Layer 2. Dell Force10 S60-44T
Advertisement
Advertisement
21
Layer 2
Overview
This chapter describes commands to configure Layer 2 features. It contains the following sections:
•
•
Some MAC addressing commands are supported only on the E-Series, some on all three Dell Force10 platforms, and some on two Dell Force10 platforms. Support is indicated by these characters, where appropriate, under each command heading: c e s
The VLAN commands are supported on all three Dell Force10 platforms — c e s
MAC Addressing Commands
The following commands are related to configuring, managing, and viewing MAC addresses:
•
clear mac-address-table dynamic
•
•
•
•
mac-address-table station-move threshold
•
mac-address-table station-move time-interval
•
mac-address-table station-move refresh-arp
•
•
•
mac learning-limit learn-limit-violation
•
mac learning-limit station-move-violation
•
•
•
•
show cam mac linecard (dynamic or static)
•
•
•
show mac-address-table aging-time
•
show mac accounting destination
•
•
Layer 2 | 613
clear mac-address-table dynamic c e s Clear the MAC address table of all MAC address learned dynamically.
Syntax clear mac-address-table dynamic
{
address mac-address | all | interface interface | vlan vlan-id
}
Parameters address mac-address
Command Modes all interface interface vlan vlan-id
EXEC Privilege
Enter the keyword address nn:nn:nn:nn:nn:nn format.
followed by a MAC address in
Enter the keyword table.
all to delete all MAC address entries in the MAC address
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword followed by a number: port-channel
C-Series and
S-Series
Range: 1-128
E-Series
Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword port information. sonet followed by the slot/
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Enter the keyword vlan followed by a VLAN ID number from 1 to 4094.
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series mac accounting destination e Configure a destination counter for Layer 2 traffic.
Syntax mac accounting destination
{ mac-address vlan vlan-id
| vlan}
[ bytes
| packets
]
To delete a destination counter, enter no mac accounting destination
.
Parameters mac-address vlan vlan-id bytes packets
Enter the MAC address in the nn:nn:nn:nn:nn:nn format to count Layer 2 packets or bytes sent to that MAC address.
Enter the keyword vlan bytes sent to the VLAN.
followed by the VLAN ID to count Layer 2 packets or
Range: 1 to 4094.
(OPTIONAL) Enter the keyword bytes to count only bytes
(OPTIONAL) Enter the keyword packets to count only packets.
614 | Layer 2
Defaults
Command Modes
Command
History
Usage
Information
Not configured.
INTERFACE (available on physical interfaces only)
Version 7.4.1.0
Introduced on E-Series
You must place the interface in Layer 2 mode (using the switchport command) prior to configuring the
command.
mac-address-table aging-time c e s Specify an aging time for MAC addresses to be removed from the MAC Address Table.
Syntax mac-address-table aging-time seconds
Parameters
Defaults
Command Modes seconds
Enter either zero (0) or a number as the number of seconds before MAC addresses are relearned. To disable aging of the MAC address table, enter 0.
E-Series Range from CONFIGURATION mode: 10 - 1000000
E-Series Range from INTERFACE VLAN mode: 1 - 1000000
C-Series and S-Series Range: 10 - 1000000
Default: 1800 seconds
1800 seconds
CONFIGURATION
INTERFACE VLAN (E-Series only)
Command
History
Version 8.3.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
On the E-Series, available in INTERFACE VLAN context and reduced minimum aging time in INTERFACE VLAN context from 10 seconds to 1 second.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Related
Commands
show mac-address-table aging-time
Set the MAC address learning limits for a selected interface.
Display the MAC aging time.
mac-address-table static c e s Associate specific MAC or hardware addresses to an interface and VLANs.
Syntax mac-address-table static mac-address output interface vlan vlan-id
To remove a MAC address, use the no mac-address-table static mac-address output interface vlan vlan-id command.
Layer 2 | 615
Parameters mac-address output interface
Enter the 48-bit hexidecimal address in nn:nn:nn:nn:nn:nn format.
Enter the keyword output followed by one of the following interfaces:
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword followed by a number: port-channel
C-Series Range: 1-128
E-Series Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword port information. sonet followed by the slot/
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Enter the keyword vlan followed by a VLAN ID.
Range:1 to 4094.
vlan vlan-id
Defaults
Command Modes
Command
History
Not configured.
CONFIGURATION
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Displays the MAC address table.
mac-address-table station-move threshold c e Change the frequency with which the MAC address station-move trap is sent after a MAC address changes in a VLAN. A trap is sent if a station move is detected above a threshold number of times in a given interval.
Syntax
[ no
] mac-address-table station-move threshold number interval count
Parameters threshold number interval seconds
Enter the keyword threshold followed by the number of times MAC addresses in VLANs can change before an SNMP trap is sent.
Range: 1 to 10
Enter the keyword interval followed by the number of seconds.
Range: 5 to 60
Defaults
Command Modes
Not configured.
CONFIGURATION
Command
History
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on C-Series
Introduced on E-Series
616 | Layer 2
Usage
Information
For information on the specific trap sent and the corresponding Syslog refer to
mac-address-table station-move time-interval e Reduce the amount of time FTOS takes to detect aged entries and station moves.
Syntax
[ no
] mac-address-table station-move time-interval number
Parameters time-interval number
Select the interval of the successive scans of the MAC address table that are used to detect a aged entries and station moves.
Range: 500 to 5000ms
Defaults
Command Modes
5000ms
CONFIGURATION
Command
History
Version 7.8.1.0
Introduced on E-Series
Usage
Information
FTOS takes 4 to 5 seconds to detect aged entries and station moves because the MAC address table scanning routine runs every 5000 ms by default. To achieve faster detection, reduce the scanning interval. mac-address-table station-move refresh-arp c e s Ensure that ARP refreshes the egress interface when a station move occurs due to a topology change.
Syntax
Defaults
Command Modes
[ no
]
mac-address-table station-move refresh-arp
No default values or behavior
CONFIGURATION
Command
History
Usage
Information
Version 8.3.3.1
Version 7.7.1.0
Version 7.6.1.0
Version 7.4.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
See the “NIC Teaming” section of the Layer 2 chapter in the
FTOS Configuration Guide
for details on using this command. mac cam fib-partition e Reapportion the amount of Content Addressable Memory (CAM) available for MAC address learning
(FIB) versus the amount available for MAC ACLs on a line card.
Syntax mac cam fib-partition
{
25
|
50
|
75
|
100
} slot-number
Layer 2 | 617
Parameters
Defaults
Command Modes
Usage
Information
Related
Commands
To return to the default setting, enter no mac cam fib-partition
.
25
50
75
100 slot-number
Enter the keyword 25 to set aside 25% of the CAM for MAC address learning.
Enter the keyword 50 to set aside 50% of the CAM for MAC address learning.
Enter the keyword 75 to set aside 75% of the CAM for MAC address learning.
Enter the keyword learning.
100 to set aside 100% of the MAC CAM for MAC address
With this configuration, no MAC ACLs are processed.
Enter the line card slot number.
Range: 0 to 13 for the E1200
0 to 6 for the E600
0 to 5 for the E300
75
(75% of the MAC CAM for MAC address learning)
CONFIGURATION
After setting the CAM partition size, the line card resets.
Display the current MAC CAM partition values.
mac learning-limit c e s Limit the maximum number of MAC addresses (static + dynamic) learned on a selected interface.
Syntax mac learning-limit address_limit
[ vlan vlan-id
] [ station-move
[ dynamic
]] [ no-station-move
[ dynamic
]] | [ dynamic
[ no-station-move
| station-move
]]
Parameters
Defaults
Command Modes address_limit
vlan vlan-id dynamic no-station-move station-move
Enter the maximum number of MAC addresses learned.
Range: 1 to 1000000
On the E-Series only, enter the keyword followed by the VLAN ID.
Range: 1-4094
(OPTIONAL) Enter the keyword dynamic though a learning limit is configured.
to allow aging of MACs even
(OPTIONAL) Enter the keyword port) on learned MAC addresses. no-station-move to disallow a station move (associate the learned MAC address with the most recently accessed
(OPTIONAL) Enter the keyword on learned MAC addresses. station-move to allow a station move
On C-Series, the default behavior is no-station-move
+ static.
On E-Series, the default behavior is station-move
+ static.
“Static” means manually entered addresses, which do not age.
INTERFACE
618 | Layer 2
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 8.3.1.0
Version 8.2.1.0
Version 7.7.1.0
Version 6.5.1.0
Introduced on the S60.
Added vlan option on E-Series.
Introduced on S-Series
Introduced on C-Series; added station-move option
Added support for MAC Learning-Limit on LAG
This command and its options are supported on physical interfaces, static LAGs, LACP LAGs, and
VLANs.
If the vlan
option is not specified, then the MAC address counters is not VLAN-based. That is, the sum of the addresses learned on all VLANs (not having any learning limit configuration) is counted against the MAC learning limit.
MAC Learning Limit violation logs and actions are not available on a per-VLAN basis.
With the keyword no-station-move option, MAC addresses learned through this feature on the selected interface will persist o n a per-VLAN basis, even if received on another interface. Enabling or disabling this option has no effect on already learned MAC addresses.
Once the MAC address learning limit is reached, the MAC addresses do not age out unless you add the dynamic
option. To clear statistics on MAC address learning, use the
the learning-limit parameter.
command with
Note: If you configure this command on an interface in a routed VLAN, and once the MAC addresses learned reaches the limit set in the
command, IP protocols are affected. For example, VRRP sets multiple VRRP Masters, and OSPF may not come up.
When a channel member is added to a port-channel and there is not enough ACL CAM space, then the
MAC limit functionality on that port-channel is undefined. When this occurs, unconfigure the existing configuration first and then reapply the limit with a lower value.
clear mac-address-table dynamic
Clear counters used in the show interface command
Clear the MAC address table of all MAC address learned dynamically.
Display MAC learning-limit configuration.
mac learning-limit learn-limit-violation c e s Configure an action for a MAC address learning-limit violation.
Syntax mac learning-limit learn-limit-violation
{ log
| shutdown
}
To return to the default, use the no mac learning-limit learn-limit-violation
{ log
| shutdown
} command.
Parameters log shutdown
Enter the keyword violation.
log to generate a syslog message on a learning-limit
Enter the keyword violation.
shutdown to shut down the port on a learning-limit
Layer 2 | 619
Defaults
Command Modes
Command
History
No default behavior or values
INTERFACE (conf-ifinterface
slot/port
)
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
This is supported on physical interfaces, static LAGs, and LACP LAGs.
Usage
Information
Related
Commands
Display details of the mac learning-limit mac learning-limit station-move-violation c e s Specify the actions for a station move violation.
Syntax mac learning-limit station-move-violation shutdown-original
}
{ log
| shutdown-both
| shutdown-offending
|
To disable a configuration, use the no mac learning-limit station-move-violation
command, followed by the configured keyword.
Parameters
Defaults
Command Modes log shutdown-both shutdown-offending shutdown-original
Enter the keyword violation.
log to generate a syslog message on a station move
Enter the keyword shutdown to shut down both the original and offending interface and generate a syslog message.
Enter the keyword shutdown-offending interface and generate a syslog message.
to shut down the offending
Enter the keyword shutdown-original interface and generate a syslog message.
to shut down the original
No default behavior or values
INTERFACE (conf-ifinterface
slot/port
)
Command
History
Usage
Information
Version 8.3.3.1
Version 8.2.1.0
Version 7.8.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
This is supported on physical interfaces, static LAGs, and LACP LAGs.
Related
Commands
Display details of the mac learning-limit
620 | Layer 2
mac learning-limit reset c e s Reset the MAC address learning-limit error-disabled state.
Syntax
Defaults
Command Modes mac learning-limit reset
No default behavior or values
EXEC
EXEC Privilege
Command
History
Version 8.3.3.1
Version 8.2.1.0
Version 7.7.1.0
Version 7.5.1.0
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series show cam mac linecard (count) e Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax show cam mac linecard slot port-set port-pipe count
[
vlan vlan-id
] [
interface interface
]
Parameters
linecard slot
port-set port-pipe count interface interface vlan vlan-id
(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.
E-Series
range: 0 to 6.
(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
E-Series
range: 0 or 1
(REQUIRED) Enter the keyword type.
count to display CAM usage by interface
(OPTIONAL) Enter the keyword slot and port information: interface followed by the interface type,
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword followed by a number: port-channel
C-Series
Range: 1-128
E-Series
Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword port information. sonet followed by the slot/
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.
Range: 1 to 4094.
Command Modes
EXEC
EXEC Privilege
Layer 2 | 621
Command
History pre-Version 6.2.1.1
Introduced on E-Series show cam maccheck linecard c Display the results of the BCMI2 check command.
Syntax show cam maccheck linecard slot port-set port-pipe
Parameters
linecard slot
port-set port-pipe
(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.
C300 range: 0 to 7;
C150 range: 0 to 4
(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
Range: 0 or 1
Command Modes
EXEC
EXEC Privilege
Command
History
Example
Version 7.6.1.0
Introduced on C-Series
Figure 21-1. show cam maccheck linecard Command Output Example
Force10#show cam maccheck linecard 2 port-set 0
Dumping entries. From 0 to 16383.
Progress . marks 100 memory table entries.
............................Index 5576 (0x15c8) has valid entries (H: 2b9, E: 0)
<MAC_ADDR=0xffffffffffff,VLAN_ID=0xfff,PRI=0,CPU=0,DST_DISCARD=0,SRC_DISCARD=0,SCP
=0,TGID_LO=0,PORT_TGID=0,TGID_PORT=0,T=0,TGID_HI=0,L2MC_PTR=0,MODULE_ID=0,REMOTE_T
RUNK=0,L3=0,MAC_BLOCK_INDEX=0,STATIC_BIT=1,RPE=0,MIRROR=0,VALID=1,EVEN_PARITY=0,HI
TDA=0,HITSA=0>
..........Index 6592 (0x19c0) has valid entries (H: 338, E: 0)
<MAC_ADDR=0xa0000000,VLAN_ID=0xffe,PRI=0,CPU=0,DST_DISCARD=0,SRC_DISCARD=0,SCP=0,T
GID_LO=0,PORT_TGID=0,TGID_PORT=0,T=0,TGID_HI=0,L2MC_PTR=0,MODULE_ID=0x10,REMOTE_TR
UNK=0,L3=0,MAC_BLOCK_INDEX=0,STATIC_BIT=0,RPE=0,MIRROR=0,VALID=1,EVEN_PARITY=1,HIT
DA=1,HITSA=1>
!-------------output truncated-------------------!
Usage
Information
Use this command to check various flags associated with each MAC address in the CAM.
(
shows information for two MAC addresses. The second entry is for MAC address
00:00:a0:00:00:00 (leading 0s are not shown), which is shown as learned on VLAN ID 4094
0xfff
), as shown below in
the address is dynamically learned.
. Above, “
STATIC_BIT=0
” means that
When an entry is listed as
STATIC_BIT=1 not getting continuously learned trough traffic. The after the first age sweep, it gets reset.
, its
HIT_SA
is 0, which signifies that this address is
HIT_DA
is set when a new learn happens, and
622 | Layer 2
Example Figure 21-2. show mac-address-table Command Output Example
Force10#show mac-address-table
VlanId Mac Address Type Interface State
4094 00:00:a0:00:00:00 Dynamic Gi 2/0 Active
!-------------output truncated-------------------!
Example Figure 21-3. show cam mac linecard Command Output Example
Force10#show cam mac linecard 2 port-set 0
VlanId Mac Address Region Interface
0 ff:ff:ff:ff:ff:ff STATIC 00001
4094 00:00:a0:00:00:00 DYNAMIC Gi 2/0
!-------------output truncated-------------------!
show cam mac linecard (dynamic or static) c e Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax show cam mac linecard slot port-set port-pipe
[
address mac_addr | dynamic | interface interface | static | vlan vlan-id
]
Parameters
linecard slot
port-set port-pipe address mac-addr dynamic interface interface static vlan vlan-id
(REQUIRED) Enter the keyword linecard followed by a slot number to select the linecard for which to gather information.
C-Series
Range: 0 to 4 (C150); 0 to 8 (C300)
E-Series
Range: 0 to 6
(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
Range: 0 or 1
(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword dynamic addresses learned dynamically by the switch.
to display only those MAC
(OPTIONAL) Enter the keyword slot and port information: interface followed by the interface type,
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword followed by a number: port-channel
C-Series
Range: 1-128
E-Series
Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword port information. sonet followed by the slot/
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword static specifically configured on the switch.
to display only those MAC address
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.
Range: 1 to 4094.
Layer 2 | 623
Command Modes
Command
History
Example
EXEC
EXEC Privilege
Version 7.5.1.0
pre-Version 6.2.1.1
Added support for C-Series
Introduced on E-Series
Figure 21-4. show cam mac linecard Command Example
Force10#show cam mac linecard 1 port-set 0
Port - (TableID) assignments:
00(01) 01(01) 02(01) 03(01) 04(01) 05(01) 06(01) 07(01) 08(01) 09(01) 10(01) 11(01)
12(01) 13(01) 14(01) 15(01) 16(01) 17(01) 18(01) 19(01) 20(01) 21(01) 22(01) 23(01)
Index Table ID VlanId Mac Address Region Interface
0 1 0 00:01:e8:0d:b7:3b LOCAL_DA 1e000
1 1 0 00:01:e8:0d:b7:3a LOCAL_DA 1e000
101 0 0 00:01:e8:00:04:00 SYSTEM_STATIC 01c05
102 0 0 01:80:00:00:00:00 SYSTEM_STATIC 01c05
103 0 0 01:00:0c:cc:cc:cc SYSTEM_STATIC 01c01
104 0 0 01:80:c2:00:00:02 SYSTEM_STATIC 01c02
105 0 0 01:80:c2:00:00:0e SYSTEM_STATIC 01c01
106 0 0 00:01:e8:0d:b7:68 SYSTEM_STATIC DROP
107 0 0 00:01:e8:0d:b7:67 SYSTEM_STATIC DROP
108 0 0 00:01:e8:0d:b7:66 SYSTEM_STATIC DROP
109 0 0 00:01:e8:0d:b7:65 SYSTEM_STATIC DROP
110 0 0 00:01:e8:0d:b7:64 SYSTEM_STATIC DROP
111 0 0 00:01:e8:0d:b7:63 SYSTEM_STATIC DROP
112 0 0 00:01:e8:0d:b7:62 SYSTEM_STATIC DROP
113 0 0 00:01:e8:0d:b7:61 SYSTEM_STATIC DROP
114 0 0 00:01:e8:0d:b7:60 SYSTEM_STATIC DROP
115 0 0 00:01:e8:0d:b7:5f SYSTEM_STATIC DROP
116 0 0 00:01:e8:0d:b7:5e SYSTEM_STATIC DROP
117 0 0 00:01:e8:0d:b7:5d SYSTEM_STATIC DROP
Force10# show cam mac stack-unit s Display the Content Addressable Memory (CAM) size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax show cam mac stack-unit unit_number port-set port-pipe count
[
vlan vlan-id
] [ interface interface
]
Parameters
stack-unit unit_number
port-set port-pipe address mac-addr dynamic static
(REQUIRED) Enter the keyword linecard followed by a stack member number to select the linecard for which to gather information.
S-Series
Range: 0 to 1
(REQUIRED) Enter the keyword port-set followed by a Port-Pipe number to select the Port-Pipe for which to gather information.
Unit ID range:
S60
: 0-11 all other S-Series
: 0-7
(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword dynamic addresses learned dynamically by the switch.
to display only those MAC
(OPTIONAL) Enter the keyword static specifically configured on the switch.
to display only those MAC address
624 | Layer 2
interface interface vlan vlan-id
(OPTIONAL) Enter the keyword slot and port information: interface followed by the interface type,
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword followed by a number: port-channel
S-Series
Range: 1-128
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.
Range: 1 to 4094.
Command Modes
Command
History
EXEC
EXEC Privilege
Version 8.3.3.1
Version 7.6.1.0
Introduced on the S60.
This version of the command introduced for S-Series show mac-address-table c e s Display the MAC address table.
Syntax show mac-address-table
[ dynamic | static
] [
address mac-address | interface interface | vlan vlan-id
] [ count
[ vlan vlan-id
] [ interface interface-type
[ slot
[/ port
]]]]
Parameters dynamic static address mac-address interface interface
(OPTIONAL) Enter the keyword dynamic to display only those MAC addresses learned dynamically by the switch. Optionally, you can also add one of these combinations: address/mac-address , interface/ interface , or vlan vlan-id.
(OPTIONAL) Enter the keyword static to display only those MAC address specifically configured on the switch. Optionally, you can also add one of these combinations: address/mac-address , interface/interface , or
vlan vlan-id.
(OPTIONAL) Enter the keyword address followed by a MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword slot and port information: interface followed by the interface type,
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword followed by a number: port-channel
C-Series
and
S-Series
Range: 1-128
E-Series
Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword port information. sonet followed by the slot/
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
Layer 2 | 625
interface interface-type vlan vlan-id count
(OPTIONAL) Instead of entering the keyword interface type, followed by just a slot number.
interface followed by the interface type, slot and port information, as above, you can enter the
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to the VLAN.
Range: 1 to 4094.
(OPTIONAL) Enter the keyword count , followed optionally, by an interface or VLAN ID, to display total or interface-specific static addresses, dynamic addresses, and MAC addresses in use.
Command Modes
EXEC
EXEC Privilege
Command
History
Example
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Figure 21-5. show mac-address-table Command Example
Force10#show mac-address-table
VlanId Mac Address Type Interface State
999 00:00:00:00:00:19 Dynamic Gi 0/1 Active
999 00:00:00:00:00:29 Dynamic Gi 0/2 Active
Force10#
Table 21-1. show mac-address-table Information
Column Heading Description
VlanId
Mac Address
Type
Interface
State
Displays the VLAN ID number.
Displays the MAC address in nn:nn:nn:nn:nn:nn format.
Lists whether the MAC address was manually configured (Static) or learned
(Dynamic).
Displays the interface type and slot/port information. The following abbreviations describe the interface types:
• gi—Gigabit Ethernet followed by a slot/port.
• po—Port Channel followed by a number. Range: 1 to 255 for TeraScale
• so—Sonet followed by a slot/port.
• te—10-Gigabit Ethernet followed by a slot/port.
Lists if the MAC address is in use (Active) or not in use (Inactive).
Figure 21-6. show mac-address-table count Command Example
Force10#show mac-address-table count
MAC Entries for all vlans :
Dynamic Address Count : 5
Static Address (User-defined) Count : 0
Total MAC Addresses in Use: 5
Force10#
626 | Layer 2
Table 21-2. show mac-address-table count Information
Line Beginning with
MAC Entries...
Dynamic Address...
Static Address...
Total MAC...
Description
Displays the number of MAC entries learnt per VLAN.
Lists the number of dynamically learned MAC addresses.
Lists the number of user-defined MAC addresses.
Lists the total number of MAC addresses used by the switch.
Related
Commands
show mac-address-table aging-time
Display MAC aging time.
show mac-address-table aging-time c e s Display the aging times assigned to the MAC addresses on the switch.
Syntax show mac-address-table aging-time
[
vlan vlan-id
]
Parameters vlan vlan-id On the E-Series, enter the keyword vlan followed by the VLAN ID to display the MAC address aging time for MAC addresses on the VLAN.
Range: 1 to 4094.
Command Modes
EXEC
EXEC Privilege
Command
History
Example
Version 8.3.3.1
Version 8.3.1.0
Version 7.7.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Added the vlan option on the E-Series.
Introduced on C-Series and S-Series
Introduced on E-Series
Figure 21-7. show mac-address-table aging-time Command Example
Force10#show mac-address-table aging-time
Mac-address-table aging time : 1800
Force10#
Related
Commands
Display the current MAC address configuration.
show mac accounting destination e Display destination counters for Layer 2 traffic (available on physical interfaces only).
Syntax show mac accounting destination
[ mac-address vlan vlan-id
] [ interface interface
[ mac-address vlan vlan-id
] [ vlan vlan-id
]] [ vlan vlan-id
]
Layer 2 | 627
Parameters
Command Modes
Command
History
Usage
Information
Example mac-address interface interface vlan vlan-id
(OPTIONAL) Enter the MAC address in the nn:nn:nn:nn:nn:nn format to display information on that MAC address.
(OPTIONAL) Enter the keyword slot and port information: interface followed by the interface type,
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
(OPTIONAL) Enter the keyword vlan followed by the VLAN ID to display the MAC address assigned to that VLAN.
Range: 1 to 4094.
EXEC
EXEC Privilege pre-Version 6.2.1.1
Introduced on E-Series
MAC Accounting information can be accessed using SNMP via the Force10 Monitor MIB. For more information on enabling SNMP, refer to Chapter 3 of the
FTOS Configuration Guide
.
Note: Currently, the Force10 MONITOR MIB does not return the MAC addresses in an increasing order via SNMP. As a workaround, you can use the
-C c
option in snmpwalk
or snmpbulkwalk
to access the Force10 MONITOR MIB. For example:
% snmpwalk -C c -v 2c -c public 133.33.33.131 enterprise.6027.3.3.3
Figure 21-8. show mac accounting destination Command Example
Force10-1#sh mac accounting destination interface gigabitethernet 2/1
Destination Out Port VLAN Packets Bytes
00:44:00:00:00:02 Te 11/0 1000 10000 5120000
00:44:00:00:00:01 Te 11/0 1000 10000 5120000
00:22:00:00:00:00 Te 11/0 1000 10000 5120000
00:44:00:00:00:02 Te 11/0 2000 10000 5120000
00:44:00:00:00:01 Te 11/0 2000 10000 5120000
Force10-1#
Related
Commands
show mac accounting access-list
Display MAC access list configurations and counters (if configured).
show mac cam e Display the CAM size and the portions allocated for MAC addresses and for MAC ACLs.
Syntax
Command Modes show mac cam
EXEC
EXEC Privilege
Command
History pre-Version 6.2.1.1
Introduced on E-Series
628 | Layer 2
Example Figure 21-9. show mac cam Command Example
Force10#show mac cam
Slot Type MAC CAM Size MAC FIB Entries MAC ACL Entries
0 E24PD 64K entries 48K (75%) 8K (25%)
2 E24PD2 128K entries 64K (50%) 32K (50%)
11 EX2YD 64K entries 16K (25%) 24K (75%)
Note: All CAM entries are per portpipe.
Force10#
Table 21-3. show mac cam Information
Field
Slot
Type
MAC CAM Size
MAC FIB Entries
MAC ACL Entries
Description
Lists the active line card slots.
Lists the type of line card present in the slot.
Displays the total CAM size available.
Note
: A portion of the MAC CAM is used for system operations, therefore adding the MAC FIB and MAC ACL will be less than the MAC CAM.
Displays the amount and percentage of CAM available for MAC addresses.
Displays the amount and percentage of CAM available for MAC ACLs.
show mac learning-limit c e Display MAC address learning limits set for various interfaces.
Syntax show mac learning-limit
[ violate-action
] [ detail
] [ interface interface
[
vlan vlan-id
]]
Parameters violate-action detail interface interface vlan vlan-id
(OPTIONALY) Enter the keyword learning limit violation status. violate-action to display the MAC
(OPTIONAL) Enter the keyword in detail.
detail to display the MAC learning limit
(OPTIONAL) Enter the keyword interface and slot/port or number information:
with the following keywords
• For a 1-Gigabit Ethernet interface, enter the keyword
GigabitEthernet followed by the slot/port information.
• For SONET interfaces, enter the keyword port information. sonet followed by the slot/
• For a 10-Gigabit Ethernet interface, enter the keyword
TenGigabitEthernet followed by the slot/port information.
• For a Port Channel interface, enter the keyword port-channel followed by a Port Channel ID between 1 and 255.
On the E-Series, enter the keyword vlan followed by the VLAN ID.
Range: 1-4094
Command Modes
EXEC
EXEC Privilege
Layer 2 | 629
Command
History
Example
Version 8.3.1.0
Version 7.7.1.0
Version 7.5.1.0
Version 6.5.1.0
E-Series output:
Added vlan option on E-Series.
Introduced on C-Series
Added support for violate-action and detail options
Added support for Port Channel
Force10#show mac learning-limit
Interface Vlan Learning Dynamic Static Unknown SA
Slot/port Id Limit MAC count MAC count Drops
Force10#show mac learning-limit interface gig 5/84
Interface Vlan Learning Dynamic Static Unknown SA
Slot/port Id Limit MAC count MAC count Drops
Example
Force10#show mac learning-limit interface gig 5/84 vlan 2
Interface Vlan Learning Dynamic Static Unknown SA
Slot/port Id Limit MAC count MAC count Drops
C-Series/S-Series output:
Force10#show mac learning-limit
Interface Learning Dynamic Static Unknown SA
Slot/port Limit MAC count MAC count Drops
Gi 1/0 10 0 0 0
Force10#show mac learning-limit interface gig 1/0
Interface Learning Dynamic Static Unknown SA
Slot/port Limit MAC count MAC count Drops
Gi 1/0 10 0 0 0
Virtual LAN (VLAN) Commands
The following commands configure and monitor Virtual LANs (VLANs). VLANs are a virtual interface and use many of the same commands as physical interfaces.
You can configure an IP address and Layer 3 protocols on a VLAN called Inter-VLAN routing. FTP,
TFTP, ACLs and SNMP are not supported on a VLAN.
Occasionally, while sending broadcast traffic over multiple Layer 3 VLANs, the VRRP state of a
VLAN interface may continually switch between Master and Backup.
•
•
•
•
•
•
•
•
•
•
630 | Layer 2
See also
and see VLAN-related commands, such as
description c e s Add a description about the selected VLAN.
Syntax description description
To remove the description from the VLAN, use the no description
command.
Parameters
Defaults
Command Modes description
Enter a text string description to identify the VLAN (80 characters maximum).
No default behavior or values
INTERFACE VLAN
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 6.3.1.0
Introduced on the S60.
Introduced on C-Series and S-Series
Introduced on E-Series
Related
Commands
Display VLAN configuration.
default vlan-id c e s Specify a VLAN as the Default VLAN.
Syntax default vlan-id vlan-id
To remove the default VLAN status from a VLAN and VLAN 1 does not exist, use the
no default vlan-id vlan-id
syntax.
Parameters
Defaults
Command Modes vlan-id
Enter the VLAN ID number of the VLAN to become the new Default VLAN.
Range: 1 to 4094.
Default: 1
The Default VLAN is VLAN 1.
CONFIGURATION
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Layer 2 | 631
Usage
Information
Related
Commands
To return VLAN 1 as the Default VLAN, use this command syntax ( default-vlan-id 1
).
The Default VLAN contains only untagged interfaces.
Configure a VLAN.
default-vlan disable c e s Disable the default VLAN so that all switchports are placed in the Null VLAN until they are explicitly configured as a member of another VLAN.
Defaults
Command Modes
The default VLAN is enabled.
CONFIGURATION
Command
History
Usage
Information
Version 8.3.3.1
Version 8.3.1.0
Introduced on the S60.
Introduced no default vlan disable
is not listed in the running-configuration, but when the default VLAN is disabled, default-vlan disable
is listed in the running-configuration.
enable vlan-counters e x
Display VLAN counters for ingress and/or egress hardware. You must be in restricted mode to use this command.
Syntax
Defaults
Command Modes enable vlan-output-counters [ingress | egress | all]
To return to the default (disabled), use the no enable vlan-output-counters
command.
Disabled—VLAN counters are disabled in hardware (all linecards/port-pipes) by default.
CONFIGURATION
Command
History
Version 8.1.1.2
Version 8.1.1.0
Introduced on E-Series ExaScale E600i
Introduced on E-Series ExaScale E1200i
632 | Layer 2
Example
Force10(conf)#enable vlan-output-counters
Force10(conf)#exit
Force10#show interface vlan 101
Vlan 101 is down, line protocol is down
Address is 00:01:e8:26:e0:5b, Current address is 00:01:e8:26:e0:5b
Interface index is 1107787877
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 01:12:44
Queueing strategy: fifo
Input Statistics:
0 packets, 0 bytes
Output Statistics:
0 packets, 0 bytes
Enabling VLAN output reveals the output statistics counters for the VLAN
Time since last interface status change: 01:12:44
Force10#
Force10#show interfaces vlan 1
Vlan 1 is down, line protocol is down
Address is 00:01:e8:13:a5:aa, Current address is 00:01:e8:13:a5:aa
Interface index is 1107787777
Internet address is not set
MTU 1554 bytes, IP MTU 1500 bytes
LineSpeed 1000 Mbit
ARP type: ARPA, ARP Timeout 04:00:00
Last clearing of "show interface" counters 01:36:01
Queueing strategy: fifo
Input Statistics:
100000 packets, 10000000 bytes
Output Statistics:
200000 packets, 20800000 bytes
Time since last interface status change: 01:36:01
Force10#
Usage
Information
FTOS supports a command to enable viewing of the VLAN input/output counters. This command also applies to SNMP requests. If the command is not enabled, IFM returns zero values for VLAN output counters.
SNMP counters differ from show interface counters as SNMP counters must maintain history. At any point, the value of SNMP counters reflect the amount of traffic being carried on the VLAN.
VLAN output counters may show higher than expected values because source-suppression drops are counted.
During an RPM failover event, all SNMP counters remain intact. The counters will sync over to the secondary RPM.
name c e s Assign a name to the VLAN.
Syntax name vlan-name
To remove the name from the VLAN, enter no name
.
Parameters
Defaults vlan-name
Not configured.
Enter up to 32 characters as the name of the VLAN.
Layer 2 | 633
Command Modes
Command
History
Usage
Information
Related
Commands
INTERFACE VLAN
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
To display information about a named VLAN, enter the show vlan
command with the name parameter or the
show interfaces description command.
Assign a descriptive text string to the interface.
Configure a VLAN.
Display the current VLAN configurations on the switch.
show config c e s Display the current configuration of the selected VLAN.
Syntax
Command Modes
Example show config
INTERFACE VLAN
Figure 21-10. show config Command Sample Output for a Selected VLAN
Force10(conf-if-vl-100)#show config
!
interface Vlan 100
no ip address
no shutdown
Force10(conf-if-vl-100)#
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series show vlan c e s Display the current VLAN configurations on the switch.
Syntax show vlan
[ brief
| id vlan-id
| name vlan-name
]
634 | Layer 2
Parameters
Command Modes brief id vlan-id name vlan-name
EXEC
EXEC Privilege
(OPTIONAL) Enter the keyword brief to display the following information:
• VLAN ID
• VLAN name (left blank if none is configured.)
• Spanning Tree Group ID
• MAC address aging time
• IP address
(OPTIONAL) Enter the keyword id followed by a number from 1 to 4094. Only information on the VLAN specified is displayed.
(OPTIONAL) Enter the keyword name followed by the name configured for the VLAN.
Only information on the VLAN named is displayed.
Command
History
Example
Version 8.3.3.1
Version 7.8.1.0
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Augmented to display PVLAN data for C-Series and S-Series; revised output to include Description field to display user-entered VLAN description
Introduced on S-Series; revised output to display Native VLAN
Introduced on C-Series
Introduced on E-Series
Figure 21-11. show vlan Command Example
Force10#show vlan
Codes: * - Default VLAN, G - GVRP VLANs, P - Primary, C - Community, I - Isolated
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
* 1 Inactive
2 Active U Po1(Gi 13/0)
T Po20(Gi 13/6), Gi 13/25
3 Active
T Gi 13/7
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/1
4 Active
5 Active
6 Active
U Po2(Gi 13/2)
T Po20(Gi 13/6)
T Gi 13/7
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/3
U Po3(Gi 13/4)
T Po20(Gi 13/6)
7 Active
T Gi 13/7
T Po20(Gi 13/6)
T Gi 13/7
U Gi 13/5
P 100 Active T Po1(Gi 0/1)
T Gi 0/2
C 101 Inactive T Gi 0/3
I 102 Inactive T Gi 0/4
Force10#
Layer 2 | 635
636 | Layer 2
Table 21-4. show vlan Information
Column Heading
(Column 1 — no heading)
NUM
Status
Q
Ports
Description asterisk symbol (*) = Default VLAN
G
= GVRP VLAN
P = primary VLAN
C
= community VLAN
I = isolated VLAN
Displays existing VLAN IDs.
Displays the word Inactive for inactive VLANs and the word
Active
for active VLANs.
Displays
G
for GVRP tagged,
M
for member of a VLAN-Stack VLAN,
T for tagged interface, U (for untagged interface), x (uncapitalized x) for
Dot1x untagged, or
X
(capitalized X) for Dot1x tagged.
Displays the type, slot, and port information. For the type,
Po
= port channel, Gi = gigabit ethernet, and Te = ten gigabit ethernet.
Figure 21-12. Example of Output of show vlan id
Force10# show vlan id 40
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
40 Active M Gi 13/47
Force10#show vlan id 41
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
41 Active T Gi 13/47
Force10#show vlan id 42
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
42 Active U Gi 13/47
Force10#
Figure 21-13. Example of Output of show vlan brief
Force10#show vlan br
VLAN Name STG MAC Aging IP Address
---- -------------------------------- ---- --------- ------------------
1 0 1800 unassigned
2 0 1800 2.2.2.2/24
3 0 1800 3.3.3.2/24
Force10#
Figure 21-14. Using VLAN Name
Force10conf)#interface vlan 222
Force10(conf-if-vl-222)#name test
Force10(conf-if-vl-222)#do show vlan name test
Codes: * - Default VLAN, G - GVRP VLANs
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
G - GVRP tagged, M - Vlan-stack
NUM Status Description Q Ports
222 Inactive U Gi 1/22
Force10(conf-if-vl-222)#
Related
Commands
Enable the Stackable VLAN feature on the selected VLAN.
Configure a VLAN.
tagged c e s Add a Layer 2 interface to a VLAN as a tagged interface.
Syntax
Parameters
Defaults
Command Modes
tagged interface
To remove a tagged interface from a VLAN, use no tagged interface
command. interface
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword the slot/port information.
GigabitEthernet followed by
• For a Port Channel interface, enter the keyword number: port-channel followed by a
C-Series
and
S-Series
Range: 1-128
E-Series
Range: 1 to 255 for TeraScale.
• For a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.
TenGigabitEthernet
All interfaces in Layer 2 mode are untagged.
INTERFACE VLAN
Command
History
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.1.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Layer 2 | 637
Usage
Information
Related
Commands
When you use the no tagged
command, the interface is automatically placed in the Default VLAN as an untagged interface unless the interface is a member of another VLAN. If the interface belongs to several VLANs, you must remove it from all VLANs to change it to an untagged interface.
Tagged interfaces can belong to multiple VLANs, while untagged interfaces can only belong to one
VLAN at a time.
Configure a VLAN.
Specify which interfaces in a VLAN are untagged.
track ip c e s Track the Layer 3 operational state of a Layer 3 VLAN, using a subset of the VLAN member interfaces.
Syntax track ip interface
To remove the tracking feature from the VLAN, use the no track ip interface
command.
Parameters interface
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.
GigabitEthernet
• For a Port Channel interface, enter the keyword number: port-channel followed by a
C-Series
Range: 1-128
E-Series
Range: 1 to 255 for TeraScale.
• For a SONET interface, enter the keyword information. sonet followed by the slot/port
• For a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.
TenGigabitEthernet
Defaults
Command Modes
Not configured
INTERFACE VLAN
Command
History
Usage
Information
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
When this command is configured, the VLAN is operationally UP if any of the interfaces specified in the track ip
command are operationally UP, and the VLAN is operationally DOWN if none of the tracking interfaces are operationally UP.
If the track ip
command is not configured, the VLAN's Layer 3 operational state depends on all the members of the VLAN.
The Layer 2 state of the VLAN, and hence the Layer 2 traffic is not affected by the track ip
command configuration.
638 | Layer 2
Related
Commands
Configure a VLAN.
Specify which interfaces in a VLAN are tagged.
untagged c e s Add a Layer 2 interface to a VLAN as an untagged interface.
Syntax
Parameters
Defaults
Command Modes
untagged interface
To remove an untagged interface from a VLAN, use the no untagged interface
command.
interface
Enter the following keywords and slot/port or number information:
• For a 1-Gigabit Ethernet interface, enter the keyword the slot/port information.
GigabitEthernet followed by
• For Port Channel interface types, enter the keyword number from 1 to 255 for TeraScale.
port-channel followed by a
• For a 10-Gigabit Ethernet interface, enter the keyword followed by the slot/port information.
TenGigabitEthernet
All interfaces in Layer 2 mode are untagged.
INTERFACE VLAN
Command
History
Usage
Information
Related
Commands
Version 8.3.3.1
Version 7.6.1.0
Version 7.5.1.0
pre-Version 6.2.1.1
Introduced on the S60.
Introduced on S-Series
Introduced on C-Series
Introduced on E-Series
Untagged interfaces can only belong to one VLAN.
In the Default VLAN, you cannot use the no untagged interface
command. To remove an untagged interface from all VLANs, including the Default VLAN, enter the INTERFACE mode and use the no
Configure a VLAN.
Specify which interfaces in a VLAN are tagged.
Layer 2 | 639
640 | Layer 2
Download
Public link updated
The public link to your chat has been updated. You may view and manage your chat links after registration here.
Document public link
Advertisement
