H3C H3C S7500E Series Command Manual Download

Page: 880 / 1565

Command Manual – 802.1x - MAC Authentication
H3C S7500E Series Ethernet Switches

Chapter 1 802.1x Configuration Commands

1-3

Field

Description

Proxy trap checker is disabled

Indicates whether the device is configured to
send a trap packet when detecting that a user
is trying to login through a proxy

Proxy logoff checker is disabled

Indicates whether the device is configured to
get offline any user trying to login through a
proxy

EAD quick deploy is enabled

Indicates whether EAD quick deployment is
enabled

Transmit Period

Setting of the username request timeout timer

Handshake Period

Setting of the handshake timer

Quiet Period

Setting of the quiet timer

Quiet Period Timer is disabled

Indicates whether the quiet timer is enabled

Supp Timeout

Setting of the supplicant timeout timer

Server Timeout

Setting of the server timeout timer

The maximal retransmitting times

Maximum number of attempts for the
authenticator to send authentication requests
to the supplicant

EAD quick deploy configuration

EAD quick deployment configurations

URL

Redirect URL for IE users

Free IP

Accessible network segment

EAD timeout

EAD rule timeout time

Total maximum 802.1x user
resource number per slot

Maximum number of supplicants supported
per board

Total current used 802.1x resource
number

Total number of online users

Ethernet2/0/1 is link-up

Status of port Ethernet 2/0/1

802.1X protocol is disabled

Indicates whether 802.1x is enabled on the
port

Proxy trap checker is disabled

Indicates whether the port is configured to
send a trap packet when detecting that a user
is trying to login through a proxy

Proxy logoff checker is disabled

Indicates whether the port is configured to get
offline any user trying to login through a proxy

Handshake is disabled

Indicates whether handshake is enabled on
the port

The port is an authenticator

Role of the port

Authenticate Mode is Auto

Access control mode for the port

Port Control Type is Mac-based

Access control method for the port

Summary of Contents for H3C S7500E Series

Page 1: ...H3C S7500E Series Ethernet Switches Command Manual Hangzhou H3C Technologies Co Ltd http www h3c com Manual Version 20071025 C 1 01 Product Version Release 6000...

Page 2: ...nnoVision and HUASAN are trademarks of Hangzhou H3C Technologies Co Ltd All other trademarks that may be mentioned in this manual are the property of their respective owners Notice The information in...

Page 3: ...2 VLAN Introduces the commands used for configuring VLAN Voice VLAN and GVRP 3 IP Addressing and Performance Introduces the commands used for configuring IP address and IP performance 4 QinQ BPDU Tunn...

Page 4: ...ARP and the related configuration 19 DHCP Introduces the commands used for DHCP and the related configuration 20 ACL Introduces the commands used for IPv4 IPv6 based ACL and the related configuration...

Page 5: ...Boldface italic Command arguments are in italic Items keywords or arguments in square brackets are optional x y Alternative items are grouped in braces and separated by vertical bars One is selected...

Page 6: ...ts For example pop up the New User window Multi level menus are separated by forward slashes For example File Create Folder III Symbols Convention Description Warning Means reader be extremely careful...

Page 7: ...1 11 1 1 11 history command max size 1 11 1 1 12 idle timeout 1 12 1 1 13 lock 1 13 1 1 14 modem 1 14 1 1 15 modem auto answer 1 14 1 1 16 modem timer answer 1 15 1 1 17 parity 1 16 1 1 18 protocol in...

Page 8: ...Command Manual Login H3C S7500E Series Ethernet Switches Table of Contents ii 2 1 1 acl 2 1 2 1 2 snmp agent community 2 2 2 1 3 snmp agent group 2 2 2 1 4 snmp agent usm user 2 4...

Page 9: ...tion key command to restore the default shortcut key You can use a single character or its corresponding ASCII code value in the range 0 to 127 or a string of 1 to 3 characters to define a shortcut ke...

Page 10: ...from aux0 1 1 2 authentication mode Syntax authentication mode none password scheme command authorization View User interface view Parameters none Does not authenticate users password Authenticates u...

Page 11: ...configured on the switch But for a VTY user interface a password is needed for a user to log into the switch through it under the same condition By default users logging in through the Console port ar...

Page 12: ...command may cause you unable to perform common configuration in the user interface so use it with caution z Before executing the auto execute command command and save your configuration make sure you...

Page 13: ...evert to the default data bits The default data bits is 8 Note H3C S7500E Series Ethernet Switches only support data bits 7 and 8 To establish the connection again you need to modify the configuration...

Page 14: ...can be an absolute user interface index if you do not provide the type argument or a relative user interface index if you provide the type argument summary Displays the summary information about a us...

Page 15: ...The information displayed is about the current user interface F The information displayed is about the current user interface And the current user interface operates in asynchronous mode Idx The absol...

Page 16: ...on user F Current operation user work in async mode Table 1 2 Descriptions on the fields of the display users command Field Description The information displayed is about the current user interface F...

Page 17: ...r a string of 1 to 3 characters to define a shortcut key But in fact only the first character functions as the shortcut key For example if you enter an ASCII value 113 the system will use its correspo...

Page 18: ...rdware flow control none Configures no flow control software Configures to perform software flow control Description Using flow control command you can configure the flow control mode on AUX port Usin...

Page 19: ...e index If you do not provide the type argument number indicates absolute user interface index which ranges from 0 to 5 Description Use the free user interface command to clear a specified user interf...

Page 20: ...re up to 20 commands Sysname system view System View return to User View with Ctrl Z Sysname user interface aux 0 Sysname ui aux0 history command max size 20 1 1 12 idle timeout Syntax idle timeout mi...

Page 21: ...command to lock the current user interface to prevent unauthorized users from operating the user interface With the execution of this command the system prompts to enter and confirm the password up to...

Page 22: ...ls only Description Use the modem command to enable the switch side modem to accept incoming calls initiate outgoing calls or both Use the undo modem command to remove the modem dial up configuration...

Page 23: ...i aux0 modem auto answer 1 1 16 modem timer answer Syntax modem timer answer seconds undo modem timer answer View AUX interface view Parameters seconds Timeout time in seconds ranging from 1 to 60 The...

Page 24: ...the check mode of the user interface Use the undo parity command to revert to the default check mode No check is performed by default Note H3C S7500E series Ethernet switches support the even none an...

Page 25: ...Related command user interface vty Caution If you want to configure the user interface to support SSH to ensure a successful login you must first configure the authentication mode to scheme on the us...

Page 26: ...ystem View return to User View with Ctrl Z Sysname user interface aux 0 Sysname ui aux0 screen length 20 1 1 20 send Syntax send all number type number View User view Parameters all Specifies to send...

Page 27: ...view Parameters ftp Specifies the users to be of FTP type lan access Specifies the users to be of LAN access type which normally means Ethernet users such as 802 1x users ssh Specifies the users to be...

Page 28: ...mmands of this level are for the operation of the entire system and the system supporting modules Services are supported by these commands Commands concerning file system file transfer protocol FTP tr...

Page 29: ...rings containing up to 16 characters such as 123 are regarded as plain text passwords and are converted to the corresponding 24 character encrypted password such as TP EMUHL 408 W7TH Q A encrypted pas...

Page 30: ...ng when using the undo shell command z This command is available in all user interfaces except the AUX user interface because the AUX port also the Console is exclusively used for configuring the swit...

Page 31: ...sion speed Note After you use the speed command to configure the transmission speed of the AUX user interface you must change the corresponding configuration of the terminal emulation program running...

Page 32: ...m View return to User View with Ctrl Z Sysname user interface aux 0 Sysname ui aux0 stopbits 2 1 1 26 sysname Syntax sysname string undo sysname View System view Parameters string System name of the s...

Page 33: ...rce IP address of the packets sent by the Telnet client interface type interface number Type and number of the interface through which the Telnet client sends packets Description Use the telnet comman...

Page 34: ...on address is a local link address port number TCP port number assigned to Telnet service on the remote system in the range 0 to 65535 and defaults to 23 Description Use the telnet ipv6 command to tel...

Page 35: ...source interface of the Telnet packets sent is not configured Examples Specify the source IP address for Telnet packets Sysname system view Sysname telnet client source ip 129 102 0 2 Remove the sour...

Page 36: ...si Specifies the terminal display type to ANSI vt100 Specifies the terminal display type to VT100 Description Use the terminal type command to configure the type of terminal display Use the undo termi...

Page 37: ...st user interface to be configured Description Use the user interface command to enter one or more user interface views to perform configuration Examples Enter VTY 0 user interface view Sysname system...

Page 38: ...0 are available to the users logging into VTY 0 Sysname system view System View return to User View with Ctrl Z Sysname user interface vty 0 Sysname ui vty0 user privilege level 0 You can verify the a...

Page 39: ...mber IPv6 ACL number ranging from 2000 to 3999 inbound Filters the users Telnetting to the current switch outbound Filters the users Telnetting to other switches from the current switch Description Us...

Page 40: ...ranges from 2 000 to 2 999 Description Use the snmp agent community command to set a community name and to enable users to access the switch through SNMP You can also optionally use this command to a...

Page 41: ...ly view read view Name of the view to be set to read only a string of 1 to 32 characters write view Sets a readable writable view write view Name of the view to be set to readable writable a string of...

Page 42: ...of 1 to 32 characters authentication mode Specifies to authenticate users md5 Specifies the authentication protocol to be HMAC MD5 96 sha Specifies the authentication protocol to be HMAC SHA 96 auth p...

Page 43: ...m the corresponding SNMP group The operation also frees the user from the corresponding ACL related configuration Examples Add the user named h3c to the SNMP group named h3cgroup specifying to authent...

Page 44: ...1 14 1 3 Protocol Based VLAN Configuration Commands 1 15 1 3 1 display protocol vlan interface 1 15 1 3 2 display protocol vlan vlan 1 16 1 3 3 port hybrid protocol vlan 1 17 1 3 4 protocol vlan 1 18...

Page 45: ...ion Commands 4 1 4 1 GARP Configuration Commands 4 1 4 1 1 display garp statistics 4 1 4 1 2 display garp timer 4 2 4 1 3 garp timer 4 2 4 1 4 garp timer leaveall 4 4 4 1 5 reset garp statistics 4 5 4...

Page 46: ...escription Use the description command to configure the descriptive string of the current VLAN or VLAN interface Use the undo description command to restore the default By default the descriptive stri...

Page 47: ...of VLAN interface 2 Sysname display interface vlan interface 2 Vlan interface2 current state UP Line protocol current state UP Description Vlan interface2 Interface The Maximum Transmit Unit is 1500 I...

Page 48: ...pecified by a VLAN ID range all Displays all current VLAN information except for the reserved VLAN dynamic Displays the information of dynamic VLANs reserved Displays information of the reserved VLANs...

Page 49: ...r dynamic Route interface Whether the VLAN interface is configured for the VLAN not configured or configured Description VLAN descriptive string IP Address IP address of the VLAN interface not display...

Page 50: ...name vlan2 quit Sysname interface vlan interface 2 Sysname Vlan interface2 1 1 5 ip address Syntax ip address ip address mask mask length sub undo ip address ip address mask mask length sub View VLAN...

Page 51: ...sses will be deleted from the VLAN interface z Use the undo ip address ip address mask mask length command to delete the main IP address z Use the undo ip address ip address mask mask length sub comma...

Page 52: ...of an Ethernet port does not change with the VLAN interface state Examples Shut down the VLAN interface and then bring it up Sysname system view Sysname interface vlan interface 2 Sysname Vlan interfa...

Page 53: ...the association is removed z If a VLAN is configured as a remote mirroring VLAN it cannot be removed using the undo vlan command unless its mirroring VLAN configuration is removed first Related comma...

Page 54: ...to VLAN 2 Sysname system view Sysname vlan 2 Sysname vlan2 port ethernet 2 0 1 to ethernet 2 0 3 1 2 2 port access vlan Syntax port access vlan vlan id undo port access vlan View Ethernet port view po...

Page 55: ...mand to restore the default VLAN 1 Execution of the undo vlan command on a Hybrid port to remove the default VLAN does not affect the default VLAN configuration That is to say the non existent VLAN ca...

Page 56: ...d port to the specified VLAN s Use the undo port hybrid vlan command to remove the current Hybrid port from the specified VLAN s The Hybrid port can allow multiple VLANs to pass Repetitive execution o...

Page 57: ...view port group view Parameters access Configures the link type of a port as Access hybrid Configures the link type of a port as Hybrid trunk Configures the link type of a port as Trunk Description Us...

Page 58: ...oup view Parameters vlan id list The range of VLANs that the Hybrid ports will be added to in the format of vlan id list vlan id1 to vlan id2 1 10 where vlan id ranges from 1 to 4 094 and 1 10 indicat...

Page 59: ...nk port Use the undo port trunk pvid command to restore the default By default the default VLAN on a Trunk port is VLAN 1 Execution of the undo vlan command on a Trunk port to remove a default VLAN do...

Page 60: ...e type interface number2 Specifies an port range all Displays protocol information and protocol indexes of all ports Description Use the display protocol vlan interface command to display protocol bas...

Page 61: ...r equal to that before it all All VLANs Description Use the display protocol vlan vlan command to display the protocol information and protocol index configured on the specified VLAN s Related command...

Page 62: ...dex in the range 0 to 15 The protocol end argument must be greater than or equal to the beginning protocol index all All protocols Description Use the port hybrid protocol vlan vlan command to associa...

Page 63: ...ipv4 Specifies the IPv4 based VLAN ipv6 Specifies the IPv6 based VLAN ipx Specifies the IPX based VLAN The keywords ethernetii llc raw and snap are encapsulation formats mode Configures self defined...

Page 64: ...xff that corresponds with ipx raw at the same time When either of the dsap id and ssap id arguments is configured the system assigns aa to the other argument z Ensure that the etype keyword is not con...

Page 65: ...t Based VLAN Configuration Commands 1 4 1 display ip subnet vlan interface Syntax display ip subnet vlan interface interface type interface number1 to interface type interface number2 all View Any vie...

Page 66: ...Mask of IP subnet 1 4 2 display ip subnet vlan vlan Syntax display ip subnet vlan vlan vlan id to vlan id all View Any view Parameters vlan id VLAN ID in the range 1 to 4094 to Specifies a VLAN ID ran...

Page 67: ...ciated with the VLAN ip ip address mask Specifies the source IP address or network address based on which the subnet based VLANs are classified in dotted decimal notation The mask argument is the subn...

Page 68: ...ubnet based VLAN Use the undo port hybrid ip subnet vlan vlan command to remove the association between the current Ethernet port and an IP subnet based VLAN Execution of the above commands in Etherne...

Page 69: ...itches Chapter 1 VLAN Configuration Commands 1 24 Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1 port link type hybrid Sysname Ethernet2 0 1 port hybrid vlan 3 untagged Please wait Done Sysnam...

Page 70: ...n Use the display isolate user vlan command to display the mapping between an isolate user vlan and the secondary VLAN s Related commands isolate user vlan isolate user vlan enable Examples Display th...

Page 71: ...Description on the fields of the display isolate user vlan command Field Description Isolate user VLAN VLAN ID Isolate user VLAN ID Secondary VLAN ID Secondary VLAN ID VLAN ID VLAN ID VLAN Type VLAN T...

Page 72: ...Description Use the isolate user vlan command to create the mapping between an isolate user vlan and the secondary VLAN s Use the undo isolate user vlan command to delete the mapping between an isolat...

Page 73: ...AN 3 and VLAN 4 Sysname system view Sysname vlan 2 Sysname vlan2 isolate user vlan enable Sysname vlan2 port ethernet 2 0 2 Sysname vlan2 vlan 3 Sysname vlan3 port ethernet 2 0 3 Sysname vlan3 vlan 4...

Page 74: ...ation Commands 2 5 An isolate user VLAN may include multiple ports including those that are connected to upstream devices Related commands display isolate user vlan Examples Configure VLAN 5 to be an...

Page 75: ...string currently supported by system Related commands voice vlan voice vlan enable Note As the first 24 bits of a MAC address in binary format an OUI address is a globally unique identifier assigned t...

Page 76: ...allowed to pass 3 1 2 display voice vlan state Syntax display voice vlan state View Any view Parameters None Description Use the display voice vlan state command to display the voice VLAN configurati...

Page 77: ...g mode manual or automatic 3 1 3 voice vlan Syntax voice vlan vlan id enable undo voice vlan enable View System view Parameters vlan id ID of the VLAN to be enabled with the voice VLAN feature in the...

Page 78: ...time of a voice VLAN Use the undo voice vlan aging command to restore the aging time of a voice VLAN Under automatic mode the system will decide whether to add a port to a voice VLAN based on the sour...

Page 79: ...feature on a port ensure that its is enabled globally first z Only after the voice VLAN feature is enabled under both system view and Ethernet port view will it functions properly Examples Enable the...

Page 80: ...by the voice VLAN A maximum of 16 OUI addresses can be supported by the system By default default OUI addresses which can be removed or then added as illustrated in the following table Table 3 3 Defau...

Page 81: ...voice vlan mode auto Syntax voice vlan mode auto undo voice vlan mode auto View Ethernet port view Parameters None Description Use the voice vlan mode auto command to configure the voice VLAN working...

Page 82: ...urity enable command to enable the security mode for voice VLAN Use the undo voice vlan security enable command to disable the security mode for voice VLAN By default the security mode of voice VLAN i...

Page 83: ...he to interface type interface number portion comprises only one port Description Use the display garp statistics command to display GARP statistics of specified or all the ports Note that z If the in...

Page 84: ...settings of specific ports Note that z If the interface interface list keyword argument combination is not specified this command displays the GARP timer settings of all the ports z If the interface...

Page 85: ...port group view these two commands apply to all the ports in the port group z When restoring the default GARP timers you are recommended to do that on the timers in the order of hold join leave and l...

Page 86: ...efault This may fail if the default is less than the setting of the current leave timer By default the setting of the leaveall timer is 1000 centiseconds that is 10 seconds A leaveall timer starts upo...

Page 87: ...eset garp statistics command to clear GARP statistics of specific or all the ports Note that z If the interface interface list keyword argument combination is not specified this command clears the GAR...

Page 88: ...ough VLAN 500 which Ethernet 2 0 1 belongs to 4 2 2 display gvrp state Syntax display gvrp state interface interface type interface number vlan vlan id View Any view Parameters interface interface typ...

Page 89: ...trunk ports will be displayed Otherwise only the GVRP statistics of all the specified trunk port will be displayed Examples Display statistics about GVRP for trunk port Ethernet 2 0 1 Sysname display...

Page 90: ...enabled 4 2 5 display gvrp vlan operation interface Syntax display gvrp vlan operation interface interface type interface number View Any view Parameters interface type interface number Specifies an...

Page 91: ...on all ports in a port group depending on the view you entered By default GVRP is disabled Execution of the above commands in system view will apply the configurations globally in Ethernet port view...

Page 92: ...nt port only whereas under port group view will apply the configurations to all the ports in the port group GVRP provides the following three registration types on a port z Normal Port operating in th...

Page 93: ...pter 4 GARP GVRP Configuration Commands 4 11 Examples Set the GVRP registration type to fixed on port Ethernet 2 0 1 Sysname system view Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1 port lin...

Page 94: ...splay fib ip address 2 3 2 1 3 display fib statistics 2 4 2 1 4 display icmp statistics 2 5 2 1 5 display ip socket 2 6 2 1 6 display ip statistics 2 9 2 1 7 display tcp statistics 2 10 2 1 8 display...

Page 95: ...lay information about a specified or all Layer 3 interfaces Examples Display information about interface VLAN interface 1 Sysname display ip interface vlan interface 1 Vlan interface1 current state DO...

Page 96: ...the network layer protocol Internet Address IP address of an interface followed by z Primary Identifies a primary IP address or z Sub Identifies a secondary IP address Broadcast address Broadcast add...

Page 97: ...ment packets z Router solicitation packets z Time exceeded packets z IP header bad packets z Timestamp request packets z Timestamp reply packets z Information request packets z Information reply packe...

Page 98: ...stratively down s spoofing Interface Physical Protocol IP Address Vlan interface1 up up 1 1 1 1 Table 1 2 Description on fields of the display ip interface brief command Field Description down The int...

Page 99: ...secondary IP address By default no IP address is assigned to any interface When assigning IP addresses to an interface consider the following z You can assign only one primary IP address to an interf...

Page 100: ...contains the specified string z The include keyword specifies to display only the FIB entries that include the specified string z The exclude keyword specifies to display only the FIB entries that do...

Page 101: ...ber of Routes Total number of routes in the FIB table Destination Mask Destination address length of mask Nexthop Address of next hop Flag Flags of routes z U Usable route z G Gateway route z H Host r...

Page 102: ...3094 InLoop0 invalid Display FIB information passing the IP prefix list abc0 Sysname system view Sysname ip ip prefix abc0 permit 10 2 0 0 16 Sysname display fib ip prefix abc0 Route Entry matched by...

Page 103: ...B entries that match the natural network of 10 1 0 0 and have the masks longer than or equal to the natural mask Sysname display fib 10 1 0 0 longer Route Entry Count 2 Flag U Useable G Gateway H Host...

Page 104: ...tics on a slot Description Use the display icmp statistics command to display ICMP statistics Related commands display ip interface reset ip statistics Examples Display ICMP statistics Sysname display...

Page 105: ...ut output time stamp packets information request Number of input information request packets mask requests Number of input output mask requests mask replies Number of input output mask replies informa...

Page 106: ...IO Task VTYD 60 socketid 3 Proto 6 LA 192 168 0 152 23 FA 192 168 0 208 1099 sndbuf 8192 rcvbuf 8192 sb_cc 483 rb_cc 0 socket option SO_KEEPALIVE SO_OOBINLINE SO_REUSEPORT SO_SENDVPNID 0 SO_SETKEEPALI...

Page 107: ...o 65 LA 0 0 0 0 FA 0 0 0 0 sndbuf 32767 rcvbuf 256000 sb_cc 0 rb_cc 0 socket option 0 socket state SS_PRIV SS_NBIO SS_ASYNC Task ROUT 86 socketid 1 Proto 2 LA 0 0 0 0 FA 0 0 0 0 sndbuf 32767 rcvbuf 25...

Page 108: ...y ip statistics slot slot number View Any view Parameters slot slot number Displays statistics of IP packets on the slot Description Use the display ip statistics command to display statistics of IP p...

Page 109: ...packets forwarded local Total number of packets sent from the local dropped Total number of packets discarded no route Total number of packets for which no route is available Output compress fails Tot...

Page 110: ...ets of data after window 0 0 bytes packets received after close 0 ACK packets 481 8776 bytes duplicate ACK packets 7 too much ACK packets 0 Sent packets Total 665 urgent packets 0 control packets 5 in...

Page 111: ...er packets received packets of data after window Number of packets outside the receiving window packets received after close Number of packets that arrived after connection is closed ACK packets Numbe...

Page 112: ...osed in brackets are connections closed accidentally before receiving SYN from the peer and connections closed initiatively after receiving SYN from the peer Packets dropped with MD5 authentication Nu...

Page 113: ...ort Remote IP address and port number State State of the TCP connection 2 1 9 display udp statistics Syntax display udp statistics View Any view Parameters None Description Use the display udp statist...

Page 114: ...n port Number of broadcast multicast packets without socket on port not delivered input socket full Number of packets not delivered to upper layer due to socket buffer being full Received packets inpu...

Page 115: ...erface 2 Sysname Vlan interface2 ip forward broadcast acl 2001 2 1 11 ip forward broadcast system view Syntax ip forward broadcast undo ip forward broadcast View System view Parameters None Descriptio...

Page 116: ...tion packets Sysname system view Sysname undo ip redirects The function is disabled 2 1 13 ip ttl expires enable Syntax ip ttl expires enable undo ip ttl expires View System view Parameters None Descr...

Page 117: ...undo ip unreachables command to disable sending ICMP destination unreachable packets Sending ICMP destination unreachable packets is enabled by default If the feature is disabled the device will not...

Page 118: ...cs of IP packets Sysname reset ip statistics 2 1 16 reset tcp statistics Syntax reset tcp statistics View User view Parameters None Description Use the reset tcp statistics command to clear statistics...

Page 119: ...o configure the length of the TCP finwait timer Use the undo tcp timer fin timeout command to restore the default By default the length of the TCP finwait timer is 675 seconds Note that the actual len...

Page 120: ...window Examples Set the length of the TCP synwait timer to 80 seconds Sysname system view Sysname tcp timer syn timeout 80 2 1 20 tcp window Syntax tcp window window size undo tcp window View System...

Page 121: ...d 1 2 1 1 3 nest top most vlan id 1 2 1 1 4 qinq enable 1 3 1 1 5 qinq ethernet type customer tag 1 4 1 1 6 qinq ethernet type service tag 1 5 1 1 7 qos apply policy 1 6 1 1 8 qos policy 1 6 1 1 9 tra...

Page 122: ...r command to associate a traffic behavior with a class Use the undo classifier command to remove the association Note that each class can be associated with only one traffic behavior Related commands...

Page 123: ...omer vlan id command to use the specified customer VLAN ID s as the match criterion Use the undo if match customer vlan id command to remove the match criterion Example Create class class1 and classif...

Page 124: ...enable command to disable basic QinQ for the current Ethernet port By default basic QinQ is disabled for Ethernet port After basic QinQ is enabled on the port frames on this port will be tagged with...

Page 125: ...t type customer tag Syntax qinq ethernet type customer tag hex value undo qinq ethernet type customer tag View System view Parameters hex value Hexadecimal protocol type ID in the range of 0x0001 to 0...

Page 126: ...e tag Syntax qinq ethernet type service tag hex value undo qinq ethernet type service tag View Ethernet port view port group view Parameters hex value Hexadecimal protocol type ID in the range of 0x00...

Page 127: ...e the policy applied on a port or a port group In selective QinQ implementation on SC SA EA series boards a QoS policy can be applied only to incoming traffic Therefore the qos apply policy command ca...

Page 128: ...lassifier behavior qos apply policy Examples Create the policy user1 Sysname system view Sysname qos policy user1 Sysname qospolicy user1 1 1 9 traffic behavior Syntax traffic behavior behavior name u...

Page 129: ...n it matches all the match criteria defined in the class or Specifies the relationship between the match criteria in the class as logical OR That is a packet belongs to the class if it matches a match...

Page 130: ...stp command to disable BPDU tunneling for STP on the port or ports By default the BPDU tunneling for STP is disabled Configured in Ethernet port view the setting is effective on the current port only...

Page 131: ...System view Ethernet port view port group view Parameters None Description Use the bpdu tunnel dot1q enable command to enable BPDU tunneling Use the undo bpdu tunnel dot1q enable command to disable BP...

Page 132: ...ation 1 bpdu tunnel dot1q enable 2 1 3 bpdu tunnel tunnel dmac Syntax bpdu tunnel tunnel dmac mac address undo bpdu tunnel tunnel dmac View System view Parameters mac address Destination multicast MAC...

Page 133: ...boframe enable 1 15 1 1 14 link delay 1 16 1 1 15 loopback 1 17 1 1 16 loopback detection control enable 1 18 1 1 17 loopback detection enable 1 18 1 1 18 loopback detection interval time 1 20 1 1 19...

Page 134: ...t in pps representing packets per second The value range of max pps varies with port types Description Use the broadcast suppression command to configure the broadcast storm suppression ratio for one...

Page 135: ...ow broadcast traffic equivalent to 20 of the total transmission capability of each port to pass and suppress excessive broadcast packets Sysname system view Sysname port group manual group1 Sysname po...

Page 136: ...all the subsequent lines For detailed description on regular expression refer to System Maintaining and Debugging Configuration include Displays the lines that match the regular expression exclude Di...

Page 137: ...2 0 4 DOWN auto auto access 1 Eth2 0 5 DOWN auto auto access 1 Eth2 0 6 DOWN auto auto access 1 Eth2 0 7 DOWN auto auto access 1 The remain output information is omitted Display brief port information...

Page 138: ...negotiation PVID Default VLAN ID Table 1 2 Acronyms for different types of ports Port name Acronyms Ethernet Eth GigabitEthernet GE Ten GigabitEthernet XGE 1 1 4 display interface Syntax display inte...

Page 139: ...autonegotiation link duplex type is autonegotiation Flow control is not enabled The Maximum Frame Length is 1536 Broadcast MAX ratio 100 Unicast MAX ratio 100 Multicast MAX ratio 100 PVID 1 Mdi type a...

Page 140: ...autonegotiation link duplex type is autonegotiation Link duplex type is autonegotiation Flow control is not enabled Flow control is not enabled The Maximum Frame Length The maximum frame length allowe...

Page 141: ...aximum value that can be displayed Last 300 seconds output Average output rate over the last 300 seconds among which z packets sec indicates the average output rate in terms of the average number of t...

Page 142: ...of the display loopback detection command Field Description Loopback detection is running Loopback detection is running Detection interval time is 30 seconds Detection interval is 30 seconds No port...

Page 143: ...play port group manual all Member of group1 Ethernet2 0 4 Ethernet2 0 6 Member of group2 None Table 1 5 Description on the fields of the display port group manual command Field Description The followi...

Page 144: ...torm constrain command Field Description Flow Statistic Interval Interval for generating storm constrain statistics PortName Simplified port index StormType Type of the packets for which storm constra...

Page 145: ...te Description Use the duplex command to configure the duplex mode for an Ethernet port Use the undo duplex command to restore the duplex mode for an Ethernet port to the default By default the duplex...

Page 146: ...e local Ethernet port only when it is enabled on both the local and peer devices Examples Enable flow control on port Ethernet 2 0 1 Sysname system view Sysname interface ethernet 2 0 1 Sysname Ethern...

Page 147: ...terface type interface number to interface type interface number 1 10 where 1 10 indicates that you can specify up to 10 port or port ranges Description Use the group member command to add an Ethernet...

Page 148: ...This argument ranges from 1536 to 9216 in bytes and defaults to 1536 Description Use the jumboframe enable command to enable the forwarding of jumbo frames and set the maximum frame length allowed on...

Page 149: ...p manual group1 group member ethernet 2 0 2 Sysname port group manual group1 group member ethernet 2 0 3 Sysname port group manual group1 jumboframe enable 1 1 14 link delay Syntax link delay delay ti...

Page 150: ...ernal Enables internal loopback test on an Ethernet port Description Use the loopback command to enable Ethernet port loopback test By default Ethernet port loopback test is disabled Note z Ethernet p...

Page 151: ...opback it will be shutdown A Trap message will be sent to the terminal and the corresponding MAC address forwarding entries will be deleted z When the loopback detection is disabled if a port has been...

Page 152: ...ddress If a Trunk port or Hybrid port has been detected with loopback a Trunk message will be sent to the terminal They will be shutdown if the loopback testing function is enabled on them In addition...

Page 153: ...performing port loopback detection Use the undo loopback detection interval time command to restore the default time interval for port loopback detection which is 30 seconds Related commands display l...

Page 154: ...back detection enable Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1 loopback detection enable Sysname Ethernet2 0 1 port link type trunk Sysname Ethernet2 0 1 loopback detection per vlan enab...

Page 155: ...net port per second in pps representing packets per second The value range of max pps varies with port types Description Use the multicast suppression command to configure multicast storm suppression...

Page 156: ...transmission capability to pass through Ethernet 2 0 1 and suppress the excessive multicast packets Sysname system view Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1 multicast suppression 20...

Page 157: ...no manual port group is created Examples Create a manual port group named group1 Sysname system view Sysname port group manual group1 Sysname port group manual group1 1 1 23 reset counters interface S...

Page 158: ...t down an Ethernet port Use the undo shutdown command to turn on Ethernet port In certain circumstances modification to the port parameters does not immediately take effect and therefore you need to s...

Page 159: ...ore Ethernet port data rate By default Ethernet port data rate is automatically negotiated between peer Ethernet ports Note that the speed 1000 command is only applicable to Gigabit Ethernet ports Rel...

Page 160: ...he storm constrain function for specific type of packets and set the upper and lower thresholds Use the undo storm constrain command to disable the storm constrain function for specific type of packet...

Page 161: ...on to be taken when a type of traffic exceeds the corresponding upper threshold Use the undo storm constrain control command to restore the default By default no action is taken when a type of traffic...

Page 162: ...nstrain enable trap Syntax storm constrain enable trap undo storm constrain enable trap View Ethernet port view Parameters None Description Use the storm constrain enable trap command to enable trap m...

Page 163: ...val command to restore the default By default the interval for generating traffic statistics is 10 seconds Note z The interval set by the storm constrain interval command is specifically for the storm...

Page 164: ...thernet port view the configurations take effect only on the current port If you execute this command in port group view the configurations take effect on all ports in the port group Note that when un...

Page 165: ...lation Configuration H3C S7500E Series Ethernet Switches Chapter 1 Ethernet Port Configuration Commands 1 32 Sysname port group manual group1 group member ethernet 2 0 3 Sysname port group manual grou...

Page 166: ...formation about the system default isolation group group1 Examples Display the information about the system default isolation group Sysname display port isolate group Port isolate group information Up...

Page 167: ...a port to the system default isolation group group1 Configured in Ethernet port view the setting is effective on the current port only configured in port group view the setting is effective on all po...

Page 168: ...aggregation interface 1 1 1 1 3 display link aggregation service type 1 3 1 1 4 display link aggregation summary 1 4 1 1 5 display link aggregation verbose 1 6 1 1 6 lacp port priority 1 8 1 1 7 lacp...

Page 169: ...the local system ID also called the actor system ID which comprises the system LACP priority and the system MAC address Examples Display the local system ID Sysname display lacp system id Actor System...

Page 170: ...group Sysname display link aggregation interface ethernet 2 0 1 Flags A LACP_Activity B LACP_timeout C Aggregation D Synchronization E Collecting F Distributing G Defaulted H Expired Ethernet2 0 1 Sel...

Page 171: ...r true and 0 for false z F indicates whether the sending system considers that distribution of outgoing frames is enabled on the link 1 for true and 0 for false z G indicates whether the receive state...

Page 172: ...is displayed Examples Display information about service loop group 1 Sysname display link aggregation service type 1 Service Loop Service Quote Group ID Type Number 1 tunnel 0 Table 1 2 Description o...

Page 173: ...ation Group Type S Static M Manual Loadsharing Type Shar Loadsharing NonS Non Loadsharing Actor ID 0x8000 0000 fcff ff04 AL AL Partner ID Select Unselect Share Master ID Type Ports Ports Type Port 10...

Page 174: ...replaced by none or not displayed at all This is normal because this type of aggregation group has no knowledge of its partner Examples Display detailed information about all the link aggregation gro...

Page 175: ...is enabled on the link 1 for true and 0 for false z F indicates whether the sending system considers that distribution of outgoing frames is enabled on the link 1 for true and 0 for false z G indicat...

Page 176: ...rt priority command to restore the default By default port LACP priority is 32768 Examples Assign LACP priority 64 to a port Sysname system view Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1...

Page 177: ...group ID agg name Link aggregation group name a string of 1 to 32 characters Description Use the link aggregation group description command to configure a name for the specified link aggregation group...

Page 178: ...oup currently being referenced by other modules cannot be removed Related commands display link aggregation summary Examples Create manual link aggregation group 22 Sysname system view Sysname link ag...

Page 179: ...ion group Syntax port link aggregation group agg id undo port link aggregation group View Ethernet port view Parameters agg id Link aggregation group ID Description Use the port link aggregation group...

Page 180: ...tion group and assigned the ID of the link aggregation group In aggregation port group view you can configure aggregation related settings such as STP VLAN QoS GVRP Q in Q BPDU tunnel and MAC address...

Page 181: ...Aggregation Configuration Commands 1 13 Description Use the reset lacp statistics command to clear statistics about LACP on a specified port or ports Related commands display link aggregation interfa...

Page 182: ...Commands 1 1 1 1 MAC Address Table Management Configuration Commands 1 1 1 1 1 display mac address 1 1 1 1 2 display mac address aging time 1 2 1 1 3 display mac address mac learning 1 3 1 1 4 mac ad...

Page 183: ...entries are dropped vlan vlan id Displays MAC address entries of the specified VLAN which is in the range 1 to 4094 count Displays the total number of MAC addresses in the MAC address table mac addres...

Page 184: ...AC address belongs STATE State of a MAC address which could be Config static Config dynamic Learned and Blackhole PORT INDEX Port number Displayed as N A for a blackhole MAC address AGING TIME s Aging...

Page 185: ...type and number Displays MAC address learning status of the specified port Description Use the display mac address mac learning command to display MAC address learning status of the specified or all...

Page 186: ...Ethernet port belongs where vlan id is the specified VLAN ID in the range 1 to 4094 Description Use the mac address command to add or modify a MAC address entry on a specified Ethernet port Use the u...

Page 187: ...MAC addresses match blackhole MAC address entries are dropped mac address Specifies a MAC address in the format of H H H vlan vlan id Specifies the VLAN to which the Ethernet port belongs where vlan i...

Page 188: ...amic entries however will be lost whether you save the configuration or not Related commands display mac address Examples Add a static entry for MAC address 00e0 fc01 0101 All frames destined to this...

Page 189: ...e When global MAC address learning is disabled the learned MAC addresses remain valid until they age out Examples Disable global MAC address learning Sysname system view Sysname mac address mac learni...

Page 190: ...ernet 2 0 1 to 600 Sysname system view Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1 mac address max mac count 600 1 1 8 mac address timer Syntax mac address timer aging seconds no aging undo...

Page 191: ...ment H3C S7500E Series Ethernet Switches Chapter 1 MAC Address Table Management Configuration Commands 1 9 Examples Set the aging timer for dynamic MAC address entries to 500 seconds Sysname system vi...

Page 192: ...Series Ethernet Switches Table of Contents i Table of Contents Chapter 1 IP Source Guard Commands 1 1 1 1 IP Source Guard Commands 1 1 1 1 1 display ip check source 1 1 1 1 2 display user bind 1 2 1 1...

Page 193: ...number ip address ip address Displays the dynamic bindings of an IP address mac address mac address Displays the dynamic bindings of an MAC address in the format of H H H Description Use the display i...

Page 194: ...means that the binding is dynamically obtained from DHCP snooping 2 binding entries queried 2 listed Counts of dynamic binding entries 1 1 2 display user bind Syntax display user bind interface interf...

Page 195: ...o IP address is bound in the entry Vlan Static binding entry does not support VLAN port binding Port Port of the binding Status Type of the binding Static means that the binding is manually configured...

Page 196: ...View Ethernet interface view Parameters ip address ip address Specifies the IP address for the static binding The IP address can only be a Class A Class B or Class C address and can be neither 127 x x...

Page 197: ...Chapter 1 IP Source Guard Commands 1 5 Related commands display user bind Examples Configure a static binding on port Ethernet 2 0 1 Sysname system view Sysname interface ethernet 2 0 1 Sysname Ethern...

Page 198: ...reset stp 1 13 1 1 13 revision level 1 13 1 1 14 stp 1 14 1 1 15 stp bpdu protection 1 15 1 1 16 stp bridge diameter 1 16 1 1 17 stp compliance 1 17 1 1 18 stp config digest snooping 1 18 1 1 19 stp c...

Page 199: ...Series Ethernet Switches Table of Contents ii 1 1 37 stp timer forward delay 1 35 1 1 38 stp timer hello 1 36 1 1 39 stp timer max age 1 37 1 1 40 stp timer factor 1 38 1 1 41 stp transmit limit 1 38...

Page 200: ...ion configuration When you carry out this command MSTP will replace the currently running MST region related parameters with the parameters you have just configured and will perform spanning tree calc...

Page 201: ...n if any of the four MST region related parameters mentioned above are not consistent with those of another switch in the region The H3C series support only the MST region name VLAN to MSTI mapping ta...

Page 202: ...port range in the form of interface type start interface number to interface type end interface number where the end port number must be greater than the start port number slot slot number Displays th...

Page 203: ...rate transmit limit status of the root guard function enabled or disabled BPDU format boundary port non boundary port hello time max age forward delay message age remaining hops whether a port in an a...

Page 204: ...Protection type on the port including root guard loop guard and BPDU guard means port in aggregation group indicates a port in an aggregation group 1 1 4 display stp abnormal port Syntax display stp...

Page 205: ...ROOT Protected root guard action z LOOP Protected loop guard action z Formatcompatibility Protected MSTP BPDU format compatibility protection action 1 1 5 display stp down port Syntax display stp dow...

Page 206: ...tree CIST slot slot number Displays the historic port role calculation information of the card on the specified slot Description Use the display stp history command to view the historic port role cal...

Page 207: ...tion Port Port name Role change A role change of the port Age means that the change was caused by expiry of a configuration BPDU Time Time of port role calculation Port priority Port priority 1 1 7 di...

Page 208: ...mat selector MSTP defined format selector Region name MST region name Revision level Revision level of the MST region Instance Vlans Mapped VLAN to instance mappings in the MST region 1 1 8 display st...

Page 209: ...ve range of instance id is 0 to 31 with 0 representing the common internal spanning tree CIST slot slot number Displays the statistics of TC BPDUs received and sent by all ports on a particular card s...

Page 210: ...tance instance id vlan vlan list View MST region view Parameters instance id spanning tree instance ID ranging from 0 to 31 with 0 representing the CIST vlan vlan list Defines one or multiple VLANs Yo...

Page 211: ...nfiguration Sysname mst region instance 1 vlan 2 1 1 11 region name Syntax region name name undo region name View MST region view Parameters name Name of the MST region a string of 1 to 32 characters...

Page 212: ...ics information The MSTP statistics information includes the numbers of TCN BPDUs configuration BPDUs RST BPDUs and MST BPDUs sent received through the specified port s STP BPDUs and TCN BPDUs are cou...

Page 213: ...gion to 5 Sysname system view Sysname stp region configuration Sysname mst region revision level 5 1 1 14 stp Syntax stp enable disable undo stp View System view Ethernet interface view port group vie...

Page 214: ...vice globally configured in Ethernet interface view the setting is effective on the current port only configured in port group view the setting is effective on all ports in the port group Related comm...

Page 215: ...default network diameter setting By default the network diameter of the switched network is 7 An appropriate setting of hello time forward delay and max age can speed up network convergence The values...

Page 216: ...format automatically Note that z Configured in Ethernet interface view the setting is effective on the current port only configured in port group view the setting is effective on all ports in the por...

Page 217: ...config digest snooping command to disable Digest Snooping The feature is disabled by default Notice that z You need to enable this feature both globally and on ports connected to other vendors device...

Page 218: ...ing tree instance based on the corresponding standard Configured in Ethernet interface view the setting is effective on the current port only configured in port group view the setting is effective on...

Page 219: ...ports in the port group z If a port directly connects to a user terminal rather than another device or a shared LAN segment this port is regarded as an edge port When the network topology changes an...

Page 220: ...command to restore the system default By default the loop guard function is disabled Configured in Ethernet interface view the setting is effective on the current port only configured in port group v...

Page 221: ...ces beyond the maximum hop count are unable to take part in spanning tree calculation and thereby the size of the MST region is limited When the current device becomes the root bridge of the CIST or a...

Page 222: ...Ethernet 2 0 1 Sysname system view Sysname interface GigabitEthernet 2 0 1 Sysname GigabitEthernet2 0 1 stp mcheck 1 1 24 stp mode Syntax stp mode stp rstp mstp undo stp mode View System view Paramete...

Page 223: ...Check on the port s Use the undo stp no agreement check command to disable No Agreement Check on the port s By default No Agreement Check is disabled Note The No Agreement Check feature can take effec...

Page 224: ...cost command will be out of effect Table 1 9 Link speed vs path cost Link speed Duplex state 802 1D 1998 IEEE 802 1t Private standard 0 65535 200 000 000 200 000 10 Mbps Single Port Aggregated Link 2...

Page 225: ...t View Ethernet interface view port group view Parameters auto Specifies automatic detection of the link type force false Specifies the non point to point link type force true Specifies the point to p...

Page 226: ...itEthernet 2 0 1 as connecting to a point to point link Sysname system view Sysname interface GigabitEthernet 2 0 1 Sysname GigabitEthernet2 0 1 stp point to point force true 1 1 28 stp port log Synta...

Page 227: ...ng the CIST priority Port priority in the range of 0 to 240 at the step of 16 0 16 32 for example Description Use the stp port priority command to set the priority of the port s Use the undo stp port...

Page 228: ...ort priority in the range of 0 to 61440 at the step of 4096 namely you can set up to 16 priority values such as 0 4096 8192 on the device Description Use the stp priority command to set the priority o...

Page 229: ...on level is 0 After you enter MST region view you can configure the parameters related to the MST region including the region name VLAN to instance mapping and revision level Examples Enter MST region...

Page 230: ...this command to specify the network diameter of the switched network so that the MSTP compliant device automatically calculates the three timers hello time forward delay and max age As the calculated...

Page 231: ...secondary root bridge can take over the role of the instance of the specified spanning tree instance If you specify more than one secondary root bridge the secondary root bridge with the lowest MAC a...

Page 232: ...he port s Use the undo stp root protection command to disable the root guard function on the port s By default the root guard function is disabled Configured in Ethernet interface view the setting is...

Page 233: ...number Maximum number of times the device deletes forwarding address entries within a certain period of time immediately after it receives TC BPDUs in the range of 1 to 255 Description Use the stp tc...

Page 234: ...e device during state transition The forward delay timer set on the root bridge determines the time interval of state transition If the current device is the root bridge the state transition interval...

Page 235: ...new spanning tree calculation process will be triggered due to timeout The root bridge sends configuration BPDUs at the interval of the hello time set on the device while secondary root bridges use th...

Page 236: ...eds to be re computed The max age timer is not meaningful for MSTIs If the current device is the root bridge of the CIST it determines whether a configuration BPDU has expired based on the configured...

Page 237: ...unding devices at the interval of hello time to check whether any link is faulty Typically if a device does not receive a BPDU from the upstream device within nine times the hello time it will assume...

Page 238: ...s in the port group A larger maximum transmission rate value represents more MSTP packets that the port will send within each hello time but this means that more device resources will be used An appro...

Page 239: ...for each spanning tree instance This command maps each VLAN to the spanning tree instance whose ID is VLAN ID 1 modulo 1 where VLAN ID 1 modulo is the modulo operation for VLAN ID 1 If the modulo valu...

Page 240: ...table protocol 1 13 1 1 8 display ip routing table statistics 1 15 1 1 9 display ipv6 relay route 1 16 1 1 10 display ipv6 relay tunnel 1 17 1 1 11 display ipv6 routing table 1 17 1 1 12 display ipv6...

Page 241: ...ard on S7500E series Ethernet switches does not support IPv6 features 1 1 Routing Overview Commands 1 1 1 display ip relay route Syntax display ip relay route View Any view Parameters None Description...

Page 242: ...nnel Syntax display ip relay tunnel View Any view Parameters None Description Use the display ip relay tunnel command to display recursive tunnel information Examples Display recursive tunnel informat...

Page 243: ...tries other than those specified by the regular expression regular expression Regular expression a string of 1 to 256 characters used for specifying routing entries Table 1 3 Special characters for re...

Page 244: ...routing table Examples Display brief information about active routes in the routing table Sysname display ip routing table Routing Tables Public Destinations 6 Routes 6 Destination Mask Proto Pre Cost...

Page 245: ...Vlan interface2 RelyNextHop 0 0 0 0 Neighbor 0 0 0 0 Tunnel ID 0x0 Label NULL State Active Adv Age 1d06h37m12s Tag 0 Destination 10 10 3 1 32 Protocol Direct Process ID 0 Preference 0 Cost 0 NextHop 1...

Page 246: ...0 0 Neighbor 0 0 0 0 Tunnel ID 0x0 Label NULL State Active NoAdv Age 3d23h08m40s Tag 0 Displayed first are statistics for the whole routing table followed by detailed description of each route in seq...

Page 247: ...dvertises routes based on policies NotInstall Normally among routes to a destination the route with the highest preference is installed into the core routing table and advertised while a NotInstall ro...

Page 248: ...utes permitted by a specified basic ACL This command is intended for the follow up display of routing policies For more information about routing policy refer to IPv4 Routing Configuration Note If the...

Page 249: ...0 NextHop 192 168 0 136 Interface Vlan interface1 RelyNextHop 0 0 0 0 Neighbor 0 0 0 0 Tunnel ID 0x0 Label NULL State Active Adv Age 1d04h26m42s Tag 0 Destination 192 168 0 136 32 Protocol Direct Pro...

Page 250: ...able ip address mask The system ANDs the input destination IP address with the input subnet mask and ANDs the destination IP address in each route entry with the input subnet mask If the two operation...

Page 251: ...24 Static 60 0 0 0 0 0 NULL0 Display route entries by specifying a destination IP address and the longer match keyword Sysname display ip routing table 11 1 1 1 longer match Routing Table Public Summa...

Page 252: ...erbose View Any view Parameters ip prefix name IP Prefix list name a string of 1 to 19 characters verbose Displays detailed routing table information including that for inactive routes With this argum...

Page 253: ...ve routes permitted by IP prefix list test Sysname display ip routing table ip prefix test verbose Routes Matched by Prefix list test Summary Count 2 Destination 2 2 2 0 24 Protocol Direct Process ID...

Page 254: ...display routing information of a specified routing protocol Examples Display brief information about direct routes Sysname display ip routing table protocol direct Public Routing Table Direct Summary...

Page 255: ...public network routing table Examples Display statistics about the routes in the routing table Sysname display ip routing table statistics Proto route active added deleted freed DIRECT 24 4 25 1 0 ST...

Page 256: ...o display IPv6 recursive route information Examples Display IPv6 recursive route information Sysname display ipv6 relay route Total Number of relay route is 1 Dest Mask 192 1 64 Related instance id al...

Page 257: ...r of relay tunnel is 1 Dest Mask 192 0 64 Related instance id always 0 0 1 Table 1 8 display ipv6 relay tunnel command output description Field Description Total Number of Relay tunnel Total number of...

Page 258: ...the current optimal routes Examples Display brief routing table information Sysname display ipv6 routing table Routing Table Destinations 1 Routes 1 Destination 1 128 Protocol Direct NextHop 1 Prefere...

Page 259: ...itted by ACL 2000 Sysname display ipv6 routing table acl 2000 Routes Matched by Access list 2000 Summary Count 2 Destination 1 128 Protocol Direct NextHop 1 Preference 0 Interface InLoop0 Cost 0 Desti...

Page 260: ...re displayed z display ipv6 routing table ipv6 address prefix length longer match The system ANDs the input destination IPv6 address with the input prefix length and ANDs the destination IPv6 address...

Page 261: ...ss1 to IPv6 address2 prefix length1 prefix length2 Prefix length in the range 0 to 128 verbose Displays both active and inactive verbose routing information Without this keyword only brief active rout...

Page 262: ...ctive and inactive verbose routing information Without this keyword only brief active routing information is displayed Description Use the display ipv6 routing table ipv6 prefix command to display rou...

Page 263: ...ormation is displayed Description Use the display ipv6 routing table protocol command to display routes of a specified routing protocol Examples Display brief information about all direct routes Sysna...

Page 264: ...ATIC 3 0 3 0 0 RIPng 0 0 0 0 0 OSPFv3 0 0 0 0 0 IS ISv6 0 0 0 0 0 BGP4 0 0 0 0 0 Total 4 1 4 0 0 Table 1 10 Description on the fields of the display ipv6 routing table statistics command Field Descrip...

Page 265: ...n 1 PrefixLength 128 NextHop 1 Preference 0 RelayNextHop Tag 0H Neighbour ProcessID 0 Interface InLoopBack0 Protocol Direct State Active NoAdv Cost 0 Tunnel ID 0x0 Label NULL Age 22161sec Table 1 11 D...

Page 266: ...stics for the routing protocol which can be bgp direct is is ospf rip or static Description Use the reset ip routing table statistics protocol command to clear the routing statistics of the routing ta...

Page 267: ...es Chapter 1 Routing Overview Commands 1 27 Description Use the reset ipv6 routing table statistics command to clear the route statistics of the routing table Examples Clear statistics for all routing...

Page 268: ...display rip database 2 5 2 1 6 display rip interface 2 6 2 1 7 display rip route 2 7 2 1 8 filter policy export 2 10 2 1 9 filter policy import 2 11 2 1 10 host route 2 11 2 1 11 import route 2 12 2...

Page 269: ...mulative 3 14 3 1 14 display ospf error 3 16 3 1 15 display ospf interface 3 18 3 1 16 display ospf lsdb 3 19 3 1 17 display ospf nexthop 3 21 3 1 18 display ospf peer 3 22 3 1 19 display ospf peer st...

Page 270: ...3 1 56 silent interface 3 57 3 1 57 snmp agent trap enable ospf 3 57 3 1 58 spf schedule interval 3 59 3 1 59 stub 3 60 3 1 60 stub router 3 60 3 1 61 vlink peer 3 61 Chapter 4 IS IS Configuration Com...

Page 271: ...4 37 4 1 34 isis timer csnp 4 37 4 1 35 isis timer hello 4 38 4 1 36 isis timer holding multiplier 4 39 4 1 37 isis timer lsp 4 41 4 1 38 isis timer retransmit 4 41 4 1 39 is level 4 42 4 1 40 is nam...

Page 272: ...5 1 19 display bgp peer 5 17 5 1 20 display bgp routing table 5 19 5 1 21 display bgp routing table as path acl 5 21 5 1 22 display bgp routing table cidr 5 22 5 1 23 display bgp routing table communi...

Page 273: ...5 1 57 peer log change 5 49 5 1 58 peer next hop local 5 49 5 1 59 peer password 5 50 5 1 60 peer preferred value 5 51 5 1 61 peer public as only 5 52 5 1 62 peer reflect client 5 53 5 1 63 peer rout...

Page 274: ...1 6 1 15 display ip extcommunity list 6 12 6 1 16 display route policy 6 12 6 1 17 if match as path 6 13 6 1 18 if match community 6 14 6 1 19 if match cost 6 15 6 1 20 if match extcommunity 6 16 6 1...

Page 275: ...tic routes all View System view Parameters None Description Use the delete static routes all command to delete all static routes When you use this command to delete static routes the system will promp...

Page 276: ...p address must be specified preference preference value Specifies the preference of the static route which is in the range of 1 to 255 and defaults to 60 tag tag value Sets a tag value for the static...

Page 277: ...ce as the output interface for a static route because a broadcast interface may have multiple next hops If you have to do so you must specify the corresponding next hop of the interface at the same ti...

Page 278: ...rence command to restore the default By default the default preference of static routes is 60 Note that z If no preference is specified when configuring a static route the default preference is used z...

Page 279: ...one Description Use the checkzero command to enable the zero field check on RIPv1 messages Use the undo checkzero command to disable the zero field check The zero field check is enabled by default Aft...

Page 280: ...nd to restore the default By default the default metric of redistributed routes is 0 When you use the import route command to redistribute routes from other protocols without specifying a metric the m...

Page 281: ...ult route with a metric of 2 to RIP neighbors Sysname system view Sysname rip 100 Sysname rip 100 default route originate cost 2 Disable default route sending Sysname rip 100 undo default route origin...

Page 282: ...mber of routes changes 0 Number of replies to queries 0 Table 2 1 Description on the fields of the display rip command Field Description Public VPN instance name or Private VPN instance name The RIP p...

Page 283: ...eighbors Verify source Indicates whether the source IP address is checked on the received RIP routing updates Networks Networks enabled with RIP Configured peers Configured neighbors Triggered updates...

Page 284: ...ed interface imported Routes redistributed from other routing protocols 2 1 6 display rip interface Syntax display rip process id interface interface type interface number View Any view Parameters pro...

Page 285: ...ed OFF disabled Input Output Indicates if the interface is allowed to receive Input or send Output RIP messages on is allowed off is not allowed Current packets number Maximum packets number Packets t...

Page 286: ...A 12 Display routing information for network 56 0 0 0 8 of RIP process 1 Sysname display rip 1 route 56 0 0 0 8 Route Flags R RIP T TRIP P Permanent A Aging S Suppressed G Garbage collect Peer 21 0 0...

Page 287: ...te Cost Cost of the route Tag Route tag Flags Indicates the route state Sec Remaining time of the timer corresponding to the route state Display the routing statistics of RIP process 1 Sysname display...

Page 288: ...range of 1 to 65535 You need to specify a process ID when the routing protocol is rip ospf or isis interface type interface number Specifies an interface Description Use the filter policy export comm...

Page 289: ...prefix ip prefix name References an IP prefix list to filter incoming routes The ip prefix name is a string of 1 to 19 characters gateway ip prefix name References an IP prefix list to filter routes...

Page 290: ...many host routes from the same network segment These routes are not helpful for routing and occupy a large amount of network resources You can use the undo host route command to disable receiving of h...

Page 291: ...ributes EBGP routes while the import route bgp allow ibgp command additionally redistributes IBGP routes which may cause routing loops Be cautious when using it Description Use the import route comman...

Page 292: ...outes in load sharing mode Use the undo maximum load balancing command to restore the default By default the maximum number of load balanced routes is 4 Examples Specify the maximum number of load bal...

Page 293: ...hed to the network 129 102 0 0 Sysname system view Sysname rip 100 Sysname rip 100 network 129 102 0 0 2 1 14 peer Syntax peer ip address undo peer ip address View RIP view Parameters ip address IP ad...

Page 294: ...se the undo preference route policy command to restore the default By default the priority of RIP route is 100 You can specify a routing policy using keyword route policy to set the specified priority...

Page 295: ...ndo rip process id View System view Parameters process id RIP process ID in the range of 1 to 65535 The default is 1 Description Use the rip command to create a RIP process and enter RIP view Use the...

Page 296: ...e display current configuration command is used to display system information a 24 character cipher string is displayed as the MD5 key string simple Plain text authentication mode password Plain text...

Page 297: ...ages By default an interface is enabled to receive RIP messages Related commands rip output Examples Disable VLAN interface 10 from receiving RIP messages Sysname system view Sysname interface vlan in...

Page 298: ...metricin 2 2 1 21 rip metricout Syntax rip metricout value undo rip metricout View Interface view Parameters value Additional metric of sent routes in the range of 1 to 16 Description Use the rip met...

Page 299: ...bind MIB operations with a specified RIP process Use the undo rip mib binding command to restore the default By default MIB operations are bound to the RIP process with the smallest process ID Example...

Page 300: ...face10 undo rip output 2 1 24 rip poison reverse Syntax rip poison reverse undo rip poison reverse View Interface view Parameters None Description Use the rip poison reverse command to enable the pois...

Page 301: ...nded to disable it z In special cases make sure it is necessary to disable the split horizon function Note Only the poison reverse function takes effect if both the split horizon and poison reverse fu...

Page 302: ...p version Syntax rip version 1 2 broadcast multicast undo rip version View Interface view Parameters 1 RIP version 1 2 RIP version 2 broadcast Sends RIPv2 messages in broadcast mode multicast Sends RI...

Page 303: ...ceive RIPv2 broadcast messages z Receive RIPv2 multicast messages z Receive RIPv2 unicast messages Examples Configure VLAN interface 10 to broadcast RIPv2 messages Sysname system view Sysname interfac...

Page 304: ...ummary undo summary View RIP view Parameters None Description Use the summary command to enable automatic RIPv2 summarization Natural masks are used to advertise summary routes so as to reduce the siz...

Page 305: ...above four timers z The update timer defines the interval between routing updates z The timeout timer defines the route aging time If no routing update related to a route is received after the aging...

Page 306: ...ce address Syntax validate source address undo validate source address View RIP view Parameters None Description Use the validate source address command to enable the source IP address validation on i...

Page 307: ...s and receive RIPv1 broadcasts RIPv1 unicasts RIPv2 broadcasts RIPv2 multicasts and RIPv2 unicasts Note that z If an interface has an RIP version specified the RIP version takes precedence over the gl...

Page 308: ...ddress of the summary route in dotted decimal format mask Mask of the IP address in dotted decimal format mask length Mask length in the range 0 to 32 bits advertise not advertise Advertises the summa...

Page 309: ...f 100 Sysname ospf 100 area 1 Sysname ospf 100 area 0 0 0 1 network 36 42 10 0 0 0 0 255 Sysname ospf 100 area 0 0 0 1 network 36 42 110 0 0 0 0 255 Sysname ospf 100 area 0 0 0 1 abr summary 36 42 0 0...

Page 310: ...1 external routes the cost defaults to the largest cost among routes that are summarized For Type 2 external routes the cost defaults to the largest cost among routes that are summarized plus 1 Descri...

Page 311: ...view Parameters simple Specifies the simple authentication mode md5 Specifies the MD5 ciphertext authentication mode Description Use the authentication mode command to specify an authentication mode...

Page 312: ...bandwidth reference command to restore the default value The default value is 100 Mbps When links have no cost values configured OSPF calculates their cost values Cost Reference bandwidth value Link...

Page 313: ...Related commands import route Examples Configure the default cost upper limit tag and type as 10 20000 100 and 2 respectively for redistributed external routes Sysname system view Sysname ospf 100 Sy...

Page 314: ...enerate the default route only when the local routing table has a default route cost cost Specifies a cost for the default route in the range 0 to 16777214 The default is 1 type type Specifies a type...

Page 315: ...local routing table Sysname system view Sysname ospf 100 Sysname ospf 100 default route advertise always 3 1 9 description Syntax description description undo description View OSPF view OSPF area view...

Page 316: ...If no process is specified the ABR ASBR information of all OSPF processes is displayed If you use this command on routers in a stub area no ASBR information is displayed Examples Display ABR ASBR info...

Page 317: ...n dotted decimal format mask length Mask length in the range 0 to 32 bits Description Use the display ospf asbr summary command to display information about the redistributed routes that are summarize...

Page 318: ...tal Summary Address Count Total summary route number Net The address of the summary route Mask The mask of the summary route address Tag The tag of the summary route Status The advertisement status of...

Page 319: ...ulti VPN Instance is not enabled Applications Supported MPLS Traffic Engineering SPF schedule interval 5 0 5000 LSA generation interval 5 0 5000 LSA arrival interval 1000 Default ASE Parameter Metric...

Page 320: ...te priority ASE Route Preference External route priority SPF Computation count SPF computation count of the OSPF process RFC1583 Compatible Compatible with routing rules defined in RFC1583 Graceful re...

Page 321: ...s id OSPF process ID in the range 1 to 65535 Description Use the display ospf cumulative command to display OSPF statistics Use of this command is helpful for troubleshooting Examples Display OSPF sta...

Page 322: ...type Input Packets received Output Packets sent Hello Hell packet DB Description Database Description packet Link State Req Link State Request packet Link State Update Link State Update packet Link St...

Page 323: ...display ospf error OSPF Process 1 with Router ID 192 168 80 100 OSPF Packet Error Statistics 0 OSPF Router ID confusion 0 OSPF bad packet 0 OSPF bad version 0 OSPF bad checksum 0 OSPF bad area ID 0 OS...

Page 324: ...OSPF Neighbor state low Packets received in low neighbor state OSPF transmit error Packets with error when being transmitted OSPF interface down Shutdown times of the interface OSPF unknown neighbor...

Page 325: ...all Display the OSPF information of all interfaces interface type interface number Interface type and interface number Description Use the display ospf interface command to display OSPF interface inf...

Page 326: ...nssa opaque link opaque area opaque as link state id originate router advertising router id self originate View Any view Parameters process id OSPF process ID in the range 1 to 65535 brief Displays b...

Page 327: ...equence Metric Router 192 168 0 2 192 168 0 2 474 36 80000004 0 Router 192 168 0 1 192 168 0 1 21 36 80000009 0 Network 192 168 0 1 192 168 0 1 321 32 80000003 0 Sum Net 192 168 1 0 192 168 0 1 321 28...

Page 328: ...Mask 255 255 255 0 Attached Router 192 168 1 1 Attached Router 192 168 2 1 Table 3 8 Description on the fields of the display ospf 1 lsdb network command Field Description Type LSA type LS ID DR IP ad...

Page 329: ...rocess 1 with Router ID 192 168 0 1 Routing Nexthop Information Next Hops Address Refcount IntfAddr Intf Name 192 168 0 1 1 192 168 0 1 Vlan interface1 192 168 0 2 1 192 168 0 1 Vlan interface1 192 16...

Page 330: ...ied detailed information about the neighbor is displayed If neither interface nor neighbor ID is specified brief information about neighbors of the specified OSPF process or all OSPF processes is disp...

Page 331: ...r 00 12 59 Authentication Sequence Authentication sequence number Neighbor state change count Count of neighbor state changes Display brief OSPF neighbor information Sysname display ospf peer OSPF Pro...

Page 332: ...0 0 1 0 0 0 0 0 0 0 1 1 Total 0 0 0 0 0 0 0 1 1 Table 3 12 Description on the fields of the display ospf peer statistics command Field Description Area ID Area ID Down Under this state neighbor initia...

Page 333: ...ay ospf request queue Syntax display ospf process id request queue interface type interface number neighbor id View Any view Parameters process id OSPF process ID in the range 1 to 65535 interface typ...

Page 334: ...s Neighbor interface IP address Interface Local interface IP address Area Area ID Request list Request list information Type LSA type LinkState ID Link state ID AdvRouter Advertising router Sequence L...

Page 335: ...pe LinkState ID AdvRouter Sequence Age Router 2 2 2 2 2 2 2 2 80000004 1 Network 12 18 0 1 2 2 2 2 80000003 1 Sum Net 12 18 1 0 2 2 2 2 80000002 2 Table 3 14 Description on the fields of the display o...

Page 336: ...information of all OSPF processes is displayed Examples Display OSPF routing information Sysname display ospf routing OSPF Process 1 with Router ID 192 168 1 2 Routing Tables Routing for Network Dest...

Page 337: ...ess id OSPF process ID in the range 1 to 65535 Description Use the display ospf vlink command to display OSPF virtual link information If no OSPF process is specified the OSPF virtual link information...

Page 338: ...e route cost State Interface state Type Type virtual link Transit Area Transit area ID Timers Values of timers hello dead poll NBMA retransmit and interface transmission delay 3 1 24 enable log Syntax...

Page 339: ...s incoming LSAs export Filters outgoing LSAs Description Use the filter command to configure incoming outgoing summary LSAs filtering on an ABR Use the undo filter command to disable summary LSA filte...

Page 340: ...pf isis or bgp If no protocol is specified all redistributed routes are filtered process id Process ID which is required when the protocol is rip ospf or isis in the range 1 to 65535 Description Use t...

Page 341: ...Description Use the filter policy import command to configure the filtering of routes calculated from received LSAs Use the undo filter policy import command to disable the filtering By default the fi...

Page 342: ...distributes routes from the protocol which can be direct static rip ospf isis or bgp process id Process ID which is optional when the protocol is rip ospf or isis in the range 1 to 65535 allow ibgp Al...

Page 343: ...he ASBR to the external route s destination A Type 2 external route is an EGP route which has low credibility so OSPF considers the cost from the ASBR to a Type 2 external route is much bigger than th...

Page 344: ...terminal until the feature is disabled Examples Disable the logging of neighbor state changes for OSPF process 100 Sysname system view Sysname ospf 100 Sysname ospf 100 undo log peer change 3 1 31 ls...

Page 345: ...ation interval maximum interval initial interval incremental interval undo lsa generation interval View OSPF view Parameters maximum interval Maximum LSA generation interval in seconds in the range 1...

Page 346: ...o lsdb overflow limit View OSPF view Parameters number Specifies the upper limit of external LSAs in the LSDB in the range 1 to 1000000 Description Use the lsdb overflow limit command to specify the u...

Page 347: ...equal cost routes as 2 Sysname system view Sysname ospf 100 Sysname ospf 100 maximum load balancing 2 3 1 35 maximum routes Syntax maximum routes external inter intra number undo maximum routes exter...

Page 348: ...and to enable OSPF on the interface attached to the specified network in the area Use the undo network command to disable OSPF on an interface By default an interface neither belongs to any area nor r...

Page 349: ...hat is also the ASBR of the OSPF routing domain to disable redistributing routes in Type7 LSAs into the NSSA area making sure that routes can be redistributed correctly no summary Usable only on an NS...

Page 350: ...process No OSPF process is enabled by default You can enable multiple OSPF processes on a router and specify different Router IDs for these processes Examples Enable OSPF process 100 and specify Route...

Page 351: ...is a string of up to 24 characters MD5 HMAC MD5 authentication For plain type password a plain password is a string of up to 16 characters for cipher type password a plain password is a string of up...

Page 352: ...ysname interface vlan interface 10 Sysname Vlan interface10 ospf authentication mode simple cipher abc 3 1 40 ospf cost Syntax ospf cost value undo ospf cost View Interface view Parameters value OSPF...

Page 353: ...n the range 0 to 255 Description Use the ospf dr priority command to set the priority for DR BDR election on an interface Use the undo ospf dr priority command to restore the default value By default...

Page 354: ...ospf mib binding 100 Bind the first enabled OSPF process to MIB operation Sysname system view Sysname undo ospf mib binding 3 1 43 ospf mtu enable Syntax ospf mtu enable undo ospf mtu enable View Inte...

Page 355: ...on its link layer protocol z For Ethernet and FDDI the default network type is broadcast z For ATM FR HDLC and X 25 the default network type is NBMA z For PPP LAPB and POS the default network type is...

Page 356: ...t the dead interval Use the undo ospf timer dead command to restore the default The dead interval defaults to 40s for Broadcast P2P interfaces and defaults to 120s for P2MP and NBMA interfaces If an i...

Page 357: ...he hello interval defaults to 10s for P2P and Broadcast interfaces and defaults to 30s for P2MP and NBMA interfaces The shorter the hello interval is the faster the topology converges and the more res...

Page 358: ...ce Related commands ospf timer hello Examples Set the poll timer interval on the current interface to 130 seconds Sysname system view Sysname interface vlan interface 10 Sysname Vlan interface10 ospf...

Page 359: ...Parameters seconds LSA transmission delay in seconds in the range 1 to 3600 Description Use the ospf trans delay command to set the LSA transmission delay on an interface Use the undo ospf trans delay...

Page 360: ...broadcast network However since routers on the network cannot find neighbors via broadcasting hello packets you need to specify neighbors and neighbor DR priorities on the routers After startup a rou...

Page 361: ...t The priority of OSPF internal routes defaults to 10 and the priority of OSPF external routes defaults to 150 If a routing policy is specified priorities defined by the routing policy will apply to m...

Page 362: ...ospf counters 3 1 53 reset ospf process Syntax reset ospf process id process View User view Parameters process id OSPF process ID in the range 1 to 65535 Description Use the reset ospf process command...

Page 363: ...tribution for all OSPF processes Examples Restart route redistribution Sysname reset ospf redistribution 3 1 55 rfc1583 compatible Syntax rfc1583 compatible undo rfc1583 compatible View OSPF view Para...

Page 364: ...face command to disable an interface or all interfaces from sending OSPF packets Use the undo silent interface command to restore the default By default an interface sends OSPF packets A disabled inte...

Page 365: ...choverflow Information about cases approaching LSDB overflow lsdboverflow LSDB overflow information maxagelsa LSA max age information nbrstatechange Neighbor state change information originatelsa Info...

Page 366: ...OSPF SPF calculation interval Use the undo spf schedule interval command to restore the default The interval defaults to 5 seconds Based on its LSDB an OSPF router calculates the shortest path tree wi...

Page 367: ...known as a totally stub area Description Use the stub command to configure an area as a stub area Use the undo stub command to remove the configuration No area is stub area by default To configure an...

Page 368: ...onfigure a stub router Sysname system view Sysname ospf 100 Sysname ospf 100 stub router 3 1 61 vlink peer Syntax vlink peer router id hello seconds retransmit seconds trans delay seconds dead seconds...

Page 369: ...ers For cipher type a plain password is a string of up to 16 characters and a cipher password is a string of up to 24 characters Description Use the vlink peer command to configure a virtual link Use...

Page 370: ...Command Manual IPv4 Routing H3C S7500E Series Ethernet Switches Chapter 3 OSPF Configuration Commands 3 63 Sysname ospf 100 area 0 0 0 2 vlink peer 1 1 1 1...

Page 371: ...ters simple Specifies to send the password in plain text md5 Specifies to send the password encrypted with MD5 password Password to be set For simple authentication mode the password must be plain tex...

Page 372: ...ation mode is specified by default that is the system will neither authenticate incoming Level 1 packets nor set password for outgoing Level 1 packets With area authentication mode configured the syst...

Page 373: ...ands bandwidth reference cost style Examples Enable interfaces of IS IS process 1 to calculate interface cost automatically Sysname system view Sysname isis Sysname isis 1 auto cost enable 4 1 3 bandw...

Page 374: ...th is in the range of 623 M to 2500 M the interface cost is 20 and the default interface cost of 10 is used for any other bandwidths Related commands auto cost enable Examples Configure the bandwidth...

Page 375: ...ameters narrow Specifies to receive and send only packets of narrow cost style The narrow cost ranges from 0 to 63 wide Specifies to receive and send only packets of wide cost style The wide cost rang...

Page 376: ...olicy route policy name View IS IS view Parameters route policy name Specifies the name of a routing policy a string of 1 to 19 characters level 1 Specifies the level of the default route as Level 1 l...

Page 377: ...Generate a default route in L2 LSP Sysname system view Sysname isis Sysname isis 1 default route advertise 4 1 7 display isis brief Syntax display isis brief process id View Any view Parameters proce...

Page 378: ...e period of LSP lsp refresh Refresh period of LSP Interval between SPFs Interval between SPF calculations 4 1 8 display isis interface Syntax display isis interface verbose process id View Any view Pa...

Page 379: ...ion for ISIS 1 Interface Vlan interface1 Id IPV4 State IPV6 State MTU Type DIS 001 Up Down 1497 L1 L2 No No SNPA Address 000f e200 2201 IP Address 192 168 0 136 Secondary IP Address es IPV6 Link Local...

Page 380: ...SNP packets Hello Timer Value Interval for sending Hello packets Hello Multiplier Value Number of invalid Hello packets Lsp Timer Value Interval for sending LSP packets Cost Cost Priority Preference R...

Page 381: ...s ________________________ Feature Name Active ISIS Protocol YES IPV6 YES RESTART YES TE YES MI YES Resource Name Current Value Max Processes Resource 100 Max Paths Resource 4 Max IPv4 Rt Resource 131...

Page 382: ...Rt Resource Maximum IPv6 routes supported 4 1 10 display isis lsdb Syntax display isis lsdb l1 l2 level 1 level 2 lsp id LSPID lsp name lspname local verbose process id View Any view Parameters l1 lev...

Page 383: ...ength ATT P OL bbbb cccc dddd 00 00 0x0000001d 0x165 820 36 1 0 0 Self LSP Self LSP Extended ATT Attached P Partition OL Overload Table 4 4 Description on the fields of the display isis lsdb command F...

Page 384: ...terface10 isis mesh group 100 Sysname Vlan interface10 quit Sysname interface vlan interface 20 Sysname Vlan interface20 isis mesh group 100 Display the configuration information of IS IS mesh group S...

Page 385: ...Sysname isis 1 display isis name table Name table information for ISIS 1 System ID Hostname Type 6789 0000 0001 RUTA DYNAMIC 0000 0000 0041 RUTB STATIC Table 4 6 Description on the fields of the displ...

Page 386: ...m Id 1010 1020 1031 Interface Vlan interface1 Circuit Id 1010 1020 1031 01 State Up HoldTime 7s Type L1 L1L2 PRI 64 Area Address es 10 0001 Peer IP Address es 192 168 0 156 Uptime 00 05 45 Adj Protoco...

Page 387: ...ipv4 Displays IS IS IPv4 routing information the default verbose Displays IS IS detailed IPv4 routing information process id Specifies an IS IS process ID in the range of 1 to 65535 level 1 Displays...

Page 388: ...SPs U Up Down Bit Set Table 4 8 Description on the fields of the display isis route command Field Description IPV4 Destination IPv4 destination address IntCost Interior routing cost ExtCost Exterior r...

Page 389: ...FTRIG_PERIODIC 2 0 13 44 0 L1 IS_SPFTRIG_PERIODIC 2 0 13 55 43 L2 IS_SPFTRIG_PERIODIC 2 0 13 55 43 L1 IS_SPFTRIG_PERIODIC 2 0 11 54 12 L2 IS_SPFTRIG_PERIODIC 2 0 11 54 12 L1 IS_SPFTRIG_PERIODIC 2 0 12...

Page 390: ...Description Use the display isis statistics command to display the statistic information of IS IS process including the number of routes learned from other IS IS routers the number of routes redistrib...

Page 391: ...s Level 2 Statistics Level 2 Statistics Learnt routes information Number of learnt IPv4 routes Number of learnt IPv6 routes IPv4 Imported Routes Redistributed IPv4 routes z Static z Direct z ISIS z BG...

Page 392: ...o specify the routing domain authentication mode and a password The password in the specified mode is inserted into all outgoing Level 2 packets LSP CSNP and PSNP and is used for authenticating the in...

Page 393: ...rip process id Filters outgoing routes redistributed from a RIP process The process ID is in the range of 1 to 65535 bgp Filters outgoing routes redistributed from BGP direct Filters outgoing redistr...

Page 394: ...lter incoming routes a string of 1 to 19 characters Description Use the filter policy import command to configure IS IS to filter incoming routing information Use the undo filter policy import command...

Page 395: ...command to enable IS IS LSP fast flooding and configure related parameters including the maximum number of LSPs to be sent and the delay time before flooding Use the undo flash flood command to disabl...

Page 396: ...cost of routes within an area the external type indicates the cost of routes between areas The type is external by default The keywords are valid only when the cost type is narrow narrow compatible o...

Page 397: ...name tag tag undo import route isis level 2 into level 1 View IS IS view Parameters acl number Specifies the number of an ACL that is used to filter redistributed routes ranging from 2000 to 3999 ip p...

Page 398: ...level 2 into level 1 4 1 23 isis Syntax isis process id undo isis process id View System view Parameters process id Process ID ranging from 1 to 65535 The default is 1 Description Use the isis command...

Page 399: ...be a string of 24 characters such as _ TT8F Y 5SQ Q MAF4 1 level 1 Specifies to set the password for Level 1 level 2 Specifies to set the password for Level 2 ip Specifies the system to check IP relat...

Page 400: ...1 Specifies to set up only level 1 adjacency on the interface level 1 2 Specifies to set up level 1 2 adjacency on the interface level 2 Specifies to set up only level 2 adjacency on the interface De...

Page 401: ...vel 1 4 1 26 isis circuit type Syntax isis circuit type p2p undo isis circuit type View Interface view Parameters p2p Specifies the interface s network type as P2P Description Use the isis circuit typ...

Page 402: ...1 to 16777215 level 1 Applies the cost to Level 1 level 2 Applies the cost to Level 2 Description Use the isis cost command to set the link cost of an interface for SPF calculation Use the undo isis c...

Page 403: ...command takes effect only on a router with the dynamic hostname process enabled This command is not supported on a Point to Point interface Note This command is not available in the loopback interfac...

Page 404: ...oopback interface view Examples Configure the level 2 DIS priority as 127 for VLAN interface 10 Sysname system view Sysname interface vlan interface 10 Sysname Vlan interface10 isis dis priority 127 l...

Page 405: ...mber ranging from 1 to 4294967295 mesh blocked Blocks the interface from flooding LSPs to make it send LSPs only after receiving requests Description Use the isis mesh group command to add the interfa...

Page 406: ...e Vlan interface10 isis mesh group 3 4 1 32 isis silent Syntax isis silent undo isis silent View Interface view Parameters None Description Use the isis silent command to disable the interface from se...

Page 407: ...ace to send small Hello packets without padding field Use the undo isis small hello command to disable the feature An interface sends standard Hello packets by default Note This command is not availab...

Page 408: ...t The default CSNP interval is 10 seconds Note z If no level is specified the CSNP interval applies to both Level 1 and Level 2 of the current ISIS process If a level is specified the interval applies...

Page 409: ...ecified the interval applies to the level z This command is not supported on the loopback interface z The broadcast link distinguishes between Level 1 and Level 2 packets so you need specify intervals...

Page 410: ...is three You can specify the number of hello intervals for Level 1 and Level 2 neighbors respectively on a broadcast network For a point to point link there is only one kind of Hello packet so you ne...

Page 411: ...100 for the broadcast interface and 11 for point to point interface Description Use the isis timer lsp command to configure the interval for sending link state packets on the interface Use the undo is...

Page 412: ...se this command over a broadcast link where no LSP response is required Related commands isis timer lsp Note z This command is not available in loopback interface view z Configure a proper time to avo...

Page 413: ...all the routers as either Level 1 or Level 2 if there is only one area because there is no need for all routers to maintain two identical databases at the same time In this case you are recommended t...

Page 414: ...a remote IS map sys name Specifies a name for the remote IS a string of 1 to 64 characters Description Use the is name map command to map a name to a remote IS Each remote IS system ID corresponds to...

Page 415: ...Sysname isis 1 is snmp traps enable 4 1 43 log peer change Syntax log peer change undo log peer change View IS IS view Parameters None Description Use the log peer change command to enable logging on...

Page 416: ...s the fragment extension mode to both Level 1 and Level 2 LSPs Note The mode 1 and level 1 2 keywords are used by default Description Use the lsp fragments extend command to enable LSP fragment extens...

Page 417: ...1 LSP packets level 2 Applies the size to Level 2 LSP packets Note If neither Level 1 nor Level 2 is specified in the command the configured maximum size applies to the current IS IS level Description...

Page 418: ...es Configure the maximum size of received LSPs Sysname system view Sysname isis Sysname isis 1 lsp length receive 1024 4 1 47 maximum load balancing Syntax maximum load balancing number undo maximum l...

Page 419: ...g process Use the undo network entity command to delete a NET No NET is configured by default A NET is a network service access point NSAP and it is in the range of 8 to 20 bytes for IS IS A NET has t...

Page 420: ...e for IS IS protocol Use the undo preference command to restore the default By default the IS IS protocol preference is 15 If a routing policy is specified in this command the preference if any set by...

Page 421: ...to clear old LSPs Related commands area authentication mode domain authentication mode Examples Clear all IS IS data structure information Sysname reset isis all 4 1 51 reset isis peer Syntax reset i...

Page 422: ...artup The time has an interval from 5 to 86400 seconds The default is 1200 seconds allow Specifies to allow advertising address prefixes By default no address prefixes are allowed to be advertised whe...

Page 423: ...size command to specify the duration for each sliced SPF calculation Use the undo spf slice size command to restore the default By default the duration of each sliced SPF calculation is 10 millisecond...

Page 424: ...only the routes redistributed to the Level 2 area Description Use the summary command to configure a summary route Use the undo summary command to remove a summary route No summarization is configured...

Page 425: ...erval is 2 seconds Note z If only the maximum interval is specified this maximum interval is the LSP generation interval z If both the maximum and initial intervals are specified the system can adjust...

Page 426: ...ew IS IS view Parameters seconds Specifies the LSP maximum aging time in seconds ranging from 1 to 65535 Description Use the timer lsp max age command to set the LSP maximum aging time for the current...

Page 427: ...o timer lsp refresh to restore the default The default is 900 seconds Using this feature you can keep LSPs in synchronization for the whole area Related commands timer lsp max age Note To refresh LSPs...

Page 428: ...en the network changes are infrequent the SPF calculation interval decreases to the minimum interval When the network changes become frequent the calculation interval is increased by inc interval 2n 2...

Page 429: ...command to configure a virtual system ID for the IS IS process No extended LSPs are generated without the virtual system ID Use the undo virtual system command to remove the virtual system ID By defa...

Page 430: ...e ip address mask mask length as set attribute policy route policy name detail suppressed origin policy route policy name suppress policy route policy name undo aggregate ip address mask mask length V...

Page 431: ...s the summary route but it suppresses the advertisement of all the more specific routes To summarize only some specific routes use the peer filter policy command suppress policy Used to create a summa...

Page 432: ...tes for load balancing Use the undo balance command to disable load balancing By default no load balancing is configured Unlike IGP BGP has no explicit metric for making load balancing decision Instea...

Page 433: ...ATH as a factor when selecting the best route Examples In BGP view ignore AS_PATH in route selection Sysname system view Sysname bgp 100 Sysname bgp bestroute as path neglect 5 1 4 bestroute compare m...

Page 434: ...med confederation command to enable the comparison of the MED for paths from confederation peers to select the optimal route Use the undo bestroute med confederation command to disable the comparison...

Page 435: ...iew Sysname bgp 100 Sysname bgp 5 1 7 compare different as med Syntax compare different as med undo compare different as med View BGP view Parameters None Description Use the compare different as med...

Page 436: ...ections in a large AS You can split the AS into several sub ASs and each sub AS remains fully meshed These sub ASs form a confederation Key IGP attributes of a route such as the next hop MED local pre...

Page 437: ...RFC3065 in the confederation Use the undo confederation nonstandard command to restore the default By default all routers in the confederation comply with RFC3065 All devices should be configured wit...

Page 438: ...ASs are configured Before this configuration the confederation id command must be used to specify the confederation for the sub ASs If the undo confederation peer as command without the as number list...

Page 439: ...oute policy name Routing policy name a string of 1 to 19 characters half life reachable half life unreachable reuse suppress and ceiling are mutually dependent Once any one is configured all the other...

Page 440: ...ame bgp 100 Sysname bgp default ipv4 unicast 5 1 13 default local preference Syntax default local preference value undo default local preference View BGP view Parameters value Default local preference...

Page 441: ...erent from local preference MED is exchanged between ASs and will stay in the AS once it enters the AS The route with a lower MED is preferred When a router running BGP obtains several routes with an...

Page 442: ...efault routes To do so use the import route command Related commands import route Examples In BGP view allow default route redistribution from OSPF into BGP Sysname system view Sysname bgp 100 Sysname...

Page 443: ...te AS AS number of peer group type Type of the BGP peer group IBGP or EBGP Maximum allowed prefix number Maximum allowed prefix number Threshold Threshold value Configured hold timer value Holdtime in...

Page 444: ...Description Use the display bgp network command to display routing information that has been advertised Examples Display routing information that has been advertised Sysname display bgp network BGP L...

Page 445: ...command to display information about BGP paths Examples Display information about BGP paths matching the AS path regular expression Sysname display bgp paths 200 Address Hash Refcount MED Path Origin...

Page 446: ...e View Any view Parameters ip address IP address of an peer to be displayed in dotted decimal notation group name Name of a peer group to be displayed a string of 1 to 47 characters log info Displays...

Page 447: ...ng policy configured No routing policy is configured Table 5 5 Description on the fields of the display bgp peer command Field Description Peer IP address of the peer Local Local router ID Type Peer t...

Page 448: ...ties Optional capabilities enabled by the peer Peer Preferred Value Preferred value specified for the routes from the peer Routing policy configured Local routing policy 5 1 20 display bgp routing tab...

Page 449: ...command Field Description Total Number of Routes Total Number of Routes BGP Local router ID BGP Local router ID Status codes Status codes valid best d damped h history i internal IGP s summary suppres...

Page 450: ...ay bgp routing table as path acl Syntax display bgp routing table as path acl as path acl number View Any view Parameters as path acl number Displays routing information permitted by the AS path ACL w...

Page 451: ...ocal router ID is 20 20 20 1 Status codes valid best d damped h history i internal s suppressed S Stale Origin i IGP e EGP incomplete Network NextHop MED LocPrf PrefVal Path Ogn 40 40 40 0 24 30 30 30...

Page 452: ...specified BGP community Sysname display bgp routing table community 11 22 BGP Local router ID is 10 10 10 1 Status codes valid best d damped h history i internal s suppressed S Stale Origin i IGP e EG...

Page 453: ...Stale Origin i IGP e EGP incomplete Network NextHop MED LocPrf PrefVal Path Ogn 30 30 30 0 24 0 0 0 0 0 0 i 40 40 40 0 24 0 0 0 0 0 0 i Refer to Table 5 6 for description on the fields above 5 1 25 d...

Page 454: ...eter View Any view Parameters None Description Use the display bgp routing table dampening parameter command to display BGP route dampening parameters Related commands dampening Examples Display BGP r...

Page 455: ...routes originating from different autonomous systems Examples Display BGP routes originating from different ASs Sysname display bgp routing table different origin as BGP Local router ID is 2 2 2 2 St...

Page 456: ...display BGP route flap statistics If no parameter is specified this command displays all BGP route flap statistics Examples Display BGP route flap statistics Sysname display bgp routing table flap in...

Page 457: ...ion network in dotted decimal notation mask length Mask length in the range 0 to 32 statistic Displays route statistics Description Use the display bgp routing table peer command to display BGP routin...

Page 458: ...P routing information matching the specified AS regular expression Examples Display BGP routing information matching AS regular expression 300 Sysname display bgp routing table regular expression 300...

Page 459: ...command Field Description Total number of routes Total number of routes 5 1 32 ebgp interface sensitive Syntax ebgp interface sensitive undo ebgp interface sensitive View BGP view Parameters None Desc...

Page 460: ...buted from an ISIS process The ID is in the range 1 to 65535 ospf process id Filters outgoing routes redistributed from the OSPF process with an ID from 1 to 65535 rip process id Filters outgoing rout...

Page 461: ...aracters Description Use the filter policy import command to configure the filtering of incoming routing information Use the undo filter policy import command to disable the filtering By default incom...

Page 462: ...er 10 1 1 1 group test Sysname bgp peer 10 1 2 1 group test 5 1 36 import route Syntax import route protocol process id med med value route policy route policy name undo import route protocol process...

Page 463: ...ORIGIN attribute of routes redistributed with the import route command is incomplete Examples In BGP view redistribute routes from RIP Sysname system view Sysname bgp 100 Sysname bgp import route rip...

Page 464: ...configure the EBGP route to use the local preference so the route is hard to become the optimal route route policy name Routing policy applied to the route The name is a string of 1 to 19 characters...

Page 465: ...e the undo peer advertise community command to disable the community attribute advertisement to a peer peer group By default no community attribute is advertised to any peer group peer Related command...

Page 466: ...name bgp 100 Sysname bgp peer test advertise ext community 5 1 41 peer allow as loop Syntax peer group name ip address allow as loop number undo peer group name ip address allow as loop View BGP view...

Page 467: ...a peer group a string of 1 to 47 characters ip address IP address of a peer as number AS number of the peer or peer group in the range 1 to 65535 Description Use the peer as number command to specify...

Page 468: ...or outgoing to a peer peer group based on a specified AS path ACL Use the undo peer as path acl command to remove the configuration By default no AS path ACL filtering is configured Related commands i...

Page 469: ...number 100 Sysname bgp peer 160 89 2 33 capability advertise conventional 5 1 45 peer capability advertise route refresh Syntax peer group name ip address capability advertise route refresh undo peer...

Page 470: ...undo peer connect interface command to restore the default Note that To establish multiple BGP connections to another BGP router you need to specify on the local router the respective source interfac...

Page 471: ...oute is advertised to a peer peer group With this command used the router unconditionally sends a default route with the next hop being itself to the peer peer group regardless of whether the default...

Page 472: ...roup test as ISP1 Sysname system view Sysname bgp 100 Sysname bgp peer test description ISP1 5 1 49 peer ebgp max hop Syntax peer group name ip address ebgp max hop hop count undo peer group name ip a...

Page 473: ...View BGP view Parameters ip address IP address of a peer Description Use the peer enable command to enable the specified peer Use the undo peer enable command to disable the specified peer By default...

Page 474: ...te The peer fake as command is only applicable to an EBGP peer or peer group Examples In BGP view configure a fake AS number of 200 for the peer group test Sysname system view Sysname bgp 100 Sysname...

Page 475: ...p peer test filter policy 2000 export 5 1 53 peer group Syntax peer ip address group group name as number as number undo peer ip address group group name View BGP view Parameters group name Name of a...

Page 476: ...establishment with a peer or peer group is allowed After the peer ignore command is executed the system disables the session with the specified peer or peer group and clears all the related routing in...

Page 477: ...iew use the IP prefix list list 1 to filter routes advertised to the peer group test Sysname system view Sysname bgp 100 Sysname bgp peer test ip prefix list1 export 5 1 56 peer keep all routes Syntax...

Page 478: ...eer Description Use the peer log change command to enable the logging of session state and event information for a specified peer or peer group Use the undo peer log change command to remove the confi...

Page 479: ...er password Syntax peer group name ip address password cipher simple password undo peer group name ip address password View BGP view Parameters group name Name of a peer group a string of 1 to 47 char...

Page 480: ...1 100 1 password simple aabbcc 5 1 60 peer preferred value Syntax peer group name ip address preferred value value undo peer group name ip address preferred value View BGP view Parameters group name...

Page 481: ...e Examples In BGP view configure the preferred value as 50 for routes from peer 131 108 1 1 Sysname system view Sysname bgp 100 Sysname bgp peer 131 108 1 1 preferred value 50 5 1 61 peer public as on...

Page 482: ...route reflector and specify a peer peer group as a client Use the undo peer reflect client command to remove the configuration By default neither route reflector nor client is configured Related comm...

Page 483: ...o restore the default The number is unlimited by default Examples In BGP view set the number of routes that can be received from peer 129 140 6 6 to 10000 Sysname system view Sysname bgp 109 Sysname b...

Page 484: ...Sysname bgp 100 Sysname bgp peer test route policy test policy export 5 1 65 peer route update interval Syntax peer group name ip address route update interval seconds undo peer group name ip address...

Page 485: ...ess of a peer Description Use the peer substitute as command to replace the AS number of a peer peer group in the AS_PATH attribute with the local AS number Use the undo peer substitute as command to...

Page 486: ...rval must be at least three times the keepalive interval Related commands timer Examples In BGP view configure the keepalive interval and holdtime interval for peer group test as 40s and 120s Sysname...

Page 487: ...Sysname bgp 100 Sysname bgp preference 20 20 200 5 1 69 reflect between clients Syntax reflect between clients undo reflect between clients View BGP view Parameters None Description Use the reflect be...

Page 488: ...or cluster id command to remove the configured cluster ID By default each route reflector uses its router ID as the cluster ID Usually there is only one route reflector in a cluster The router ID of t...

Page 489: ...pply a newly configured routing policy To perform BGP soft reset all routers in the network must support route refresh If a router not supporting route refresh exists in the network you need to config...

Page 490: ...User view Parameters ip address Destination IP address of a route mask Mask in dotted decimal notation mask length Mask length in the range 0 to 32 Description Use the reset bgp dampening command to c...

Page 491: ...sk length in the range 0 to 32 Description Use the reset bgp flap info command to clear the flap statistics of routes matching the specified filter The flap statistics of all the routes will be cleare...

Page 492: ...n specify a router ID manually If not the system selects an IP address as the router ID The selection sequence is the highest IP address among loopback interface addresses if not available then the hi...

Page 493: ...imported using the network command can be summarized automatically z With this feature enabled BGP limits the subnets redistribution from IGP to reduce the size of routing table Examples In BGP view...

Page 494: ...ation between BGP and IGP routes Sysname system view Sysname bgp 100 Sysname bgp synchronization 5 1 79 timer Syntax timer keepalive keepalive hold holdtime undo timer View BGP view Parameters keepali...

Page 495: ...3C S7500E Series Ethernet Switches Chapter 5 BGP Configuration Commands 5 66 Examples Configure keepalive interval and holdtime interval as 40s and 120s Sysname system view Sysname bgp 100 Sysname bgp...

Page 496: ...1 10 replace undo apply as path View Routing policy view Parameters as number Autonomous system number in the range of 1 to 65535 1 10 Indicates you can enter as number up to 10 times replace Replaces...

Page 497: ...view Parameters comm list number Community list number The basic community list number ranges from 1 to 99 The advanced community list number ranges from 100 to 199 Description Use the apply comm list...

Page 498: ...tes Routes with this attribute are not advertised out the sub autonomous system no advertise Sets the no advertise community attribute for matched BGP routes Routes with this attribute are not adverti...

Page 499: ...cost command to remove the clause configuration No cost is set for routing information by default Related commands if match interface if match acl if match ip prefix if match ip next hop if match cos...

Page 500: ...rmit If a route matches tag 8 set the cost type for the route to IS IS internal route Sysname system view Sysname route policy policy1 permit node 10 Sysname route policy if match tag 8 Sysname route...

Page 501: ...ply extcommunity rt 100 2 additive 6 1 7 apply isis apply isis level 1 level 1 2 level 2 undo apply isis View Routing policy view Parameters level 1 Redistributes routes into IS IS level 1 area level...

Page 502: ...ce to BGP routes Use the undo apply local preference command to remove the clause configuration No local preference is set for BGP routing information by default Related commands route policy Examples...

Page 503: ...mples Create routing policy policy1 with node 10 matching mode as permit If a route matches AS path ACL 1 set the origin for the route to IGP Sysname system view Sysname route policy policy1 permit no...

Page 504: ...ed value undo apply preferred value View Routing policy view Parameters preferred value Preferred value in the range of 0 to 65535 Description Use the apply preferred value command to apply a preferre...

Page 505: ...icy apply ip address next hop apply local preference apply cost apply origin Examples Create routing policy policy1 with node 10 matching mode as permit If a route matches OSPF external route type 1 s...

Page 506: ...ist basic community list number adv community list number View Any view Parameters basic community list number Basic community list number in the range of 1 to 99 adv community list number Advanced co...

Page 507: ...n will be displayed if no ext comm list number is specified Related commands ip extcommunity list if match extcommunity apply extcommunity Examples Display the information of BGP extended community li...

Page 508: ...tch as path Syntax if match as path as path number 1 16 undo if match as path as path number 1 16 View Routing policy view Parameters as path number AS path list number in the range of 1 to 256 1 16 I...

Page 509: ...uting policy view Parameters basic community list number Basic community list number in the range of 1 to 99 adv community list number Advanced community list number in the range of 100 to 199 whole m...

Page 510: ...cost to match ranging from 0 to 4294967295 Description Use the if match cost command to specify a cost for matching against the cost of a route Use the undo if match cost command to remove the match c...

Page 511: ...attribute of routing information Use the undo if match extcommunity command to remove the match criterion The match criterion is not configured by default Examples Create a routing policy named policy...

Page 512: ...rface as VLAN interface 1 Sysname system view Sysname route policy policy1 permit node 10 Sysname route policy if match interface vlan interface 1 6 1 22 if match route type Syntax if match route type...

Page 513: ...1 23 if match tag Syntax if match tag value undo if match tag View Routing policy view Parameters value Specifies a tag value ranging from 0 to 4294967295 Description Use the if match tag command to m...

Page 514: ...d to compare with the AS path attribute a regular expression is a formula comprised of characters for example 200 100 which matches AS path attribute fields that start with AS200 and end with AS100 Th...

Page 515: ...num Advanced community list number in the range 100 to 199 regular expression Regular expression of advanced community attribute a string of 1 to 50 characters deny Specifies the matching mode of the...

Page 516: ...extcommunity list ext comm list number deny permit rt route target 1 16 undo ip extcommunity list ext comm list number View System view Parameters ext comm list number Extended community list number...

Page 517: ...routing policy node as deny If a route satisfies all the if match clauses of the node it does not pass the filtering of the node and will not go to the next node node node number Node number in the r...

Page 518: ...hop ip address undo apply ip address next hop View Routing policy view Parameters ip address IP address of the next hop Description Use the apply ip address next hop command to set a next hop for IPv...

Page 519: ...p prefix name is specified statistics for all IPv4 prefix lists will be displayed Related commands ip ip prefix Examples Display the statistics of IPv4 prefix list abc Sysname display ip ip prefix abc...

Page 520: ...tch ip next hop if match cost if match tag route policy apply ip address next hop apply cost apply local preference apply origin apply tag Examples Create routing policy policy1 with node 10 matching...

Page 521: ...n whose next hop address matches IP prefix list p1 Sysname system view Sysname route policy policy1 permit node 10 Sysname route policy if match ip next hop ip prefix p1 6 2 5 if match ip prefix Synta...

Page 522: ...ered is in the range of the IPv4 prefix list the route passes the IPv4 prefix list without needing to enter the next item for testing If the route to be filtered is not in the prefix range it will ent...

Page 523: ...ed then the IP address to be filtered must satisfy both of them If ip address mask length is specified as 0 0 0 0 0 then only the default route is matched With the keyword and argument combination ip...

Page 524: ...ommand Manual IPv4 Routing H3C S7500E Series Ethernet Switches Chapter 6 Routing Policy Configuration Commands 6 29 Examples Clear the statistics of IPv4 prefix list abc Sysname reset ip ip prefix abc...

Page 525: ...2 1 7 filter policy export 2 7 2 1 8 filter policy import 2 8 2 1 9 import route 2 9 2 1 10 maximum load balancing 2 10 2 1 11 preference 2 10 2 1 12 ripng 2 11 2 1 13 ripng default route 2 12 2 1 14...

Page 526: ...st 3 30 3 1 26 ospfv3 dr priority 3 31 3 1 27 ospfv3 mtu ignore 3 32 3 1 28 ospfv3 timer dead 3 32 3 1 29 ospfv3 timer hello 3 33 3 1 30 ospfv3 timer retransmit 3 34 3 1 31 ospfv3 trans delay 3 34 3 1...

Page 527: ...y bgp ipv6 routing table community list 5 16 5 1 18 display bgp ipv6 routing table dampened 5 17 5 1 19 display bgp ipv6 routing table dampening parameter 5 18 5 1 20 display bgp ipv6 routing table di...

Page 528: ...eer route update interval 5 46 5 1 55 peer substitute as 5 46 5 1 56 peer timer 5 47 5 1 57 preference 5 48 5 1 58 reflect between clients 5 49 5 1 59 reflector cluster id 5 50 5 1 60 refresh bgp ipv6...

Page 529: ...static routes all Syntax delete ipv6 static routes all View System view Parameters None Description Use the delete ipv6 static routes all command to delete all static routes including the default rout...

Page 530: ...terface nexthop address Next hop IPv6 address preference value Route preference value in the range of 1 to 255 The default is 60 Description Use the ipv6 route static command to configure an IPv6 stat...

Page 531: ...checkzero View RIPng view Parameters None Description Use the checkzero command to enable the zero field check on RIPng packets Use the undo checkzero command to disable the zero field check The zero...

Page 532: ...istributed routes Use the undo default cost command to restore the default By default the default metric of redistributed routes is 0 The specified default metric applies to routes redistributed by th...

Page 533: ...time 120 sec s Garbage Collect time 240 sec s Number of periodic updates sent 0 Number of trigger updates sent 0 Table 2 1 Description on the fields of the display ripng command Field Description RIPn...

Page 534: ...normal RIPng update messages Examples Display the active routes in the database of RIPng process 100 Sysname display ripng 100 database 2001 7B 2 2A1 5DE 64 cost 4 Imported 1 13 120 cost 4 Imported 1...

Page 535: ...ce interface type interface number View Any view Parameters process id RIPng process ID in the range of 1 to 65535 interface type interface number Specified an interface Description Use the display ri...

Page 536: ...nterface advertises only default route Originate means that the default route and other RIPng routes are advertised z Off indicates that no default route is advertised or the garbage collect time expi...

Page 537: ...G The route is in the Garbage collect state 2 1 7 filter policy export Syntax filter policy acl6 number ipv6 prefix ipv6 prefix name export protocol process id undo filter policy export protocol proc...

Page 538: ...tem view Sysname ripng 100 Sysname ripng 100 filter policy ipv6 prefix Filter2 export 2 1 8 filter policy import Syntax filter policy acl6 number ipv6 prefix ipv6 prefix name import undo filter policy...

Page 539: ...specified the metric is the default metric specified by the default cost command route policy route policy name Specifies a routing policy by its name with 1 to 19 characters allow ibgp Optional keywo...

Page 540: ...command to specify the maximum number of equal cost routes for load balancing Use the undo maximum load balancing command to restore the default By default the maximum number of equal cost routes for...

Page 541: ...word can set a priority for routes filtered in by the routing policy z If a priority is set in the routing policy the priority applies to matched routes and the priority set by the preference command...

Page 542: ...cates that only the IPv6 default route 0 is advertised via the interface originate Indicates that the IPv6 default route 0 is advertised without suppressing other routes cost Metric of the advertised...

Page 543: ...Vlan interface101 ripng default route originate 2 1 14 ripng enable Syntax ripng process id enable undo ripng enable View Interface view Parameters process id RIPng process ID in the range of 1 to 65...

Page 544: ...ripng metricout Examples Specify the additional routing metric as 12 for RIPng routes received by VLAN interface 100 Sysname system view Sysname interface vlan interface 100 Sysname Vlan interface100...

Page 545: ...ng poison reverse View Interface view Parameters None Description Use the rip poison reverse command to enable the poison reverse function Use the undo rip poison reverse command to disable the poison...

Page 546: ...re that it is necessary to disable the split horizon function before doing so Note If both the poison reverse and split horizon functions are enabled only the poison reverse function takes effect Exam...

Page 547: ...pv6 address 2001 200 3EFF FE11 6770 64 Sysname Vlan interface100 ripng summary address 2001 200 35 2 1 20 timers Syntax timers garbage collect garbage collect value suppress suppress value timeout tim...

Page 548: ...e garbage collect timer defines the interval from when the metric of a route becomes 16 to when it is deleted from the routing table During the garbage collect timer length RIPng advertises the route...

Page 549: ...ination IPv6 address in the range 0 to 128 This argument specifies the number of consecutive 1s of the prefix which defines the network ID not advertise Specifies not to advertise the summary IPv6 rou...

Page 550: ...View OSPFv3 view Parameters area id ID of an area a decimal integer in the range of 0 to 4294967295 and changed to IPv4 address format by the system or an IPv4 address Description Use the area comman...

Page 551: ...buted routes to advertise them throughout the whole AS If multiple OSPFv3 processes are available use of this command takes effect for the current process only Examples Specify the default cost for re...

Page 552: ...system view Sysname ospfv3 Sysname ospfv3 1 area 1 Sysname ospfv3 1 area 0 0 0 1 stub Sysname ospfv3 1 area 0 0 0 1 default cost 60 3 1 5 display ospfv3 Syntax display ospfv3 process id View Any view...

Page 553: ...s checksum Sum 0x0000 Number of AS Scoped Unknown LSA 0 Number of LSA originated 0 Number of LSA received 0 Number of areas in this router is 0 Table 3 1 Description on the fields of the display ospfv...

Page 554: ...face type and interface number statistic Displays the interface statistics Description Use the display ospfv3 interface command to display OSPFv3 interface information Examples Display OSPFv3 interfac...

Page 555: ...nterface state Priority DR priority of the interface Designated Router ID ID of the designated router on this link Backup Designated Router ID ID of the backup designated router on this link Interface...

Page 556: ...dress originate router router id The ID of the advertising router total Displays the LSA statistics information in the LSDB Description Use the display ospfv3 lsdb command to display OSPFv3 LSDB infor...

Page 557: ...Router LSA Router LSA Link Number of links Network LSA Network LSA Intra Area Prefix LSA Type 9 LSA Reference Type of referenced LSA Display Link local LSA information in the LSDB Sysname display osp...

Page 558: ...2001 2 64 Prefix Options 0 Table 3 4 Description on the fields of the display ospfv3 lsdb command Field Description LS age Age of LSA LS Type Type of LSA Originating Router Originating Router LS Seq...

Page 559: ...ntraPre Link ASE 0 0 0 0 2 1 1 0 1 0 0 0 1 1 0 1 0 1 Total 3 1 2 0 2 3 0 Table 3 5 Descriptions on the fields of the display ospfv3 lsdb statistic command Field Description Area ID Area ID Router Rout...

Page 560: ...op command Field Description Neighbor Id Neighboring router ID Next hop Next hop address Interface Outbound interface RefCount Reference count 3 1 10 display ospfv3 peer Syntax display ospfv3 process...

Page 561: ...ss 1 OSPFv3 Area 0 0 0 2 Neighbor ID Pri State Dead Time Interface Instance ID 3 3 3 3 1 Full Backup 00 00 38 Vlan400 0 Table 3 7 Description on the fields of the display ospfv3 peer command Field Des...

Page 562: ...35 seconds Database Summary List Number of LSAs sent in DD packet Link State Request List Number of LSAs in the link state request list Link State Retransmission List Number of LSAs in the link state...

Page 563: ...e initial DD sequence number and master slave relationship of the two parties Exchange In this state the router exchanges DD packets with the neighbor Loading In this state the router sends LSRs to re...

Page 564: ...he LSA statistics of the OSPFv3 link state request list Description Use the display ospfv3 request list command to display OSPFv3 link state request list information If no process is specified link st...

Page 565: ...Interface name Neighbor Neighbor router ID LSA Count Number of LSAs in the request list 3 1 13 display ospfv3 retrans list Syntax display ospfv3 process id retrans list external inter prefix inter rou...

Page 566: ...A statistics of the OSPFv3 link state retransmission list Description Use the display ospfv3 retrans list command to display OSPFv3 link state retransmission list If no process is specified link state...

Page 567: ...trans list statistics command Field Description Interface Interface name Neighbor Neighbor ID LSA Count Number of LSAs in the retransmission request list 3 1 14 display ospfv3 routing Syntax display o...

Page 568: ...oute I Intra area route E2 Type 2 external route Seleted route OSPFv3 Router with ID 1 1 1 1 Process 1 Destination 2001 64 Type I Cost 1 NextHop directly connected Interface Vlan100 Table 3 14 Descrip...

Page 569: ...isplay ospfv3 statistic View Any view Parameters None Description Use the display ospfv3 statistic command to display outbound inbound OSPFv3 packet statistics on associated interface s Examples Displ...

Page 570: ...eters process id Displays the topology information of an OSPFv3 process The process ID ranges from 1 to 65535 area Displays the topology information of the specified area area id ID of an area a decim...

Page 571: ...d Specifies the ID of an OSPFv3 process ranging from 1 to 65535 Description Use the display ospfv3 vlink command to display OSPFv3 virtual link information If no process is specified virtual link info...

Page 572: ...0 Retransmit 5 Hello due in 00 00 02 Send hello packets in 2 seconds Adjacency state Adjacency state 3 1 18 filter policy export Syntax filter policy acl6 number ipv6 prefix ipv6 prefix name export is...

Page 573: ...lter policy export command filters only routes redistributed by the import route command If the import route command is not configured to redistribute routes from other protocols and other OSPFv3 proc...

Page 574: ...the IPv6 prefix list abc Sysname system view Sysname ip ipv6 prefix abc permit 2002 1 64 Sysname ospfv3 1 Sysname ospfv3 1 filter policy ipv6 prefix abc import 3 1 20 import route Syntax import route...

Page 575: ...racters Caution Using the import route bgp4 command redistributes only EBGP routes while using the import route bgp4 allow ibgp command redistributes both EBGP and IBGP routes Description Use the impo...

Page 576: ...ging on neighbor state changes of OSPFv3 process 100 Sysname system view Sysname ospfv3 100 Sysname ospfv3 100 undo log peer change 3 1 22 maximum load balancing Syntax maximum load balancing maximum...

Page 577: ...anging from 1 to 65535 The process ID defaults to 1 Description Use the ospfv3 command to enable an OSPFv3 process and enter OSPFv3 view Use the undo ospfv3 command to disable an OSPFv3 process The sy...

Page 578: ...default is 0 Description Use the ospfv3 area command to enable an OSPFv3 process on the interface and specify the area for the process Use the undo ospfv3 area command to disable an OSPFv3 process OSP...

Page 579: ...ospfv3 dr priority priority instance instance id undo ospfv3 dr priority instance instance id View Interface view Parameters priority DR priority in the range 0 to 255 instance id ID of the instance...

Page 580: ...ore the default configuration MTU is not ignored by default Examples Configure VLAN interface 10 that belongs to instance 1 to ignore MTU Sysname system view Sysname interface vlan interface 10 Sysnam...

Page 581: ...em view Sysname interface vlan interface 10 Sysname Vlan interface10 ospfv3 timer dead 80 instance 1 3 1 29 ospfv3 timer hello Syntax ospfv3 timer hello seconds instance instance id undo ospfv3 timer...

Page 582: ...an instance Use the undo ospfv3 timer retransmit command to restore the default The interval defaults to 5 seconds After sending a LSA to its neighbor the device waits for an acknowledgement If receiv...

Page 583: ...This configuration is important for low speed networks Examples Configure the transmission delay as 3 seconds for VLAN interface 10 in instance 1 Sysname system view Sysname interface vlan interface...

Page 584: ...ce of 150 for OSPFv3 routes Sysname system view Sysname OSPFv3 Sysname OSPFv3 1 preference 150 3 1 33 router id Syntax router id router id undo router id View OSPFv3 view Parameters router id 32 bit r...

Page 585: ...erface command to disable the specified interface from sending OSPFv3 packets Use the undo silent interface command to restore the default An interface is able to send OSPFv3 packets by default Multip...

Page 586: ...o configure the delay interval and hold interval for OSPFv3 SPF calculation Use the undo spf timers command to restore the default The delay interval and hold interval default to 5s and 10s An OSPFv3...

Page 587: ...nfigure OSPFv3 area 1 as a stub area Sysname system view Sysname ospfv3 1 Sysname ospfv3 1 area 1 Sysname ospfv3 1 area 0 0 0 1 stub 3 1 37 vlink peer Syntax vlink peer router id hello seconds retrans...

Page 588: ...e and configure a virtual link Use the undo vlink peer command to remove a virtual link For a non backbone area without a direct connection to the backbone area or for a backbone area that cannot main...

Page 589: ...er IS IS configuration commands z At present the LSQ1GP12EA boards in the S7500E series do not support IPv6 4 1 1 display isis route ipv6 Syntax display isis route ipv6 level 1 level 2 verbose process...

Page 590: ...ption on the fields of the display isis route ipv6 command Field Description Destination IPv6 destination address prefix PrefixLen Length of the prefix Flag Flags Flag of routing information status D...

Page 591: ...tion on the fields of the display isis route ipv6 verbose command Field Description IPV6 Dest IPv6 destination address Cost Value of cost Flag Flags Flag of routing information status D This is a dire...

Page 592: ...oute advertise command to disable generating a default route No IPv6 IS IS default route is generated by default With a routing policy you can configure IPv6 IS IS to generate the default route that m...

Page 593: ...ort protocol process id View IS IS view Parameters acl6 number Number of a basic or advanced IPv6 ACL used to filter redistributed routes before advertisement ranging from 2000 to 3999 ipv6 prefix nam...

Page 594: ...ied routes redistributed from all protocols are filtered before advertisement z If a protocol is specified only routes redistributed from the protocol are filtered before advertisement Related command...

Page 595: ...ntax ipv6 import route protocol process id allow ibgp cost cost level 1 level 2 level 1 2 route policy route policy name tag tag undo ipv6 import route protocol process id View IS IS view Parameters p...

Page 596: ...ibuted routes as routes to destinations outside the local routing domain You can specify a cost and a level for redistributed routes Caution Using the import route bgp4 allow ibgp command will redistr...

Page 597: ...95 Description Use the ipv6 import route isisv6 level 2 into level 1 to enable IPv6 IS IS route leaking from Level 2 to Level 1 Use the undo ipv6 import route isisv6 level 2 into level 1 command to di...

Page 598: ...Sysname system view Sysname isis 100 Sysname isis 100 ipv6 maximum load balancing 2 4 1 9 ipv6 preference Syntax ipv6 preference route policy route policy name preference undo ipv6 preference View IS...

Page 599: ...x IPv6 prefix of the summary route prefix length Length of the IPv6 prefix in the range of 0 to 128 avoid feedback Specifies to avoid learning summary routes via routing calculation generate_null0_rou...

Page 600: ...isis ipv6 enable View Interface view Parameters process id IS IS process ID ranging from 1 to 65535 The default is 1 Description Use the isis ipv6 enable command to enable IPv6 for the specified IS IS...

Page 601: ...ad balancing Its value is in the range 1 to 4 When it is set to 1 load balancing is disabled Description Use the balance command to configure the number of routes participating in IPv6 BGP load balanc...

Page 602: ...Use the undo bestroute as path neglect command to configure the IPv6 BGP router to use the AS_PATH during best route selection By default the router takes AS_PATH as a factor when selecting the best...

Page 603: ...re med 5 1 4 bestroute med confederation Syntax bestroute med confederation undo bestroute med confederation View IPv6 address family view Parameters None Description Use the bestroute med confederati...

Page 604: ...eers in different ASs Use the undo compare different as med command to disable the comparison The comparison is disabled by default If there are several paths available for one destination the path wi...

Page 605: ...penalty value from 1001 to 20000 The value must be bigger than the suppress value By default the value is 16000 route policy name Routing policy name a string of 1 to 19 characters half life reachabl...

Page 606: ...default local preference Use the undo default local preference command to restore the default value By default the default local preference is 100 Use this command to affect IPv6 BGP route selection E...

Page 607: ...alue In the case that all other conditions are the same the system first selects the route with the smaller MED value as the best route for the autonomous system Examples Devices A and B belong to AS1...

Page 608: ...play bgp ipv6 group command to display IPv6 peer group information If no ipv6 group name is specified information about all peer groups is displayed Examples Display the information of the IPv6 peer g...

Page 609: ...um time between advertisement runs Minimum interval between advertisements Peer Preferred Value Preferred value of the routes from the peer No routing policy is configured No routing policy is configu...

Page 610: ...cut 2002 64 2001 64 Short cut Table 5 2 Description on the fields of the display bgp ipv6 network command Field Description BGP Local Router ID BGP Local Router ID Local AS Number Local AS Number Net...

Page 611: ...ding the ASs it has passed for avoiding routing loops Origin attribute of the route which can take on one of the following values i Indicates the route is interior to the AS Summary routes and routes...

Page 612: ...me display bgp ipv6 peer BGP Local router ID 20 0 0 1 local AS number 100 Total number of peers 1 Peers in established state 1 Peer V AS MsgRcvd MsgSent OutQ PrefRcv Up Down State 20 21 4 200 17 19 0...

Page 613: ...table command to display IPv6 BGP routing table information Examples Display the IPv6 BGP routing table Sysname display bgp ipv6 routing table Total Number of Routes 2 BGP Local router ID is 30 30 30...

Page 614: ...ix length NextHop Next Hop MED MULTI_EXIT_DISC attribute LocPrf Local preference value Path AS_PATH attribute recording the ASs the packet has passed to avoid routing loops PrefVal Preferred value Lab...

Page 615: ...nd to display routes filtered through the specified AS path ACL Examples Display routes filtered through the AS path ACL 20 Sysname display bgp ipv6 routing table as path acl 20 BGP Local router ID is...

Page 616: ...federation is configured whole match Displays the exactly matched routes Description Use the display bgp ipv6 routing table community command to display the routing information of the specified commun...

Page 617: ...splay bgp ipv6 routing table community list command to view the routing information matching the specified IPv6 BGP community list Examples Display the routing information matching the specified IPv6...

Page 618: ...Origin i IGP e EGP incomplete d Network 111 PrefixLen 64 From 122 1 Reuse 00 29 34 Path Ogn 200 Table 5 6 Description on the fields of the display bgp ipv6 routing table dampened command Field Descrip...

Page 619: ...ess Time Ceiling Value Upper limit of penalty value Reuse Value Reuse Value HalfLife Time Half life Time Suppress Limit Suppress value 5 1 20 display bgp ipv6 routing table different origin as Syntax...

Page 620: ...ers as regular expression AS path regular expression to be matched as path acl number Number of the specified AS path ACL to be matched ranging from 1 to 256 ipv6 address IPv6 address of a route to be...

Page 621: ...atistic View Any view Parameters ipv6 address Specifies the IPv6 peer to be displayed advertised routes Routing information advertised to the specified peer received routes Routing information receive...

Page 622: ...able regular expression Syntax display bgp ipv6 routing table regular expression as regular expression View Any view Parameters as regular expression AS regular expression Description Use the display...

Page 623: ...isplay bgp ipv6 routing table statistic command to display IPv6 BGP routing statistics Examples Display IPv6 BGP routing statistics Sysname display bgp ipv6 routing table statistic Total Number of Rou...

Page 624: ...se the undo filter policy export command to cancel filtering outbound routes By default no outbound routing information is filtered If a protocol is specified only routes redistributed from the specif...

Page 625: ...bgp af ipv6 filter policy 2001 import 5 1 27 group Syntax group ipv6 group name internal external undo group ipv6 group name View IPv6 address family view Parameters ipv6 group name Name of an IPv6 p...

Page 626: ...lue to redistributed routes The value is in the range 0 to 4294967295 If not specified the cost of the redistributed route is used as its MED in the IPv6 BGP routing domain route policy name Name of a...

Page 627: ...fix length short cut route policy route policy name undo network ipv6 address prefix length short cut View IPv6 address family view Parameters ipv6 address IPv6 address prefix length Prefix length of...

Page 628: ...1 peer advertise community Syntax peer ipv6 group name ipv6 address advertise community undo peer ipv6 group name ipv6 address advertise community View IPv6 address family view Parameters ipv6 group n...

Page 629: ...oup Use the undo peer advertise ext community command to remove the configuration By default no extended community attribute is advertised to a peer peer group Examples Advertise the extended communit...

Page 630: ...1 as 2 Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 peer 1 1 allow as loop 2 5 1 34 peer as number Syntax peer ipv6 group name ipv6 address as number as number undo...

Page 631: ...ame of an IPv6 peer group a string of 1 to 47 characters ipv6 address IPv6 address of a peer as path acl number Number of an AS path ACL in the range 1 to 256 import Filters incoming routes export Fil...

Page 632: ...tise route refresh command to enable IPv6 BGP route refresh Use the undo peer capability advertise route refresh command to disable the function By default route refresh is enabled Examples Disable ro...

Page 633: ...ter the respective source interfaces for establishing TCP connections to the peers on the peering BGP router otherwise the local BGP router may fail to establish TCP connections to the peers when usin...

Page 634: ...system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 peer 1 2 3 4 default route advertise 5 1 39 peer description Syntax peer ipv6 group name ipv6 address description description te...

Page 635: ...peer group a string of 1 to 47 characters ipv6 address IPv6 address of a peer hop count Maximum hop count in the range 1 to 255 By default the value is 64 Description Use the peer ebgp max hop comman...

Page 636: ...ure a fake local AS number for a peer or peer group Use the undo peer fake as command to remove the configuration By default no fake local AS number is configured for a peer or peer group Examples Con...

Page 637: ...lter routes advertised to the peer 1 2 3 4 Sysname system view Sysname acl ipv6 number 2000 Sysname acl6 basic 2000 rule permit source 2001 1 64 Sysname acl6 basic 2000 quit Sysname bgp 100 Sysname bg...

Page 638: ...meters ipv6 group name Name of a peer group a string of 1 to 47 characters ipv6 address IPv6 address of a peer Description Use the peer ignore command to terminate the session to a peer or peer group...

Page 639: ...er group export Applies the filtering policy to routes advertised to the specified peer peer group Description Use the peer ipv6 prefix command to specify an IPv6 prefix list to filter routes incoming...

Page 640: ...ation from peer 1 2 3 4 Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 peer 1 2 3 4 keep all routes 5 1 47 peer log change Syntax peer ipv6 group name ipv6 address log...

Page 641: ...figure the next hop of routes advertised to a peer peer group as the local router Use the undo peer next hop local command to restore the default By default the system sets the next hop of routes adve...

Page 642: ...nd peer ipv6 group name ipv6 address preferred value value to set a preferred value for routes from a peer the routing policy sets a non zero preferred value for routes matching it Other routes not ma...

Page 643: ...private AS number is from 64512 to 65535 Examples Carry no private AS number in BGP updates sent to the peer 1 2 3 4 Sysname system view Sysname bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 pe...

Page 644: ...of a peer limit Specifies the upper limit of IPv6 address prefixes that can be received from the peer or peer group The limit varies with devices percentage Specifies the percentage of routes to gener...

Page 645: ...cription Use the peer route policy command to apply a routing policy to routes incoming from or outgoing to a peer or peer group Use the undo peer route policy command to remove the configuration By d...

Page 646: ...seconds Description Use the peer route update interval command to specify the interval for sending the same update to a peer peer group Use the undo peer route update interval command to restore the...

Page 647: ...e bgp 100 Sysname bgp ipv6 family Sysname bgp af ipv6 peer 1 2 3 4 substitute as 5 1 56 peer timer Syntax peer ipv6 group name ipv6 address timer keepalive keepalive hold holdtime undo peer ipv6 group...

Page 648: ...d 180 5 1 57 preference Syntax preference external preference internal preference local preference route policy route policy name undo preference View IPv6 address family view Parameters external pref...

Page 649: ...t between clients undo reflect between clients View IPv6 address family view Parameters None Description Use the reflect between clients command to enable route reflection between clients Use the undo...

Page 650: ...ult a route reflector uses its router ID as the cluster ID Usually there is only one route reflector in a cluster so the router ID of the route reflector identifies the cluster If multiple route refle...

Page 651: ...ly a new available policy without tearing down BGP connections To perform IPv6 BGP soft reset all routers in the network should support route refresh If a router not supporting route refresh exists in...

Page 652: ...View User view Parameters ipv6 address IPv6 address prefix length Prefix length of the address in the range 0 to 128 Description Use the reset bgp ipv6 dampening command to clear dampened IPv6 BGP rou...

Page 653: ...d the flap statistics of all the routes will be cleared Examples Clear the flap statistics of the routes matching AS path ACL 10 Sysname system view Sysname ip as path 10 permit 100 200 Sysname quit S...

Page 654: ...zation Syntax synchronization undo synchronization View IPv6 address family view Parameters None Description Use the synchronization command to enable the synchronization between IPv6 BGP and IGP Use...

Page 655: ...and holdtime interval Use the undo timer command to restore the default By default the keepalive and holdtime intervals are 60s and 180s respectively Note that z Timer configured using the peer timer...

Page 656: ...apply ipv6 next hop Syntax apply ipv6 next hop ipv6 address undo apply ipv6 next hop View Routing policy view Parameters ipv6 address Next hop IPv6 address Description Use the apply ipv6 next hop com...

Page 657: ...statistics of the specified IPv6 prefix list If no IPv6 prefix list is specified the statistics of all the IPv6 prefix lists will be displayed Examples Display the statistics of all the IPv6 prefix l...

Page 658: ...n acl acl6 number Specifies the number of an IPv6 ACL for filtering in the range 2000 to 3999 for address and 2000 to 2999 for next hop and route source prefix list ipv6 prefix name Specifies the name...

Page 659: ...nor enters the next node for test if not the route will enter the next item test ipv6 address prefix length Specifies an IPv6 prefix and prefix length with prefix length being in the range 0 to 128 W...

Page 660: ...h between 32 bits and 64 bits Sysname system view Sysname ip ipv6 prefix abc permit 0 greater equal 32 less equal 64 Deny the IPv6 addresses with prefix as 3FFE D00 32 prefix length greater than or eq...

Page 661: ...1 1 13 display udp ipv6 statistics 1 21 1 1 14 dns server ipv6 1 22 1 1 15 ipv6 1 23 1 1 16 ipv6 address 1 23 1 1 17 ipv6 address auto link local 1 24 1 1 18 ipv6 address eui 64 1 25 1 1 19 ipv6 addr...

Page 662: ...42 1 1 45 tcp ipv6 window 1 42 Chapter 2 Dual Stack Configuration Commands 2 1 2 1 Dual Stack Configuration Commands 2 1 2 1 1 ipv6 2 1 2 1 2 ipv6 address 2 1 2 1 3 ipv6 address auto link local 2 2 2...

Page 663: ...espectively A and B vary with devices while C ranges from 0 to 1023 1 1 IPv6 Basics Configuration Commands 1 1 1 display dns ipv6 dynamic host Syntax display dns ipv6 dynamic host View Any view Parame...

Page 664: ...xceeds the maximum length the first 21 characters will be displayed 1 1 2 display dns ipv6 server Syntax display dns ipv6 server dynamic View Any view Parameters dynamic Displays the information of IP...

Page 665: ...nterface on the DNS server whose IP address is an IPv6 link local address 1 1 3 display ipv6 fib Syntax display ipv6 fib slot number ipv6 address View Any view Parameters slot number Number of the slo...

Page 666: ...forwarded PrefixLength Prefix length of the destination address NextHop Next hop of the route to the destination Flag Route flag z U Usable route z G Gateway route z H Host route z B Black hole route...

Page 667: ...v6 address of a host 1 1 5 display ipv6 interface Syntax display ipv6 interface brief interface type interface number View Any view Parameters brief Displays brief IPv6 information of an interface int...

Page 668: ...g for addresses Table 1 5 Description on fields of the display ipv6 interface command Field Description Vlan interface2 current state Physical state of the interface Line protocol current state Link l...

Page 669: ...ipv6 interface brief Field Description down The interface is down that is the interface is closed by using the shutdown command s Spoofing attribute of the interface that is the link protocol state of...

Page 670: ...from 1 to 4094 Filters the output information begin Displays the neighbor entries from the first one containing the specified character string include Displays the neighbor entries containing the spe...

Page 671: ...tatic entry a hyphen is displayed For a dynamic entry the reachable time in seconds elapsed is displayed and if it is never reachable is displayed for a neighbor acquired dynamically 1 1 7 display ipv...

Page 672: ...iew Any view Parameters ipv6 address IPv6 address whose PMTU information is to be displayed all Displays all PMTU information dynamic Displays all dynamic PMTU information static Displays all static P...

Page 673: ...epresents a TCP socket 2 a UDP socket and 3 a raw IP socket task id Displays the socket information of the task The task ID is in the range 1 to 100 socket id Displays the information of the socket Th...

Page 674: ...sk ROUT 86 socketid 5 Proto 89 LA FA sndbuf 262144 rcvbuf 262144 sb_cc 0 rb_cc 0 socket option SO_REUSEADDR socket state SS_PRIV SS_ASYNC Table 1 9 Description on fields of the display ipv6 socket com...

Page 675: ...6 packets and IPv6 ICMP packets on the slot Description Use the display ipv6 statistics command to display statistics of IPv6 packets and IPv6 ICMP packets Examples Display the statistics of IPv6 pack...

Page 676: ...or solicit 0 neighbor advert 0 router solicit 0 router advert 0 redirected 0 Send failed ratelimited 0 other errors 0 Received packets Total 0 checksum error 0 too short 0 bad code 0 unreached 0 too b...

Page 677: ...ber of packets failing to be routed z Number of sent fragment packets z Number of fragments failing to be sent Received packets Total 0 local host 0 hopcount exceeded 0 format error 0 option error 0 p...

Page 678: ...ts including z Total number of sent packets z Number of packets whose destination is unreachable z Number of too large packets z Number of packets exceeding the hop limit z Number of packets whose fra...

Page 679: ...ckets z Number of packets with error codes z Number of packets whose destination is unreachable z Number of too large packets z Number of packets exceeding the hop limit z Number of packets whose frag...

Page 680: ...bytes partially duplicate packets 0 0 bytes out of order packets 0 0 bytes packets with data after window 0 0 bytes packets after close 0 ACK packets 0 0 bytes duplicate ACK packets 0 too much ACK pac...

Page 681: ...cified by the packet header z Number of duplicate packets z Number of partially duplicate packets z Number of out of order packets z Number of packets exceeding the size of the receiving window z Numb...

Page 682: ...er SYN is received from the peer initiated dropped Number of initiated but dropped connections before SYN is received from the peer 1 1 12 display tcp ipv6 status Syntax display tcp ipv6 status View A...

Page 683: ...pv6 statistics Syntax display udp ipv6 statistics View Any view Parameters None Description Use the display udp ipv6 statistics command to display statistics of IPv6 UDP packets Examples Display stati...

Page 684: ...st no socket on port Total number of broadcast multicast packets without any socket received on a port not delivered input socket full Number of packets not handled because of the receive buffer being...

Page 685: ...e IPv6 packet forwarding function Use the undo ipv6 command to disable the IPv6 packet forwarding function By default the IPv6 packet forwarding function is disabled Examples Enable the IPv6 packet fo...

Page 686: ...les Set the aggregatable global IPv6 unicast address of VLAN interface 100 to 2001 1 64 Sysname system view Sysname interface vlan interface 100 Sysname Vlan interface100 ipv6 address 2001 1 64 1 1 17...

Page 687: ...UI 64 format Description Use the ipv6 address eui 64 command to configure a site local address or global unicast address in the EUI 64 format for an interface Use the undo ipv6 address eui 64 command...

Page 688: ...s for VLAN interface 100 Sysname system view Sysname interface vlan interface 100 Sysname Vlan interface100 ipv6 address fe80 1 link local 1 1 20 ipv6 host Syntax ipv6 host hostname ipv6 address undo...

Page 689: ...he number of ICMPv6 error packets sent is not restricted Description Use the ipv6 icmp error command to configure the size and update period of the token bucket Use the undo ipv6 icmp error command to...

Page 690: ...nd autoconfig managed address flag undo ipv6 nd autoconfig managed address flag View Interface view Parameters None Description Use the ipv6 nd autoconfig managed address flag command to set the manag...

Page 691: ...r Use the undo ipv6 nd autoconfig other flag command to remove the setting so that the host can acquire other information through stateless auto configuration By default the O flag is set to 0 Example...

Page 692: ...vlan interface 100 Sysname Vlan interface100 ipv6 nd dad attempts 20 1 1 26 ipv6 nd hop limit Syntax ipv6 nd hop limit value undo ipv6 nd hop limit View System view Parameters value Number of hops in...

Page 693: ...mer field in RA messages sent by the local interface is equal to this value Use the undo ipv6 nd ns retrans timer command to restore the default interval By default the local interface sends NS messag...

Page 694: ...the host itself but not specified by the device By default the neighbor reachable time on the local interface is 30 000 milliseconds and the Reachable Timer field in RA messages is 0 Examples Set the...

Page 695: ...en the maximum interval and the minimum interval Use the undo ipv6 nd ra interval command to restore the default By default the maximum interval between RA messages is 600 seconds and the minimum inte...

Page 696: ...uration off link Specifies the address with the prefix not to be directly reachable on the link If this keyword is not provided the address with the prefix is directly reachable on the link Descriptio...

Page 697: ...LAN interface 100 to 1 000 seconds Sysname system view Sysname interface vlan interface 100 Sysname Vlan interface100 ipv6 nd ra router lifetime 1000 1 1 33 ipv6 neighbor Syntax ipv6 neighbor ipv6 add...

Page 698: ...LAN specified by vlan id After a static neighbor entry is configured the device will relate the VLAN interface with the IPv6 address to identify a static neighbor entry uniquely and the entry will be...

Page 699: ...ess View System view Parameters ipv6 address Specified IPv6 address value PMTU of a specified IPv6 address in bytes The value range and the default value vary with devices It ranges from 1280 to 10000...

Page 700: ...the default By default the aging time is 10 minutes Note that the aging time is invalid for a static PMTU Related commands display ipv6 pathmtu Examples Set the aging time for a dynamic PMTU to 40 min...

Page 701: ...rface number Clears dynamic neighbor information on a specified interface slot slot number Clears the dynamic neighbor information on a specified slot static Clears the static neighbor information on...

Page 702: ...and ICMPv6 packets on the slot Description Use the reset ipv6 statistics command to clear the statistics of IPv6 packets and ICMPv6 packets Examples Clear the statistics of IPv6 packets and ICMPv6 pa...

Page 703: ...p ipv6 statistics 1 1 43 tcp ipv6 timer fin timeout Syntax tcp ipv6 timer fin timeout wait time undo tcp ipv6 timer fin timeout View System view Parameters wait time Length of the finwait timer for IP...

Page 704: ...o 600 Description Use the tcp ipv6 timer syn timeout command to set the synwait timer for IPv6 TCP connections Use the undo tcp ipv6 timer syn timeout command to restore the default synwait timer leng...

Page 705: ...se the tcp ipv6 window command to set the size of the IPv6 TCP sending receiving buffer Use the undo tcp ipv6 window command to restore the default By default the size of the IPv6 TCP sending receivin...

Page 706: ...t forwarding function Use the undo ipv6 command to disable the IPv6 packet forwarding function By default the function is disabled Examples Enable the IPv6 packet forwarding function Sysname system vi...

Page 707: ...k local addresses automatically configured on the interface Examples Specify the global unicast address of the interface VLAN interface 100 as 2001 1 64 Sysname system view Sysname interface vlan inte...

Page 708: ...efix length of an IPv6 address in the EUI 64 format The prefix length of an EUI 64 address ranges from 1 to 64 Description Use the ipv6 address eui 64 command to configure a site local address or glob...

Page 709: ...from FE80 to FEBF hexadecimal Description Use the ipv6 address link local command to configure manually a link local address for an interface Use the undo ipv6 address link local command to remove th...

Page 710: ...oes not reference any link aggregation group Before specifying a link aggregation group for a tunnel in tunnel interface view you have configured the manual link aggregation group and set the service...

Page 711: ...command to remove the configured destination IP address By default no destination address is configured for the tunnel interface Note that z The destination address of a tunnel interface is the addre...

Page 712: ...ion of a specified tunnel interface such as source address destination address and encapsulation mode Related commands interface tunnel source destination tunnel protocol Examples Display the informat...

Page 713: ...nnel If the device supports link aggregation groups the link aggregation group ID configured in tunnel interface view is displayed If device does not support aggregation ID not set is displayed Tunnel...

Page 714: ...ytes ND reachable time is 30000 milliseconds ND retransmit interval is 1000 milliseconds Hosts use stateless autoconfig for addresses Table 3 2 Description on fields of the display interface tunnel co...

Page 715: ...hat can be created is restricted to the total number of interfaces and the memory Description Use the interface tunnel command to create a tunnel interface and enter tunnel interface view Use the undo...

Page 716: ...Examples Set the tunnel interface MTU to 10 000 bytes Sysname system view Sysname interface tunnel 1 0 3 Sysname Tunnel1 0 3 mtu 10000 3 1 7 source Syntax source ip address interface type interface n...

Page 717: ...view Sysname interface tunnel 1 0 3 Sysname Tunnel1 0 3 source 192 100 1 1 Or Sysname system view Sysname interface tunnel 1 0 3 Sysname Tunnel1 0 3 source Vlan interface 1 3 1 8 tunnel protocol Synta...

Page 718: ...ng to the network topology and application The same tunnel type must be configured at both ends of the tunnel Otherwise packet delivery will fail z Only one automatic tunnel can be configured at the s...

Page 719: ...icy 1 12 1 1 14 igmp snooping host aging time 1 13 1 1 15 igmp snooping host join 1 14 1 1 16 igmp snooping last member query interval 1 15 1 1 17 igmp snooping max response time 1 16 1 1 18 igmp snoo...

Page 720: ...1 10 igmp last member query interval 3 11 3 1 11 igmp max response time 3 12 3 1 12 igmp require router alert 3 13 3 1 13 igmp robust count 3 14 3 1 14 igmp send router alert 3 14 3 1 15 igmp static...

Page 721: ...lay pim rp info 4 26 4 1 24 hello option dr priority 4 27 4 1 25 hello option holdtime 4 28 4 1 26 hello option lan delay 4 28 4 1 27 hello option neighbor tracking 4 29 4 1 28 hello option override i...

Page 722: ...54 4 1 64 timer join prune 4 55 Chapter 5 MSDP Configuration Commands 5 1 5 1 MSDP Configuration Commands 5 1 5 1 1 cache sa enable 5 1 5 1 2 display msdp brief 5 2 5 1 3 display msdp peer status 5 3...

Page 723: ...isplay multicast routing table 6 4 6 1 4 display multicast routing table static 6 6 6 1 5 display multicast rpf info 6 7 6 1 6 ip rpf route static 6 9 6 1 7 mtracert 6 10 6 1 8 multicast boundary 6 12...

Page 724: ...display the multicast group information in all VLANs slot slot id Displays the IGMP Snooping forwarding table information for the specified card verbose Specifies to display the detailed IGMP Snooping...

Page 725: ...l 1 IP Source s Total number of multicast sources Total 1 MAC Group s Total number of MAC multicast groups Port flags D Dynamic port S Static port A Aggregation port C Copy port Port flags D for dynam...

Page 726: ...ries 0 Sent IGMPv2 specific queries 0 Received IGMPv3 reports 1 Received IGMPv3 reports with right and wrong records 0 Received IGMPv3 specific queries 0 Received IGMPv3 specific sg queries 0 Sent IGM...

Page 727: ...isabled that is unknown multicast data is flooded This command works only on an IGMP Snooping enabled VLAN but not on a VLAN with IGMP enabled on the corresponding VLAN interface Related commands igmp...

Page 728: ...you specify a VLAN or multiple VLANs the command will take effect for the specified VLAN s only Related commands igmp snooping fast leave Examples Enable the fast leave feature globally in VLAN 2 Sysn...

Page 729: ...r the ACL rule is null all multicast groups will be filtered out z You can configure different ACL rules for a port in different VLANs for a given VLAN a newly configured ACL rule will override the ex...

Page 730: ...e igmp snooping host aging time 300 1 1 7 igmp snooping Syntax igmp snooping undo igmp snooping View System view Parameters None Description Use the igmp snooping command to enable IGMP Snooping globa...

Page 731: ...led that is unknown multicast data is flooded This command takes effect only if IGMP Snooping is enabled in the VLAN Related commands drop unknown Examples In VLAN 2 enable the function of dropping un...

Page 732: ...al VLAN in the form of vlan id or a VLAN range in the form of start vlan id to end vlan id where the end VLAN ID must be greater than the start VLAN ID The effective range of a VLAN ID is 1 to 4094 De...

Page 733: ...Enable the fast leave feature on Ethernet 2 0 1 which belongs to VLAN 2 Sysname system view Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1 igmp snooping fast leave vlan 2 1 1 11 igmp snooping...

Page 734: ...thernet interface view port group view Parameters limit Maximum number of multicast groups that can be joined on a port ranging from 1 to 512 vlan vlan list Defines one or multiple VLANs You can provi...

Page 735: ...Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1 igmp snooping group limit 10 vlan 2 1 1 13 igmp snooping group policy Syntax igmp snooping group policy acl number vlan vlan list undo igmp snoo...

Page 736: ...ong to the specified VLAN s z If the specified ACL does not exist or the ACL rule is null all multicast groups will be filtered out z You can configure different ACL rules for a port in different VLAN...

Page 737: ...is to join in the range of 224 0 1 0 to 239 255 255 255 source address Address of the multicast source that the simulated host is to join The value of this argument should be a valid unicast address...

Page 738: ...member host in VLAN 2 for multicast source 1 1 1 1 and multicast group 224 1 1 1 Sysname system view Sysname igmp snooping Sysname igmp snooping quit Sysname vlan 2 Sysname vlan2 igmp snooping enable...

Page 739: ...snooping max response time View VLAN view Parameters interval Maximum response time to IGMP general queries in units of seconds The effective range is 1 to 25 Description Use the igmp snooping max re...

Page 740: ...oup replacement function on the current port s By default the multicast group replacement function is disabled Note that z This command works on IGMP Snooping enabled VLANs and VLANs with IGMP enabled...

Page 741: ...r command to disable the IGMP Snooping querier function By default the IGMP Snooping querier function is disabled This command takes effect only if IGMP Snooping is enabled in the VLAN Examples Enable...

Page 742: ...ds in VLAN 2 Sysname system view Sysname vlan 2 Sysname vlan2 igmp snooping query interval 20 1 1 21 igmp snooping router aging time Syntax igmp snooping router aging time interval undo igmp snooping...

Page 743: ...filtering Use the undo igmp snooping source deny command to disable multicast source port filtering By default multicast source port filtering is disabled This command works on IGMP Snooping enabled V...

Page 744: ...ource ip command to restore the default configuration By default the source IP address of IGMP group specific queries is 0 0 0 0 This command takes effect only if IGMP Snooping is enabled in the VLAN...

Page 745: ...fault this function is disabled Note that z This command works on IGMP Snooping enabled VLANs and VLANs with IGMP enabled on the corresponding VLAN interfaces z The source ip source address option in...

Page 746: ...mand to disable the static router port function By default the static router port function is not enabled Note that z This command works on IGMP Snooping enabled VLANs and VLANs with IGMP enabled on t...

Page 747: ...ing in VLAN 2 and set the IGMP Snooping version to version 3 Sysname system view Sysname igmp snooping Sysname igmp snooping quit Sysname vlan 2 Sysname vlan2 igmp snooping enable Sysname vlan2 igmp s...

Page 748: ...val undo max response time View IGMP Snooping view Parameters interval Maximum response time to IGMP general queries in units of seconds The effective range is 1 to 25 Description Use the max response...

Page 749: ...d to enable the multicast group replacement function globally Use the undo overflow replace command to disable the multicast group replacement function globally By default the multicast group replacem...

Page 750: ...name igmp snooping undo report aggregation 1 1 31 reset igmp snooping group Syntax reset igmp snooping group group address all vlan vlan id View User view Parameters group address Address of the multi...

Page 751: ...Parameters None Description Use the reset igmp snooping statistics command to clear the statistics information of IGMP messages learned by IGMP Snooping Examples Clear the statistics information of al...

Page 752: ...e list View IGMP Snooping view Parameters interface list Ethernet port list You can specify multiple Ethernet ports or port ranges by providing the this argument in the form of interface list interfac...

Page 753: ...Command Manual Multicast H3C S7500E Series Ethernet Switches Chapter 1 IGMP Snooping Configuration Commands 1 30 Sysname igmp snooping source deny port ethernet 2 0 1 to ethernet 2 0 5...

Page 754: ...s not provided the information about all multicast VLANs and their sub VLANs will be displayed Description Use the display multicast vlan command to view the information about the specified multicast...

Page 755: ...hat z The specified VLAN must exist z The multicast VLAN feature cannot be enabled on a device with IP multicast routing enabled z After a VLAN is configured into a multicast VLAN IGMP Snooping must b...

Page 756: ...ied multicast VLAN A multicast VLAN has no sub VLANs by default Note that z The VLAN to be configured as the multicast VLAN and the VLANs to be configured as sub VLANs of the multicast VLAN must exist...

Page 757: ...pe interface number Displays the IGMP multicast group information about a particular interface static Displays the information of statically joined IGMP multicast groups verbose Displays the detailed...

Page 758: ...e Interface group report information Vlan interface1 10 10 1 20 Total 3 IGMP Groups reported Group 225 1 1 1 Uptime 00 00 34 Expires 00 00 40 Last reporter 20 20 20 20 Last member query counter 0 Last...

Page 759: ...2 ports Description Use the display igmp group port info command to view IGMP Layer 2 port information Examples View detailed information of IGMP Layer 2 ports Sysname display igmp group port info ver...

Page 760: ...s sub VLAN under the current entry C for sub VLAN copied from a G entry to an S G entry Router port s Number of router ports IP group address Address of IP multicast group MAC group address Address of...

Page 761: ...ess 2 Require router alert disabled Fast leave disabled Startup query timer expiry off Other querier present timer expiry off Table 3 3 Description on the fields of the display igmp interface command...

Page 762: ...lay igmp routing table source address mask mask mask length group address mask mask mask length View Any view Parameters source address Multicast source address group address Multicast group address i...

Page 763: ...eam interface list namely the interfaces to which multicast data for this group will be forwarded 3 1 5 fast leave Syntax fast leave group policy acl number undo fast leave View IGMP view Parameters a...

Page 764: ...fast leave processing globally Sysname system view Sysname igmp Sysname igmp fast leave 3 1 6 igmp Syntax igmp undo igmp View System view Parameters None Description Use the igmp command to enter IGMP...

Page 765: ...st be enabled on the device before this command is meaningful z Before IGMP is enabled on an interface any other IGMP feature configured on the interface will not take effect Related commands igmp Exa...

Page 766: ...le fast leave processing on a specific Layer 2 port or ports use the igmp snooping fast leave command or the fast leave command z The igmp snooping fast leave and fast leave commands are effective for...

Page 767: ...ts z The igmp group policy command cannot be used in VLAN interface view To configure a multicast group filter on a specific Layer 2 port or ports use the igmp snooping group policy command or the gro...

Page 768: ...GMP last member query interval is 1 second Related commands last member query interval igmp robust count display igmp interface Examples Set the IGMP last member query interval to 3 seconds on VLAN in...

Page 769: ...r alert undo igmp require router alert View Interface view Parameters None Description Use the igmp require router alert command to configure the interface to discard IGMP messages that do not carry t...

Page 770: ...an IGMP leave message Description Use the igmp robust count command to configure the IGMP querier robustness variable on the current interface Use the undo igmp robust count command to restore the sy...

Page 771: ...ystem view Sysname interface vlan interface 100 Sysname Vlan interface100 undo igmp send router alert 3 1 15 igmp static group Syntax igmp static group group address source source address undo igmp st...

Page 772: ...ng enabled VLANs and VLANs with IGMP enabled on the corresponding VLAN interfaces Related commands igmp snooping static group in IGMP Snooping Configuration Commands Examples Configure LoopBack 1 to b...

Page 773: ...bove mentioned formula default to 60 seconds 2 and 10 seconds respectively so the default IGMP other querier present interval 60 2 10 2 125 seconds Related commands timer other querier present igmp ti...

Page 774: ...VLAN interface 100 Sysname system view Sysname interface vlan interface 100 Sysname Vlan interface100 igmp timer query 125 3 1 18 igmp version Syntax igmp version version number undo igmp version Vie...

Page 775: ...last member query interval Use the undo last member query interval command to restore the system default By default the IGMP last member query interval is 1 second Related commands igmp last member q...

Page 776: ...Sysname system view Sysname igmp Sysname igmp max response time 8 3 1 21 require router alert Syntax require router alert undo require router alert View IGMP view Parameters None Description Use the r...

Page 777: ...ulticast group source address For a multicast group address this argument has an effective value range of 4 to 32 for a multicast source address this argument has an effective value range of 0 to 32 T...

Page 778: ...fective range of group address is 224 0 1 0 to 239 255 255 255 vlan id Clears Layer 2 port information of IGMP multicast groups in the specified VLAN The effective range of vlan id is 1 to 4094 Descri...

Page 779: ...the IGMP querier sends upon receiving an IGMP leave message Description Use the robust count command to configure the IGMP querier robustness variable globally Use the undo robust count command to res...

Page 780: ...he insertion of the Router Alert option in IGMP messages to be sent Sysname system view Sysname igmp Sysname igmp send router alert 3 1 26 timer other querier present Syntax timer other querier presen...

Page 781: ...view Sysname igmp Sysname igmp timer other querier present 200 3 1 27 timer query Syntax timer query interval undo timer query View IGMP view Parameters interval IGMP query interval in seconds namely...

Page 782: ...view Parameters version number IGMP version in the range of 1 to 3 Description Use the version command to configure the IGMP version globally Use the undo version command to restore the system default...

Page 783: ...Layer 3 switch running the PIM protocol 4 1 PIM Configuration Commands 4 1 1 auto rp enable Syntax auto rp enable undo auto rp enable View PIM view Parameters None Description Use the auto rp enable c...

Page 784: ...e to guard against BSR spoofing Use the undo bsr policy command to remove the restriction of the BSR address range By default there are no restrictions on the BSR address range namely all the received...

Page 785: ...bal setting will be used A larger value of this argument means a higher priority Description Use the c bsr command to configure the specified interface as a C BSR Use the undo c bsr command to remove...

Page 786: ...do not include this keyword in your command the corresponding global setting will be used priority Priority of the C BSR in the global scope zone in the range of 0 to 255 If you do not include this ke...

Page 787: ...d priority Priority of the C BSR in the BSR admin scope region corresponding to a multicast group in the range of 0 to 255 If you do not include this keyword in your command the corresponding global s...

Page 788: ...to restore the system default By default the Hash mask length for RP selection calculation is 30 Related commands c bsr c bsr global c bsr group Examples Set the global Hash mask length for RP select...

Page 789: ...Examples Set the bootstrap timeout time to 150 seconds Sysname system view Sysname pim Sysname pim c bsr holdtime 150 4 1 9 c bsr interval Syntax c bsr interval interval undo c bsr interval View PIM...

Page 790: ...l 30 4 1 10 c bsr priority Syntax c bsr priority priority undo c bsr priority View PIM view Parameters priority Priority of the C BSR in the range of 0 to 255 A larger value of this argument means a h...

Page 791: ...e range of 0 to 255 and defaulting to 0 A larger value of this argument means a lower priority hold interval C RP timeout time in seconds The effective range is 1 to 65 535 If you do not provide this...

Page 792: ...pim c rp vlan interface 100 group policy 2000 priority 10 4 1 12 c rp advertisement interval Syntax c rp advertisement interval interval undo c rp advertisement interval View PIM view Parameters inte...

Page 793: ...holdtime command to restore the system default By default the C RP timeout time is 150 seconds Because a non BSR router refreshes its C RP timeout time through BSR bootstrap messages to prevent loss...

Page 794: ...groups By default there are no restrictions on C RP address ranges and the address ranges of served groups namely all received C RP messages are accepted Examples Configure a C RP address range and a...

Page 795: ...bal Candidate RP 12 12 12 9 LoopBack1 Priority 0 HoldTime 150 Advertisement Interval 60 Next advertisement scheduled at 00 00 48 Candidate RP 3 3 3 3 Vlan interface1 Priority 20 HoldTime 90 Advertisem...

Page 796: ...send the next advertisement message in hours minutes seconds 4 1 16 display pim claimed route Syntax display pim claimed route source address View Any view Parameters source address Displays the infor...

Page 797: ...or G entries using this route 4 1 17 display pim control message counters Syntax display pim control message counters message type probe register register stop interface interface type interface numb...

Page 798: ...control message counters Received Sent Invalid Register 20 37 2 Register Stop 25 20 1 Probe 10 5 0 PIM control message counters for interface Vlan interface1 Received Sent Invalid Assert 10 5 0 Graft...

Page 799: ...information about unacknowledged graft messages Examples View the information about unacknowledged graft messages Sysname display pim grafts Source Group Age RetransmitIn 192 168 10 1 224 1 1 1 00 00...

Page 800: ...r all interfaces Examples View the PIM information on all interfaces Sysname display pim interface Interface NbrCnt HelloInt DR Pri DR Address Vlan1 1 30 1 10 1 1 2 Vlan2 0 30 1 172 168 0 2 local Vlan...

Page 801: ...ot using LAN delay 0 Number of routers on network not using neighbor tracking 2 Table 4 6 Description on the fields of the display pim interface verbose command Field Description Interface Interface n...

Page 802: ...r of routers on network not using LAN delay Number of routers not using the LAN delay field on the subnet where the interface resides Number of routers on network not using neighbor tracking Number of...

Page 803: ...PIM SM mode Sysname display pim join prune mode sm Expiry Time 22 sec Upstream nbr 192 168 1 55 Vlan interface1 0 G join s 1 S G join s 0 S G rpt prune s Expiry Time 50 sec Upstream nbr 10 1 1 1 Vlan...

Page 804: ...res Dr Priority 10 1 1 2 Vlan1 02 50 49 00 01 31 1 20 1 1 2 Vlan2 02 49 39 00 01 42 1 Table 4 8 Description on the fields of the display pim neighbor command Field Description Total Number of Neighbor...

Page 805: ...ask source address mask mask length mask incoming interface interface type interface number register outgoing interface include exclude match interface type interface number register mode mode type fl...

Page 806: ...entries to which actual data has arrived z del Specifies multicast routing entries scheduled to be deleted z exprune Specifies multicast routing entries containing outgoing interfaces pruned by other...

Page 807: ...1 An S G entry in the PIM routing table Protocol PIM mode PIM SM or PIM DM Flag Flag bit of the S G or G entry in the PIM routing table Uptime Length of time for which the S G or G entry has been exis...

Page 808: ...ynamically found by the BSR mechanism and static RPs z Because a non BSR router refreshes its local RP Set only based on the received BSR bootstrap messages the system does not delete an RP even if it...

Page 809: ...RP will expire in hours minutes seconds RP mapping for this group is 2 2 2 2 The IP address of the RP serving the current multicast group is 2 2 2 2 4 1 24 hello option dr priority Syntax hello option...

Page 810: ...ective range of 1 to 65 535 Description Use the hello option holdtime command to configure the PIM neighbor timeout time Use the undo hello option holdtime command to restore the system default By def...

Page 811: ...ult By default the LAN delay time is 500 milliseconds This command is effective for both PIM DM and PIM SM Related commands hello option override interval pim hello option override interval pim hello...

Page 812: ...effective range of 1 to 65 535 Description Use the hello option override interval command to configure the global value of the prune override interval Use the undo hello option override interval comma...

Page 813: ...PIM DM and PIM SM Related commands holdtime join prune pim holdtime join prune pim holdtime assert Examples Set the global value of the assert timeout time to 100 seconds Sysname system view Sysname...

Page 814: ...kt size View PIM view Parameters packet size Maximum size of join prune messages in bytes with an effective range of 100 to 8 100 Description Use the jp pkt size command to configure the maximum size...

Page 815: ...port packet fragmentation if you configure a large queue size a join prune message may contain a large number of groups causing the message length to exceed the MTU of the network As a result the prod...

Page 816: ...ticast routing enable Sysname pim Sysname pim 4 1 34 pim bsr boundary Syntax pim bsr boundary undo pim bsr boundary View Interface view Parameters None Description Use the pim bsr boundary command to...

Page 817: ...at PIM DM cannot be used for multicast groups in the SSM group range Related commands pim sm ssm policy Examples Enable PIM DM on VLAN interface 100 Sysname system view Sysname interface vlan interfac...

Page 818: ...interface100 pim hello option dr priority 3 4 1 37 pim hello option holdtime Syntax pim hello option holdtime interval undo pim hello option holdtime View Interface view Parameters interval PIM neigh...

Page 819: ...receiving a prune message and taking a prune action on the current interface Use the undo pim hello option lan delay command to restore the system default By default the LAN delay time to 500 millise...

Page 820: ...hello option neighbor tracking 4 1 40 pim hello option override interval Syntax pim hello option override interval interval undo pim hello option override interval View Interface view Parameters inte...

Page 821: ...assert timeout time on the current interface Use the undo pim holdtime assert command to restore the system default By default the assert timeout time is 180 seconds Related commands holdtime join pr...

Page 822: ...ds on VLAN interface 100 Sysname system view Sysname interface vlan interface 100 Sysname Vlan interface100 pim holdtime join prune 280 4 1 43 pim require genid Syntax pim require genid undo pim requi...

Page 823: ...M is disabled Related commands pim dm Examples Enable PIM SM on VLAN interface 100 Sysname system view Sysname interface vlan interface 100 Sysname Vlan interface100 pim sm 4 1 45 pim state refresh ca...

Page 824: ...tax pim timer graft retry interval undo pim timer graft retry View Interface view Parameters interval Graft retry period in seconds with an effective range of 1 to 65 535 Description Use the pim timer...

Page 825: ...lo interval to 40 seconds on VLAN interface 100 Sysname system view Sysname interface vlan interface 100 Sysname Vlan interface100 pim timer hello 40 4 1 48 pim timer join prune Syntax pim timer join...

Page 826: ...of 1 to 5 Description Use the pim triggered hello delay command to configure the maximum delay between hello messages Use the undo pim triggered hello delay command to restore the system default By d...

Page 827: ...51 register policy Syntax register policy acl number undo register policy View PIM view Parameters acl number Advanced ACL number in the range of 3000 to 3999 Only register messages that match the pe...

Page 828: ...ameters interval Register suppression timeout in seconds in the range of 1 to 3 600 Description Use the register suppression timeout command to configure the register suppression timeout time Use the...

Page 829: ...late the checksum based on the entire register message Sysname system view Sysname pim Sysname pim register whole checksum 4 1 54 reset pim control message counters Syntax reset pim control message co...

Page 830: ...re the system default By default the lifetime of a multicast source is 210 seconds Related commands state refresh interval Examples Set the multicast source lifetime to 200 seconds Sysname system view...

Page 831: ...10 1 1 0 Sysname acl basic 2000 quit Sysname pim Sysname pim source policy 2000 4 1 57 spt switch threshold Syntax spt switch threshold infinity group policy acl number order order value undo spt swi...

Page 832: ...es not exist in the group policy list you can use the acl number argument to specify an ACL and set its order value This will insert the ACL to the position of order value in the group policy list If...

Page 833: ...M SM Examples Configure the SSM group range to be 232 1 0 0 16 Sysname system view Sysname acl number 2000 Sysname acl basic 2000 rule permit source 232 1 0 0 0 0 255 255 Sysname acl basic 2000 quit S...

Page 834: ...h an effective range of 1 to 65535 Description Use the state refresh rate limit command to configure the time the router must wait before receiving a new state refresh message Use the undo state refre...

Page 835: ...state refresh ttl 45 4 1 62 static rp Syntax static rp rp address acl number preferred undo static rp rp address View PIM view Parameters rp address IP address of the static RP to be configured This...

Page 836: ...the previous one If multiple static RPs have been configured for the same multicast group the one with the highest IP address will be chosen to serve the multicast group z You can configure up to 50 s...

Page 837: ...e Syntax timer join prune interval undo timer join prune View PIM view Parameters interval Join prune interval in seconds with an effective range of 1 to 2 147 483 647 Description Use the timer join p...

Page 838: ...1 MSDP Configuration Commands 5 1 1 cache sa enable Syntax cache sa enable undo cache sa enable View MSDP view Parameters None Description Use the cache sa enable command to enable the SA message cac...

Page 839: ...information of MSDP peers in the in session state Description Use the display msdp brief command to view the brief information of MSDP peers Examples View the brief information of MSDP peers in all st...

Page 840: ...ess If you do not provide this argument this command will display the detailed status information of all MSDP peers Description Use the display msdp peer status command to view the detailed MSDP peer...

Page 841: ...utgoing data packets 0 0 Table 5 2 Description on the fields of the display msdp peer status command Field Description MSDP Peer MSDP peer address AS Number of the AS where the MSDP peer is located in...

Page 842: ...SDP peer upon receiving a new Join message Minimum TTL to forward SA with encapsulated data Minimum TTL of multicast packet encapsulated in SA messages SAs learned from this peer Number of cached SA m...

Page 843: ...the information of all sources in the specified multicast group z If you do not provide a group address and a source address this command will display the information of all cached entries z If you d...

Page 844: ...gth of time for which the cached S G entry has been existing in hours minutes seconds Expires Length of time in which the cached S G entry will expire in hours minutes seconds 5 1 5 display msdp sa co...

Page 845: ...ssages from this peer AS Number of the AS where the MSDP peer is located indicates that the system was unable to obtain the AS number Number of source Number of multicast sources from this AS Number o...

Page 846: ...not provide this argument in your command no multicast source information will be advertised Note During ACL matching the protocol ID in the ACL rule is not checked Description Use the import source...

Page 847: ...permit ip source 10 10 0 0 0 0 255 255 destination 225 1 0 0 0 0 255 255 Sysname acl adv 3101 quit Sysname msdp Sysname msdp import source acl 3101 5 1 8 msdp Syntax msdp undo msdp View System view P...

Page 848: ...re the system default Be default the PIM RP address is used as the RP address of SA messages Examples Specify the IP address of VLAN interface 100 as the RP address of SA messages Sysname system view...

Page 849: ...as the MSDP peer of the local router with interface VLAN interface 100 as the local connection port Sysname system view Sysname msdp Sysname msdp peer 125 10 7 6 connect interface vlan interface 100...

Page 850: ...DP view Parameters peer address MSDP peer address name Mesh group name a case sensitive string of 1 to 32 characters Description Use the peer mesh group command to configure an MSDP peer as a mesh gro...

Page 851: ...elated commands display msdp peer status Examples Set the minimum TTL value of multicast packets to be encapsulated in SA messages to 10 so that only multicast packets whose TTL value is larger than o...

Page 852: ...st sa enable 5 1 15 peer sa cache maximum Syntax peer peer address sa cache maximum sa limit undo peer peer address sa cache maximum View MSDP view Parameters peer address MSDP peer address sa limit M...

Page 853: ...ring rule for receiving or forwarding SA messages Use the undo peer sa policy command to restore the default setting By default SA messages received or to be forwarded are not filtered namely all SA m...

Page 854: ...ored Description Use the peer sa request policy command to configure a filtering rule for SA request messages Use the undo peer sa request policy command to remove the configured SA request filtering...

Page 855: ...on with the MSDP peer 125 10 7 6 and clear all the statistics information of this MSDP peer Sysname reset msdp peer 125 10 7 6 5 1 19 reset msdp sa cache Syntax reset msdp sa cache group address View...

Page 856: ...ear the statistics information of the specified MSDP peer or all MSDP peers without resetting the MSDP peer s Examples Clear the statistics information of the MSDP peer 125 10 7 6 Sysname reset msdp s...

Page 857: ...eers observe the follow rules 1 If you use the rp policy keyword for all the static RPF peers all the static RPF peers take effect concurrently SA messages will be filtered as per the configured prefi...

Page 858: ...p policy list1 5 1 23 timer retry Syntax timer retry interval undo timer retry View MSDP view Parameters interval Interval between MSDP peer connection retries in seconds The effective range is 1 to 6...

Page 859: ...length interface interface type interface number View Any view Parameters group address Multicast group address in the range of 224 0 1 0 to 239 255 255 255 mask Mask of the multicast group address 25...

Page 860: ...t info View Any view Parameters source address Multicast source address group address Multicast group address in the range of 224 0 1 0 to 239 255 255 255 mask Mask of the multicast group source addre...

Page 861: ...ticast routing table Examples View the multicast forwarding table information Sysname display multicast forwarding table Multicast Forwarding Table Total 1 entry 1 matched 00001 172 168 0 2 227 0 0 1...

Page 862: ...G is active 0x00000004 Indicates a null forwarding entry 0x00000008 Indicates whether the RP is a PIM domain border router 0x00000010 Indicates that a register outgoing interface is available 0x00000...

Page 863: ...n interface by its type and number register Specifies the register interface of PIM SM outgoing interface Displays multicast routing entries of which the outgoing interface is the specified one exclud...

Page 864: ...faces need to forward multicast packets 6 1 4 display multicast routing table static Syntax display multicast routing table static config source address mask length mask View Any view Parameters confi...

Page 865: ...on Mroute Multicast route source address and its mask length Interface Outgoing interface to the multicast source RPF Neighbor IP address of the RPF neighbor through which the multicast source is reac...

Page 866: ...able Table 6 6 Description on the fields of the display multicast rpf info command Field Description RPF information about source 192 168 1 55 Information of the RPF path to multicast source 192 168 1...

Page 867: ...f Specifies the OSPF protocol z rip Specifies the RIP protocol process id Process number of the unicast routing protocol in the range of 1 to 65535 This argument must be provided if IS IS OSPF or RIP...

Page 868: ...rnet Loopback or VLAN interface instead you can specify an RPF neighbor only by providing an address rpf nbr address z Because outgoing interface iteration may fail or the specified interface may be i...

Page 869: ...from the multicast source to the last hop router with the S G outgoing interface address of 5 5 5 8 Sysname mtracert 6 6 6 6 5 5 5 8 225 2 1 1 Type Ctrl C to quit mtrace facility Tracing reverse path...

Page 870: ...unt on outgoing interface The total number of multicast packets transmitted on the outgoing interface Total number of packets for this source group pair The total number of packets from the specified...

Page 871: ...Assume that Set A and Set B are both multicast forwarding boundary sets to be configured and B is a subset of A If A has been configured on an interface it is not allowed to configure B on the interfa...

Page 872: ...ast forwarding table to 120 Sysname system view Sysname multicast forwarding table downstream limit 120 6 1 10 multicast forwarding table route limit Syntax multicast forwarding table route limit limi...

Page 873: ...ers source Specifies to implement per source load splitting source group Specifies to implement per source and per group load splitting simultaneously Description Use the multicast load splitting comm...

Page 874: ...amples Configure route selection based on the longest match Sysname system view Sysname multicast longest match 6 1 13 multicast routing enable Syntax multicast routing enable undo multicast routing e...

Page 875: ...urce address this argument has an effective value range of 0 to 32 The system default is 32 in both cases incoming interface Specifies to clear multicast forwarding entries of which the incoming inter...

Page 876: ...urce address this argument has an effective value range of 0 to 32 The system default is 32 in both cases incoming interface Specifies the incoming interface of multicast routing entries interface typ...

Page 877: ...x quiet period 1 13 1 1 11 dot1x retry 1 14 1 1 12 dot1x supp proxy check 1 14 1 1 13 dot1x timer 1 16 1 1 14 reset dot1x statistics 1 17 Chapter 2 EAD Fast Deployment Configuration Commands 2 1 2 1 E...

Page 878: ...ort type interface number represents the port number and 1 10 means that you can provide up to 10 port indexes port index lists for this argument The start port number must be smaller than the end num...

Page 879: ...disabled Proxy trap checker is disabled Proxy logoff checker is disabled Handshake is disabled The port is an authenticator Authenticate Mode is Auto Port Control Type is Mac based Guest VLAN 0 Max o...

Page 880: ...of attempts for the authenticator to send authentication requests to the supplicant EAD quick deploy configuration EAD quick deployment configurations URL Redirect URL for IE users Free IP Accessible...

Page 881: ...rt Packets Number of EAPOL Start packets received EAPOL LogOff Packets Number of EAPOL LogOff packets received EAP Response Identity Packets Number of EAP Response Identity packets received EAP Respon...

Page 882: ...nd in interface view to disable 802 1x for specified ports By default 802 1x is neither enabled globally nor enabled for any port Note that z 802 1x must be enabled both globally in system view and fo...

Page 883: ...ames over the network Compared with PAP CHAP provides better security z With EAP relay authentication the authenticator encapsulates 802 1x user information in the EAP attributes of RADIUS packets and...

Page 884: ...provide up to 10 port indexes port index lists for this argument The start port number must be smaller than the end number and the two ports must of the same type Description Use the dot1x guest vlan...

Page 885: ...e system view Sysname dot1x guest vlan 999 interface Ethernet2 0 1 Specify ports Ethernet 2 0 2 to Ethernet 2 0 5 to use VLAN 10 as its guest VLAN Sysname system view Sysname dot1x guest vlan 10 inter...

Page 886: ...view dot1x max user user number undo dot1x max user View System view Ethernet interface view Parameters user number Maximum number of users to be supported simultaneously The valid range is from 1 to...

Page 887: ...terface Ethernet2 0 1 Sysname Ethernet2 0 1 dot1x max user 32 1 1 7 dot1x multicast trigger Syntax dot1x multicast trigger undo dot1x multicast trigger View Interface view Parameters None Description...

Page 888: ...rs pass authentication This is the most common choice unauthorized force Places the specified or all ports in the state of unauthorized denying any access requests from users of the ports interface in...

Page 889: ...o other users are affected portbased Specifies to use the portbased authentication method With this method after the first user of a port passes authentication all other users of the port can access t...

Page 890: ...Ethernet2 0 1 dot1x port method portbased 1 1 10 dot1x quiet period Syntax dot1x quiet period undo dot1x quiet period View System view Parameters None Description Use the dot1x quiet period command to...

Page 891: ...request to a supplicant for up to twice Note that after sending an authentication request to a supplicant the authenticator may retransmit the request if it does not receive any response at an interv...

Page 892: ...e type Description Use the dot1x supp proxy check command to enable detection and control of users logging in through proxies for specified or all ports Use the undo dot1x supp proxy check command to...

Page 893: ...erver timeout server timeout value supp timeout supp timeout value tx period tx period value undo dot1x timer handshake period quiet period server timeout supp timeout tx period View System view Param...

Page 894: ...ntication server it starts this timer If this timer expires but it receives no response from the server it retransmits the request z Supplicant timeout timer supp timeout Once an authenticator sends a...

Page 895: ...port number and 1 10 means that you can provide up to 10 port indexes port index lists for this argument The start port number must be smaller than the end number and the two ports must of the same ty...

Page 896: ...rk segment Description Use the dot1x free ip command to configure a freely accessible network segment that is a network segment that users can access before passing 802 1x authentication Use the undo...

Page 897: ...the undo dot1x timer ead timeout command to restore the default By default the timeout time is 30 minutes Related commands display dot1x Examples Set the EAD rule timeout time to 5 minutes Sysname sy...

Page 898: ...Note that z The redirect URL and the free IP must be in the same network segment otherwise the URL may be inaccessible z You can configure the dot1x url command for more than once but only the last o...

Page 899: ...e interface number portion comprises only one port With an interface range the end interface number and the start interface number must be of the same type and the former must be greater than the latt...

Page 900: ...e Offline detect period Setting of the offline detect timer Quiet period Setting of the quiet timer Server response timeout value Setting of the server timeout timer the max allowed user number Maximu...

Page 901: ...10 indicates that you can specify up to 10 port ranges A port range defined without the to interface type interface number portion comprises only one port Description Use the mac authentication comma...

Page 902: ...tme view Sysname mac authentication interface Ethernet 2 0 1 Mac auth is enabled on port Ethernet2 0 1 Or Sysname systme view Sysname interface Ethernet 2 0 1 Sysname Ethernet2 0 1 mac authentication...

Page 903: ...s Description Use the mac authentication timer command to set the MAC authentication timers Use the undo mac authentication timer command to restore the defaults By default the offline detect interval...

Page 904: ...d displays the password in cipher text Using the simple keyword displays the password in plain text In the former case the password can be either a string of 1 to 63 characters in plain text or a stri...

Page 905: ...ord displayed in plain text as xyz Sysname system view Sysname mac authentication user name format fixed account abc password simple xyz 3 1 6 reset mac authentication statistics Syntax reset mac auth...

Page 906: ...tication H3C S7500E Series Ethernet Switches Chapter 3 MAC Authentication Configuration Commands 3 8 Examples Clear MAC authentication statistics on Ethernet 2 0 1 Sysname reset mac authentication sta...

Page 907: ...1 1 12 authorization command 1 11 1 1 13 authorization default 1 12 1 1 14 authorization lan access 1 13 1 1 15 authorization login 1 14 1 1 16 authorization portal 1 15 1 1 17 cut connection 1 16 1...

Page 908: ...1 52 1 2 21 server type 1 53 1 2 22 state 1 54 1 2 23 stop accounting buffer enable 1 55 1 2 24 timer quiet 1 56 1 2 25 timer realtime accounting 1 57 1 2 26 timer response timeout 1 58 1 2 27 user na...

Page 909: ...anual AAA RADIUS HWTACACS H3C S7500E Series Ethernet Switches Table of Contents iii 1 3 18 timer quiet 1 74 1 3 19 timer realtime accounting 1 75 1 3 20 timer response timeout 1 76 1 3 21 user name fo...

Page 910: ...urrent ISP domain max user number is the maximum number of accessing users in the current ISP domain The valid range is from 1 to 4096 Description Use the access limit enable command to set the maximu...

Page 911: ...pes of users Use the undo accounting default command to restore the default By default the accounting scheme is local Note that z The RADIUS or HWTACACS scheme specified for the current ISP domain mus...

Page 912: ...View ISP domain view Parameters local Performs local accounting none Does not perform any accounting radius scheme radius scheme name Specifies a RADIUS scheme by its name which is a string of 1 to 3...

Page 913: ...ies an HWTACACS scheme by its name which is a string of 1 to 32 characters local Performs local accounting none Does not perform any accounting radius scheme radius scheme name Specifies a RADIUS sche...

Page 914: ...the feature is disabled Note that z With the accounting optional command configured a user that will be disconnected otherwise can use the network resources even when there is no available accounting...

Page 915: ...g portal command to restore the default By default the default accounting scheme is used for portal users Note that the RADIUS scheme specified for the current ISP domain must have been configured Rel...

Page 916: ...ranges from 0 to 255 The ports bounded are determined by port number regardless of port type mac mac address Specifies the MAC address of the user in the format of H H H vlan vlan id Specifies the VLA...

Page 917: ...ecify the default authentication scheme for all types of users Use the undo authentication default command to restore the default By default the authentication scheme is local Note that z The RADIUS o...

Page 918: ...escription Use the authentication lan access command to specify the authentication scheme for LAN access users Use the undo authentication login command to restore the default By default the default a...

Page 919: ...of 1 to 32 characters Description Use the authentication login command to specify the authentication scheme for login users Use the undo authentication login command to restore the default By default...

Page 920: ...y the authentication scheme for portal users Use the undo authentication portal command to restore the default By default the default authentication scheme is used for portal users Note that the RADIU...

Page 921: ...ault hwtacacs scheme Examples Configure the default ISP domain system to use HWTACACS authorization scheme hw for command line users Sysname system view Sysname domain system Sysname isp system author...

Page 922: ...IUS authorization scheme is the same as the RADIUS authentication scheme In addition if a RADIUS authorization fails the error message returned to the NAS says that the server is not responding Relate...

Page 923: ...s used for LAN access users Note that the RADIUS scheme specified for the current ISP domain must have been configured Related commands authorization default radius scheme Examples Configure the defau...

Page 924: ...command to restore the default By default the default authorization scheme is used for login users Note that the RADIUS or HWTACACS scheme specified for the current ISP domain must have been configure...

Page 925: ...domain must have been configured Related commands authorization default radius scheme Examples In the default ISP domain system specify the authorization scheme for portal users to RADIUS scheme with...

Page 926: ...s all user connections in a VLAN The VLAN ID ranges from 1 to 4094 slot slot number Specifies the connections on a slot Description Use the cut connection command to tear down the specified conneciton...

Page 927: ...4294967295 user name user name Specifies all user connections using the specified username The user name argument is a case sensitive string of 1 to 80 characters vlan vlan id Specifies all user conn...

Page 928: ...the configuration information of all ISP domains Sysname display domain 0 Domain aabbcc State Active Access limit Disable Accounting method Required Default authentication scheme local Default author...

Page 929: ...scheme Default accounting scheme Default accounting scheme Authentication scheme Authentication scheme Authorization scheme Authentication scheme Accounting scheme Accounting scheme Domain User Templa...

Page 930: ...characters vlan vlan id Specifies all local users in a VLAN The VLAN ID ranges from 1 to 4094 slot slot number Specifies all local users in the slot where the interface card is inserted Description U...

Page 931: ...MAC address MAC address of the user User Privilege Local user privilege Total 1 local user s matched 1 local user in total 1 1 21 domain Syntax domain isp name undo domain isp name View System view P...

Page 932: ...stem view Parameters disable Disables the configured default ISP domain enable Enables the configured default ISP domain isp name Name of the ISP a string of 1 to 24 characters Description Use the dom...

Page 933: ...e range 1 to 120 minutes Description Use the idle cut command to enable or disable the idle cut function By default the function is disabled Related commands domain Examples Enable the idle cut functi...

Page 934: ...of the commands that a user can use after logging in depends on the priority of the user For an SSH user using RSA public key authentication the commands that can be used depend on the level configur...

Page 935: ...is configured Related commands display local user service type Examples Add a local user named user1 Sysname system view Sysname local user user1 Sysname luser user1 1 1 26 local user password displa...

Page 936: ...in cipher text simple Specifies to display the password in plain text password Password for the local user z In plain text it must be a string of 1 to 63 characters that contains no blank space for e...

Page 937: ...Disable the self service server localization function enable url string Enable the self service server localization function The url string argument refers to the URL of the self service server for c...

Page 938: ...vice modPasswd1x jsp userName for the default ISP domain system Sysname system view Sysname domain system Sysname isp system self service url enable http 10 153 89 94 selfservice modPasswd1x jsp userN...

Page 939: ...s None Description Use the service type ftp command to authorize a user to use the FTP service Use the undo service type ftp command to disable a user from using the FTP service By default no service...

Page 940: ...ed So does a local user By blocking an ISP domain you disable users of the domain that are offline from requesting network services Note that the online users are not affected By blocking a user you d...

Page 941: ...ion about the slot where the secondary board is inserted FTP SFTP users cannot log in after primary to secondary switching It is not recommended to carry with slot information when you specify a work...

Page 942: ...view Sysname radius scheme radius1 Sysname radius radius1 data flow format data kilo byte packet kilo packet 1 2 2 display radius scheme Syntax display radius scheme radius scheme name slot slot numbe...

Page 943: ...e IP address access port number current status of the primary authentication server active or block Primary Acct IP Port State IP address access port number current status of the primary accounting se...

Page 944: ...t number View Any view Parameters slot slot number Specifies the slot where the interface card is inserted Description Use the display radius statistics command to display statistics about RADIUS pack...

Page 945: ...0 Err 0 Succ 0 Set policy result Num 0 Err 0 Succ 0 RADIUS sent messages statistic Auth accept Num 0 Auth reject Num 0 EAP auth replying Num 0 Account success Num 0 Account failure Num 0 Server ctrl...

Page 946: ...kets RADIUS received messages statistic Number of messages received by RADIUS Normal auth request Number of normal authentication requests EAP auth request Number of EAP authentication requests Accoun...

Page 947: ...memory errors State Mismatch Number of errors for mismatching status Other_Error Number of errors of other types No response acct stop packet Number of times that no response was received for stop ac...

Page 948: ...ADIUS server the device buffers the request and retransmits it You can use the retry stop accounting command to set the number of allowed transmission attempts Related commands reset stop accounting b...

Page 949: ...m view Sysname radius scheme radius1 Sysname radius radius1 key authentication hello Set the shared key for accounting packets to ok for RADIUS scheme radius1 Sysname system view Sysname radius scheme...

Page 950: ...ds radius nas ip Examples Set the IP address for the device to use as the source address of the RADIUS packets to 10 1 1 1 Sysname system view Sysname radius scheme test1 Sysname radius test1 nas ip 1...

Page 951: ...y authentication authorization server which ranges from 1 to 65535 Description Use the primary authentication command to configure the IP address and UDP port of the primary RADIUS authentication auth...

Page 952: ...e the listening port of the RADIUS client By default the listening port is enabled Note that when the listening port of the RADIUS client is disabled z The RADIUS client can either accept authenticati...

Page 953: ...e the undo radius nas ip command to remove the configuration By default the source IP address of a packet sent to the server is the IP address of the outbound port Note that z Specifying a source addr...

Page 954: ...he RADIUS protocol is configured scheme by scheme Every RADIUS scheme must at least specify the IP addresses and UDP ports of the RADIUS authentication authorization accounting servers and the paramet...

Page 955: ...nction is disabled Note that z If a NAS sends an accounting or authentication request to the RADIUS server but gets no response the NAS retransmits the request With the RADIUS trap function enabled wh...

Page 956: ...by its name a string of 1 to 32 characters session id session id Specifies a session by its ID a string of 1 to 50 characters time range start time stop time Specifies a time range by its start time...

Page 957: ...t value for the retry times argument is 3 Note that z Because RADIUS uses UDP packets to transmit data the communication is not reliable If the device does not receive a response to its request from t...

Page 958: ...sconnect the user in accordance This is done by the maximum number of accounting request transmission attempts Once the limit is reached but the NAS still receives no response the NAS disconnects the...

Page 959: ...sponse timeout command the timeout retransmission attempts is 5 set with the retry command and the maximum number of stop accounting request transmission attempts is 20 set with the retry stop account...

Page 960: ...ss and UDP port of the secondary RADIUS accounting server Use the undo secondary accounting command to restore the defaults Note that z The IP addresses of the primary and secondary accounting servers...

Page 961: ...ommand to restore the defaults Note that z The IP addresses of the primary and secondary authentication authorization servers cannot be the same Otherwise the configuration fails z The RADIUS service...

Page 962: ...ly Otherwise the device will regard it as an illegal server Examples For RADIUS scheme radius1 set the IP address of a security policy server to 10 110 1 2 Sysname system view Sysname radius scheme ra...

Page 963: ...IUS accounting server authentication Sets the status of the RADIUS authentication authorization server active Sets the status of the RADIUS server to active namely the normal operation state block Set...

Page 964: ...authentication secondary authentication primary accounting secondary accounting Examples Set the status of the secondary server in RADIUS scheme radius1 to active Sysname system view Sysname radius s...

Page 965: ...system view Sysname radius scheme radius1 Sysname radius radius1 stop accounting buffer enable 1 2 24 timer quiet Syntax timer quiet minutes undo timer quiet View RADIUS scheme view Parameters minutes...

Page 966: ...mation of online users to the RADIUS accounting server periodically This command is for setting the interval z The setting of the real time accounting interval somewhat depends on the performance of t...

Page 967: ...m the RADIUS server in a period of time after sending a RADIUS request authentication authorization or accounting request it has to resend the request so that the user has more opportunity to obtain t...

Page 968: ...ISP domain to which a user belongs Some earlier RADIUS servers however cannot recognize a username including an ISP domain name Before sending a username including a domain name to such a RADIUS serve...

Page 969: ...be one packet kilo packet mega packet or giga packet Description Use the data flow format command to specify the unit for data flows or packets to be sent to a HWTACACS server Use the undo data flow...

Page 970: ...WTACACS scheme on the main processing unit MPU Related commands hwtacacs scheme Examples Display configuration information about HWTACACS scheme gy Sysname display hwtacacs gy HWTACACS server template...

Page 971: ...rver Currently used authentication server Current authorization server Currently used authorization server Current accounting server Currently used accounting server NAS IP address NAS IP address key...

Page 972: ...xamples Display information about the buffered stop accounting requests for HWTACACS scheme hwt1 Sysname display stop accounting buffer hwtacacs scheme hwt1 Total 0 record s Matched 1 3 4 hwtacacs nas...

Page 973: ...scheme view overwrites the configuration of the hwtacacs nas ip command Related commands nas ip Examples Set the IP address for the device to use as the source address of the HWTACACS packets to 129...

Page 974: ...authorization Sets the shared key for HWTACACS authorization packets string Shared key a string of 1 to 16 characters Description Use the key command to set the shared key for HWTACACS authentication...

Page 975: ...packets to be sent to the server can avoid the situation where the packets sent back by the HWTACACS server cannot reach the device as the result of a physical interface failure z If you configure the...

Page 976: ...ion fails z The HWTACACS service port configured on the device and that of the HWTACACS server must be consistent z If you configure the command for more than one time the last configuration takes eff...

Page 977: ...ct z You can remove an authentication server only when no active TCP connection for sending authentication packets is using it Related commands display hwtacacs Examples Set the primary authentication...

Page 978: ...ed commands display hwtacacs Examples Configure the primary authorization server Sysname system view Sysname hwtacacs scheme hwt1 Sysname hwtacacs hwt1 primary authorization 10 163 155 13 49 1 3 11 re...

Page 979: ...slot where the interface card is inserted Description Use the reset stop accounting buffer command to clear the buffered stop accounting requests that get no responses Related commands stop accounting...

Page 980: ...ber undo secondary accounting View HWTACACS scheme view Parameters ip address IP address of the server a valid unicast address in dotted decimal notation The default is 0 0 0 0 port number Port number...

Page 981: ...escription Use the secondary authentication command to specify the secondary HWTACACS authentication server Use the undo secondary authentication command to remove the configuration Note that z The IP...

Page 982: ...thorization command to remove the configuration Note that z The IP addresses of the primary and secondary authorization servers cannot be the same Otherwise the configuration fails z The HWTACACS serv...

Page 983: ...e to users a NAS must make its best effort to send every stop accounting request to the HWTACACS accounting servers For each stop accounting request getting no response in the specified period of time...

Page 984: ...timer quiet 10 1 3 19 timer realtime accounting Syntax timer realtime accounting minutes undo timer realtime accounting View HWTACACS scheme view Parameters minutes Real time accounting interval in m...

Page 985: ...1 minutes for HWTACACS scheme hwt1 Sysname system view Sysname hwtacacs scheme hwt1 Sysname hwtacacs hwt1 timer realtime accounting 51 1 3 20 timer response timeout Syntax timer response timeout secon...

Page 986: ...ent to a HWTACACS server By default the ISP domain name is included in the username Note that z A username is generally in the format of userid isp name of which isp name is used by the device to dete...

Page 987: ...AA RADIUS HWTACACS Configuration Commands 1 78 Examples Specify the device to include the ISP domain name in the username sent to the HWTACACS servers for the HWTACACS scheme hwt1 Sysname system view...

Page 988: ...ule 1 6 1 1 4 display portal interface 1 7 1 1 5 display portal server 1 8 1 1 6 display portal server statistics 1 9 1 1 7 display portal tcp cheat statistics 1 11 1 1 8 display portal user 1 12 1 1...

Page 989: ...tal ACLs namely ACLs generated after a user passes portal authentication static Displays static portal ACLs namely ACLs generated by related configurations interface interface type interface number Di...

Page 990: ...g order Inbound interface Interface to which portal ACLs are bound Type Type of the portal ACL Action Match action in the portal ACL Source Source information in the portal ACL IP Source IP address in...

Page 991: ...lay portal connection statistics on interface Vlan interface 2 Sysname display portal connection statistics interface Vlan interface 2 Interface Vlan interface 2 User state statistics State Name User...

Page 992: ...cs Field Description User state statistics Statistics on portal users State Name Name of a user state User Num Number of users VOID Number of users in void state DISCOVERED Number of users in discover...

Page 993: ...age MSG_LEAVING_REQ Leaving request message MSG_ARPPKT ARP message MSG_TMR_REQAUTH Authentication request timeout message MSG_TMR_AUTHEN Authentication timeout message MSG_TMR_AUTHOR Authorization tim...

Page 994: ...Display information about portal free rule 1 Sysname display portal free rule 1 Rule Number 1 Source IP 2 2 2 0 Mask 255 255 255 0 MAC 0000 0000 0000 Interface any Vlan 0 Destination IP 0 0 0 0 Mask 0...

Page 995: ...tion of an interface Examples Display the portal configuration of interface Vlan interface 2 Sysname display portal interface Vlan interface 2 Interface portal configuration Vlan interface 2 Portal ru...

Page 996: ...acters Description Use the display portal server command to display information about a specified portal server or all portal servers Related commands portal server Examples Display information about...

Page 997: ...portal server statistics command to display portal server statistics on a specified interface or all interfaces Note that with the all keyword specified the command displays portal server statistics b...

Page 998: ...TH Authentication request message the portal server sends to the access device ACK_AUTH Authentication acknowledgment message the access device sends to the portal server REQ_LOGOUT Logout request mes...

Page 999: ...iew Any view Parameters None Description Use the display portal tcp cheat statistics command to display TCP spoofing statistics Examples Display TCP spoofing statistics Sysname display portal tcp chea...

Page 1000: ...ackets HTTP Packets Sent Number of HTTP packets sent Connection State Statistics of connections in various state ESTABLISHED Number of connections in ESTABLISHED state CLOSE_WAIT Number of connections...

Page 1001: ...status of the portal user SubState Current sub status of the portal user MAC MAC address of the portal user IP IP address of the portal user Vlan VLAN to which the portal user belongs Interface Inter...

Page 1002: ...dress of the interface By default the portal authentication subnet is 0 0 0 0 0 meaning that users in all subnets are to be authenticated Examples Configure a portal authentication subnet of 10 10 10...

Page 1003: ...interface type interface number Specifies a source interface mac mac address Specifies a source MAC address in the format of H H H vlan vlan id Specifies a source VLAN ID The value range is from 1 to...

Page 1004: ...ring Shared key for communication with the portal server a case sensitive string of 1 to 16 characters port id Destination port number used when the device sends a message to the portal server unsolic...

Page 1005: ...Sysname system view Sysname portal server pts ip 192 168 0 111 key portal url http 192 168 0 111 portal 1 1 13 portal server method Syntax portal server server name method direct layer3 redhcp undo p...

Page 1006: ...ntax reset portal connection statistics all interface interface type interface number View User view Parameters all Specifies all interfaces interface interface type interface number Specifies an inte...

Page 1007: ...tistics on a specified interface or all interfaces Examples Clear portal server statistics on interface Vlan interface 2 Sysname reset portal server statistics interface Vlan interface 2 1 1 16 reset...

Page 1008: ...ARP Configuration Commands 1 7 1 2 1 gratuitous arp sending enable 1 7 1 2 2 gratuitous arp learning enable 1 8 1 3 ARP Source Suppression Configuration Commands 1 8 1 3 1 arp source suppression enabl...

Page 1009: ...192 Description Use the arp max learning num command to set the maximum number of dynamic ARP entries that a VLAN interface can learn Use the undo arp max learning num command to restore the default B...

Page 1010: ...he entry if permanent will be deleted and if non permanent and resolved will become unresolved A VLAN interface must be created for the VLAN z The vlan id argument is used to specify the corresponding...

Page 1011: ...slot id Displays the ARP entries of the specified slot vlan vlan id Displays the ARP entries of the specified VLAN The VLAN ID ranges from 1 to 4 094 interface interface type interface number Display...

Page 1012: ...1 1 Description on the fields of the display arp command Field Description IP Address IP address in an ARP entry MAC Address MAC address in an ARP entry VLAN ID VLAN ID contained a static ARP entry I...

Page 1013: ...he specified string string A case sensitive string for matching consisting of 1 to 256 characters Description Use the display arp ip address command to display the ARP entry for a specified IP address...

Page 1014: ...ests from a natural network are supported Use the undo naturemask arp enable command to restore the default By default the support for ARP requests from a natural network is disabled Examples Enable t...

Page 1015: ...ear all static ARP entries Sysname reset arp static 1 2 Gratuitous ARP Configuration Commands 1 2 1 gratuitous arp sending enable Syntax gratuitous arp sending enable undo gratuitous arp sending enabl...

Page 1016: ...p learning enable command to disable the function By default the function is enabled Examples Disable the gratuitous ARP packet learning function Sysname system view Sysname undo gratuitous arp learni...

Page 1017: ...ource IP address but unresolvable destination IP addresses that a port can receive in five seconds It ranges from 2 to 1 024 Description Use the arp source suppression limit command to set the maximum...

Page 1018: ...suppression limit 100 Current cache length 16 Table 1 2 Description on fields of display arp source suppression Field Description ARP source suppression is enabled The ARP source suppression function...

Page 1019: ...resolving route enable command to enable ARP defense against IP packet attacks Use the undo arp resolving route enable command to disable the function By default the support for ARP defense against I...

Page 1020: ...e view Parameters None Description Use the proxy arp enable command to enable proxy ARP Use the undo proxy arp enable command to disable proxy ARP By default proxy ARP is disabled Related commands dis...

Page 1021: ...sname system view Sysname interface Vlan interface 2 Sysname Vlan interface2 local proxy arp enable 2 1 3 display proxy arp Syntax display proxy arp interface Vlan interface vlan id View Any view Para...

Page 1022: ...interface vlan id Displays the local proxy ARP status of the VLAN interface specified by the argument vlan id Description Use the display local proxy arp command to display the status of the local pr...

Page 1023: ...1 12 display dhcp server expired 1 9 1 1 13 display dhcp server free ip 1 10 1 1 14 display dhcp server forbidden ip 1 10 1 1 15 display dhcp server ip in use 1 11 1 1 16 display dhcp server statistic...

Page 1024: ...cp relay 2 10 2 1 14 display dhcp relay security 2 11 2 1 15 display dhcp relay security statistics 2 12 2 1 16 display dhcp relay security tracker 2 13 2 1 17 display dhcp relay server group 2 13 2 1...

Page 1025: ...pool view Parameters ip ip address Specifies an IP address for the BIMS server port port number Specifies a port number for the BIMS server in the range 1 to 65534 sharekey key Specifies a shared key...

Page 1026: ...meters bootfile name Boot file name a string of 1 to 63 characters Description Use the bootfile name command to specify a bootfile name in the DHCP address pool for the client Use the undo bootfile na...

Page 1027: ...P server and relay agent configurations Examples Enable DHCP Sysname system view Sysname dhcp enable 1 1 4 dhcp select server global pool Syntax dhcp select server global pool subaddress undo dhcp sel...

Page 1028: ...d on an interface Examples Enable the DHCP server on VLAN interface 1 Sysname system view Sysname interface vlan interface 1 Sysname Vlan interface1 dhcp select server global pool 1 1 5 dhcp server de...

Page 1029: ...ver interfaces Note that z When you use the dhcp server forbidden ip command to exclude an IP address that is bound to a user from dynamic assignment the address can be still assigned to the user z Wh...

Page 1030: ...cified DHCP address pool By default no DHCP address pool is created Related commands dhcp enable Examples Create the DHCP address pool identified by 0 Sysname system view Sysname dhcp server ip pool 0...

Page 1031: ...lue for ping packets in milliseconds in the range of 0 to 10 000 0 means no ping operation Description Use the dhcp server ping timeout command to configure response timeout time of the ping packet on...

Page 1032: ...82 Sysname system view Sysname undo dhcp server relay information enable 1 1 11 display dhcp server conflict Syntax display dhcp server conflict all ip ip address View Any view Parameters all Displays...

Page 1033: ...splays the lease expiration information of a specified address pool The pool name is a string of 1 to 35 characters If the pool name is not specified the lease expiration information of all address po...

Page 1034: ...pired Lease expiration The lease expiration time Type Types of lease expirations Currently this field is set to Release 1 1 13 display dhcp server free ip Syntax display dhcp server free ip View Any v...

Page 1035: ...view Parameters all Displays the binding information of all DHCP address pools ip ip address Displays the binding information of a specified IP address pool pool name Displays the binding information...

Page 1036: ...ding Manual Auto OFFERED and Auto COMMITTED z Manual Static binding z Auto OFFERED The binding sent in the DHCP OFFER message from the server to the client z Auto COMMITTED The binding sent in the DHC...

Page 1037: ...Field Description Global Pool Statistics of a DHCP address pool Pool Number The number of address pools Auto The number of dynamic bindings Manual The number of static bindings Expire The number of e...

Page 1038: ...be displayed Description Use the display dhcp server tree command to display the tree organization information of DHCP address pool s Examples Display the tree organization information of all DHCP ad...

Page 1039: ...of the same nature network The earlier the sibling node is configured the higher selection priority the sibling node has z PrevSibling node The previous sibling node of the current node option Self de...

Page 1040: ...e domain name undo domain name View DHCP address pool view Parameters domain name Domain name suffix for DHCP clients a string of 1 to 50 characters Description Use the domain name command to specify...

Page 1041: ...36 years Description Use the expired command to specify the lease duration in a DHCP address pool Use the undo expired command to restore the default lease duration in a DHCP address pool The lease du...

Page 1042: ...gateway list command repeatedly the latest configuration will overwrite the previous one Examples Specify the gateway address 10 110 1 99 in DHCP address pool 0 Sysname system view Sysname dhcp serve...

Page 1043: ...the message p node Peer to peer node A p node client sends the destination name in a unicast message to the WINS server and the WINS server returns the mapping to the client m node Mixed node a combin...

Page 1044: ...in the range of 1 to 30 mask mask Specifies the IP address network mask in dotted decimal format Description Use the network command to specify the IP address range for dynamic allocation in a DHCP ad...

Page 1045: ...p address 1 8 Specifies IP addresses 1 8 indicates you can specify up to eight IP addresses separated by spaces Description Use the option command to configure a self defined DHCP option in a DHCP add...

Page 1046: ...ntax reset dhcp server ip in use all ip ip address pool pool name View User view Parameters all Clears the IP address dynamic binding information of all DHCP address pools ip ip address Clears the dyn...

Page 1047: ...ntax static bind client identifier client identifier undo static bind client identifier View DHCP address pool view Parameters client identifier The client ID of a static binding a string with 4 to 16...

Page 1048: ...bb to the IP address 10 1 1 1 with the mask 255 255 255 0 in DHCP address pool 0 Sysname system view Sysname dhcp server ip pool 0 Sysname dhcp pool 0 static bind ip address 10 1 1 1 mask 255 255 255...

Page 1049: ...the IP address 10 1 1 1 with the mask 255 255 255 0 in DHCP address pool 0 Sysname system view Sysname dhcp server ip pool 0 Sysname dhcp pool 0 static bind ip address 10 1 1 1 mask 255 255 255 0 Sysn...

Page 1050: ...255 255 255 0 Sysname dhcp pool 0 static bind mac address 0000 e03f 0305 1 1 32 tftp server domain name Syntax tftp server domain name domain name undo tftp server domain name View DHCP address pool v...

Page 1051: ...address from a DHCP address pool By default no TFTP server address is specified Using the tftp server ip address command repeatedly will overwrite the previous configuration Examples Specify the TFTP...

Page 1052: ...the voice config command to configure specified Option 184 contents in a DHCP address pool Use the undo voice config command to remove specified Option 184 contents from a DHCP address pool By default...

Page 1053: ...Snooping cannot be configured on the DHCP relay agent 2 1 DHCP Relay Agent Configuration Commands 2 1 1 dhcp enable Syntax dhcp enable undo dhcp enable View System view Parameters None Description Use...

Page 1054: ...king on the relay agent Description Use the dhcp relay address check enable command to enable IP address match check on the relay agent Use the dhcp relay address check disable command to disable IP a...

Page 1055: ...name user defined node identifier undo dhcp relay information format verbose node identifier View Interface view Parameters normal Specifies the normal padding format verbose Specifies the verbose pad...

Page 1056: ...th the device name sysname of a node the device name must contain no spaces Otherwise the DHCP relay agent will drop the message Examples Specify the verbose padding format for Option 82 Sysname syste...

Page 1057: ...taining Option 82 as keep Sysname system view Sysname interface vlan interface 1 Sysname Vlan interface1 dhcp relay information enable Sysname Vlan interface1 dhcp relay information strategy keep 2 1...

Page 1058: ...tic command to configure a static client entry that is the binding between IP address MAC address and VLAN interface on the relay agent Use the undo dhcp relay security command to remove specified cli...

Page 1059: ...t contacts the DHCP server for refreshing dynamic bindings Use the undo dhcp relay security tracker command to restore the default interval The default handshake interval is auto the value of 60 secon...

Page 1060: ...do dhcp relay server group command to remove a DHCP server from a DHCP server group if no ip ip address is specified all servers in the DHCP server group and the server group itself will be removed By...

Page 1061: ...e undo dhcp relay server select command to remove a configured correlation By default no DHCP server group is correlated with an interface on the relay agent Note that an interface on the relay agent...

Page 1062: ...ss from the DHCP address pool to the client Examples Enable the DHCP relay agent on VLAN interface 1 Sysname system view Sysname interface vlan interface 1 Sysname Vlan interface1 dhcp select relay 2...

Page 1063: ...ss dynamic Displays information about dynamic bindings static Displays information about static bindings Description Use the display dhcp relay security command to display information about bindings o...

Page 1064: ...rs None Description Use the display dhcp relay security statistics command to display statistics information about bindings of DHCP relay agents Examples Display statistics about client address bindin...

Page 1065: ...agent Sysname display dhcp relay security tracker Current tracker interval 10s Specified by user The interval is 10 seconds 2 1 17 display dhcp relay server group Syntax display dhcp relay server gro...

Page 1066: ...all Specifies all server groups about which to display DHCP packet statistics Information for each group will be displayed Description Use the display dhcp relay statistics command to display DHCP pac...

Page 1067: ...s relayed 0 DHCPACK packets relayed 0 DHCPNAK packets relayed 0 BOOTPREPLY packets relayed 0 DHCP packets sent to servers 0 DHCPDISCOVER packets sent 0 DHCPREQUEST packets sent 0 DHCPINFORM packets se...

Page 1068: ...eters server group group id Specifies a server group ID in the range of 0 to 19 about which to remove statistics from the relay agent Description Use the reset dhcp relay statistics command to remove...

Page 1069: ...erated or the DHCP client may fail to obtain an IP address 3 1 DHCP Client Configuration Commands 3 1 1 display dhcp client Syntax display dhcp client verbose interface interface type interface number...

Page 1070: ...200 1 1 1 1 Client ID 3030 3066 2e65 3234 392e 3830 3438 2d56 6c61 6e2d 696e 7465 7266 6163 6531 T1 will timeout in 1 day 11 hours 58 minutes 52 seconds Table 3 1 Description on fields of the display...

Page 1071: ...ameters client identifier mac interface type interface number Specifies the MAC address of an interface using which as the client ID to obtain an IP address Description Use the ip address dhcp alloc c...

Page 1072: ...Command Manual DHCP H3C S7500E Series Ethernet Switches Chapter 3 DHCP Client Configuration Commands 3 4 Sysname interface vlan interface 1 Sysname Vlan interface1 ip address dhcp alloc...

Page 1073: ...agent and DHCP server and it can work when it is between the DHCP client and relay agent or between the DHCP client and server z The DHCP Snooping enabled device cannot be a DHCP server or DHCP relay...

Page 1074: ...do dhcp snooping information enable View Ethernet port view Parameters None Description Use the dhcp snooping information enable command to configure DHCP Snooping to support Option 82 Use the undo dh...

Page 1075: ...for Option 82 Use the undo dhcp snooping information format command to restore the default padding format By default the padding format for Option 82 is normal Note that when you use the undo dhcp sn...

Page 1076: ...tegy for Option 82 in requesting messages is replace Examples Configure the handling strategy for Option 82 in requesting messages as keep Sysname system view Sysname interface gigabitethernet2 0 1 Sy...

Page 1077: ...cp snooping Syntax display dhcp snooping View Any view Parameters None Description Use the display dhcp snooping command to display the binding information recorded through DHCP snooping Related comma...

Page 1078: ...the port connecting the DHCP client resides Interface Port to which the DHCP client is connected 4 1 7 display dhcp snooping trust Syntax display dhcp snooping trust View Any view Parameters None Des...

Page 1079: ...ars all DHCP snooping binding information ip ip address Clears the DHCP snooping binding information of the specified IP address Description Use the reset dhcp snooping command clear DHCP snooping bin...

Page 1080: ...display acl 1 10 1 2 6 reset acl counter 1 11 1 2 7 rule in basic IPv4 ACL view 1 12 1 2 8 rule in advanced IPv4 ACL view 1 14 1 2 9 rule in Ethernet frame header ACL view 1 19 1 2 10 rule comment for...

Page 1081: ...ses on a switch Note that z Using the command with a specified a slot will display the ACL uses of that slot Otherwise the ACL uses of all slots of the device will be displayed z If the board specifie...

Page 1082: ...Type Total Reserved Configured Remaining VFP ACL 1024 0 0 1024 IFP ACL 4096 0 46 4050 IFP Meter 2048 0 46 2002 IFP Counter 2048 0 0 2048 EFP ACL 512 0 0 512 EFP Meter 256 0 0 256 EFP Counter 512 0 0 5...

Page 1083: ...nd applied in QinQ Total Total number of ACLs supported Reserved Number of reserved ACLs Configured Number of configured ACLs Remaining Number of remaining ACLs 1 1 2 display time range Syntax display...

Page 1084: ...is case insensitive and must start with an English letter To avoid confusion this name cannot be all start time Start time of a periodic time range in hh mm format as 24 hour time where hh is hours a...

Page 1085: ...o time range command to remove a time range A time range can be one of the following z Periodic time range created using the time range time name start time to end time days command A time range thus...

Page 1086: ...ew System view Parameters number Defines a numbered access control list ACL acl number IPv4 ACL number in the range of 2000 to 4999 z 2000 to 2999 for basic IPv4 ACLs z 3000 to 3999 for advanced IPv4...

Page 1087: ...ame ACL z You can also use this command to modify the match order of an existing ACL but only when it is empty Examples Create IPv4 ACL 2000 Sysname system view Sysname acl number 2000 Sysname acl bas...

Page 1088: ...to 2999 for basic IPv4 ACLs z 3000 to 3999 for advanced IPv4 ACLs z 4000 to 4999 for Ethernet frame header ACLs dest acl name Name for the new IPv4 ACL a case insensitive string of 1 to 32 characters...

Page 1089: ...name command to enter the view of an existing IPv4 ACL by specifying its name Examples Enter the view of the IPv4 ACL named flow Sysname system view Sysname acl name flow Sysname acl basic 2002 flow...

Page 1090: ...tframe 4000 description This acl is used in eth 2 0 1 1 2 5 display acl Syntax display acl acl number all name acl name View Any view Parameters acl number IPv4 ACL number which must be in the followi...

Page 1091: ...steps of 5 5 times matched Five matches for the rule Only ACL matches performed by software are counted This field appears as long as one match is found rule 5 comment This rule is used in eth 2 0 1...

Page 1092: ...e 0 to 65534 deny Defines a deny statement to drop matched packets permit Defines a permit statement to allow matched packets to pass fragment Specifies that the rule applies to only IP fragments Note...

Page 1093: ...mit deny statement is exactly the same as another rule In addition if the ACL match order is set to auto rather than config you cannot modify ACL rules z When defining ACL rules you need not assign th...

Page 1094: ...mit statement to allow matched packets to pass protocol Protocol carried by IP It can be a number in the range 0 to 255 or in words gre 47 icmp 1 igmp 2 ip ipinip 4 ospf 89 tcp 6 udp 17 Table 1 4 Para...

Page 1095: ...ed only for TCP UDP or ICMP packets and its statement can only be permit fragment Specifies that the rule applies to only IP fragments A rule defined with the fragment keyword matches non last IP frag...

Page 1096: ...l 544 login 513 lpd 515 nntp 119 pop2 109 pop3 110 smtp 25 sunrpc 111 tacacs 49 talk 517 telnet 23 time 37 uucp 540 whois 43 or www 80 UDP port number can be represented in words as follows biff 512 b...

Page 1097: ...vailable ICMP messages see Table 1 7 The following table provides the ICMP messages that you can specify in advanced IPv4 ACL rules Table 1 7 ICMP messages and their codes ICMP message Type Code echo...

Page 1098: ...creasing in certain rule numbering steps A rule ID thus assigned is greater than the current highest rule ID For example if the rule numbering step is five and the current highest rule ID is 28 the ne...

Page 1099: ...x format lsap lsap code lsap wildcard Defines the DSAP and SSAP fields in the LLC encapsulation The lsap code argument is a 16 bit hexadecimal number indicating frame encapsulation The lsap wildcard a...

Page 1100: ...28 the next rule will be numbered 30 z You may use the display acl command to verify rules configured in an ACL If the match order for this ACL is auto rules are displayed in the depth first order rat...

Page 1101: ...0 rule 0 comment This rule is used in eth 2 0 1 Create a rule in ACL 3000 and define the rule description Sysname system view Sysname acl number 3000 Sysname acl adv 3000 rule 0 permit ip source 1 1 1...

Page 1102: ...ber name acl6 name match order auto config undo acl ipv6 all name acl6 name number acl6 number View System view Parameters number Defines a numbered IPv6 ACL acl6 number IPv6 ACL number which must be...

Page 1103: ...ame name z If you specify both an ACL number and an ACL name in one command to enter the view of an existing ACL be sure that the ACL number and ACL name identify the same ACL z You can also use this...

Page 1104: ...r Number of a non existent IPv6 ACL which must be in the following ranges z 2000 to 2999 for basic IPv6 ACLs z 3000 to 3999 for advanced IPv6 ACLs dest acl6 name Name for the new IPv6 ACL a case insen...

Page 1105: ...f 1 to 32 characters It must start with an English letter and cannot be the English word of all to avoid confusion Description Use the acl ipv6 name command to enter the view of an existing IPv6 ACL b...

Page 1106: ...iew Sysname acl ipv6 number 3000 Sysname acl6 adv 3000 description This acl is used in eth 0 1 3 5 display acl ipv6 Syntax display acl ipv6 acl6 number all name acl6 name View Any view Parameters acl6...

Page 1107: ...s performed by software are counted The field appears as long as one match is found rule 0 comment This rule is used in eth 2 0 1 The description of ACL rule 5 is This rule is used in eth 2 0 1 1 3 6...

Page 1108: ...ass fragment Specifies that the rule applies to only IP fragments logging Specifies to log matched packets source ipv6 address prefix length ipv6 address prefix length any Specifies a source address T...

Page 1109: ...are displayed in the depth first match order rather than by rule number Note For a basic IPv6 ACL to be referenced by a QoS policy for traffic classification the logging and fragment keywords are not...

Page 1110: ...t dest prefix dest dest prefix any Specifies a destination IPv6 address The dest and dest prefix arguments specify a destination IPv6 address and its prefix length in the range 1 to 128 The any keywor...

Page 1111: ...pher 70 hostname 101 irc 194 klogin 543 kshell 544 login 513 lpd 515 nntp 119 pop2 109 pop3 110 smtp 25 sunrpc 111 tacacs 49 talk 517 telnet 23 time 37 uucp 540 whois 43 or www 80 UDP port number can...

Page 1112: ...able provides the ICMPv6 messages that you can specify in advanced IPv6 ACL rules Table 1 12 Available ICMPv6 messages ICMPv6 message Type Code redirect 137 0 echo request 128 0 echo reply 129 0 err H...

Page 1113: ...p is 5 and the current highest rule ID is 28 the next rule will be numbered 30 z You may use the display acl ipv6 command to verify rules configured in an IPv6 ACL If the match order for this IPv6 ACL...

Page 1114: ...iption for the rule Sysname system view Sysname acl ipv6 number 2000 Sysname acl6 basic 2000 rule 0 permit source 2030 5060 9050 64 Sysname acl6 basic 2000 rule 0 comment This rule is used in eth 2 0...

Page 1115: ...Commands 1 35 Examples Set the rule numbering step to 2 for IPv6 ACL 2000 Sysname system view Sysname acl ipv6 number 2000 Sysname acl6 basic 2000 step 2 Set the rule numbering step to 2 for IPv6 ACL...

Page 1116: ...ior 2 8 2 2 4 filter 2 9 2 2 5 nest 2 10 2 2 6 redirect 2 11 2 2 7 remark customer vlan id 2 12 2 2 8 remark dot1p 2 12 2 2 9 remark drop precedence 2 13 2 2 10 remark dscp 2 14 2 2 11 remark ip prece...

Page 1117: ...3 3 Chapter 4 Priority Mapping Configuration Commands 4 1 4 1 Priority Mapping Table Configuration Commands 4 1 4 1 1 display qos map table 4 1 4 1 2 qos map table 4 2 4 1 3 import 4 3 4 2 Port Priori...

Page 1118: ...f a certain interface or all interfaces If the interface argument is not specified this command will display the LR configuration information of all the interfaces Examples Display the LR configuratio...

Page 1119: ...port 64 to 10000000 Note that the committed information rate argument must be a multiple of 64 cbs committed burst size Specifies the committed burst size in bytes z The committed burst size argument...

Page 1120: ...provided this command displays the information about all the user defined classes Examples Display the information about the user defined classes Sysname display traffic classifier user defined User D...

Page 1121: ...rules defined in the referenced IPv6 ACL is or any Specifies to match all packets customer dot1p 8021p list Specifies to match packets by 802 1p precedence of the customer network The 8021p list argum...

Page 1122: ...ce vlan id vlan id list Specifies to match the packets of specified VLANs of the operator s network The vlan id list argument is a list of VLAN IDs in the form of vlan id to vlan id or multiple discon...

Page 1123: ...a rule for class1 to match the advanced IPv6 ACL 3101 Sysname system view Sysname traffic classifier class1 Sysname classifier class1 if match acl ipv6 3101 Define a rule for class1 to match all the...

Page 1124: ...or s network Sysname system view Sysname traffic classifier class1 Sysname classifier class1 if match service vlan id 1000 2 1 3 traffic classifier Syntax traffic classifier classifier name operator a...

Page 1125: ...on Use the accounting command to configure the traffic accounting action for a traffic behavior Use the undo accounting command to remove the traffic accounting action Related commands qos policy traf...

Page 1126: ...discard Drops the packets z pass Forwards the packets z remark dscp pass new dscp Marks the packets with a new DSCP precedence and forwards them to their destinations The new dscp argument is in the r...

Page 1127: ...eds 6400 kbps the packets beyond 6400 kbps are dropped Sysname system view Sysname traffic behavior database Sysname behavior database car cir 6400 red discard 2 2 3 display traffic behavior Syntax di...

Page 1128: ...ffic behavior which can be of multiple types Marking Information about priority marking Committed Access Rate Information about traffic rate limit CIR Committed information rate in bytes CBS Committed...

Page 1129: ...VLAN The vlan id argument is in the range 1 to 4094 Description Use the nest command configure an outer VLAN tag for a traffic behavior Use the undo nest command to remove the outer VLAN tag Note that...

Page 1130: ...anual aggregation group next hop Specifies the next hop to redirect the traffic to ipv4 add IPv4 address of the next hop ipv6 add IPv6 address of the next hop The interface type interface number argum...

Page 1131: ...r Use the undo remark customer vlan id command to remove the action of setting the customer network VLAN ID Note that the action of setting the customer network VLAN ID cannot be applied to a VLAN or...

Page 1132: ...behavior Examples Configure the action to set 802 1p precedence to 2 for a traffic behavior Sysname system view Sysname traffic behavior database Sysname behavior database remark dot1p 2 2 2 9 remark...

Page 1133: ...precedence to be set for packets in the range of 0 to 63 This argument can also be the keywords listed in Table 2 4 Table 2 4 DSCP keywords and values Keyword DSCP value binary DSCP value decimal defa...

Page 1134: ...6 for a traffic behavior Sysname system view Sysname traffic behavior database Sysname behavior database remark dscp 6 2 2 11 remark ip precedence Syntax remark ip precedence ip precedence value undo...

Page 1135: ...vior Use the undo remark local precedence command to remove the action of remarking local precedence Note that when the remark dot1p command is used together with the remark local precedence command t...

Page 1136: ...ured in the same traffic behavior Otherwise the corresponding QoS policy cannot be applied successfully z The action of setting the service provider network VLAN ID cannot he applied to a VLAN or appl...

Page 1137: ...behavior Description Use the classifier behavior command to associate a traffic behavior with a class Use the undo classifier command to remove a class from a policy Note that each class can be assoc...

Page 1138: ...d classifier name Name of a class in the policy If it is not provided all the classes in the policy are specified Description Use the display qos policy command to display the configuration of a speci...

Page 1139: ...splays the QoS policy applied globally in the inbound direction of all ports outbound Displays the QoS policy applied globally in the outbound direction of all ports slot slot number Displays the glob...

Page 1140: ...ame 2 3 4 display qos policy interface Syntax display qos policy interface interface type interface number inbound outbound View Any view Parameters interface type Port type interface number Port numb...

Page 1141: ...en 0 Packets Table 2 7 Description on the fields of the display qos policy interface command Field Description Interface Port name comprising of port type and port number Direction Direction of the po...

Page 1142: ...splay qos vlan policy command to display the information about VLAN policies If the vlan id argument is not specified the information about all the VLAN policies will be displayed Examples Display the...

Page 1143: ...ior Name of the behavior in the policy and its configuration 2 3 6 qos apply policy Syntax qos apply policy policy name inbound outbound undo qos apply policy inbound outbound View Ethernet port view...

Page 1144: ...d Supported Supporte d Not supported Support ed Not supported Configuri ng the outer VLAN tag Support ed Not supported Supporte d Not supported Support ed Not supported Traffic redirecti ng Support ed...

Page 1145: ...t ed Not supported Note SC LPUs include LSQ1GP24SC LPUs and so on SA LPUs include LSQ1FP48SA LPUs and so on EA LPUs include LSQ1GP12EA LPUs For the detailed information about LPU types refer to the in...

Page 1146: ...cy applied globally takes effect on all inbound or outbound traffic depending on the direction in which the policy is applied Use the undo qos apply policy global command to cancel the global applicat...

Page 1147: ...vlan id list inbound outbound View System view Parameters policy name Policy name vlan id list List of VLAN IDs presented in the form of vlan id to vlan id or discontinuous VLAN IDs Up to eight VLAN...

Page 1148: ...n 200 300 400 500 600 700 800 900 inbound 2 3 10 reset qos policy global Syntax reset qos policy global inbound outbound View User view Parameters inbound Specifies the inbound direction outbound Spec...

Page 1149: ...QoS Policy Configuration Commands 2 30 Description Use the reset qos vlan policy command to clear the statistics information about VLAN policies Examples Clear the statistics information about the VL...

Page 1150: ...type interface number Port number Description Use the display qos sp interface command to display the strict priority SP queuing configuration on a specified port If no port is specified this command...

Page 1151: ...isplay the configuration of WRR queues of Ethernet 2 0 1 Sysname display qos wrr interface Ethernet 2 0 1 Interface Ethernet2 0 1 Output queue Weighted round robin queue Queue ID Group Weight 0 sp N A...

Page 1152: ...on the port By default the switch adopts the SP queue scheduling algorithm Related commands display qos sp interface Examples Configure SP queuing on Ethernet 2 0 1 H3C system view H3C interface Ether...

Page 1153: ...packet is to be sent in the queues in the SP scheduling group the queues in the WRR scheduling group are scheduled The queues in the SP scheduling group are scheduled according to the strict priority...

Page 1154: ...ecedence mapping table dscp dp Specifies the DSCP to drop precedence mapping table dscp dot1p Specifies the DSCP to 802 1p precedence mapping table dscp dscp Specifies the DSCP to DSCP mapping table D...

Page 1155: ...dscp dp dscp dscp View System view Parameters dot1p lp Specifies the 802 1p precedence to local precedence mapping table dot1p dp Specifies the 802 1p precedence to drop precedence mapping table dscp...

Page 1156: ...for a priority mapping table that is to define one or more mapping rules Use the undo import command to restore specific entries of a priority mapping table to the default Note that you cannot config...

Page 1157: ...p dp lp mapping table for the local drop precedence for the packets according to the priority of the receiving port Examples Set the port priority of Ethernet2 0 1 port to 2 Sysname system view Sysnam...

Page 1158: ...of the received packets is trusted z untrust indicates that the 802 1p precedence of the received packets is trusted 4 3 2 qos trust Syntax qos trust dscp undo qos trust View Ethernet port view port g...

Page 1159: ...number of the destination port for the traffic mirroring action Description Use the mirror to command to configure traffic mirroring action for a traffic behavior Use the undo mirror to command to re...

Page 1160: ...ation Commands 1 1 1 1 Port Mirroring Configuration Commands 1 1 1 1 1 display mirroring group 1 1 1 1 2 mirroring group 1 2 1 1 3 mirroring group mirroring port 1 3 1 1 4 mirroring group monitor egre...

Page 1161: ...local Specifies local port mirroring groups remote destination Specifies remote destination port mirroring groups remote source Specifies remote source port mirroring groups Description Use the displ...

Page 1162: ...Source mirroring port monitor port Destination mirroring port monitor egress port Outbound mirroring port remote probe vlan Remote mirroring VLAN 1 1 2 mirroring group Syntax mirroring group group id...

Page 1163: ...n keyword to remove all the remote destination port mirroring groups z Use the remote source keyword to remove all the remote source mirroring groups Examples Create a local port mirroring group numbe...

Page 1164: ...rt cannot be a member port of the current mirroring group z A remote destination mirroring group cannot contain source mirroring ports Examples Add ports to port mirroring group 1 as source ports assu...

Page 1165: ...g ports A port mirroring group can have only one outbound mirroring port z The outbound port cannot be a member port of the current mirroring group z It is not recommended to configure STP RSTP MSTP 8...

Page 1166: ...of the current mirroring group z The destination mirroring port can be an access trunk or hybrid port It must be assigned to the remote mirroring VLAN z A remote source port mirroring group cannot con...

Page 1167: ...oup Note that z Only remote source port mirroring groups or remote destination port mirroring groups can have remote mirroring VLANs A port mirroring group can have only one remote mirroring VLAN z To...

Page 1168: ...keyword argument combination these two commands apply to port mirroring group 1 z The source port cannot be a member port of the current mirroring group z A remote destination mirroring group cannot c...

Page 1169: ...n destination mirroring ports z Member ports of existing port mirroring groups cannot be destination ports z The remote destination mirroring port can be an access trunk or hybrid port It must be assi...

Page 1170: ...ent community 1 12 1 1 13 snmp agent group 1 13 1 1 14 snmp agent local engineid 1 14 1 1 15 snmp agent log 1 15 1 1 16 snmp agent mib view 1 16 1 1 17 snmp agent packet max size 1 17 1 1 18 snmp agen...

Page 1171: ...Command Manual SNMP RMON H3C S7500E Series Ethernet Switches Table of Contents ii 2 1 8 rmon event 2 11 2 1 9 rmon history 2 13 2 1 10 rmon prialarm 2 14 2 1 11 rmon statistics 2 16...

Page 1172: ...ID identifies an SNMP entity uniquely within an SNMP domain SNMP engine is an indispensable part of an SNMP entity It provides the SNMP message allocation message handling authentication and access co...

Page 1173: ...ons on the fields of display snmp agent community Field Description Community name Community name Group name SNMP group name Acl The number of the ACL in use Storage type Storage type which could be z...

Page 1174: ...the display snmp agent group command Field Description Group name SNMP group name Security model Security model of the SNMP group which can be authPriv authentication with privacy authNoPriv authentic...

Page 1175: ...that information for all MIB views will be displayed Examples Display the current SNMP MIB views Sysname display snmp agent mib view View name ViewDefault MIB Subtree iso Subtree mask Storage type non...

Page 1176: ...iew status The status of MIB view 1 1 5 display snmp agent statistics Syntax display snmp agent statistics View Any view Parameters None Description Use the display snmp agent statistics command to di...

Page 1177: ...sages which used a SNMP community name not known Number of packets that use an unknown community name Messages which represented an illegal operation for the community supplied Number of packets with...

Page 1178: ...Us dropped silently Number of dropped response packets Forwarded Confirmed Class PDUs dropped silently Number of forwarded packets that have been dropped 1 1 6 display snmp agent sys info Syntax displ...

Page 1179: ...whole module will be displayed as being enabled with the Trap sending Related commands snmp agent trap enable Examples Display the modules that can send the Trap messages and whether their Trap sendin...

Page 1180: ...sensitive group group name Displays SNMPv3 user information for a specified SNMP group name It is case sensitive Description Use the display snmp agent usm user command to display SNMPv3 user informa...

Page 1181: ...ed Note that To enable an interface to send SNMP Traps when its state changes you need to enable the Link up down Trap packet transmission function on an interface and globally Use the enable snmp tra...

Page 1182: ...word string The engine ID string an even number of hexadecimal characters in the range 10 to 64 Its length must not be an odd number and the all zero and all F strings are invalid Description Use the...

Page 1183: ...2 snmp agent community Syntax snmp agent community read write community name acl acl number mib view view name undo snmp agent community community name View System view Parameters read Indicates that...

Page 1184: ...configured with this command is only valid for the SNMP v1 and v2c agent Examples Configure a community with the name of comaccess that has read only access right Sysname system view Sysname snmp age...

Page 1185: ...n the range 2000 to 2999 Description Use the snmp agent group command to configure a new SNMP group and specify its access right Use the undo snmp agent group command to delete a specified SNMP group...

Page 1186: ...ed commands snmp agent usm user Examples Configure the local engine ID as 123456789A Sysname system view Sysname snmp agent local engineid 123456789A 1 1 15 snmp agent log Syntax snmp agent log all ge...

Page 1187: ...ers oid tree MIB subtree It can only be an OID string such as 1 4 5 3 1 or an object name string such as system OID is made up of a series of integers which marks the position of the node in the MIB t...

Page 1188: ...t by an agent in the range 484 to 17 940 The default value is 1 500 bytes Description Use the snmp agent packet max size command to configure the maximum number of bytes in an SNMP packet that can be...

Page 1189: ...the specified SNMP version By default the location information is Hangzhou China version is SNMPv3 and the contact is Hangzhou H3C Technologies Co Ltd Related commands display snmp agent sys info Note...

Page 1190: ...supporting IPv4 udp port port number Specifies the number of the port that receives Trap messages params securityname security string Specifies authentication related parameters which is SNMPv1 or SN...

Page 1191: ...s id ospf trap list standard authentication coldstart linkdown linkup warmstart system vrrp authfailure newmaster View System view Parameters bgp Enables the sending of BGP Trap messages configuration...

Page 1192: ...NMP Traps when its state changes you need to enable the Link up down Trap packet transmission function on an interface and globally Use the enable snmp trap updown command to enable this function on a...

Page 1193: ...messages are not supported on NMS the device may not be able to resolute the messages Examples Extend standard linkUp linkDown Trap messages defined in RFC Sysname system view Sysname snmp agent trap...

Page 1194: ...Trap queue Use the undo snmp agent trap queue size command to restore the default queue size By default up to 100 Trap messages can be stored in the Trap queue Related commands snmp agent trap enable...

Page 1195: ...t is likely that the configurations will either fail or be invalid Related commands snmp agent trap enable snmp agent target host Examples Configure the IP address for the port VLAN interface 1 as the...

Page 1196: ...case sensitive group name Group name a string of 1 to 32 characters It is case sensitive cipher Specifies that auth password and priv password are cipher text passwords authentication mode Specifies...

Page 1197: ...s are the same you can copy and paste the SNMPv3 configuration commands in the configuration file on device A to device B and execute the commands on device B The cipher text password and plain text p...

Page 1198: ...ey Sysname system view Sysname snmp agent usm user v3 testUser testGroup authentication mode md5 authkey privacy mode des56 prikey Add a user testUser to the SNMPv3 group testGroup with the cipher key...

Page 1199: ...splay the configuration of the specified or all RMON alarm entries Related commands rmon alarm Examples Display the configuration of all RMON alarm table entries Sysname display rmon alarm Alarm table...

Page 1200: ...sing alarm is triggered Falling threshold Alarm falling threshold When the sampling value is smaller than or equal to this threshold a falling alarm is triggered When startup enables How an alarm can...

Page 1201: ...configuration and display this commands you cannot view the corresponding rmon commands Description Description for the event cause log trap when triggered The event will trigger logging and trapping...

Page 1202: ...ion The alarm formula defined in private alarm table 1 less than or 100 with alarm value 0 Alarm sample type is absolute Table 2 3 Description on the fields of the display rmon eventlog command Field...

Page 1203: ...tilization 0 Table 2 4 Description on the fields of the display rmon history command Field Description History control entry Index of the history control entry for the interface 1 in this example owne...

Page 1204: ...sampling period jabbers Number of jabbers received during the sampling period collisions Number of colliding packets received during the sampling period utilization Bandwidth utilization during the s...

Page 1205: ...and UNDERCREATION means invalid You can use the display rmon command to view the invalid entry and with the display current configuration and display this commands you cannot view the corresponding rm...

Page 1206: ...ions 0 etherStatsDropEvents insufficient resources 0 Packets received according to length 64 0 65 127 0 128 255 0 256 511 0 512 1023 0 1024 1518 0 Table 2 6 Description on the fields of the display rm...

Page 1207: ...lisions received on the interface during the statistical period etherStatsDropEvents Total number of drop events received on the interface during the statistical period Packets received according to l...

Page 1208: ...47 and event entry2 represents the index of the event triggered when the falling threshold is reached It ranges from 1 to 65 535 owner text Owner of the entry a string of 1 to 127 characters It is cas...

Page 1209: ...m table and sample the node 1 3 6 1 2 1 16 1 1 1 4 1 at a sampling interval of 10 seconds in absolute sampling type Generate event 1 when the sampled value is greater than or equal to the rising thres...

Page 1210: ...sent a string of 1 to 127 characters owner text Owner of the entry a string of 1 to 127 characters It is case sensitive and space is supported Description Use the rmon event command to create an entr...

Page 1211: ...Use the undo rmon history command to remove a specified entry from the RMON history control table This command enables RMON to periodically sample and save for an interface data such as bandwidth util...

Page 1212: ...he formula 1 3 6 1 2 1 2 1 10 1 8 for example You may perform the basic operations of addition subtraction multiplication and division on these variables The operations should yield a long integer To...

Page 1213: ...ling interval 2 Performs calculation on the sampled values with the formula 3 Compares the calculation result with the predefined thresholds and does the following z If the rising threshold is reached...

Page 1214: ...hold 5 2 entrytype forever owner user1 Remove private alarm entry 10 Sysname system view Sysname undo rmon prialarm 10 2 1 11 rmon statistics Syntax rmon statistics entry number owner text undo rmon s...

Page 1215: ...You can create up to 100 statistics entries Examples Create an entry in the RMON statistics table for interface Ethernet 2 0 1 The index of the entry is 20 Sysname system view Sysname interface Ethern...

Page 1216: ...authentication enable 1 6 1 1 6 ntp service authentication keyid 1 7 1 1 7 ntp service broadcast client 1 8 1 1 8 ntp service broadcast server 1 9 1 1 9 ntp service in interface disable 1 9 1 1 10 ntp...

Page 1217: ...TP sessions Description Use the display ntp service sessions command to view the information of all NTP sessions Without the verbose keyword this command will display only the brief information of all...

Page 1218: ...poll Poll interval namely the maximum interval between successive NTP messages now The length of time in minutes from when the last NTP message was received or when the local clock was last updated to...

Page 1219: ...iations 1 1 2 display ntp service status Syntax display ntp service status View Any view Parameters None Description Use the display ntp service status command to view the NTP service status informati...

Page 1220: ...When the stratum of the local clock has another value the value of this filed is the IP address of the local clock Nominal frequency The nominal frequency of the local system hardware clock Actual fre...

Page 1221: ...fset 0 506500 synch distance 0 03429 refid LOCL The information above shows an NTP server chain for the server 127 0 0 1 The server 127 0 0 1 is synchronized to the server 133 1 1 1 and the server 133...

Page 1222: ...om the highest NTP service access control right to the lowest one are peer server synchronization and query When a device receives an NTP request it will perform an access control right match and will...

Page 1223: ...name ntp service authentication enable 1 1 6 ntp service authentication keyid Syntax ntp service authentication keyid keyid authentication mode md5 value undo ntp service authentication keyid keyid Vi...

Page 1224: ...command Examples Set an MD5 authentication key with the key ID of 10 and key value of BetterKey Sysname system view Sysname ntp service authentication keyid 10 authentication mode md5 BetterKey 1 1 7...

Page 1225: ...tion is not required version number Specifies the NTP version where number is in the range of 1 to 3 and defaults to 3 Description Use the ntp service broadcast server command to configure the device...

Page 1226: ...e system view Sysname interface ethernet 2 0 1 Sysname Ethernet2 0 1 ntp service in interface disable z On a VLAN interface Disable VLAN interface 1 from receiving NTP messages Sysname system view Sys...

Page 1227: ...address Multicast IP address defaulting to 224 0 1 1 It is in the range 224 0 1 0 to 224 0 1 255 Description Use the ntp service multicast client command to configure the device to work in the NTP mul...

Page 1228: ...the NTP version where number is in the range of 1 to 3 and defaults to 3 Description Use the ntp service multicast server command to configure the device to work in the NTP multicast server mode Use...

Page 1229: ...aster command to remove the local clock as a reference source Note The stratum level of a clock defines the clock precision The value range is 1 to 16 The clock precision decreases from stratum 1 to s...

Page 1230: ...ication enable Sysname ntp service authentication keyid 37 authentication mode md5 BetterKey Sysname ntp service reliable authentication keyid 37 1 1 15 ntp service source interface Syntax ntp service...

Page 1231: ...f 1 to 20 characters authentication keyid keyid Specifies the key ID to be used for sending NTP messages to the peer where keyid is in the range of 1 to 4294967295 priority Specifies the peer designat...

Page 1232: ...address or the IP address of the local clock server name Host name of the NTP server a string of 1 to 20 characters authentication keyid keyid Specifies the key ID to be used for sending NTP messages...

Page 1233: ...ries Ethernet Switches Chapter 1 NTP Configuration Commands 1 17 Examples Designate the device with the IP address of as 10 1 1 1 an NTP server for the device Sysname system view Sysname ntp service u...

Page 1234: ...1 1 DNS Configuration Commands 1 1 1 1 1 display dns domain 1 1 1 1 2 display dns dynamic host 1 2 1 1 3 display dns proxy table 1 3 1 1 4 display dns server 1 4 1 1 5 display ip host 1 5 1 1 6 dns d...

Page 1235: ...to IPv6 Commands 1 1 DNS Configuration Commands 1 1 1 display dns domain Syntax display dns domain dynamic View Any view Parameters dynamic Displays the domain name suffixes dynamically obtained throu...

Page 1236: ...mic host Syntax display dns dynamic host View Any view Parameters None Description Use the display dns dynamic host command to display the information of the dynamic domain name resolution cache Examp...

Page 1237: ...layed 1 1 3 display dns proxy table Syntax display dns proxy table View Any view Parameters None Description Use the display dns proxy table command to display the DNS proxy table Examples Display the...

Page 1238: ...the display dns server command to display the DNS server information Related commands dns server Examples Display the DNS server information Sysname display dns server Type D Dynamic S Static DNS Ser...

Page 1239: ...ses in the static domain name resolution table Sysname display ip host Host Age Flags Address My 0 static 1 1 1 1 Aa 0 static 2 2 2 4 Table 1 5 Description on fields of the display ip host command Fie...

Page 1240: ...n automatically add the suffix to part of the domain name you entered for resolution Use the undo dns domain command to delete a domain name suffix with a domain name suffix specified or all domain na...

Page 1241: ...se the dns resolve command to enable dynamic domain name resolution Use the undo dns resolve command to disable dynamic domain name resolution Dynamic domain name resolution is disabled by default Exa...

Page 1242: ...sisting of 1 to 20 characters including case insensitive letters numbers hyphens or dots The host name must include at least one letter ip address IP address of the specified host in dotted decimal no...

Page 1243: ...ynamic host Syntax reset dns dynamic host View User view Parameters None Description Use the reset dns dynamic host command to clear the dynamic domain name resolution information Related commands dis...

Page 1244: ...5 reset recycle bin 1 11 1 1 16 rmdir 1 11 1 1 17 umount 1 12 1 1 18 undelete 1 13 1 2 Configuration File Management Commands 1 13 1 2 1 backup startup configuration 1 13 1 2 2 display saved configura...

Page 1245: ...2 11 2 2 12 ftp 2 12 2 2 13 ftp client source 2 13 2 2 14 ftp ipv6 2 14 2 2 15 get 2 16 2 2 16 lcd 2 16 2 2 17 ls 2 17 2 2 18 mkdir 2 18 2 2 19 open 2 19 2 2 20 open ipv6 2 19 2 2 21 passive 2 20 2 2...

Page 1246: ...can be 1 to 135 characters in length excluding the ending character z A short filename with the path excluded to indicate a file in the current working path The filename can be 1 to 91 characters in l...

Page 1247: ...g to flash tt cfg Y N y Copy file flash testcfg cfg to flash tt cfg Done 1 1 3 delete Syntax delete unreserved file url View User view Parameters unreserved Permanently deletes the specified file and...

Page 1248: ...1 1 4 dir Syntax dir all file url View User view Parameters all Displays all files including those in the recycle bin file url Name of the file or directory to be displayed Asterisks are acceptable a...

Page 1249: ...name View System view Parameters filename Name of a batch file with a bat extension Description Use the execute command to execute the specified batch file Batch files are command line files Executing...

Page 1250: ...lert Enables the system to warn you about operations that may bring undesirable results such as file corruption or data loss quiet Disables the system to warn you about any operation Description Use t...

Page 1251: ...take some time to complete Fixdisk flash completed 1 1 8 format Syntax format device View User view Parameters device Storage device name for example flash or cf Description Use the format command to...

Page 1252: ...ory on the storage device The name of the subdirectory to be created must be unique under the specified directory This command does not allow you to create multiple directory levels at one time For in...

Page 1253: ...at the project level and is used to build a single project or subproject Other users can share the project dsp file but they should export the makefiles locally 1 1 11 mount Syntax mount device View...

Page 1254: ...rd of the main board Sysname mount cf Mount cf successfully Apr 23 01 50 00 628 2003 System VFS 4 LOG cf mounted into slot 4 Mount a CF card of the backup board assume the backup board is in slot 5 Sy...

Page 1255: ...current path is not set the operation will fail Examples Display the current path Sysname pwd flash 1 1 14 rename Syntax rename fileurl source fileurl dest View User view Parameters fileurl source Nam...

Page 1256: ...cle bin Description Use the reset recycle bin command to permanently remove deleted file or files from the recycle bin Unlike this command the delete file url command only moves files to the recycle b...

Page 1257: ...only when the device is in mounted state By default a storage device is in the mounted state that is you can use it without mounting it Note that z Do not remove the storage device or swap the board...

Page 1258: ...undelete Syntax undelete file url View User view Parameters filename Name of the file to be restored Description Use the undelete command to restore a file from the recycle bin If another file with th...

Page 1259: ...up the configuration file of the main board for next startup z This command backs up the configuration file for next startup Presently the device uses TFTP to backup configuration files Examples Backu...

Page 1260: ...you have saved the configuration file after the device starts up the information last saved in the configuration file is displayed Related commands save reset saved configuration display current conf...

Page 1261: ...d on the AMB and SMB are always the same z After switchover between the AMB and SMB the new AMB does not restart from the configuration file and runs with the current configuration instead Therefore w...

Page 1262: ...configuration command erases the configuration file which has the backup attribute only while for the configuration file which has both the main and backup attributes the command erases its backup at...

Page 1263: ...downloaded has the same filename as an existing file on the main or backup board you will be prompted whether you want to overwrite the existing file or not In addition both the main board and the ba...

Page 1264: ...is enabled If no filename is specified the SMB automatically saves the current configuration when the AMB is executing the save command z If no filename is specified the system saves the configuration...

Page 1265: ...ble the auto update between the AMB and SMB Sysname system view Sysname slave auto update config 1 2 8 startup saved configuration Syntax startup saved configuration cfgfile undo startup saved configu...

Page 1266: ...System Management H3C S7500E Series Ethernet Switches Chapter 1 File System Management Commands 1 21 Examples Specify a configuration file for next startup Sysname startup saved configuration testcfg...

Page 1267: ...figuration of the device After configuring FTP parameters you may verify them with this command Related commands ftp timeout ftp update Examples Display the FTP server configuration Sysname display ft...

Page 1268: ...1 Description on the fields of the display ftp user command Field Description UserName Name of the present logged in user HostIP IP address of the present logged in user Port Port which the present l...

Page 1269: ...tpuser Sysname free ftp user ftpuser Are you sure to free FTP user ftpuser Y N y Sysname 2 1 4 ftp server enable Syntax ftp server enable undo ftp server View System view Parameters None Description U...

Page 1270: ...the connection all the same To address this problem you can set an idle timeout timer to have the FTP server disconnected if no information is received or and transmitted before the timer expires Exa...

Page 1271: ...ent z You must use the ftp command to enter FTP client view for configurations under this view For details refer to ftp 2 2 1 ascii Syntax ascii View FTP client view Parameters None Description Use th...

Page 1272: ...use the ASCII mode to transfer program files use the binary mode By default the transfer mode is ASCII mode Examples Set the file transfer mode to binary ftp binary 200 Type set to I 2 2 3 bye Syntax...

Page 1273: ...er authorized directory on the FTP server Examples Change the current working directory to flash logfile ftp cd flash logfile 250 CWD command successful 2 2 5 cdup Syntax cdup View FTP client view Par...

Page 1274: ...ftp close 221 Server closing ftp 2 2 7 debugging Syntax debugging undo debugging View FTP client view Default Level 3 Manage level Parameters None Description Use the debugging command to enable FTP c...

Page 1275: ...on for sample file The parsed reply is 150 FTPC File transfer started with the signal light turned on FTPC File transfer completed with the signal light turned off 226 Transfer complete FTP 3304 byte...

Page 1276: ...client view Parameters remotefile Name of the file or directory on the remote FTP server localfile Name of the local file to save the displayed information Description Use the dir command to view det...

Page 1277: ...g aa txt 227 Entering Passive Mode 2 2 2 2 4 7 125 ASCII mode data connection already open transfer starting for startup cfg 226 Transfer complete FTP 68 byte s received in 6 180 second s 11 00 byte s...

Page 1278: ...mmand displays the configured source interface Related commands ftp client source Examples Display the current configuration information of the FTP client Sysname display ftp client configuration The...

Page 1279: ...rd for accessing the FTP server z The priority of the source address specified with this command is higher than that with the ftp client source command If you specify the source address with the ftp c...

Page 1280: ...TP server Note that z The source address includes the source interface and the source IP address If you use the ftp client source command to specify the source interface and the source IP address the...

Page 1281: ...er address is the link local address and the specified egress interface must have a link local address For the configuration of link local address see IPv6 Configuration Description Use the ftp ipv6 c...

Page 1282: ...d save it If no name is specified the local file uses the name of the source file on the FTP server by default Examples Download file testcfg cfg and save it as aa cfg ftp get testcfg cfg aa cfg 227 E...

Page 1283: ...he file names and subdirectory names are displayed Use the ls remotefile command to view the information of a specified file or subdirectory Use the ls remotefile localfile command view the informatio...

Page 1284: ...mode data connection already open transfer starting for logfile 226 Transfer complete FTP 9 byte s received in 0 094 second s 95 00 byte s sec View the content of file aa txt ftp quit Sysname more aa...

Page 1285: ...server under FTP client view At login you will be asked to enter the username and password for accessing the FTP server If your input is correct the login succeeds otherwise it fails Related commands...

Page 1286: ...have a link local address For the configuration of link local address see IPv6 Configuration Description Use the open ipv6 command to log onto IPv6 FTP server in FTP client view At login you will be a...

Page 1287: ...ile View FTP client view Parameters localfile Local file name remotefile Name of the file to be saved on the remote FTP server Description Use the put command to upload a file to the remote FTP server...

Page 1288: ...TP server Examples Display the working directory on the remote FTP server ftp pwd 257 flash temp is current directory 2 2 24 quit Syntax quit View FTP client view Parameters None Description Use the q...

Page 1289: ...p commands Those with are not yet implemented USER PASS ACCT CWD CDUP SMNT QUIT REIN PORT PASV TYPE STRU MODE RETR STOR STOU APPE ALLO REST RNFR RNTO ABOR DELE RMD MKD PWD LIST NLST SITE SYST STAT HEL...

Page 1290: ...e APPE Appended file ALLO Allocation space REST Restart RNFR Rename the source RNTO Rename the destination ABOR Abort the transmission DELE Delete a file RMD Delete a folder MKD Create a folder PWD Pr...

Page 1291: ...e a specified directory from the FTP server Note that only authorized users are allowed to use this command Note that z The directory to be deleted must be empty meaning you should delete all files an...

Page 1292: ...otherwise you login fails and the FTP connection is closed Examples User ftp1 has logged onto the FTP server and relogs onto the current FTP server with the username of ftp2 Suppose username ftp2 and...

Page 1293: ...Command Manual File System Management H3C S7500E Series Ethernet Switches Chapter 2 FTP Configuration Commands 2 27 Examples Enable the verbose function ftp verbose FTP verbose is on...

Page 1294: ...formation of the TFTP client Related commands tftp client source Examples Display the current configuration information of the TFTP client Sysname display tftp client configuration The source IP addre...

Page 1295: ...L refer to ACL Configuration and ACL Commands Examples Reference ACL 2000 to control access to the TFTP application in IPv4 Sysname system view Sysname acl number 2000 Sysname acl basic 2000 rule perm...

Page 1296: ...cal device z If no destination file name is specified the saved file uses the source file name z The priority of the source address specified with this command is higher than that with the tftp client...

Page 1297: ...red on the device Description Use the tftp client source command to configure the source address of the TFTP packets from the TFTP client Use the undo telnet client source command to restore the defau...

Page 1298: ...its type and number This parameter can be used only in case that the TFTP server address is a link local address and the specified egress interface must have a link local address For the configuration...

Page 1299: ...Command Manual File System Management H3C S7500E Series Ethernet Switches Chapter 3 TFTP Configuration Commands 3 6 TFTP 32 bytes received in 5 second s File downloaded successfully...

Page 1300: ...2 1 1 11 info center logbuffer 1 13 1 1 12 info center logfile enable 1 14 1 1 13 info center logfile frequency 1 15 1 1 14 info center logfile size quota 1 15 1 1 15 info center logfile switch direct...

Page 1301: ...Displays information of the channel with a specified name where channel name represents the channel name which could be a default name or a self defined name The user needs to specify a channel name...

Page 1302: ...e module to which the information permitted to pass through the current channel belongs Default means all modules are allowed to output system information but the module type varies with devices ENABL...

Page 1303: ...l8 host facility local7 Console channel number 0 channel name console Monitor channel number 1 channel name monitor SNMP Agent channel number 5 channel name snmpagent Log buffer enabled max buffer siz...

Page 1304: ...l name s used Log buffer enabled max buffer size 1024 current buffer size 512 current messages 512 dropped messages 0 overwritten messages 740 channel number 4 channel name logbuffer The information o...

Page 1305: ...description Severity Value Description emergencies 0 The system is unavailable alerts 1 Information that requires prompt reaction critical 2 Critical information errors 3 Error information warnings 4...

Page 1306: ...ll stop a wildcard used in place of any character including blank None Asterisk used to match a subexpression before it zero or multiple times zo can map to z and zoo Addition used to match a subexpre...

Page 1307: ...buffer command Field Description Logging buffer configuration and contents Indicates the current state of the log buffer and its contents which could be enabled or disabled Allowed max buffer size The...

Page 1308: ...0 0 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 2 0 0 0 0 0 0 0 0 3 0 0 0 0 16 0 1 0 Table 1 7 Descriptions on the fields of the display logbuffer summary command Field Description SLOT Slot number EMERG Represent...

Page 1309: ...Examples Display the contents of the logfile buffer Sysname display logfile buffer 0 May 8 07 18 51 2007 H3C 10IC 6 SYS_RESTART System restarted H3C Comware Software Omitted 1 1 6 display logfile summ...

Page 1310: ...ay trapbuffer size buffersize View Any view Parameters size buffersize Displays specified number of the latest trap messages in a trap buffer where buffersize represents the number of the latest trap...

Page 1311: ...mber of overwritten messages when the buffer size is not big enough to hold all messages the latest messages overwrite the old ones Current messages The number of the current messages 1 1 8 info cente...

Page 1312: ...ned channel name For more information refer to the info center channel name command Description Use the info center console channel command to specify the channel to output system information to the c...

Page 1313: ...enter Sysname system view Sysname info center enable Information center is enabled 1 1 11 info center logbuffer Syntax info center logbuffer channel channel number channel name size buffersize undo in...

Page 1314: ...information center is enabled with the info center enable command Examples Enable the system to output information to the log buffer using channel 4 with a default buffer size of 50 Sysname system vi...

Page 1315: ...configure the frequency with which the system saves the log file Use the undo info center logfile frequency command to restore the default frequency Examples Configure the frequency with which the sy...

Page 1316: ...64 characters Description Use the info center logfile switch directory command to configure the directory where a log file is saved Ensure that the directory is created first before saving a log file...

Page 1317: ...l0 to local7 with the corresponding value ranging from 16 to 23 The default logging facility is local7 with the value being 23 Logging facility is mainly used to mark the log sources on the log host q...

Page 1318: ...e source interface to output log information to the log host Use the undo info center loghost source command to remove the source interface to output log information to the log host By default no sour...

Page 1319: ...ion to the monitor By default output of system information to the monitor is enabled with a default channel name of monitor and a default channel number of 1 Note that the info center monitor channel...

Page 1320: ...1 20 info center source Syntax info center source module name default channel channel number channel name debug level severity state state log level severity state state trap level severity state stat...

Page 1321: ...than informational to the log buffer The user can also set to output trap information of the IP module to a specified output destination Note that z If you do not use the module name argument to set o...

Page 1322: ...modules Disable d informa tional Enable d warnin gs Disable d debugg ing Log buffer default all modules Enable d warning s Disable d debug ging Disable d debugg ing SNMP NMS default all modules Disab...

Page 1323: ...tem information is output when you are inputting some interactive information non Y N confirmation information then after the system information output the system will not display the command line pro...

Page 1324: ...The current system date and time in the format of Mmm dd hh mm ss sss yyyy z Mmm The abbreviations of the months in English which could be Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov or Dec z dd The...

Page 1325: ...default By default the timestamp format for system information sent to the log host is date Examples Configure to exclude the year information in the time stamp of the system information output to the...

Page 1326: ...trapbuffer command takes effect only after the information center is enabled with the info center enable command Examples Enable system to output information to the trap buffer using the default chan...

Page 1327: ...logfile switch directory command to specify the directory to save the file otherwise the system prompts error Examples Set to manually save the log buffer contents into the log file Sysname logfile s...

Page 1328: ...gging information on the current terminal Use the undo terminal debugging command to disable the display of debugging information on the current terminal By default the display of debugging informatio...

Page 1329: ...gging command only after the monitoring of system information is enabled on the current terminal first using the terminal monitor command Examples Disable the display of log information on the current...

Page 1330: ...g Syntax terminal trapping undo terminal trapping View User view Parameters None Description Use the terminal trapping command to enable the display of trap information on the current terminal Use the...

Page 1331: ...on 1 10 1 1 10 display history command 1 10 1 1 11 display hotkey 1 11 1 1 12 display this 1 12 1 1 13 display version 1 13 1 1 14 header 1 14 1 1 15 hotkey 1 16 1 1 16 quit 1 18 1 1 17 return 1 19 1...

Page 1332: ...display schedule reboot 3 11 3 1 12 display switch mode status 3 12 3 1 13 display transceiver alarm interface 3 12 3 1 14 display transceiver diagnosis interface 3 16 3 1 15 display transceiver inte...

Page 1333: ...f MM DD YYYY or YYYY MM DD MM is the month of the year in the range 1 to 12 DD is the day of the month that varies with months and YYYY is a year in the range 2000 to 2035 Description Use the clock da...

Page 1334: ...e added to the standard time of the device in the format of HH MM SS hours minutes seconds The zeros in the argument can be omitted except for indicating 0 hours Description Use the clock summer time...

Page 1335: ...two ways z Enter the year month and date at one time in the format of MM DD YYYY months days years or YYYY MM DD z Enter the year month and date one by one separated by spaces The year ranges from 20...

Page 1336: ...one hour to the current device time After the configuration takes effect use the display clock command to view the result The information such as log file and debug adopts the local time modified by t...

Page 1337: ...time zone Use the undo clock timezone command to restore the local time zone to the default UTC time zone By default the local time zone is UTC zone After the configuration takes effect use the displa...

Page 1338: ...a privilege level for a user according to his need When the user logs on a device the commands available depend on the user s privilege For example if a user s privilege is 3 and the command privileg...

Page 1339: ...nt to the clipboard Examples View the content of the clipboard Sysname display clipboard CLIPBOARD ip route 10 1 0 0 255 0 0 0 eth 0 1 1 7 display clock Syntax display clock View Any view Parameters N...

Page 1340: ...ce type interface number Displays the interface configuration where interface type represents the interface type and interface number represents the interface number by linenum Specifies to display th...

Page 1341: ...a string 123A 408 12 can match 40812 or 408121212 But it cannot match 408 That is 12 can appear continuously and it must at least appear once Description Use the display current configuration command...

Page 1342: ...lay clock display version display device display current configuration Examples Save the statistics of each module s running status in the system Sysname display diagnostic information Save or display...

Page 1343: ...the history command max size command to set the size of the history buffer Refer to the history command max size command in Login Commands for related configuration Examples Display validated history...

Page 1344: ...RL_H Erase the character left of the cursor CTRL_K Kill outgoing connection CTRL_N Display the next command from the history buffer CTRL_P Display the previous command from the history buffer CTRL_R R...

Page 1345: ...at z A parameter is not displayed if it has the default configuration z A parameter is not displayed if the configuration has not taken effect z When you use the command under interface view protocol...

Page 1346: ...ion 5 00 Release 0000 Copyright c 2004 2007 Hangzhou H3C Tech Co Ltd All rights reserved S7502E uptime is 0 week 0 day 21 hours 43 minutes Slot 0 Without Board SRPG M 1 Uptime is 0 weeks 0 days 21 hou...

Page 1347: ...ayed before authentication shell Sets the banner displayed when a non Modem login user enters user view text Banner message which can be input in two formats Refer to the Basic System Configuration pa...

Page 1348: ...login banner be displayed Copyright c 2004 2007 Hangzhou H3C Tech Co Ltd All rights reserved Without the owner s prior written consent no decompiling or reverse engineering shall be allowed Welcome to...

Page 1349: ...bugging all You can customize this scheme as needed however Examples Assign the hot key Ctrl T to the display tcp status command Sysname system view Sysname hotkey ctrl_t display tcp status Display th...

Page 1350: ...Z Return to the user view CTRL_ Kill incoming connection or redirect connection ESC_B Move the cursor one word back ESC_D Delete remainder of word ESC_F Move the cursor forward one word ESC_N Move the...

Page 1351: ...ernet 2 0 1 return Sysname 1 1 18 super Syntax super level View User view Parameters level User level in the range 0 to 3 Description Use the super command to switch from the current user level to a s...

Page 1352: ...that Users can switch to a lower user level unconditionally To switch to a higher user level however they need to enter the password The password can be set with the super password command If the ent...

Page 1353: ...do super password command to restore the default By default no password is set to switch from a lower user level to a higher one Note that z If simple is specified the configuration file saves a simpl...

Page 1354: ...e the sysname command to set the name of the device Use the undo sysname demand to restore the device name to the default The default name is H3C Modifying device name affects the prompt of the CLI Fo...

Page 1355: ...Debugging H3C S7500E Series Ethernet Switches Chapter 1 Basic Configuration Commands 1 23 Related commands quit return Examples Enter system view from the current user view Sysname system view System...

Page 1356: ...fragmented h ttl Specifies the TTL value for an ICMP echo request in the range 1 to 255 The default value is 255 i interface type interface number Specifies the ICMP echo request sending interface by...

Page 1357: ...mote system IP address or host name a string of 1 to 20 characters of the destination device Description Use the ping command to verify whether the destination device in an IP network is reachable and...

Page 1358: ...estination is received within the timeout time the interval to send the next echo request equals the timeout value plus the value of interval s packet size Specifies length in bytes of an ICMPv6 echo...

Page 1359: ...in the ICMPv6 echo request 2 1 3 tracert Syntax tracert a source ip f first ttl m max ttl p port q packet number w timeout remote system View Any view Parameters a source ip Specifies the source IP a...

Page 1360: ...out will be displayed Examples Display the routers the packets traverse from the current device with an IP address of 8 26 0 115 to the destination device Sysname tracert 18 26 0 115 traceroute to 18...

Page 1361: ...q packet number Specifies the number of probe packets sent each time in the range 1 to 65535 defaulting to 3 w timeout Specifies the timeout time of the probe packets in the range 1 to 65535 in milli...

Page 1362: ...specific module Use the undo debugging command to disable the debugging of a specific module By default debugging functions of all modules are disabled Note the following z This command is intended f...

Page 1363: ...e number Displays the debugging settings of the specified interface where interface type interface number represents the interface type and number module name Module name Description Use the display d...

Page 1364: ...yntax boot loader file file url slot slot number main backup View User view Parameters file file url Specifies a file name a string of 1 to 64 characters slot slot number Specifies the slot number of...

Page 1365: ...nt represents the slot number of a card and the value range varies with devices 1 7 indicates that you can specify up to seven lists of slot numbers Description Use the bootrom command to upgrade the...

Page 1366: ...ervals usually every 60 seconds and saves the statistical results in the history record area The maximum number of records that can be saved depends on the device model display cpu usage number indica...

Page 1367: ...07 10 10 55 55 CPU Usage Stat Tick 0x1d9c CPU Tick High 0xa50e5351 CPU Tick Low Actual Stat Cycle 0x0 CPU Tick High 0x950906af CPU Tick Low Table 3 1 Description on fields of the display cpu usage com...

Page 1368: ...4 display boot loader Syntax display boot loader slot slot number View Any view Parameters slot slot number Displays startup file information of the specified card where slot number represents the slo...

Page 1369: ...ot number argument represents the slot number of a card and the value range varies with devices verbose Displays detailed information Description Use the display device command to display information...

Page 1370: ...m number of physical ports that a card supports Type Type of the current card Hardware Hardware version of the current card Driver Driver version of the current card CPLD CPLD version of the current c...

Page 1371: ...E 2007 4 18 VENDOR_NAME H3C Table 3 3 Description on the fields of the display device manuinfo command Field Description DEVICE_NAME Device name DEVICE_SERIAL_NUMBER Device serial number MAC_ADDRESS M...

Page 1372: ...cards degree centigrade CPU Temperature information degree centigrade Temperature information of cards of the system degree centigrade Board Card number Temperature Current temperature Lower limit Low...

Page 1373: ...splay memory command to display the usage of the memory of all or specified cards of a device Examples Display the usage of the memory of a device Sysname display memory System Total Memory bytes 4318...

Page 1374: ...ation indicates that power supply 1 works normally and power supply 2 is absent 3 1 11 display schedule reboot Syntax display schedule reboot View Any view Parameters None Description Use the display...

Page 1375: ...orwarding mode or working mode of all cards on the switch Sysname display switch mode status Slot No Switch Mode 0 STANDARD ROUTING 2 ROUTING 3 NONE Table 3 6 Description on the fields of the display...

Page 1376: ...ower high RX power is high RX power low RX power is low TX fault TX fault TX bias high TX bias current is high TX bias low TX bias current is low TX power high TX power is high TX power low TX power i...

Page 1377: ...ow Temperature is low Voltage high Voltage is high Voltage low Voltage is low Transceiver info I O error Transceiver information read and write error Transceiver info checksum error Transceiver inform...

Page 1378: ...TX power is low Temp high Temperature is high Temp low Temperature is low Transceiver info I O error Transceiver information read and write error Transceiver info checksum error Transceiver informati...

Page 1379: ...digital diagnosis parameters of a single or all anti spoofing transceivers customized by H3C Examples Display the currently measured value of digital diagnosis parameters of the anti spoofing pluggab...

Page 1380: ...display transceiver interface Syntax display transceiver interface interface type interface number View Any view Parameters interface type interface number Interface type and interface number Descript...

Page 1381: ...tance xx Transfer distance with xx representing km for single mode transceivers and m for other transceivers If the transceiver supports multiple transfer medium every two values of the transfer dista...

Page 1382: ...ble transceiver customized by H3C on interface GigabitEthernet 2 0 4 Sysname display transceiver manuinfo interface gigabitethernet 2 0 4 GigabitEthernet2 0 4 transceiver manufacture information Manu...

Page 1383: ...system automatically uses the secondary boot file to restart the device z If you are performing file operations when the device is to be rebooted the system does not execute the command for the sake o...

Page 1384: ...o 59 date Reboot date of a device in the format mm dd yyyy Month day year or in the format yyyy mm dd year month day The yyyy value ranges from 2000 to 2035 the mm value ranges from 1 to 12 and the dd...

Page 1385: ...e the clock command after the schedule reboot at command to adjust the system time the reboot time set by the schedule reboot at command will become invalid Caution This command reboots the device in...

Page 1386: ...The absolute minutes cannot exceed 30 x 24 x 60 minutes namely 30 days z The precision of the device timer is 1 minute One minute before the reboot time the device will prompt REBOOT IN ONE MINUTE and...

Page 1387: ...interval in seconds in the range of 1 to 300 Description Use the shutdown interval command to set a detection interval Use the undo shutdown interval command to restore the default By default the dete...

Page 1388: ...forwarding mode with the MAC extension function when the SRPU is LSQ1SRP1CB and the enhanced Layer 2 forwarding mode when the SRPU is LSQ1SRP2XB LSQ1SRPB or LSQ1MPUA standard Indicates the standard f...

Page 1389: ...the SRPU Sysname system view Sysname undo switch mode 3 1 23 switch mode for LPU Syntax switch mode bridging routing slot slot num undo switch mode slot slot num View System view Parameters bridging I...

Page 1390: ...7500E switch is LSQ1SRP2XB LSQ1SRPB or LSQ1MPUA if an EA LPU is connected to a Layer 2 forwarding network with a large number of MAC addresses you can configure the EA LPU to work in the MAC extension...

Page 1391: ...emperature limit command to set the temperature alarm threshold on a card Use the undo temperature limit command to restore the temperature alarm threshold to the default By default the upper value an...

Page 1392: ...tual ip 1 12 1 2 VRRP Configuration Commands for IPv6 1 13 1 2 1 display vrrp ipv6 1 13 1 2 2 display vrrp ipv6 statistics 1 16 1 2 3 reset vrrp ipv6 statistics 1 18 1 2 4 vrrp ipv6 vrid authenticatio...

Page 1393: ...rface number specifies an interface by its type and number vrid virtual router id Displays state information of the specified VRRP group virtual router id specifies a standby group by its group number...

Page 1394: ...UP State Master Config Pri 100 Run Pri 100 Preempt Mode YES Delay Time 0 Auth Type NONE Track IF Vlan interface200 Pri Reduced 10 Virtual IP 10 10 10 2 Virtual MAC 0000 5e00 0101 Master IP 10 10 10 1...

Page 1395: ...interface to which the switch in the state of master belongs 1 1 2 display vrrp statistics Syntax display vrrp statistics interface interface type interface number vrid virtual router id View Any view...

Page 1396: ...kts Rcvd 0 Advertisement Interval Errors 0 IP TTL Errors 0 Auth Failures 0 Invalid Auth Type 0 Auth Type Mismatch 0 Packet Length Errors 0 Address List Errors 0 Become Master 0 Priority Zero Pkts Rcvd...

Page 1397: ...Advertise Rcvd Number of received advertisements Advertise Sent Number of advertisements sent Global statistics Statistics about all standby groups CheckSum Errors Total number of packets with checksu...

Page 1398: ...lain text authentication mode md5 Authentication header AH authentication using the MD5 algorithm key Authentication key case sensitive z When simple authentication applies the authentication key is i...

Page 1399: ...virtual mac undo vrrp method View System view Parameters real mac Associates the real MAC address of the interface with the virtual IP address of the standby group virtual mac Associates the virtual...

Page 1400: ...ual IP addresses of standby groups from being pinged By default the virtual IP addresses of standby groups can be pinged Perform this configuration before configuring a standby group Examples Enable u...

Page 1401: ...in the specified standby group Use the undo vrrp vrid preempt mode command to disable preemption on the switch in the specified standby group Use the undo vrrp vrid preempt mode timer delay command to...

Page 1402: ...to configure the priority of the switch in the specified standby group Use the undo vrrp vrid priority command to restore the default By default the priority of a switch in a standby group is 100 z Be...

Page 1403: ...d to restore the default By default the Adver_Timer is 1 second The Adver_Timer controls the interval at which the master sends VRRP packets Note that z Before executing the command create a standby g...

Page 1404: ...te a standby group on an interface and configure the virtual IP address of the standby group z When the switch is the owner of the IP address you cannot perform the configuration z When the status of...

Page 1405: ...ess and other illegal IP addresses such as 0 0 0 1 z Only when the configured virtual IP address and the interface IP address belong to the same segment and are legal host addresses can the standby gr...

Page 1406: ...d standby group only the state information of the specified standby group is displayed if you only specify an interface the state information of all the standby groups on the interface is displayed if...

Page 1407: ...e switch in the standby group master backup or initialize Config Pri Configured priority Run Pri Running priority Preempt Mode Preemption mode Delay Time Preemption delay not displayed when the device...

Page 1408: ...y statistics about VRRP for IPv6 If you specify both interface and standby group only the statistics about the specified standby group are displayed if you only specify an interface the statistics abo...

Page 1409: ...Rcvd Number of packets with incorrect packet type Advertisement Interval Errors Number of packets with advertisement interval errors Hop Limit Errors Number of packets with hop limit errors Auth Failu...

Page 1410: ...tandby group virtual router id specifies a standby group by its group number in the range 1 to 255 Description Use the reset vrrp ipv6 statistics command to clear VRRP statistics If you specify both t...

Page 1411: ...d create a standby group on an interface and configure the virtual IP address of the standby group z You may configure different authentication types and authentication keys for the standby groups on...

Page 1412: ...fore configuring a standby group Otherwise your configuration will fail Examples Associate the virtual IP address of the standby group with the real MAC address of the routing interface Sysname system...

Page 1413: ...mode timer delay command to restore the default preemption delay that is zero seconds The default mode is immediate preemption without delay If you set the router in the standby group to work in non p...

Page 1414: ...ority of the switch in the specified standby group Use the undo vrrp ipv6 vrid priority command to restore the default By default the priority of a switch in a standby group is 100 z Before executing...

Page 1415: ...restore the default By default the Adver_Timer is 100 centiseconds The Adver_Timer controls the interval at which the master sends VRRP packets z Before executing the command create a standby group o...

Page 1416: ...create a standby group on an interface and configure the virtual IPv6 address of the standby group z When the switch is the owner of the IP address you cannot perform the configuration z When the stat...

Page 1417: ...Use the vrrp ipv6 vrid virtual ip command to add a virtual IPv6 address to a standby group Use the undo vrrp ipv6 vrid command to remove a standby group Use the undo vrrp ipv6 vrid virtual router id v...

Page 1418: ...The switchover state of the corresponding card will be displayed if slot number is specified The switchover state of the AMB will be displayed if no slot number is specified Examples Display the swit...

Page 1419: ...t to check the version of the AMB and SMB Use the undo ha slave ignore version check command to enable version check of the AMB and SMB By default version check of the AMB and SMB is enabled Note that...

Page 1420: ...nfiguration file on the AMB and SMB is enabled Examples Enable automatic synchronization of the configuration file on the AMB and SMB Sysname system view Sysname slave auto update config 2 1 4 slave r...

Page 1421: ...ve to master Y N y Starting RAM Line OK 2 1 6 slave switchover enable disable Syntax slave switchover enable disable View System view Parameters enable Enables manual configuration of the switchover b...

Page 1422: ...Command Manual HA H3C S7500E Series Ethernet Switches Chapter 2 HA Configuration Commands 2 5 Sysname slave switchover enable...

Page 1423: ...1 11 1 1 13 public key local export rsa 1 11 1 1 14 public key peer 1 13 1 1 15 public key peer import sshkey 1 13 1 1 16 sftp 1 14 1 1 17 sftp client ipv6 source 1 15 1 1 18 sftp client source 1 16...

Page 1424: ...Table of Contents ii 1 2 3 cdup 1 30 1 2 4 delete 1 30 1 2 5 dir 1 31 1 2 6 exit 1 32 1 2 7 get 1 33 1 2 8 help 1 33 1 2 9 ls 1 34 1 2 10 mkdir 1 35 1 2 11 put 1 35 1 2 12 pwd 1 36 1 2 13 quit 1 36 1...

Page 1425: ...pair s Related commands public key local create Examples Display the public key information of RSA local key pair s Sysname display public key local rsa public Time of Key pair created 19 59 16 2006...

Page 1426: ...key Key type Type of the key Key code Code of the key 1 1 2 display public key peer Syntax display public key peer brief name publickey name View Any view Parameters brief Displays brief information a...

Page 1427: ...2F4A549EE99F 63095E11BD37789955020123 Table 1 2 Description on fields of the display public key peer name command Field Description Key name Name of the key Key type Type of the key Key module Module...

Page 1428: ...ddress of the SFTP client Syaname display sftp client source The source IP address you specified is 192 168 0 1 1 1 4 display ssh client source Syntax display ssh client source View Any view Parameter...

Page 1429: ...ble ssh server compatible ssh1x enable Examples Display the status information of the SSH server Sysname display ssh server status SSH Server Disable SSH version 1 99 SSH authentication timeout 60 sec...

Page 1430: ...ed 0 SFTP client001 Table 1 5 Description on fields of the display ssh server session command Field Description Conn Connected VTY channel Ver SSH server protocol version Encry Encryption algorithm St...

Page 1431: ...rver Server public key name Name of the host public key of the server 1 1 7 display ssh user information Syntax display ssh user information username View Any view Parameters username SSH username a s...

Page 1432: ...key of the user Service type Service type 1 1 8 peer public key end Syntax peer public key end View Public key view Parameters None Description Use the peer public key end command to return from publi...

Page 1433: ...18100C0EC8014F82515F6335A0A Sysname pkey key code EF8F999C01EC94E5760A079BD73E4F4D97F3500EDB308C29481 B77E719D1643135877E13B1C531B4 Sysname pkey key code FF1877A5E2E7B1FA4710DB0744F66F6600EEFE166F1B85...

Page 1434: ...812D4EE3E9A0B074276FFD4AF 2050BD4A9B1DDE675AC30CB020301 Sysname pkey key code 0001 Sysname pkey key code public key code end Sysname pkey public key 1 1 11 public key local create Syntax public key lo...

Page 1435: ...efault 1024 Generating keys 1 1 12 public key local destroy Syntax public key local destroy rsa View System view Parameters rsa RSA key pair Description Use the public key local destroy command to des...

Page 1436: ...ds public key local create public key local destroy Examples Export the RSA local public key in OpenSSH format Sysname system view Sysname public key local export rsa openssh key pub Display the RSA l...

Page 1437: ...ublic key view you can configure the peer public key with the public key code begin and public key code end commands This requires that you obtain the hexadecimal public key from the peer beforehand R...

Page 1438: ...tp server port number prefer ctos cipher 3des aes128 des prefer ctos hmac md5 md5 96 sha1 sha1 96 prefer kex dh group exchange dh group1 dh group14 prefer stoc cipher 3des aes128 des prefer stoc hmac...

Page 1439: ...amples Connect to SFTP server 10 1 1 2 Sysname sftp 10 1 1 2 Input Username 1 1 17 sftp client ipv6 source Syntax sftp client ipv6 source ipv6 ipv6 address interface interface type interface number un...

Page 1440: ...ce command to specify the source IPv4 address or interface of an SFTP client Use the undo sftp source interface command to remove the configuration By default a client uses the IP address or interface...

Page 1441: ...z sha1 HMAC algorithm hmac sha1 z sha1 96 HMAC algorithm hmac sha1 96 prefer kex Preferred key exchange algorithm defaulted to dh group exchange z dh group exchange Key exchange algorithm diffie hell...

Page 1442: ...sftp server idle timeout Syntax sftp server idle timeout time out value undo sftp server idle timeout View System view Parameters time out value Timeout period in minutes It ranges from 1 to 35 791 D...

Page 1443: ...rver command to configure the host public key of the server so that the client can determine whether the server is trustworthy Use the undo ssh authentication server command to remove the configuratio...

Page 1444: ...ess any server whose public host key it does not know In this case you must configure the public host key of the server to be accessed and specify the public key name on the client at first Examples E...

Page 1445: ...umber Specifies a source interface by its type and number Description Use the ssh client source command to specify the source IPv4 address or source interface of the SSH client Use the undo ssh client...

Page 1446: ...pts and password authentication attempts Related commands display ssh server Examples Set the maximum number of SSH connection authentication attempts to four Sysname system view Sysname ssh server au...

Page 1447: ...atible ssh1x command to enable the SSH server to work with SSH1 x clients Use the undo ssh server compatible ssh1x command to disable the SSH server from working with SSH1 x clients By default the SSH...

Page 1448: ...o ssh server rekey interval View System view Parameters hours Server key pair update interval in hours in the range 1 to 24 Description Use the ssh server rekey interval command to set the interval fo...

Page 1449: ...ecifies the service type of secure Telnet authentication type Specifies the authentication method of an SSH user which can be one the following z password Performs password authentication z any Perfor...

Page 1450: ...c key it is necessary to set a working folder for the user z The working folder of an SFTP user is subject to the user authentication method For a user using only password authentication the working f...

Page 1451: ...e Key exchange algorithm diffie hellman group exchange sha1 z dh group1 Key exchange algorithm diffie hellman group1 sha1 z dh group14 Key exchange algorithm diffie hellman group14 sha1 prefer stoc ci...

Page 1452: ...tos hmac Preferred HMAC algorithm from client to server defaulted to sha1 z md5 HMAC algorithm hmac md5 z md5 96 HMAC algorithm hmac md5 96 z sha1 HMAC algorithm hmac sha1 z sha1 96 HMAC algorithm hma...

Page 1453: ...efer kex dh group1 prefer stoc cipher aes128 prefer ctos hmac md5 prefer stoc hmac sha1 96 1 2 SFTP Configuration Commands 1 2 1 bye Syntax bye View SFTP client view Parameters None Description Use th...

Page 1454: ...turn to the upper level directory z You can use the cd command to return to the root directory of the system Examples Change the working path to new1 sftp client cd new1 Current Directory is new1 1 2...

Page 1455: ...les will be deleted temp c Are you sure to delete it Y N y This operation may take a long time Please wait File successfully Removed 1 2 5 dir Syntax dir a l remote path View SFTP client view Paramete...

Page 1456: ...2 config cfg rwxrwxrwx 1 noone nogroup 225 Aug 24 08 01 pubkey2 rwxrwxrwx 1 noone nogroup 283 Aug 24 07 39 pubkey1 rwxrwxrwx 1 noone nogroup 225 Sep 28 08 28 pub1 drwxrwxrwx 1 noone nogroup 0 Sep 28 0...

Page 1457: ...the file will be saved locally with the same name as that on the remote SFTP server Examples Download file temp1 c and save it as temp c locally sftp client get temp1 c temp c Remote file temp1 c Loc...

Page 1458: ...mation under a specified directory With the a and l keyword not specified the command displays detailed information of files and folder under the specified directory in a list form With the remote pat...

Page 1459: ...ent mkdir test New directory created 1 2 11 put Syntax put local file remote file View SFTP client view Parameters local file Name of a local file remote file Name for the file on a remote SFTP server...

Page 1460: ...of a remote SFTP server Examples Display the current working directory of the remote SFTP server sftp client pwd 1 2 13 quit Syntax quit View SFTP client view Parameters None Description Use the quit...

Page 1461: ...ed file from a remote server This command functions as the delete command Examples Delete file temp c from the server sftp client remove temp c The following files will be deleted temp c Are you sure...

Page 1462: ...1 2 16 rmdir Syntax rmdir remote path 1 10 View SFTP client view Parameters remote path 1 10 Name of the directory on the remote SFTP server 1 10 means that you can provide up to 10 filenames that are...

Page 1463: ...play poe power dc output value 1 18 1 1 13 display poe power status 1 18 1 1 14 display poe power supervision module 1 20 1 1 15 display poe power switch state 1 21 1 1 16 display poe profile 1 22 1 1...

Page 1464: ...tion Use the apply poe profile command to apply the PoE configuration file to the current PoE interface Use the undo apply poe profile command to remove the application of the PoE configuration file t...

Page 1465: ...rface number should be smaller than the end interface number Ethernet interface numbers can be in any range If any interface in the specified range does not support PoE it is ignored when the PoE conf...

Page 1466: ...ce PSE ID SlotNo SubSNo PortNum MaxPower W State Model 10 3 0 48 100 on LSQ1GV48SC Table 1 1 Description on the fields of the display poe device command Field Description PSE ID ID of the PSE SlotNo S...

Page 1467: ...interface Ethernet 2 0 2 Port Power Enabled enable Port Power Priority critical Port Operating Status on Port IEEE Class 0 Port Detection Status delivering power Port Power Mode signal Port Current Po...

Page 1468: ...led The PoE function is disabled z searching The PoE interface is searching for the PD z delivering power The PoE interface is supplying power for the PD z fault There is a fault defined in 802 3af z...

Page 1469: ...isabled Eth2 0 15 enable high 3 8 on 0 delivering power Eth2 0 16 enable low 5 4 on 0 delivering power Eth2 0 17 disable low 0 0 off 0 disabled Eth2 0 18 disable low 0 0 off 0 disabled Eth2 0 19 disab...

Page 1470: ...m of a PoE interface Enable PoE state enabled disabled z enable PoE is enabled z disable PoE is disabled Priority Power priority of a PoE interface z critical highest z high z low CurPower Current pow...

Page 1471: ...ining Total remaining power of the system 1 1 5 display poe interface power Syntax display poe interface power interface type interface number View Any view Parameters interface type interface number...

Page 1472: ...16 5 4 6 5 15 4 Eth2 0 17 0 0 0 0 15 4 Eth2 0 18 0 0 0 0 15 4 Eth2 0 19 0 0 0 0 15 4 Eth2 0 20 0 0 0 0 15 4 Eth2 0 21 0 0 0 0 15 4 Eth2 0 22 0 0 0 0 15 4 Eth2 0 23 0 0 0 0 15 4 Eth2 0 24 0 0 0 0 15 4...

Page 1473: ...ower of a PoE interface PD Description Description of the PD connected with a PoE interface When the description contains more than 34 characters the first 30 characters followed by four dots are disp...

Page 1474: ...m power supplied to critical PSEs PoE Remaining Allocate Power Remaining allocable PoE power Maximum PoE power the sum of the maximum power of all PoE enabled PSEs PoE Remaining Guaranteed Power Guara...

Page 1475: ...on of PSE 7 Sysname display poe pse 7 PSE ID 7 PSE Slot No 0 PSE SubSlot No 0 PSE Model LSQ1FV48SA PSE Power Enabled enable PSE Power Preempted no PSE Power Priority low PSE Current Power 9 W PSE Aver...

Page 1476: ...E PSE Max Power Maximum power of the PSE PSE Remaining Guaranteed Guaranteed remaining power of the PSE Maximum power of the PSE the sum of the maximum power of the critical PoE interfaces of the PSE...

Page 1477: ...31 00 V PoE Output threshold Lower 45 00 V PoE Output threshold Upper 57 00 V PoE Hardware Version 0002 PoE Software Version 0001 PoE Power Number 2 PoE Power 1 Manufacturer Tyco Electronics Com Type...

Page 1478: ...E Power Number Number of PoE power supply units PoE Power Manufacturer Manufacturer of the PoE power PoE Power Type Type of the PoE power PoE Power Status PoE power state z Normal z Absent z Off z Mas...

Page 1479: ...iption Module Number Number of modules that a power supply unit PSU contains Output AC Current A B C Alarm Output three phase AC voltage state z Normal The voltage is normal z Under Limit The voltage...

Page 1480: ...ected z Input Error An input error occurs to the PSU z Output Error An output error occurs to the PSU z Over Voltage An over voltage occurs to the PSU z Over Temperature An over temperature occurs to...

Page 1481: ...value View Any view Parameters None Description Use the display poe power dc output value command to display the parameter values of the DC output power Examples Display the parameter values of the DC...

Page 1482: ...Number 2 Output AC Current A Alarm Normal Output AC Current B Alarm Under Limit Output AC Current C Alarm Lack Phase Module 1 Volt Phrase AB Alarm Above Limit Volt Phrase BC Alarm Fuse Broken Volt Ph...

Page 1483: ...monitoring module of the PoE power Examples Display the information of the monitoring module of the PoE power Sysname display poe power supervision module Supervision Version 2 6 Supervision Name Summ...

Page 1484: ...r Number of available PSUs Nominal Output Power Nominal output power of a PSU Hardware Version Info Hardware version information of the PSU 1 1 15 display poe power switch state Syntax display poe pow...

Page 1485: ...Index number of the PoE configuration file in the range 1 to 100 name profile name Name of the PoE configuration file a string of 1 to 15 characters Description Use the display poe profile command to...

Page 1486: ...umber of PoE configuration files port s applied Sum of the number of PoE interfaces to which all PoE configuration files are respectively applied Display all information of the configurations and appl...

Page 1487: ...port s applied Table 1 17 Description on the fields of the display poe profile name command Field Description Poe profile Name of the PoE configuration file Index Index number of the PoE configuration...

Page 1488: ...poe enable poe priority critical Table 1 18 Description on the fields of the display poe profile interface command Field Description Poe profile Name of the PoE configuration file Index Index number o...

Page 1489: ...rface in PoE profile view z If a PoE configuration file is applied to a PoE interface you need to remove the application of the file to the PoE interface before configuring the interface in PoE interf...

Page 1490: ...Sysname system view Sysname poe enable pse 7 1 1 20 poe legacy enable Syntax poe legacy enable pse pse id undo poe legacy enable pse pse id View System view Parameters pse pse id Specifies a PSE ID D...

Page 1491: ...ore the default By default the maximum power of the PoE interface is 15 400 milliwatts Examples Set the maximum power of Ethernet 2 0 2 to 12 000 milliwatts Sysname system view Sysname interface Ether...

Page 1492: ...reater than or equal to the sum of the maximum power of all critical PoE interfaces on the PSE so as to guarantee the power supply to these PoE interfaces When the consumption power of all PDs connect...

Page 1493: ...not in use are used for supplying DC power Currently the S7500E series switches do not support the spare mode Examples Set the PoE mode to signal power over signal cables Sysname system view Sysname...

Page 1494: ...s IP Phone for Room 101 Sysname system view Sysname interface Ethernet 2 0 2 Sysname Ethernet2 0 2 poe pd description IP Phone For Room 101 1 1 25 poe pd policy priority Syntax poe pd policy priority...

Page 1495: ...the maximum PoE power Use the undo poe power max value command to restore the default Note that the configured maximum PoE power cannot exceed the rated PoE power Examples Set the maximum PoE power t...

Page 1496: ...applied to a PoE interface you need to remove the application of the file to the PoE interface before configuring the interface in PoE interface view z If two PoE interfaces have the same priority le...

Page 1497: ...e undo poe priority command to restore the default By default the power priority level of the PSE is low When the PoE power is insufficient power is first supplied to PSE with a higher power priority...

Page 1498: ...ssing software in refresh mode when the software is available filename Name of the upgrade file a string of 1 to 64 characters This file must be under the root directory of the file system of the devi...

Page 1499: ...hreshold the system does not send any Trap message Instead when the percentage of the power utilization drops below the alarm threshold the system sends a Trap message again Examples Set the power ala...

Page 1500: ...System view Parameters lower value Specifies an under voltage threshold in volts in the range 45 to 47 with the default value being 45 upper value Specifies an over voltage threshold in volts in the...

Page 1501: ...configuration file in the range 1 to 100 Description Use the poe profile profile name command to create a PoE configuration file and enter PoE profile view Use the undo poe profile command to delete...

Page 1502: ...nfiguration Commands 1 1 1 1 RRPP Configuration Commands 1 1 1 1 1 control vlan 1 1 1 1 2 display rrpp brief 1 2 1 1 3 display rrpp statistics 1 3 1 1 4 display rrpp verbose 1 6 1 1 5 reset rrpp stati...

Page 1503: ...assigned automatically by the system and its VLAN ID is the control VLAN ID of the primary ring plus 1 So you should select two consecutive new VLANs Otherwise the configuration fails z Each RRPP dom...

Page 1504: ...splay rrpp brief Flags for Node Mode M Master T Transit E Edge A Assistant Edge RRPP Protocol Status Enable Number of RRPP Domains 2 Domain ID 1 Control VLAN Major 5 Sub 6 Hello Timer 1 sec Fail Timer...

Page 1505: ...D RRPP ring ID Ring Level RRPP ring level with 0 representing primary ring and 1 representing subring Node Mode Node mode Primary Common Port Primary port when the node mode is master node or transit...

Page 1506: ...under the current ring z When a ring transits from inactive status into active status its packets will be taken statistics again Related commands reset rrpp statistics Examples Display RRPP message s...

Page 1507: ...e port GigabitEthernet3 0 5 Packet Link Common Complete Packet Direct Health Down Flush FDB Flush FDB Total Send 0 0 0 0 0 Rcv 0 0 0 0 0 Table 1 2 Description on the fields of the display rrpp statist...

Page 1508: ...se no corresponding statistics appears Packet Direct Packet transmission direction on the port Send or Rcv Health Health packet statistics received sent on the port Link Down Link Down packet statisti...

Page 1509: ...1 Node Mode Master Ring State Complete Enable Status Yes Active Status Yes Primary port GigabitEthernet3 0 1 Port status UP Secondary port GigabitEthernet3 0 2 Port status BLOCKED Display the detailed...

Page 1510: ...s enabled and No indicates disabled Active Status RRPP ring activation status Yes indicates active and No indicates inactive The current ring is active only when the RRPP protocol and the RRPP ring ar...

Page 1511: ...atistics command to clear RRPP message statistics If you have specified an RRPP ring ID in the command RRPP message statistics of the specified RRPP ring in the specified RRPP domain on the current de...

Page 1512: ...of the device and the role of the port accessing the RRPP ring Use the undo ring command to remove the configuration The ports accessing the RRPP ring must conform to the following conditions z Trunk...

Page 1513: ...e as the transit node of primary ring 10 in RRPP domain 1 GigabitEthernet 3 0 1 as the primary port and GigabitEthernet 3 0 2 as the secondary port Sysname system view Sysname rrpp domain 1 Sysname rr...

Page 1514: ...3 0 1 edge port gigabitethernet 3 0 2 1 1 7 ring enable Syntax ring ring id enable undo ring ring id enable View RRPP domain view Parameters ring id RRPP ring ID in the range 1 to 64 Description Use t...

Page 1515: ...view Use the undo rrpp domain command to remove an RRPP domain Note that z When you delete an RRPP domain the control VLAN of it will be deleted at the same time z When you delete an RRPP domain you m...

Page 1516: ...10 timer Syntax timer hello timer hello value fail timer fail value undo timer View RRPP domain view Parameters hello value Hello timer value in the range 1 to 10 seconds fail value Fail timer value i...

Page 1517: ...Command Manual RRPP H3C S7500E Series Ethernet Switches Chapter 1 RRPP Configuration Commands 1 15 Sysname rrpp domain 1 Sysname rrpp domain1 timer hello timer 2 fail timer 7...

Page 1518: ...HWTACACS Commands 1 3 accounting login AAA RADIUS HWTACACS Commands 1 4 accounting optional AAA RADIUS HWTACACS Commands 1 5 accounting portal AAA RADIUS HWTACACS Commands 1 6 acl Login Commands 2 1 a...

Page 1519: ...arp resolving route enable ARP Commands 1 10 arp source suppression enable ARP Commands 1 8 arp source suppression limit ARP Commands 1 9 arp static ARP Commands 1 1 arp timer aging ARP Commands 1 2...

Page 1520: ...ds 5 4 bestroute compare med IPv6 Routing Commands 5 2 bestroute med confederation IPv4 Routing Commands 5 5 bestroute med confederation IPv6 Routing Commands 5 3 bgp IPv4 Routing Commands 5 5 bims se...

Page 1521: ...ckzero IPv4 Routing Commands 2 1 checkzero IPv6 Routing Commands 2 1 circuit cost IPv4 Routing Commands 4 4 classifier behavior QinQ BPDU Tunneling Commands 1 1 classifier behavior QoS Commands 2 18 c...

Page 1522: ...bugging File System Management Commands 2 8 debugging System Maintaining and Debugging Commands 2 6 default IPv4 Routing Commands 3 5 default cost IPv4 Routing Commands 2 2 default cost IPv6 Routing C...

Page 1523: ...Commands 2 2 dhcp relay information enable DHCP Commands 2 2 dhcp relay information format DHCP Commands 2 3 dhcp relay information strategy DHCP Commands 2 4 dhcp relay release DHCP Commands 2 5 dhcp...

Page 1524: ...v6 network IPv6 Routing Commands 5 9 display bgp ipv6 paths IPv6 Routing Commands 5 10 display bgp ipv6 peer IPv6 Routing Commands 5 11 display bgp ipv6 routing table IPv6 Routing Commands 5 12 displa...

Page 1525: ...play bgp routing table peer IPv4 Routing Commands 5 28 display bgp routing table regular expression IPv4 Routing Commands 5 29 display bgp routing table statistic IPv4 Routing Commands 5 29 display bo...

Page 1526: ...ay dhcp snooping trust DHCP Commands 4 6 display diagnostic information System Maintaining and Debugging Commands 1 10 display dns domain DNS Commands 1 1 display dns dynamic host DNS Commands 1 2 dis...

Page 1527: ...ticast Commands 3 1 display igmp group port info Multicast Commands 3 3 display igmp interface Multicast Commands 3 4 display igmp routing table Multicast Commands 3 6 display igmp snooping group Mult...

Page 1528: ...ipv6 host IPv6 Configuration Commands 1 4 display ipv6 interface IPv6 Configuration Commands 1 5 display ipv6 interface tunnel IPv6 Configuration Commands 3 4 display ipv6 neighbors IPv6 Configuration...

Page 1529: ...ggregation service type Link Aggregation Commands 1 3 display link aggregation summary Link Aggregation Commands 1 4 display link aggregation verbose Link Aggregation Commands 1 6 display local proxy...

Page 1530: ...ay ospf brief IPv4 Routing Commands 3 11 display ospf cumulative IPv4 Routing Commands 3 14 display ospf error IPv4 Routing Commands 3 16 display ospf interface IPv4 Routing Commands 3 18 display ospf...

Page 1531: ...display pim rp info Multicast Commands 4 26 display poe device PoE Commands 1 2 display poe interface PoE Commands 1 3 display poe interface power PoE Commands 1 8 display poe power usage PoE Commands...

Page 1532: ...display qos map table QoS Commands 4 1 display qos policy QoS Commands 2 19 display qos policy global QoS Commands 2 20 display qos policy interface QoS Commands 2 21 display qos sp interface QoS Comm...

Page 1533: ...gineid SNMP RMON Commands 1 1 display snmp agent mib view SNMP RMON Commands 1 3 display snmp agent statistics SNMP RMON Commands 1 5 display snmp agent sys info SNMP RMON Commands 1 7 display snmp ag...

Page 1534: ...affic behavior QoS Commands 2 8 display traffic classifier QoS Commands 2 1 display transceiver alarm interface System Maintaining and Debugging Commands 3 12 display transceiver diagnosis interface S...

Page 1535: ...nds 1 6 dot1x free ip 802 1x MAC Authentication Commands 2 1 dot1x guest vlan 802 1x MAC Authentication Commands 1 7 dot1x handshake 802 1x MAC Authentication Commands 1 8 dot1x max user 802 1x MAC Au...

Page 1536: ...33 filter policy export IPv4 Routing Commands 4 22 filter policy export IPv4 Routing Commands 5 31 filter policy export IPv6 Routing Commands 2 7 filter policy export IPv6 Routing Commands 3 24 filter...

Page 1537: ...mands 4 4 gateway list DHCP Commands 1 17 get File System Management Commands 2 16 get SSH Commands 1 33 gratuitous arp learning enable ARP Commands 1 8 gratuitous arp sending enable ARP Commands 1 7...

Page 1538: ...QoS Commands 2 2 if match acl IPv4 Routing Commands 6 25 if match as path IPv4 Routing Commands 6 13 if match community IPv4 Routing Commands 6 14 if match cost IPv4 Routing Commands 6 15 if match cu...

Page 1539: ...ooping host aging time Multicast Commands 1 13 igmp snooping host join Multicast Commands 1 14 igmp snooping last member query interval Multicast Commands 1 15 igmp snooping max response time Multicas...

Page 1540: ...rce Information Center Commands 1 18 info center monitor channel Information Center Commands 1 18 info center snmp channel Information Center Commands 1 19 info center source Information Center Comman...

Page 1541: ...onfiguration Commands 1 23 ipv6 address IPv6 Configuration Commands 2 1 ipv6 address auto link local IPv6 Configuration Commands 1 24 ipv6 address auto link local IPv6 Configuration Commands 2 2 ipv6...

Page 1542: ...ands 1 36 ipv6 pathmtu IPv6 Configuration Commands 1 37 ipv6 pathmtu age IPv6 Configuration Commands 1 37 ipv6 preference IPv6 Routing Commands 4 10 ipv6 route static IPv6 Routing Commands 1 2 ipv6 su...

Page 1543: ...ACACS Commands 1 65 L lacp port priority Link Aggregation Commands 1 8 lacp system priority Link Aggregation Commands 1 8 last member query interval Multicast Commands 1 24 last member query interval...

Page 1544: ...arrival interval IPv4 Routing Commands 3 37 lsa generation interval IPv4 Routing Commands 3 38 lsdb overflow limit IPv4 Routing Commands 3 39 lsp fragments extend IPv4 Routing Commands 4 46 lsp length...

Page 1545: ...monitor port Port Mirroring Commands 1 5 mirroring group remote probe vlan Port Mirroring Commands 1 6 mirroring port Port Mirroring Commands 1 7 mirror to QoS Commands 5 1 mkdir File System Managemen...

Page 1546: ...rk IPv4 Routing Commands 2 14 network IPv4 Routing Commands 3 41 network IPv4 Routing Commands 5 35 network IPv6 Routing Commands 5 27 network DHCP Commands 1 20 network entity IPv4 Routing Commands 4...

Page 1547: ...3 47 ospf network type IPv4 Routing Commands 3 48 ospf timer dead IPv4 Routing Commands 3 49 ospf timer hello IPv4 Routing Commands 3 50 ospf timer poll IPv4 Routing Commands 3 50 ospf timer retransm...

Page 1548: ...39 peer capability advertise route refresh IPv4 Routing Commands 5 40 peer capability advertise route refresh IPv6 Routing Commands 5 32 peer connect interface IPv4 Routing Commands 5 41 peer connect...

Page 1549: ...mmands 5 41 peer public as only IPv4 Routing Commands 5 52 peer public as only IPv6 Routing Commands 5 42 peer reflect client IPv4 Routing Commands 5 53 peer reflect client IPv6 Routing Commands 5 43...

Page 1550: ...4 41 pim timer graft retry Multicast Commands 4 42 pim timer hello Multicast Commands 4 42 pim timer join prune Multicast Commands 4 43 pim triggered hello delay Multicast Commands 4 44 ping System M...

Page 1551: ...ee rule Portal Commands 1 15 portal server Portal Commands 1 16 portal server method Portal Commands 1 17 port group Port Correlation Configuration Commands 1 23 port group aggregation Link Aggregatio...

Page 1552: ...ands 1 35 pwd File System Management Commands 1 10 pwd File System Management Commands 2 21 pwd SSH Commands 1 36 Q qinq enable QinQ BPDU Tunneling Commands 1 3 qinq ethernet type customer tag QinQ BP...

Page 1553: ...ctor cluster id IPv6 Routing Commands 5 50 refresh bgp IPv4 Routing Commands 5 59 refresh bgp ipv6 IPv6 Routing Commands 5 50 region name MSTP Commands 1 12 register policy Multicast Commands 4 45 reg...

Page 1554: ...1 23 reset dhcp snooping DHCP Commands 4 7 reset dns dynamic host DNS Commands 1 9 reset dns ipv6 dynamic host IPv6 Configuration Commands 1 38 reset dot1x statistics 802 1x MAC Authentication Comman...

Page 1555: ...ast Commands 4 47 reset portal connection statistics Portal Commands 1 18 reset portal server statistics Portal Commands 1 18 reset portal tcp cheat statistics Portal Commands 1 19 reset qos policy gl...

Page 1556: ...ng enable RRPP Commands 1 12 rip IPv4 Routing Commands 2 17 rip authentication mode IPv4 Routing Commands 2 18 rip input IPv4 Routing Commands 2 19 rip metricin IPv4 Routing Commands 2 19 rip metricou...

Page 1557: ...13 rule in advanced IPv4 ACL view ACL Commands 1 14 rule in advanced IPv6 ACL view ACL Commands 1 29 rule in basic IPv4 ACL view ACL Commands 1 12 rule in basic IPv6 ACL view ACL Commands 1 28 rule i...

Page 1558: ...ipv6 SSH Commands 1 16 sftp server enable SSH Commands 1 17 sftp server idle timeout SSH Commands 1 18 shell Login Commands 1 22 shutdown VLAN Commands 1 6 shutdown Port Correlation Configuration Comm...

Page 1559: ...ON Commands 1 23 snmp agent trap source SNMP RMON Commands 1 23 snmp agent usm user Login Commands 2 4 snmp agent usm user v1 v2c SNMP RMON Commands 1 24 snmp agent usm user v3 SNMP RMON Commands 1 25...

Page 1560: ...r DHCP Commands 1 23 static bind ip address DHCP Commands 1 24 static bind mac address DHCP Commands 1 25 static rp Multicast Commands 4 53 static rpf peer Multicast Commands 5 20 step for IPv4 ACL Co...

Page 1561: ...ands 1 29 stp region configuration MSTP Commands 1 29 stp root primary MSTP Commands 1 30 stp root secondary MSTP Commands 1 31 stp root protection MSTP Commands 1 33 stp tc protection MSTP Commands 1...

Page 1562: ...tcp timer fin timeout IP Addressing and Performance Commands 2 20 tcp timer syn timeout IP Addressing and Performance Commands 2 20 tcp window IP Addressing and Performance Commands 2 21 telnet Login...

Page 1563: ...uiet AAA RADIUS HWTACACS Commands 1 74 timer realtime accounting AAA RADIUS HWTACACS Commands 1 57 timer realtime accounting AAA RADIUS HWTACACS Commands 1 75 timer response timeout AAA RADIUS HWTACAC...

Page 1564: ...Commands 2 28 version Multicast Commands 3 26 virtual system IPv4 Routing Commands 4 58 vlan VLAN Commands 1 7 vlan mapping modulo MSTP Commands 1 39 vlink peer IPv4 Routing Commands 3 61 vlink peer I...

Page 1565: ...vrrp ping enable HA Commands 1 8 vrrp un check ttl HA Commands 1 8 vrrp vrid authentication mode HA Commands 1 6 vrrp vrid preempt mode HA Commands 1 9 vrrp vrid priority HA Commands 1 10 vrrp vrid t...

Search results

Summary of Contents for H3C S7500E Series

Reviews:

Related manuals for H3C S7500E Series

Brands by name

Popular brands

H3C H3C S7500E Series, Command Manual

Search results

Summary of Contents for H3C S7500E Series

Reviews:

Related manuals for H3C S7500E Series

Brands by name

Popular brands