dropEvent counter ( sFlow samples dropped due to sub-sampling ) shown in the figure above will always display a value of zero.
sFlow | 977
show sflow linecard c e s Display the sFlow information on a line card.
Syntax show sflow linecard { slot number }
Parameters slot number (OPTIONAL) Enter a slot number to view information on the line card in that slot.
Range: 0 to 13 on a E1200, 0 to 6 on a E600/E600i, and 0 to 5 on a E300.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 8.1.1.0
Version 7.7.1.0
Version 7.6.1.0
Version 6.2.1.1
Introduced on S60
Introduces on S-Series Stacking
Introduced on E-Series ExaScale
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Example Figure 37-3.
show sflow linecard Command Example
FTOS#show sflow linecard 1
Linecard 1
Samples rcvd from h/w :165
Samples dropped for sub-sampling :0
Total UDP packets exported :0
UDP packets exported via RPM :77
UDP packets dropped :
FTOS#
978 | sFlow
38
SNMP and Syslog
Overview
This chapter contains commands to configure and monitor SNMP v1/v2/v3 and Syslog. Both features are supported on the C-Series, E-Series, and S-Series platforms, as indicated by the following symbols under each of the command headings: c e s
The chapter contains the following sections:
•
•
SNMP Commands
The SNMP commands available in FTOS are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
The Simple Network Management Protocol (SNMP) is used to communicate management information between the network management stations and the agents in the network elements. FTOS supports
SNMP versions 1, 2c, and 3, supporting both read-only and read-write modes. FTOS sends SNMP traps, which are messages informing an SNMP management system about the network. FTOS supports up to 16 SNMP trap receivers.
SNMP and Syslog | 979
Important Points to Remember
• Typically, 5-second timeout and 3-second retry values on an SNMP server are sufficient for both
LAN and WAN applications. If you experience a timeout with these values, the recommended best practice on Dell Networking switches (to accommodate their high port density) is to increase the timeout and retry values on your SNMP server to the following:
— SNMP Timeout—greater than 3 seconds
— SNMP Retry count—greater than 2 seconds
• If you want to query an E-Series switch using SNMP v1/v2/v3 with an IPv6 address, configure the
IPv6 address on a non-management port on the switch.
• If you want to send SNMP v1/v2/v3 traps from an E-Series using an IPv6 address, use a non-management port.
• SNMP v3 informs are not currently supported with IPv6 addresses.
• If you are using ACLs in SNMP v3 configuration, group ACL overrides user ACL if the user is part of that group.
• SNMP operations are not supported on a VLAN. show snmp c e s Display the status of SNMP network elements.
Syntax show snmp
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Example Figure 38-1.
show snmp Command Example
FTOS#show snmp
32685 SNMP packets input
0 Bad SNMP version errors
0 Unknown community name
0 Illegal operation for community name supplied
0 Encoding errors
96988 Number of requested variables
0 Number of altered variables
31681 Get-request PDUs
968 Get-next PDUs
0 Set-request PDUs
61727 SNMP packets output
0 Too big errors (Maximum packet size 1500)
9 No such name errors
0 Bad values errors
0 General errors
32649 Response PDUs
29078 Trap PDUs
FTOS#
Related
Commands
Enable SNMP and set community string.
980 | SNMP and Syslog
show snmp engineID c e s Display the identification of the local SNMP engine and all remote engines that are configured on the router.
Syntax show snmp engineID
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
Example Figure 38-2.
show snmp engineID Command
FTOS#show snmp engineID
Local SNMP engineID: 0000178B02000001E80214A8
Remote Engine ID IP-addr Port
80001F88043132333435 172.31.1.3 5009
80001F88043938373635 172.31.1.3 5008
FTOS#
Related
Commands
Configure local and remote SNMP engines on the router show snmp group c e s Display the group name, security model, status, and storage type of each group.
Syntax show snmp group
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
Usage
Information
The following example displays a group named ngroup . The ngroup has a security model of version 3
( v3 ) with authentication ( auth ), the read and notify name is nview with no write view name specified, and finally the row status is active.
SNMP and Syslog | 981
Example Figure 38-3.
show snmp group Command Example
FTOS#show snmp group
groupname: ngroup security model: v3 auth
readview : nview writeview: no write view specified
notifyview: nview
row status: active
FTOS#
Related
Commands
Configure an SNMP server group show snmp user c e s Display the information configured on each SNMP user name.
Syntax show snmp user
Command Modes
Example
EXEC
EXEC Privilege
Figure 38-4.
show snmp user Command Example
FTOS#show snmp user
User name: v1v2creadu
Engine ID: 0000178B02000001E80214A8
storage-type: nonvolatile active
Authentication Protocol: None
Privacy Protocol: None
FTOS#
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command snmp ifmib ifalias long c e s Display the entire description string through the Interface MIB, which would be truncated otherwise to
63 characters.
Syntax snmp ifmib ifalias long
Defaults Interface description truncated beyond 63 characters
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced for S-Series
982 | SNMP and Syslog
Example
Version 7.5.1.0
unknown
Introduced for C-Series
Introduced for E-Series
Figure 38-5.
snmp ifmib ifalias long Command Example
!------command run on host connected to switch: --------------!
> snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more
IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This is a port connected to
IF-MIB::ifAlias.134792448 = STRING:
!------command run on FTOS switch: --------------!
FTOS#snmp ifmib ifalias long
!------command run on server connected to switch: --------------!
> snmpwalk -c public 10.10.10.130 .1.3.6.1.2.1.31 | grep -i alias | more
IF-MIB::ifAlias.134530304 = STRING: This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2. This is a port connected to Router2.
IF-MIB::ifAlias.134792448 = STRING: snmp-server community c e s Configure a new community string access for SNMPv1, v2, and v3.
Syntax snmp-server community community-name { ro | rw } [ ipv6 ipv6-access-list-name [ ipv6 ipv6access-list-name | access-list-name | security-name name ] | security-name name [ ipv6 ipv6access-list-name | access-list-name | security-name name ] | access-list-name [ ipv6 ipv6access-list-name | access-list-name | security-name name ]]]
To remove access to a community, use the no snmp-server community community-string { ro | rw }
[ security-name name [ access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name ]] command.
Parameters community-name ro rw ipv6 access-list-name security-name name access-list-name
Enter a text string (up to 20 characters long) to act as a password for SNMP.
Enter the keyword ro to specify read-only permission.
Enter the keyword rw to specify read-write permission.
(Optional) Enter the keyword ipv6 followed by a an IPv6 ACL name (a string up to 16 characters long).
(Optional) Enter the keyword security-name followed by the security name as defined by the community MIB.
(Optional) Enter a standard IPv4 access list name (a string up to 16 characters long).
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Ver. 6.2.1.1
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced on E-Series
SNMP and Syslog | 983
Usage
Information
Example
The example below configures a community named public that is mapped to the security named guestuser with Read Only ( ro ) permissions.
Figure 38-6.
snmp-server community Command Example
FTOS#config
FTOS(conf)# snmp-server community public ro
FTOS(conf)# snmp-server community guest ro security-name guestuser
FTOS(conf)#
Example
The security-name parameter maps the community string to an SNMPv3 user/security name as defined by the community MIB.
If a community string is configured without a security-name (for example, snmp-server community public ro ), the community is mapped to a default security-name/group:
• v1v2creadu / v1v2creadg — maps to a community with ro permissions
• v1v2cwriteu/ v1v2cwriteg — maps to a community with rw permissions
This command is indexed by the community-name parameter.
command is not configured, you cannot query SNMP data. Only
Standard IPv4 ACL and IPv6 ACL is supported in the optional access-list-name .
The command options ipv6 , security-name , and access-list-name are recursive. In other words, each option can, in turn, accept any of the three options as a sub-option, and each of those sub-options can accept any of the three sub-options as a sub-option, and so forth. The following example demonstrates the creation of a standard IPv4 ACL called “snmp-ro-acl” and then assigning it to the
SNMP community “guest”:
Figure 38-7.
snmp-server community Command Example
FTOS(conf)# ip access-list standard snmp-ro-acl
FTOS(config-std-nacl)#seq 5 permit host 10.10.10.224
FTOS(config-std-nacl)#seq 10 deny any count
!
FTOS(conf)#snmp-server community guest ro snmp-ro-acl
FTOS(conf)#
Note: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP, ICMP rules are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.
Related
Commands
snmp
Name (or select) a standard access list to filter based on IP address.
Configure an access list based on IPv6 addresses or protocols.
Display the current SNMP configuration and defaults.
snmp-server contact c e s Configure contact information for troubleshooting this SNMP node.
Syntax snmp-server contact text
To delete the SNMP server contact information, use the no snmp-server contact command.
984 | SNMP and Syslog
Parameters
Defaults
Command Modes
Command
History text Enter an alphanumeric text string, up to 55 characters long.
No default values or behavior
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command snmp-server enable traps c e s Enable and configure SNMP traps.
Syntax snmp-server enable traps [ notification-type ] [ notification-option ]
To disable traps, use the no snmp-server enable traps [ notification-type ] [ notification-option ] command.
Parameters notification-type notification-option
•
•
•
•
•
Enter the type of notification from the list below: bgp— for notification of changes in BGP process envmon —for Dell Networking device notifications when an environmental threshold is exceeded snmp —for notification of the RFC 1157 traps.
stp - Allow Spanning Tree protocol notification (RFC 1493) xstp - Allow MSTP (802.1s), RSTP (802.1w), and PVST+ state change traps
For the envmon notification-type, enter one of the following optional parameters:
• fan
• supply
• temperature
For the snmp notification-type, enter one of the following optional parameters:
• authentication
• coldstart
• linkdown
• linkup
Defaults
Command Modes
Command
History
Not enabled.
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series; Added support for STP and xSTP notification types.
Support added for C-Series
E-Series legacy command
SNMP and Syslog | 985
Usage
Information
Related
Commands
FTOS supports up to 16 SNMP trap receivers.
If this command is not configured, no traps controlled by this command are sent. If you do not specify a notification-type and notification-option , all traps are enabled.
Enable SNMP and set the community string.
snmp-server engineID c e s Configure name for both the local and remote SNMP engines on the router.
Syntax snmp-server engineID [ local engineID ] [ remote ip-address udp-port port-number engineID ]
To return to the default, use the no snmp-server engineID [ local engineID ] [ remote ip-address udp-port port-number engineID ] command
Parameters local engineID remote ip-address udp-port port-number engineID
Enter the keyword local followed by the engine ID number that identifies the copy of the SNMP on the local device.
Format (as specified in RFC 3411): 12 octets.
• The first 4 octets are set to the private enterprise number.
• The remaining 8 octets are the MAC address of the chassis.
Enter the keyword remote followed by the IP address that identifies the copy of the SNMP on the remote device.
Enter the keyword udp-port followed by the UDP (User Datagram
Protocol) port number on the remote device.
Range: 0 to 65535
Default: 162
Defaults
Command Modes
Command
History
As above
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
Changing the value of the SNMP Engine ID has important side effects. A user's password (entered on the command line) is converted to an MD5 (Message Digest Algorithm) or SHA (Secure Hash
Algorithm) security digest. This digest is based on both the password and the local Engine ID. The command line password is then destroyed, as required by RFC 2274. Because of this deletion, if the local value of the Engine ID changes, the security digests of SNMPv3 users will be invalid, and the users will have to be reconfigured.
For the remote Engine ID, the host IP and UDP port are the indexes to the command that are matched to either overwrite or remove the configuration.
986 | SNMP and Syslog
Related
Commands
Display SNMP engine and all remote engines that are configured on the router
Display the SNMP running configuration snmp-server group c e s Configure a new SNMP group or a table that maps SNMP users to SNMP views.
Syntax snmp-server group [ group_name { 1 | 2c | 3 { auth | noauth | priv }}] [ read name ] [ write name ]
[ notify name ] [ access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name ]]
Parameters
To remove a specified group, use the no snmp-server group [ group_name { v1 | v2c | v3 { auth | noauth | priv }}] [ read name ] [ write name ] [ notify name ] [ access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name ]] command.
group_name
1 | 2c | 3 auth noauth priv read write name notify name name access-list-name ipv6 access-list-name access-list-name ipv6 access-list-name
Enter a text string (up to 20 characters long) as the name of the group.
Defaults: The following groups are created for mapping to read/write community/security-names.
•
• v1v2creadg — maps to a community/security-name with ro permissions
1v2cwriteg — maps to a community/security-name rw permissions
(OPTIONAL) Enter the security model version number ( 1 , 2c , or 3) .
•
•
1 is the least secure version
3 is the most secure of the security modes.
• 2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed.
Default: 1
(OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
(OPTIONAL) Enter the keyword noauth to specify no authentication of a packet.
(OPTIONAL) Enter the keyword priv to specify both authentication and then scrambling of the packet.
(OPTIONAL) Enter the keyword read followed by a name (a string of up to
20 characters long) as the read view name.
Default: GlobalView is set by default and is assumed to be every object belonging to the Internet (1.3.6.1) OID space.
(OPTIONAL) Enter the keyword write followed by a name (a string of up to 20 characters long) as the write view name.
(OPTIONAL) Enter the keyword notify followed by a name (a string of up to 20 characters long) as the notify view name.
(Optional) Enter the standard IPv4 access list name (a string up to 16 characters long).
(Optional) Enter the keyword ipv6 followed by the IPv6 access list name (a string up to 16 characters long)
(Optional) Enter both an IPv4 and IPv6 access list name.
SNMP and Syslog | 987
Defaults
Command Modes
Command
History
As defined above
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Usage
Information
The following example specifies the group named harig as a version 3 user requiring both authentication and encryption and read access limited to the read named rview .
Note: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP, ICMP rules are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.
Example Figure 38-8.
snmp-server group Command Example
FTOS#conf
FTOS(conf)# snmp-server group harig 3 priv read rview
FTOS#
Note: The number of configurable groups is limited to 16 groups.
Related
Commands
snmp
Display the group name, security model, view status, and storage type of each group.
Display the SNMP running configuration snmp-server host c e s Configure the recipient of an SNMP trap operation.
Syntax snmp-server host ip-address | ipv6-address [ traps | informs ] [ version 1 | 2c | 3 ] [ auth | no auth | priv ] [ community-string ] [ udp-port port-number ] [ notification-type ]
To remove the SNMP host, use the no snmp-server host ip-address [ traps | informs ] [ version 1
| 2c | 3 ] [ auth | noauth | priv ] [ community-string ] [ udp-port number ] [ notification-type ] command.
Parameters ip-address ipv6-address traps informs
Enter the keyword host followed by the IP address of the host (configurable hosts is limited to 16).
Enter the keyword host followed by the IPv6 address of the host in the x:x:x:x::x format.
The :: notation specifies successive hexadecimal fields of zero
(OPTIONAL) Enter the keyword traps to send trap notifications to the specified host.
Default: traps
(OPTIONAL) Enter the keyword informs to send inform notifications to the specified host.
Default: traps
988 | SNMP and Syslog
version auth noauth priv
1 | 2c | 3 (OPTIONAL) Enter the keyword version to specify the security model followed by the security model version number 1 , 2c , or 3 .
• Version 1 is the least secure version
• version 3 is the most secure of the security modes.
• Version 2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed.
Default: Version 1
(OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
(OPTIONAL) Enter the keyword noauth to specify no authentication of a packet.
(OPTIONAL) Enter the keyword priv to specify both authentication and then scrambling of the packet.
community-string Enter a text string (up to 20 characters long) as the name of the SNMP community.
Note: For version 1 and version 2c security models, this string represents the name of the SNMP community. The string can be set using this command, however it is recommended that you set the community string using the snmp-server community command before executing this command. For version 3 security model, this string is the USM user security name.
udp-port port-number (OPTIONAL) Enter the keywords udp-port followed by the port number of the remote host to use.
Range: 0 to 65535.
Default: 162 notification-type
•
•
•
•
•
(OPTIONAL) Enter one of the following keywords as the type of trap to be sent to the host: bgp - allow BGP state change traps envmon - allows environment monitor traps snmp - Allows SNMP-type notification (RFC 1157) traps.
stp - Allow Spanning Tree protocol notification (RFC 1493) xstp - Allow MSTP (802.1s), RSTP (802.1w), and PVST+ state change traps
Default: All trap types are sent to host
As shown
CONFIGURATION
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series; Added support for STP and xSTP notification types.
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
In order to configure the router to send SNMP notifications, you must enter at least one snmp-server host command. If you enter the command with no keywords, all trap types are enabled for the host. If you do not enter an snmp-server host command, no notifications are sent.
In order to enable multiple hosts, you must issue a separate s nmp-server host command for each host. You can specify multiple notification types in the command for each host.
SNMP and Syslog | 989
When multiple snmp-server host commands are given for the same host and type of notification
(trap or inform), each succeeding command overwrites the previous command. Only the last snmp-server host command will be in effect. For example, if you enter an snmp-server host inform command for a host and then enter another s nmp-server host inform command for the same host, the second command will replace the first.
The snmp-server host command is used in conjunction with the snmp-server enable command.
Use the snmp-server enable command to specify which SNMP notifications are sent globally. For a host to receive most notifications, at least one snmp-server enable command and the snmp-server host command for that host must be enabled.
Note: For v1 / v2c trap configuration, if the community-string is not defined using the snmp-server community command prior to using this command, the default form of the snmp-server community command will automatically be configured, with the community-name the same as specified in the snmp-server host command.
Related
Commands
Configuring Informs
To send an inform, follow the step below.
1.
Configure a remote engine ID.
2.
Configure a remote user.
3.
Configure a group for this user with access rights.
4.
Enable traps.
5.
Configure a host to receive informs.
Enable SNMP traps.
Configure a new community SNMPv1 or SNMPv2c snmp-server location c e s Configure the location of the SNMP server.
Syntax snmp-server location text
To delete the SNMP location, enter no snmp-server location .
Parameters text Enter an alpha-numeric text string, up to 55 characters long.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
990 | SNMP and Syslog
snmp-server packetsize c e s Set the largest SNMP packet size permitted when the SNMP server is receiving a request or generating a reply, use the snmp-server packetsize global configuration command.
Syntax snmp-server packetsize byte-count
Parameters byte-count Enter one of the following values 8, 16, 24 or 32. Packet sizes are 8000 bytes, 16000 bytes,
32000 bytes, and 64000 bytes.
Defaults
Command Modes
Command
History
8
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command snmp-server trap-source c e s Configure a specific interface as the source for SNMP traffic.
Syntax snmp-server trap-source interface
To disable sending traps out a specific interface, enter no snmp trap-source .
Parameter interface Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
The IP address assigned to the management interface is the default.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Usage
Information
For this snmp-server trap-source command to be enabled, you must configure an IP address on the
interface and enable the interface configured as an SNMP trap source.
SNMP and Syslog | 991
Related
Commands
Set the community string.
snmp-server user c e s Configure a new user to an SNMP group.
Syntax snmp-server user name { group_name remote ip-address udp-port port-number } [ 1 | 2c | 3 ]
[ encrypted ] [ auth { md5 | sha } auth-password ] [ priv des56 priv password ] [ access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name ]
To remove a user from the SNMP group, use the no snmp-server user name { group_name remote ip-address udp-port port-number } [ 1 | 2c | 3 ] [ encrypted ] [ auth { md5 | sha } auth-password ]
[ priv des56 priv password ] [ access-list-name | ipv6 access-list-name | access-list-name ipv6 access-list-name ] command.
Parameters name group_name remote ip-address
Enter the name of the user (not to exceed 20 characters), on the host, that connects to the agent.
Enter a text string (up to 20 characters long) as the name of the group.
Defaults: The following groups are created for mapping to read/write community/security-names.
•
• v1v2creadu — maps to a community with ro permissions
1v2cwriteu — maps to a community rw permissions
Enter the keyword remote followed by the IP address that identifies the copy of the SNMP on the remote device. udp-port port-number Enter the keyword udp-port followed by the UDP (User Datagram Protocol) port number on the remote device.
Range: 0 to 65535.
Default: 162
1 | 2c | 3 encrypted auth
(OPTIONAL) Enter the security model version number ( 1 , 2c , or 3) .
•
•
•
1 is the least secure version
3 is the most secure of the security modes.
2c allows transmission of informs and counter 64, which allows for integers twice the width of what is normally allowed.
Default: 1
(OPTIONAL) Enter the keyword encrypted to specify the password appear in encrypted format (a series of digits, masking the true characters of the string).
(OPTIONAL) Enter the keyword auth to specify authentication of a packet without encryption.
md5 | sha auth-password priv des56
(OPTIONAL) Enter the keyword md5 or sha to designate the authentication level. md5 — Message Digest Algorithm sha — Secure Hash Algorithm
(OPTIONAL) Enter a text string (up to 20 characters long) password that will enable the agent to receive packets from the host.
Minimum: 8 characters long
(OPTIONAL) Enter the keyword priv des56 to initiate a privacy authentication level setting using the CBC-DES privacy authentication algorithm
( des56 ).
992 | SNMP and Syslog
Defaults
Command Modes
Command
History priv password access-list-name
(OPTIONAL) Enter a text string (up to 20 characters long) password that will enables the host to encrypt the contents of the message it sends to the agent.
Minimum: 8 characters long
(Optional) Enter the standard IPv4 access list name (a string up to 16 characters long).
ipv6 access-list-name (Optional) Enter the keyword ipv6 followed by the IPv6 access list name (a string up to 16 characters long) access-list-name access-list-name ipv6 (Optional) Enter both an IPv4 and IPv6 access list name.
As above
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Usage
Information
Examples
Note: For IPv6 ACLs, only IPv6 and UDP types are valid for SNMP; TCP, ICMP rules are not valid for SNMP. In IPv6 ACLs port rules are not valid for SNMP.
No default values exist for authentication or privacy algorithms and no default password exist. If you forget a password, you cannot recover it; the user must be reconfigured. You can specify either a plain-text password or an encrypted cypher-text password. In either case, the password will be stored in the configuration in an encrypted form and displayed as encrypted in the
command.
If you have an encrypted password, you can specify the encrypted string instead of the plain-text password. The following command is an example of how to specify the command with an encrypted string:
Figure 38-9.
snmp-server user Command Example
FTOS# snmp-server user privuser v3group v3 encrypted auth md5
9fc53d9d908118b2804fe80e3ba8763d priv des56 d0452401a8c3ce42804fe80e3ba8763d
The following command is an example of how to enter a plain-text password as the string authpasswd for user authuser of group v3group .
FTOS#conf
FTOS(conf)# snmp-server user authuser v3group v3 auth md5 authpasswd
The following command configures a remote user named n3user with a v3 security model and a security level of authNOPriv .
FTOS#conf
FTOS(conf)# snmp-server user n3user ngroup remote 172.31.1.3 udp-port 5009 3 auth md5 authpasswd
SNMP and Syslog | 993
Note: The number of configurable users is limited to 16.
Related
Commands
Display the information configured on each SNMP user name .
snmp-server view c e s Configure an SNMPv3 view.
Syntax snmp-server view view-name oid-tree { included | excluded }
To remove an SNMPv3 view, use the no snmp-server view view-name oid-tree { included | excluded } command.
Parameters view-name oid-tree included excluded
Enter the name of the view (not to exceed 20 characters).
Enter the OID sub tree for the view (not to exceed 20 characters).
(OPTIONAL) Enter the keyword included to include the MIB family in the view.
(OPTIONAL) Enter the keyword excluded to exclude the MIB family in the view.
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION
Usage
Information
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
The oid-tree variable is a full sub-tree starting from 1.3.6 and can not specify the name of a sub-tree or a MIB. The following example configures a view named rview that allows access to all objects under
1.3.6.1:
Figure 38-10.
snmp-server view Command Example
FTOS# conf
FTOS#(conf) snmp-server view rview 1.3.6.1 included
Related
Commands
snmp Display the SNMP running configuration snmp trap link-status c e s Enable the interface to send SNMP link traps, which indicate whether the interface is up or down.
Syntax snmp trap link-status
To disable sending link trap messages, enter no snmp trap link-status .
994 | SNMP and Syslog
Defaults
Command Modes
Command
History
Enabled.
INTERFACE
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
If the interface is expected to flap during normal usage, you could disable this command.
Syslog Commands
The following commands allow you to configure logging functions on all Dell Networking switches:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
show logging driverlog stack-unit (S-Series)
•
clear logging c e s Clear the messages in the logging buffer.
Syntax clear logging
Defaults None.
Command Modes EXEC Privilege
SNMP and Syslog | 995
Command
History
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Display logging settings and system messages in the internal buffer.
default logging buffered c e s Return to the default setting for messages logged to the internal buffer.
Syntax default logging buffered
Defaults size = 40960; level = 7 or debugging
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Related
Commands
Set the logging buffered parameters.
default logging console c e s Return the default settings for messages logged to the console.
Syntax default logging console
Defaults
Command Modes level = 7 or debugging
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Related
Commands
Set the logging console parameters.
996 | SNMP and Syslog
default logging monitor c e s Return to the default settings for messages logged to the terminal.
Syntax default logging monitor
Defaults
Command Modes level = 7 or debugging
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
Related
Commands
Set the logging monitor parameters.
Send system messages to the terminal/monitor.
default logging trap c e s Return to the default settings for logging messages to the Syslog servers.
Syntax default logging trap
Defaults
Command Modes level = 6 or informational
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
Related
Commands
Limit messages logged to the Syslog servers based on severity.
logging c e s Configure an IP address or host name of a Syslog server where logging messages will be sent.
Syntax logging { ip-address | hostname }
To disable logging, enter no logging .
Parameters ip-address hostname
Enter the IP address in dotted decimal format.
Enter the name of a host already configured and recognized by the switch.
Defaults Disabled
SNMP and Syslog | 997
Command Modes
Command
History
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Related
Commands
Enables the logging asynchronously to logging buffer, console, Syslog server, and terminal lines.
Enables logging to the Syslog server based on severity.
logging buffered c e s Enable logging and specify which messages are logged to an internal buffer. By default, all messages are logged to the internal buffer.
Syntax logging buffered [ level ] [ size ]
To return to the default values, enter default logging buffered . To disable logging stored to an internal buffer, enter no logging buffered .
Parameters level size
(OPTIONAL) Indicate a value from 0 to 7 or enter one of the following equivalent words: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging.
Default: 7 or debugging.
(OPTIONAL) Indicate the size, in bytes, of the logging buffer. The number of messages buffered depends on the size of each message.
Range: 40960 to 524288.
Default: 40960 bytes.
Defaults
Command Modes level = 7; size = 40960 bytes
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Usage
Information
Related
Commands
When you decrease the buffer size, all messages stored in the buffer are lost. Increasing the buffer size does not affect messages stored in the buffer.
Clear the logging buffer.
Returns the logging buffered parameters to the default setting.
Display the logging setting and system messages in the internal buffer.
998 | SNMP and Syslog
logging console c e s Specify which messages are logged to the console.
Syntax logging console [ level ]
To return to the default values, enter
. To disable logging to the console, enter no logging console .
Parameters level (OPTIONAL) Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging.
Default: 7 or debugging.
Defaults
Command Modes
Command
History
7 or debugging
CONFIGURATION
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
Clear logging buffer.
Returns the logging console parameters to the default setting.
Display logging settings and system messages in the internal buffer.
logging facility c e s Configure the Syslog facility, used for error messages sent to Syslog servers.
Syntax logging facility [ facility-type ]
To return to the default values, enter no logging facility .
SNMP and Syslog | 999
Parameters facility-type (OPTIONAL) Enter one of the following parameters.
• auth (authorization system)
• cron (Cron/at facility)
• deamon (system deamons)
• kern (kernel)
• local0 (local use)
• local1 (local use)
• local2 (local use)
• local3 (local use)
• local4 (local use)
• local5 (local use)
• local6 (local use)
• local7 (local use)
• lpr (line printer system)
• mail (mail system)
• news (USENET news)
• sys9 (system use)
• sys10 (system use)
• sys11 (system use)
• sys12 (system use)
• sys13 (system use)
• sys14 (system use)
• syslog (Syslog process)
• user (user process)
• uucp (Unix to Unix copy process)
The default is local7.
Defaults
Command Modes
Command
History local7
CONFIGURATION
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Enable logging to a Syslog server.
Enables logging.
logging history c e s Specify which messages are logged to the history table of the switch and the SNMP network management station (if configured).
Syntax logging history level
To return to the default values, enter no logging history .
1000 | SNMP and Syslog
Parameters level Indicate a value from 0 to 7 or enter one of the following equivalent words: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging.
The default is 4.
Defaults
Command Modes
Command
History
4 or warnings
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
When you configure the snmp-server trap-source
command, the system messages logged to the history table are also sent to the SNMP network management station.
history Display information logged to the history buffer.
logging history size c e s Specify the number of messages stored in the FTOS logging history table.
Syntax logging history size size
To return to the default values, enter no logging history size .
Parameters size Indicate a value as the number of messages to be stored.
Range: 0 to 500.
Default: 1 message.
Defaults
Command Modes
Command
History
1 message
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
When the number of messages reaches the limit you set with the logging history size
command, older messages are deleted as newer ones are added to the table.
history Display information logged to the history buffer.
SNMP and Syslog | 1001
logging monitor c e s Specify which messages are logged to Telnet applications.
Syntax logging monitor [ level ]
To disable logging to terminal connections, enter no logging monitor .
Parameters level Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging.
The default is 7 or debugging.
Defaults
Command Modes
Command
History
7 or debugging
CONFIGURATION
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
Returns the logging monitor parameters to the default setting.
logging on c e s Specify that debug or error messages are asynchronously logged to multiple destinations, such as logging buffer, Syslog server, or terminal lines.
Syntax logging on
To disable logging to logging buffer, Syslog server and terminal lines, enter no logging on .
Defaults Enabled
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
When you enter no logging on , messages are logged only to the console.
Usage
Information
Related
Commands
Enable logging to Syslog server.
Set the logging buffered parameters.
Set the logging console parameters.
Set the logging parameters for the terminal connections.
1002 | SNMP and Syslog
logging source-interface c e s Specify that the IP address of an interface is the source IP address of Syslog packets sent to the Syslog server.
Syntax logging source-interface interface
To disable this command and return to the default setting, enter no logging source-interface .
Parameters interface Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from zero (0) to 16383.
• For the management interface on the RPM, enter the keyword
ManagementEthernet followed by the slot/port information. The slot range is 0-1 and the port range is 0.
• For a Port Channel, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale,
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For a Ten Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
Syslog messages contain the IP address of the interface used to egress the router. By configuring the
logging source-interface command, the Syslog packets contain the IP address of the interface
configured.
Enable the logging to another device.
logging synchronous c e s Synchronize unsolicited messages and FTOS output.
Syntax logging synchronous [ level level | all ] [ limit number-of-buffers ]
To disable message synchronization, use the no logging synchronous [ level level | all ] [ limit number-of-buffers ] command.
SNMP and Syslog | 1003
Parameters
Defaults
Command Modes
Command
History all level level Enter the keyword level followed by a number as the severity level. A high number indicates a low severity level and visa versa.
Range: 0 to 7.
Default: 2 all Enter limit number-of-buffers
Enter the keyword all to ensure that all levels are printed asynchronously.
Enter the keyword limit followed by the number of buffers to be queued for the terminal after which new messages are dropped
Range: 20 to 300
Default: 20
Disabled. If enabled without level or number-of-buffers options specified, level = 2 and number-of-buffers = 20 are the defaults.
LINE
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
When
is enabled, unsolicited messages appear between software prompts and outputs. Only the messages with a severity at or below the set level are sent to the console.
If the message queue limit is reached on a terminal line and messages are discarded, a system message appears on that terminal line. Messages may continue to appear on other terminal lines.
Enables logging.
logging trap c e s Specify which messages are logged to the Syslog server based the message severity.
Syntax logging trap [ level ]
To return to the default values, enter default logging trap . To disable logging, enter no logging trap .
Parameters level Indicate a value from 0 to 7 or enter one of the following parameters: emergencies, alerts, critical, errors, warnings, notifications, informational, or debugging.
The default is 6.
Defaults
Command Modes
Command
History
6 or informational
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
1004 | SNMP and Syslog
Related
Commands
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Enable the logging to another device.
Enables logging.
show logging c e s Display the logging settings and system messages logged to the internal buffer of the switch.
Syntax show logging [ number | history [ reverse ][ number ] | reverse [ number ] | summary ]
Parameters number history reverse summary
(OPTIONAL) Enter the number of message to be displayed on the output.
Range: 1 to 65535
(OPTIONAL) Enter the keyword history to view only information in the Syslog history table.
(OPTIONAL) Enter the keyword reverse to view the Syslog messages in FIFO (first in, first out) order.
(OPTIONAL) Enter the keyword summary to view a table showing the number of messages per type and per slot.
Slots *7* and *8* represent RPMs.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
E-Series legacy command
SNMP and Syslog | 1005
Figure 38-11.
show logging Command Example (Partial)
FTOS#show logging
Syslog logging: enabled
Console logging: level debugging
Monitor logging: level debugging
Buffer logging: level debugging, 5604 Messages Logged, Size (524288 bytes)
Trap logging: level informational
Oct 8 09:25:37: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 223.80.255.254 closed. Hold time expired
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.13.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.13 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.14.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.14 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.11.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.5 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.4.1.3 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.4 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.6 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.12 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.15 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.1.1.3 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.12.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 1.1.10.2 Up
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Session closed by neighbor 1.1.10.2 (Hold time expired)
Oct 8 09:25:38: %RPM1:RP1 %BGP-5-ADJCHANGE: Neighbor 192.200.14.7 Up
Oct 8 09:26:25: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 1.1.11.2 closed. Neighbor recycled
Oct 8 09:26:25: %RPM1:RP1 %BGP-5-ADJCHANGE: Connection with neighbor 1.1.14.2 closed. Neighbor recycled
--More--
Figure 38-12.
show logging history Command Example
FTOS#show logging history
Syslog History Table: 1 maximum table entries, saving level Warnings or higher
SNMP notifications not Enabled
%RPM:0:0 %CHMGR-2-LINECARDDOWN - Line card 3 down - IPC timeout
FTOS# show logging driverlog stack-unit (S-Series) s Display the driver log for the specified stack member.
Syntax show logging driverlog stack-unit unit#
Parameters stack-unit unit# Enter the keyword stack-unit followed by the stack member ID of the switch for which you want to display the driver log.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Defaults
Command Modes
No default values or behavior
EXEC
EXEC Privilege
1006 | SNMP and Syslog
Command
History
Usage
Information
Version 8.3.3.1
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on the S60.
Introduced for S-Series
This command displays internal software driver information, which may be useful during troubleshooting switch initialization errors, such as a downed Port-Pipe. terminal monitor c e s Configure the FTOS to display messages on the monitor/terminal.
Syntax terminal monitor
To return to default settings, enter terminal no monitor .
Defaults Disabled.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Support added for S-Series
Version 7.5.1.0
Support added for C-Series
E-Series legacy command
Related
Commands
Set the logging parameters on the monitor/terminal.
SNMP and Syslog | 1007
1008 | SNMP and Syslog
39
S-Series Stacking Commands
Overview
All commands in this chapter are specific to the S-Series platform, as indicated by the s character that appears below each command heading. The commands are always available and operational, whether or not the S-Series has a stacking module inserted. You can use the commands to pre-configure a switch, so that the configuration settings are invoked when the switch is attached to other S-Series units.
For details on using the S-Series stacking feature, see the chapter “Stacking S-Series Switches” in the
FTOS Configuration Guide .
The S60 supports stacking with FTOS version 8.3.3.4 and later.
Commands
The commands in this chapter are used for managing the stacking of S-Series systems:
•
•
redundancy disable-auto-reboot
•
redundancy force-failover stack-unit
•
•
•
•
•
•
•
upgrade system stack-unit (S-Series stack member)
power-cycle
Power-cycle the unit.
Syntax
Parameters power-cycle [ stack-unit | all] stack-unit Enter the stack member unit identifier of the stack member to reset.
S60 range : 0 - 11
S-Series Stacking Commands | 1009
Defaults
Command Modes
Command
History
Usage
Information
None
EXEC Privilege
Version 8.3.3.4
Introduced on S60
This command applies to the S60 only.
redundancy disable-auto-reboot s Prevent the S-Series stack management unit and standby unit from rebooting if they fails.
Syntax
Parameters redundancy disable-auto-reboot [ stack-unit | all]
To return to the default, enter no redundancy disable-auto-reboot stack-unit .
stack-unit Enter the stack member unit identifier of the stack member to reset.
S60 range : 0 - 11 all other S-Series range : 0-7
Defaults
Command Modes
Command
History
Disabled (the failed switch is automatically rebooted).
CONFIGURATION
Usage
Information
Version 8.3.3.4
Version 8.3.1.0
Version 7.7.1.0
Introduced on S60
Added the all option
Introduced on S-Series
Enabling this command keeps the failed switch in the failed state. It will not reboot until it is manually rebooted. When enabled, it is not displayed in the running-config. When disabled, it is displayed in the running-config.
Related
Commands
Display the current redundancy status.
redundancy force-failover stack-unit s Force the backup unit in the stack to become the management unit.
Syntax redundancy force-failover stack-unit
Defaults
Command Modes
Not enabled
EXEC Privilege
1010 | S-Series Stacking Commands
reset stack-unit s Reset any designated stack member except the management unit (master unit).
Syntax
Parameters reset stack-unit stack-unit hard stack-unit hard
Enter the stack member unit identifier of the stack member to reset.
S60 range : 0 - 11 all other S-Series range : 0-7
Reset the stack unit if the unit is in a problem state.
Default
Command Modes
Command
History none
CONFIGURATION
Usage
Information
Example
Version 8.3.3.4
Version 8.3.1.0
Version 7.8.1.0
Version 7.7.1.0
Introduced on S60
Added hard reset option.
Augmented to run on the standby unit in order to reset the standby unit directly.
Introduced on S-Series
Resetting the management unit is not allowed, and an error message will be displayed if you try to do so. Resetting is a soft reboot, including flushing the forwarding tables.
Starting with FTOS 7.8.1.0, you can run this command directly on the stack standby unit (standby master) to reset the standby. You cannot reset any other unit from the standby unit.
Figure 39-1.
Using the reset stack-unit Command on the Stack Standby Unit
FTOS#show system brief
Stack MAC : 00:01:e8:51:4e:f8
-- Stack Info --
Unit UnitType Status ReqTyp CurTyp Version Ports
---------------------------------------------------------------------------
0 Member online S50N S50N 4.7.7.117 52
1 Member online S50N S50N 4.7.7.117 52
2 Member online S50N S50N 4.7.7.117 52
3 Member online S50N S50N 4.7.7.117 52
4 Standby online S50N S50N 4.7.7.117 52
5 Member online S50N S50N 4.7.7.117 52
6 Mgmt online S50N S50N 4.7.7.117 52
7 Member online S50N S50N 4.7.7.117 52
FTOS(standby)#reset ? <<Standby management unit stack-unit Unit number
FTOS(standby)#reset stack-unit ?
<0-7> Unit number id
FTOS(standby)#reset stack-unit 6
% Error: Reset of master unit is not allowed.
<<Resetting master not allowed
FTOS(standby)#reset stack-unit 0
% Error: Reset of stack units from standby is not allowed.
<<no reset of other member
FTOS(standby)#
FTOS(standby)#reset stack-unit 4 <<Resetting standby unit success!
00:02:50: %STKUNIT4-S:CP %CHMGR-5-STACKUNIT_RESET: Stack unit 4 being reset
00:02:50: %STKUNIT4-S:CP %CHMGR-2-STACKUNIT_DOWN: Stack unit 4 down - reset
00:02:50: %STKUNIT4-S:CP %IFMGR-1-DEL_PORT: Removed port: Gi 4/1-48
FTOS(standby)#rebooting
U-Boot 1.1.4 (Mar 6 2008 - 00:00:04)
S-Series Stacking Commands | 1011
Related
Commands
upgrade (S-Series management unit)
Reboot FTOS.
Reset the designated S-Series stack member.
show redundancy s Display the current redundancy configuration (status of automatic reboot configuration on stack management unit).
Syntax show redundancy
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.4
Version 7.7.1.0
Introduced on S60
Introduced on S-Series
Example Figure 39-2.
show redundancy Command Output
FTOS#show redundancy
-- SSeries Redundancy Configuration --
------------------------------------------------
Auto reboot : Enabled
-- Stack-unit Status --
------------------------------------------------
Mgmt ID: 0
Stack-unit ID: 0
Stack-unit Redundancy Role: Primary
Stack-unit State: Active
Stack-unit SW Version: 7.7.1.0
Link to Peer: Up
-- PEER Stack-unit Status --
------------------------------------------------
Stack-unit State: Standby
Peer stack-unit ID: 1
Stack-unit SW Version: 7.7.1.0
-- Stack-unit Redundancy Configuration --
------------------------------------------------
Primary Stack-unit: mgmt-id 0
Auto Data Sync: Full
Failover Type: Hot Failover
Auto reboot Stack-unit: Enabled
Auto failover limit: 3 times in 60 minutes
-- Stack-unit Failover Record --
------------------------------------------------
Failover Count: 0
Last failover timestamp: None
Last failover Reason: None
Last failover type: None
-- Last Data Block Sync Record: --
------------------------------------------------
Line Card Config: succeeded Mar 07 1996 00:27:39
Start-up Config: succeeded Mar 07 1996 00:27:39
Runtime Event Log: succeeded Mar 07 1996 00:27:39
Running Config: succeeded Mar 07 1996 00:27:39
ACL Mgr: succeeded Mar 07 1996 00:27:39
1012 | S-Series Stacking Commands
Related
Commands
redundancy disable-auto-reboot
Prevent the system from auto-rebooting if it fails.
show system stack-ports s Display information about the stacking ports on all switches in the S-Series stack.
Syntax show system stack-ports [ status | topology ]
Parameters status topology
(OPTIONAL) Enter the keyword status to display the command output without the
Connection field.
(OPTIONAL) Enter the keyword topology to limit the table to just the Interface and
Connection fields.
Defaults
Command Modes
No default behavior
EXEC
EXEC Privilege
Command
History
Version 8.3.3.4
Version 7.7.1.0
Introduced on S60
Introduced on S-Series
Example Figure 39-3.
show system stack-ports Command Example
FTOS# show system stack-ports
Topology: Ring
Interface Connection Link Speed Admin Link
(Gb/s) Status Status
----------------------------------------------------------------------------
0/49 1/49 12 up up
0/50 12 up down
0/51 2/49 24 up up
1/49 0/49 12 up up
1/50 2/51 12 up up
2/49 0/51 24 up up
2/51 1/50 12 up up
2/52 12 up down
FTOS#
Example Figure 39-4.
show system stack-ports status Command Example
FTOS# show system stack-ports status
Topology: Ring
Interface Link Speed Admin Link
(Gb/s) Status Status
-------------------------------------------------
0/49 12 up up
0/50 12 up down
0/51 24 up up
1/49 12 up up
1/50 12 up up
2/49 24 up up
2/51 12 up up
2/52 12 up down
FTOS#
S-Series Stacking Commands | 1013
Example Figure 39-5.
show system stack-ports topology Command Example
FTOS# show system stack-ports topology
Topology: Ring
Interface Connection
----------------------
0/49 1/49
0/50
0/51 2/49
1/49 0/49
1/50 2/51
2/49 0/51
2/51 1/50
2/52
FTOS#
Table 39-1.
show interfaces description Command Example Fields
Field
Topology
Interface
Description
Lists the topology of stack ports connected: Ring, Daisy chain, or Standalone
The unit/port ID of the connected stack port on this unit
Link Speed Link Speed of the stack port (12 or 24) in Gb/s
Admin
Status
The only currently listed status is Up.
Connection The stack port ID to which this unit’s stack port is connected
Related
Commands
upgrade (S-Series management unit)
Reset the designated S-Series stack member.
Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
Display the current status of all stack members or a specific member.
Upgrade the bootflash image or system image of the S-Series management unit.
stack-unit priority s Configure the ability of an S-Series switch to become the management unit of a stack.
Syntax
Parameters stack-unit stack-unit priority preference stack-unit preference
Enter the stack member unit identifier of the stack member to reset.
S60 range : 0 - 11 all other S-Series range : 0-7
This preference parameter allows you to specify the management priority of one backup switch over another,
Range 0-14, with 0 the lowest priority and 14 the highest.
The switch with the highest priority value will be chosen to become the management unit if the active management unit fails or on the next reload.
Defaults 1
1014 | S-Series Stacking Commands
Command Modes
Command
History
CONFIGURATION
Version 8.3.3.4
Version 7.7.1.0
Introduced on S60
Introduced on S-Series
Related
Commands
Reboot FTOS.
Display the current status of all stack members or a specific member.
stack-unit provision s Pre-configure a logical stacking ID of a switch that will join the stack. This is an optional command that is executed on the management unit.
Syntax
Parameters stack-unit stack-unit provision { S25N|S25P | S25V|S50N | S50V |S60 } stack-unit
S25N|S25P
S50N |
| S25V|
S50V|S60
|
Enter the stack member unit identifier of the stack member to reset.
S60 range : 0 - 11 all other S-Series range : 0-7
Enter the S-Series model identifier of the switch to be added as a stack member. This identifier is also referred to as the provision type .
Defaults When this value is not set, a switch joining the stack is given the next available sequential stack member identifier.
CONFIGURATION Command Modes
Command
History
Version 8.3.3.4
Version 7.7.1.0
Introduced on S60
Introduced on S-Series
Related
Commands
Reboot FTOS.
Display the current status of all stack members or a specific member.
stack-unit renumber s Change the stack member ID of any stack member or a stand-alone S-Series.
Syntax
Parameters stack-unit stack-unit renumber stack-unit stack-unit Enter the stack member unit identifier of the stack member to reset.
S60 range : 0 - 11 all other S-Series range : 0-7
The first instance of this value is the stack member unit identifier, from 0 to 7, of the switch that you want add to the stack.
The second instance of this value is the desired new unit identifier number.
Defaults none
S-Series Stacking Commands | 1015
Command Modes
Command
History
EXEC Privilege
Usage
Information
Example
Version 8.3.3.4
Version 7.7.1.0
Introduced on S60
Introduced on S-Series
You can renumber any switch, including the management unit or a stand-alone unit.
You cannot renumber a unit to a number of an active member in the stack.
When executing this command on the master, the stack reloads. When the members are renumbered, only that specific unit will reset and come up with the new unit number.
Figure 39-6.
stack-unit renumber Command Example
S50V_7.7#stack-unit 0 renumber 2
Renumbering master unit will reload the stack. Proceed to renumber [confirm yes/ no]:
Related
Commands
Reboot FTOS.
Reset the designated S-Series stack member.
Display the current status of all stack members or a specific member.
upgrade system stack-unit (S-Series stack member) s Copy the boot image or FTOS from the management unit to one or more stack members.
Syntax upgrade { boot | system } stack-unit { all | stack-unit }
Parameters boot system all stack-unit
Enter this keyword to copy the boot image from the management unit to the designated stack members.
Enter this keyword to copy the FTOS image from the management unit to the designated stack members.
Enter this keyword to copy the designated image to all stack members.
Enter the stack member unit identifier of the stack member to reset.
S60 range : 0 - 11 all other S-Series range : 0-7
Defaults No configuration or default values
EXEC Command Modes
Command
History
Version 8.3.3.4
Version 7.7.1.0
Introduced on S60
Introduced on S-Series
1016 | S-Series Stacking Commands
Usage
Information
Related
Commands
You must reload FTOS after using the upgrade command.
upgrade (S-Series management unit)
Reboot FTOS.
Reset the designated S-Series stack member.
Display the current status of all stack members or a specific member.
Display the current FTOS version information on the system.
Upgrade the bootflash image or system image of the S-Series management unit.
S-Series Stacking Commands | 1017
1018 | S-Series Stacking Commands
40
Storm Control
Overview
The FTOS Storm Control feature allows users to limit or suppress traffic during a traffic storm
(Broadcast/Unknown Unicast Rate Limiting, or Multicast on the C-Series and S-Series).
Support for particular Dell Networking platforms (C-Series, E-Series, or S-Series) is indicated by the characters that appear below each command heading:
• C-Series: c
• E-Series: e
• S-Series: s
Commands
The Storm Control commands are:
•
•
•
show storm-control unknown-unicast
•
storm-control broadcast (Configuration)
•
storm-control broadcast (Interface)
•
storm-control multicast (Configuration)
•
storm-control multicast (Interface)
•
storm-control unknown-unicast (Configuration)
•
storm-control unknown-unicast (Interface)
Important Points to Remember
• Interface commands can only be applied on physical interfaces (VLANs and LAG interfaces are not supported).
• An INTERFACE-level command only support storm control configuration on ingress.
• An INTERFACE-level command overrides any CONFIGURATION-level ingress command for that physical interface, if both are configured.
• The CONFIGURATION-level storm control commands can be applied at ingress or egress and are supported on all physical interfaces.
• When storm control is applied on an interface, the percentage of storm control applied is calculated based on the advertised rate of the line card. It is not based on the speed setting for the line card.
Storm Control | 1019
• Do not apply per-VLAN QoS on an interface that has storm control enabled (either on an interface or globally).
• When broadcast storm control is enabled on an interface or globally on ingress, and DSCP marking for a DSCP value 1 is configured for the data traffic, the traffic will go to queue 1 instead of queue 0.
• Similarly, if unicast storm control is enabled on an interface or globally on ingress, and DSCP marking for a DSCP value 2 is configured for the data traffic, the traffic will go to queue 2 instead of queue 0.
Note: Bi-directional traffic (unknown unicast and broadcast), along with egress storm control, causes the configured traffic rates to be split between the involved ports. The percentage of traffic that each port receives after the split is not predictable. These ports can be in the same/different port pipes, or the same/different line cards.
show storm-control broadcast c e s Display the storm control broadcast configuration.
Syntax show storm-control broadcast [ interface ]
Parameters interface (OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• Fast Ethernet is not supported.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 6.5.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 40-1.
show storm-control broadcast Command Example (E-Series)
FTOS#show storm-control broadcast gigabitethernet 11/11
Broadcast storm control configuration
Interface Direction Percentage Wred Profile
--------------------------------------------------------------
Gi 11/11 Ingress 5.6
Gi 11/11 Egress 5.6 -
FTOS#
1020 | Storm Control
Example Figure 40-2.
show storm-control broadcast Command Example (C-Series)
FTOS#show storm-control broadcast gigabitethernet 3/24
Broadcast storm control configuration
Interface Direction Packets/Second
-----------------------------------------------
Gi 3/24 Ingress 1000
FTOS# show storm-control multicast c s Display the storm control multicast configuration.
Syntax show storm-control multicast [ interface ]
Parameters interface (OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration.
• For Fast Ethernet, enter the keyword Fastethernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on C-Series and S-Series
Figure 40-3.
show storm-control multicast Command Example
FTOS#show storm-control multicast gigabitethernet 1/0
Multicast storm control configuration
Interface Direction Packets/Second
-----------------------------------------------
Gi 1/0 Ingress 5
FTOS#
Storm Control | 1021
show storm-control unknown-unicast c e s Display the storm control unknown-unicast configuration
Syntax show storm-control unknown-unicast [ interface ]
Parameters interface (OPTIONAL) Enter one of the following interfaces to display the interface specific storm control configuration.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• Fast Ethernet is not supported.
Defaults
Command Modes
No default behavior or values
EXEC
EXEC Privilege
Command
History
Example
E-Series
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.10
Version 6.5.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 40-4.
show storm-control unknown-unicast Command Example (E-Series)
FTOS#show storm-control unknown-unicast gigabitethernet 11/1
Unknown-unicast storm control configuration
Interface Direction Percentage Wred Profile
--------------------------------------------------------------
Gi 11/1 Ingress 5.9 -
Gi 11/1 Egress 5.7 w8
FTOS#
Example
C-Series
Figure 40-5.
show storm-control unknown-unicast Command Example (C-Series)
FTOS#show storm-control unknown-unicast gigabitethernet 3/0
Unknown-unicast storm control configuration
Interface Direction Packets/Second
-----------------------------------------------
Gi 3/0 Ingress 1000
FTOS#
1022 | Storm Control
storm-control broadcast (Configuration) c e s Configure the percentage of broadcast traffic allowed in or out of the network.
Syntax storm-control broadcast [ percentage decimal_value in | out] | [ wred-profile name ]]
[ packets_per_second in ]
To disable broadcast rate-limiting, use the storm-control broadcast [ percentage decimal_value in
| out] | [wred-profile name]] [ packets_per_second in] command.
Parameters percentage decimal_value in | out wred-profile name packets_per_second in
E-Series Only : Enter the percentage of broadcast traffic allowed in or out of the network. Optionally, you can designate a decimal value percentage, for example,
55.5%.
Percentage: 0 to 100
0 % blocks all related traffic
100% allows all traffic into the interface
Decimal Range: .1 to .9
E-Series Only : (Optionally) Enter the keyword wred-profile followed by the profile name to designate a wred-profile.
C-Series and S-Series Only : Enter the packets per second of broadcast traffic allowed into the network.
C-Series and S-Series Range: 0 to 33554431
S60 Range: 0 to 33554368
Defaults
Command Modes
Command
History
No default behavior or values
CONFIGURATION (conf)
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series
E-Series Only: Added percentage decimal value option
Introduced on E-Series
Broadcast storm control is valid on Layer 2/Layer 3 interfaces only. Layer 2 broadcast traffic is treated as unknown-unicast traffic. storm-control broadcast (Interface) c e s Configure the percentage of broadcast traffic allowed on an interface (ingress only).
Syntax storm-control broadcast [ percentage decimal_value in] |[wred-profile name]]
[packets_per_second in]
To disable broadcast storm control on the interface, use the no storm-control broadcast
[ percentage { decimal_value } in] |[wred-profile name]] [packets_per_second in] command.
Storm Control | 1023
Parameters
Defaults
Command Modes
Command
History percentage decimal_value in wred-profile name packets_per_second in
E-Series Only : Enter the percentage of broadcast traffic allowed in to the network. Optionally, you can designate a decimal value percentage, for example,
55.5%.
Percentage: 0 to 100
0 % blocks all related traffic
100% allows all traffic into the interface
Decimal Range: .1 to .9
E-Series Only : (Optionally) Enter the keyword wred-profile followed by the profile name to designate a wred-profile.
C-Series and S-Series Only : Enter the packets per second of broadcast traffic allowed into the network.
C-Series and S-Series Range: 0 to 33554431
S60 Range: 0 to 33554368
The minimum number of PPS limited on the S60 is 2.
No default behavior or values
INTERFACE (conf-ifinterface slot/port )
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series
E-Series Only: Added percentage decimal value option
Introduced on E-Series storm-control multicast (Configuration) c s Configure the packets per second (pps) of multicast traffic allowed in to the C-Series and S-Series networks only.
Syntax storm-control multicast packets_per_second in
To disable storm-control for multicast traffic into the network, use the no storm-control multicast packets_per_second in command.
Parameters packets_per_second in
C-Series and S-Series Only : Enter the packets per second of multicast traffic allowed into the network followed by the keyword in .
C-Series and S-Series Range: 0 to 33554431
S60 Range: 0 to 33554368
The minimum number of PPS limited on the S60 is 2
Defaults
Command Modes
No default behavior or values
CONFIGURATION (conf)
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on C-Series and S-Series only
1024 | Storm Control
Usage
Information
Broadcast traffic (all 0xFs) should be counted against broadcast storm control meter, not against the multicast storm control meter. It is possible, however, that some multicast control traffic may get dropped when storm control thresholds are exceeded.
storm-control multicast (Interface) c s Configure the percentage of multicast traffic allowed on an C-Series or S-Series interface (ingress only) network only.
Syntax storm-control multicast packets_per_second in
To disable multicast storm control on the interface, use the no storm-control multicast packets_per_second in command.
Parameters packets_per_second in
C-Series and S-Series Only : Enter the packets per second of broadcast traffic allowed into the network.
C-Series and S-Series Range: 0 to 33554431
S60 Range: 0 to 33554368
The minimum number of PPS limited on the S60 is 2
Defaults
Command Modes
No default behavior or values
INTERFACE (conf-ifinterface slot/port )
Command
History
Version 8.3.3.1
Version 7.6.1.0
Introduced on S60
Introduced on C-Series and S-Series storm-control unknown-unicast (Configuration) c e s Configure the percentage of unknown-unicast traffic allowed in or out of the network.
Syntax storm-control unknown-unicast [ percentage decimal_value [ in | out ]] | [wred-profile name]]
[ packets_per_second in]
To disable storm control for unknown-unicast traffic, use the no storm-control unknown-unicast
[ percentage decimal_value [ in | out ] | [wred-profile name]] [ packets_per_second in] command.
Parameters percentage decimal_value [ in | out ]
E-Series Only : Enter the percentage of broadcast traffic allowed in or out of the network. Optionally, you can designate a decimal value percentage, for example, 55.5%.
Percentage: 0 to 100
0 % blocks all related traffic
100% allows all traffic into the interface
Decimal Range: .1 to .9
Storm Control | 1025
wred-profile name packets_per_second in
No default behavior or values
CONFIGURATION
E-Series Only : (Optionally) Enter the keyword wred-profile followed by the profile name to designate a wred-profile.
C-Series and S-Series Only : Enter the packets per second of broadcast traffic allowed into the network.
Range: 0 to 33554431
The minimum number of PPS limited on the S60 is 2
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series
E-Series Only: Added percentage decimal value option
Introduced on E-Series
Unknown Unicast Storm-Control is valid for Layer 2 and Layer 2/Layer 3 interfaces. storm-control unknown-unicast (Interface) c e s Configure percentage of unknown-unicast traffic allowed on an interface (ingress only).
Syntax storm-control unknown-unicast [ percentage decimal_value in ] | [wred-profile name]]
[ packets_per_second in]
To disable unknown-unicast storm control on the interface, use the no storm-control unknown-unicast [ percentage decimal_value in] | [wred-profile name]] [ packets_per_second in] command.
Parameters percentage decimal_value in wred-profile name packets_per_second in
E-Series Only : Enter the percentage of broadcast traffic allowed in to the network. Optionally, you can designate a decimal value percentage, for example,
55.5%.
Percentage: 0 to 100
0 % blocks all related traffic
100% allows all traffic into the interface
Decimal Range: .1 to .9
E-Series Only : (Optionally) Enter the keyword wred-profile followed by the profile name to designate a wred-profile.
C-Series and S-Series Only : Enter the packets per second of broadcast traffic allowed into the network.
C-Series and S-Series Range: 0 to 33554431
S60 Range: 0 to 33554368
The minimum number of PPS limited on the S60 is 2
Defaults
Command Modes
No default behavior or values
INTERFACE (conf-ifinterface slot/port )
1026 | Storm Control
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
Version 6.5.1.0
Introduced on S60
Introduced on S-Series
Introduced on C-Series
E-Series Only: Added percentage decimal value option
Introduced on E-Series
Storm Control | 1027
1028 | Storm Control
41
Spanning Tree Protocol (STP)
Overview
The commands in this chapter configure and monitor the IEEE 802.1d Spanning Tree protocol (STP) and are supported on all three Dell Networking switch/routing platforms, as indicated by the
c
, e
, and s characters under the command headings:
Commands
•
•
•
•
•
•
•
•
•
•
•
•
bridge-priority c e s Set the bridge priority of the switch in an IEEE 802.1D Spanning Tree.
Syntax bridge-priority { priority-value | primary | secondary }
To return to the default value, enter no bridge-priority .
Parameters priority-value primary secondary
Enter a number as the bridge priority value.
Range: 0 to 65535.
Default: 32768.
Enter the keyword primary to designate the bridge as the root bridge.
Enter the keyword secondary to designate the bridge as a secondary root bridge.
Spanning Tree Protocol (STP) | 1029
Defaults
Command Modes
Command
History priority-value = 32768
SPANNING TREE (The prompt is “config-stp”.)
Version 8.3.3.1
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series bpdu-destination-mac-address c s Use the Provider Bridge Group address in Spanning Tree or GVRP PDUs.
Syntax bpdu-destination-mac-address [ stp | gvrp ] provider-bridge-group
Parameters xstp gvrp
Force STP, RSTP, and MSTP to use the Provider Bridge Group address as the destination MAC address in its BPDUs.
Forces GVRP to use the Provider Bridge GVRP Address as the destination
MAC address in its PDUs.
Defaults
Command Modes
Command
History
The destination MAC address for BPDUs is the Bridge Group Address.
CONFIGURATION
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Introduced on C-Series and S-Series.
debug spanning-tree c e s Enable debugging of Spanning Tree Protocol and view information on the protocol.
Syntax debug spanning-tree { stp-id [ all | bpdu | config | events | exceptions | general | root ] | protocol }
To disable debugging, enter no debug spanning-tree .
Parameters stp-id protocol all bpdu config events general root
Enter zero (0). The switch supports one Spanning Tree group with a group ID of 0.
Enter the keyword for the type of STP to debug, either mstp , pvst , or rstp .
(OPTIONAL) Enter the keyword all to debug all spanning tree operations.
(OPTIONAL) Enter the keyword bpdu to debug Bridge Protocol Data Units.
(OPTIONAL) Enter the keyword config to debug configuration information.
(OPTIONAL) Enter the keyword events to debug STP events.
(OPTIONAL) Enter the keyword general to debug general STP operations.
(OPTIONAL) Enter the keyword root to debug STP root transactions.
1030 | Spanning Tree Protocol (STP)
Command Modes
Command
History
EXEC Privilege
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
When you enable debug spanning-tree bpdu for multiple interfaces, the software only sends information on BPDUs for the last interface specified.
Enter SPANNING TREE mode on the switch.
description c e s Enter a description of the Spanning Tree
Syntax description { description }
To remove the description from the Spanning Tree, use the no description { description } command.
Parameters description Enter a description to identify the Spanning Tree (80 characters maximum).
Defaults
Command Modes
Command
History
No default behavior or values
SPANNING TREE (The prompt is “config-stp”.)
Version 8.3.3.1
pre-7.7.1.0
Introduced on S60
Introduced
Related
Commands
Enter SPANNING TREE mode on the switch.
disable c e s Disable Spanning Tree Protocol globally on the switch.
Syntax disable
To enable Spanning Tree Protocol, enter no disable .
Defaults
Command Modes
Enabled (that is, Spanning Tree Protocol is disabled.)
SPANNING TREE
Command
History
Version 8.3.3.1
Version 7.7.1.0
Introduced on S60
Introduced on S-Series
Spanning Tree Protocol (STP) | 1031
Related
Commands
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on C-Series
Introduced on E-Series
Enter SPANNING TREE mode.
forward-delay c e s The amount of time the interface waits in the Listening State and the Learning State before transitioning to the Forwarding State.
Syntax forward-delay seconds
To return to the default setting, enter no forward-delay.
Parameters seconds Enter the number of seconds the FTOS waits before transitioning STP to the forwarding state.
Range: 4 to 30
Default: 15 seconds.
Defaults
Command Modes
Command
History
15 seconds
SPANNING TREE
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Change the wait time before STP refreshes protocol configuration information.
Change the time interval between BPDUs.
hello-time c e s Set the time interval between generation of Spanning Tree Bridge Protocol Data Units (BPDUs).
Syntax hello-time seconds
To return to the default value, enter no hello-time .
Parameters seconds Enter a number as the time interval between transmission of BPDUs.
Range: 1 to 10.
Default: 2 seconds.
Defaults
Command Modes
2 seconds
SPANNING TREE
1032 | Spanning Tree Protocol (STP)
Command
History
Related
Commands
Version 8.3.3.1
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Change the wait time before STP transitions to the Forwarding state.
Change the wait time before STP refreshes protocol configuration information.
max-age c e s Set the time interval for the Spanning Tree bridge to maintain configuration information before refreshing that information.
Syntax max-age seconds
To return to the default values, enter no max-age .
Parameters seconds Enter a number of seconds the FTOS waits before refreshing configuration information.
Range: 6 to 40
Default: 20 seconds.
Defaults
Command Modes
Command
History
20 seconds
SPANNING TREE
Version 8.3.3.1
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Related
Commands
Change the wait time before STP transitions to the Forwarding state.
Change the time interval between BPDUs.
protocol spanning-tree c e s Enter the SPANNING TREE mode to enable and configure the Spanning Tree group.
Syntax protocol spanning-tree stp-id
To disable the Spanning Tree group, enter no protocol spanning-tree stp-id command.
Parameters stp-id Enter zero (0). FTOS supports one Spanning Tree group, group 0.
Defaults
Command Modes
Not configured.
CONFIGURATION
Spanning Tree Protocol (STP) | 1033
Command
History
Example
Version 8.3.3.1
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 41-1.
protocol spanning-tree Command Example
FTOS(conf)#protocol spanning-tree 0
FTOS(config-stp)#
Usage
Information
Related
Commands
STP is not enabled when you enter the SPANNING TREE mode. To enable STP globally on the switch, enter no
disable from the SPANNING TREE mode. disable
Disable Spanning Tree group 0. To enable Spanning Tree group 0, enter no disable .
show config c e s Display the current configuration for the mode. Only non-default values are displayed.
Syntax show config
Command Modes SPANNING TREE
Command
History
Version 8.3.3.1
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Example Figure 41-2.
show config Command for the SPANNING TREE Mode
FTOS(config-stp)#show config protocol spanning-tree 0
no disable
FTOS(config-stp)# show spanning-tree 0 c e s Display the Spanning Tree group configuration and status of interfaces in the Spanning Tree group.
Syntax show spanning-tree 0 [ active | brief | interface interface | root | summary ]
Parameters
0 active brief
Enter 0 (zero) to display information about that specific Spanning Tree group.
(OPTIONAL) Enter the keyword active to display only active interfaces in Spanning
Tree group 0.
(OPTIONAL) Enter the keyword brief to display a synopsis of the Spanning Tree group configuration information.
1034 | Spanning Tree Protocol (STP)
interface interface root summary
Command Modes
Command
History
EXEC Privilege
Version 8.3.3.1
Version 7.7.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
(OPTIONAL) Enter the keyword interface and the type slot/port of the interface you want displayed. Type slot/port options are the following:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a SONET interface, enter the keyword sonet followed by the slot/port information.
• For Port Channel groups, enter the keyword port-channel followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1-255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword root to display configuration information on the
Spanning Tree group root.
(OPTIONAL) Enter the keyword summary to only the number of ports in the Spanning
Tree group and their state.
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Spanning Tree Protocol (STP) | 1035
Example Figure 41-3.
show spanning-tree Command Example
FTOS#show spann 0
Executing IEEE compatible Spanning Tree Protocol
Bridge Identifier has priority 32768, Address 0001.e800.0a56
Configured hello time 2, max age 20, forward delay 15
We are the root of the spanning tree
Current root has priority 32768 address 0001.e800.0a56
Topology change flag set, detected flag set
Number of topology changes 1 last change occurred 0:00:05 ago
from GigabitEthernet 1/3
Timers: hold 1, topology change 35
hello 2, max age 20, forward_delay 15
Times: hello 1, topology change 1, notification 0, aging 2
Port 26 (GigabitEthernet 1/1) is Forwarding
Port path cost 4, Port priority 8, Port Identifier 8.26
Designated root has priority 32768, address 0001.e800.0a56
Designated bridge has priority 32768, address 0001.e800.0a56
Designated port id is 8.26, designated path cost 0
Timers: message age 0, forward_delay 0, hold 0
Number of transitions to forwarding state 1
BPDU: sent:18, received 0
The port is not in the portfast mode
Port 27 (GigabitEthernet 1/2) is Forwarding
Port path cost 4, Port priority 8, Port Identifier 8.27
Designated root has priority 32768, address 0001.e800.0a56
Designated bridge has priority 32768, address 0001.e800.0a56
Designated port id is 8.27, designated path cost 0
Timers: message age 0, forward_delay 0, hold 0
Number of transitions to forwarding state 1
BPDU: sent:18, received 0
The port is not in the portfast mode
Port 28 (GigabitEthernet 1/3) is Forwarding
Port path cost 4, Port priority 8, Port Identifier 8.28
Designated root has priority 32768, address 0001.e800.0a56
Designated bridge has priority 32768, address 0001.e800.0a56
Designated port id is 8.28, designated path cost 0
Timers: message age 0, forward_delay 0, hold 0
Number of transitions to forwarding state 1
BPDU: sent:31, received 0
The port is not in the portfast mode
FTOS#
Table 41-1.
show spanning-tree Command Example Information
Field
“Bridge Identifier.”
“Configured hello...”
“We are...”
“Current root...”
“Topology flag.”
“Number of...”
Description
Lists the bridge priority and the MAC address for this STP bridge.
Displays the settings for hello time, max age, and forward delay.
States whether this bridge is the root bridge for the STG.
Lists the bridge priority and MAC address for the root bridge.
States whether the topology flag and the detected flag were set.
Displays the number of topology changes, the time of the last topology change, and on what interface the topology change occurred.
1036 | Spanning Tree Protocol (STP)
Table 41-1.
show spanning-tree Command Example Information (continued)
Field
“Timers”
“Times”
“Port 1...”
“Port path...”
“Designated root...”
“Designated port...”
Description
Lists the values for the following bridge timers:
• hold time
• topology change
• hello time
• max age
• forward delay
List the number of seconds since the last:
• hello time
• topology change
• notification
• aging
Displays the Interface type slot/port information and the status of the interface (Disabled or Enabled).
Displays the path cost, priority, and identifier for the interface.
Displays the priority and MAC address of the root bridge of the STG that the interface belongs.
Displays the designated port ID
Figure 41-4.
show spanning-tree brief Command Example
FTOS#show span 0 brief
Executing IEEE compatible Spanning Tree Protocol
Root ID Priority 32768
Address 0001.e800.0a56
Root Bridge hello time 2, max age 20, forward delay 15
Bridge ID Priority 32768,
Address 0001.e800.0a56
Configured hello time 2, max age 20, forward delay 15
Interface Designated
Name PortID Prio Cost Sts Cost Bridge ID PortID
-------------- ------ ---- ---- --- ----- ----------------- ------
Gi 1/1 8.26 8 4 FWD 0 32768 0001.e800.0a56 8.26
Gi 1/2 8.27 8 4 FWD 0 32768 0001.e800.0a56 8.27
Gi 1/3 8.28 8 4 FWD 0 32768 0001.e800.0a56 8.28
FTOS#
Usage
Information
You must enable Spanning Tree group 0 prior to using this command.
spanning-tree c e s Configure Spanning Tree group id, cost, priority, and Portfast for an interface.
Syntax spanning-tree stp-id [ cost cost ] [ portfast [ bpduguard ]] [ priority priority ]
To disable Spanning Tree group on an interface, use the no spanning-tree stp-id [ cost cost ]
[ portfast [ bpduguard ] [ shutdown-on-violation ]] [ priority priority ] command.
Spanning Tree Protocol (STP) | 1037
Parameters stp-id cost cost priority portfast priority
[ bpduguard ] shutdown-on-v iolation
Enter the Spanning Tree Protocol group ID.
Range: 0
(OPTIONAL) Enter the keyword cost followed by a number as the cost.
Range: 1 to 65535
Defaults:
100 Mb/s Ethernet interface = 19
1-Gigabit Ethernet interface = 4
10-Gigabit Ethernet interface = 2
Port Channel interface with 100 Mb/s Ethernet = 18
Port Channel interface with 1-Gigabit Ethernet = 3
Port Channel interface with 10-Gigabit Ethernet = 1
(OPTIONAL) Enter keyword priority followed by a number as the priority.
Range: zero (0) to 15.
Default: 8
(OPTIONAL) Enter the keyword portfast to enable Portfast to move the interface into forwarding mode immediately after the root fails.
Enter the keyword bpduguard to disable the port when it receives a BPDU.
(OPTIONAL) Enter the keyword shutdown-on-violation to hardware disable an interface when a BPDU is received and the port is disabled.
cost = depends on the interface type; priority = 8
INTERFACE
Defaults
Command Modes
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 6.2.1.1
Introduced on S60
Introduced hardware shutdown-on-violation option
Introduced on S-Series
Introduced on C-Series
Introduced
If you enable portfast bpduguard on an interface and the interface receives a BPDU, the software disables the interface and sends a message stating that fact. The port is in ERR_DISABLE mode, yet appears in the show interface commands as enabled.
If shutdown-on-violation is not enabled, BPDUs will still be sent to the RPM CPU.
1038 | Spanning Tree Protocol (STP)
42
Time and Network Time Protocol (NTP)
Overview
The commands in this chapter configure time values on the system, either using FTOS, or the hardware, or using the Network Time Protocol (NTP). With NTP, the switch can act only as a client to an NTP clock host. For details, see the “Network Time Protocol” section of the Management chapter in the FTOS Configuration Guide .
The commands in this chapter are generally supported on the C-Series, E-Series, and S-Series, with some exceptions, as noted in the Command History fields and by these symbols under the command headings: c e s
Commands
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
Time and Network Time Protocol (NTP) | 1039
calendar set c e s Set the time and date for the switch hardware clock.
Syntax calendar set time month day year
Parameters time month day year
Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour format, for example, 17:15:00 is 5:15 pm.
Enter the name of one of the 12 months in English.
You can enter the name of a day to change the order of the display to time day month year .
Enter the number of the day.
Range: 1 to 31.
You can enter the name of a month to change the order of the display to time day month year .
Enter a four-digit number as the year.
Range: 1993 to 2035.
EXEC Privilege Command Modes
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 42-1.
calendar set Command Example
FTOS#calendar set 08:55:00 june 18 2006
FTOS#
Usage
Information
You can change the order of the month and day parameters to enter the time and date as time day month year .
In the switch, the hardware clock is separate from the software and is called the calendar. This hardware clock runs continuously. After the hardware clock (the calendar) is set, the FTOS automatically updates the software clock after system bootup.You cannot delete the hardware clock
(calendar).
To manually update the software with the hardware clock, use the command clock read-calendar .
Related
Commands
Set the software clock based on the hardware clock.
Set the software clock.
Set the hardware clock based on the software clock.
Display clock settings.
1040 | Time and Network Time Protocol (NTP)
clock read-calendar c e s Set the software clock on the switch from the information set in hardware clock (calendar).
Syntax clock read-calendar
Defaults Not configured.
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Usage
Information
In the switch, the hardware clock is separate from the software and is called the calendar. This hardware clock runs continuously. After the hardware clock (the calendar) is set, the FTOS automatically updates the software clock after system bootup.
You cannot delete this command (that is, there is not a “no” version of this command).
clock set c e s Set the software clock in the switch.
Syntax clock set time month day year
Parameters time month day year
Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour format, example,
17:15:00 is 5:15 pm.
Enter the name of one of the 12 months, in English.
You can enter the number of a day and change the order of the display to time day month year .
Enter the number of the day.
Range: 1 to 31.
You can enter the name of a month to change the order of the display to time month day year .
Enter a four-digit number as the year.
Range: 1993 to 2035.
Defaults
Command Modes
Command
History
Not configured
EXEC Privilege
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Time and Network Time Protocol (NTP) | 1041
Example Figure 42-2.
clock set Command Example
FTOS#clock set 16:20:00 19 may 2001
FTOS#
Usage
Information
You can change the order of the month and day parameters to enter the time and date as time day month year . You cannot delete the software clock.
The software clock runs only when the software is up. The clock restarts, based on the hardware clock, when the switch reboots.
Dell Networking recommends that you use an outside time source, such as NTP, to ensure accurate time on the switch.
Related
Commands
Set the switch using the NTP settings.
clock summer-time date c e s Set a date (and time zone) on which to convert the switch to daylight savings time on a one-time basis.
Syntax clock summer-time time-zone date start-month start-day start-year start-time end-month end-day end-year end-time [ offset ]
To delete a daylight savings time zone configuration, enter no clock summer-time .
Parameters time-zone start-month start-day start-year start-time end-day end-month end-time
Enter the three-letter name for the time zone. This name is displayed in the show clock
output.
Enter the name of one of the 12 months in English.
You can enter the name of a day to change the order of the display to time day month year .
Enter the number of the day.
Range: 1 to 31.
You can enter the name of a month to change the order of the display to time day month year .
Enter a four-digit number as the year.
Range: 1993 to 2035.
Enter the time in hours:minutes. For the hour variable, use the 24-hour format, example,
17:15 is 5:15 pm.
Enter the number of the day.
Range: 1 to 31.
You can enter the name of a month to change the order of the display to time day month year .
Enter the name of one of the 12 months in English.
You can enter the name of a day to change the order of the display to time day month year .
Enter the time in hours:minutes. For the hour variable, use the 24-hour format, example,
17:15 is 5:15 pm.
1042 | Time and Network Time Protocol (NTP)
Defaults
Command Modes
Command
History end-year offset
Not configured.
CONFIGURATION
Enter a four-digit number as the year.
Range: 1993 to 2035.
(OPTIONAL) Enter the number of minutes to add during the summer-time period.
Range: 1 to1440.
Default: 60 minutes
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Related
Commands
Set the hardware clock.
Set a date (and time zone) on which to convert the switch to daylight savings time each year.
Display the current clock settings.
clock summer-time recurring c e s Set the software clock to convert to daylight savings time on a specific day each year.
Syntax clock summer-time time-zone recurring [ start-week start-day start-month start-time end-week end-day end-month end-time [ offset ]]
To delete a daylight savings time zone configuration, enter no clock summer-time .
Parameters time-zone start-week start-day start-month start-time
Enter the three-letter name for the time zone. This name is displayed in the show clock
output.
You can enter up to eight characters.
•
•
(OPTIONAL) Enter one of the following as the week that daylight savings begins and then enter values for start-day through end-time :
• week-number: Enter a number from 1-4 as the number of the week in the month to start daylight savings time.
first: Enter this keyword to start daylight savings time in the first week of the month.
last: Enter this keyword to start daylight savings time in the last week of the month.
Enter the name of the day that you want daylight saving time to begin. Use English three letter abbreviations, for example, Sun, Sat, Mon, etc.
Range: Sun – Sat
Enter the name of one of the 12 months in English.
Enter the time in hours:minutes. For the hour variable, use the 24-hour format, example,
17:15 is 5:15 pm.
Time and Network Time Protocol (NTP) | 1043
Defaults
Command Modes
Command
History end-week end-day end-month end-time offset
Not configured.
CONFIGURATION
Enter the one of the following as the week that daylight savings ends:
•
•
• week-number: enter a number from 1-4 as the number of the week to end daylight savings time.
first: enter the keyword first to end daylight savings time in the first week of the month.
last: enter the keyword last to end daylight savings time in the last week of the month.
Enter the weekday name that you want daylight saving time to end. Enter the weekdays using the three letter abbreviations, for example Sun, Sat, Mon etc.
Range: Sun to Sat
Enter the name of one of the 12 months in English.
Enter the time in hours:minutes:seconds. For the hour variable, use the 24-hour format, example, 17:15:00 is 5:15 pm.
(OPTIONAL) Enter the number of minutes to add during the summer-time period.
Range: 1 to 1440.
Default: 60 minutes.
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Updated the start-day and end-day options to allow for using the three-letter abbreviation of the weekday name.
Introduced for E-Series
Related
Commands
Set the hardware clock.
Set a date (and time zone) on which to convert the switch to daylight savings time on a one-time basis.
Display the current clock settings.
clock timezone c e s Configure a timezone for the switch.
Syntax clock timezone timezone-name offset
To delete a timezone configuration, enter no clock timezone .
Parameters timezone-name offset
Enter the name of the timezone. You cannot use spaces.
Enter one of the following:
• a number from 1 to 23 as the number of hours in addition to UTC for the timezone.
• a minus sign (-) followed by a number from 1 to 23 as the number of hours
Default Not configured.
1044 | Time and Network Time Protocol (NTP)
Command Modes
Command
History
CONFIGURATION
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Coordinated Universal Time (UTC) is the time standard based on the International Atomic Time standard, commonly known as Greenwich Mean time. When determining system time, you must include the differentiator between UTC and your local timezone. For example, San Jose, CA is the
Pacific Timezone with a UTC offset of -8.
clock update-calendar c e s Set the switch hardware clock based on the software clock.
Syntax clock update-calendar
Defaults Not configured.
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Usage
Information
Use this command only if you are sure that the hardware clock is inaccurate and the software clock is correct. You cannot delete this command (that is, there is not a “no” form of this command).
Related
Commands
Set the hardware clock.
debug ntp c e s Display Network Time Protocol (NTP) transactions and protocol messages for troubleshooting.
Syntax debug ntp { adjust | all | authentication | events | loopfilter | packets | select | sync }
To disable debugging of NTP transactions, use the no debug ntp { adjust | all | authentication | events | loopfilter | packets | select | sync } command.
Parameters adjust all authentication events loopfilter
Enter the keyword adjust to display information on NTP clock adjustments.
Enter the keyword all to display information on all NTP transactions.
Enter the keyword authentication to display information on NTP authentication transactions.
Enter the keyword events to display information on NTP events.
Enter the keyword loopfilter to display information on NTP local clock frequency.
Time and Network Time Protocol (NTP) | 1045
Command Modes
Command
History packets select sync
EXEC Privilege
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Enter the keyword
Enter the keyword
Enter the keyword packets to display information on NTP packets.
select to display information on the NTP clock selection.
sync to display information on the NTP clock synchronization.
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series ntp authenticate c e s Enable authentication of NTP traffic between the switch and the NTP time serving hosts.
Syntax ntp authenticate
To disable NTP authentication, enter no ntp authentication .
Defaults Not enabled.
Command Modes CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Usage
Information
Related
Commands
You also must configure an authentication key for NTP traffic using the ntp authentication-key
command.
Configure authentication key for NTP traffic.
Configure a key to authenticate ntp authentication-key c e s Specify a key for authenticating the NTP server.
Syntax
Parameters ntp authentication-key number md5 [ 0 | 7 ] key number md5
0
Specify a number for the authentication key.
Range: 1 to 4294967295.
This number must be the same as the number parameter configured in the
command.
Specify that the authentication key will be encrypted using MD5 encryption algorithm.
Specify that authentication key will be entered in an unencrypted format (default).
1046 | Time and Network Time Protocol (NTP)
Defaults
7 key
Specify that the authentication key will be entered in DES encrypted format.
Enter the authentication key in the previously specified format.
NTP authentication is not configured by default. If you do not specify the option [ 0 | 7 ], 0 is selected by default.
CONFIGURATION Command Modes
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Added options [0 | 7] for entering authentication key.
Support added for S-Series
Support added for C-Series
Introduced for E-Series
After configuring the
command, configure the
command to complete NTP authentication.
FTOS versions 8.2.1.0 and later use an encryption algorithm to store the authentication key that is different from previous FTOS versions; beginning in version 8.2.1.0, FTOS uses DES encryption to store the key in the startup-config when you enter the command ntp authentication-key . Therefore, if your system boots with a startup-configuration from an FTOS versions prior to 8.2.1.0 in which you have configured ntp authentication-key , the system cannot correctly decrypt the key, and cannot authenticate NTP packets. In this case you must re-enter this command and save the running-config to the startup-config.
Enables NTP authentication.
Configure a trusted key.
ntp broadcast client c e s Set up the interface to receive NTP broadcasts from a Dell Networking switch/router acting as an NTP server.
Syntax ntp broadcast client
To disable broadcast, enter no ntp broadcast client .
Defaults Disabled
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Time and Network Time Protocol (NTP) | 1047
ntp disable c e s Prevent an interface from receiving NTP packets.
Syntax ntp disable
To re-enable NTP on an interface, enter no ntp disable .
Default Disabled (that is, if an NTP host is configured, all interfaces receive NTP packets)
Command Modes INTERFACE
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series ntp multicast client e Configure the switch to receive NTP information from the network via multicast.
Syntax ntp multicast client [ multicast-address ]
To disable multicast reception, use the no ntp multicast client [ multicast-address ] command.
Parameters multicast-address (OPTIONAL) Enter a multicast address. If you do not enter a multicast address, the address 224.0.1.1 is configured.
Defaults
Command Modes
Command
History
Not configured.
INTERFACE pre-Version 6.1.1.0
Introduced for E-Series ntp server c e s Configure an NTP time-serving host.
Syntax ntp server address [ key keyid ] [ prefer ] [ version number ]
To delete an NTP server configuration, use the no ntp server ip-address command.
Parameters address key keyid
Enter either an IP address, in dotted decimal format, of the NTP time server, or enter the name of the server associated with the IP address.
(OPTIONAL) Enter the keyword key and a number as the NTP peer key.
Range: 1 to 4294967295
1048 | Time and Network Time Protocol (NTP)
Defaults
Command Modes
Command
History prefer version number
Not configured.
CONFIGURATION
(OPTIONAL) Enter the keyword prefer to indicate that this peer has priority over other servers.
(OPTIONAL) Enter the keyword version and a number to correspond to the NTP version used on the server.
Range: 1 to 3
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
You can configure multiple time serving hosts (up to 250). From these time serving hosts, the FTOS
will choose one NTP host with which to synchronize. Use the show ntp associations
to determine which server was selected.
Since a large number of polls to NTP hosts can impact network performance, Dell Networking recommends that you limit the number of hosts configured.
Related
Commands
Displays NTP servers configured and their status.
ntp source c e s Specify an interface’s IP address to be included in the NTP packets.
Syntax ntp source interface
To delete the configuration, enter no ntp source .
Parameters interface Enter the following keywords and slot/port or number information:
• For an 100/1000 Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Loopback interfaces, enter the keyword loopback followed by a number from zero (0) to 16383.
• For a Port Channel interface, enter the keyword lag followed by a number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For SONET interface types, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
Defaults Not configured.
Time and Network Time Protocol (NTP) | 1049
Command Modes
Command
History
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series ntp trusted-key c e s Set a key to authenticate the system to which NTP will synchronize.
Syntax ntp trusted-key number
To delete the key, use the no ntp trusted-key number command.
Parameters number Enter a number as the trusted key ID.
Range: 1 to 4294967295.
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
The number parameter in the
command must be the same number as the number parameter in the
ntp authentication-key command. If you change the ntp authentication-key
command, you must also change the
command.
ntp authentication-key ntp authenticate
Set an authentication key for NTP.
Enable the NTP authentication parameters you set.
ntp update-calendar c e s Configure the FTOS to update the calendar (the hardware clock) with the NTP-derived time.
Syntax ntp update-calendar [ minutes ]
To return to default setting, enter no ntp update-calendar .
Parameters minutes (OPTIONAL) Enter the number of minutes between updates from NTP to the hardware clock.
Range: 1 to 1440.
Default: 60 minutes.
Defaults Not enabled.
1050 | Time and Network Time Protocol (NTP)
Command Modes
Command
History
CONFIGURATION
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series show calendar c e s Display the current date and time based on the switch hardware clock.
Syntax show calendar
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Example Figure 42-3.
show calendar Command Example
FTOS#show calendar
16:33:30 UTC Tue Jun 26 2001
FTOS#
Related
Commands
Display the time and date from the switch software clock.
show clock c e s Display the current clock settings.
Syntax show clock [ detail ]
Parameters detail (OPTIONAL) Enter the keyword detail to view the source information of the clock.
Command Modes EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Time and Network Time Protocol (NTP) | 1051
Example Figure 42-4.
show clock Command Example
FTOS#show clock
11:05:56.949 UTC Thu Oct 25 2001
FTOS#
Example Figure 42-5.
show clock detail Command Example
FTOS#show clock detail
12:18:10.691 UTC Wed Jan 7 2009
Time source is RTC hardware
Summer time starts 02:00:00 UTC Sun Mar 8 2009
Summer time ends 02:00:00 ABC Sun Nov 1 2009
FTOS#
Related
Commands
Display the time and date from the switch hardware clock.
Display the time and date from the switch hardware clock.
show ntp associations c e s Display the NTP master and peers.
Syntax show ntp associations
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 42-6.
show ntp associations Command Example
FTOS#show ntp associations remote ref clock st when poll reach delay offset disp
==========================================================================
10.10.120.5 0.0.0.0 16 - 256 0 0.00 0.000 16000.0
*172.16.1.33 127.127.1.0 11 6 16 377 -0.08 -1499.9 104.16
172.31.1.33 0.0.0.0 16 - 256 0 0.00 0.000 16000.0
192.200.0.2 0.0.0.0 16 - 256 0 0.00 0.000 16000.0
* master (synced), # master (unsynced), + selected, - candidate
FTOS#
1052 | Time and Network Time Protocol (NTP)
Related
Commands
Table 42-1.
show ntp associations Command Fields
Field
(none) remote ref clock st when poll reach delay offset disp
Description
One or more of the following symbols could be displayed:
• * means synchronized to this peer
• # means almost synchronized to this peer
• + means the peer was selected for possible synchronization
• - means the peer is a candidate for selection
• ~ means the peer is statically configured
Displays the remote IP address of the NTP peer.
Displays the IP address of the remote peer’s reference clock.
Displays the peer’s stratum, that is, the number of hops away from the external time source. A
16 in this column means the NTP peer cannot reach the time source.
Displays the last time the switch received an NTP packet.
Displays the polling interval (in seconds).
Displays the reachability to the peer (in octal bitstream).
Displays the time interval or delay for a packet to complete a round-trip to the NTP time source
(in milliseconds).
Displays the relative time of the NTP peer’s clock to the switch clock (in milliseconds).
Displays the dispersion.
Display current NTP status.
show ntp status c e s Display the current NTP status.
Syntax show ntp status
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.0
Introduced on S60
Support added for S-Series
Support added for C-Series
Introduced for E-Series
Figure 42-7.
show ntp status Command Example
FTOS#show ntp status
Clock is synchronized, stratum 2, reference is 100.10.10.10
frequency is -32.000 ppm, stability is 15.156 ppm, precision is 4294967290 reference time is BC242FD5.C7C5C000 (10:15:49.780 UTC Mon Jan 10 2000) clock offset is clock offset msec, root delay is 0.01656 sec root dispersion is 0.39694 sec, peer dispersion is peer dispersion msec peer mode is client
FTOS#
Time and Network Time Protocol (NTP) | 1053
Table 42-2.
show ntp status Command Example Information
Field
“Clock is...”
“frequency is...”
“reference time is...”
“clock offset is...”
“root dispersion is...”
“peer mode is...”
Description
States whether or not the switch clock is synchronized, which NTP stratum the system is assigned and the IP address of the NTP peer.
Displays the frequency (in ppm), stability (in ppm) and precision (in Hertz) of the clock in this system.
Displays the reference time stamp.
Displays the system offset to the synchronized peer and the time delay on the path to the NTP root clock.
Displays the root and path dispersion.
State what NTP mode the switch is. This should be client mode.
Related
Commands
Display information on NTP master and peer configurations.
1054 | Time and Network Time Protocol (NTP)
43
S60 u-Boot
Overview
All commands in this chapter are in u-Boot. These commands are supported on the only.
To access this mode, hit any key when the following line appears on the console during a system boot:
Hit any key to stop autoboot:
You enter u-Boot immediately, as indicated by the => prompt.
Note: This chapter discusses only a few commands available in uBoot. The commands included here are those that are comparable to those found in the Boot User mode on other
S-Series systems.
Commands
•
•
•
•
Note: You cannot use the Tab key to complete commands in this mode.
printenv
Syntax
Command Modes
Command
History
Display the current system boot variable and other system settings.
printenv uBoot
Version 8.3.3.1
Introduced on the S60.
S60 u-Boot | 1055
Example => printenv baudrate=9600 uboot_filesize=0x80000 bootfile=FTOS-SC-1.2.0.0E3.bin
bootcmd=echo Booting primary bootline....;$primary_boot;boot;echo
Failed;echo Booting secondary bootline....;$secondary_boot;boot;echo
Failed;echo Booting default bootline....;$default_boot;boot;echo Failed;echo
Rebooting...;reset bootdelay=5 loads_echo=1 rootpath=/opt/nfsroot hostname=unknown loadaddr=640000 ftpuser=FTOS ftppasswd=FTOS uboot=u-boot.bin
tftpflash=tftpboot $loadaddr $uboot; protect off 0xfff80000 +$filesize; erase 0x fff80000 +$filesize; cp.b $loadaddr 0xfff80000 $filesize; protect on
0xfff80000
+$filesize; cmp.b $loadaddr 0xfff80000 $filesize ethact=eTSEC1 ethaddr=00:01:E8:82:09:B2 serverip=10.11.9.4
primary_boot=f10boot tftp://10.11.9.2/si-s60-40g secondary_boot=f10boot flash0
MAC Address default_boot=f10boot tftp://192.168.128.1/FTOS-SC-1.2.0.0E3.bin
gatewayip=10.11.192.254
ipaddr=10.11.198.114
netmask=255.255.0.0
mgmtautoneg=true mgmtspeed100=true mgmtfullduplex=true stdin=serial stdout=serial stderr=serial
Environment size: 1002/8188 bytes
=>
Default Gateway Address
Management IP Address
Boot
Variables reset
Syntax
Command Modes
Command
History
Reload the S60 system. reset uBoot
Version 8.3.3.1
Introduced on the S60.
1056 | S60 u-Boot
Usage
Information
You must save your changes before resetting the system, or all changes will be lost.
save
Syntax
Command Modes
Command
History
Usage
Information
Save configurations created in uBoot.
save uBoot
Version 8.3.3.1
Introduced on the S60.
You must save your changes before resetting the system, or all changes will be lost.
setenv
Configure system settings.
Syntax setenv [gatewayip address | primary_image f10boot location | secondary_image f10boot location | default_image f10boot location | ipaddr address | ethaddr address | enablepwdignore | stconfigignore]
Parameters gatewayip address primary_image secondary_image default_image location ipaddr ethaddr address enablepwdignore stconfigignore
Enter the IP address for the default gateway.
Enter the keywords primary_image to configure the boot parameters used in the first attempt to boot FTOS .
Enter the keywords secondary_image to configure boot parameters used if the primary operating system boot selection is not available.
Enter the keywords default_image to configure boot parameters used if the secondary operating system boot parameter selection is not available.
The default location should always be the internal flash device (flash:), and a verified image should be stored there.
Enter the location of the image file to be loaded. The keyword f10boot must precede the location when using this command. For example, primary_image f10boot tftp://10.10.10.10/server
Enter the keyword ipaddr to configure the system management IP address.
Enter the keyword ethaddr to configure system management MAC address.
Enter the IP address in standard IPv4 format and the MAC address in standard MAC format.
Enter the keywords enablepwdignore true to reload the system software without the enable password configured.
Enter the keywords stconfigignore true ignore the startup configuration file when reloading the system.
S60 u-Boot | 1057
Command Modes
Command
History uBoot
Version 8.3.3.1
Introduced on the S60.
1058 | S60 u-Boot
44
Uplink Failure Detection (UFD)
Overview
Uplink Failure Detection (UFD) provides detection of the loss of upstream connectivity and, if used with NIC teaming, automatic recovery from a failed link.
Uplink Failure Detection is supported on the following platforms: s
(S50 only) and
Commands
•
•
•
•
•
•
•
•
show running-config uplink-state-group
•
•
•
clear ufd-disable s S50 only Re-enable one or more downstream interfaces on the switch/router that are in a UFD-disabled error state so that an interface can send and receive traffic.
Syntax clear ufd-disable { interface interface | uplink-state-group group-id }
Uplink Failure Detection (UFD) | 1059
Parameters
Defaults
Command Modes interface interface Specifies one or more downstream interfaces.
For interface , enter one of the following interface types:
• Fast Ethernet: fastethernet { slot / port | slot / port-range }
• 1-Gigabit Ethernet: gigabitethernet { slot / port | slot / port-range }
• 10-Gigabit Ethernet: tengigabitethernet { slot / port | slot / port-range }
• Port channel: port-channel {1-512 | port-channel-range }
Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: gigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5
A comma is required to separate each port and port-range entry.
Re-enables all UFD-disabled downstream interfaces in the group.
Valid group-id values are 1 to 16.
uplink-state-group group-id
A downstream interface in an uplink-state group that has been disabled by UFD is disabled and in a UFD-disabled error state.
CONFIGURATION
Command
History
Related
Commands
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
Assign a port or port-channel to the uplink-state group as a downstream interface.
Create an uplink-state group and enabling the tracking of upstream links.
debug uplink-state-group s S50 only Enable debug messages for events related to a specified uplink-state group or all groups.
Syntax
Parameters
Defaults
Command Modes debug uplink-state-group [ group-id ] group-id Enables debugging on the specified uplink-state group. Valid group-id values are 1 to 16.
None
EXEC Privilege
1060 | Uplink Failure Detection (UFD)
Command
History
Usage
Information
Related
Commands
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
To turn off debugging event messages, enter the no debug uplink-state-group [ group-id ] command.
Re-enable downstream interfaces that are in a UFD-disabled error state.
description s S50 only Enter a text description of an uplink-state group.
Syntax
Parameters
Defaults
Command Modes description text text
None
UPLINK-STATE-GROUP
Text description of the uplink-state group.
Maximum length: 80 alphanumeric characters.
Command
History
Related
Commands
Example
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
Create an uplink-state group and enabling the tracking of upstream links.
FTOS(conf-uplink-state-group-16)# description test
FTOS(conf-uplink-state-group-16)# downstream s S50 only Assign a port or port-channel to the uplink-state group as a downstream interface.
Syntax downstream interface
Uplink Failure Detection (UFD) | 1061
Parameters
Defaults
Command Modes interface Enter one of the following interface types:
• Fast Ethernet: fastethernet { slot / port | slot / port-range }
• 1-Gigabit Ethernet: gigabitethernet { slot / port | slot / port-range }
• 10-Gigabit Ethernet: tengigabitethernet { slot / port | slot / port-range }
• Port channel: port-channel {1-512 | port-channel-range }
Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: gigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5
A comma is required to separate each port and port-range entry.
None
UPLINK-STATE-GROUP
Command
History
Usage
Information
Related
Commands
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
You can assign physical port or port-channel interfaces to an uplink-state group.
You can assign an interface to only one uplink-state group. Each interface assigned to an uplink-state group must be configured as either an upstream or downstream interface, but not both.
You can assign individual member ports of a port channel to the group. An uplink-state group can contain either the member ports of a port channel or the port channel itself, but not both.
To delete an uplink-state group, enter the no downstream interface command.
Assign a port or port-channel to the uplink-state group as an upstream interface.
Create an uplink-state group and enabling the tracking of upstream links.
downstream auto-recover s S50 only Enable auto-recovery so that UFD-disabled downstream ports in an uplink-state group automatically come up when a disabled upstream port in the group comes back up.
Syntax downstream auto-recover
Defaults
Command Modes
The auto-recovery of UFD-disabled downstream ports is enabled.
UPLINK-STATE-GROUP
1062 | Uplink Failure Detection (UFD)
Command
History
Usage
Information
Related
Commands
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
To disable auto-recovery on downstream links, enter the no downstream auto-recover command.
Assign a port or port-channel to the uplink-state group as a downstream interface.
Create an uplink-state group and enabling the tracking of upstream links.
downstream disable links s S50 only Configure the number of downstream links in the uplink-state group that will be disabled if one upstream link in an uplink-state group goes down.
Syntax
Parameters
Defaults
Command Modes downstream disable links { number | all} number Enter the number of downstream links to be brought down by UFD.
Range: 1 to 1024.
Brings down all downstream links in the group. all
No downstream links are disabled when an upstream link in an uplink-state group goes down.
UPLINK-STATE-GROUP
Command
History
Usage
Information
Related
Commands
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
A user-configurable number of downstream interfaces in an uplink-state group are put into a link-down state with an UFD-Disabled error message when one upstream interface in an uplink-state group goes down.
If all upstream interfaces in an uplink-state group go down, all downstream interfaces in the same uplink-state group are put into a link-down state.
To revert to the default setting, enter the no downstream disable links command.
Assign a port or port-channel to the uplink-state group as a downstream interface.
Create an uplink-state group and enabling the tracking of upstream links.
Uplink Failure Detection (UFD) | 1063
enable s S50 only Enable uplink state group tracking for a specific Uplink Failure Detection (UFD) group.
Syntax enable
Defaults
Command Modes
Upstream-link tracking is automatically enabled in an uplink-state group.
UPLINK-STATE-GROUP
Command
History
Usage
Information
Related
Commands
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
To disable upstream-link tracking without deleting the uplink-state group, enter the no enable command.
Create an uplink-state group and enabling the tracking of upstream links.
show running-config uplink-state-group s
S50 only Display the current configuration of one or more uplink-state groups.
Syntax
Parameters
Defaults
Command Modes show running-config uplink-state-group [ group-id ] group-id Displays the current configuration of all uplink-state groups or a specified group. Valid group-id values are 1 to 16.
None
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.12.0
Version 8.4.2.3
Introduced on S4810
Introduced on the S-Series S50.
FTOS#show running-config uplink-state-group
!
no enable uplink state track 1 downstream GigabitEthernet 0/2,4,6,11-19
1064 | Uplink Failure Detection (UFD)
Related
Commands upstream TengigabitEthernet 0/48, 52 upstream PortChannel 1
!
uplink state track 2 downstream GigabitEthernet 0/1,3,5,7-10 upstream TengigabitEthernet 0/56,60
Display status information on a specified uplink-state group or all groups.
Create an uplink-state group and enabling the tracking of upstream links.
show uplink-state-group s S50 only Display status information on a specified uplink-state group or all groups.
Syntax
Parameters
Defaults
Command Modes show uplink-state-group [ group-id ] [detail] group-id detail
Displays status information on a specified uplink-state group or all groups. Valid group-id values are 1 to 16.
Displays additional status information on the upstream and downstream interfaces in each group
None
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.12.0
Version 8.4.2.3
Introduced on S4810
Introduced on the S-Series S50.
FTOS# show uplink-state-group
Uplink State Group: 1 Status: Enabled, Up
Uplink State Group: 3 Status: Enabled, Up
Uplink State Group: 5 Status: Enabled, Down
Uplink State Group: 6 Status: Enabled, Up
Uplink State Group: 7 Status: Enabled, Up
Uplink State Group: 16 Status: Disabled, Up
FTOS# show uplink-state-group 16
Uplink State Group: 16 Status: Disabled, Up
FTOS#show uplink-state-group detail
(Up): Interface up (Dwn): Interface down (Dis): Interface disabled
Uplink State Group : 1 Status: Enabled, Up
Upstream Interfaces :
Uplink Failure Detection (UFD) | 1065
Related
Commands
Downstream Interfaces :
Uplink State Group : 3 Status: Enabled, Up
Upstream Interfaces : Gi 0/46(Up) Gi 0/47(Up)
Downstream Interfaces : Te 13/0(Up) Te 13/1(Up) Te 13/3(Up) Te 13/5(Up) Te 13/6(Up)
Uplink State Group : 5 Status: Enabled, Down
Upstream Interfaces : Gi 0/0(Dwn) Gi 0/3(Dwn) Gi 0/5(Dwn)
Downstream Interfaces : Te 13/2(Dis) Te 13/4(Dis) Te 13/11(Dis) Te 13/12(Dis) Te 13/13(Dis) Te 13/14(Dis) Te 13/15(Dis)
Uplink State Group : 6 Status: Enabled, Up
Upstream Interfaces :
Downstream Interfaces :
Uplink State Group : 7 Status: Enabled, Up
Upstream Interfaces :
Downstream Interfaces :
Uplink State Group : 16 Status: Disabled, Up
Upstream Interfaces : Gi 0/41(Dwn) Po 8(Dwn)
Downstream Interfaces : Gi 0/40(Dwn)
show running-config uplink-state-group
Display the current configuration of one or more uplink-state groups.
Create an uplink-state group and enabling the tracking of upstream links.
uplink-state-group s S50 only Create an uplink-state group and enabling the tracking of upstream links on a switch/router.
Syntax
Parameters
Defaults
Command Modes uplink-state-group group-id group-id
None
CONFIGURATION
Enter the ID number of an uplink-state group. Range: 1-16.
Command
History
Usage
Information
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
After you enter the command, you enter uplink-state-group configuration mode to assign upstream and downstream interfaces to the group.
An uplink-state group is considered to be operationally up if at least one upstream interface in the group is in the link-up state.
1066 | Uplink Failure Detection (UFD)
Related
Commands
Example
An uplink-state group is considered to be operationally down if no upstream interfaces in the group are in the link-up state. No uplink-state tracking is performed when a group is disabled or in an operationally down state.
To delete an uplink-state group, enter the no uplink-state-group group-id command.
To disable upstream-link tracking without deleting the uplink-state group, enter the no enable command in uplink-state-group configuration mode.
show running-config uplink-state-group
Display the current configuration of one or more uplink-state groups.
Display status information on a specified uplink-state group or all groups.
FTOS(conf)#uplink-state-group 16
FTOS(conf)#
02:23:17: %RPM0-P:CP %IFMGR-5-ASTATE_UP: Changed uplink state group Admin state to up: Group 16 upstream s
S50 only Assign a port or port-channel to the uplink-state group as an upstream interface.
Syntax
Parameters
Defaults
Command Modes upstream interface interface Enter one of the following interface types:
• Fast Ethernet: fastethernet { slot / port | slot/port-rang e }
• 1-Gigabit Ethernet: gigabitethernet { slot/port | slot/port-range }
• 10-Gigabit Ethernet: tengigabitethernet { slot/port | slot/port-range }
• 40-Gigabit Ethernet: fortyGigE { slot/port | slot/port-range }
• Port channel: port-channel {1-512 | port-channel-range }
Where port-range and port-channel-range specify a range of ports separated by a dash (-) and/or individual ports/port channels in any order; for example: gigabitethernet 1/1-2,5,9,11-12 port-channel 1-3,5
A comma is required to separate each port and port-range entry.
None
UPLINK-STATE-GROUP
Command
History
Usage
Information
Version 8.3.12.0
Introduced on S4810
Version 8.4.2.3
Introduced on the S-Series S50.
You can assign physical port or port-channel interfaces to an uplink-state group.
Uplink Failure Detection (UFD) | 1067
Related
Commands
Example
You can assign an interface to only one uplink-state group. Each interface assigned to an uplink-state group must be configured as either an upstream or downstream interface, but not both.
You can assign individual member ports of a port channel to the group. An uplink-state group can contain either the member ports of a port channel or the port channel itself, but not both.
To delete an uplink-state group, enter the no upstream interface command.
Assign a port or port-channel to the uplink-state group as a downstream interface.
Create an uplink-state group and enabling the tracking of upstream links.
FTOS(conf-uplink-state-group-16)# upstream gigabitethernet 1/10-15
FTOS(conf-uplink-state-group-16)#
1068 | Uplink Failure Detection (UFD)
45
VLAN Stacking
Overview
With the VLAN-Stacking feature (also called Stackable VLANs and QinQ ), available on all Dell
Networking platforms (C-Series c
, E-Series e
, and S-Series s
) that are supported by this version of FTOS, you can “stack” VLANs into one tunnel and switch them through the network transparently.
Commands
The commands included are:
•
•
•
•
•
•
•
•
•
•
•
For information on basic VLAN commands, see
in the chapter
Important Points to Remember
• If Spanning Tree Protocol (STP) is not enabled across the Stackable VLAN network, STP BPDUs from the customer’s networks are tunneled across the Stackable VLAN network .
• If STP is enabled across the Stackable VLAN network, STP BPDUs from the customer’s networks are consumed and not tunneled across the Stackable VLAN network unless protocol tunneling is enabled.
Note
: For details on protocol tunneling on the E-Series, see Chapter 36, Service Provider Bridging
.
• Layer 3 protocols are not supported on a Stackable VLAN network.
VLAN Stacking | 1069
• Assigning an IP address to a Stackable VLAN is supported when all the members are only
Stackable VLAN trunk ports. IP addresses on a Stackable VLAN-enabled VLAN is not supported if the VLAN contains Stackable VLAN access ports. This facility is provided for SNMP management over a Stackable VLAN enabled VLAN containing only Stackable VLAN trunk interfaces. Layer 3 routing protocols on such a VLAN are not supported.
• It is recommended that you do not use the same MAC address, on different customer VLANs, on the same Stackable VLAN.
• Interfaces configured using Stackable VLAN access or Stackable VLAN trunk commands will not switch traffic for the default VLAN. These interfaces will switch traffic only when they are added to a non-default VLAN.
• Starting with FTOS 7.8.1 for C-Series and S-Series (FTOS 7.7.1 for E-Series, 8.2.1.0 for E-Series
ExaScale), a vlan-stack trunk port is also allowed to be configured as a tagged port and as an untagged port for single-tagged VLANs. When the vlan-stack trunk port is also a member of an untagged vlan, the port should be in hybrid mode. See
dei enable c s Make packets eligible for dropping based on their DEI value.
Syntax
Defaults dei enable
Packets are colored green; no packets are dropped.
Command Mode CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced on C-Series and S-Series.
dei honor c s Honor the incoming DEI value by mapping it to an FTOS drop precedence. You may enter the command once for 0 and once for 1.
Syntax dei honor { 0 | 1 } { green | red | yellow }
Parameters
0 | 1 green | red | yellow
Enter the bit value you want to map to a color.
Choose a color:
• Green : High priority packets that are the least preferred to be dropped.
• Yellow : Lower priority packets that are treated as best-effort.
• Red : Lowest priority packets that are always dropped (regardless of congestion status).
Defaults
Command Mode
Command
History
Disabled; Packets with an unmapped DEI value are colored green.
INTERFACE
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced on C-Series and S-Series.
1070 | VLAN Stacking
Usage
Information
Related
Commands
You must first enable DEI for this configuration to take effect.
dei mark c s Set the DEI value on egress according to the color currently assigned to the packet.
Syntax dei mark { green | yellow } { 0 | 1 }
Parameters
0 | 1 green | yellow
Enter the bit value you want to map to a color.
Choose a color:
• Green : High priority packets that are the least preferred to be dropped.
• Yellow : Lower priority packets that are treated as best-effort.
Defaults
Command Mode
Command
History
All the packets on egress will be marked with DEI 0.
INTERFACE
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced on C-Series and S-Series.
You must first enable DEI for this configuration to take effect.
Usage
Information
Related
Commands
member c e s
Syntax member interface
To remove an interface from a Stackable VLAN, use the no member interface command.
Parameters interface Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Port Channel, enter the keyword port-channel followed by a number from 1 to
255 for TeraScale and ExaScale; 1 to 128 for C-Series and S-Series.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
Defaults
Command Mode
Not configured.
CONF-IF-VLAN
VLAN Stacking | 1071
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Introduced on the E-Series ExaScale
Version 7.6.1.0
Support added for C-Series and S-Series
E-Series original Command
You must enable the Stackable VLAN (using the
vlan-stack compatible command) on the VLAN prior
to adding a member to the VLAN.
Enable Stackable VLAN on a VLAN.
show interface dei-honor c s Display the dei honor configuration.
Syntax show interface dei-honor [ interface slot / port | linecard number port-set number ]
Parameters interface slot / port linecard number port-set number
Enter the interface type followed by the line card slot and port number.
Enter linecard followed by the line card slot number, then enter port-set followed by the port-pipe number.
EXEC Privilege Command Mode
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced on C-Series and S-Series.
Example FTOS#show interface dei-honor
Default Drop precedence: Green
Interface CFI/DEI Drop precedence
-------------------------------------------------------------
Gi 0/1 0 Green
Gi 0/1 1 Yellow
Gi 8/9 1 Red
Gi 8/40 0 Yellow
Related
Commands
show interface dei-mark c s Display the dei mark configuration.
Syntax show interface dei-mark [ interface slot / port | linecard number port-set number ]
Parameters interface slot / port linecard number port-set number
Enter the interface type followed by the line card slot and port number.
Enter linecard followed by the line card slot number, then enter port-set followed by the port-pipe number.
1072 | VLAN Stacking
Command Mode
Command
History
Example
EXEC Privilege
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced on C-Series and S-Series.
FTOS#show interface dei-mark
Default CFI/DEI Marking: 0
Interface Drop precedence CFI/DEI
------------------------------------------------
Gi 0/1 Green 0
Gi 0/1 Yellow 1
Gi 8/9 Yellow 0
Gi 8/40 Yellow 0
Related
Commands
vlan-stack access c e s Specify a Layer 2 port or port channel as an access port to the Stackable VLAN network.
Syntax vlan-stack access
To remove access port designation, enter no vlan-stack access .
Defaults Not configured.
Command Modes INTERFACE
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.6.1.0
Introduced on S60
Introduced on the E-Series ExaScale
Support added for C-Series and S-Series
E-Series original Command
Prior to enabling this command, you must enter the switchport command to place the interface in
Layer 2 mode.
To remove the access port designation, the port must be removed (using the no member interface command) from all Stackable VLAN enabled VLANs.
vlan-stack compatible c e s Enable the Stackable VLAN feature on a VLAN.
Syntax vlan-stack compatible
To disable the Stackable VLAN feature on a VLAN, enter no vlan-stack compatible .
Defaults
Command Modes
Not configured.
CONF-IF-VLAN
VLAN Stacking | 1073
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Introduced on the E-Series ExaScale
Version 7.6.1.0
Support added for C-Series and S-Series
E-Series original Command
You must remove the members prior to disabling the Stackable VLAN feature.
To view the Stackable VLANs, use the show vlan command in the EXEC Privilege mode. Stackable
VLANs contain members, designated by the M in the Q column of the command output.
Figure 45-1.
show vlan Command Example with Stackable VLANs
FTOS#show vlan
Codes: * - Default VLAN, G - GVRP VLANs
NUM Status Q Ports
* 1 Inactive
2 Active M Gi 13/13
M Gi 13/0-2
3 Active M Po1(Gi 13/14-15)
M Gi 13/18
M Gi 13/3
4 Active M Po1(Gi 13/14-15)
M Gi 13/18
M Gi 13/4
5 Active M Po1(Gi 13/14-15)
M Gi 13/18
M Gi 13/5
FTOS# vlan-stack dot1p-mapping c s Map C-Tag dot1p values to a S-Tag dot1p value. C-Tag values may be separated by commas, and dashed ranges are permitted. Dynamic Mode CoS overrides any Layer 2 QoS configuration in case of conflicts.
Syntax vlan-stack dot1p-mapping c-tag-dot1p values sp-tag-dot1p value
Parameters c-tag-dot1p value sp-tag-dot1p value
Enter the keyword followed by the customer dot1p value that will be mapped to a service provider do1p value.
Range: 0-7
Enter the keyword followed by the service provider dot1p value.
Range: 0-7
Defaults
Command Modes
None
INTERFACE
Command
History
Version 8.3.3.1
Version 8.3.1.0
Introduced on S60
Introduced on C-Series and S-Series.
1074 | VLAN Stacking
vlan-stack protocol-type c e s Define the Stackable VLAN Tag Protocol Identifier (TPID) for the outer VLAN tag (also called the
VMAN tag ). If you do not configure this command, FTOS assigns the value 0x9100.
Syntax vlan-stack protocol-type number
Parameters number Enter the hexadecimal number as the Stackable VLAN tag.
On the E-Series: FTOS accepts the Most Significant Byte (MSB) and then appends zeros for the Least Significant Byte (LSB).
On the C-Series and S-Series: You may specify both bytes of the 2-byte S-Tag TPID.
E-Series Range: 0-FF
C-Series and S-Series Range: 0-FFFF
Default: 9100
Defaults
Command Modes
0x9100
CONFIGURATION
Command
History
Version 8.3.3.1
Version 8.2.1.0
Introduced on S60
Introduced on the E-Series ExaScale. C-Series and S-Series accept both bytes of the
2-byte S-Tag TPID.
Introduced on the E-Series ExaScale Version 8.2.1.0
Version 7.6.1.0
Support added for C-Series and S-Series
E-Series original Command
Usage
Information
See the FTOS Configuration Guide for specific interoperability limitations regarding the S-Tag TPID.
On E-Series TeraScale, the two characters you enter in the CLI for number become the MSB, as shown in
.
Table 45-1.
Configuring a TPID on the E-Series TeraScale number
1
10
More than two characters.
Resulting TPID
0x0100
0x1000
Configuration rejected.
On E-Series ExaScale, C-Series, and S-Series, four characters you enter in the CLI for number are interpreted as follows:
Table 45-2.
Configuring a TPID on the E-Series TeraScale number
1
10
81
8100
Resulting TPID
0x0001
0x0010
0x0081
0x8100
VLAN Stacking | 1075
Related
Commands
Set a port (physical ports only) to accept both tagged and untagged frames. A port configured this way is identified as a hybrid port in report displays.
Specify a Layer 2 port or port channel as a trunk port to the Stackable VLAN network.
vlan-stack trunk c e s Specify a Layer 2 port or port channel as a trunk port to the Stackable VLAN network.
Syntax vlan-stack trunk
To remove a trunk port designation from the selected interface, enter no vlan-stack trunk .
Defaults
Command Modes
Not configured.
INTERFACE
Command
History
Version 8.3.3.1
Introduced on S60
Version 8.2.1.0
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Introduced on the E-Series ExaScale
Functionality augmented for C-Series and S-Series to enable multi-purpose use of the port. See Usage Information, below.
Functionality augmented for E-Series to enable multi-purpose use of the port. See
Usage Information, below.
Introduced for C-Series and S-Series
E-Series original Command
Usage
Information
Prior to using this command, you must execute the switchport command to place the interface in
Layer 2 mode.
To remove the trunk port designation, the port must first be removed (using the no member interface command) from all Stackable VLAN-enabled VLANs.
Starting with FTOS 7.7.1.0 for E-Series, the VLAN-Stack trunk port can transparently tunnel, in a
service provider environment, customer-originated xSTP control protocol PDUs. See Chapter 36,
Starting with FTOS 7.8.1.0 for C-Series and S-Series (FTOS 7.7.1 for E-Series), a VLAN-Stack trunk port is also allowed to be configured as a tagged port and as an untagged port for single-tagged
VLANs. When the VLAN-Stack trunk port is also a member of an untagged VLAN, the port should be in hybrid mode. See
.
In Example 1 below.a VLAN-Stack trunk port is configured and then also made part of a single-tagged
VLAN.
In Example 2 below, the Tag Protocol Identifier (TPID) is set to 8848. The “Gi 3/10” port is configured to act as a VLAN-Stack access port, while the “TenGi 8/0” port will act as a VLAN-Stack trunk port, switching Stackable VLAN traffic for VLAN 10, while also switching untagged traffic for VLAN 30 and tagged traffic for VLAN 40. (To allow VLAN 30 traffic, the native VLAN feature is required, by executing the portmode hybrid
command. See portmode hybrid in
1076 | VLAN Stacking
Example 1 Figure 45-2.
Adding a Stackable VLAN Trunk Port to a Tagged VLAN
FTOS(conf-if-gi-0/42)#switchport
FTOS(conf-if-gi-0/42)#vlan-stack trunk
FTOS(conf-if-gi-0/42)#show config
!
interface GigabitEthernet 0/42
no ip address
switchport
vlan-stack trunk
no shutdown
FTOS(conf-if-gi-0/42)#interface vlan 100
FTOS(conf-if-vl-100)#vlan-stack compatible
FTOS(conf-if-vl-100-stack)#member gigabitethernet 0/42
FTOS(conf-if-vl-100-stack)#show config
!
interface Vlan 100
no ip address
vlan-stack compatible
member GigabitEthernet 0/42
shutdown
FTOS(conf-if-vl-100-stack)#interface vlan 20
FTOS(conf-if-vl-20)#tagged gigabitethernet 0/42
FTOS(conf-if-vl-20)#show config
!
interface Vlan 20
no ip address
tagged GigabitEthernet 0/42
shutdown
FTOS(conf-if-vl-20)#do show vlan
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
* 1 Inactive
20 Active T Gi 0/42
100 Active M Gi 0/42
FTOS(conf-if-vl-20)#
Example 2 Figure 45-3.
Adding a Stackable VLAN Trunk Port to Tagged and Untagged VLANs
FTOS(config)#vlan-stack protocol-type 88A8
FTOS(config)#interface gigabitethernet 3/10
FTOS(conf-if-gi-3/10)#no shutdown
FTOS(conf-if-gi-3/10)#switchport
FTOS(conf-if-gi-3/10)#vlan-stack access
FTOS(conf-if-gi-3/10)#exit
FTOS(config)#interface tenGigabitethernet 8/0
FTOS(conf-if-te-10/0)#no shutdown
FTOS(conf-if-te-10/0)#portmode hybrid
FTOS(conf-if-te-10/0)#switchport
FTOS(conf-if-te-10/0)#vlan-stack trunk
FTOS(conf-if-te-10/0)#exit
FTOS(config)#interface vlan 10
FTOS(conf-if-vlan)#vlan-stack compatible
FTOS(conf-if-vlan)#member Gi 7/0, Gi 3/10, TenGi 8/0
FTOS(conf-if-vlan)#exit
FTOS(config)#interface vlan 30
FTOS(conf-if-vlan)#untagged TenGi 8/0
FTOS(conf-if-vlan)#exit
FTOS(config)#
FTOS(config)#interface vlan 40
FTOS(conf-if-vlan)#tagged TenGi 8/0
FTOS(conf-if-vlan)#exit
FTOS(config)#
VLAN Stacking | 1077
1078 | VLAN Stacking
Virtual Router Redundancy Protocol (VRRP)
46
Overview
Virtual Router Redundancy Protocol (VRRP) commands are supported on all platforms: c , e
, and s
.
To enter the VRRP mode on an interface, use the vrrp-group
command at the INTERFACE mode. The interface must be in Layer 3 mode. You can configure up to 12 VRRP groups on one interface.
For configuration details, see the VRRP chapter in the FTOS Configuration Guide .
Commands
The commands are:
•
•
•
•
•
•
•
•
•
•
•
•
•
•
advertise-interval c e s Set the time interval between VRRP advertisements.
Syntax advertise-interval seconds
To return to the default settings, enter no advertise-interval .
Virtual Router Redundancy Protocol (VRRP) | 1079
Parameters
Defaults
Command Modes
Command
History
Usage
Information seconds
1 second.
Enter a number of seconds.
Range: 1 to 255.
Default: 1 second.
INTERFACE-VRRP
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Dell Networking recommends that you keep the default setting for this command. If you do change the time interval between VRRP advertisements on one router, you must change it on all routers.
authentication-type c e s Enable authentication of VRRP data exchanges.
Syntax authentication-type simple [ encryption-type ] password
To delete an authentication type and password, enter no authentication-type .
Parameters simple encryption-type password
Enter the keyword simple to specify simple authentication.
(OPTIONAL) Enter one of the following numbers:
• 0 (zero) for an unencrypted (clear text) password
• 7 (seven) for hidden text password.
Enter a character string up to 8 characters long as a password. If you do not enter an encryption-type, the password is stored as clear text.
Defaults
Command Modes
Not configured.
VRRP
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
The password is displayed in the show config
output if the encryption-type is unencrypted or clear text.
If you choose to encrypt the password, the
show config displays an encrypted text string.
1080 | Virtual Router Redundancy Protocol (VRRP)
clear counters vrrp c e s Clear the counters maintained on VRRP operations.
Syntax clear counters vrrp [ vrrp-id ]
Parameters vrrp-id (OPTIONAL) Enter the number of the VRRP group ID.
Range: 1 to 255
Command Modes EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series debug vrrp c e Allows you to enable debugging of VRRP.
Syntax debug vrrp interface [ vrrp-id ] { all | packets | state | timer }
To disable debugging, use the no debug vrrp interface [ vrrp-id ] { all | packets | state | timer } command.
Parameters interface vrrp-id all bfd packets state timer
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel interface types, enter the keyword port-channel followed by the number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by the VLAN ID. The VLAN
ID range is from 1 to 4094.
(OPTIONAL) Enter a number from 1 to 255 as the VRRP group ID.
Enter the keyword all to enable debugging of all VRRP groups.
Enter the keyword bfd to enable debugging of all VFFP BFD interactions
Enter the keyword packets to enable debugging of VRRP control packets.
Enter the keyword state to enable debugging of VRRP state changes.
Enter the keyword timer to enable debugging of the VRRP timer.
EXEC Privilege Command Modes
Command
History
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on C-Series
Introduced on E-Series
Virtual Router Redundancy Protocol (VRRP) | 1081
Usage
Information
If no options are specified, debug is active on all interfaces and all VRRP groups.
description c e s Configure a short text string describing the VRRP group.
Syntax description text
To delete a VRRP group description, enter no description .
Parameters text Enter a text string up to 80 characters long.
Defaults
Command Modes
Command
History
Not enabled.
VRRP
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series disable c e s Disable a VRRP group.
Syntax disable
Defaults
Command Modes
To re-enable a disabled VRRP group, enter no disable .
C and S-Series default: VRRP is enabled.
E-Series default: VRRP is disabled.
VRRP
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands
To enable VRRP traffic, assign an IP address to the VRRP group using the
and enter no disable .
Specify the IP address of the Virtual Router.
1082 | Virtual Router Redundancy Protocol (VRRP)
hold-time c e s Specify a delay (in seconds) before a switch becomes the MASTER virtual router. By delaying the initialization of the VRRP MASTER, the new switch can stabilize its routing tables.
Syntax hold-time seconds
To return to the default value, enter no hold-time .
Parameters seconds Enter a number of seconds.
Range: 0 to 65535.
Default: zero (0) seconds.
Defaults
Command Modes
Command
History zero (0) seconds
VRRP
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
Related
Commands
If a switch is a MASTER and you change the hold timer, you must disable and re-enable VRRP for the
new hold timer value to take effect.
Disable a VRRP group.
preempt c e s Permit a BACKUP router with a higher priority value to preempt or become the MASTER router.
Syntax preempt
To prohibit preemption, enter no preempt .
Defaults Enabled (that is, a BACKUP router can preempt the MASTER router).
Command Modes VRRP
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Virtual Router Redundancy Protocol (VRRP) | 1083
priority c e s Specify a VRRP priority value for the VRRP group. This value is used by the VRRP protocol during the MASTER election process.
Syntax
Parameters priority priority
To return to the default value, enter no priority .
priority Enter a number as the priority. Enter 255 only if the router’s virtual address is the same as the interface’s primary IP address (that is, the router is the OWNER).
Range: 1 to 255.
Default: 100.
Defaults
Command Modes
Command
History
100
VRRP
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Usage
Information
To guarantee that a VRRP group becomes MASTER, configure the VRRP group’s virtual address with same IP address as the interface’s primary IP address and change the
255.
If you set the
virtual-address is not equal to the interface’s primary IP address,
an error message appears.
show config c e s View the non-default VRRP configuration.
Syntax show config [ verbose ]
Parameters verbose (OPTIONAL) Enter the keyword verbose to view all VRRP group configuration information, including defaults.
VRRP Command Modes
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
1084 | Virtual Router Redundancy Protocol (VRRP)
Example Figure 46-1.
Command Example: show config
FTOS(conf-if-vrid-4)#show con
vrrp-group 4
virtual-address 119.192.182.124
! show vrrp c e s View the VRRP groups that are active. If no VRRP groups are active, the FTOS returns No Active
VRRP group .”
Syntax show vrrp [ vrrp-id ] [ interface ] [ brief ]
Parameters vrrp-id interface brief
(OPTIONAL) Enter the Virtual Router Identifier for the VRRP group to view only that group.
Range: 1 to 255.
(OPTIONAL) Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For Port Channel interface types, enter the keyword port-channel followed by the number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For SONET interfaces, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by the VLAN ID. The VLAN
ID range is from 1 to 4094.
(OPTIONAL) Enter the keyword brief to view a table of information on the VRRP groups on the E-Series.
Command Modes EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 46-2.
show vrrp brief Command Example
FTOS>Interface Grp Pri Pre State Master addr Virtual addr(s)
Description------------------------------------------------------------------------------
Gi 10/37 1 100 Y Master 200.200.200.200 200.200.200.201
Gi 10/37 2 100 Y Master 200.200.200.200 200.200.200.202 200.200.200.203 Description
Gi 10/37 3 100 Y Master 1.1.1.1 1.1.1.2
Gi 10/37 4 100 Y Master 200.200.200.200 200.200.200.206 200.200.200.207 ... short desc
Gi 10/37 254 254 Y Master 200.200.200.200 200.200.200.204 200.200.200.205
FTOS>
Virtual Router Redundancy Protocol (VRRP) | 1085
Table 46-1.
Command Example Descriptions: show vrrp brief
Item
Interface
Grp
Pri
Pre
State
Master addr
Virtual addr(s)
Description
Lists the interface type, slot and port on which the VRRP group is configured.
Displays the VRRP group ID.
Displays the priority value assigned to the interface.
command is configured to track that interface and the interface is disabled, the cost is subtracted from the priority value assigned to the interface.
States whether preempt is enabled on the interface.
• Y = Preempt is enabled.
• N = Preempt is not enabled.
Displays the operational state of the interface by using one of the following:
• NA/IF (the interface is not available).
• MASTER (the interface associated with the MASTER router).
• BACKUP (the interface associated with the BACKUP router).
Displays the IP address of the MASTER router.
Displays the virtual IP addresses of the VRRP routers associated with the interface.
Figure 46-3.
Command Example: show vrrp
FTOS>show vrrp
------------------
GigabitEthernet 12/3, VRID: 1, Net: 10.1.1.253
State: Master, Priority: 105, Master: 10.1.1.253 (local)
Hold Down: 0 sec, Preempt: TRUE, AdvInt: 1 sec
Adv rcvd: 0, Adv sent: 1862, Gratuitous ARP sent: 0
Virtual MAC address:
00:00:5e:00:01:01
Virtual IP address:
10.1.1.252
Authentication: (none)
Tracking states for 1 interfaces:
Up GigabitEthernet 12/17 priority-cost 10
------------------
GigabitEthernet 12/4, VRID: 2, Net: 10.1.2.253
State: Master, Priority: 110, Master: 10.1.2.253 (local)
Hold Down: 10 sec, Preempt: TRUE, AdvInt: 1 sec
Adv rcvd: 0, Adv sent: 1862, Gratuitous ARP sent: 0
Virtual MAC address:
00:00:5e:00:01:02
Virtual IP address:
10.1.2.252
Authentication: (none)
Tracking states for 2 interfaces:
Up GigabitEthernet 2/1 priority-cost 10
Up GigabitEthernet 12/17 priority-cost 10
FTOS>
1086 | Virtual Router Redundancy Protocol (VRRP)
Table 46-2.
Command Example Description: show vrrp
Line Beginning with Description
GigabitEthernet 12/3...
Displays the Interface, the VRRP group ID, and the network address.
If the interface is no sending VRRP packets, 0.0.0.0
appears as the network address.
State: master...
Displays the interface’s state:
•
•
•
Na/If (not available), master (MASTER virtual router) backup (BACKUP virtual router) the interface’s priority and the IP address of the MASTER.
Hold Down:...
Adv rcvd:...
•
•
•
This line displays additional VRRP configuration information:
Hold Down displays the hold down timer interval in seconds.
Preempt displays TRUE if preempt is configured and FALSE if preempt is not configured.
AdvInt displays the Advertise Interval in seconds.
•
•
•
This line displays counters for the following:
Adv rcvd displays the number of VRRP advertisements received on the interface.
Adv sent displays the number of VRRP advertisements sent on the interface.
Gratuitous ARP sent displays the number of gratuitous ARPs sent.
Virtual MAC address Displays the virtual MAC address of the VRRP group.
Virtual IP address Displays the virtual IP address of the VRRP router to which the interface is connected.
Authentication:...
States whether authentication is configured for the VRRP group. If it is, the authentication type and the password are listed.
Tracking states...
This line is displayed if the track command is configured on an interface. Below this
line, the following information on the tracked interface is displayed:
• Dn or Up states whether the interface is down or up.
• the interface type slot/port information track c e s Monitor an interface and lower the priority value of the VRRP group on that interface if it is disabled.
Syntax track interface [ priority-cost cost ]
To disable monitoring, use the no track interface command.
Virtual Router Redundancy Protocol (VRRP) | 1087
Parameters interface cost
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet followed by the slot/port information.
• For a Loopback interface, enter the keyword loopback followed by a number from 0 to 16383.
• For Port Channel interface types, enter the keyword port-channel followed by the number:
C-Series and S-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale
• For SONET interfaces, enter the keyword sonet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword TenGigabitEthernet followed by the slot/port information.
• For a VLAN interface, enter the keyword vlan followed by a number from 1 to 4094.
(OPTIONAL) Enter a number as the amount to be subtracted from the priority value.
Range: 1 to 254.
Default: 10.
Defaults
Command Modes
Command
History cost = 10
VRRP
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
If the interface is disabled, the cost value is subtracted from the
value and forces a new
MASTER election if the priority value is lower than the priority value in the BACKUP virtual routers.
virtual-address c e s Configure up to 12 IP addresses of virtual routers in the VRRP group. You must set at least one virtual address for the VRRP group to start sending VRRP packets.
Syntax virtual-address ip-address1 [... ip-address12 ]
To delete one or more virtual IP addresses, use the no virtual-address ip-address1 [... ip-address12 ] command.
Parameters ip-address1
... ip-address12
Enter an IP address of the virtual router in dotted decimal format.
The IP address must be on the same subnet as the interface’s primary IP address.
(OPTIONAL) Enter up 11 additional IP addresses of virtual routers in dotted decimal format. Separate the IP addresses with a space.
The IP addresses must be on the same subnet as the interface’s primary IP address.
Defaults
Command Modes
Not configured.
VRRP
1088 | Virtual Router Redundancy Protocol (VRRP)
Command
History
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
Version 7.4.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced support for telnetting to the VRRP group IP address assigned using this command
Introduced on E-Series
The VRRP group only becomes active and sends VRRP packets when a virtual IP address is configured. When you delete the virtual address, the VRRP group stops sending VRRP packets.
A system message appears after you enter or delete the virtual-address command.
To guarantee that a VRRP group becomes MASTER, configure the VRRP group’s virtual address with the same IP address as the interface’s primary IP address and change the
255.
You can ping the virtual addresses configured in all VRRP groups.
vrrp-group c e s Assign a VRRP ID to an interface. You can configure up to 12 VRRP groups per interface.
Syntax vrrp-group vrrp-id
Parameters vrrp-id Enter a number as the group ID.
Range: 1 to 255.
Defaults
Command Modes
Command
History
Not configured.
INTERFACE
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S60
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
The VRRP group only becomes active and sends VRRP packets when a virtual IP address is configured. When you delete the virtual address, the VRRP group stops sending VRRP packets.
Assign up to 12 virtual IP addresses per VRRP group.
Virtual Router Redundancy Protocol (VRRP) | 1089
1090 | Virtual Router Redundancy Protocol (VRRP)
47
S-Series Debugging and Diagnostics
This chapter contains three sections:
•
Diagnostics and Monitoring Commands
•
•
•
Diagnostics and Monitoring Commands
For similar commands, see also
Chapter 4, Control and Monitoring
.
logging coredump server s Enable the S-Series to send application core dumps to an FTP server.
Syntax logging coredump server server username username password [ type ] password
To disable core dump logging, use the no logging coredump server server username username password password
Parameters server username type password
Enter the hostname or IP address of the FTP server where FTOS sends application core dumps.
Enter the username to access the FTP server.
Enter the password type. Enter 0 to specify that an unencrypted password will follow, or 7 to specify that a Type 7 encrypted password will follow.
Enter the password to access the FTP server.
Defaults
Command Modes
Disabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.7.1.0
Introduced on S60
Introduced on S-Series
Usage
Information
You must use this command to enable core dump logging before a software exception occurs. If the
FTP server is unreachable, FTOS aborts the application core dump.
S-Series Debugging and Diagnostics | 1091
Offline Diagnostic Commands
The offline diagnostics test suite is useful for isolating faults and debugging hardware. While tests are running, FTOS results are saved as a text file (TestReport-SU-X.txt) in the flash directory. This show file command is available only on master and standby.
Important Points to Remember
• Offline diagnostics can only be run when the unit is offline.
• You can only run offline diagnostics on a unit to which you are connected via console.
In other words, you cannot run diagnostics on a unit to which you are connected via a stacking link.
• Diagnostic results are printed to the screen. FTOS does not write them to memory.
• Diagnostics only test connectivity, not the entire data path.
The offline diagnostics commands are:
•
•
•
diag stack-unit s Run offline diagnostics on a stack unit.
Syntax
Parameters diag stack-unit number [ alllevels | level0 | level1 | level2 ] number alllevels level0 level1 level2
Enter the stack-unit number.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Enter the keyword alllevels to run the complete set of offline diagnostic tests.
Enter the keyword level0 to run Level 0 diagnostics. Level 0 diagnostics check for the presence of various components and perform essential path verifications. In addition, they verify the identification registers of the components on the board.
Enter the keyword Level1 to run Level 1 diagnostics. Level 1 diagnostics is a smaller set of diagnostic tests with support for automatic partitioning. They perform status/self test for all the components on the board and test their registers for appropriate values. In addition, they perform extensive tests on memory devices (e.g., SDRAM, flash, NVRAM, EEPROM, and
CPLD) wherever possible. There are no tests on 10G links. At this level, stack ports are shut down automatically.
Enter the keyword level2 to run Level 2 diagnostics. Level 2 diagnostics is a full set of diagnostic tests with no support for automatic partitioning. Level 2 diagnostics are used primarily for on-board loopback tests and more extensive component diagnostics. Various components on the board are put into loop back mode, and test packets are transmitted through those components. These diagnostics also perform snake tests using VLAN configurations. You must physically remove the unit from the stack to test 10G links.
Defaults None
1092 | S-Series Debugging and Diagnostics
Command Modes
Command
History
EXEC Privilege
Version 8.3.3.1
Version 7.7.1.0
Introduced on the S60.
Introduced on S-Series offline stack-unit s Place a stack unit in the offline state.
Syntax offline stack-unit number
Parameters number Enter the stack unit number.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Defaults
Command Mode
Command
History
None
EXEC Privilege
H
Version 8.3.3.1
Version 8.2.1.0
Version 7.7.1.0
Introduced on the S60.
Added warning message to off-line diagnostic
Introduced on S-Series
Related
Commands
Usage
Information
H
View S-Series system component status (for example, temperature, voltage).
You cannot enter this command on a Master or Standby unit.
The system reboots when the off-line diagnostics complete. This is an automatic process. A warning message appears when the offline stack-unit command is implemented.
Warning - Diagnostic execution will cause stack-unit to reboot after completion of diags.
Proceed with Offline-Diags [confirm yes/no]:y online stack-unit s Place a stack unit in the online state.
Syntax online stack-unit number
Parameters number Enter the stack unit number.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Defaults None
S-Series Debugging and Diagnostics | 1093
Command Mode
Command
History
EXEC Privilege
H
Version 8.3.3.1
Version 7.7.1.0
Related
Commands
Introduced on the S60.
Introduced on S-Series
View S-Series system component status (for example, temperature, voltage).
Buffer Tuning Commands
The buffer tuning commands are:
•
•
•
buffer-profile (Configuration)
•
•
•
Warning: Altering the buffer allocations is a sensitive operation. Do not use any buffer tuning commands without first contacting the Dell Networking Technical
Assistance Center.
buffer (Buffer Profile) c s Allocate an amount of dedicated buffer space, dynamic buffer space, or packet pointers to queues 0 to 3.
Syntax buffer [ dedicated | dynamic | packets-pointers ] queue0 number queue1 number queue2 number queue3 number
Parameters dedicated dynamic packets-pointers queue0 number
Enter this keyword to configure the amount of dedicated buffer space per queue.
Enter this keyword to configure the amount of dynamic buffer space per
Field Processor.
Enter this keyword to configure the number of packet pointers per queue.
Enter this keyword to allocate an amount of buffer space or packet pointers to Queue 0.
Dedicated Buffer Range: 0-2013
Dynamic Buffer Range:
FP: 0-2013
CSF: 0-131200 (in multiples of 80)
Packet Pointer Range: 0-2047
1094 | S-Series Debugging and Diagnostics
queue1 queue2 queue3 number number number
Enter this keyword to allocate an amount of buffer space or packet pointers to Queue 1.
Dedicated Buffer Range: 0-2013
Dynamic Buffer Range:
FP: 0-2013
CSF: 0-131200 (in multiples of 80)
Packet Pointer Range: 0-2047
Enter this keyword to allocate an amount of buffer space or packet pointers to Queue 2.
Dedicated Buffer Range: 0-2013
Dynamic Buffer Range:
FP: 0-2013
CSF: 0-131200 (in multiples of 80)
Packet Pointer Range: 0-2047
Enter this keyword to allocate an amount of buffer space or packet pointers to Queue 3.
Dedicated Buffer Range: 0-2013
Dynamic Buffer Range:
FP: 0-2013
CSF: 0-131200 (in multiples of 80)
Packet Pointer Range: 0-2047
Defaults
Command Mode
Command
History
None
BUFFER PROFILE
H
Version 7.7.1.0
Version 7.6.1.0
Related
Commands
Introduced on S-Series
Introduced on C-Series
buffer-profile (Configuration)
Create a buffer profile that can be applied to an interface.
buffer (Configuration) c s Apply a buffer profile to all Field or Switch Fabric processors in a port-pipe.
buffer [ csf | fp-uplink ] linecard slot port-set port-pipe buffer-policy buffer-profile
Parameters csf fp-uplink linecard slot port-set port-pipe buffer-policy buffer-profile
Enter this keyword to apply a buffer profile to all Switch Fabric processors in a port-pipe.
Enter this keyword to apply a buffer profile to all Field Processors in a a port-pipe.
Enter the keyword linecard followed by the line card slot number.
Enter the keyword port-set followed by the port-pipe number.
Range: 0-3 on C-Series, 0-1 on S-Series
Enter the keyword buffer-policy followed by the name of a buffer profile you created.
None
S-Series Debugging and Diagnostics | 1095
Command Mode
Usage
Information
Usage
Information
Command
History
BUFFER PROFILE
If you attempt to apply a buffer profile to a non-existent port-pipe, FTOS displays the following message. However, the configuration still appears in the running-config.
%DIFFSERV-2-DSA_BUFF_CARVING_INVALID_PORT_SET: Invalid FP port-set 2 for linecard 2.
Valid range of port-set is <0-1>
When you remove a buffer-profile using the command no buffer-profile [ fp | csf ] from
CONFIGURATION mode, the buffer-profile name still appears in the output of show buffer-profile
[ detail | summary ]. After a line card reset, the buffer profile correctly returns to the default values, but the profile name remains. Remove it from the show buffer-profile [ detail | summary ] command output by entering no buffer [ fp-uplink | csf ] linecard port-set buffer-policy from
CONFIGURATION mode and no buffer-policy from INTERFACE mode.
H
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Related
Commands
buffer-profile (Configuration)
Create a buffer profile that can be applied to an interface.
buffer-profile (Configuration) c s Create a buffer profile that can be applied to an interface.
Syntax
Parameters buffer-profile {{ fp | csf } profile-name | global { 1Q | 4Q } fp csf profile-name global
1Q
4Q
Enter this keyword to create a buffer profile for the Field Processor.
Enter this keyword to create a buffer profile for the Switch Fabric Processor.
Create a name for the buffer profile.
Apply one of two pre-defined buffer profiles to all of the port-pipes in the system.
Enter this keyword to choose a pre-defined buffer profile for single queue
(i.e non-QoS) applications.
Enter this keyword to choose a pre-defined buffer profile for four queue (i.e
QoS) applications.
Defaults
Command Mode
Command
History global 4Q
CONFIGURATION
H
Version 7.8.1.0
Version 7.7.1.0
Version 7.6.1.0
Added global keyword.
Introduced on S-Series
Introduced on C-Series
Related
Commands
Allocate an amount of dedicated buffer space, dynamic buffer space, or packet pointers to queues 0 to 3.
1096 | S-Series Debugging and Diagnostics
Usage
Information
The buffer-profile global command fails if you have already applied a custom buffer-profile on an interface. Similarly, when buffer-profile global is configured, you cannot not apply buffer-profile on any interface.
If the default buffer-profile (4Q) is active, FTOS displays an error message instructing you to remove the default configuration using the command no buffer-profile global .
You must reload the system for the global buffer-profile to take effect.
buffer-profile (Interface) c s Apply a buffer profile to an interface.
Syntax buffer-profile profile-name
Parameters profile-name Enter the name of the buffer profile you want to apply to the interface.
Defaults
Command Mode
Command
History
None
INTERFACE
H
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Related
Commands
buffer-profile (Configuration)
Create a buffer profile that can be applied to an interface.
show buffer-profile c s Display the buffer profile that is applied to an interface.
Syntax
Parameters show buffer-profile { detail | summary } { csf | fp-uplink } detail summary csf fp-uplink
Display the buffer allocations of the applied buffer profiles.
Display the buffer-profiles that are applied to line card port-pipes in the system.
Display the Switch Fabric Processor buffer profiles that you have applied to line card port-pipes in the system.
Display the Field Processor buffer profiles that you have applied to line card port-pipes in the system.
Defaults
Command Mode
None
INTERFACE
Command
History
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
S-Series Debugging and Diagnostics | 1097
Example Figure 47-1.
show buffer-profile Command Example
FTOS#show buffer-profile summary fp-uplink
Linecard Port-set Buffer-profile
0 0 test1
4 0 test2
FTOS#
Related
Commands
buffer-profile (Configuration)
Create a buffer profile that can be applied to an interface.
show buffer-profile interface c s Display the buffer profile that is applied to an interface.
Syntax
Parameters show buffer-profile { detail | summary } interface interface slot/port detail summary interface slot/port interface
Display the buffer allocations of a buffer profile.
Display the Field Processors and Switch Fabric Processors that are applied to line card port-pipes in the system.
Enter the keyword interface followed by the interface type, either gigabitethernet or tengigabitethernet .
Enter the slot and port number of the interface.
Defaults
Command Mode
Command
History
Example
None
INTERFACE
H
Version 7.7.1.0
Version 7.6.1.0
Introduced on S-Series
Introduced on C-Series
Figure 47-2.
show buffer-profile interface Command Example
FTOS#show buffer-profile detail csf linecard 4 port-set 0
Linecard 4 Port-set 0
Buffer-profile test
Queue# Dedicated Buffer Buffer Packets
(Bytes)
0 36960 718
1 18560 358
2 18560 358
3 18560 358
4 9600 64
5 9600 64
6 9600 64
7 9600 63
FTOS#
Related
Commands
buffer-profile (Configuration)
Create a buffer profile that can be applied to an interface.
1098 | S-Series Debugging and Diagnostics
Hardware Commands
These commands display information from a hardware sub-component or ASIC.
The commands are:
•
•
•
•
•
•
•
show hardware stack-unit buffering-unit
•
clear hardware stack-unit s Clear statistics from selected hardware components.
Syntax clear hardware stack-unit id { counters | unit 0–1 counters | cpu data-plane statistics | cpu party-bus statistics | stack-port 0–52 }
Parameters stack-unit counters unit 0–1 id
counters
Enter the keyword stack-unit to select a particular stack member and then enter one of the following command options to clear a specific collection of data.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Enter the keyword counters to clear the counters on the selected stack member.
Enter the keyword unit along with a port-pipe number, from 0 to 1 , followed by the keyword counters to clear the counters on the selected port-pipe.
Note : S25 models (S25N, S25P, S25V, etc.) have only port-pipe 0.
Enter the keywords cpu data-plane statistics to clear the data plane statistics.
cpu data-plane statistics cpu party-bus statistics Enter the keywords cpu party-bus statistics to clear the management statistics.
stack-port 0–52 Enter the keyword stack-port followed by the port number of the stacking port to clear the statistics of the particular stacking port.
Range: 0 to 52
Note : You can identify stack port numbers by physical inspection of the rear modules. The numbering is the same as for the 10G ports.
You can also inspect the output of the show system stack-ports command.
Defaults
Command Modes
No default behavior or values
EXEC Privilege
S-Series Debugging and Diagnostics | 1099
Command
History
Related
Commands
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series
Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
clear hardware system-flow s Clear system-flow statistics from selected hardware components.
Syntax clear hardware system-flow layer2 stack-unit id port-set 0-1 counters
Parameters stack-unit id port-set 0–1 counters
Enter the keyword stack-unit to select a particular stack member and then enter one of the following command options to clear a specific collection of data.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Enter the keyword port-set along with a port-pipe number, from 0 to 1 , followed by the keyword counters to clear the system-flow counters on the selected port-pipe.
Note : S25 models (S25N, S25P, S25V, etc.) have only port-pipe 0.
Defaults
Command Modes
No default behavior or values
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series
Related
Commands
Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
hardware watchdog s Set the watchdog timer to trigger a reboot and restart the system.
Syntax
Defaults
Command Mode hardware watchdog
Enabled
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced
1100 | S-Series Debugging and Diagnostics
Usage
Information
This command enables a hardware watchdog mechanism that automatically reboots an FTOS switch/ router with a single unresponsive unit. This is a last resort mechanism intended to prevent a manual power cycle.
show hardware layer2 acl s Display Layer 2 ACL data for the selected stack member and stack member port-pipe.
Syntax show hardware layer2 acl stack-unit id port-set 0-1
Parameters stack-unit id port-set 0-1
Enter the keyword stack-unit to select a stack ID.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Enter the keyword port-set with a port-pipe number — 0 or 1. The S25 models of the S-Series have only port-pipe 0.
Defaults
Command Modes
Command
History
No default behavior
EXEC Privilege
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series show hardware layer3 s Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
Syntax
Parameters show hardware layer3 { acl | qos } stack-unit id port-set 0-1 acl | qos stack-unit port-set id
0-1
Enter either the keyword acl or the keyword qos to select between
ACL or QoS data.
Enter the keyword stack-unit to select a stack ID.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Enter the keyword port-set with a port-pipe number — 0 or 1. The S25 models of the S-Series have only port-pipe 0.
Defaults
Command Modes
No default behavior
EXEC Privilege
Command
History
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series
S-Series Debugging and Diagnostics | 1101
show hardware stack-unit
Display the data plane or management plane input and output statistics of the designated component of the designated stack member.
Syntax show hardware stack-unit stack-unit { cpu data-plane statistics [ stack-port 0-52 ] | cpu party-bus statistics | drops [ unit number [ port 0-27 ]] | stack-port 0-52 | ti-monitor | unit 0-1
{ counters | details | port-stats [ detail ] | register }}
Parameters stack-unit
{ cpu data-plane statistics stack-unit command-option }
Enter the keyword stack-unit to select a particular stack member and then enter one of the following command options to display a collection of data based on the option entered.
Unit ID range:
S60 range : 0 - 11 all other S-Series range : 0-7
Enter the keywords cpu data-plane statistics , optionally followed by the keywords stack port and its number — 0 to 52 — to display the data plane statistics, which shows the Higig port raw input/output counter statistics to which the stacking module is connected.
cpu party-bus statistics Enter the keywords cpu party-bus statistics , to display the
Management plane input/output counter statistics of the pseudo party bus interface.
drops [ unit 0-1 [ port
0-27 ]]
Enter the port-pipe 0 or 1, and then use port 0-27 to select a port on that port-pipe. drops keyword to display internal drops on the selected stack member. Optionally, use the unit keyword with 0 or 1 to select stack-port 0-52 unit
[
0-1 details | port-stats detail ]
{ counters |
| register }
Enter this keyword and a stacking port number to select a stacking port for which to display statistics. Identify the stack port number as you would to identify a 10G port that was in the same place in one of the rear modules.
Note: You can identify stack port numbers by physical inspection of the rear modules. The numbering is the same as for the 10G ports.
You can also inspect the output of the show system stack-ports command.
Enter the unit keyword followed by 0 or 1 for port-pipe 0 or 1, and then enter one of the following keywords to troubleshoot errors on the selected port-pipe and to give status on why a port is not coming up to register level: counters , details , port-stats [ detail ], or register
TI monitor Enter the unit keyword to show information regarding the TI register. S60 only
Defaults
Command Modes
No default behavior
EXEC
EXEC Privilege
Command
History
Version 8.3.3.4
Version 8.3.3.1
Added ti-monitor information for the S60.
Introduced on the S60.
1102 | S-Series Debugging and Diagnostics
Example 1
Version 7.8.1.0
Modified: stack-port keyword range expanded from 49-52 to 0-52; output modified for the cpu data-plane statistics option; the following options were added: drops
[ unit 0-1 [ port 0-27 ]] ; unit 0-1 { counters | details | port-stats [ detail ] | register }
Introduced on S-Series Version 7.7.1.0
Figure 47-3.
show hardware stack-unit cpu data-plane statistics Command Example
FTOS#show hardware stack-unit 0 cpu data-plane statistics stack-port 49
Input Statistics:
1856 packets, 338262 bytes
141 64-byte pkts, 1248 over 64-byte pkts, 11 over 127-byte pkts
222 over 255-byte pkts, 236 over 511-byte pkts, 0 over 1023-byte pkts
919 Multicasts, 430 Broadcasts
0 runts, 0 giants, 0 throttles
0 CRC, 0 overrun, 0 discarded
Output Statistics:
325 packets, 27629 bytes, 0 underruns
9 64-byte pkts, 310 over 64-byte pkts, 1 over 127-byte pkts
1 over 255-byte pkts, 2 over 511-byte pkts, 2 over 1023-byte pkts
0 Multicasts, 3 Broadcasts, 322 Unicasts
0 throttles, 0 discarded, 0 collisions
Rate info (interval 299 seconds):
Input 00.00 Mbits/sec
Output 00.00 Mbits/sec
FTOS#
Example 2 Figure 47-4.
show hardware stack-unit cpu party-bus statistics Command Example
FTOS#show hardware stack-unit 0 cpu party-bus statistics
Input Statistics:
8189 packets, 8076608 bytes
0 dropped, 0 errors
Output Statistics:
366 packets, 133100 bytes
0 errors
FTOS#
Example 3 Figure 47-5.
show hardware stack-unit drops Command Example
FTOS#show hardware stack-unit 0 drops unit 1 port 27
--- Ingress Drops ---
Ingress Drops : 0
IBP CBP Full Drops : 0
PortSTPnotFwd Drops : 0
IPv4 L3 Discards : 0
Policy Discards : 0
Packets dropped by FP : 0
(L2+L3) Drops : 0
Port bitmap zero Drops : 0
Rx VLAN Drops : 0
--- Ingress MAC counters---
Ingress FCSDrops : 0
Ingress MTUExceeds : 0
--- MMU Drops ---
HOL DROPS : 0
TxPurge CellErr : 0
Aged Drops : 0
--- Egress MAC counters---
Egress FCS Drops : 0
--- Egress FORWARD PROCESSOR Drops ---
IPv4 L3UC Aged & Drops : 0
TTL Threshold Drops : 0
INVALID VLAN CNTR Drops : 0
L2MC Drops : 0
PKT Drops of ANY Conditions : 0
Hg MacUnderflow : 0
TX Err PKT Counter : 0 25
FTOS#
S-Series Debugging and Diagnostics | 1103
Example 4 Figure 47-6.
show hardware stack-unit port-stats Command Example
FTOS#show hardware stack-unit 0 unit 0 port-stats
ena/ speed/ link auto STP lrn inter max loop port link duplex scan neg? state pause discrd ops face frame back
ge0 down - SW Yes Block Untag FA SGMII 1554
ge1 !ena - SW Yes Block Tag FA SGMII 1554
ge2 !ena - SW Yes Block Tag FA SGMII 1554
ge3 !ena - SW Yes Block Tag FA SGMII 1554
ge4 !ena - SW Yes Forward Tag F SGMII 1554
ge5 !ena - SW Yes Forward Tag F SGMII 1554
ge6 !ena - SW Yes Forward Tag F SGMII 1554
ge7 !ena - SW Yes Forward Tag F SGMII 1554
ge8 !ena - SW Yes Forward Tag F SGMII 1554
ge9 !ena - SW Yes Forward Tag F SGMII 1554 ge10 !ena - SW Yes Forward Tag F SGMII 9252 ge11 !ena - SW Yes Forward Tag F SGMII 9252 ge12 !ena - SW Yes Forward Tag F SGMII 1554 ge13 !ena - SW Yes Forward Tag F SGMII 1554 ge14 !ena - SW Yes Forward Tag F SGMII 1554 ge15 !ena - SW Yes Forward Tag F SGMII 1554 ge16 !ena - SW Yes Forward Tag F SGMII 1554 ge17 !ena - SW Yes Forward Tag F SGMII 1554 ge18 !ena - SW Yes Forward Tag F SGMII 1554 ge19 !ena - SW Yes Forward Tag F SGMII 1554 ge20 !ena - SW Yes Forward Tag F SGMII 1554 ge21 !ena - SW Yes Forward Tag F SGMII 1554 ge22 !ena - SW Yes Forward Tag F SGMII 1554 ge23 !ena - SW Yes Forward Tag F SGMII 1554
hg0 up 12G FD SW No Forward None F XGMII 16360
hg1 up 12G FD SW No Forward None F XGMII 16360
hg2 down 10G FD SW No Forward None F XGMII 16360
hg3 down 10G FD SW No Forward None F XGMII 16360
0
FTOS#
1104 | S-Series Debugging and Diagnostics
Example 5 Figure 47-7.
show hardware stack-unit unit 1 register Command Example
FTOS#show hardware stack-unit 0 unit 1 register
0x0068003c AGINGCTRMEMDEBUG.mmu0 = 0x00000000
0x0068003d AGINGEXPMEMDEBUG.mmu0 = 0x00000000
0x00680017 ASFCONFIG.mmu0 = 0x0000000e
0x0060004c ASFPORTSPEED.ge0 = 0x00000000
0x0060104c ASFPORTSPEED.ge1 = 0x00000000
0x0060204c ASFPORTSPEED.ge2 = 0x00000000
0x0060304c ASFPORTSPEED.ge3 = 0x00000000
0x0060404c ASFPORTSPEED.ge4 = 0x00000000
0x0060504c ASFPORTSPEED.ge5 = 0x00000000
0x0060604c ASFPORTSPEED.ge6 = 0x00000000
0x0060704c ASFPORTSPEED.ge7 = 0x00000000
0x0060804c ASFPORTSPEED.ge8 = 0x00000000
0x0060904c ASFPORTSPEED.ge9 = 0x00000000
0x0060a04c ASFPORTSPEED.ge10 = 0x00000000
0x0060b04c ASFPORTSPEED.ge11 = 0x00000000
0x0060c04c ASFPORTSPEED.ge12 = 0x00000000
0x0060d04c ASFPORTSPEED.ge13 = 0x00000000
0x0060e04c ASFPORTSPEED.ge14 = 0x00000000
0x0060f04c ASFPORTSPEED.ge15 = 0x00000000
0x0061004c ASFPORTSPEED.ge16 = 0x00000000
0x0061104c ASFPORTSPEED.ge17 = 0x00000000
0x0061204c ASFPORTSPEED.ge18 = 0x00000000
0x0061304c ASFPORTSPEED.ge19 = 0x00000000
0x0061404c ASFPORTSPEED.ge20 = 0x00000000
0x0061504c ASFPORTSPEED.ge21 = 0x00000000
0x0061604c ASFPORTSPEED.ge22 = 0x00000000
0x0061704c ASFPORTSPEED.ge23 = 0x00000005
0x0061804c ASFPORTSPEED.hg0 = 0x00000007
0x0061904c ASFPORTSPEED.hg1 = 0x00000007
0x0061a04c ASFPORTSPEED.hg2 = 0x00000000
0x0061b04c ASFPORTSPEED.hg3 = 0x00000000
0x0061c04c ASFPORTSPEED.cpu0 = 0x00000000
0x00780000 AUX_ARB_CONTROL.ipipe0 = 0x0000001c
0x0e700102 BCAST_BLOCK_MASK.ge0 = 0x00000000
0x0e701102 BCAST_BLOCK_MASK.ge1 = 0x00000000
0x0e702102 BCAST_BLOCK_MASK.ge2 = 0x00000000
0x0e703102 BCAST_BLOCK_MASK.ge3 = 0x00000000
0x0e704102 BCAST_BLOCK_MASK.ge4 = 0x00000000
0x0e705102 BCAST_BLOCK_MASK.ge5 = 0x00000000
0x0e706102 BCAST_BLOCK_MASK.ge6 = 0x00000000
0x0e707102 BCAST_BLOCK_MASK.ge7 = 0x00000000
0x0e708102 BCAST_BLOCK_MASK.ge8 = 0x00000000
0x0e709102 BCAST_BLOCK_MASK.ge9 = 0x00000000
0x0e70a102 BCAST_BLOCK_MASK.ge10 = 0x00000000
0x0e70b102 BCAST_BLOCK_MASK.ge11 = 0x00000000
0x0e70c102 BCAST_BLOCK_MASK.ge12 = 0x00000000
0x0e70d102 BCAST_BLOCK_MASK.ge13 = 0x00000000
0x0e70e102 BCAST_BLOCK_MASK.ge14 = 0x00000000
0x0e70f102 BCAST_BLOCK_MASK.ge15 = 0x00000000
0x0e710102 BCAST_BLOCK_MASK.ge16 = 0x00000000
0x0e711102 BCAST_BLOCK_MASK.ge17 = 0x00000000
0x0e712102 BCAST_BLOCK_MASK.ge18 = 0x00000000
0x0e713102 BCAST_BLOCK_MASK.ge19 = 0x00000000
0x0e714102 BCAST_BLOCK_MASK.ge20 = 0x00000000
0x0e715102 BCAST_BLOCK_MASK.ge21 = 0x00000000
0x0e716102 BCAST_BLOCK_MASK.ge22 = 0x00000000
0x0e717102 BCAST_BLOCK_MASK.ge23 = 0x00000000
0x0e718102 BCAST_BLOCK_MASK.hg0 = 0x00000000
0x0e719102 BCAST_BLOCK_MASK.hg1 = 0x00000000
0x0e71a102 BCAST_BLOCK_MASK.hg2 = 0x00000000
0x0e71b102 BCAST_BLOCK_MASK.hg3 = 0x00000000
0x0e71c102 BCAST_BLOCK_MASK.cpu0 = 0x00000000
0x0b700001 BCAST_STORM_CONTROL.ge0 = 0x00000000
0x0b701001 BCAST_STORM_CONTROL.ge1 = 0x00000000
0x0b702001 BCAST_STORM_CONTROL.ge2 = 0x00000000
0x0b703001 BCAST_STORM_CONTROL.ge3 = 0x00000000
0x0b704001 BCAST_STORM_CONTROL.ge4 = 0x00000000
0x0b705001 BCAST_STORM_CONTROL.ge5 = 0x00000000
0x0b706001 BCAST_STORM_CONTROL.ge6 = 0x00000000
0x0b707001 BCAST_STORM_CONTROL.ge7 = 0x00000000
0x0b708001 BCAST_STORM_CONTROL.ge8 = 0x00000000
0x0b709001 BCAST_STORM_CONTROL.ge9 = 0x00000000
0x0b70a001 BCAST_STORM_CONTROL.ge10 = 0x00000000
!------------------ output truncated ---------------!
S-Series Debugging and Diagnostics | 1105
Example 4 Figure 47-8.
show hardware stack-unit unit 1 details Command Example
FTOS# show hardware stack-unit 0 unit 1 details
******************************************************
The total no of FP & CSF Devices in the Card is 2
The total no of FP Devices in the Card is 2
The total no of CSF Devices in the Card is 0
The number of ports in device 0 is - 24
The number of Hg ports in devices 0 is - 4
The CPU Port of the device is 28
The number of ports in device 1 is - 24
The number of Hg ports in devices 1 is - 4
The CPU Port of the device is 28
The staring unit no the SWF in the device is 0
******************************************************
The Current Link Status Is
Front End Link Status 0x000000000000400000000000
Front End Port Present Status 0x000000000000000000000000
Back Plane Link Status 0x00000000
******************************************************
Link Status of all the ports in the Device - 1
The linkStatus of Front End Port 0 is FALSE
The linkStatus of Front End Port 1 is FALSE
The linkStatus of Front End Port 2 is FALSE
The linkStatus of Front End Port 3 is FALSE
The linkStatus of Front End Port 4 is FALSE
The linkStatus of Front End Port 5 is FALSE
The linkStatus of Front End Port 6 is FALSE
The linkStatus of Front End Port 7 is FALSE
The linkStatus of Front End Port 8 is FALSE
The linkStatus of Front End Port 9 is FALSE
The linkStatus of Front End Port 10 is FALSE
The linkStatus of Front End Port 11 is FALSE
The linkStatus of Front End Port 12 is FALSE
The linkStatus of Front End Port 13 is FALSE
The linkStatus of Front End Port 14 is FALSE
The linkStatus of Front End Port 15 is FALSE
The linkStatus of Front End Port 16 is FALSE
The linkStatus of Front End Port 17 is FALSE
The linkStatus of Front End Port 18 is FALSE
The linkStatus of Front End Port 19 is FALSE
The linkStatus of Front End Port 20 is FALSE
The linkStatus of Front End Port 21 is FALSE
The linkStatus of Front End Port 22 is FALSE
The linkStatus of Front End Port 23 is TRUE
The linkStatus of Hg Port 24 is TRUE
The linkStatus of Hg Port 25 is TRUE
The linkStatus of Hg Port 26 is FALSE
The linkStatus of Hg Port 27 is FALSE
!------------------ output truncated ---------------!
1106 | S-Series Debugging and Diagnostics
show hardware stack-unit buffering-unit
Display the multicast buffering information for a standalone switch.
Syntax
Parameters
Command Mode show hardware stack-unit stack-unit buffering unit {[ execute-shell-cmd command name | no-more ] [ queue-stats multicast cos-queue queue number ] stack-unit
{ stack-unit command-option buffering unit
}
Enter the keyword stack-unit to select a particular stack member and then enter one of the following command options to display a collection of data based on the option entered.
Unit ID range:
S60 range : 0 - 11
Select the stack member to be the buffering unit.
S60 range : 0 - 11
Enter the keyword execute-shell-cmd to execute a shell commands: execute-shell-cmd command name no-more queue-stats multicast cos-queue queue number
Enter this command to stop collecting the buffer usage information for multicast traffic enabled by the shell command.
Enter the keyword queue-stats multicast cos-queue to collect the multicast cos values for each of the 8 virtual queues.
EXEC
EXEC Privilege
Command
History
Related
Commands
Version 8.3.3.8
Introduced on the S60.
Enable buffering for all multicast traffic on the buffering unit.
show hardware system-flow s Display Layer 3 ACL or QoS data for the selected stack member and stack member port-pipe.
Syntax
Parameters show hardware system-flow layer2 stack-unit id port-set 0-1 [ counters ] acl | qos
[ stack-unit port-set 0-1 counters ] id
For the selected stack member and stack member port-pipe, display which system flow entry the packet hits and what queue the packet takes as it dumps the raw system flow tables.
Enter the keyword stack-unit to select a stack member ID.
Unit ID range:
S60 : 0-11 all other S-Series : 0-7
Enter the keyword port-set with a port-pipe number — 0 or 1. The S25 models of the S-Series have only port-pipe 0.
(OPTIONAL) Enter the keyword counters to display hit counters for the selected
ACL or QoS option.
Defaults No default behavior
S-Series Debugging and Diagnostics | 1107
Command Modes
Command
History
EXEC Privilege
Example 1
Version 8.3.3.1
Version 7.8.1.0
Introduced on the S60.
Introduced on S-Series
Figure 47-9.
show hardware system-flow layer2 counters Command Example
FTOS#show hardware system-flow layer2 stack-unit 0 port-set 0 counters
---------------------------------------------------------------------------
EntryId Description #HITS
---------------------------------------------------------------------------
2048 STP BPDU Redirects 0
2047 LLDP BPDU Redirects 0
2045 LACP traffic Redirects 0
2044 GVRP traffic Redirects 0
2043 ARP Reply Redirects 0
2042 802.1x frames Redirects 0
2041 VRRP frames Redirects 0
2040 GRAT ARP 0
2039 DROP Cases 0
2038 OSPF1 STUB 0
2037 OSPF2 STUB 0
2036 VRRP STUB 0
2035 L2_DST_HIT+BC MAC+VLAN 4095 0
2034 L2_DST_HIT+BC MAC 0
2033 Catch all 0
384 OSPF[224.0.0.5] Packets 0
383 OSPF[224.0.0.6] Packets 0
382 VRRP Packets 0
380 BCast L2_DST_HIT on VLAN 4095 0
379 BCAST L2_DST_HIT Packets 0
4 Unknown L2MC Packets 0
3 L2DLF Packets 0
2 L2UCAST Packets 0
1 L2BCASTPackets 0
25
FTOS#
1108 | S-Series Debugging and Diagnostics
Example 2 Figure 47-10.
show hardware system-flow layer2 (non-counters) Command Example
FTOS#show hardware system-flow layer2 stack-unit 0 port-set 0
############## FP Entry for redirecting STP BPDU to CPU Port ################
EID 2048: gid=1,
slice=15, slice_idx=0x00, prio=0x800, flags=0x82, Installed
tcam: color_indep=0, higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 00000000 00000000 00000000
, FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000
, 0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=0, mode=0x01, entries=1}
################ FP Entry for redirecting LLDP BPDU to RSM ################
EID 2047: gid=1,
slice=15, slice_idx=0x01, prio=0x7ff, flags=0x82, Installed
tcam: color_indep=0, higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 000e0000 00000000 00000000
, FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000
, 0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=1, mode=0x01, entries=1}
############## FP Entry for redirecting LACP traffic to CPU Port ############
EID 2045: gid=1,
slice=15, slice_idx=0x02, prio=0x7fd, flags=0x82, Installed
tcam: color_indep=0, higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 00020000 00000000 00000000
, FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000
, 0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=2, mode=0x01, entries=1}
################# FP Entry for redirecting GVRP traffic to RSM ###########
EID 2044: gid=1,
slice=15, slice_idx=0x03, prio=0x7fc, flags=0x82, Installed
tcam: color_indep=0, higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 0180c200 00210000 00000000 00000000
, FPF4=0x00
MASK=0x00000000 00000000 00000000 ffffffff ffff0000 00000000 00000000
, 0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=7(0x07), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
meter=NULL,
counter={idx=3, mode=0x01, entries=1}
################# FP Entry for redirecting ARP Replies to RSM #############
EID 2043: gid=1,
slice=15, slice_idx=0x04, prio=0x7fb, flags=0x82, Installed
tcam: color_indep=0, higig=0, higig_mask=0,
KEY=0x00000000 00000000 00000000 00000000 00000000 00000806 00001600
, FPF4=0x00
MASK=0x00000000 00000000 00000000 00000000 00000000 0000ffff 00001600
, 0x00
action={act=Drop, param0=0(0x00), param1=0(0x00)},
action={act=CosQCpuNew, param0=6(0x06), param1=0(0x00)},
action={act=CopyToCpu, param0=0(0x00), param1=0(0x00)},
action={act=UpdateCounter, param0=1(0x01), param1=0(0x00)},
!--------- output truncated -----------------!
S-Series Debugging and Diagnostics | 1109
1110 | S-Series Debugging and Diagnostics
A
SNMP Traps
This chapter lists the traps sent by FTOS. Each trap is listed by the fields Message ID, Trap Type, and
Trap Option, and the next is the message(s) associated with the trap.
Table A-1.
SNMP Traps and Error Messages
Message ID Trap Type
COLD_START SNMP
%SNMP-5-SNMP_COLD_START: SNMP COLD_START trap sent.
WARM_START SNMP
Trap Option
COLDSTART
WARMSTART
COPY_CONFIG_COMPLETE
SNMP Copy Config Command Completed
SNMP
LINK_DOWN SNMP
%IFA-1-PORT_LINKDN: changed interface state to down:%d
NONE
LINKDOWN
LINK_UP SNMP
%IFA-1-PORT_LINKUP: changed interface state to up:%d
LINKUP
AUTHENTICATION_FAIL SNMP AUTH
%SNMP-3-SNMP_AUTH_FAIL: SNMP Authentication failed.Request with invalid community string.
EGP_NEIGHBOR_LOSS SNMP NONE
OSTATE_DOWN SNMP
%IFM-1-OSTATE_DN: changed interface state to down:%s
%IFM-5-CSTATE_DN:Changed interface Physical state to down: %s
OSTATE_UP SNMP
%IFM-1-OSTATE_UP: changed interface state to up:%s
%IFM-5-CSTATE_UP: Changed interface Physical state to up: %s
LINKDOWN
LINKUP
RMON_RISING_THRESHOLD SNMP NONE
%RPM0-P:CP %SNMP-4-RMON_RISING_THRESHOLD: RMON rising threshold alarm from SNMP OID <oid>
RMON_FALLING_THRESHOLD SNMP NONE
%RPM0-P:CP %SNMP-4-RMON_FALLING_THRESHOLD: RMON falling threshold alarm from SNMP OID <oid>
RMON_HC_RISHING_THRESHOLD SNMP NONE
%RPM0-P:CP %SNMP-4-RMON_HC_RISING_THRESHOLD: RMON high-capacity rising threshold alarm from SNMP OID <oid>
RMON_HC_FALLING_THRESHOLD SNMP NONE
%RPM0-P:CP %SNMP-4-RMON_HC_FALLING_THRESHOLD: RMON high-capacity falling threshold alarm from SNMP OID <oid>
RESV
N/A
NONE NONE
SNMP Traps | 1111
Table A-1.
SNMP Traps and Error Messages (continued)
Message ID Trap Type
CHM_CARD_DOWN ENVMON
%CHMGR-1-CARD_SHUTDOWN: %sLine card %d down - %s
%CHMGR-2-CARD_DOWN: %sLine card %d down - %s
CHM_CARD_UP
%CHMGR-5-LINECARDUP: %sLine card %d is up
ENVMON
CHM_CARD_MISMATCH ENVMON
%CHMGR-3-CARD_MISMATCH: Mismatch: line card %d is type %s - type %s required.
CHM_CARD_PROBLEM ENVMON
Trap Option
NONE
NONE
NONE
NONE
CHM_ALARM_CUTOFF
CHM_SFM_UP
ENVMON
ENVMON
CHM_SFM_DOWN ENVMON
CHM_RPM_UP
%RAM-6-RPM_STATE: RPM1 is in Active State
%RAM-6-RPM_STATE: RPM0 is in Standby State
ENVMON
CHM_RPM_DOWN ENVMON
%CHMGR-2-RPM_DOWN: RPM 0 down - hard reset
%CHMGR-2-RPM_DOWN: RPM 0 down - card removed
CHM_RPM_PRIMARY ENVMON
%RAM-5-COLD_FAILOVER: RPM Failover Completed
%RAM-5-HOT_FAILOVER: RPM Failover Completed
%RAM-5-FAST_FAILOVER: RPM Failover Completed
CHM_SFM_ADD
%TSM-5-SFM_DISCOVERY: Found SFM 1
ENVMON
CHM_SFM_REMOVE
%TSM-5-SFM_REMOVE: Removed SFM 1
ENVMON
CHM_MAJ_SFM_DOWN ENVMON
%CHMGR-0-MAJOR_SFM: Major alarm: Switch fabric down
CHM_MAJ_SFM_DOWN_CLR ENVMON
%CHMGR-5-MAJOR_SFM_CLR: Major alarm cleared: Switch fabric up
CHM_MIN_SFM_DOWN ENVMON
%CHMGR-2-MINOR_SFM: MInor alarm: No working standby SFM
CHM_MIN_SFM_DOWN_CLR ENVMON
%CHMGR-5-MINOR_SFM_CLR: Minor alarm cleared: Working standby SFM present
CHM_PWRSRC_DOWN ENVMON
%CHMGR-2-PEM_PRBLM: Major alarm: problem with power entry module %s
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
NONE
SUPPLY
1112 | SNMP Traps
Table A-1.
SNMP Traps and Error Messages (continued)
Message ID Trap Type Trap Option
CHM_PWRSRC_CLR ENVMON
%CHMGR-5-PEM_OK: Major alarm cleared: power entry module %s is good
CHM_MAJ_ALARM_PS ENVMON
%CHMGR-0-MAJOR_PS: Major alarm: insufficient power %s
CHM_MAJ_ALARM_PS_CLR ENVMON
%CHMGR-5-MAJOR_PS_CLR: major alarm cleared: sufficient power
CHM_MIN_ALARM_PS ENVMON
%CHMGR-1-MINOR_PS: Minor alarm: power supply non-redundant
SUPPLY
SUPPLY
SUPPLY
SUPPLY
CHM_MIN_ALARM_PS_CLR ENVMON
%CHMGR-5-MINOR_PS_CLR: Minor alarm cleared: power supply redundant
CHM_MIN_ALRM_TEMP ENVMON
%CHMGR-2-MINOR_TEMP: Minor alarm: chassis temperature
SUPPLY
TEMP
CHM_MIN_ALRM_TEMP_CLR ENVMON TEMP
%CHMRG-5-MINOR_TEMP_CLR: Minor alarm cleared: chassis temperature normal (%s %d temperature is within threshold of %dC)
CHM_MAJ_ALRM_TEMP ENVMON TEMP
%CHMGR-2-MAJOR_TEMP: Major alarm: chassis temperature high (%s temperature reaches or exceeds threshold of %dC)
CHM_MAJ_ALRM_TEMP_CLR ENVMON TEMP
%CHMGR-2-MAJOR_TEMP_CLR: Major alarm cleared: chassis temperature lower (%s %d temperature is within threshold of %dC)
FAN CHM_FANTRAY_BAD ENVMON
For E1200: %CHMGR-2-FAN_TRAY_BAD: Major alarm: fan tray %d is missing or down
%CHMGR-2-ALL_FAN_BAD: Major alarm: all fans in fan tray %d are down.
For E600 and E300: %CHMGR-2-FANTRAYBAD: Major alarm: fan tray is missing
%CHMGR-2-FANSBAD: Major alarm: most or all fans in fan tray are down
FAN CHM_FANTRAY_BAD_CLR ENVMON
For the E1200: %CHMGR-5-FAN_TRAY_OK: Major alarm cleared: fan tray %d present
For the E600 and E300: %CHMGR-5-FANTRAYOK: Major alarm cleared: fan tray present
CHM_MIN_FANBAD ENVMON
For the E1200: %CHMGR-2-FAN_BAD: Minor alarm: some fans in fan tray %d are down
For the E600 and E300: %CHMGR- 2-1FANBAD: Minor alarm: fan in fan tray is down
CHM_MIN_FANBAD_CLR ENVMON
FAN
FAN
For E1200: %CHMGR-2-FAN_OK: Minor alarm cleared: all fans in fan tray %d are good
For E600 and E300: %CHMGR-5-FANOK: Minor alarm cleared: all fans in fan tray are good
TME_TASK_SUSPEND ENVMON
%TME-2-TASK SUSPENDED: SUSPENDED - svce:%d - inst:%d - task:%s
TME_TASK_TERM ENVMON
%TME-2-ABNORMAL_TASK_TERMINATION: CRASH - task:%s %s
CHM_CPU_THRESHOLD ENVMON
%CHMGR-5-CPU_THRESHOLD: Cpu %s usage above threshold. Cpu5SecUsage (%d)
CHM_CPU_THRESHOLD_CLR ENVMON
NONE
NONE
NONE
NONE
SNMP Traps | 1113
Table A-1.
SNMP Traps and Error Messages (continued)
Message ID Trap Type Trap Option
%CHMGR-5-CPU_THRESHOLD_CLR: Cpu %s usage drops below threshold. Cpu5SecUsage (%d)
CHM_MEM_THRESHOLD ENVMON NONE
%CHMGR-5-MEM_THRESHOLD: Memory %s usage above threshold. MemUsage (%d)
CHM_MEM_THRESHOLD_CLR ENVMON NONE
%CHMGR-5-MEM_THRESHOLD_CLR: Memory %s usage drops below threshold. MemUsage (%d)
MACMGR_STN_MOVE ENVMON NONE
%MACMGR-5-DETECT_STN_MOVE: Station Move threshold exceeded for Mac %s in vlan %d
VRRP_BADAUTH
VRRP_GO_MASTER
PROTO
PROTO
%VRRP-6-VRRP_MASTER: vrid-%d on %s entering MASTER
NONE
%RPM1-P:RP2 %VRRP-3-VRRP_BAD_AUTH: vrid-1 on Gi 11/12 rcvd pkt with authentication type mismatch.
%RPM1-P:RP2 %VRRP-3-VRRP_BAD_AUTH: vrid-1 on Gi 11/12 rcvd pkt with authentication failure.
NONE
NONE BGP4_ESTABLISHED PROTO
%TRAP-5-PEER_ESTABLISHED: Neighbor %a, state %s
BGP4_BACKW_XSITION PROTO
%TRAP-5-BACKWARD_STATE_TRANS: Neighbor %a, state %s
NONE
1114 | SNMP Traps
Download
Public link updated
The public link to your chat has been updated. You may view and manage your chat links after registration here.
Document public link
Advertisement