Extreme Networks ExtremeWare XOS 11.0 Command Reference Manual Download Page 454

Page: 454 / 970

454

ExtremeWare XOS 11.0 Command Reference Guide

Security Commands

show policy

show policy {<policy-name> | detail}

Description

Displays the specified policy.

Syntax Description

Default

If no policy name is specified, all policies are shown

Usage Guidelines

Use this command to display which clients are using the specified policy. The detail option displays the
rules that make up the policy.

Example

The following example displays the policy

zone5

show policy zone5 detail

History

This command was available in ExtremeWare XOS 10.1.

policy-name

Specifies the policy to display.

detail

Show the policy in detail.

Summary of Contents for ExtremeWare XOS 11.0

Page 1: ...rks Inc 3585 Monroe Street Santa Clara California 95051 888 257 3000 http www extremenetworks com ExtremeWare XOS Command Reference Guide Software Version 11 0 Published September 2004 Part number 100...

Page 2: ...rating system is based in part on the Linux operating system The machine readable copy of the corresponding source code is available for the cost of distribution Please direct requests to Extreme Netw...

Page 3: ...ssions 39 configure cli max failed logins 40 configure dns client add 41 configure dns client default domain 42 configure dns client delete 43 configure failsafe account 44 configure idletimeout 46 co...

Page 4: ...snmp sysLocation 80 configure snmp sysName 81 configure snmpv3 add access 82 configure snmpv3 add community 84 configure snmpv3 add filter 86 configure snmpv3 add filter profile 88 configure snmpv3 ad...

Page 5: ...gure sntp client update interval 116 configure telnet port 117 configure telnet vr 118 disable dhcp vlan 119 disable snmp access 120 disable sntp client 121 disable telnet 122 disable watchdog 123 ena...

Page 6: ...show sntp client 168 start process 169 telnet 170 terminate process 172 tftp 174 Chapter 4 Commands for Configuring Slots and Ports on a Switch clear counters edp 179 clear slot 180 configure edp adv...

Page 7: ...grouping 209 enable slot 211 restart ports 212 run msm failover 213 show edp 214 show mirroring 216 show ports collisions 217 show ports configuration 218 show ports information 220 show ports packet...

Page 8: ...back mode vlan 254 enable loopback mode vlan 255 show protocol 256 show vlan 257 show vman 259 unconfigure vlan ipaddress 261 Chapter 6 Commands for Virtual Routers create virtual router 264 configure...

Page 9: ...n port 296 enable diffserv replacement ports 297 enable dot1p replacement ports 298 show diffserv 299 show dot1p 301 show ports qosmonitor 302 show qosprofile ports 304 unconfigure diffserv 306 unconf...

Page 10: ...4 disable log debug mode 345 disable log target 346 disable sflow 348 disable sflow ports 349 disable sys health check 350 disable syslog 351 enable cli config logging 352 enable log debug mode 353 en...

Page 11: ...access list counter 412 clear vlan dhcp address allocation 413 configure access list 414 configure radius server 415 configure radius shared secret 416 configure radius timeout 417 configure radius a...

Page 12: ...able dhcp ports vlan 442 enable radius 443 enable radius accounting 444 enable ssh2 445 enable tacacs 446 enable tacacs accounting 447 enable tacacs authorization 448 refresh policy 449 show access li...

Page 13: ...ure eaps failtime expiry action 476 configure eaps fast convergence 477 configure eaps hellotime 478 configure eaps mode 479 configure eaps name 480 configure eaps port 481 create eaps 482 delete eaps...

Page 14: ...4 enable stpd ports 526 enable stpd rapid root failover 527 show stpd 528 show stpd ports 530 show vlan stpd 532 unconfigure stpd 534 unconfigure stpd ports link type 535 Chapter 13 ESRP Commands clea...

Page 15: ...566 configure esrp timer neighbor 567 configure esrp timer neutral 568 configure esrp timer premaster 569 configure esrp timer restart 570 create esrp 571 delete esrp 573 disable esrp 574 enable esrp...

Page 16: ...ure bootprelay add 606 configure bootprelay delete 607 configure iparp add 608 configure iparp add proxy 609 configure iparp delete 610 configure iparp delete proxy 611 configure iparp max_entries 612...

Page 17: ...le iparp checking 639 disable iparp refresh 640 disable ipforwarding 641 disable ip option loose source route 642 disable ip option record route 643 disable ip option record timestamp 644 disable ip o...

Page 18: ...2 show iparp proxy 673 show ipconfig 674 show iproute 675 show iproute origin 676 show ipstats 677 unconfigure icmp 680 unconfigure iparp 681 unconfigure irdp 682 Chapter 16 IGP Commands clear ospf co...

Page 19: ...e 709 configure ospf routerid 710 configure ospf spf hold time 711 configure ospf virtual link timer 712 configure ospf vlan area 713 configure ospf vlan neighbor add 714 configure ospf vlan neighbor...

Page 20: ...744 enable ospf capability opaque lsa 745 enable ospf export 746 enable ospf originate default 747 enable ospf use ip router alert 748 enable rip 749 enable rip aggregation 750 enable rip export 751...

Page 21: ...ederation id 788 configure bgp delete aggregate address 789 configure bgp delete confederation peer sub AS number 790 configure bgp delete network 791 configure bgp export shutdown priority 792 config...

Page 22: ...1 configure bgp peer group remote AS number 822 configure bgp peer group route policy 823 configure bgp peer group soft reset 824 configure bgp peer group source interface 825 configure bgp peer group...

Page 23: ...ighbor 857 enable bgp neighbor capability 858 enable bgp neighbor remove private AS numbers 859 enable bgp neighbor soft in reset 860 enable bgp neighbor use ip router alert 861 enable bgp peer group...

Page 24: ...configure pim crp static 895 configure pim crp timer 896 configure pim crp vlan 897 configure pim delete vlan 898 configure pim register rate limit interval 899 configure pim register suppress interva...

Page 25: ...2 install image 934 ls 936 mv 937 rm 938 run update 939 save configuration 940 show configuration 942 show memorycard 943 synchronize 944 unconfigure switch 946 uninstall image 947 use configuration 9...

Page 26: ...26 ExtremeWare XOS 11 0 Command Reference Guide Contents...

Page 27: ...a reference by network administrators who are responsible for installing and setting up network equipment It assumes knowledge of Extreme Networks switch configuration For conceptual information and...

Page 28: ...ng location http www extremenetworks com services Table 2 Text conventions Convention Description Screen displays This typeface indicates command syntax or represents information as it appears on the...

Page 29: ...atures and technologies supported by Extreme Networks switches see the installation and user guides for your product This guide does not replace the installation and user guides this guide supplements...

Page 30: ...ey do not appear where you expect to find them For each command the following information is provided Command Syntax The actual syntax of the command The syntax conventions the use of braces or curly...

Page 31: ...also provides assistance if you have entered an incorrect command Table 3 Command syntax symbols Symbol Description angle brackets Enclose a variable or value You must specify the variable or value Fo...

Page 32: ...ame across categories for example STPD and EAPS names you must specify the identifying keyword as well as the actual name Command Shortcuts All named components within a category of the switch configu...

Page 33: ...cter to the right Ctrl H or Backspace Deletes character to left of cursor and shifts remainder of line to left Delete or Ctrl D Deletes character under cursor and shifts remainder of line to left Ctrl...

Page 34: ...rence Overview Command History ExtremeWare XOS remembers all the commands you enter You can display a list of these commands by using the following command history If you use a command more than once...

Page 35: ...change all switch parameters It can also add and delete users and change the password associated with any account name The administrator can disconnect a management session that has been established b...

Page 36: ...session command The show session output displays information about current Telnet sessions including The session number The login date and time The user name The type of Telnet session Authentication...

Page 37: ...inimum of 1 character and can have a maximum of 30 characters Passwords are case sensitive user names are not case sensitive You must have administrator privileges to change passwords for accounts oth...

Page 38: ...s Default N A Usage Guidelines Press Return at the beginning of a line to terminate the command and apply the banner To clear the banner press Return at the beginning of the first line You can enter u...

Page 39: ...ption Limits number of simultaneous CLI sessions on the switch Syntax Description Default The default is eight sessions Usage Guidelines The value must be greater than 0 Example configure cli max sess...

Page 40: ...iled logins permitted before the session is terminated Syntax Description Default The default is three logins Usage Guidelines The value must be greater than 0 Example The following command sets the m...

Page 41: ...the name resolver will attempt to look up the name with no suffix Up to eight DNS name servers can be configured The default value for the virtual router used by the DNS client option is VR 2 Examples...

Page 42: ...elines The default domain name will be used to create a fully qualified host name when a domain name is not specified For example if the default domain name is set to food com then when a command like...

Page 43: ...name specified an error message will be displayed The default value for the virtual router used by the DNS client option is VR 2 Examples The following command deletes a domain name from the domain su...

Page 44: ...green enter failsafe password enter password again BD 10808 2 The failsafe account is immediately saved to NVRAM NOTE The information that you use to configure the failsafe account cannot be recovered...

Page 45: ...ommand to reboot the current MSM Help use this command to display a short help text Exit use this command to exit the failsafe account and return to the login prompt Typically you would use the Login...

Page 46: ...onfigures the length of time the switch will wait before disconnecting idle console or Telnet sessions The idletimeout feature must be enabled for this command to have an effect the idletimeout featur...

Page 47: ...provide one item at a time and press Tab the screen prompts you for the next item Press cr to complete the input Example The following command configures a system date of February 15 2002 and a syste...

Page 48: ...h The default is an empty string dst_offset Specifies an offset from standard time in minutes Value is in the range of 1 to 60 Default is 60 minutes floating_day Specifies the day week and month of th...

Page 49: ...The ends specification defaults to every last sunday october The ends date may occur earlier in the year than the begins date This will be the case for countries in the Southern Hemisphere If you spe...

Page 50: ...me Italy Bern Switzerland Stockholm Sweden Oslo Norway 2 00 120 EET Eastern European Russia Zone 1 Athens Greece Helsinki Finland Istanbul Turkey Jerusalem Israel Harare Zimbabwe 3 00 180 BT Baghdad R...

Page 51: ...1 1 4 at 2 00 ends every 5 1 10 at 2 00 configure timezone name EST 300 autodst name EDT configure timezone 300 autodst The following command configures the GMT offset and automatic DST adjustment for...

Page 52: ...mum of 1 character and can have a maximum of 30 characters Passwords must have a minimum of 0 characters and can have a maximum of 16 characters Example The following command creates a new account nam...

Page 53: ...create account ExtremeWare XOS 11 0 Command Reference Guide 53 History This command was first available in ExtremeWare XOS 10 1...

Page 54: ...rivileges to delete a user account The system must have one administrator account the command will fail if an attempt is made to delete the last administrator account on the system Do not delete the d...

Page 55: ...xtremeWare XOS feature that completes a command automatically with the spacebar If you disable this feature The Tab key can still be used for auto completion Syntax Description This command has no arg...

Page 56: ...hen the display reaches the end of a page This command disables the pause mechanism and allows the display to print continuously to the screen CLI paging is only active on a per shell session basis In...

Page 57: ...abled console sessions remain open until the switch is rebooted or until you logoff Telnet sessions remain open until you close the Telnet client To view the status of idle time outs on the switch use...

Page 58: ...on Enables the ExtremeWare XOS feature that completes a command automatically with the spacebar The Tab key can also be used for auto completion Syntax Description This command has no arguments or var...

Page 59: ...y reaches the end of a page If CLI paging is enabled and you use the show tech support command to diagnose system technical problems the CLI paging feature is disabled CLI paging is only active on a p...

Page 60: ...e session is disconnected if it has been idle for the required length of time This ensures that there are no hanging connections To view the status of idle time outs on the switch use the show managem...

Page 61: ...Default N A Usage Guidelines ExtremeWare XOS remembers all the commands you entered on the switch Use the history command to display a list of these commands Example The following command displays all...

Page 62: ...s continuous ICMP echo messages to be sent to a remote host ping continuous 123 45 67 8 count Specifies the number of ping requests to send start size Specifies the size in bytes of the packet to be s...

Page 63: ...ping ExtremeWare XOS 11 0 Command Reference Guide 63 History This command was first available in ExtremeWare XOS 10 1...

Page 64: ...h returns the following message Do you want to save configuration changes to primary and reboot y save and reboot n reboot without save cr cancel command To cancel a previously scheduled reboot use th...

Page 65: ...ounts command displays the following information in a tabular format User Name The name of the user This list displays all of the users who have access to the switch Access The SNMP community strings...

Page 66: ...ables Default N A Usage Guidelines Use this command to view the banner that is displayed before the login prompt Example The following command displays the switch banner show banner Output from this c...

Page 67: ...s Default N A Usage Guidelines None Example The following command displays the DNS configuration show dns client Output from this command looks similar to the following Number of domain suffixes 2 Dom...

Page 68: ...t information MSM information Software image information primary secondary image and version Configuration information primary secondary configuration and version This information may be useful for yo...

Page 69: ...y October at 2 00 Boot Time Sat May 15 17 19 29 2004 Next Reboot None scheduled MSM MSM A MSM B Current State MASTER INIT Image Selected primary Image Booted primary Primary ver 10 2 0 14 Secondary ve...

Page 70: ...123 45 67 8 traceroute 123 45 67 8 History This command was first available in ExtremeWare XOS 10 1 vr Specifies a virtual router vrid Specifies which virtual router host Specifies the hostname or IP...

Page 71: ...igured on the switch Authorized managers An authorized manager can be either a single network management station or a range of addresses for example a complete subnet specified by a prefix and a mask...

Page 72: ...O modules running the bridging and routing protocols and configuring the switch The primary also keeps synchronized with the backup MSM in case the backup MSM needs to take over the management functi...

Page 73: ...tion priority This is a user assigned priority The configured priority is compared only after the node meets the minimum thresholds in each category for it to be healthy Required processes and devices...

Page 74: ...nfigured to use the correct community strings on the switch for the trap receiver to receive switch generated traps In some cases it may be useful to allow multiple community strings so that all switc...

Page 75: ...e SNMP trap receivers configured on the switch use the show management command The show management command displays information about the switch including the destination and community of the SNMP tra...

Page 76: ...e IP address 10 101 0 105 as a trap receiver with community string blue and IP address 10 101 0 25 as the source configure snmp add trapreceiver 10 101 0 105 community blue from 10 101 0 25 History Th...

Page 77: ...te community strings provide read and write access to the switch The default read write community string is private Sixteen read only and sixteen read write community strings can be configured on the...

Page 78: ...2c trap receiver whose IP address and port number match the specified value Example The following command deletes the trap receiver 10 101 0 100 from the trap receiver list configure snmp delete trapr...

Page 79: ...e of the person s responsible for managing the switch A maximum of 255 characters is allowed To view the name of the system contact listed on the switch use the show switch command The show switch com...

Page 80: ...e location of the switch A maximum of 255 characters is allowed To view the location of the switch on the switch use the show switch command The show switch command displays switch statistics includin...

Page 81: ...use this command to change the name of the switch A maximum of 32 characters is allowed The sysname appears in the switch prompt To view the name of the system listed on the switch use the show switc...

Page 82: ...ies the security model to use snmpv1 Specifies the SNMPv1 security model snmpv2 Specifies the SNMPv2c security model usm Specifies the SNMPv3 User based Security Model USM sec level Specifies the secu...

Page 83: ...itial v1v2c_ro v1v2c_rw and v1v2cNotifyGroup Example In the following command access for the group defaultROGroup is created with all the default values security model usm security level noauth read v...

Page 84: ...72 and volatile storage configure snmpv3 add community hex 12 0E name hex EA 12 CD CF AB 11 3C user v1v2c_user tag 34872 volatile hex_community_index Specifies the row index in the snmpCommunity table...

Page 85: ...remeWare XOS 11 0 Command Reference Guide 85 History This command was first available in ExtremeWare XOS 10 1 The hex_community_index hex_community_name hex_user_name and hex_transport_tag parameters...

Page 86: ...parameter name with a target address This command can be used multiple times to configure the exact filter profile desired Example The following command adds a filter to the filter profile prof1 that...

Page 87: ...figure snmpv3 add filter ExtremeWare XOS 11 0 Command Reference Guide 87 History This command was first available in ExtremeWare XOS 10 1 The hex_profile_name parameter was added in ExtremeWare XOS 11...

Page 88: ...ffect you are associating a series of filters with a target address Example The following command associates the filter profile prof1 with the parameter name P1 configure snmpv3 add filter profile pro...

Page 89: ...roup is uniquely identified by a security name and security model So the same security name can be associated to a group name but with different security models Example The following command associate...

Page 90: ...the user userv3 with security model USM and storage type volatile to the access group defaultRoGroup configure snmpv3 add group defaultRoGroup user userV3 volatile History This command was first avai...

Page 91: ...efault views are defaultUserView defaultAdminView and defaultNotifyView Example The following command creates the MIB view allMIB with the subtree 1 3 included as non volatile configure snmpv3 add mib...

Page 92: ...s a view vrrpTrapNewMaster which excludes VRRP notification 1 and the entry is volatile configure snmpv3 add mib view vrrpTrapNewMaster 1 3 6 1 2 1 68 0 1 ff8 type excluded volatile History This comma...

Page 93: ...o associated with the target addresses Example The following command sends notifications to addresses associated with the tag type1 configure snmpv3 add notify N1 tag type1 History This command was fi...

Page 94: ...rofileTable which specifies filter profiles to use for notifications to the target address The filter profiles are associated with the filters in the snmpNotifyFilterTable Example The following comman...

Page 95: ...e security parameters and target address parameter P1 and the notification tags type1 and type2 configure snmpv3 add target addr A1 param P1 ipaddress 10 203 0 22 from 10 203 0 23 tag list type1 type2...

Page 96: ...mmand configure snmpv3 add target addr hex_param_name Specifies the parameter name associated with the target The value is to be supplied as a colon separated string of hex octets param_name Specifies...

Page 97: ...user name of guest message processing and security model of SNMPv2c and a security level of no authentication configure snmpv3 add target params P1 user guest mp model snmpv2c sec model snmpv2c sec l...

Page 98: ...authentication The default user names are admin initial initialmd5 initialsha initialmd5Priv initialshaPriv The initial password for admin is password For the other default users the initial password...

Page 99: ...yu The following command configures the user authShapriv to use SHA authentication with the hex key shown below the privacy password palertyu and volatile storage configure snmpv3 add user authShapriv...

Page 100: ...privacy hex hex_priv_password priv_password volatile Users cloned from the default users will have the storage type of non volatile The default names are admin initial initialmd5 initialsha initialmd...

Page 101: ...lete group hex hex_group_name group_name user all non defaults hex hex_user_name user_name sec model snmpv1 snmpv2c usm Example The following command deletes all entries with the group name userGroup...

Page 102: ...group userGroup with the security model snmpv1 and security level of authentication and no privacy authnopriv configure snmpv3 delete access userGroup sec model snmpv1 sec level authnopriv History Thi...

Page 103: ...owing command creates an entry with the community name hex of EA 12 CD CF AB 11 3C configure snmpv3 delete community name hex EA 12 CD CF AB 11 3C History This command was first available in ExtremeWa...

Page 104: ...and a subtree to delete just those entries for that filter profile and subtree Example The following command deletes the filters from the filter profile prof1 that reference the MIB subtree 1 3 6 1 4...

Page 105: ...te just those entries for that filter profile and parameter name Example The following command deletes the filter profile prof1 with the parameter name P1 configure snmpv3 delete filter profile prof1...

Page 106: ...e associated to a group name but with different security models The default groups are admin initial v1v2c_ro v1v2c_rw The default users are admin initial initialmd5 initialsha initialmd5Priv initials...

Page 107: ...owing command deletes the user guest from the group userGroup with the security model USM configure snmpv3 delete group userGroup user guest History This command was first available in ExtremeWare XOS...

Page 108: ...rity group by specifying a different view Example The following command deletes all views only the permanent views will not be deleted configure snmpv3 delete mib view all non defaults The following c...

Page 109: ...sent in the table notifications will be sent based on the filters also associated with the target addresses The one default notification that cannot be deleted is defaultNotify Example The following c...

Page 110: ...an entry in the SNMPv3 snmpTargetAddressTable Example The following command deletes target address named A1 configure snmpv3 delete target addr A1 History This command was first available in ExtremeW...

Page 111: ...del security level security model and the storage parameters for messages to any target addresses associated with a particular parameter name Example The following command deletes a target parameters...

Page 112: ...from the VACMSecurityToGroupTable To remove the association use the following command configure snmpv3 delete group hex hex_group_name group_name user all non defaults hex hex_user_name user_name sec...

Page 113: ...Use this command if the Engine Boots value needs to be explicitly configured Engine Boots and Engine Time will be reset to zero if the Engine ID is changed Engine Boots can be set to any desired value...

Page 114: ...neID is changed default users will be reverted back to their original passwords keys while non default users will be reset to the security level of no authorization no privacy In a chassis the snmpEng...

Page 115: ...ts the query process Otherwise the switch waits for the sntp client update interval before querying again Example The following command configures a primary NTP server configure sntp client primary 10...

Page 116: ...rval Description Configures the interval between polls for time information from SNTP servers Syntax Description Default 64 seconds Usage Guidelines None Example The following command configures the i...

Page 117: ...age Guidelines You must be logged in as administrator to configure the Telnet port The portno range is 1 through 65535 Example The following command changes the port used for Telnet to port 85 configu...

Page 118: ...e vr_name specifies the name of the virtual router to use for Telnet connections If you specify a virtual router name that does not exist an error message similar to the following appears configure te...

Page 119: ...N to obtain an IP address for the VLAN from a DHCP server Syntax Description Default Disabled for all VLANs Usage Guidelines None Example The following command disables the generation and processing o...

Page 120: ...ccess the switch using SNMP To allow access use the following command enable snmp access By using the enable and disable commands you can enable all SNMP access no SNMP access or only SNMPv3 access Yo...

Page 121: ...onize its internal clock from a Network Time Protocol NTP server After the SNTP client has been enabled the switch sends out a periodic query to the indicated NTP server or the switch listens to broad...

Page 122: ...he system Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines You must be logged in as an administrator to enable or disable Telnet Example With administrato...

Page 123: ...tion or a hardware problem with the communication channel to the watchdog In most cases if the watchdog timer expires the switch captures the current CPU status and posts it to the console and the sys...

Page 124: ...n a VLAN to obtain an IP address for the VLAN from a DHCP server Syntax Description Default Disabled for all VLANs Usage Guidelines None Example The following command enables the generation and proces...

Page 125: ...gement station Each network manager provides its own user interface to the management facilities For SNMPv3 additional security keys are used to control access so an SNMPv3 manager is required for thi...

Page 126: ...synchronize its internal clock from a Network Time Protocol NTP server After the SNTP client has been enabled the switch sends out a periodic query to the indicated NTP server or the switch listens to...

Page 127: ...Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines You must be logged in as an administrator to enable or disable Telnet Example With administrator privileg...

Page 128: ...exception or a hardware problem with the communication channel to the watchdog In most cases if the watchdog timer expires the switch captures the current CPU status and posts it to the console and t...

Page 129: ...o save your configuration changes to the current active configuration Enter y if you want to save your changes Enter n if you do not want to save your changes Example The following command logs out th...

Page 130: ...you are asked to save your configuration changes to the current active configuration Enter y if you want to save your changes Enter n if you do not want to save your changes Example The following comm...

Page 131: ...o save your configuration changes to the current active configuration Enter y if you want to save your changes Enter n if you do not want to save your changes Example The following command logs out th...

Page 132: ...e client state for all existing VLANs Usage Guidelines None Example The following command displays the DHCP BOOTP status for all VLANs show dhcp client state Depending on your configurations output fr...

Page 133: ...atics of all of the processes between the master and the backup MSM show checkpoint data The following is sample output from this command Process Tx Rx Sent Total Chkpt Debug info devmgr 235 143 7 7 1...

Page 134: ...8D3 epm 0 0 0 0 0 ON OK 1 000008D3 hal 0 0 0 0 0 ON OK 1 000008D3 bgp 0 0 0 0 0 ON OK 1 000008D3 pim 0 0 0 0 0 ON OK 1 000008D3 etmon 0 0 0 0 0 ON OK 1 000008D3 To view the output for a specific proce...

Page 135: ...lowing management output is also displayed SNMP trap receiver source IP address SNMP statistics counter SSH access states of enabled disabled and module not loaded SNMP access states of v1 v2c disable...

Page 136: ...s Flags 10 203 128 20 162 10 203 135 5 2S Flags Version 1 v1 2 v2c Mode S Standard E Enhanced SNMP stats InPkts 1356 OutPkts 1356 Errors 0 AuthErrors 0 Gets 0 GetNexts 1356 Sets 0 Sent 0 AuthTraps Ena...

Page 137: ...e node is not available to participate in leader election The node enters this state during any user action other than a failure that makes the node unavailable for management Examples of user actions...

Page 138: ...from this command Node State Priority SwHealth HwHealth MSM A MASTER 0 49 7 MSM B BACKUP 0 49 7 If you specify the detail option the same information is displayed on a per node basis rather than in a...

Page 139: ...ferent chassis the odometer counter will be available in the new switch chassis The following components are monitored by the odometer Chassis MSMs I O modules Power controllers The following odometer...

Page 140: ...184 Dec 03 2003 Slot 8 10G6X 146 Jan 12 2004 MSM A MSM 1XL 62 Apr 21 2004 MSM B MSM 1XL 172 Dec 14 2003 PSUCTRL 1 152 Mar 17 2004 PSUCTRL 2 History This command was first available in ExtremeWare XOS...

Page 141: ...PartInfo Provides information about the power supply including the Serial number a collection of numbers and letters that make up the serial number of the power supply Part number a collection of num...

Page 142: ...PowerSupply 1 information State Powered On PartInfo PS 2336 0413J 00780 4300 00137 Revision 4 0 FailureCode 0 Odometer 134 days 15 hours Temperature 40 0 deg C Input 114 44 V Output 1 48 83 V 7 87 A...

Page 143: ...ow power budget command displays the Slot number of the power supply Current state of the power supply Options are Empty There is no power supply installed Power Failed The power supply has failed Pow...

Page 144: ...00 00 144 00 PowerUp Limit 2496 00 2400 00 96 00 PowerDown Limit 3744 00 3600 00 144 00 Slots Type State Watts 48V 12V Slot 1 Empty Slot 2 Empty Slot 3 Empty Slot 4 Empty Slot 5 G60T Operational 225 0...

Page 145: ...installed and operational Present The power supply controller is installed PartInfo Provides information about the power supply controller including the Slot number where the power supply controller...

Page 146: ...command PSUCTRL 1 information State Present PartInfo Mead 1 0410F 01217 7040255 00 05 Revision 5 0 FailureCode 0 Odometer 3 days 8 minutes 10 seconds since May 21 2004 Temperature 25 0 deg C Status P...

Page 147: ...played in a list format history Displays a list of current and previous sessions including the user type of session location and start and end time of the session The show session command fields are d...

Page 148: ...current and previous sessions on the switch show session history The following is sample output from this command Session History admin console serial Mon Jun 21 09 19 00 2004 Mon Jun 21 10 00 16 200...

Page 149: ...access details show snmpv3 access The following is sample output from this command Group Name admin Context Prefix Security Model USM Security Level Authentication Privacy Context Match Exact Read Vie...

Page 150: ...View defaultNotifyView Storage Type Permanent Row Status Active Group Name v1v2cNotifyroup Context Prefix Security Model snmpv2c Security Level No Authentication No Privacy Context Match Exact Read V...

Page 151: ...ariables Default N A Usage Guidelines This command displays the entries in the View based Access Control Model VACM context table VACMContextTable Example The following command displays information ab...

Page 152: ...rs usmStatsUnsupportedSecLevels usmStatsNotInTimeWindows usmStatsUnknownUserNames usmStatsUnknownEngineIDs usmStatsWrongDigests usmStatsDecryptionErrors Issuing the command clear counters will reset a...

Page 153: ...show snmpv3 counters ExtremeWare XOS 11 0 Command Reference Guide 153 History This command was first available in ExtremeWare XOS 10 1...

Page 154: ...m MAC address of switch or the ID manually configured Engine Boots Number of times the agent has been rebooted Engine Time Time since agent last rebooted in centiseconds Max Message Size Maximum SNMP...

Page 155: ...you do not specify a profile name then all the entries are displayed Example The following command displays the part of filter profile prof1 that includes the MIB subtree 1 3 6 1 4 1 show snmpv3 filte...

Page 156: ...of filters with a target address Example The following command displays the entry with filter profile prof1 with the parameter name P1 show snmpv3 filter profile prof1 param P1 The following is sampl...

Page 157: ...bout all groups for every security model and user name show snmpv3 group The following is sample output from this command Group Name v1v2c_ro Security Name v1v2c_ro Security Model snmpv1 Storage Type...

Page 158: ...nitialmd5 Security Model USM Storage Type Permanent Row Status Active Group Name initial Security Name initialsha Security Model USM Storage Type Permanent Row Status Active Group Name initial Securit...

Page 159: ...XOS 11 0 Command Reference Guide 159 Storage Type NonVolatile Row Status Active History This command was first available in ExtremeWare XOS 10 1 The hex_group_name and hex_user_name parameters were a...

Page 160: ...TreeFamilyTable Example The following command displays all the view details show snmpv3 mib view The following is sample output from this command View Name defaultUserView MIB Subtree 1 View Type Incl...

Page 161: ...1 6 3 15 1 2 2 1 9 View Type Excluded Storage Type Permanent Row Status Active View Name defaultAdminView MIB Subtree 1 View Type Included Storage Type Permanent Row Status Active View Name defaultNo...

Page 162: ...otify name is specified all the entries are displayed Example The following command displays the notify table entry for N1 show snmpv3 notify N1 The following is sample output from this command Notify...

Page 163: ...1 show snmpv3 target addr A1 The following is sample output from this command Target Addr Name A1 TDomain 1 3 6 1 6 1 1 TAddress 10 203 128 20 162 TMask Retry Count 0 Tag List defaultNotify Params All...

Page 164: ...rgetAddressExtTable Example The following command displays the entry for the target address named A1 show snmpv3 extreme target addr ext A1 The following is sample output from this command Target Addr...

Page 165: ...rameter name If no parameter name is specified all the entries are displayed Example The following command displays the target parameter entry named P1 show snmpv3 target params P1 The following is sa...

Page 166: ...are indexed by EngineID and user name Example The following command lists all user entries show snmpv3 user The following is sample output from this command Engine ID 80 0 7 7c 3 0 2 b3 4c 19 b2 H Us...

Page 167: ...2 b3 4c 19 b2 H User Name initialmd5Priv Security Name Authentication HMAC MD5 Privacy DES Storage Type Permanent Row Status Active Engine ID 80 0 7 7c 3 0 2 b3 4c 19 b2 H User Name initialshaPriv Sec...

Page 168: ...command SNTP client is enabled SNTP time is valid Primary server 172 17 1 104 Secondary server 172 17 1 104 Query interval 64 Last valid SNTP update From server 172 17 1 104 on Wed Oct 30 22 46 03 20...

Page 169: ...wing appears Error Process telnetd already exists To display the status of ExtremeWare XOS processes on the switch including how many times a process has been restarted use the show process name detai...

Page 170: ...to do this You must configure DNS in order to use the host_name option The vr_name option specifies the name of the virtual router The valid virtual router names at system boot up are VR Mgmt VR Contr...

Page 171: ...are XOS 11 0 Command Reference Guide 171 History This command was first available in ExtremeWare XOS 10 1 Support for the following virtual routers was added in ExtremeWare XOS 11 0 VR Mgmt VR Control...

Page 172: ...normal process cleanup The status of the operation is displayed on the console After a successful forceful termination of a process a message similar to the following appears Forceful termination suc...

Page 173: ...terminate process ExtremeWare XOS 11 0 Command Reference Guide 173 History This command was first available in ExtremeWare XOS 11 0...

Page 174: ...ate the policy database To upgrade the BootROM use the download bootrom command This command utilizes TFTP to transfer the BootROM image file from your TFTP server to the switch Only upgrade the BootR...

Page 175: ...ectively For more information about virtual routers see Virtual Routers in the ExtremeWare XOS Concepts Guide Example The following command downloads the configuration file named XOS1 cfg from the TFT...

Page 176: ...176 ExtremeWare XOS 11 0 Command Reference Guide Commands for Managing the Switch...

Page 177: ...anually configure the duplex setting and the speed of 10 100 Mbps ports and you can manually configure the duplex setting on Gigabit Ethernet ports All ports on the switch can be configured for half d...

Page 178: ...rom a minimum of two other ports on the same switch You can view port status on the switch using the show ports commands These commands when used with specific keywords and parameters allow you to vie...

Page 179: ...escription Default If you do not specify a port the EDP counters will be cleared for all slots Usage Guidelines None Example The following command clears the EDP counters on all ports clear counters e...

Page 180: ...lt settings If a slot is configured for one type of module and a different type of module is inserted the inserted module is put into a mismatch state where the inserted module does not match the conf...

Page 181: ...ks switches EDP enabled ports advertise information about the Extreme switch to other switches on the interface and receive advertisements from other Extreme switches Information about other Extreme s...

Page 182: ...upport jumbo frames When enabling jumbo frames and setting the MTU size for the VLAN keep in mind that some network interface cards NICs have a configured maximum MTU size that does not include the ad...

Page 183: ...support you must configure the maximum transmission unit MTU size of a jumbo frame that will be allowed by the switch Some network interface cards NICs have a configured maximum MTU size that does no...

Page 184: ...tor port on the switch The monitor port can be connected to a network analyzer or RMON probe for packet analysis The switch uses a traffic filter that copies a group of traffic to the monitor port The...

Page 185: ...following example sends all traffic coming into or out of a switch on slot 3 port 2 and the VLAN default to the mirror port configure mirroring add port 3 2 vlan default History This command was first...

Page 186: ...nd port in the form slot port For a detailed explanation of port specification see Modular Switch Numerical Ranges in Chapter 1 Example The following example deletes the mirroring filter on a switch d...

Page 187: ...iation off on a fiber Gigabit Ethernet port Even though a Gigabit Ethernet port runs only at full duplex and gigabit speeds the command that turns off autonegotiation must still include the duplex set...

Page 188: ...188 ExtremeWare XOS 11 0 Command Reference Guide Commands for Configuring Slots and Ports on a Switch History This command was first available in ExtremeWare XOS 10 1...

Page 189: ...iation are 802 3u for 10 100 Mbps ports or 802 3z for Gigabit Ethernet ports Flow control on Gigabit Ethernet ports is enabled or disabled as part of autonegotiation If autonegotiation is set to off f...

Page 190: ...sign the same string to multiple ports For example you could give all the ports that connected to a particular department a common display string The string is displayed in certain commands such as th...

Page 191: ...ange this setting by issuing the command again with a different option Because the algorithms L2_L3__CHK_SUM and L2_L3_L4_CHK_SUM use the IP check sum as part of the decision for the egress port selec...

Page 192: ...mands for Configuring Slots and Ports on a Switch Example The following example configures the switch to examine the MAC source and destination address configure sharing address based l2 History This...

Page 193: ...e and a different type of module is inserted the inserted module is put into a mismatch state and is not brought online To use the new module type in a slot the slot configuration must be cleared or c...

Page 194: ...p is enabled for VMAN all ports in the group are automatically enabled to handle jumbo size frames Also VMAN is automatically enabled on all ports of the untagged load sharing group To verify your con...

Page 195: ...ines Use this command to dynamically delete ports from a load sharing group Example The following example deletes port 3 12 from the load sharing group with the master port 3 9 configure sharing 3 9 d...

Page 196: ...d explanation of port specification see Modular Switch Numerical Ranges or Line Editing Keys in Chapter 1 You can use the disable edp ports command to disable EDP on one or more ports when you no long...

Page 197: ...planation of port specification see Modular Switch Numerical Ranges in Chapter 1 Use the disable jumbo frame ports command when you no longer need jumbo frame support Example The following command dis...

Page 198: ...s in Chapter 1 If MAC address learning is disabled only broadcast traffic EDP traffic and packets destined to a permanent MAC address matching that port number are forwarded Use this command in a secu...

Page 199: ...This command has no arguments or variables Default Disabled Usage Guidelines Use the disable mirroring command to stop all configured copied mirroring traffic Use this command to unconfigure all the f...

Page 200: ...cification see Modular Switch Numerical Ranges in Chapter 1 Use this command for security administration and troubleshooting purposes When a port is disabled the link is brought down Example The follo...

Page 201: ...n sharing is disabled the master port retains all configuration including VLAN membership All other member ports are removed from all VLANs to prevent loops and their configuration is reset to default...

Page 202: ...if invoked after the user disables the slot shows this slot state as Power Off Disabled If there is no I O card present in a slot when the user disables the slot the slot still goes to the Disable sta...

Page 203: ...e information about switch configuration When running on a normal switch port EDP is used to by the switches to exchange topology information with each other Information communicated using EDP include...

Page 204: ...you want to use a different size than the default value of 9216 Use the configure jumbo frame size command to configure the MTU size On a modular switch port_list can be a list of slots and ports For...

Page 205: ...list of slots and ports For a detailed explanation of port specification see Modular Switch Numerical Ranges in Chapter 1 Example The following command enables MAC address learning on slot 1 ports 7 a...

Page 206: ...pecific port is copied to the monitor port Up to 16 mirroring filters and one monitor port can be configured on the switch After a port has been specified as a monitor port it cannot be used for any o...

Page 207: ...lowing example selects slot 1 port 3 as the tagged mirror or monitor port on a modular switch enable mirroring to port 1 3 tagged History This command was first available in ExtremeWare XOS 10 1 Begin...

Page 208: ...ting purposes On a modular switch port_list can be a list of slots and ports For a detailed explanation of port specification see Modular Switch Numerical Ranges in Chapter 1 Example The following com...

Page 209: ...fined according to the following rules The first port in the load sharing group is configured to be the master logical port This is the reference port used in configuration commands It can be thought...

Page 210: ...more information on using addressing information If you do not explicitly select an algorithm the port based scheme is used However the address based algorithm has a more even distribution and is the...

Page 211: ...ought ON as usual After the user enables the slot the show slot command shows the state as Operational or will display the appropriate state if the card could not be brought up successfully Note that...

Page 212: ...itch port_list can be a list of slots and ports For a detailed explanation of port specification see Modular Switch Numerical Ranges in Chapter 1 Example The following command resets autonegotiation o...

Page 213: ...c and both MSMs are running ExtremeWare XOS 11 0 or later use the synchronize command to get the two MSMs in sync This command ensures that the backup has the same software in flash as the master NOTE...

Page 214: ...ing switches and configurations This is most effective with Extreme Networks switches Example The following command displays the configuration of the switch show edp Following is sample output from th...

Page 215: ...1465 pdu tx err 0 Rx stats sw pdu rx 2511 vlan pdu rx 2511 pdu rx err 0 Time of last transmit error None Time of last receive error None Remote System Oban Age 41 Remote ID 00 00 00 30 48 41 ed 97 Sof...

Page 216: ...le mirroring and the configure mirroring add to configure mirroring You can use this command to display mirroring statistics and determine if mirroring is enabled or disabled on the switch To view the...

Page 217: ...ion statistics on slot 1 ports 1 2 on a modular switch show ports 1 1 2 collisions Following is sample output from this command Port Collision Monitor Port Link Collision Histogram Status 1 2 3 4 5 6...

Page 218: ...is status information may be useful for your technical support representative if you have a network problem This command displays port configuration which includes Virtual router Port state Autonegoti...

Page 219: ...command Port Configuration Port Virtual Port Link Auto Speed Duplex Flow Load Media router State State Neg Cfg Actual Cfg Actual Cntrl Master Primary 2 2 VR Default E R ON AUTO AUTO UTP Link Status A...

Page 220: ...DP Load balancing Learning Flooding QoS profiles VMAN status If you do not specify a port number or range of ports detailed system related information is displayed for all ports The data is displayed...

Page 221: ...Discovery Protocol Enabled g Egress TOS U Enabled j Jumbo Frame Enabled l Load Sharing Enabled m MACLearning Enabled n Ingress TOS Enabled U o Dot1p Vlan Priority Replacement Enabled U q Background Q...

Page 222: ...port IQP1 8 IQP1 MinBw 0 MaxBw 100 Pri 1 IQP2 MinBw 0 MaxBw 100 Pri 2 IQP3 MinBw 27 MaxBw 57 Pri 4 IQP4 MinBw 0 MaxBw 100 Pri 4 IQP5 MinBw 0 MaxBw 100 Pri 5 IQP6 MinBw 0 MaxBw 100 Pri 6 IQP7 MinBw 0 M...

Page 223: ...ayed Port number Link status Packet size Example The following command displays packet statistics for slot 1 port 1 slot 2 port 1 and slot 5 ports 1 through 8 on a modular switch show ports 1 1 2 1 5...

Page 224: ...224 ExtremeWare XOS 11 0 Command Reference Guide Commands for Configuring Slots and Ports on a Switch History This command was first available in ExtremeWare XOS 10 1...

Page 225: ...llowing command displays a port load sharing group show ports sharing The following is sample output from this command Load Sharing Monitor Config Current Ld Share Ld Share Link Link Up Master Master...

Page 226: ...atch between the slot configuration and the module in the slot The number of ports on the module If you do not specify a slot number information for all slots is displayed Example The following exampl...

Page 227: ...d the optional parameter detail to the command for displaying a specified slot number The following example displays detailed module information for all slots BD 10808 4 show slot detail Slot 1 inform...

Page 228: ...Serial number 804403 00 01 1 Hw Module Type G60T SW Version 11 0 0 19 SW Build v1100b19 by release manager on Wed Jun 2 16 01 52 PDT 20 04 Configured Type G60T Ports available 6 This example was manua...

Page 229: ...e configure ports display string command On a modular switch port_list can be a list of slots and ports For a detailed explanation of port specification see Modular Switch Numerical Ranges in Chapter...

Page 230: ...lot slot Description Clears a slot of a previously assigned module type Syntax Description Default N A Usage Guidelines None Example The following command clears slot 4 of a previously assigned module...

Page 231: ...ccording to the following criteria Physical port A port based VLAN consists of a group of one or more ports on the switch A port can be a member of only one port based VLAN and is by default a member...

Page 232: ...before you can use this command use the create protocol command to create the protocol filter No more than seven protocols can be active and configured for use Example The following command configures...

Page 233: ...nside an IEEE SNAP packet encapsulation Example The following command deletes protocol type LLC SAP with a value of FEFF from protocol fred configure protocol fred delete llc feff History This command...

Page 234: ...untagged port to a VLAN prior to removing it from the default VLAN you see the following error message Error Protocol conflict when adding untagged port 1 2 Either add this port as tagged or assign a...

Page 235: ...configure vlan add ports ExtremeWare XOS 11 0 Command Reference Guide 235 History This command was first available in ExtremeWare XOS 10 1...

Page 236: ...Syntax Description Default N A Usage Guidelines None Example The following command removes ports 1 1 1 2 4 3 and 5 6 from a VLAN named accounting configure accounting delete port 1 1 1 2 4 3 5 6 Histo...

Page 237: ...to create the VLAN NOTE If you plan to use the VLAN as a control VLAN for an EAPS domain do NOT configure the VLAN with an IP address Example The following commands are equivalent both assign an IP a...

Page 238: ...se the same name across categories for example STPD and EAPS names Extreme Networks recommends that you specify the identifying keyword as well as the actual name If you do not use the keyword the sys...

Page 239: ...its member ports Use the configure protocol command to define your own protocol filter Example The following command configures a VLAN named accounting as an IP protocol based VLAN configure accounti...

Page 240: ...igned to the default VLAN The 802 1Q tag will also be used as the internal VLANid by the switch You can specify a value that is currently used as an internal VLANid on another VLAN it will become the...

Page 241: ...although this port does accept tagged packets You must configure the VMAN tunnel egress or trunk port as an untagged port so that the VMAN header is stripped from the frame NOTE You must configure the...

Page 242: ...orts in the group are automatically enabled to handle jumbo size frames Also VMAN is automatically enabled on all ports of the untagged load sharing group Example The following command assigns ports 1...

Page 243: ...create vman command to create the VLAN All VMAN ports are automatically enabled for jumbo frames to accommodate the extra VMAN tag Untagged ports of VMAN are enabled for VMAN Example The following co...

Page 244: ...on Extreme devices is 0x88a8 If your VMAN transits a third party device other than an Extreme Networks device you must configure the EtherType for the VMAN tag as 8100 for third party those switches o...

Page 245: ...untagged that arrive on the port you added to the VMAN You can specify a value that is currently used as an internal VLANid on another VLAN it will become the VLANid for the VLAN you specify and a new...

Page 246: ...ria to determine if a particular packet belongs to a particular VLAN After you create the protocol you must configure it using the configure protocol command To assign it to a VLAN use the configure v...

Page 247: ...newly created VLAN has no member ports is untagged and uses protocol filter any until you configure it otherwise Use the various configure vlan commands to configure the VLAN to your needs Internal VL...

Page 248: ...agement virtual router VR Mgmt Once you create virtual routers ExtremeWare XOS software allows you to designate one of these as the domain in which all your subsequent configuration commands including...

Page 249: ...the VMAN 2 Assign a tag value to the VMAN Use the following command configure vman vlan_name tag tag 3 Add the ports in the tunnel to the VMAN 4 Configure VMAN member ports as tagged on switch to swit...

Page 250: ...250 ExtremeWare XOS 11 0 Command Reference Guide VLAN Commands History This command was first available in ExtremeWare XOS 11 0...

Page 251: ...rotocol Syntax Description Default N A Usage Guidelines If you delete a protocol that is in use by a VLAN the protocol associated with than VLAN will become none Example The following command deletes...

Page 252: ...VLAN that has untagged port members and you want those ports to be returned to the default VLAN you must add them back explicitly using the configure vlan add ports command NOTE The default VLAN cann...

Page 253: ...ete vman vlan_name Description Deletes a VMAN Syntax Description Default N A Usage Guidelines None Example The following command deletes the VMAN accounting delete vman accounting History This command...

Page 254: ...tive Syntax Description Default N A Usage Guidelines Use this command to specify a stable interface as a source interface for routing protocols This decreases the possibility of route flapping which c...

Page 255: ...me active Syntax Description Default N A Usage Guidelines Use this command to specify a stable interface as a source interface for routing protocols This decreases the possibility of route flapping wh...

Page 256: ...lter s with the types and values of its component protocols Example The following is an example of the show protocol command Protocol Name Type Value IP etype 0x0800 etype 0x0806 ANY ANY 0xffff ipx et...

Page 257: ...LANs It shows various configuration options as a series of flags see the example below VLAN and protocol names may be abbreviated in this display Use the command show vlan detail to display detailed i...

Page 258: ...ging 802 1Q Tag 1 Priority 802 1P Priority 0 Virtual router VR Default STPD s0 Disabled Auto bind Protocol Match all unfiltered protocols Loopback Disable Rate Shape Disable QosProfile QP1 Ports 772 N...

Page 259: ...IPmc Forwarding Enabled M ESRP Master n IP Multinetting Enabled o OSPF Enabled p PIM Enabled r RIP Enabled T Member of STP Domain v VRRP Enabled Total number of Vlan s 3 The following is an example o...

Page 260: ...and vMan EtherType 0x88a8 The display from the show vman detail command shows all the information shown in the show vman vlan_name command but displays information for all configured VMANs The followi...

Page 261: ...ame ipaddress Description Removes the IP address of the VLAN Syntax Description Default N A Usage Guidelines None Example The following command removes the IP address from the VLAN accounting unconfig...

Page 262: ...262 ExtremeWare XOS 11 0 Command Reference Guide VLAN Commands...

Page 263: ...ntains a separate logical forwarding table which allows the virtual routers to have overlapping address spaces Since each virtual router maintains its own separate routing information and switch ports...

Page 264: ...N and virtual router names on the switch For backward compatibility you cannot name a virtual router VR 0 VR 1 or VR 2 Virtual router names are case insensitive When a new virtual router is created by...

Page 265: ...eated and no support for any routing protocols is added Use this command to start the layer 3 protocol specified on the virtual router The choices for protocol name are RIP OSPF BGP PIM You cannot add...

Page 266: ...ace is created and no support for any routing protocols is added Use this command to assign ports to a virtual router Since all ports are initially assigned to VR Default you may need to delete the de...

Page 267: ...ntax Description Default N A Usage Guidelines You cannot add or delete protocols from the system virtual routers VR Mgmt VR Control VR Default Example The following command shutdowns and removes RIP f...

Page 268: ...is created and no support for any routing protocols is added Use this command to remove ports from a virtual router Since all ports are initially assigned to VR Default you may need to delete the des...

Page 269: ...all of the VLANs in the virtual router will be deleted All of the ports assigned to this virtual router will be deleted and made available to assign to other virtual routers Any routing protocol that...

Page 270: ...inning with release 11 0 you can create additional virtual routers called user virtual routers User virtual routers are created without any routing protocols so the protocols must be added The protoco...

Page 271: ...the virtual router b BGP o OSPF r RIP p PIM The following command displays the virtual router helix show virtual router helix The following is sample output from this command Virtual router helix No...

Page 272: ...virtual router domain For example if you wish to configure OSPF for A virtual router is identified by a name up to 32 characters long The name must be unique among the VLAN and virtual router names o...

Page 273: ...prevents the database from becoming full of obsolete entries by ensuring that when a device is removed from the network its entry is deleted from the database Dynamic entries are deleted from the dat...

Page 274: ...are specified the command clears all dynamic FDB entries Example The following command clears any FDB entries associated with ports 4 3 4 5 clear fdb ports 4 3 4 5 The following command clears any FDB...

Page 275: ...time is set to zero all aging entries in the database are defined as static nonaging entries This means that they do not age out but non permanent static entries can be deleted if the switch is reset...

Page 276: ...ng take place A VLAN is deleted A VLAN identifier VLANid is changed A port mode is changed tagged untagged A port is deleted from a VLAN A port is disabled A port enters blocking state A port goes dow...

Page 277: ...delete fdbentry 00 E0 2B 12 34 56 vlan marketing The following example deletes all permanent entry from the FDB delete fdbentry all History This command was first available in ExtremeWare XOS 11 0 ma...

Page 278: ...s including the ingress and egress QoS profiles portlist Displays the entries for one or more ports May be in the form 1 2 3 5 2 5 2 6 2 8 vlan_name Displays the entries for a specific VLAN Mac The MA...

Page 279: ...uces output similar to the following Mac Vlan Age Use Flags Port List 00 a0 23 12 34 56 peggy 4094 0000 0000 spm 5 11 Flags d Dynamic s Static p Permanent m MAC i IP x IPX l lockdown MAC M Mirror B Eg...

Page 280: ...280 ExtremeWare XOS 11 0 Command Reference Guide FDB Commands...

Page 281: ...management and prioritization parameters defined as a QoS profile The bandwidth management and prioritization parameters that modify the forwarding behavior of the switch affect how the switch transm...

Page 282: ...xplicit packet marking and includes IP DiffServ code points formerly known as IP TOS bits Prioritization bits used in IEEE 802 1p packets All Extreme switches support the standard 802 1p priority bits...

Page 283: ...Code point values are grouped and assigned to the default QoS profiles as shown in Table 9 Example The following command specifies that code point 25 be assigned to QP2 configure diffserv examination...

Page 284: ...he default QoS Profile to 802 1p priority value to code point mapping is shown in the following table Example The following command specifies that a code point value of 5 should be used to replace the...

Page 285: ...configure diffserv replacement ExtremeWare XOS 11 0 Command Reference Guide 285 History This command was first available in ExtremeWare XOS 11 0...

Page 286: ...n on ingress can be mapped to a particular QoS profile and with specific bandwidth management and priority behavior Example The following commands swap the QoS profiles associated with 802 1p priority...

Page 287: ...the default qosprofile of QP1 Usage Guidelines Extreme switches support eight QoS profiles QP1 to QP8 for each port NOTE This command applies only to untagged packets Example The following command co...

Page 288: ...bsolute number in K bits or M bits for a guaranteed committed rate and for a minimum rate for this ingress queue to the backplane peak_rate Specifies an absolute number in K bits or M bits for a maxim...

Page 289: ...have two ingress queues per port The priority values of 1 to 4 map to the first queue and the priority values of 5 to 8 map to the second queue On the 10G module you have eight ingress queues per port...

Page 290: ...default is Qp1 minbw min_number Specifies a minimum bandwidth percentage for this queue The default setting is 0 maxbw max_number Specifies the maximum bandwidth percentage this queue is permitted to...

Page 291: ...e following command configures the QoS profile parameters of QoS profile Qp5 for specific ports configure qosprofile qp5 minbw 10 maxbw 80 priority HighHi ports 5 5 5 7 History This command was first...

Page 292: ...iption Default N A Usage Guidelines Extreme switches support eight QoS profiles QP1 to QP8 for each port NOTE This command applies only to untagged packets Example The following command configures VLA...

Page 293: ...Default N A Usage Guidelines The diffserv examination feature is enabled by default Example The following command disables DiffServ examination on selected ports disable diffserv examination ports 5...

Page 294: ...Default N A Usage Guidelines The DiffServ replacement feature is disabled by default Example The following command disables DiffServ replacement on selected ports disable diffserv replacement ports 1...

Page 295: ...yntax Description Default N A Usage Guidelines The dot1p replacement feature is disabled by default Example The following command disables 802 1p value replacement on all ports disable dot1p replaceme...

Page 296: ...ing DiffServ for QoS parameters Extreme Networks recommends that you also configure 802 1p or port based QoS parameters to ensure that high priority traffic is not dropped prior to reaching the MSM Ex...

Page 297: ...configured on each port The QoS profile is used to select one of the eight code points If you are using DiffServ for QoS parameters Extreme Networks recommends that you also configure 802 1p or port b...

Page 298: ...ved when transmitting the packet NOTE The port in this command is the ingress port If 802 1p replacement is enabled the 802 1p priority information that is transmitted is determined by the hardware qu...

Page 299: ...16 QP3 17 QP3 18 QP3 19 QP3 20 QP3 21 QP3 22 QP3 23 QP3 24 QP4 25 QP4 26 QP4 27 QP4 28 QP4 29 QP4 30 QP4 31 QP4 32 QP5 33 QP5 34 QP5 35 QP5 36 QP5 37 QP5 38 QP5 39 QP5 40 QP6 41 QP6 42 QP6 43 QP6 44 Q...

Page 300: ...300 ExtremeWare XOS 11 0 Command Reference Guide QoS Commands QP7 48 QP8 56 History This command was first available in ExtremeWare XOS 10 1 The variables were added in ExtremeWare XOS 11 0...

Page 301: ...command has no arguments or variables Default N A Usage Guidelines None Example The following command displays the current 802 1p to QoS mappings on the switch show dot1p Following is sample output fr...

Page 302: ...ified ports show port 1 1 1 2 qosmonitor Following is sample output from this command Port Statistics Port QP1 QP2 QP3 QP4 QP5 QP6 QP7 QP8 Xmts Xmts Xmts Xmts Xmts Xmts Xmts Xmts 1 1 100 0 0 0 0 0 0 4...

Page 303: ...remeWare XOS 11 0 Command Reference Guide 303 History This command was first available in ExtremeWare XOS 10 1 The ingress information was added in ExtremeWare XOS 11 0 Also you must specify the ports...

Page 304: ...m bandwidth Priority You will see different information for ingress QoS profiles depending on whether the port is a 10 G port or a 1 G port Examples The following shows sample output for the show qosp...

Page 305: ...MaxBw 100 Pri 3 IQP4 MinBw 0 MaxBw 100 Pri 4 IQP5 MinBw 0 MaxBw 100 Pri 5 IQP6 MinBw 0 MaxBw 100 Pri 6 IQP7 MinBw 0 MaxBw 100 Pri 7 IQP8 MinBw 0 MaxBw 100 Pri 8 The following shows sample output for...

Page 306: ...DiffServ replacement mapping Syntax Description Default N A Usage Guidelines None Example The following command removes DiffServ code point examination from ports 5 5 5 8 unconfigure diffserv examina...

Page 307: ...priority level which varies by I O module 1G I O module IQP1 1 Low IQP2 1 LowHi 10G I O module IQP1 1 Low IQP2 2 LowHi ingress Specifies all ingress QoS profiles for specified ports The default ingres...

Page 308: ...varies between the 1G I O module and the 10G module On the 1G module you have two ingress queues per port The priority values of 1 to 4 map to the first queue and the priority values of 5 to 8 map to...

Page 309: ...r A problem is interfering with normal operation Warning An abnormal condition exists that may lead to a function failure Notice A normal but significant condition has been detected the system is func...

Page 310: ...ication of the packet format for forwarding information to a remote agent Details of sFlow specifications can be found in RFC 3176 and at the following website http www sflow org ExtremeWare XOS allow...

Page 311: ...ar them Use the show port command to view port statistics Use the show log counters command to show event statistics Viewing and maintaining statistics on a regular basis allows you to see how well yo...

Page 312: ...s nvram commands remove messages from the NVRAM target In addition the clear log static command will also clear the memory buffer target There are three ways to clear the ERR LED Clear the log reboot...

Page 313: ...tions in the system use the following command show log events detail To get a listing of the components present in the system use the following command show log components Example The following comman...

Page 314: ...yword is used to remove events from the filter item list that were previously added using the add command All filter items currently in the filter item list that are identical to or a subset of the se...

Page 315: ...the show log components command to see this information The severity keyword all can be used as a convenience when delete or exclude is specified The use of delete or exclude with severity all delete...

Page 316: ...r filter name Example The following command adds all STP component events at severity info to the filter mySTPFilter configure log filter myStpFilter add events stp severity info The following command...

Page 317: ...ents command on page 314 for more information on specifying and using filters on event conditions and components and on the details of the filtering process The discussion here is about the concepts o...

Page 318: ...ion does not contain all the parameters specified in a configure log filter events match command This is best explained with an example Suppose an event in the XYZ component named XYZ event5 contains...

Page 319: ...nts in the STP component and all subcomponents of STP of severity critical error warning notice and info For any of these events containing a physical port number as a match parameter limit the incide...

Page 320: ...get if the target has been enabled the message passes the associated filter the message is at least as severe as the configured severity level and the message output matches the regular expression spe...

Page 321: ...Configuration changes to the current session target are in effect only for the duration of the session and are not saved in FLASH memory The session option can also be used on the console display if...

Page 322: ...isplay memory buffer Specifies the switch memory buffer nvram Specifies the switch NVRAM session Specifies the current session including console display syslog Specifies a syslog target all Specifies...

Page 323: ...to the target memory buffer the format specified is used in subsequent show log and upload log commands The format configured for the internal memory buffer can be overridden by specifying a format o...

Page 324: ...Process ID For providing detailed information to technical support the internal ExtremeWare XOS task identifiers of the applications detecting the events can be displayed by specifying process id The...

Page 325: ...configure log target format ExtremeWare XOS 11 0 Command Reference Guide 325 History This command was first available in ExtremeWare XOS 10 1...

Page 326: ...rgets do not have a match expression Specifying any instead of match expression effectively removes a match expression that had been previously configured causing any message to be sent that has satis...

Page 327: ...ation filter filter name Example The following command sends log messages to the current session that pass the current filter and severity level and contain the string user5 configure log target sessi...

Page 328: ...message is sent to a target if the target has been enabled the message passes the associated filter the message is at least as severe as the configured severity level and the message output matches th...

Page 329: ...see the current configuration of a filter use the following command show log configuration filter filter name Example The following command sends log messages to the current session that pass the cur...

Page 330: ...ng data Typically you would set this to the IP address used to identify the switch in the network management tools that you use The default configured value is 0 0 0 0 but the switch will use the mana...

Page 331: ...your collector uses a non standard port You may also need to specify from which virtual router to send the data You can configure up to four sFlow collectors Each unique IP address UDP port combinatio...

Page 332: ...configure sflow ports portlist sample rate number command is doubled on the slot on which maximum number of packets are received This effectively doubles the sampling frequency of all the ports on tha...

Page 333: ...and is used to set the polling interval The polling interval applies to each counter separately and the polling is distributed among the counters For example if the polling interval is 20 seconds and...

Page 334: ...is configured for a sample rate of 1024 and a second port on the same slot is configured for a sample rate of 4096 the second port s hardware actually samples one out of 1024 packets but only saves t...

Page 335: ...specified the sample rate is configured as 512 The valid range is 1 to 536870912 Configuring a lower number for the sample rate means that more samples will be taken increasing the load on the switch...

Page 336: ...send backplane diagnostic packets Use this command to Configure the amount of time it takes for the packets to be forwarded and returned to the MSM Modify the global polling interval on the switch To...

Page 337: ...packets are sent and polling occurs every 7 seconds To return to the default interval setting of 6 seconds and the default polling interval of 60 seconds specify 6 for the interval NOTE Extreme Netwo...

Page 338: ...o respond to software failures all The system will reboot or shut down if any task exception occurs none No action is taken when a task exception occurs The system will always reboot after a task exce...

Page 339: ...isting log messages in a wrap around memory buffer which may cause you to lose valuable information once the buffer becomes full The remote syslog server does not overwrite log information and can sto...

Page 340: ...340 ExtremeWare XOS 11 0 Command Reference Guide Commands for Status Monitoring and Statistics History This command was first available in ExtremeWare XOS 10 1...

Page 341: ...ge Guidelines This command is used to delete a remote syslog server target Example The following command deletes the remote syslog server with an IP address of 10 0 0 1 configure syslog delete 10 0 0...

Page 342: ...tFilter which itself may be customized Therefore the create log filter command can be used if a filter other than DefaultFilter is desired As its name implies DefaultFilter initially contains the defa...

Page 343: ...ltFilter The specified filter must not be associated with a target To remove that association associate the target with DefaultFilter instead of the filter to be deleted using the following command co...

Page 344: ...displayed in the log window which allows you to view every command executed on the switch The disable cli config logging command discontinues the recording of all switch configuration changes and the...

Page 345: ...Guidelines This command disables debug mode Debug mode must be enabled prior to logging debug messages which can severely degrade performance For typical network device monitoring debug mode should r...

Page 346: ...get are in effect only for the duration of the console display or telnet session and are not saved in FLASH Changes to the other targets are saved to FLASH Note that the backup msm target is only acti...

Page 347: ...log target ExtremeWare XOS 11 0 Command Reference Guide 347 History This command was first available in ExtremeWare XOS 10 1 The primary msm and backup msm options were first available in ExtremeWare...

Page 348: ...bally disables sFlow statistical packet sampling Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines This command disables sFlow globally on the switch Exam...

Page 349: ...delines This command disables sFlow on a particular list of ports Once sFlow is disabled on a port sampling and polling will stops If sFlow is disabled globally all sampling and polling stops Use the...

Page 350: ...no longer sent If you modified the interval in the configure sys health check interval interval command the polling frequency is interval 10 seconds For example if you configured an interval of 7 the...

Page 351: ...s command has no arguments or variables Default Disabled Usage Guidelines Disables logging to all remote syslog server targets not to the switch targets This setting is saved in FLASH and will be in e...

Page 352: ...u to record all configuration changes and their sources that are made using the CLI by way of Telnet or the local console The changes are logged to the system log Each log entry includes the user acco...

Page 353: ...s This command enables debug mode Debug mode must be enabled prior to logging debug messages which can severely degrade performance For typical network device monitoring debug mode should remain disab...

Page 354: ...ion target are in effect only for the duration of the console display or Telnet session and are not saved in FLASH Others are saved in FLASH Note that the backup msm target is only active on the prima...

Page 355: ...og target ExtremeWare XOS 11 0 Command Reference Guide 355 History This command was first available in ExtremeWare XOS 10 1 The primary msm and backup msm options were first available in ExtremeWare X...

Page 356: ...obally enables sFlow statistical packet sampling Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines This command enables sFlow globally on the switch Examp...

Page 357: ...particular list of ports You will also need to enable sFlow globally in order to gather statistics and send the data to the collector Once sFlow is enabled globally and on the ports of interest sampl...

Page 358: ...er and a notification that the MSM did not receive the last packet If you see an error please contact Extreme Networks Technical Support When you enable backplane diagnostic packets on a slot the poll...

Page 359: ...lowing Configure the syslog host to accept and log messages Enable remote logging by using the enable syslog command Configure remote logging by using the configure syslog command When you use the ena...

Page 360: ...number of fans in the fan tray PartInfo Information about the fan tray including the Serial number a collection of numbers and letters that make up the serial number of the fan Part number a collectio...

Page 361: ...1 Operational at 4380 rpms Lower Fan 2 Operational at 4380 rpms Left Rear facing FanTray 2 information State Operational NumFan 2 PartInfo 0340F 00047 454301 00 03 FailureCode 0 Odometer 11845 days 6...

Page 362: ...here the process is running Process Name The name of the process Hello The number of hello messages sent to the process HelloAck The number of hello acknowledgement messages received by the process ma...

Page 363: ...3 2003 MSM A ospf 0 180345 Wed Dec 10 15 06 06 2003 MSM A pim 0 180344 Wed Dec 10 15 06 05 2003 MSM A polMgr 60116 60116 Wed Dec 10 15 06 04 2003 MSM A rip 0 180343 Wed Dec 10 15 06 05 2003 MSM A rtmg...

Page 364: ...rom which to display the log messages memory buffer Show messages stored in volatile memory default nvram Show messages stored in NVRAM events Show event messages event condition Specifies the event c...

Page 365: ...everity or more urgent are displayed For example severity warning implies critical error or warning whereas severity warning only implies only warning Messages whose timestamps are equal or later than...

Page 366: ...e operation of the system and that the system cannot function as expected unless the situation is remedied The switch may need to be reset Error A problem has been detected that is interfering with th...

Page 367: ...show log ExtremeWare XOS 11 0 Command Reference Guide 367 History This command was first available in ExtremeWare XOS 10 1...

Page 368: ...radius Subsystem description Error tacacs Subsystem description Error acl ACL Error bgp Border Gateway Protocol Info damp BGP Route Flap Dampening related debug message Error event BGP FSM related ev...

Page 369: ...tate Advertisement Error Neighbor OSPF Neighbor Error SPF OSPF Shortest Path First Error pim Pim Protocol Events Info cache Subsystem description Info debug pim debug messages Debug Summary hello Hell...

Page 370: ...essages Warning Advert Subsystem description Warning System System Library messages Warning A total of 79 component s were displayed The following command displays the version number for the VRRP comp...

Page 371: ...s displayed The debug mode state of the switch is also displayed Example The following command displays the configuration of all the log targets show log configuration The following is sample output f...

Page 372: ...tical E Error W Warning N Notice I Info Debug Severity S Debug Summary V Debug Verbose D Debug Data Debug Severities but log debug mode not enabled If Match parameters present Parameter Flags S Source...

Page 373: ...on CEWNISVD I STP I aaa Include Exclude I Include E Exclude Component Unreg Component Subcomponent is not currently registered Severity Values C Critical E Error W Warning N Notice I Info Debug Severi...

Page 374: ...374 ExtremeWare XOS 11 0 Command Reference Guide Commands for Status Monitoring and Statistics History This command was first available in ExtremeWare XOS 10 1...

Page 375: ...plays the log configuration show log configuration target The following is sample output from this command Log Target memory buffer Enabled yes Filter Name DefaultFilter Match regex Any Severity Debug...

Page 376: ...Filter Match regex Any Severity Info through Critical Format MM DD YYYY HH MM SS hh Severity Component SubComponent Condit ion Log Target primary msm Enabled yes Filter Name DefaultFilter Match regex...

Page 377: ...ith non zero counter values for the corresponding counter This command also displays a reference count the column titled Rf in the output The reference count is the number of enabled targets receiving...

Page 378: ...ponded in time with there count values In cluded Set to Y es if one or more targets filter includes this event Notified of times this event has occurred when Included was Y es The following command di...

Page 379: ...d for the event conditions specified The message format parameters are replaced by the value of the parameters when the message is generated To get a listing of the components present in the system us...

Page 380: ...ebug Summary 2 total STP InBPDU Mismatch Warning 2 total The following command displays the details of the event condition PDUTrace in the component STP InBPDU show log events stp inbpdu pdutrace deta...

Page 381: ...emory information both total and free Current memory used by the individual proceses If you issue the command with out any parameters information about all of the MSMs installed in your system is disp...

Page 382: ...cl 13 MSM A 9 exosmc 29 MSM A 9 exosnvram 3 MSM A 9 exosq 23 MSM A 9 exsnoop 19 MSM A 9 exvlan 141 MSM A 9 fdb 12220 MSM A 9 hal 86396 MSM A 9 ike 3 MSM A 9 mcmgr 17468 MSM A 9 msgsrv 6712 MSM A 9 net...

Page 383: ...ined a bad FCS value Receive Oversize Frames RX Over The total number of good frames received by the port greater than the supported maximum length of 1 522 bytes Receive Undersize Frames RX Under The...

Page 384: ...through 7 on a modular switch show ports 5 4 5 7 rxerrors The following is sample output from this command Port Rx Error monitor Port Link Rx Rx Rx Rx Rx Rx Rx State Crc Over Under Frag Jabber Align L...

Page 385: ...t The number of packets that have been successfully transmitted by the port Transmitted Byte Count Tx Byte Count The total number of data bytes successfully transmitted by the port Received Packet Cou...

Page 386: ...rom this command BD PC 10 show ports 5 4 5 7 statistics Port Statistics Port Link Tx Pkt Tx Byte Rx Pkt Rx Byte Rx Rx Status Count Count Count Count Bcast Mcast 5 4 R 0 0 0 0 0 0 5 5 R 0 0 0 0 0 0 5 6...

Page 387: ...port participated in any of the collisions Transmit Late Collisions TX Late Coll The total number of collisions that have occurred after the port s transmit window has expired Transmit Deferred Frame...

Page 388: ...tput from this command BD PC 14 show ports 5 4 5 7 txerrors Port Configuration Port Link Tx Tx Tx Tx Tx Tx State Coll Late coll Deferred Errors Lost Parity 5 4 R 0 0 0 0 0 0 5 5 R 0 0 0 0 0 0 5 6 R 0...

Page 389: ...commands display the following information in a tabular format Card The name of the card where the processes are running Process Name The name of the process Version The version number of the process...

Page 390: ...21 2003 MSM A edp 3 0 0 2 0 Ready Sat Dec 6 10 54 24 2003 MSM A ems 3 0 0 2 0 Ready Sat Dec 6 10 54 23 2003 MSM A epm 3 0 0 2 0 Ready Sat Dec 6 10 54 21 2003 MSM A exacl 3 0 0 2 0 Ready Sat Dec 6 10 5...

Page 391: ...ration Memory KB Zones Green Yellow Orange Red 0 0 0 0 0 Recovery policies failover reboot Statistics ConnetionLost Timeout Start Restart Kill Register Signal Hello Hello Ack 0 0 0 0 0 1 0 0 173199 Me...

Page 392: ...Process Name Version BuiltBy Link Date MSM A aaa 3 0 0 2 release manager Thu Dec 4 13 23 07 PST 2003 MSM A acl 3 0 0 2 release manager Thu Dec 4 13 25 55 PST 2003 MSM A bgp 3 0 0 2 release manager Th...

Page 393: ...tling takes effect Agent IP Source IP address for sFlow data packets sent from this switch Collectors To which IP address and port and from which virtual router the sFlow packets are sent Port Status...

Page 394: ...r Status Monitoring and Statistics Port Status Sample rate Subsampling Config Actual factor 1 41 enabled 8192 8192 1 2 40 enabled 1024 1024 1 2 58 enabled 8192 8192 8 2 59 enabled 8192 8192 8 History...

Page 395: ...g to collector s Transmitted Frames Number of UDP packets sent to remote collector s Broadcast Frames Number of broadcast frames received on sFlow enabled ports Multicast Frames Number of multicast fr...

Page 396: ...emperature of each component and generates a warning if the temperature exceeds the normal operating range If the temperature exceeds the minimum maximum limits the switch shuts down the overheated mo...

Page 397: ...1XL 29 75 Normal PSUCTRL 1 PSUCTRL 2 29 00 Normal Temp Range 10 00 Min 0 00 50 00 Normal 60 00 Max History This command was first available in an ExtremeWare XOS 10 1 Information about the power cont...

Page 398: ...f the switch and the hardware components Image The ExtremeWare XOS software version currently running on the switch If you have two software images downloaded on the switch only the currently running...

Page 399: ...se manager Tue Nov 4 16 25 57 PST 2003 MSM A bgp 3 0 0 2 release manager Tue Nov 4 16 27 22 PST 2003 MSM A cfgmgr 3 0 0 8 release manager Tue Nov 4 16 22 09 PST 2003 MSM A cli 3 0 0 2 release manager...

Page 400: ...rrp 3 0 0 4 release manager Tue Nov 4 16 25 24 PST 2003 If you specify the name option only the process you select is displayed Using the images option in the show version command produces output simi...

Page 401: ...its original settings If the filter name specified is not DefaultFilter this command sets the filter to have no events configured and therefore no incidents will pass This is the configuration of a n...

Page 402: ...vent name condition sequence number off process name off process slot on process id off source line off The following defaults apply to syslog targets per RFC 3164 timestamp seconds date mmm dd severi...

Page 403: ...source line off Usage Guidelines Use this command to reset the target format to the default format Example The following command sets the log format for the target session the current session to the d...

Page 404: ...follows sFlow agent IP address 0 0 0 0 sampling frequency sample one every 8196 packets polling interval 20 seconds sFlow collector UDP port 6343 maximum CPU sample limit 2000 samples per second Usag...

Page 405: ...ntax Description This command has no arguments or variables Default The default IP address is 0 0 0 0 Usage Guidelines This command resets the sFlow agent IP address to its default value Example The f...

Page 406: ...This command allows you to reset the specified sFlow collector parameters to the default values Both the commands unconfigure sflow and unconfigure sflow collector will reset the collector parameters...

Page 407: ...FTP server messages Specifies the location from which to display the log messages memory buffer Show messages stored in volatile memory nvram Show messages stored in NVRAM events Show event messages e...

Page 408: ...ity to the filename switch4critical log on TFTP server at 10 31 8 25 upload log 10 31 8 25 switch4critical log critical The following command uploads messages with warning error or critical severity t...

Page 409: ...e or dropped Using access lists has no impact on switch performance Access lists are typically applied to traffic that crosses layer 3 router boundaries but it is possible to use access lists within a...

Page 410: ...S accounting information You can configure RADIUS accounting servers to be the same as the authentication servers but this is not required Terminal Access Controller Access Control System Plus TACACS...

Page 411: ...Use this command to check the policy syntax before applying it If any errors are found the line number and a description of the syntax error are displayed A policy that contains syntax errors will no...

Page 412: ...delines Use this command to clear the ACL counters Example The following example clears all the counters of the ACL on port 2 1 clear access list counter port 2 1 The following example clears the coun...

Page 413: ...specific state Example The following command removes all the declined IP addresses by hosts on the VLAN temporary clear vlan temporary dhcp address allocation all declined History This command was fir...

Page 414: ...blocknetfour pol Specifying the keyword any applies the ACL to all the ports and is referred to as the wildcard ACL This ACL is evaluated for ports without a specific ACL applied to it and is also ap...

Page 415: ...ation Example The following command configures the primary RADIUS server on host radius1 using the default UDP port 1812 for use by the RADIUS client on switch 10 10 20 30 using a virtual router inter...

Page 416: ...eyword is primarily for the output of the show configuration command so the shared secret is not revealed in the command output Do not use it to set the shared secret Example The following command con...

Page 417: ...uthentication attempt will be made After three failed attempts to authenticate the alternate server will be used After six failed attempts local user authentication will be used Example The following...

Page 418: ...ng command configures RADIUS accounting on host radius1 using the default UDP port 1813 for use by the RADIUS client on switch 10 10 20 30 using a virtual router interface of VR 2 configure radius acc...

Page 419: ...of the show configuration command so the shared secret is not revealed in the command output Do not use it to set the shared secret Example The following command configures the shared secret as purple...

Page 420: ...ADIUS Accounting authentication requests When the timeout has expired another authentication attempt will be made After three failed attempts to authenticate the alternate server will be used Example...

Page 421: ...and An authentication key must be generated before the switch can accept incoming SSH2 sessions This can be done automatically by the switch or you can enter a previously generated key If you elect to...

Page 422: ...ssh2 key The command responds with the following messages WARNING Generating new server host key This will take approximately 10 minutes and cannot be canceled Continue y n If you respond yes the com...

Page 423: ...arameter requires that DNS be enabled Example The following command configures server tacacs1 as the primary TACACS server for client switch 10 10 20 35 using a virtual router interface of VR 2 config...

Page 424: ...uration command so the shared secret is not revealed in the command output Do not use it to set the shared secret Example The following command configures the shared secret as purplegreen on the prima...

Page 425: ...his command configures the timeout interval for TACACS authentication requests When the timeout has expired another authentication attempt will be made to the next alternative authentication method Ex...

Page 426: ...igures server tacacs1 as the primary TACACS accounting server for client switch 10 10 20 35 using a virtual router interface of VR 2 configure tacacs accounting primary server tacacs1 client ip 10 10...

Page 427: ...of the show configuration command so the shared secret is not revealed in the command output Do not use it to set the shared secret Example The following command configures the shared secret as tacac...

Page 428: ...command configures the timeout interval for TACACS accounting authentication requests When the timeout has expired another authentication attempt will be made to the next alternative TACACS accountin...

Page 429: ...range does not contain the VLAN s IP address and the VLAN has an IP address assigned Example The following command allocates the IP addresses between 192 168 0 20 and 192 168 0 100 for use by the VLAN...

Page 430: ...Usage Guidelines The timer value is specified in seconds The timer value range is 0 4294967295 where 0 indicates the default not configured value of 7200 second Example The following command configure...

Page 431: ...or the other options any IP address is allowed The options below represent the following BOOTP options specified by RFC2132 default gateway Router option number 3 dns server Domain Name Server option...

Page 432: ...rriving during the refresh will be blackholed As the ACL is being refreshed packets may arrive while the ACL is in an indeterminate state and packets may be permitted that otherwise are dropped This f...

Page 433: ...cified port in a VLAN Syntax Description Default N A Usage Guidelines None Example The following command disables DHCP for port 6 9 in VLAN corp disable dhcp ports 6 9 vlan corp History This command w...

Page 434: ...sables the RADIUS client Syntax Description This command has no arguments or variables Default RADIUS authentication is disabled by default Usage Guidelines None Example The following command disables...

Page 435: ...radius accounting Description Disables RADIUS accounting Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command disables RADIUS a...

Page 436: ...uidelines SSH2 session options access profile and non default port setting are not saved when SSH2 is disabled To view the status of SSH2 Telnet sessions on the switch use the show management command...

Page 437: ...cs Description Disables TACACS authentication Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command disables TACACS authenticati...

Page 438: ...le tacacs accounting Description Disables TACACS accounting Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command disables TACAC...

Page 439: ...es TACACS authorization Syntax Description This command has no arguments or variables Default N A Usage Guidelines This disables CLI command authorization but leaves user authentication enabled Exampl...

Page 440: ...iliar with it do a web search for VI editor basic information and you should find many resources Once you have edited the text file for a policy you will need to refresh the policy When you refresh th...

Page 441: ...d this command provides that any packets arriving during the refresh will be blackholed As the ACL is being refreshed packets may arrive while the ACL is in an indeterminate state and packets may be p...

Page 442: ...ed port in a VLAN Syntax Description Default N A Usage Guidelines None Example The following command enables DHCP for port 5 9 in VLAN corp disable dhcp ports 5 9 vlan corp History This command was fi...

Page 443: ...d Usage Guidelines When enabled all web and Telnet logins are sent to the RADIUS servers for authentication When used with a RADIUS server that supports ExtremeWare XOS CLI authorization each CLI comm...

Page 444: ...iption Enables RADIUS accounting Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines The RADIUS client must also be enabled Example The following command en...

Page 445: ...are Upgrade and Boot Options After you have installed the SSH2 module you must generate a host key and enable SSH2 To generate an SSH2 host key use the configure ssh2 key command To enable SSH2 use th...

Page 446: ...iption This command has no arguments or variables Default Disabled Usage Guidelines After they have been enabled all web and Telnet logins are sent to one of the two TACACS servers for login name auth...

Page 447: ...nables TACACS accounting Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines If accounting is used the TACACS client must also be enabled Example The follow...

Page 448: ...led Usage Guidelines When enabled each command is transmitted to the remote TACACS server for authorization before the command is executed TACACS authentication must also be enabled to use TACACS auth...

Page 449: ...specified policy Syntax Description Default N A Usage Guidelines Use this command when a new policy file has been downloaded to the switch This command reprocesses the text file and updates the policy...

Page 450: ...ACL with the port and VLAN displayed as an asterisk is the wildcard ACL Example The following command displays the all the interfaces configured with an ACL show access list The output from this comm...

Page 451: ...ption There are no arguments or variables for this command Default N A Usage Guidelines This command displays the state of the ACL refresh blackhole set by the enable access list refresh blackhole com...

Page 452: ...ACL counters Example The following example displays all the counters the ACL on port 2 1 show access list counter port 2 1 The output of this command is similar to the following ACL Counter Direction...

Page 453: ...scription Default N A Usage Guidelines If no VLAN is specified the configuration and address allocation for the servers on all the VLANs is displayed Example The following command displays the configu...

Page 454: ...specified all policies are shown Usage Guidelines Use this command to display which clients are using the specified policy The detail option displays the rules that make up the policy Example The foll...

Page 455: ...no arguments or variables Default N A Usage Guidelines The output from this command displays the status of the RADIUS and RADIUS accounting enabled or disabled and the primary and secondary servers f...

Page 456: ...splays RADIUS accounting client configuration and statistics show radius accounting The following is sample output from this command Radius Accounting enabled Radius Acct Server Connect Timeout sec 3...

Page 457: ...lays the current TACACS configuration and statistics Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command displays TACACS clien...

Page 458: ...he current TACACS accounting client configuration and statistics Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command displays...

Page 459: ...ines None Example The following command displays the configuration of the DHCP for the VLAN corp show vlan corp dhcp address allocation The following is sample output from this command IP MAC State Le...

Page 460: ...ollowing command displays the configuration of the DHCP server for the VLAN corp show vlan corp dhcp config The following is sample output from this command DHCP Address Range 10 0 0 2 10 0 0 20 DHCP...

Page 461: ...emoves the ACL from port 1 2 unconfigure access list ports 1 2 The following command removes the ACLs from ports 1 2 6 3 and 7 1 unconfigure access list ports 1 2 2 2 7 1 The following command removes...

Page 462: ...guration Syntax Description Default Unconfigures both primary and secondary servers Usage Guidelines None Example The following command unconfigures the secondary RADIUS server settings unconfigure ra...

Page 463: ...n Syntax Description Default Unconfigures both the primary and secondary accounting servers Usage Guidelines None Example The following command unconfigures the secondary RADIUS accounting server sett...

Page 464: ...r configuration Syntax Description Default Unconfigures both the primary and secondary TACACS servers Usage Guidelines None Example The following command unconfigures all TACACS servers settings uncon...

Page 465: ...figuration Syntax Description Default Unconfigures both the primary and secondary TACACS accounting servers Usage Guidelines None Example The following command unconfigures all TACACS accounting serve...

Page 466: ...ll the DHCP configuration information for the specified VLAN Syntax Description Default N A Usage Guidelines None Example The following command unconfigures the DHCP server for the VLAN temporary unco...

Page 467: ...n Unconfigure the DHCP address range information for the specified VLAN Syntax Description Default N A Usage Guidelines None Example The following command unconfigures the DHCP address range for the V...

Page 468: ...nfigure the DHCP option information for the specified VLAN Syntax Description Default N A Usage Guidelines None Example The following command unconfigures the DHCP options for the VLAN temporary uncon...

Page 469: ...ormal operation the master node blocks the secondary port for all non control traffic belonging to this EAPS domain If the master node detects a break in the ring it unblocks its secondary port and al...

Page 470: ...fer to the ExtremeWare XOS Concepts Guide Software Version 11 0 for information on running EAPS and STP To take advantage of the Spatial Reuse technology and broaden the use of the ring s bandwidth EA...

Page 471: ...be added as members of the control VLAN The ring ports of the control VLAN must be tagged NOTE Extreme Networks recommends assigning the control VLAN a QoS profile of Qp8 with the QoS profile priority...

Page 472: ...ed VLAN can be added to one or more EAPS domains When you configure the VLAN that will act as a protected VLAN the ring ports of the protected VLAN must be tagged except in the case of the default VLA...

Page 473: ...ecified control VLAN from the specified EAPS domain Syntax Description Default N A Usage Guidelines None Example The following command deletes the control VLAN keys from the EAPS domain eaps_1 configu...

Page 474: ...d VLAN from the specified EAPS domain Syntax Description Default N A Usage Guidelines None Example The following command deletes the protected VLAN orchid from the EAPS domain eaps_1 configure eaps ea...

Page 475: ...llotime The default value is three seconds Increasing the failtime value provides more protection by waiting longer to receive a health check packet when the network is congested NOTE You configure th...

Page 476: ...If the EAPS ring contains non EAPS devices you must use the open secondary port parameter NOTE Use caution when setting the failtimer expiry action to open secondary port Using this configuration if...

Page 477: ...displayed under the show eaps command For example show eaps EAPS Enabled No EAPS Fast Convergence Off Number of EAPS instances 0 EAPS domain configuration Domain State Mo En Pri Sec Control Vlan VID...

Page 478: ...llotime value should not affect the network convergence time because transit nodes are already sending link down notifications This command applies only to the master node If you configure the polling...

Page 479: ...command identifies this switch as the master node for the domain named eaps_1 configure eaps eaps_1 mode master The following command identifies this switch as a transit node for the domain named eap...

Page 480: ...xample STPD and EAPS names Extreme Networks recommends that you specify the identifying keyword as well as the actual name If you do not use the keyword the system may return an error message Example...

Page 481: ...health check messages are sent out the primary port of the master node and the master node blocks the protected VLANs on the secondary port There is no distinction between the primary and secondary p...

Page 482: ...ain to be created If you use the same name across categories for example STPD and EAPS names Extreme Networks recommends that you specify the identifying keyword as well as the actual name If you do n...

Page 483: ...n Deletes the EAPS domain with the specified name Syntax Description Default N A Usage Guidelines None Example The following command deletes EAPS domain eaps_1 delete eaps eaps 1 History This command...

Page 484: ...itch Syntax Description Default Disabled for the entire switch Usage Guidelines None Example The following command disables the EAPS function for entire switch disable eaps The following command disab...

Page 485: ...the protected VLAN s 4 Add the control VLAN to EAPS domain 5 Add the protected VLAN s to EAPS domain 6 Configure EAPS mode master or transit 7 Configure EAPS port secondary and primary 8 If desired c...

Page 486: ...PS Commands Example The following command enables the EAPS function for entire switch enable eaps The following command enables the EAPS function for the domain eaps 1 enable eaps eaps 1 History This...

Page 487: ...tion for a specific EAPS domain Some state values are different on a transit node than on a master node The fields displayed are as follows eapsDomain Specifies the name of an EAPS domain detail Speci...

Page 488: ...lock the secondary port It is in transient state waiting for acknowledgement from the hardware layer indicating the operation is completed Failtimer Expired When the failtimer expires and it s action...

Page 489: ...ode waits between transmissions of health check packets Fail Timer interval The configured value of the timer in seconds specifying the time that the master node waits before the failtimer expires Fai...

Page 490: ...3 23 p_24 24 p_25 25 p_26 26 p_27 27 p_28 28 p_29 29 p_30 30 NOTE You may see a slightly different display depending on whether you display the master node or the transit node The display from the sho...

Page 491: ...which causes the port to appear in the Idle state with a port status of Unknown when you use the show eaps detail command to display the status information about the port Example The following command...

Page 492: ...492 ExtremeWare XOS 11 0 Command Reference Guide EAPS Commands...

Page 493: ...vergence speed of bridged networks RSTP takes advantage of point to point links in the network and actively confirms that a port can safely transition to the forwarding state without relying on any ti...

Page 494: ...of the carrier VLAN in that STPD Protected VLAN Protected VLANs are all other VLANs that are members of the STPD These VLANs piggyback on the carrier VLAN Protected VLANs do not transmit or receive ST...

Page 495: ...ty switches running this version of STP The STPDs running in this mode have a one to one relationship with VLANs and send and process packets in PVST format These encapsulation modes are for STP ports...

Page 496: ...mains Clears the domain level counters ports Clears the counters for all ports and leaves the domain level counters Viewing and maintaining statistics on a regular basis allows you to see how well you...

Page 497: ...ort that already contains an 802 1D mode STP port only one 802 1D encapsulation STP port can be configured on a particular STP port A carrier VLAN port to a different STP domain than the carrier VLAN...

Page 498: ...t be identical to the VLANid of the carrier VLAN in that STPD and that VLAN cannot belong to another STPD NOTE These encapsulation modes are for STP ports not for physical ports When a physical port b...

Page 499: ...802 1D mode Because of this any given physical interface can have only one STPD running in 802 1D mode emistp This mode sends BPDUs with an 802 1Q tag having an StpdID in the VLANid field pvst plus Th...

Page 500: ...belong to this VLAN and STPD are in 802 1d encapsulation mode with autobind enabled If you disable autobind on the VLAN default that configuration is saved across a reboot Example The following comma...

Page 501: ...are optional If the specified VLAN is the carrier VLAN all protected VLANs on the same set of ports are also removed from the STPD You also use this command to remove autobind ports from a VLAN Extrem...

Page 502: ...fy the identifying keyword as well as the name If your STPD has a name unique only to that STPD the keyword stpd is optional You should not configure any STP parameters unless you have considerable kn...

Page 503: ...the identifying keyword as well as the name If your STPD has a name unique only to that STPD the keyword stpd is optional You should not configure any STP parameters unless you have considerable know...

Page 504: ...TPD the keyword stpd is optional You should not configure any STP parameters unless you have considerable knowledge and experience with STP The default STP parameters are adequate for most networks Th...

Page 505: ...name unique only to that STPD the keyword stpd is optional If you configure the STP domain in 802 1D mode the rapid reconfiguration mechanism is disabled If you configure the STP domain in 802 1W mode...

Page 506: ...e for the cost parameter is 1 through 65 535 The switch automatically assigns a default path cost based on the speed of the port If you configure the port cost a setting of 1 indicates the highest pri...

Page 507: ...rence Guide 507 Example The following command configures a cost of 100 to slot 2 ports 1 through 5 in STPD s0 configure stpd s0 ports cost 100 2 1 2 5 History This command was available in ExtremeWare...

Page 508: ...An auto link behaves like a point to point link if the link is in full duplex mode or if link aggregation is enabled on the port otherwise an auto link behaves like a broadcast link If a non STP switc...

Page 509: ...2 1D mode any configured port link type will behave the same as the broadcast link type Example The following command configures slot 2 ports 1 through 4 to be point to point links in STPD s1 configur...

Page 510: ...tagged in 802 1D mode Because of this any given physical interface can have only one STPD running in 802 1D mode emistp This mode sends BPDUs with an 802 1Q tag having an StpdID in the VLANid field pv...

Page 511: ...onfigure any STP parameters unless you have considerable knowledge and experience with STP The default STP parameters are adequate for most networks By changing the priority of the port you can make i...

Page 512: ...tpd is optional You should not configure any STP parameters unless you have considerable knowledge and experience with STP The default STP parameters are adequate for most networks By changing the pri...

Page 513: ...most networks An StpdID is used to identify each STP domain You assign the StpdID when configuring the domain An StpdID must be identical to the VLANid of the carrier VLAN in that STP domain and that...

Page 514: ...t 3 5 to STP domain You might be attempting to add Another 802 1D mode STP port to a physical port that already contains an 802 1D mode STP port only one 802 1D encapsulation STP port can be configure...

Page 515: ...ly one STPD running in 802 1D mode emistp This mode sends BPDUs with an 802 1Q tag having an StpdID in the VLANid field pvst plus This mode implements PVST in compatibility with third party switches r...

Page 516: ...derscores _ but cannot be any reserved keywords for example stp or stpd Names must start with an alphabetical character for example a Z Each STPD name must be unique and cannot duplicate any other nam...

Page 517: ...Each STPD has its own Root Bridge and active path After the STPD is created one or more VLANs can be assigned to it Example The following example creates an STPD named purple_st create stpd purple_st...

Page 518: ...d as well as the name If you do not specify the stpd keyword an error message similar to the following is displayed Ambiguous command delete Test In this example to delete the STPD Test enter delete s...

Page 519: ...u have created the STPD with a unique name the keyword stpd is optional If you want to disable the STP protocol for all STPDs do not specify an STPD name Example The following command disables an STPD...

Page 520: ...the keywords stpd and vlan are optional Ports added to the STPD automatically when autobind is enabled are not removed when autobind is disabled The ports are present after a switch reboot To view ST...

Page 521: ...se the all keyword to specify that all ports of a given STPD are disabled Use the port_list parameter to specify a list of ports of a given STPD are disabled If you do not use the default STPD you mus...

Page 522: ...ique name the keyword stpd is optional To view the status of rapid root failover on the switch use the show stpd command The show stpd command displays information about the STPD configuration on the...

Page 523: ...or all STPDs Syntax Description Default Disabled Usage Guidelines If you want to enable the STP protocol for all STPDs do not specify an STPD name Example The following command enables an STPD named B...

Page 524: ...includes the physical and logical ports that belong to the STPD and the 802 1Q tag used to transport STP BPDUs Only one carrier VLAN can exist in a given STPD although some of its ports can be outsid...

Page 525: ...se the default S0 Enable autobind on the STPDs carrier VLAN Configure the STPD tag the StpdID must be identical to the VLANid of the carrier VLAN in the STP domain Enable STP The following example ena...

Page 526: ...or more STPDs before you can use the enable stpd ports command To create an STPD use the create stpd stpd_name command If you have considerable knowledge and experience with STP you can configure the...

Page 527: ...th a unique name the keyword stpd is optional To view the status of rapid root failover on the switch use the show stpd command The show stpd command displays information about the STPD configuration...

Page 528: ...TPD Use the enable stpd stpd_name command to enable an STPD If you have considerable knowledge and experience with STP you can configure the STPD using the configure stpd commands However the default...

Page 529: ...5 13 5 14 5 15 5 16 5 17 5 18 5 19 5 20 5 21 5 22 5 23 5 24 5 25 5 26 5 27 5 28 5 29 5 30 5 31 5 32 5 33 5 34 5 35 5 36 5 37 5 38 5 39 5 40 5 41 5 42 5 43 Participating Vlans Default Auto bind Vlans...

Page 530: ...cified ports If your STPD has the same name as another component for example a VLAN Extreme Networks recommends that you specify the identifying keyword as well as the name If you do not specify the s...

Page 531: ...tency The following command displays the detailed information for the ports in STPD S0 show stpd S0 ports detail The following is sample output from this command Stpd s0 Port 1 1 PortId 8002 Stp ENABL...

Page 532: ...rt role root bridge edge port etc STPD port state forwarding blocking and so on Configured port link type Operational port link type If your VLAN has the same name as another component for example an...

Page 533: ...2 1D LEARNING 4 eDbb d 16 8004 80 00 00 01 30 94 79 00 1 5 802 1D LEARNING 4 eDbb d 16 8005 80 00 00 01 30 94 79 00 1 6 802 1D DISABLED 4 e 16 8006 00 00 00 00 00 00 00 00 1 7 802 1D DISABLED 4 e 16 8...

Page 534: ...eate an STPD with a unique name the keyword stpd is optional Use this command to restore default STP values to a particular STPD If you want to restore default STP values on all STPDs do not specify a...

Page 535: ...you must enter the stpd keyword to specify the STPD If your STPD has a name unique only to that STPD the keyword stpd is optional If the switch operates in 802 1D mode any configured port link type wi...

Page 536: ...536 ExtremeWare XOS 11 0 Command Reference Guide STP Commands...

Page 537: ...d failback scenarios in the prescribed recovery times No configuration of this feature is necessary However you can improve the performance of the ESRP aware switch to forward packets and perform fail...

Page 538: ...remeWare XOS has two modes of ESRP operation standard and extended Select standard if your network contains some switches running ExtremeWare others running ExtremeWare XOS and a combination of those...

Page 539: ...switch does not participate in ESRP elections PreMaster The pre master state is an ESRP switch that is ready to be master Slave The slave switch participates in ESRP but is not elected or configured...

Page 540: ...S 11 0 Command Reference Guide ESRP Commands Example The following command clears the statistics gathered by ESRP domain esrp1 clear esrp esrp1 counters History This command was first available in Ext...

Page 541: ...tion for the ESRP domain After the switch is up running and configured as an ESRP aware or ESRP enabled device new neighbor information is learned Before using this command schedule a downtime for you...

Page 542: ...esrp election policy and select stickiness as an election algorithm If you use sticky as an election metric and an event causes the ESRP master to failover ESRP assigns the new master with the highest...

Page 543: ...enabled switches Contains the total number of active physical ports that are counted when determining the master ESRP domain The switch with the highest number of active ports takes priority Master VL...

Page 544: ...zero or more member VLANs Master VLANs can have their own set of ports and member VLANs can have a different set of ports The state of the ESRP device determines whether the ports in the master and me...

Page 545: ...the affected domain to go into slave mode The range of the priority value is 0 to 254 Setting the priority to 255 configures the switch to slave mode and to be ineligible to become the master The swi...

Page 546: ...metric consists of the total number of tracked IP routes that are up or functional An ESRP domain can track eight IP routes Example The following command enables IP route failure tracking for routes...

Page 547: ...ain can track eight stations Example The following command enables ping tracking for the external gateway at 10 207 29 17 pinging every 10 seconds and considering the gateway to be unreachable if no r...

Page 548: ...omain If more than one VLAN shares a physical link each VLAN counts the physical link The ESRP switch should have a higher priority number than its neighbors to ensure master election An ESRP domain c...

Page 549: ...pDomain command If you attempt to remove the master VLAN before disabling the ESRP domain an error message similar to the following is displayed ERROR Failed to delete master vlan for domain esrp1 ESR...

Page 550: ...N A Usage Guidelines None Example The following command deletes the member VLAN green from the ESRP domain esrp1 configure esrp esrp1 delete member vlan green The following command deletes all member...

Page 551: ...iption Disables environmental failure tracking for an ESRP domain Syntax Description Default No environmental tracking Usage Guidelines None Example The following command disables environmental failur...

Page 552: ...recovers from the forced standby state If you disable route tracking for a route that is up and functional there is no impact on the ESRP state Example The following command disables tracking of rout...

Page 553: ...you disable ping tracking for a failed ping the ESRP domain recovers from the forced standby state If you disable route tracking for a successful ping there is no impact on the ESRP state Example The...

Page 554: ...x Description Default Disabled Usage Guidelines If you delete a VLAN that is down the ESRP domain recovers from the forced standby state Example The following command disables the tracking of port con...

Page 555: ...you do not have a domain ID you cannot enable ESRP on that domain Each switch participating in ESRP for a particular domain must have the same domain ID configured The number parameter range for user...

Page 556: ...der election factors in the following order ESRP priority active ports tracking information MAC address priority track ports mac Specifies that this ESRP domain should consider election factors in the...

Page 557: ...re that there is no failback if the original Master recovers the Master will have the same ports tracks and priority but a higher MAC Any of the options with sticky can also be used to ensure that the...

Page 558: ...then configure the new election algorithm If you attempt to change the election algorithm without disabling the domain first an error message appears To disable the ESRP domain use the following comma...

Page 559: ...f ESRP switches are providing fast failover protection within a common subnet for two or more groups of users An additional use for ESRP groups is ESRP Host Attach ESRP VLANs that share the same ESRP...

Page 560: ...running ExtremeWare XOS select standard ESRP on the BlackDiamond 10808 By selecting standard the BlackDiamond 10808 is backwards compatible with the ExtremeWare implementation of ESRP If you use the d...

Page 561: ...lphanumeric characters and underscores _ but cannot be any reserved keywords for example esrp Names must start with an alphabetical character for example a Z You can rename an ESRP domain regardless o...

Page 562: ...ose ports directly attached to the slave s hosts to communicate with other hosts that are connected to the master If you use load sharing with the ESRP HA feature configure the load sharing group firs...

Page 563: ...start for a port Syntax Description Default N A Usage Guidelines None Example The following command disables port restart for ports 7 9 on slot 3 on ESRP domain esrp1 configure esrp esrp1 port 3 7 3 9...

Page 564: ...eam devices to remove the ports from their FDB tables After 3 seconds the ports re establish connection with the ESRP enabled device This feature allows you to use ESRP in networks that include equipm...

Page 565: ...tion algorithm the highest priority value determines which switch will act as master for a particular ESRP domain Setting the priority to 255 configures the switch to slave mode and to be ineligible t...

Page 566: ...equent exchange of keep alive messages resulting in the faster detection of a failover condition The timer setting must be configured identically for the ESRP domain across all participating switches...

Page 567: ...timer value Entering a value outside of that range generates an error message similar to the following operation Failed Valid timer relationship neighbor timeout 3 hello neutral timeout 2 hello prema...

Page 568: ...te The neutral value must be at least 2 times the hello timer value Entering a value outside of that range generates an error message similar to the following operation Failed Valid timer relationship...

Page 569: ...ge similar to the following operation Failed Valid timer relationship neighbor timeout 3 hello neutral timeout 2 hello premaster timeout 3 hello The seconds range is 6 1024 To view the premaster setti...

Page 570: ...over This timer prevent the slave ESRP switch from trying to become master during a hitless failover The seconds range is 15 1024 To view the restart settings use the show esrp name command Example Th...

Page 571: ...racking none Usage Guidelines The maximum length for a name is 32 characters Names can contain alphanumeric characters and underscores _ but cannot be any reserved keywords for example esrp Names must...

Page 572: ...572 ExtremeWare XOS 11 0 Command Reference Guide ESRP Commands History This command was first available in ExtremeWare XOS 11 0...

Page 573: ...ete it To disable an ESRP domain use the disable esrp command You do not have to remove the master or member VLANs from an ESRP domain before you delete it When you delete an ESRP domain All VLANs are...

Page 574: ...e switch notifies its neighbor that the ESRP domain is going down and the neighbor clears its neighbor table If the master switch receives this information it enters the neutral state to prevent a net...

Page 575: ...d command 802 1Q tag VLANid of the tagged master VLAN If you do not have a domain ID you cannot enable ESRP on that domain A message similar to the following appears ERROR Cannot enable ESRP Domain es...

Page 576: ...ation and the state of the switch Example The following command displays summary ESRP status information for the ESRP domains on the switch show esrp The following is sample output from this command E...

Page 577: ...Tracked IP Routes Pings 0 Priority 255 255 Sticky Flag 0 MAC 00 01 30 f9 9e 90 Active Ports Weight 10 Sequence Number 8 Hand Shake Flag 0 Restart Flag 0 Timer Configuration Hello 2s 0 Neighbor 6s 0 Pr...

Page 578: ...ers Dropped packets due to an invalid 802 1Q tag Dropped packets because the packet length was truncated packet length is less than expected Dropped packets due to failed checksum verification The sho...

Page 579: ...isplays counter information for ESRP domain ed5 show esrp ed5 counters The following is sample output from this command Domain ed5 Current time Sun Nov 16 00 25 27 2003 Rx Esrp Pkts 628 Tx Esrp Pkts 6...

Page 580: ...580 ExtremeWare XOS 11 0 Command Reference Guide ESRP Commands...

Page 581: ...s is 00 00 5E 00 01 vrid An interconnect link between VRRP routers should not be used except when VRRP routers have hosts directly attached A maximum of 64 VRID instances are supported on the router U...

Page 582: ...tion is lost between master and backup router s The master router sends periodic advertisements to the backup routers to indicate that it is alive VRRP also supports the following tracking options VRR...

Page 583: ...r all VRRP VLANs are cleared If you specify only VLAN name statistics for all VRRP VRIDs on that VLAN are cleared If you specify VLAN name and VRRP VRID only statistics for that particular VRID are cl...

Page 584: ...IP address must not be owned by that VLAN When a VRRP virtual router is enabled it must have at least one virtual IP address Example Create a VLAN named vlan 1 with an ipaddress of 10 1 2 2 and a VRR...

Page 585: ...ed in this command may not exist in the IP routing table When you create the entry for a route an immediate VRRP failover may occur Example The following command enables IP route failure tracking for...

Page 586: ...iss number Example The following command enables ping tracking for the external gateway at 3 1 0 1 pinging every 3 seconds and considering the gateway to be unreachable if no response is received to 5...

Page 587: ...age Guidelines Only one VLAN can be tracked Deleting a tracked VLAN does not constitute a failover event for the VR tracking it and the tracking entry will be deleted Example The following command ena...

Page 588: ...e master router to inform the backup routers that its alive An extremely busy CPU can create a short dual master situation To avoid this increase the advertisement interval Example The following comma...

Page 589: ...security to VRRP advertisements All VRRP routers using the same VRID must use the same password when using this feature A simple password must be between 1 and 8 characters long Example The following...

Page 590: ...sts If the priority is not 255 the IP address must not be owned by that VLAN When a VR is enabled it must have at least one virtual IP address When the VR is not enabled there are no restrictions on d...

Page 591: ...e VRRP is enabled causes the VRRP VRs state to be re evaluated for failover Example The following command disables tracking of routes to the specified subnet for VLAN vlan 1 configure vrrp vlan vlan 1...

Page 592: ...er from a ping tracking failure if there is a Layer 2 switch between it and another VRRP node In cases where a Layer 2 switch is used to connect VRRP nodes Extreme Networks recommends that those nodes...

Page 593: ...s Deleting a tracking entry while VRRP is enabled will cause the VRRP VRs state to be re evaluated for failover Example The following command disables the tracking of port connectivity to VLAN vlan 2...

Page 594: ...s The preempt mode controls whether a higher priority backup router preempts a lower priority master dont preempt prohibits preemption The router that owns the virtual IP address always preempts indep...

Page 595: ...age Guidelines The preempt mode controls whether a higher priority backup router preempts a lower priority master preempt allows preemption The router that owns the virtual IP address always preempts...

Page 596: ...be changed to 255 To change the priority in either of the described cases disable VRRP and remove the virtual IP address es first To disable VRRP use the disable vrrp vlan vlan_name vrid vridval comma...

Page 597: ...instance on the switch If you define VRRP parameters before creating the VRRP you may see an error similar to the following Error VRRP VR for vlan vrrp1 vrid 1 does not exist Please create the VRRP V...

Page 598: ...Syntax Description Default N A Usage Guidelines None Example The following command deletes the VRRP virtual router on the VLAN vrrp 1 identified by VRID 2 delete vrrp vlan vrrp 1 vrid 2 History This c...

Page 599: ...N A Usage Guidelines This disables a specific virtual router on the switch If no VRRP VLAN is specified all virtual routers on the switch are disabled Example The following command disables all VRRP v...

Page 600: ...on the device If none is specified all virtual routers on this device will be enabled IGMP snooping must be enabled for VRRP to operate correctly Use the following command to enable IGMP snooping ena...

Page 601: ...1 1 1 1 MSTR 00 00 5e 00 01 01 0 0 0 Y 1 En Enabled Ds Disabled Pri Priority T Advert Timer P Preempt TP Tracked Pings TR Tracked Routes TV Tracked VLANs The following command displays detailed statu...

Page 602: ...atistics for VLAN vrrp 1 show vrrp vlan vrrp 1 stats The following is sample output from this command VLAN vrrp 1 VR ID 25 Chksum Err 0 Ver Err 0 VRID Err 0 Auth Mismatch 0 Pkt len Err 0 Become Master...

Page 603: ...onfigure the same IP subnet on different VLANs The Extreme Networks switch maintains an IP routing table for network routes and host routes The table is populated from the following sources Dynamicall...

Page 604: ...cast routing has been configured you can configure the switch to forward Dynamic Host Configuration Protocol DHCP or BOOTP requests coming from clients on subnets being serviced by the switch and goin...

Page 605: ...ter context is used Usage Guidelines Permanent IP ARP entries are not affected This command is virtual router command and it applies to the current virtual router if you do not specify a virtual route...

Page 606: ...OTP requests coming from clients on subnets being serviced by the switch and going to hosts on different subnets To configure the relay function follow these steps 1 Configure VLANs and IP unicast rou...

Page 607: ...forwarding BOOTP packets Syntax Description Default If you do not specify a virtual router the current virtual router context is used Usage Guidelines None Example The following command removes the d...

Page 608: ...al router the current virtual router context is used Usage Guidelines Add a permanent IP ARP entry to the system The ip_address is used to match the IP interface address to locate a suitable interface...

Page 609: ...ured the system responds to ARP Requests on behalf of the device as long as the following conditions are satisfied The valid IP ARP Request is received on a router interface The target IP address matc...

Page 610: ...pecify a virtual router the current virtual router context is used Usage Guidelines Removes any IP ARP entry dynamic or permanent from the table The ip_address is used to match the IP interface addres...

Page 611: ...interface for example 22 bit mask When the host sends ARP Request for another host on another subnet the switch answers the ARP Request and all subsequent traffic will be sent directly to the router Y...

Page 612: ...ARP entries Syntax Description Default 4096 Usage Guidelines Range 1 20480 The maximum IP ARP entries include dynamic static and incomplete IP ARP entries Example The following command sets the maxim...

Page 613: ...allowed incomplete IP ARP entries Syntax Description Default 256 Usage Guidelines Range 1 20480 but cannot be greater than the configured IP ARP max_entries value Example The following command sets th...

Page 614: ...Configures the maximum allowed IP ARP proxy entries Syntax Description Default 256 Usage Guidelines Range 0 4096 Example The following command sets the maximum IP ARP proxy entries to 500 entries con...

Page 615: ...ut period Syntax Description Default 20 minutes Usage Guidelines The range is 0 32 767 A setting of 0 disables timeout Example The following command sets the IP ARP timeout period to 10 minutes config...

Page 616: ...router context is used Usage Guidelines Use a value of 255 255 255 255 for mask to indicate a host entry Example The following command adds a static address to the routing table configure iproute add...

Page 617: ...with a specified MAC destination address to be discarded Blackhole entries are useful as a security measure or in special circumstances where a specific destination address must be discarded Blackhole...

Page 618: ...raffic destined to an unknown IP destination and a blackhole route is for discarding traffic destined to a specified IP destination a default blackhole route is for discarding traffic to the unknown I...

Page 619: ...when the router has no other dynamic or static route to the requested destination A default gateway must be located on a configured IP interface Use the unicast only or multicast only options to speci...

Page 620: ...irtual router context is used Usage Guidelines Use a value of 255 255 255 255 or 32 for mask to indicate a host entry Example The following command deletes an address from the gateway configure iprout...

Page 621: ...Default If you do not specify a virtual router the current virtual router context is used Usage Guidelines None Example The following command removes a blackhole address from the routing table configu...

Page 622: ...ault blackhole route from the routing table Syntax Description Default If you do not specify a virtual router the current virtual router context is used Usage Guidelines None Example The following com...

Page 623: ...er the current virtual router context is used Usage Guidelines Default routes are used when the router has no other dynamic or static route to the requested destination A default gateway must be locat...

Page 624: ...ifies RIP bootp Specifies BOOTP ebgp Specifies E BGP routes ibgp Specifies I BGP routes icmp Specifies ICMP blackhole Specifies the blackhole route direct Specifies the direct route static Specifies s...

Page 625: ...possible consequences If you change the route priority you must save the configuration and reboot the system Example The following command sets IP route priority for static routing to 1200 configure...

Page 626: ...uidelines None Example The following command sets the address of the router advertiser messages to multicast configure irdp multicast History This command was available in ExtremeWare XOS 10 1 multica...

Page 627: ...u have added a secondary IP address to a VLAN you cannot unconfigure the primary IP address of that VLAN until you delete all the secondary addresses Delete secondary address with the following comman...

Page 628: ...nce you have added a secondary IP address to a VLAN you cannot unconfigure the primary IP address of that VLAN until you delete all the secondary addresses Use the all keyword to delete all the second...

Page 629: ...ts on a VLAN to obtain an IP address for the VLAN from a BOOTP server Syntax Description Default Disabled Usage Guidelines None Example The following command disables the generation and processing of...

Page 630: ...This command can disable the BOOTP relay functionality for a particular virtual router or all of them If you use the command without specifying a virtual router the functionality is disabled for all v...

Page 631: ...quest is received The default setting is enabled If a VLAN is not specified the command applies to all IP interfaces This command only affects the generation of certain ICMP packets Filtering of ICMP...

Page 632: ...when the switch cannot properly process the IP header or IP option information If a VLAN is not specified the command applies to all IP interfaces This command only affects the generation of certain I...

Page 633: ...C or UDP request is made to the switch and no application is waiting for the request or access policy denies the request If a VLAN is not specified the command applies to all IP interfaces This comman...

Page 634: ...iption Disables generation of ICMP redirect messages on one or all VLANs Syntax Description Default Enabled Usage Guidelines None Example The following command disables ICMP redirects from VLAN accoun...

Page 635: ...eld expires during forwarding IP multicast packets do not trigger ICMP time exceeded messages If a VLAN is not specified the command applies to all IP interfaces This command only affects the generati...

Page 636: ...ype 14 code 0 when an ICMP timestamp request is received If a VLAN is not specified the command applies to all IP interfaces This command only affects the generation of certain ICMP packets Filtering...

Page 637: ...ption Disables the generation of ICMP unreachable messages on one or all VLANs Syntax Description Default Enabled Usage Guidelines None Example The following command disables the generation of ICMP un...

Page 638: ...n when an ICMP redirect message is received Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines This option only applies to the switch when the switch is no...

Page 639: ...e range of the local interface or VLAN domain Syntax Description Default Enabled Usage Guidelines If you do not specify a virtual router the command applies to the current virtual router Example The f...

Page 640: ...only be disabled if IP forwarding is disabled The purpose of disabling ARP refresh is to reduce ARP traffic in a high node count layer 2 switching only environment If you do not specify a virtual rout...

Page 641: ...arding also disables broadcast forwarding Broadcast forwarding can be disabled without disabling IP forwarding When new IP interfaces are added IP forwarding and IP broadcast forwarding is disabled by...

Page 642: ...urce route Description Disables the loose source route IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following command disab...

Page 643: ...ption record route Description Disables the record route IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following command dis...

Page 644: ...d timestamp Description Disables the record timestamp IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following command disabl...

Page 645: ...trict source route Description Disables the strict source route IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following comm...

Page 646: ...Description Disables the generation of the router alert IP option Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines None Example The following command ena...

Page 647: ...r advertisement messages on one or all VLANs Syntax Description Default Disabled Usage Guidelines If no optional argument is specified all the IP interfaces are affected Example The following command...

Page 648: ...ho server support Syntax Description Default Disabled Usage Guidelines UDP Echo packets are used to measure the transit time for data between the transmitting and receiving end Example The following c...

Page 649: ...s on a VLAN to obtain an IP address for the VLAN from a BOOTP server Syntax Description Default Disabled Usage Guidelines None Example The following command enables the generation and processing of BO...

Page 650: ...being serviced by the switch and going to hosts on different subnets This feature can be used in various applications including DHCP services between Windows NT servers and clients running Windows 95...

Page 651: ...equest is received The default setting is enabled If a VLAN is not specified the command applies to all IP interfaces This command only affects the generation of certain ICMP packets Filtering of ICMP...

Page 652: ...hen the switch cannot properly process the IP header or IP option information If a VLAN is not specified the command applies to all IP interfaces This command only affects the generation of certain IC...

Page 653: ...or UDP request is made to the switch and no application is waiting for the request or access policy denies the request If a VLAN is not specified the command applies to all IP interfaces This command...

Page 654: ...irect messages on one or all VLANs Syntax Description Default Enabled Usage Guidelines This option only applies to the switch when the switch is not in routing mode Example The following command enabl...

Page 655: ...d expires during forwarding IP multicast packets do not trigger ICMP time exceeded messages If a VLAN is not specified the command applies to all IP interfaces This command only affects the generation...

Page 656: ...pe 14 code 0 when an ICMP timestamp request is received If a VLAN is not specified the command applies to all IP interfaces This command only affects the generation of certain ICMP packets Filtering o...

Page 657: ...ption Enables the generation of ICMP unreachable messages on one or all VLANs Syntax Description Default Enabled Usage Guidelines None Example The following command enables the generation of ICMP unre...

Page 658: ...when an ICMP redirect message is received Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines This option only applies to the switch when the switch is not...

Page 659: ...e range of the local interface or VLAN domain Syntax Description Default Enabled Usage Guidelines If you do not specify a virtual router the command applies to the current virtual router Example The f...

Page 660: ...only be disabled if IP forwarding is disabled The purpose of disabling ARP refresh is to reduce ARP traffic in a high node count layer 2 switching only environment If you do not specify a virtual rout...

Page 661: ...e enabled before IP broadcast forwarding can be enabled When new IP interfaces are added IP forwarding and IP broadcast forwarding is disabled by default Other IP related configuration is not affected...

Page 662: ...urce route Description Enables the loose source route IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following command enable...

Page 663: ...ption record route Description Enables the record route IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following command enab...

Page 664: ...d timestamp Description Enables the record timestamp IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following command enables...

Page 665: ...trict source route Description Enables the strict source route IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following comma...

Page 666: ...Description Enables the generation of the router alert IP option Syntax Description This command has no arguments or variables Default Enabled Usage Guidelines None Example The following command enab...

Page 667: ...used concurrently IP route sharing can be used with static routes or with OSPF routes In OSPF this capability is referred to as equal cost multipath ECMP routing Configure static routes and or OSPF a...

Page 668: ...uter advertisement messages on one or all VLANs Syntax Description Default Disabled Usage Guidelines If no optional argument is specified all the IP interfaces are affected Example The following comma...

Page 669: ...er support Syntax Description Default Disabled Usage Guidelines UDP Echo packets are used to measure the transit time for data between the transmitting and receiving end Example The following command...

Page 670: ...or host Syntax Description Default N A Usage Guidelines None Example The following command performs a look up in the route table to determine the best way to reach the specified IP address rtlookup 10...

Page 671: ...relay statistics and configuration for the virtual routers Syntax Description This command has no arguments or variables Default None Usage Guidelines None Example The following command displays the...

Page 672: ...lays the IP ARP table including IP address MAC address Aging timer value VLAN name VLAN ID and port number Flags If you do not specify a virtual router the command applies to the current virtual route...

Page 673: ...proxy ARP entries are displayed If you do not specify a virtual router the command applies to the current virtual router Example The following command displays the proxy ARP table show iparp proxy 10...

Page 674: ...tion is displayed Otherwise specific VLAN s information will be displayed Global IP configuration information includes IP address netmask etc IP forwarding information IP multicast forwarding informat...

Page 675: ...d in the display by an If there are multiple routes to the same destination network the will indicate which route is the most preferable route If you do not specify a virtual router the command applie...

Page 676: ...es configured for the origin of the route is applied to the route After matching on specified characteristics the characteristics for the route can be modified using the policy The characteristics tha...

Page 677: ...mber of broadcast IP packets processed by the CPU InMcast Total number of multicast IP packets processed by the CPU InHdrEr Total number of packets with an IP Header Error forwarded to the CPU Bad ver...

Page 678: ...s that are too short Bad chksum Incoming ICMP packets with checksum errors In Badlen Incoming ICMP packets with length errors echo reply In Out ICMP echo reply packets that are received and transmitte...

Page 679: ...l number of octets received or transmitted on a VLAN router interface Mcast packets IN OUT Total number of multicast packets received or transmitted on a VLAN router interface Bcast packets IN OUT Tot...

Page 680: ...scription Resets all ICMP settings to the default values Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command resets all ICMP s...

Page 681: ...r default values IP ARP timeout max ARP entries max ARP pending entries ARP checking ARP refresh Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example...

Page 682: ...all router advertisement settings to the default values Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command resets all router...

Page 683: ...The topology within an area is hidden from the rest of the autonomous system Hiding this information enables a significant reduction in link state advertisement LSA traffic and reduces the computatio...

Page 684: ...to the destination network IP address of the next router Timer that tracks the amount of time since the entry was last updated The router exchanges an update message with each neighbor every 30 second...

Page 685: ...Usage Guidelines The global command clear counters also clears all OSPF counters This global command is the equivalent of clear ospf counters for OSPF Example The following command clears the OSPF cou...

Page 686: ...unters Description Clears the RIP counters statistics Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command clears the RIP stati...

Page 687: ...n Default The default cost is automatic Usage Guidelines The range is 1 through 65535 Example The following command configures the cost metric of the VLAN accounting configure ospf vlan accounting cos...

Page 688: ...fault setting is 1 Usage Guidelines The range is 0 through 255 and the default setting is 1 Setting the value to 0 ensures that the router is never selected as the designated router or backup designat...

Page 689: ...es within the area The encrypted keyword is primarily for the output of the show configuration command so the password or key is not revealed in the command output Do not use it to set the password or...

Page 690: ...established between two ABRs that have a common area with one ABR connected to the backbone Specify the following router identifier Far end router interface number area identifier Transit area used f...

Page 691: ...Syntax Description Default Disabled Usage Guidelines None Example The following command enables OSPF on a VLAN named accounting configure ospf add vlan accounting area 0 0 0 1 History This command wa...

Page 692: ...The following command configures the OSPF link type as automatic on a VLAN named accounting configure ospf add vlan accounting area 0 0 0 1 link type auto History This command was available in Extreme...

Page 693: ...ABR function a policy can be applied to an OSPF area that filters a set of OSPF external routes from being advertised into that area Using the none mode specifies that no external filter is applied E...

Page 694: ...gured to support multiple OSPF areas an ABR function a policy can be applied to an OSPF area that filters a set of OSPF inter area routes from being sourced from any other areas Example The following...

Page 695: ...he following command is used to summarize a certain range of IP addresses within an area and export them out as a single address configure ospf area 1 2 3 4 add range 10 1 2 0 24 advertise type 3 Hist...

Page 696: ...ted IP addresses in an OSPF area Syntax Description Default N A Usage Guidelines None Example The following command deletes an aggregated IP address range configure ospf area 1 2 3 4 delete range 10 1...

Page 697: ...Default Normal Usage Guidelines A normal area is an area that is not any of the following Stub area NSSA Virtual links can be configured through normal areas External routes can be distributed into n...

Page 698: ...F area as an NSSA the translate option should only be used on NSSA border routers where translation is to be enforced If translate is not used on any NSSA border router in a NSSA one of the ABRs for t...

Page 699: ...nnects to a stub area can be the backbone area External route information is not distributed into stub areas Stub areas are used to reduce memory and computation requirements on OSPF routers Example T...

Page 700: ...retransmissions will result transit delay The transit delay must be greater than 0 hello interval Smaller times allow routers to discover each other more quickly but also increase network traffic dea...

Page 701: ...to smaller values can help OSPF routers on a broadcast network to synchronize more quickly at the expense of possibly electing an incorrect DR or BDR This value should not be set to less than the hell...

Page 702: ...which indicates that once the router goes into overflow state it stays there until OSPF is disabled and then re enabled Usage Guidelines None Example The following command configures the AS external...

Page 703: ...ax Description Default N A Usage Guidelines This command is only valid on an ASBR Example The following command summarizes AS external routes configure ospf ase summary add 175 1 0 0 16 cost 10 Histor...

Page 704: ...d OSPF external route Syntax Description Default N A Usage Guidelines This command is only valid on an ASBR Example The following command deletes the aggregated AS external route configure ospf ase su...

Page 705: ...a identifier Description Removes a virtual link Syntax Description Default N A Usage Guidelines None Example The following command deletes a virtual link configure ospf delete virtual link 10 1 2 1 10...

Page 706: ...escription Disables OSPF on one or all VLANs router interfaces Syntax Description Default N A Usage Guidelines None Example The following command disables OSPF on VLAN accounting configure ospf delete...

Page 707: ...ystem routing table Syntax Description Default No policy Usage Guidelines Use this command to associate a policy with the OSPF routes installed into the system table Use the none option to remove the...

Page 708: ...tting is 30 seconds Usage Guidelines The range is between 0 disabled and 600 seconds using multiples of 5 seconds The LSAs added to the LSDB during the interval are batched together for refresh or tim...

Page 709: ...ptionally the 10 Gbps interface Syntax Description Default 10 Mbps The default cost is 10 100 Mbps The default cost is 5 1 Gbps The default cost is 4 10 Gbps The default cost is 2 Usage Guidelines Non...

Page 710: ...D It is recommended that you manually set the router ID of the switches participating in OSPF instead of having the switch automatically choose its router ID based on the highest interface IP address...

Page 711: ...seconds between Shortest Path First SPF recalculations Syntax Description Default 3 seconds Usage Guidelines None Example The following command configures the minimum number of seconds between Shorte...

Page 712: ...icitly Example The following command sets the timers on the virtual link in area 0 0 0 2 and remote router ID 6 6 6 6 configure ospf virtual link 6 6 6 6 0 0 0 2 timer 10 1 20 200 History This command...

Page 713: ...When designing networks you should start with area 0 and then expand into other areas The backbone allows summary information to be exchanged between ABRs Every ABR hears the area summaries from all...

Page 714: ...gures the IP address of a point to point neighbor Syntax Description Default N A Usage Guidelines None Example The following command configures the IP address of a point to point neighbor configure os...

Page 715: ...escription Deletes the IP address of a point to point neighbor Syntax Description Default N A Usage Guidelines None Example The following command deletes the IP address of a point to point neighbor co...

Page 716: ...ual to the router dead interval Under some circumstances setting the wait interval to smaller values can help OSPF routers on a broadcast network to synchronize more quickly at the expense of possibly...

Page 717: ...e XOS 11 0 Command Reference Guide 717 Example The following command configures the OSPF wait interval on the VLAN accounting configure ospf vlan accounting timer 10 15 20 60 60 History This command w...

Page 718: ...sage Guidelines When an IP interface is created RIP configuration is disabled on the interface by default When the RIP interface is disabled the parameters are not reset to default automatically Examp...

Page 719: ...ge Guidelines When an IP interface is created RIP configuration is disabled on the interface by default When the RIP interface is disabled by this command the parameters are not reset to default autom...

Page 720: ...ds Description Configures the RIP garbage time Syntax Description Default 120 seconds Usage Guidelines None Example The following command configures the RIP garbage time to have a 60 second delay conf...

Page 721: ...ystem routing table Syntax Description Default No policy Usage Guidelines Use this command to associate a policy with the RIP routes installed into the system table Use the none option to remove the p...

Page 722: ...Guidelines If a router does not receive an update message from its neighbor within the route timeout period 180 seconds by default the router assumes the connection between it and its neighbor is no l...

Page 723: ...d configures the receive mode for the VLAN finance to accept only RIP version 1 format packets configure rip finance rxmode v1only History This command was available in ExtremeWare XOS 10 1 none Speci...

Page 724: ...o transmit version 2 format packets to the broadcast address configure rip finance txmode v1comp History This command was available in ExtremeWare XOS 10 1 none Specifies to not transmit any packets o...

Page 725: ...The router exchanges an update message with each neighbor every 30 seconds default value or if there is a change to the overall routed topology also called triggered updates The timer granularity is 1...

Page 726: ...ault The default setting is 1 Usage Guidelines The specified interface cost is added to the cost of the route received through this interface Example The following command configures the cost for the...

Page 727: ...ith the trusted neighbor policy to accept selected routes only from a set of trusted neighbors Use the out option to configure an output route policy which determines which RIP routes are advertised o...

Page 728: ...policy to determine trusted neighbors A neighbor is defined by its IP address Only the RIP control packets from trusted neighbors will be processed Example The following command configures RIP to use...

Page 729: ...iption Creates an OSPF area Syntax Description Default Area 0 0 0 0 Usage Guidelines Area 0 0 0 0 does not need to be created It exists by default Example The following command creates an OSPF area cr...

Page 730: ...SPF areas Syntax Description Default N A Usage Guidelines An OSPF area cannot be deleted if it has an associated interface Also area 0 0 0 0 cannot be deleted Example The following command deletes an...

Page 731: ...scription Disables the OSPF process for the router Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command disables the OSPF proce...

Page 732: ...LSAs all routers on your OSPF network should support opaque LSAs Routers that do not support opaque LSAs do not store or flood them At minimum a well interconnected subsection of your OSPF network ne...

Page 733: ...bled Usage Guidelines Use this command to stop OSPF from exporting routes derived from other protocols Example The following command disables OSPF to export BGP related routes to other OSPF routers di...

Page 734: ...t Description Disables the generation of a default external LSA Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command disables g...

Page 735: ...t Description Disables the router alert IP option in outgoing OSPF control packets Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines None Example The foll...

Page 736: ...n cause problems in large networks including A limit of 15 hops between the source and destination networks A large amount of bandwidth taken up by periodic broadcasts of the entire routing table Slow...

Page 737: ...IP aggregation command disables the RIP aggregation of subnet information on a switch configured to send RIPv2 compatible traffic The switch summarizes subnet routes to the nearest class network route...

Page 738: ...Example The following command disables RIP from redistributing any routes learned from OSPF disable rip export ospf History This command was available in ExtremeWare XOS 10 1 static Specifies static...

Page 739: ...bles the advertisement of a default route Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines None Example The following command unconfigures a default rout...

Page 740: ...uidelines Like split horizon poison reverse is a scheme for eliminating the possibility of loops in the routed topology In this case a router advertises a route over the same interface that supplied t...

Page 741: ...s or variables Default Enabled Usage Guidelines Split horizon is a scheme for avoiding problems caused by including routes in updates sent to the router from which the route was learned Split horizon...

Page 742: ...n This command has no arguments or variables Default Enabled Usage Guidelines Triggered updates occur whenever a router changes the metric for a route and it is required to send an update message imme...

Page 743: ...ert Description Disables router alert IP option in outgoing RIP control packets Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines None Example The followi...

Page 744: ...escription Enables the OSPF process for the router Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command enables the OSPF proces...

Page 745: ...ses opaque LSAs all routers on your OSPF network should support opaque LSAs Routers that do not support opaque LSAs do not store or flood them At minimum a well interconnected subsection of your OSPF...

Page 746: ...specific requirements for using a tag The tag value in this instance has no relationship with 802 1Q VLAN tagging The same cost type and tag values can be inserted for all the export routes or a polic...

Page 747: ...A Usage Guidelines If always is specified OSPF always advertises the default route If always is not specified OSPF adds the default LSA if a reachable default route is in the route table Example The f...

Page 748: ...cription Enables the generation of the OSPF router alert IP option Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines None Example The following command en...

Page 749: ...cause problems in large networks including A limit of 15 hops between the source and destination networks A large amount of bandwidth taken up by periodic broadcasts of the entire routing table Slow...

Page 750: ...ed to send RIPv1 or RIPv2 compatible traffic The switch summarizes subnet routes to the nearest class network route The following rules apply when using RIP aggregation Subnet routes are aggregated to...

Page 751: ...t could be the MED or the length of the BGP path The tag value is used only by special routing applications Use 0 if you do not have specific requirements for using a tag Each protocol can have a poli...

Page 752: ...752 ExtremeWare XOS 11 0 Command Reference Guide IGP Commands History This command was available in ExtremeWare XOS 10 1...

Page 753: ...eachable default route is in the system route table The default route advertisement is filtered using the out policy The cost metric is inserted for all RIP learned static and direct routes injected i...

Page 754: ...uidelines Like split horizon poison reverse is a scheme for eliminating the possibility of loops in the routed topology In this case a router advertises a route over the same interface that supplied t...

Page 755: ...or variables Default Enabled Usage Guidelines Split horizon is a scheme for avoiding problems caused by including routes in updates sent to the router from which the route was learned Split horizon o...

Page 756: ...n This command has no arguments or variables Default Enabled Usage Guidelines Triggered updates occur whenever a router changes the metric for a route and it is required to send an update message imme...

Page 757: ...Description Enables the router alert IP option in the outgoing RIP control packets Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines None Example The foll...

Page 758: ...ospf Description Displays global OSPF information Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command displays global OSPF inf...

Page 759: ...ifier Description Displays information about OSPF areas Syntax Description Default N A Usage Guidelines None Example The following command displays information about OSPF area 1 2 3 4 show ospf area 1...

Page 760: ...ion Displays information about all OSPF areas Syntax Description Default N A Usage Guidelines None Example The following command displays information about all OSPF areas show ospf area detail History...

Page 761: ...Displays the OSPF external route aggregation configuration Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command displays the O...

Page 762: ...plays detailed information about all OSPF interfaces Syntax Description Default N A Usage Guidelines None Example The following command displays information about all OSPF interfaces show ospf interfa...

Page 763: ...SPF interfaces Syntax Description Default If no argument is specified all OSPF interfaces are displayed Usage Guidelines None Example The following command displays information about one or all OSPF i...

Page 764: ...mit all optional parameters resulting in the following shortened form show ospf lsdb The shortened form displays all areas and all types in a summary format You can filter the display using either the...

Page 765: ...show ospf lsdb ExtremeWare XOS 11 0 Command Reference Guide 765 History This command was available in ExtremeWare XOS 10 1...

Page 766: ...OSPF specific memory usage Syntax Description Default N A Usage Guidelines None Example The following command displays OSPF specific memory for all types show ospf routes memory detail History This c...

Page 767: ...If no argument is specified all OSPF neighbors are displayed Usage Guidelines None Example The following command displays information about the OSPF neighbors on the VLAN accounting show ospf neighbor...

Page 768: ...Usage Guidelines area identifier Transit area used for connecting the two end points The transit area cannot have an area identifier of 0 0 0 0 and cannot be a stub or NSSA area Example The following...

Page 769: ...escription Displays RIP specific configuration Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command displays RIP specific confi...

Page 770: ...Summary includes the following information per interface VLAN name IP address and mask interface status packets transmitted packets received number of triggered updates cost Detail includes the follo...

Page 771: ...es packets received bad packets received bad routes received Example The following command displays the RIP configuration for all VLANS show rip interface The following command displays RIP specific s...

Page 772: ...Displays RIP specific statistics and configuration for a VLAN in detail Syntax Description Default N A Usage Guidelines None Example The following command displays RIP specific statistics for the VLAN...

Page 773: ...splays RIP specific memory usage Syntax Description Default N A Usage Guidelines None Example The following command displays RIP specific memory for all types show rip memory detail History This comma...

Page 774: ...es advertised by RIP including routes exported from the system routing table and originated by other protocols for example BGP Example The following command displays a summary of RIP specific routes f...

Page 775: ...r all OSPF interfaces to the default settings Syntax Description Default N A Usage Guidelines None Example The following command resets the OSPF interface to the default settings on the VLAN accountin...

Page 776: ...ult for all VLANs or for the specified VLAN Syntax Description Default All Usage Guidelines Does not change the enable disable state of the RIP settings Example The following command resets the RIP co...

Page 777: ...the origin of the route Possible values are IGP EGP and incomplete AS_Path The list of ASs that are traversed for this route Next_hop The IP address of the next hop BGP router to reach the destination...

Page 778: ...t no advertise no export subconfed BGP Features This section lists BGP features supported by ExtremeWare XOS Route Reflectors Route Confederations Route Aggregation Using the Loopback Interface BGP Pe...

Page 779: ...In updates Out updates Last error FsmTransitions The command clear counters will also reset all counter for all BGP neighbors For BGP the clear counters command is equivalent to the following BGP comm...

Page 780: ...statistics for all BGP routes whose mask length is exactly equal to maskLength irrespective of their network address Example The following command clears the flap statistics for a specified neighbor c...

Page 781: ...clear bgp flap statistics ExtremeWare XOS 11 0 Command Reference Guide 781 History This command was available in ExtremeWare XOS 10 1 The any netMaskLen options were added in ExtremeWare XOS 11 0...

Page 782: ...Enable aggregation using the following command enable bgp aggregation 2 Create an aggregate route using the following commands configure bgp add aggregate address address family ipv4 unicast ipv4 mult...

Page 783: ...configure bgp add aggregate address ExtremeWare XOS 11 0 Command Reference Guide 783 History This command was available in ExtremeWare XOS 10 1...

Page 784: ...quirement does not scale well especially when BGP is used as an interior gateway protocol One way to reduce the size of a fully meshed AS is to divide the AS into multiple sub autonomous systems and g...

Page 785: ...only if the route is present in the routing table The enable bgp export command redistributes an individual route from the routing table to BGP If you use both commands to redistribute routes the rout...

Page 786: ...es the local AS number used by BGP Syntax Description Default N A Usage Guidelines BGP must be disabled before the AS number can be changed Example The following command changes the local AS number us...

Page 787: ...used within the same cluster of clients Extreme Networks recommends disabling BGP before configuring the cluster ID Example The following command appends a BGP route reflector cluster ID to the clust...

Page 788: ...ateway protocol One way to reduce the size of a fully meshed AS is to divide the AS into multiple sub autonomous systems and group them into a routing confederation Within the confederation each sub A...

Page 789: ...stics of several routes so that they are advertised as a single route Aggregation reduces the amount of information that a BGP speaker must store and exchange with other BGP speakers Reducing the info...

Page 790: ...rement does not scale well especially when BGP is used as an interior gateway protocol One way to reduce the size of a fully meshed AS is to divide the AS into multiple sub autonomous systems and grou...

Page 791: ...address family is specified IPv4 unicast is the default Usage Guidelines None Example The following command deletes a network to be originated from this router configure bgp delete network 192 1 1 12...

Page 792: ...e BGP or the system goes to a low memory condition Example The following command configures the shutdown priority of BGP exported OSPF routes to 1000 configure bgp export ospf shutdown priority 1000 H...

Page 793: ...ne keyword to remove a BGP import policy An import policy is used to modify route attributes while adding BGP routes to the IP route table Example The following command configures a policy imprt_plcy...

Page 794: ...he following precedence from highest to lowest higher weight higher local preference shortest length shortest AS path lowest origin code lowest MED route from external peer lowest cost to Next Hop low...

Page 795: ...ines BGP selects routes based on the following precedence from highest to lowest higher weight higher local preference shortest length shortest AS path lowest origin code lowest MED route from externa...

Page 796: ...s limit is the penalty value above which a route will be suppressed The range is 1 20 000 and the default is 2 000 The maximum hold down time is the maximum time a route can be suppressed no matter ho...

Page 797: ...Command Reference Guide 797 Example The following command configures route flap dampening to the BGP neighbor at 192 168 1 22 to the default values configure bgp neighbor 192 168 1 22 dampening Histo...

Page 798: ...ecify the detail option or when you specify a particular neighbor Enclose the string in double quotes if there are any blank spaces in the string The maximum length of the string is 56 characters If y...

Page 799: ...prefix remoteaddr Specifies an IP address of a BGP neighbor all Specifies all neighbors address family The address family BGP supports two address families IPv4 Unicast and IPv4 Multicast number Spec...

Page 800: ...mand configures the maximum number of IP prefixes accepted from all neighbors to 5000 sets the threshold for warning messages to 60 and specifies SNMP traps configure bgp neighbor all maximum prefix 5...

Page 801: ...ghbors of the peer group Example The following command configures the next hop address used in the updates to be the address of the BGP connection originating it configure bgp neighbor 172 16 5 25 nex...

Page 802: ...te flap dampening for BGP neighbors configure bgp neighbor all remoteaddr address family ipv4 unicast ipv4 multicast dampening half life half life minutes reuse limit reuse limit number suppress limit...

Page 803: ...of a peer group are applied to all neighbors in the peer group To change any one of the following parameters you must disable and re enable the peer session timer source interface soft in reset passwo...

Page 804: ...t to those the neighbor had before it inherited the peer group values To create a new neighbor and add it to a BGP peer group use the following command create bgp neighbor remoteaddr peer group peer g...

Page 805: ...to modify or filter the NLRI information and the path attributes associated with it when exchanging updates with the neighbor Example The following command configures the route policy filter for a nei...

Page 806: ...AS as the router When changing the route reflector status of a peer the peer will automatically be disabled and re enabled and a warning message will appear on the console and in the log A cluster is...

Page 807: ...BGP destinations that require common handling ExtremeWare XOS supports the following well known BGP community attributes no export no advertise no export subconfed Example The following command inclu...

Page 808: ...ge Guidelines Higher priority values lower the chance of a BGP neighbor to be automatically disabled in case BGP or the system goes to a low memory condition Example The following command configures t...

Page 809: ...te refresh message to be sent to the neighbor As a response to the Route Refresh message the neighbor will send the entire BGP routing table in updates If the Route Refresh capability is not supported...

Page 810: ...lines The source interface IP address must be a valid IP address of any VLAN configured on the switch Example The following command changes the BGP source interface to 10 43 55 10 configure bgp neighb...

Page 811: ...ds Usage Guidelines The BGP neighbor must be disabled before changing the timer values Example The following command configures the BGP neighbor timers configure bgp neighbor 192 168 1 5 timer keep al...

Page 812: ...n multiple routes are available to the same network The range is 0 to 65 535 BGP selects routes based on the following precedence from highest to lowest higher weight higher local preference shortest...

Page 813: ...0 The suppress limit is the penalty value above which a route will be suppressed The range is 1 20 000 and the default is 2 000 The maximum hold down time is the maximum time a route can be suppressed...

Page 814: ...ommand Reference Guide BGP Commands Example The following command configures route flap dampening for the BGP peer group outer configure bgp peer group outer dampening History This command was availab...

Page 815: ...epted from the peer group outer to 5000 sets the threshold for warning messages to 60 and specifies SNMP traps configure bgp peer group outer maximum prefix 5000 threshold 60 send traps name Specifies...

Page 816: ...816 ExtremeWare XOS 11 0 Command Reference Guide BGP Commands History This command was available in ExtremeWare XOS 10 1...

Page 817: ...up and all neighbors of the peer group Example The following command configures the next hop address used in the updates to be the address of the BGP connection originating it configure bgp peer group...

Page 818: ...command to enable route flap dampening for a BGP peer group configure bgp peer group peer group name address family ipv4 unicast ipv4 multicast dampening half life half life minutes reuse limit reuse...

Page 819: ...s command implicitly defines this router to be a route reflector The peer group must be in the same AS of this router Example The following command configures the peer group outer as a route reflector...

Page 820: ...delines These settings apply to the peer group and all neighbors of the peer group Example The following command configures communities to be sent to neighbors as part of route updates configure bgp p...

Page 821: ...parameters of a peer group are applied to all neighbors in the peer group Modifying the following parameters automatically disables and enables the neighbors before changes take effect remote as time...

Page 822: ...e parameters of a peer group are applied to all neighbors in the peer group Modifying the following parameters automatically disables and enables the neighbors before changes take effect remote as tim...

Page 823: ...Description Default N A Usage Guidelines None Example The following command configures the route policy for the peer group outer and its neighbors using the policy nosales configure bgp peer group ou...

Page 824: ...mand does not affect configuration of the switch Changes made to the parameters of a peer group are applied to all neighbors in the peer group Modifying the following parameters automatically disables...

Page 825: ...igured on the switch Changes made to the parameters of a peer group are applied to all neighbors in the peer group Modifying the following parameters automatically disables and enables the neighbors b...

Page 826: ...the peer group Modifying the following parameters automatically disables and enables the neighbors before changes take effect remote as timer source interface soft in reset password Example The follo...

Page 827: ...outes based on the following precedence from highest to lowest higher weight higher local preference shortest length shortest AS path lowest origin code lowest MED route from external peer lowest cost...

Page 828: ...g the router ID BGP selects routes based on the following precedence from highest to lowest higher weight higher local preference shortest length shortest AS path lowest origin code lowest MED route f...

Page 829: ...network command aggregation import and redistribution Syntax Description This command has no arguments or variables Default N A Usage Guidelines This command does not affect the switch configuration...

Page 830: ...r all remoteaddr peer group peer group name none acquire all If you do not specify acquire all only the mandatory parameters are inherited from the peer group If you specify acquire all all of the par...

Page 831: ...bgp as command then the peer is consider an IBGP peer otherwise the neighbor is an EBGP peer The BGP session to a newly created peer is not started until the enable bgp neighbor command is issued Exa...

Page 832: ...within the peer group inherit the parameters of the BGP peer group The following mandatory parameters are shared by all neighbors in a peer group remote AS source interface out route policy send commu...

Page 833: ...ghbors Syntax Description Default N A Usage Guidelines Use this command to delete one or all BGP neighbors Example The following command deletes the specified BGP neighbor delete bgp neighbor 192 168...

Page 834: ...cription Deletes a peer group Syntax Description Default N A Usage Guidelines Use this command to delete a specific BGP peer group Example The following command deletes the peer group named external d...

Page 835: ...p Description Disables BGP Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines Use this command to disable BGP on the router Example The following command d...

Page 836: ...ing the characteristics of several routes so that they are advertised as a single route Aggregation reduces the amount of information that a BGP speaker must store and exchange with other BGP speakers...

Page 837: ...does not compare MEDs for paths from neighbors in different AS Usage Guidelines The MED is one of the parameters that is considered when selecting the best path among many alternative paths The path w...

Page 838: ...es in the output of show and upload commands Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines Using this command communities are displayed as a single de...

Page 839: ...an use policies to associate BGP attributes including Community NextHop MED Origin and Local Preference with the routes Policies can also be used to filter out exported routes Using the export command...

Page 840: ...0 Command Reference Guide BGP Commands Example The following command disables BGP from exporting routes from the OSPF protocol to BGP peers disable bgp export ospf History This command was available i...

Page 841: ...Default Disabled Usage Guidelines After the session has been disabled all the information in the route information base RIB for the neighbor is flushed Example The following command disables the BGP...

Page 842: ...mand disables BGP Multiprotocol and route refresh capabilities for one or all neighbors After the capabilities have been enabled the BGP neighbor will announce its capabilities to neighbors in an OPEN...

Page 843: ...sing private AS numbers include The remote AS does not have officially allocated AS numbers You want to conserve AS numbers if you are multi homed to the local AS Private AS numbers should not be adve...

Page 844: ...elines Disabling the soft input reset feature can potentially limit the amount of system memory consumed by the RIB in This command must be issued only when the BGP neighbor is disabled Example The fo...

Page 845: ...ion Disables the router alert IP option in outgoing BGP messages to the specified neighbor Syntax Description Default Disabled Usage Guidelines None Example The following command disables the feature...

Page 846: ...up peer group name Description Disables a BGP peer group Syntax Description Default Disabled Usage Guidelines None Example The following command disables the BGP peer group outer disable bgp peer grou...

Page 847: ...command disables BGP Multiprotocol and route refresh capabilities for a peer group Once the capabilities are enabled the BGP peer will announce its capabilities to neighbors in an OPEN message Example...

Page 848: ...emoval of private autonomous system AS numbers from the AS_Path attribute of outbound updates Syntax Description Default Disabled Usage Guidelines None Example The following command disables the BGP p...

Page 849: ...ed If no address family is specified IPv4 unicast is the default Usage Guidelines Disabling the soft input reset feature can potentially limit the amount of system memory consumed by the RIB in Exampl...

Page 850: ...on Disables the router alert IP option in outgoing BGP messages to the specified peer group Syntax Description Default Disabled Usage Guidelines None Example The following command disables the feature...

Page 851: ...mand has no arguments or variables Default Disabled Usage Guidelines This command enables the Border Gateway Protocol BGP on the router Before invoking this command the local AS number and BGP router...

Page 852: ...eaker must store and exchange with other BGP speakers Reducing the information that is stored and exchanged also reduces the size of the routing table To use BGP route aggregation follow these steps 1...

Page 853: ...es Default Disabled Usage Guidelines MED is only used when comparing paths from the same AS unless always compare med is enabled When this command is issued MEDs from different AS are used in comparin...

Page 854: ...ies in the output of show and upload commands Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines If not enabled the communities are displayed as a single d...

Page 855: ...ing Community NextHop MED Origin and Local Preference with the routes A policy can also be used to filter out exported routes Using the export command to redistribute routes complements the redistribu...

Page 856: ...11 0 Command Reference Guide BGP Commands Example The following command enables BGP to export routes from the OSPF protocol to BGP peers enable bgp export ospf History This command was available in E...

Page 857: ...yntax Description Default Disabled Usage Guidelines To create a new neighbor and add it to a BGP peer group use the following command create bgp neighbor remoteaddr peer group peer group name multi ho...

Page 858: ...enables BGP Multiprotocol and route refresh capabilities for one or all neighbors After the capabilities have been enabled the BGP neighbor will announce its capabilities to neighbors in an OPEN messa...

Page 859: ...private AS numbers include The remote AS does not have officially allocated AS numbers You want to conserve AS numbers if you are multi homed to the local AS Private AS numbers should not be advertis...

Page 860: ...v4 unicast is the default Usage Guidelines Disabling the soft input reset feature can potentially limit the amount of system memory consumed by the RIB in Example The following command enables the sof...

Page 861: ...lines This command will force the IP layer of ExtremeWare XOS to insert the IP Router Alert Option field in all the outbound BGP messages IP packets with IP Router Alert option in them examined closel...

Page 862: ...to 200 BGP neighbors All neighbors within the peer group inherit the parameters of the BGP peer group The following mandatory parameters are shared by all neighbors in a peer group remote AS source in...

Page 863: ...mand enables BGP Multiprotocol and route refresh capabilities for a peer group After the capabilities have been enabled the BGP peer will announce its capabilities to neighbors in an OPEN message Exam...

Page 864: ...emoval of private autonomous system AS numbers from the AS_Path attribute of outbound updates Syntax Description Default Disabled Usage Guidelines None Example The following command enables the BGP pe...

Page 865: ...d If no address family is specified IPv4 unicast is the default Usage Guidelines Disabling the soft input reset feature can potentially limit the amount of system memory consumed by the RIB in Example...

Page 866: ...ion Enables the router alert IP option in outgoing BGP messages to the specified peer group Syntax Description Default Disabled Usage Guidelines None Example The following command enables the feature...

Page 867: ...mmand has no arguments or variables Default N A Usage Guidelines Displays information such as AS number router ID local preference sync flag route reflection cluster ID confederation ID and AS redistr...

Page 868: ...his command to display information about a specific BGP neighbor If you do not specify a neighbor information about all neighbors is displayed Example The following command displays information about...

Page 869: ...that only flap statistics should be displayed for route flap dampening enabled routes received routes Specifies that only received routes should be displayed rejected routes Specifies that only rejec...

Page 870: ...han maskLength irrespective of their network address The option network any netMaskLen exact will display all BGP routes whose mask length is exactly equal to maskLength irrespective of their network...

Page 871: ...he parameters of the neighbors in the peer group which are different from the ones that are configured in the peer group will be displayed If no peer group name is specified all the peer group informa...

Page 872: ...ll BGP routes whose mask length is exactly equal to maskLength irrespective of their network address Example The following command displays the BGP route information base RIB show bgp routes all addre...

Page 873: ...show bgp routes ExtremeWare XOS 11 0 Command Reference Guide 873 History This command was available in ExtremeWare XOS 10 1 The any netMaskLen options were added in ExtremeWare XOS 11 0...

Page 874: ...x Description Default If no address family is specified IPv4 unicast is the default Usage Guidelines None Example The following command displays a summary of the BGP route information base RIB for IPv...

Page 875: ...splays BGP specific memory usage Syntax Description Default N A Usage Guidelines None Example The following command displays BGP specific memory for all types show bgp memory detail History This comma...

Page 876: ...876 ExtremeWare XOS 11 0 Command Reference Guide BGP Commands...

Page 877: ...queries the multicast group to see if the group is still in use If the group is still active a single IP host responds to the query and group registration is maintained IGMP is enabled by default on t...

Page 878: ...he RP The RP decapsulates the multicast packet and distributes it among all member routers When a router determines that the multicast rate from a particular group has exceeded a configured threshold...

Page 879: ...Description Default N A Usage Guidelines This command can be used by network operations to manually remove learned IGMP group entries instantly Example The following command clears IGMP groups from V...

Page 880: ...ove IGMP snooping entries instantly However removing an IGMP snooping entry can disrupt the normal forwarding of multicast traffic The static and dynamic IGMP snooping entries will be removed then rec...

Page 881: ...perators to manually remove IPMC software and hardware forwarding cache entries instantly If the stream is available caches will be re created otherwise caches are removed permanently This command can...

Page 882: ...y response interval The maximum response time inserted into the periodic general queries The range is 1 to 25 seconds last member query interval The maximum response time inserted into a group specifi...

Page 883: ...dress of the messages If the VLAN has no IP address assigned the proxy IGMP message will use 0 0 0 0 as the source IP address The multicast group should be in the class D multicast address space but s...

Page 884: ...nfigure igmp snooping vlan vlan name ports portlist add static group ip address Example The following command removes a static IGMP entry that forwards the multicast group 224 34 15 37 to the VLAN mar...

Page 885: ...ct this command emulates a multicast router attached to those ports As long as the ports are configured with the static entry all available multicast traffic will be forwarded to those ports Example T...

Page 886: ...to remove an entry created by the following command configure igmp snooping vlan vlanname ports portlist add static router Example The following command removes the static IGMP entry that caused all m...

Page 887: ...t groups that you wish to block To remove IGMP snooping filtering from a port use the none keyword version of the command Use the following template to create a snooping filter policy file Add your gr...

Page 888: ...Example The following command configures the policy file ap_multicast to filter multicast packets forwarded to VLAN marketing on ports 2 1 2 4 configure igmp snooping marketing ports 2 1 2 4 filter a...

Page 889: ...e switch receives a stream with a destination address which is in the policy file in permit mode that stream will be software flooded and no hardware entry would be installed When adding an IP address...

Page 890: ...used with caution Slow path flooding will be done within the L2 VLAN only Use the none option to effectively disable slow path flooding You can use the show ipconfig command to see the configuration...

Page 891: ...less you must set the leave timeout to a multiple of 100 ms For values of more than one second you must set the leave timeout to a multiple of 1000 ms one second The specified time is the maximum lea...

Page 892: ...traffic On the VLAN IGMP snooping optimizes the usage of network bandwidth and prevents multicast traffic from being flooded to parts of the network that do not need it The switch does not reduce any...

Page 893: ...switch supports both dense mode and sparse mode operation You can configure dense mode or sparse mode on a per interface basis After they are enabled some interfaces can run dense mode while others ru...

Page 894: ...lt setting for priority is 0 and indicates the lowest priority Usage Guidelines The VLAN specified for CBSR must have PIM enabled for it to take effect Example The following command configures a candi...

Page 895: ...If you use a static RP all switches in your network must be configured with the same RP address for the same group range The policy file contains a list of multicast group addresses served by this RP...

Page 896: ...ng interval in PIM sparse mode operation Syntax Description Default The default is 60 seconds Usage Guidelines None Example The following command configures the candidate rendezvous point advertising...

Page 897: ...ist of multicast group addresses serviced by this RP To delete a CRP use the keyword none as the access policy The VLAN specified for CBSR must have PIM configured Example The following command config...

Page 898: ...vlanname all Description Disables PIM on an interface Syntax Description Default N A Usage Guidelines None Example The following command disables PIM on VLAN accounting configure pim delete vlan acco...

Page 899: ...ot received normally When a non zero value is configured the first hop switch sends a few register messages and then waits for a corresponding register stop from RP for time seconds The process is rep...

Page 900: ...ster is sent every 55 seconds register suppress interval register probe interval A response to the null register is expected within register probe interval By specifying a larger interval a CPU peak l...

Page 901: ...with Cisco Systems products or to exclude data for RFC compliant operation in the register message Syntax Description Default Include data Usage Guidelines None Example The following command configur...

Page 902: ...this setting is based on register packets Syntax Description Default The default setting is 0 for both parameters Usage Guidelines For the best performance use default value of 0 Example The following...

Page 903: ..._interval 60 seconds Usage Guidelines None Example The following command configures the PIM timers on the VLAN accounting configure pim timer 150 300 vlan accounting History This command was available...

Page 904: ...e access policy capabilities are by nature different When the PIM protocol is used for routing IP multicast traffic the switch can be configured to use an policy file to determine trusted PIM router n...

Page 905: ...e router queries the multicast group to see if the group is still in use If the group is still active hosts respond to the query and group registration is maintained IGMP is enabled by default on the...

Page 906: ...de the command disable igmp snooping forward mcrouter only has no effect To change the snooping mode you must disable IP multicast forwarding Use the command disable ipmcforwarding The with proxy opti...

Page 907: ...erfaces are affected When new IP interfaces are added IP multicast forwarding is disabled by default IP forwarding must be enabled before enabling IP multicast forwarding Disabling IP multicast forwar...

Page 908: ...m disable pim Description Disables PIM on the system Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines None Example The following command disables PIM on...

Page 909: ...ter queries the multicast group to see if the group is still in use If the group is still active IP hosts respond to the query and group registration is maintained IGMP is enabled by default on the sw...

Page 910: ...snooping mode you must disable IP multicast forwarding To disable IP multicast forwarding use the command disable ipmcforwarding To change the IGMP snooping mode from the forward mcrouter only mode t...

Page 911: ...enable igmp snooping ExtremeWare XOS 11 0 Command Reference Guide 911 History This command was available in ExtremeWare XOS 10 1...

Page 912: ...switch to suppress the duplicate join requests on a group to forward to the connected layer 3 switch The proxy also suppresses unnecessary IGMP leave messages so that they are forwarded only when the...

Page 913: ...Usage Guidelines If no options are specified all configured IP interfaces are affected When new IP interfaces are added IPMC forwarding is disabled by default IP forwarding must be enabled before ena...

Page 914: ...im enable pim Description Enables PIM on the system Syntax Description This command has no arguments or variables Default Disabled Usage Guidelines None Example The following command enables PIM on th...

Page 915: ...l 125 sec Max Response Time 10 sec Last Member Query 1 sec Robustness 2 IGMP Snooping Router Timeout 260 sec Host Timeout 260 sec Igmp Snooping Fast Leave Time 1000 ms Igmp Snooping Flag forward all r...

Page 916: ...117 2 2 115 24 fmiz 3 0 2 vhs3 117 2 3 115 24 fmiz 3 0 2 vhs4 117 2 4 115 24 fmiz 3 0 2 vms1 111 1 1 115 24 Ufmiz 6 7 2 Flags E Interface Enabled i IGMP Enabled m Multicast Forwarding Enabled nLeMA N...

Page 917: ...lt N A Usage Guidelines If no VLAN is specified all VLANs are displayed You can also filter the display by group address and by multicast stream sender address Example The following command lists the...

Page 918: ...rmat Group membership information Router entry Timeout information Example The following command displays IGMP snooping registration information on the VLAN accounting show igmp snooping vlan accounti...

Page 919: ...2 5 No vcs7 4084 0 Yes vcs8 4083 0 Yes vhs2 4082 0 Yes hguo_fo 200 0 Yes vcs1 12 8 Yes 4 16 0 Yes vcs2 22 8 Yes 4 16 0 Yes vhs1 1717 14 Yes 4 32 0 Yes vms1 111 2 Yes 4 10 5 Yes gho 4061 0 Yes sqa_east...

Page 920: ...ng filters configured on the specified VLAN When no VLAN is specified all the filters will be displayed Example The following command displays the IGMP snooping filter configured on VLAN vlan101 show...

Page 921: ...ed VLAN When no VLAN is specified all the filters will be displayed Example The following command displays the IGMP snooping static groups configured on VLAN vlan101 show igmp snooping vlan101 static...

Page 922: ...pecified for the rp set option Rendezvous Point set all groups are displayed Usage Guidelines The detail version of this command displays the global statistics for PIM as well as the details of each P...

Page 923: ...neighbor Interface VLAN port to upstream neighbor Cache expire time Routing protocol When the detail option is specified the switch displays the egress VLAN list and the pruned VLAN list Example The...

Page 924: ...s to their default values and clears the IGMP group table Syntax Description This command has no arguments or variables Default N A Usage Guidelines None Example The following command resets all IGMP...

Page 925: ...ir default values Syntax Description Default If no VLAN is specified the configuration is reset for all PIM interfaces Usage Guidelines None Example The following command resets all PIM settings on th...

Page 926: ...926 ExtremeWare XOS 11 0 Command Reference Guide IP Multicast Commands...

Page 927: ...load on the next switch reboot The configuration is the customized set of parameters that you have selected to run on the switch As you make configuration changes the new settings are stored in run ti...

Page 928: ...prevent the switch from booting In the event the switch does not boot properly some boot option functions can be accessed through a special Bootloader menu see the ExtremeWare XOS Concepts Guide Use o...

Page 929: ...fore downloading the image The software image file can be a xos file which contains an ExtremeWare XOS core image or a xmod file which contains and ExtremeWare XOS module The module has additional fun...

Page 930: ...allation and reboot the switch Enter n to cancel If you install the image at a later time use the following command to install the software install image fname partition reboot Where fname specifies t...

Page 931: ...he image into the active partition you see output similar to the following Do you want to install image after downloading y yes n no cr cancel Yes Downloading to MSM A Downloading to MSM B Image will...

Page 932: ...u choose to install the image at a later time use this command to install the software on the switch The BootROM image file is a xbr file and this file contains the executable code Example The followi...

Page 933: ...install bootrom ExtremeWare XOS 11 0 Command Reference Guide 933 bootrom written Bootrom installed successfully History This command was first available in ExtremeWare XOS 11 0...

Page 934: ...cancel If you install on the inactive partition you can continue to run the currently booted image but to run the newly installed image you will need to set the boot partition with the use image part...

Page 935: ...module If you reboot the switch the module will also be activated but you can activate the module without rebooting the switch by issuing the run update command After issuing that command all the fun...

Page 936: ...le only on the primary Management Switch Fabric Module MSM You were unable to display a list of configuration and policy files on the backup MSM Example The following command displays a list of all cu...

Page 937: ...ackup MSM For example if you rename a file on the primary MSM the same file on the backup MSM is renamed A message appears that asks you to confirm this action In ExtremeWare 10 1 this command was ava...

Page 938: ...on the primary MSM the same file on the backup MSM is deleted A message appears that asks you to confirm this action In ExtremeWare 10 1 this command was available only on the primary MSM For example...

Page 939: ...artition issue this command to make the update active This command causes the ExtremeWare XOS system to start the newly installed processes contained in the package without rebooting the switch If you...

Page 940: ...output that displays the primary secondary and user created and defined configurations test and XOS1 are the names of the user created and defined configurations exsh 9 save configuration cr Execute t...

Page 941: ...iguration cancelled Example The following command saves the current switch configuration to the configuration file named XOS1 save configuration XOS1 The following command save the current switch conf...

Page 942: ...ipaging command to pause the display when the output fills the screen The default for clipaging is enabled You can just display the configuration of a module of interest by using the module name keywo...

Page 943: ...l memory card is present Syntax Description This command has no arguments or variables Usage Guidelines Use this command to verify if there is an external memory card in the switch Example This comman...

Page 944: ...hronized the backup uses its image and the primary s configuration This image configuration mismatch will likely cause the switch to operate differently after failover Use the synchronize command to r...

Page 945: ...write all code images and configs with a copy from the master MSM Synchronize currently requires Extremeware XOS version 11 or greater on the backup MSM DO NOT interrupt synchronize the backup MSM may...

Page 946: ...rs account information date and time settings and so on Include the parameter all to clear the entire current configuration including all switch parameters and reboot using the last used image and fac...

Page 947: ...switch Example The following command uninstalls the software package bd10k 11 0 0 25 ssh xmod uninstall image bd10k 11 0 0 25 xmod History This command was first available in ExtremeWare XOS 11 0 fna...

Page 948: ...ns use the following command save configuration test1 To keep track of your configuration file names use the ls command to display the files saved on your switch Files with the cfg extension are confi...

Page 949: ...that the next reboot should use the saved configuration file named XOS1 cfg use configuration XOS1 cfg The following command specifies that the next reboot should use the configuration saved in the pr...

Page 950: ...and if they are in the primary or the secondary partition Primary indicates the saved image in the primary partition secondary indicates the saved image in the secondary partition This command also sp...

Page 951: ...t at 800 998 2408 or 408 579 2826 The Event Management System EMS provides enhanced features to filter and capture information generated on a switch Details of using EMS are discussed in the ExtremeWa...

Page 952: ...n severely degrade performance For typical network device monitoring debug mode should remain disabled the default setting Debug mode should only be enabled when advised by technical support or when a...

Page 953: ...Debug mode should only be enabled when advised by technical support or when advanced diagnosis is required The debug mode setting is saved to FLASH The following configuration options require that de...

Page 954: ...tion Default N A Usage Guidelines None Example The following command looks up the IP address of a computer with the name of bigserver xyz_inc com nslookup bigserver xyz_inc com History This command wa...

Page 955: ...ule the extended diagnostic routine can require significantly more time to complete depending on the number of ports on the module On a management module the module is taken offline while the diagnost...

Page 956: ...displayed about the impact of this test and you have the opportunity to continue or cancel the test Running Diagnostics will disrupt network traffic Are you sure you want to continue y n Enter y to co...

Page 957: ...and time of the diagnostic test is displayed Running Diagnostics on Modules To run diagnostics on an I O module or an MSM use the following command run diagnostics extended normal slot slot A B Depen...

Page 958: ...splays the results of module diagnostics for MSM A show diagnostics slot A The following is sample output from this command Slotnum A DiagResult timestamp Tue Jun 29 20 10 31 2004 Test Temperature 29...

Page 959: ...ootprelay show dhcp client show port txerror show port rxerror show radius show tacacs show policy show session show process Information about the following areas is also displayed aaa bootp cli stp I...

Page 960: ...cal support representative if you experience a problem Depending on the software version running on your switch additional or different show command output is displayed Example The following command d...

Page 961: ...active The following commands are supported For more detailed information about the top command including display options command fields and command usage please refer to your UNIX documentation Exam...

Page 962: ...or variables Default N A Usage Guidelines Use this command to copy debug information to the external memory card The debug information includes log files and core files Progress messages are displayed...

Page 963: ...ort shutdown priority 792 configure bgp import policy 793 configure bgp local preference 794 configure bgp med 795 configure bgp neighbor dampening 796 configure bgp neighbor description 798 configure...

Page 964: ...figure igmp snooping flood list 889 configure igmp snooping leave timeout 891 configure igmp snooping timer 892 configure igmp snooping vlan ports add static group 883 configure igmp snooping vlan por...

Page 965: ...nfigure rip vlan route policy 727 configure rip vlan rxmode 723 configure rip vlan trusted gateway 728 configure rip vlan txmode 724 configure sflow agent ipaddress 330 configure sflow collector ipadd...

Page 966: ...n vrid delete ipaddress 590 configure vrrp vlan vrid delete track iproute 591 configure vrrp vlan vrid delete track ping 592 configure vrrp vlan vrid delete track vlan 593 configure vrrp vlan vrid don...

Page 967: ...ert 743 disable sflow 348 disable sflow ports 349 disable sharing 201 disable slot 202 disable snmp access 120 disable sntp client 121 disable ssh2 436 disable stpd 519 disable stpd auto bind 520 disa...

Page 968: ...43 enable radius accounting 444 enable rip 749 enable rip aggregation 750 enable rip export 751 enable rip originate default cost 753 enable rip poisonreverse 754 enable rip splithorizon 755 enable ri...

Page 969: ...81 show memorycard 943 show mirroring 216 show node 137 show odometers 139 show ospf 758 show ospf area 759 show ospf area detail 760 show ospf ase summary 761 show ospf interfaces 763 show ospf inter...

Page 970: ...681 unconfigure irdp 682 unconfigure log filter 401 unconfigure log target format 402 unconfigure ospf 775 unconfigure pim 925 unconfigure ports display string 229 unconfigure qosprofile ports 307 un...

Search results

Summary of Contents for ExtremeWare XOS 11.0

Reviews:

Related manuals for ExtremeWare XOS 11.0

Brands by name

Popular brands

Extreme Networks ExtremeWare XOS 11.0, Command Reference Manual

Search results

Summary of Contents for ExtremeWare XOS 11.0

Reviews:

Related manuals for ExtremeWare XOS 11.0

Brands by name

Popular brands