manualshive.com logo in svg

HP FlexNetwork 5130 HI series, Command Reference Manual

Share
Download
HP FlexNetwork 5130 HI series Command Reference Manual Download Page 305

 

297 

port bridge enable,

31 

port hybrid ip-subnet-vlan,

191 

port hybrid protocol-vlan,

194 

port hybrid pvid,

178 

port hybrid vlan,

179 

port link-aggregation group,

104 

port link-type,

180 

port private-vlan host,

206 

port private-vlan promiscuous,

207 

port private-vlan trunk promiscuous,

209 

port private-vlan trunk secondary,

212 

port pvid forbidden,

187 

port service-loopback group,

286 

port trunk permit vlan,

181 

port trunk pvid,

182 

port up-mode,

32 

port-isolate enable,

108 

port-isolate group,

108 

private-vlan (VLAN interface view),

215 

private-vlan (VLAN view),

216 

private-vlan community,

218 

private-vlan isolated,

219 

private-vlan primary,

220 

protocol-vlan,

195 

Q 

qinq enable,

242 

qinq ethernet-type customer-tag,

242 

qinq ethernet-type service-tag,

243 

qinq transparent-vlan,

244 

R 

region-name,

128 

Remote support,

292 

reset counters interface,

23 

reset counters interface,

104 

reset counters interface loopback,

49 

reset counters interface null,

50 

reset ethernet statistics,

24 

reset lacp statistics,

105 

reset mvrp statistics,

240 

reset packet-drop interface,

24 

reset stp,

129 

revision-level,

129 

S 

service,

173 

service-loopback group,

287 

shutdown,

51 

shutdown,

174 

shutdown,

25 

shutdown,

105 

snmp-agent trap enable mac-address,

72 

speed,

25 

speed auto downgrade,

26 

storm-constrain,

33 

storm-constrain control,

34 

storm-constrain enable log,

35 

storm-constrain enable trap,

35 

storm-constrain interval,

36 

stp bpdu-protection,

130 

stp bridge-diameter,

130 

stp compliance,

131 

stp config-digest-snooping,

132 

stp cost,

133 

stp edged-port,

134 

stp enable,

135 

stp global config-digest-snooping,

136 

stp global enable,

137 

stp global mcheck,

137 

stp loop-protection,

138 

stp max-hops,

139 

stp mcheck,

139 

stp mode,

140 

stp no-agreement-check,

141 

stp pathcost-standard,

142 

stp point-to-point,

142 

stp port priority,

143 

stp port-log,

144 

stp priority,

145 

stp region-configuration,

146 

stp role-restriction,

147 

stp root primary,

147 

stp root secondary,

148 

stp root-protection,

149 

stp tc-protection,

150 

stp tc-protection threshold,

150 

stp tc-restriction,

151 

stp tc-snooping,

152 

stp timer forward-delay,

152 

stp timer hello,

153 

stp timer max-age,

154 

stp timer-factor,

155 

stp transmit-limit,

156 

stp vlan enable,

157 

subvlan,

202 

supervlan,

203 

U 

unicast-suppression,

36 

V 

Summary of Contents for FlexNetwork 5130 HI series

Page 1: ...HPE FlexNetwork 5130 HI Switch Series Layer 2 LAN Switching Command Reference Part number 5998 8408a Software version Release 11xx Document version 6W101 20161221 ...

Page 2: ...Software Computer Software Documentation and Technical Data for Commercial Items are licensed to the U S Government under vendor s standard commercial license Links to third party websites take you outside the Hewlett Packard Enterprise website Hewlett Packard Enterprise has no control over and is not responsible for information outside the Hewlett Packard Enterprise website Acknowledgments Intel ...

Page 3: ...6 Layer 2 Ethernet interface commands 27 broadcast suppression 27 display storm constrain 28 mdix mode 29 multicast suppression 30 port bridge enable 31 port up mode 32 storm constrain 33 storm constrain control 34 storm constrain enable log 35 storm constrain enable trap 35 storm constrain interval 36 unicast suppression 36 virtual cable test 38 Loopback null and inloopback interface commands 40 ...

Page 4: ...ss information interval 75 mac address information mode 75 mac address information queue length 76 Ethernet link aggregation commands 78 bandwidth 78 default 78 description 79 display interface 79 display lacp system id 83 display link aggregation load sharing mode 83 display link aggregation member port 85 display link aggregation summary 87 display link aggregation verbose 89 interface bridge ag...

Page 5: ...ost 133 stp edged port 134 stp enable 135 stp global config digest snooping 136 stp global enable 137 stp global mcheck 137 stp loop protection 138 stp max hops 139 stp mcheck 139 stp mode 140 stp no agreement check 141 stp pathcost standard 142 stp point to point 142 stp port priority 143 stp port log 144 stp priority 145 stp region configuration 146 stp role restriction 147 stp root primary 147 ...

Page 6: ...lay mac vlan 183 display mac vlan interface 184 mac vlan enable 184 mac vlan mac address 185 mac vlan trigger enable 186 port pvid forbidden 187 vlan precedence 187 IP subnet based VLAN commands 188 display ip subnet vlan interface 188 display ip subnet vlan vlan 189 ip subnet vlan 190 port hybrid ip subnet vlan 191 Protocol based VLAN commands 192 display protocol vlan interface 192 display proto...

Page 7: ... periodic 237 mvrp enable 237 mvrp global enable 238 mvrp gvrp compliance enable 239 mvrp registration 239 reset mvrp statistics 240 QinQ commands 241 display qinq 241 qinq enable 242 qinq ethernet type customer tag 242 qinq ethernet type service tag 243 qinq transparent vlan 244 VLAN mapping commands 246 display vlan mapping 246 vlan mapping 247 LLDP commands 250 display lldp local information 25...

Page 8: ...p tlv enable 281 Service loopback group commands 286 display service loopback group 286 port service loopback group 286 service loopback group 287 Document conventions and icons 289 Conventions 289 Network topology icons 290 Support and other resources 291 Accessing Hewlett Packard Enterprise Support 291 Accessing updates 291 Websites 292 Customer self repair 292 Remote support 292 Documentation f...

Page 9: ...pecifies the expected bandwidth in the range of 1 to 400000000 kbps Usage guidelines The expected bandwidth of an interface affects the following items Bandwidth assignment with CBQ For more information see ACL and QoS Configuration Guide Examples Set the expected bandwidth of interface GigabitEthernet 1 0 1 to 1000 kbps Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEt...

Page 10: ...Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 default description Use description to change the description of an interface Use undo description to restore the default Syntax description text undo description Default The description of an interface is the interface name plus Interface for example GigabitEthernet1 0 1 Interface Views Ethernet interface view Predefined user ro...

Page 11: ... displays traffic statistics of the specified interface Examples Display inbound traffic statistics for all GigabitEthernet interfaces Sysname display counters inbound interface gigabitethernet Interface Total pkts Broadcast pkts Multicast pkts Err pkts GE1 0 1 100 100 0 0 GE1 0 2 0 0 0 0 GE1 0 3 Overflow Overflow Overflow Overflow GE1 0 4 0 0 0 0 Overflow More than 14 digits 7 digits for column E...

Page 12: ... interfaces in up state If you specify an interface type this command displays traffic rate statistics for all up interfaces of the specified type over the last statistics polling interval If you do not specify an interface type this command displays traffic rate statistics for all up interfaces that have traffic counters over the last statistics polling interval If an interface which is always do...

Page 13: ...s not supported Related commands flow interval reset counters interface display ethernet statistics Use display ethernet statistics to display the Ethernet module statistics Syntax display ethernet statistics slot slot number Views User view Predefined user roles network admin network operator Parameters slot slot number Displays the Ethernet module statistics on the specified IRF member device Th...

Page 14: ...ckets MPLS Number of MPLS packets ISIS Number of IS IS packets ISIS2 Number of large 802 3 802 2 frames encapsulated by using IS IS IP Number of IP packets IPv6 Number of IPv6 packets ETH receive error statistics Statistics about the error Ethernet packets in the outbound direction on the Ethernet module Errors might be included in packets or occur during the receiving process The items include Nu...

Page 15: ...ng sent when the interface is shut down IfErr Number of packets with incorrect outgoing interfaces Related commands reset ethernet statistics display interface Use display interface to display Ethernet interface information Syntax display interface interface type brief down display interface interface type interface number brief description Views Any view Predefined user roles network admin networ...

Page 16: ... maximum frame length is 10000 Allow jumbo frames to pass Broadcast max ratio 100 Multicast max ratio 100 Unicast max ratio 100 PVID 1 MDI type automdix Port link type Access Tagged VLANs None UnTagged VLANs 1 Port priority 0 Last link flapping Never Last clearing of counters Never Peak input rate 14 bytes sec at 2013 01 01 06 32 27 Peak output rate 552 bytes sec at 2013 01 01 06 32 27 Last 300 se...

Page 17: ...ce does not have Selected ports DOWN OAM DOWN The link layer of the interface is down because OAM detected remote link failures DOWN DLDP and LAGG DOWN The link layer of the interface is shut down by DLDP and LAGG DOWN DLDP and OAM DOWN The link layer of the interface is shut down by DLDP and OAM DOWN OAM and LAGG DOWN The link layer of the interface is shut down by OAM and LAGG DOWN DLDP OAM and ...

Page 18: ... Unicast max Unicast storm suppression threshold in ratio pps or kbps The unit of the threshold depends on your configuration PVID Port VLAN ID PVID of the Ethernet interface MDI type Cable type depending on your configuration automdix mdi mdix Port link type Link type of the interface depending on your configuration access trunk hybrid Tagged VLANs VLANs for which the interface sends packets with...

Page 19: ...d on the interface For an Ethernet interface that does not permit jumbo frames giants refer to frames larger than 1536 bytes without VLAN tags or 1540 bytes with VLAN tags For an Ethernet interface that permits jumbo frames giants refer to frames larger than the maximum length of Ethernet frames that are allowed to pass through which is configured when you configure jumbo frame support on the inte...

Page 20: ...t errors Number of outbound packets with errors underruns Number of packets dropped because the output rate of the interface exceeded the output queuing capability This is a low probability hardware anomaly buffer failures Number of packets dropped because the transmit buffer of the interface ran low aborts Number of packets that failed to be transmitted for example because of Ethernet collisions ...

Page 21: ... interface gigabitethernet 1 0 3 brief description Brief information on interfaces in bridge mode Link ADM administratively down Stby standby Speed a auto Duplex a A auto H half F full Type A access T trunk H hybrid Interface Link Speed Duplex Type PVID Description GE1 0 3 UP 1G a F a A 1 aaaaaaaaaaaaaaaaaaaaaaaaaaaaa Aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa Display information about interfaces i...

Page 22: ...d link or not present at all Primary IP Primary IP address of the interface A hyphen indicates that the interface is not configured with an IP address Description Partial or complete interface description configured by using the description command If you do not specify the description keyword for the display interface brief command the Description field displays only the first 27 characters of th...

Page 23: ...etected that the uplink is down MAD ShutDown After an IRF split the state of all interfaces except the excluded ports in the IRF in recovery state is set to DOWN Not connected No physical connection exists possibly because the network cable is disconnected or faulty Storm Constrain The port is shut down because the unknown unicast traffic multicast traffic or broadcast traffic exceeds the upper li...

Page 24: ...terfaces Sysname display packet drop summary All interfaces Packets dropped due to full GBP or insufficient bandwidth 301 Packets dropped due to Fast Filter Processor FFP 261 Packets dropped due to STP non forwarding state 321 Table 6 Command output Field Description Packets dropped due to full GBP or insufficient bandwidth Packets that are dropped because the buffer is used up or the bandwidth is...

Page 25: ...EE Use undo eee enable to restore the default Syntax eee enable undo eee enable Default EEE is disabled Views Ethernet interface view Predefined user roles network admin Usage guidelines With the EEE function a link up port enters the low power state if it has not received any packet for a certain period of time The time period depends on the chip specifications and is not configurable When a pack...

Page 26: ...flow control frames When congested the interface sends a flow control frame to its peer Upon receiving a flow control frame from the peer the interface suspends sending packets Examples Enable TxRx mode generic flow control on the interface GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 flow control flow control receive enable CAUTION...

Page 27: ...control on GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 flow control receive enable Related commands flow control flow interval Use flow interval to set the interface statistics polling interval Use undo flow interval to restore the default interval Syntax flow interval interval undo flow interval Default The interface statistics po...

Page 28: ...umboframe enable to prevent jumbo frames from passing through Syntax jumboframe enable value undo jumboframe enable Default The device allows jumbo frames within 10000 bytes to pass through Views Ethernet interface view Predefined user roles network admin Parameters value Sets the maximum length of Ethernet frames that are allowed to pass through The value range is 1536 to 10000 bytes Usage guidel...

Page 29: ... is 0 to 10000 milliseconds and the value must be a multiple of 100 mode up Suppresses the link up events mode updown Suppresses both the link up and link down events Usage guidelines When the link delay delay time command is configured The link down event is not reported to the CPU unless the interface is still down when the suppression interval delay time expires The link up event is immediately...

Page 30: ... loopback test on the Ethernet interface Usage guidelines If an Ethernet interface does not work correctly you can perform a loopback test on it to identify the problem An Ethernet interface in a loopback test does not forward data traffic On an administratively shut down Ethernet interface displayed as in ADM or Administratively DOWN state you cannot perform an internal or external loopback test ...

Page 31: ...pecifications and is not configurable When the interface comes up both of the following events occur The switch automatically restores the power supply to the interface The interface enters its normal state Examples Enable auto power down on interface GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 port auto power down reset counters i...

Page 32: ...ntax reset ethernet statistics slot slot number Views User view Predefined user roles network admin network operator Parameters slot slot number Clears the Ethernet module statistics on the specified IRF member device The slot number argument represents the ID of the IRF member device Examples Clear the Ethernet module statistics on IRF member 6 Sysname reset ethernet statistics slot 6 reset packe...

Page 33: ...p an Ethernet interface Syntax shutdown undo shutdown Default Ethernet interfaces are in up state Views Ethernet interface view Predefined user roles network admin Usage guidelines You might need to shut down and then bring up an Ethernet interface to make some interface configurations take effect Examples Shut down and then bring up GigabitEthernet 1 0 1 Sysname system view Sysname interface giga...

Page 34: ...PE 5130 5510 10GbE SFP 2 port Module JH157A or HPE 5130 5510 10GBASE T 2 port Module JH156A interface card support only the 10000 keyword For a fiber port use the speed command to set its speed to match the rate of a transceiver module Examples Configure GigabitEthernet 1 0 1 to autonegotiate the speed Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 speed a...

Page 35: ... smaller the percentage the less broadcast traffic is allowed to pass through pps max pps Specifies the maximum number of broadcast packets that the interface can forward per second The value range for the max pps argument in pps is 0 to 1 4881 the maximum interface rate For example the value range for this argument is 0 to 1488100 on a GE interface and 0 to 59524000 on a 40 GE interface kbps max ...

Page 36: ...lated commands multicast suppression unicast suppression display storm constrain Use display storm constrain to display storm control settings and statistics Syntax display storm constrain broadcast known unicast multicast unicast interface interface type interface number Views Any view Predefined user roles network admin network operator Parameters broadcast Displays broadcast storm control setti...

Page 37: ...entage Upper Upper storm control threshold in pps kbps or percentage Unit Storm control threshold unit pps kbps percentage CtrlMode Protective action block or shutdown taken on the port when the upper threshold is reached N A indicates that no protective action is configured Status Packet forwarding status FW The port is forwarding traffic correctly shutdown The port has been shut down block The p...

Page 38: ...0 1 Sysname GigabitEthernet1 0 1 mdix mode mdi multicast suppression Use multicast suppression to enable multicast storm suppression and set the multicast storm suppression threshold Use undo multicast suppression to restore the default Syntax multicast suppression ratio pps max pps kbps max kbps undo multicast suppression Default Ethernet interfaces do not suppress multicast traffic Views Layer 2...

Page 39: ...ppression command at the same time Otherwise the traffic suppression result is not determined When you configure the suppression threshold in kbps the actual suppression threshold might be different from the configured one as follows If the configured value is smaller than 64 the value of 64 takes effect If the configured value is greater than 64 but not an integer multiple of 64 the integer multi...

Page 40: ...CAUTION The following operations on a fiber port will cause link updown events before the port finally stays up Configure the port up mode command and the speed or duplex command at the same time Install or remove fiber links or transceiver modules after you forcibly bring up the fiber port You can use this command to forcibly bring up a fiber Ethernet port and enable the port to forward packets u...

Page 41: ...rol pps Sets storm control thresholds in pps kbps Sets storm control thresholds in kbps ratio Sets storm control thresholds as a percentage of the transmission capacity of the interface upperlimit Sets the upper threshold in pps kbps or percentage lowerlimit Sets the lower threshold in pps kbps or percentage Usage guidelines After you configure this command the device collects the statistics of a ...

Page 42: ...ce gigabitethernet 1 0 3 Sysname GigabitEthernet1 0 3 storm constrain multicast ratio 80 15 Related commands storm constrain control storm constrain interval storm constrain control Use storm constrain control to set the protective action to take on an Ethernet interface when a type of traffic unknown unicast multicast or broadcast exceeds the upper storm control threshold Use undo storm constrain...

Page 43: ...do storm constrain enable log Default An interface generates logs when monitored traffic exceeds the upper threshold or falls below the lower threshold Views Layer 2 Ethernet interface view Predefined user roles network admin Examples Enable GigabitEthernet 1 0 1 to generate logs when it detects storm control threshold events Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname Giga...

Page 44: ...tatistics every 10 seconds Views System view Predefined user roles network admin Parameters seconds Sets the traffic polling interval of the storm control module The value range is 1 to 300 seconds Usage guidelines The interval set by the storm constrain interval command is specific to storm control To set the statistics polling interval of an interface use the flow interval command For network st...

Page 45: ...ds this threshold the system discards packets until the unicast traffic drops below this threshold Both the storm constrain and unicast suppression can suppress unicast storm on a port The storm constrain command uses software to suppress unicast traffic and it affects the device performance to a certain extent The unicast suppression command use the chip to physically suppress unicast traffic and...

Page 46: ...ion will cause the link to go down and then up The test result is for reference only The cable length detection error is up to 5 m about 16 ft If a test item is not available a hyphen is displayed Examples Test the cable connection of GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 virtual cable test Cable status abnormal open 140 metr...

Page 47: ...lure The test failed n metres If the cable connection is working correctly this field displays the total length of the cable If the cable connection fails this field displays the length from the local port to the faulty point ...

Page 48: ...ue Specifies the expected bandwidth in the range of 1 to 400000000 kbps Usage guidelines The expected bandwidth of an interface affects the following items Bandwidth assignment with CBQ For more information see ACL and QoS Configuration Guide Examples Set the expected bandwidth of Loopback 1 to 1000 kbps Sysname system view Sysname interface loopback 1 Sysname LoopBack1 bandwidth 1000 default Use ...

Page 49: ...efault description Use description to set a description for an interface Use undo description to restore the default Syntax description text undo description Default The description of a loopback or null interface is the interface name plus Interface for example LoopBack1 Interface Views Loopback interface view null interface view Predefined user roles network admin Parameters text Specifies an in...

Page 50: ...ne inloopback interface Inloopback 0 Examples Display detailed information about interface Inloopback 0 Sysname display interface inloopback 0 InLoopBack0 Current state UP Line protocol state UP spoofing Description InLoopBack0 Interface Bandwidth 0kbps Maximum transmission unit 1536 Physical InLoopBack Last 300 seconds input rate 0 bytes sec 0 bits sec 0 packets sec Last 300 seconds output rate 0...

Page 51: ...ay interface inloopback 0 brief Brief information on interfaces in route mode Link ADM administratively down Stby standby Protocol s spoofing Interface Link Protocol Primary IP Description InLoop0 UP UP s Display brief information about interface Inloopback 0 including the complete description of the inloopback interface Sysname display interface inloopback 0 brief description Brief information on...

Page 52: ...which can be the number of any existing loopback interface If you do not specify this argument the command displays information about all existing loopback interfaces on the device brief Displays brief interface information If you do not specify this keyword the command displays detailed interface information down Displays information about interfaces in down state and the causes If you do not spe...

Page 53: ...en the interface is not configured with an IP address Internet address is 1 1 1 1 32 Primary Primary IP address of the interface displayed when the interface is configured with a primary IP address Physical Loopback The physical type of the interface is loopback Last clearing of counters Time when statistics on the logical interface were last cleared by using the reset counters interface command I...

Page 54: ... Brief information on interfaces in route mode Link ADM administratively down Stby standby Interface Link Cause Loop1 ADM Administratively Table 12 Command output Field Description Brief information on interfaces in route mode Brief information about loopback interfaces Link ADM administratively down Stby standby Explains the Link field values ADM The interface has been shut down by the network ad...

Page 55: ...e display interface null to display information about the null interface Syntax display interface null 0 brief description Views Any view Predefined user roles network admin network operator Parameters 0 Specifies interface Null 0 brief Displays brief interface information If you do not specify this keyword the command displays detailed interface information description Displays complete interface...

Page 56: ... UP s aaaaaaaaaaaaaaaaaaaaaaaaaaa Display brief information about interface Null 0 including the complete description of the null interface Sysname display interface null 0 brief description Brief information on interfaces in route mode Link ADM administratively down Stby standby Protocol s spoofing Interface Link Protocol Primary IP Description NULL0 UP UP s aaaaaaaaaaaaaaaaaaaaaaaaaaaaa aaaaaaaa...

Page 57: ...urce interface for establishing an FTP connection Use the loopback interface address as the Router ID Examples Create interface loopback 1 Sysname system view Sysname interface loopback 1 Sysname LoopBack1 interface null Use interface null to enter null interface view Syntax interface null 0 Default A device has only one null interface Null 0 which cannot be created or deleted Views System view Pr...

Page 58: ...y if at least one loopback interface has been created Examples Clear the statistics on loopback interface Loopback 1 Sysname reset counters interface loopback 1 Related commands display interface loopback reset counters interface null Use reset counters interface null to clear the statistics on the null interface Syntax reset counters interface null 0 Views User view Predefined user roles network ...

Page 59: ...nterface is up Views Loopback interface view Predefined user roles network admin Usage guidelines Use the shutdown command with caution because the command disconnects the connection of the interface and disables the interface from communicating Examples Shut down interface loopback 1 Sysname system view Sysname interface loopback 1 Sysname LoopBack1 shutdown ...

Page 60: ...name command Examples Display information about all existing interface ranges created by using the interface range name command Sysname display interface range Interface range name t2 GigabitEthernet1 0 1 GigabitEthernet1 0 2 Interface range name test GigabitEthernet1 0 11 GigabitEthernet1 0 12 The output shows the following Interfaces GigabitEthernet 1 0 1 and GigabitEthernet 1 0 2 are added to i...

Page 61: ...on the first member interface in the interface range the command is not executed on any member interfaces If the execution failed on non first member interfaces the command takes effect on the other member interfaces The system returns to system view It means that The command is supported in both system view and interface view The execution failed on a member interface in interface range view and ...

Page 62: ... enter the interface range view In interface range view only the commands supported by the first interface are available The first interface is specified with the interface range command To view the commands supported by the first interface in the interface range enter the interface range view and enter a question mark at the command line interface prompt After a command is executed in interface r...

Page 63: ...r interfaces can break up the aggregation No limit is set on the maximum number of interfaces in an interface range The more interfaces in an interface range the longer the command execution time The maximum number of interface range names is limited only by the system resources As a best practice configure fewer than 1000 interface range names to guarantee bulk interface configuration performance...

Page 64: ...rface by its type and number blackhole Displays blackhole MAC address entries multiport Displays multiport unicast MAC address entries count Displays only the number of MAC address entries that match all entry attributes you specify in the command Detailed information about MAC address entries is not displayed For example you can use the display mac address vlan 20 dynamic count command to display...

Page 65: ...Secure MAC address entry This entry state is available in Release 1121 and later Port NickName The outgoing interface for packets that are destined for the MAC address This field displays N A for a blackhole MAC address entry Aging Whether the entry can age out Y The entry can age out N The entry never ages out n mac address es found Number of matching MAC address entries Related commands mac addr...

Page 66: ... do not specify an interface the command displays the global MAC address learning status and the MAC address learning status of all interfaces Examples Display the global MAC address learning status and the MAC learning status of all interfaces Sysname display mac address mac learning Global MAC address learning status Enabled Port Learning Status GE1 0 1 Enabled GE1 0 2 Enabled GE1 0 3 Enabled GE...

Page 67: ...hen the number of MAC address move records exceeds 20 the most recent record will override the oldest record based on the last MAC address move time Examples Display the MAC address move records on the IRF member device 2 Sysname display mac address mac move slot 2 MAC address moving information MAC address VLAN Current port Source port Last time Times 0000 0001 002c 1 GE1 0 1 GE1 0 2 2013 05 20 1...

Page 68: ...Unicast MAC Addresses Available 32768 Multicast and Multiport MAC Address Count 1 Static Multicast and Multiport MAC Address User defined Count 1 Total Multicast and Multiport MAC Addresses Available 256 Table 16 Command output Field Description Dynamic Unicast Address Learned Count Number of dynamic unicast MAC address entries triggered by packets Dynamic Unicast Address Security service defined ...

Page 69: ...rt unicast MAC address entry is sent out of multiple ports mac address Specifies a MAC address in the format of H H H excluding multicast and all zero MAC addresses When entering a MAC address you can omit the leading zeros in each H section For example enter f e2 1 for 000f 00e2 0001 vlan vlan id Specifies an existing VLAN to which the specified interface belongs The value range for the vlan id a...

Page 70: ...Sysname interface gigabitethernet 1 0 2 Sysname GigabitEthernet1 0 2 mac address multiport 0001 0001 0101 vlan 2 Related commands display mac address mac address system view mac address system view Use mac address to add or modify a MAC address entry Use undo mac address to delete one or all MAC address entries Syntax mac address dynamic static mac address interface interface type interface number...

Page 71: ...Then the frames destined for the user device for example Host A are always sent out of the interface Other hosts using the forged MAC address of Host A cannot obtain the frames destined for Host A To drop frames with the specified source MAC addresses or destination MAC addresses you can configure blackhole MAC address entries To send frames with a specific destination MAC address out of multiple ...

Page 72: ...Usage guidelines To prevent the MAC address table from becoming saturated you can disable MAC address learning For example a number of packets with different source MAC addresses reaching a device can affect the MAC address table update To avoid such attacks you can disable MAC address learning by following these guidelines You can disable MAC address learning on a per interface basis If you disab...

Page 73: ...default Syntax mac address mac learning priority high low undo mac address mac learning priority Default Low MAC address learning priority is used Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Parameters high Assigns high MAC learning priority low Assigns low MAC learning priority Usage guidelines The MAC address learning priority values...

Page 74: ...network admin Usage guidelines If ports on different IRF member devices are Selected ports from the same aggregation group MAC address entries are synchronized among these IRF member devices They are synchronized whether or not MAC address synchronization is enabled for the IRF fabric For more information about aggregation groups see Layer 2 LAN Switching Configuration Guide The MAC address table ...

Page 75: ...elated commands mac address mac address max mac count enable forwarding mac address max mac count enable forwarding Use mac address max mac count enable forwarding to enable the device to forward unknown frames received on an interface after the MAC learning limit on the interface is reached Use undo mac address max mac count enable forwarding to disable the device from forwarding unknown frames r...

Page 76: ... address mac move fast update to restore the default Syntax mac address mac move fast update undo mac address mac move fast update Default ARP fast update is disabled for MAC address moves Views System view Predefined user roles network admin Examples Enable ARP fast update for MAC address moves Sysname system view Sysname mac address mac move fast update mac address notification mac move Use mac ...

Page 77: ...mum of 20 MAC address move records The latest record will override the oldest one Within a detection interval an IRF member device can display a maximum of 20 MAC address move records and the subsequent records will be discarded The latest record will override the oldest one generated in the preceding detection interval Examples Enable MAC address move notifications Sysname system view Sysname mac...

Page 78: ...the device Examples Enable MAC address move suppression on GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 mac address notification mac move suppression mac address notification mac move suppression interval Use mac address notification mac move suppression interval to set a suppression interval for MAC address moves Use undo mac addre...

Page 79: ...The system shuts down the interface when the following conditions exist The interface is enabled with MAC address move suppression The number of MAC address moves from the interface within a detection interval exceeds the threshold After the suppression interval elapses the interface comes up automatically You can also use the undo shutdown command to manually bring up the interface If the thresho...

Page 80: ... Sysname mac address timer aging 500 Related commands display mac address aging time snmp agent trap enable mac address Use snmp agent trap enable mac address to enable SNMP notifications for the MAC address table Use undo snmp agent trap enable mac address to disable SNMP notifications for the MAC address table Syntax snmp agent trap enable mac address mac move undo snmp agent trap enable mac add...

Page 81: ...tions about MAC address moves you enable or disable all types of SNMP notifications for the MAC address table Examples Disable SNMP notifications about MAC address moves for the MAC address table Sysname system view Sysname undo snmp agent trap enable mac address mac move Related commands mac address notification mac move ...

Page 82: ...o record MAC change information when an existing MAC address is deleted Usage guidelines Before you enable MAC Information on an interface enable MAC Information globally Examples Enable MAC Information on GigabitEthernet 1 0 1 to enable the interface to record MAC change information when learning a new MAC address Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet...

Page 83: ...erval Default The MAC change notification interval is 1 second Views System view Predefined user roles network admin Parameters interval time Specifies the MAC change notification interval in the range of 1 to 20000 seconds Usage guidelines To prevent syslog messages or SNMP notifications from being sent too frequently set the MAC change notification interval to a larger value Examples Set the MAC...

Page 84: ...restore the default Syntax mac address information queue length value undo mac address information queue length Default The MAC Information queue length is 50 Views System view Predefined user roles network admin Parameters value Specifies the MAC Information queue length in the range of 0 to 1000 The MAC Information queue length indicates the number of MAC change messages Usage guidelines If the ...

Page 85: ...ends syslog messages or SNMP notifications only if the MAC change notification interval expires Examples Set the MAC Information queue length to 600 Sysname system view Sysname mac address information queue length 600 ...

Page 86: ...h of an interface affects the following items Bandwidth assignment with CBQ For more information see ACL and QoS Configuration Guide Examples Set the expected bandwidth to 10000 kbps for Layer 2 aggregate interface Bridge Aggregation 1 Sysname system view Sysname interface bridge aggregation 1 Sysname Bridge Aggregation1 bandwidth 10000 default Use default to restore the default settings for an ag...

Page 87: ...terface Use undo description to restore the default Syntax description text undo description Default The description of an interface is interface name Interface For example the default description of Bridge Aggregation 1 is Bridge Aggregation1 Interface Views Layer 2 aggregate interface view Predefined user roles network admin Parameters text Specifies the interface description a string of 1 to 25...

Page 88: ...about all aggregate interfaces of the specified type If you specify the bridge aggregation interface number option the command displays information about the specified aggregate interface Examples Display detailed information about Layer 2 aggregate interface Bridge Aggregation 1 Sysname display interface bridge aggregation 1 Bridge Aggregation1 Current state UP IP packet frame type Ethernet II ha...

Page 89: ...present or the link has failed UP The Ethernet interface is both administratively and physically up IP packet frame type IPv4 packet frame format The value PKTFMT_ETHNT_2 indicates that packets are encapsulated in Ethernet II format Description Partial or complete interface description configured by using the description command If the description keyword is not specified in the display interface ...

Page 90: ...ith an IP address this field changes to Internet Address is Brief information on interfaces in bridge mode Brief information about Layer 2 interfaces Link ADM administratively down Stby standby Link status ADM The interface has been administratively shut down To recover its physical layer state use the undo shutdown command Stby The interface is operating as a backup interface Speed a auto If the ...

Page 91: ...e LACP priority of the local system The LACP priority value is specified in decimal format in the lacp system priority command However it is displayed as a hexadecimal value in the output from the display lacp system id command Examples Display the local system ID Sysname display lacp system id Actor System ID 0x8000 0000 fc00 6504 Table 18 Command output Field Description Actor System ID 0x8000 0...

Page 92: ...ice Examples Display the default global link aggregation load sharing modes Sysname display link aggregation load sharing mode Link Aggregation Load Sharing Algorithm Default Link Aggregation Load Sharing Seed Default Link Aggregation Load Sharing Mode Layer 2 traffic packet type based sharing Layer 3 traffic packet type based sharing Display the set global link aggregation load sharing mode Sysna...

Page 93: ...ink aggregation load sharing mode of Layer 2 aggregation group 10 By default this field displays the global link aggregation load sharing modes If you have set a link aggregation load sharing mode for this aggregation group this field displays the configured mode Layer 2 traffic packet type based sharing Default link aggregation load sharing mode for Layer 2 traffic In this sample output Layer 2 t...

Page 94: ...oup Sysname display link aggregation member port gigabitethernet 1 0 1 Flags A LACP_Activity B LACP_Timeout C Aggregation D Synchronization E Collecting F Distributing G Defaulted H Expired GigabitEthernet1 0 1 Aggregate Interface Bridge Aggregation1 Port Number 1 Port Priority 32768 Oper Key 1 Display detailed link aggregation information for GigabitEthernet 1 0 2 which is a member port of a dyna...

Page 95: ...s no F Indicates whether the sending system considers that the outgoing frames are distributed 1 indicates yes and 0 indicates no G Indicates whether the sending system receives frames in default state 1 indicates yes and 0 indicates no H Indicates whether the sending system receives frames in expired state 1 indicates yes and 0 indicates no Aggregate Interface Aggregate interface to which the mem...

Page 96: ...e BAGG Bridge Aggregation RAGG Route Aggregation Aggregation Mode S Static D Dynamic Loadsharing Type Shar Loadsharing NonS Non Loadsharing Actor System ID 0x8000 000f e267 6c6a AGG AGG Partner ID Selected Unselected Individual Share Interface Mode Ports Ports Ports Type RAGG10 S None 1 0 0 NonS BAGG20 D 0x8000 00e0 fcff ff01 2 0 0 Shar Table 21 Command output Field Description Aggregation Interfa...

Page 97: ...regation keyword but do not specify an interface number the command displays detailed information about all Layer 2 aggregation groups If you do not specify an aggregate interface type the command displays detailed information about all aggregation groups The bridge aggregation keyword is available only when Layer 2 aggregate interfaces exist on the device Examples Display detailed information abo...

Page 98: ...ted Unselected or Individual Flags LACP state flags This field is one byte long represented by ABCDEFGH from the least significant bit to the most significant bit The letter is present when its bit is 1 and absent when its bit is 0 A Indicates whether LACP is enabled 1 indicates enabled and 0 indicates disabled B Indicates the LACP short or long timeout 1 indicates short timeout and 0 indicates lo...

Page 99: ...tional key of the peer port System ID System ID of the peer end Flag LACP state flag of the peer end interface bridge aggregation Use interface bridge aggregation to create a Layer 2 aggregate interface and enter Layer 2 aggregate interface view Use undo interface bridge aggregation to delete a Layer 2 aggregate interface Syntax interface bridge aggregation interface number undo interface bridge a...

Page 100: ...k admin Usage guidelines Use this command on the aggregate interface that connects the device to a server if dynamic link aggregation is configured only on the device This feature enables all member ports of the aggregation group to forward packets to improve link reliability This command takes effect only on an aggregate interface corresponding to a dynamic aggregation group Link aggregation traf...

Page 101: ...assive lacp period short Use lacp period short to set the short LACP timeout interval 3 seconds on an interface Use undo lacp period to restore the default Syntax lacp period short undo lacp period Default The LACP timeout interval is the long timeout interval 90 seconds on an interface Views Layer 2 Ethernet interface view Predefined user roles network admin Examples Set the short LACP timeout in...

Page 102: ...egate interface view Predefined user roles network admin Parameters source ip address Specifies the source IP address of BFD sessions destination ip address Specifies the destination IP address of BFD sessions Usage guidelines Make sure the source and destination IP addresses are consistent at the two ends of an aggregate link For example if you execute link aggregation bfd ipv4 source 1 1 1 1 des...

Page 103: ...ned user roles network admin Parameters algorithm algorithm number Specifies an algorithm by its number in the range of 1 to 9 Usage guidelines If you execute this command multiple times the most recent configuration takes effect You can configure only the algorithm or the algorithm seed or both You can combine an algorithm with different algorithm seeds to obtain different effects Examples Specif...

Page 104: ...wing criteria Source MAC address Destination MAC address Ethernet frame types VLAN tag MOD ID Port ID Views System view Predefined user roles network admin Parameters destination ip Load shares traffic based on destination IP addresses destination mac Load shares traffic based on destination MAC addresses destination port Load shares traffic based on destination ports ingress port Load shares traf...

Page 105: ...nds display link aggregation load sharing mode link aggregation global load sharing algorithm link aggregation global load sharing seed link aggregation load sharing mode link aggregation global load sharing seed Use link aggregation global load sharing seed to configure the per flow load sharing algorithm seed for Ethernet link aggregation Use undo link aggregation global load sharing seed to res...

Page 106: ...k admin Parameters vlan id list Specifies a space separated list of up to 10 VLAN items Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan id1 to vlan id2 The value range for VLAN IDs is 1 to 4094 The value for vlan id2 must be equal to or greater than the value for vlan id1 Usage guidelines With this command configured a Layer 2 aggregate interface ignores the permitted VLAN...

Page 107: ...n devices at both ends of the aggregate link Do not enable both spanning tree and link aggregation traffic redirection on a device Otherwise light packet loss might occur when the device reboots Link aggregation traffic redirection cannot operate correctly on an edge aggregate interface Global link aggregation traffic redirection settings take effect on all aggregation groups A link aggregation gr...

Page 108: ... address Destination IP address Source MAC address NOTE Packets cannot be load shared based on source MAC addresses when the destination IP addresses of the packets match multiport ARP entries For more information about multiport ARP entries see Layer 3 IP Services Configuration Guide Destination MAC address Destination IP address and source IP address Destination MAC address and source MAC addres...

Page 109: ...oad sharing mode local first link aggregation mode Use link aggregation mode dynamic to configure an aggregation group to operate in dynamic aggregation mode and enable LACP Use undo link aggregation mode to restore the default Syntax link aggregation mode dynamic undo link aggregation mode Default An aggregation group operates in static aggregation mode Views Layer 2 aggregate interface view Pred...

Page 110: ...aximum Use link aggregation selected port maximum to set the maximum number of Selected ports allowed in an aggregation group Use undo link aggregation selected port maximum to restore the default Syntax link aggregation selected port maximum number undo link aggregation selected port maximum Default The maximum number of Selected ports for an aggregation group is 32 Views Layer 2 aggregate interf...

Page 111: ...anced link aggregation selected port minimum link aggregation selected port minimum Use link aggregation selected port minimum to set the minimum number of Selected ports in the aggregation group Use undo link aggregation selected port minimum to restore the default Syntax link aggregation selected port minimum number undo link aggregation selected port minimum Default The minimum number of Select...

Page 112: ... Layer 2 Ethernet interface view Predefined user roles network admin Parameters number Specifies an aggregation group by its aggregate interface number in the range of 1 to 1024 Usage guidelines An Ethernet interface can belong to only one aggregation group Examples Assign Layer 2 Ethernet interface GigabitEthernet 1 0 1 to Layer 2 aggregation group 1 Sysname system view Sysname interface gigabite...

Page 113: ...terface bridge aggregation 1 reset lacp statistics Use reset lacp statistics to clear LACP statistics for the specified link aggregation member ports Syntax reset lacp statistics interface interface list Views User view Predefined user roles network admin Parameters interface interface list Specifies a list of link aggregation member ports in the format interface type interface number to interface...

Page 114: ... Predefined user roles network admin Examples Bring up Layer 2 aggregate interface Bridge Aggregation 1 Sysname system view Sysname interface bridge aggregation 1 Sysname Bridge Aggregation1 undo shutdown ...

Page 115: ...ame display port isolate group Port isolation group information Group ID 2 Group members GigabitEthernet1 0 1 Group ID 5 Group members GigabitEthernet1 0 2 GigabitEthernet1 0 4 Display information about isolation group 2 Sysname display port isolate group 2 Port isolation group information Group ID 2 Group members GigabitEthernet1 0 1 Table 23 Command output Field Description Group ID Isolation gr...

Page 116: ... interface it does not assign any aggregation member port to the isolation group If the failure occurs on an aggregation member port the device skips the port and continues to assign other aggregation member ports to the isolation group You cannot assign the member ports of a service loopback group to an isolation group and vice versa To assign ports to an isolation group make sure the isolation g...

Page 117: ...defined user roles network admin Parameters group number Specifies an isolation group by its number in the range of 1 to 8 all Deletes all isolation groups Usage guidelines If you execute this command multiple times the most recent configuration takes effect Examples Create isolation group 2 Sysname system view Sysname port isolate group 2 ...

Page 118: ...he stp global enable command As a best practice use the check region configuration command to determine whether the MST region configurations to be activated are correct Run this command only when they are correct Examples Map VLAN 2 to MSTI 1 and manually activate the MST region configuration Sysname system view Sysname stp region configuration Sysname mst region instance 1 vlan 2 Sysname mst reg...

Page 119: ...es belong to the same MST region only when they are connected through a physical link and configured with the same details as follows Format selector 0 by default and not configurable MST region name MST region revision level VLAN to instance mapping entries in the MST region As a best practice use this command to determine whether the MST region configurations to be activated are correct Activate...

Page 120: ...he value for instance id2 must be equal to or greater than the value for instance id1 The value range for the instance id argument is 0 to 4094 and the value 0 represents the CIST vlan vlan id list Specifies a space separated list of up to 10 VLAN items Each item specifies a VLAN or a range of VLANs in the form of vlan id1 to vlan id2 The value for vlan id2 must be equal to or greater than the val...

Page 121: ...f you specify both an MSTI list and a port list this command applies to the specified ports in the specified MSTIs During network convergence the most recent spanning tree information is not displayed Examples In MSTP mode display the brief spanning tree status and statistics for MSTI 0 on ports GigabitEthernet 1 0 1 through GigabitEthernet 1 0 4 Sysname display stp instance 0 interface gigabiteth...

Page 122: ...detailed spanning tree status and statistics for all MSTIs on all ports Sysname display stp CIST Global Info Mode MSTP Bridge ID 32768 000f e200 2200 Bridge times Hello 2s MaxAge 20s FwdDelay 15s MaxHops 20 Root ID ERPC 0 00e0 fc0e 6554 200200 RegRoot ID IRPC 32768 000f e200 2200 0 RootPort ID 128 48 BPDU Protection Disabled Bridge Config Digest Snooping Disabled TC or TCN received 2 Time since la...

Page 123: ... 1 Global Info Protocol status Enabled Bridge ID 32768 000f e200 2200 Bridge times Hello 2s MaxAge 20s FwdDelay 15s VlanRoot ID RPC 0 00e0 fc0e 6554 200200 RootPort ID 128 48 BPDU Protection Disabled TC or TCN received 2 Time since last TC 0 days 0h 5m 42s Port1 Ethernet1 1 FORWARDING Port protocol Enabled Port role Designated Port Port ID 128 153 Port cost Legacy Config auto Active 200 Desg bridg...

Page 124: ...0 Forward delay s 15 Hello time s 2 TC Snooping Disabled Table 26 Command output Field Description Bridge ID Bridge ID which contains the device s priority and MAC address For example in output 32768 000f e200 2200 the value preceding the dot is the device s priority The value following the dot is the device s MAC address Bridge times Major parameters for the bridge Hello Hello timer MaxAge Maximu...

Page 125: ...Actual value Desg bridge port Designated bridge ID and port ID of the port The port ID displayed is insignificant for a port which does not support port priority Port edged The port is an edge port or non edge port Config Configured value Active Actual value Point to Point The port is connected to a point to point link or not Config Configured value Active Actual value Transmit limit Number of BPD...

Page 126: ...anning tree protocol standard Version Spanning tree protocol version Bridge Prio In MSTP mode Device s priority in the CIST In PVST mode Device s priority in VLAN 1 Max age s Aging timer for BPDUs in seconds which is the same as the aging timer for VLAN 1 in PVST mode Forward delay s Port state transition delay in seconds which is the same as the forward delay for VLAN 1 in PVST mode Hello time s ...

Page 127: ...rnet1 0 3 Loopback Protected Table 27 Command output Field Description MST ID MSTI of the blocked port VLAN ID VLAN of the blocked port Blocked Port Name of a blocked port Reason Reason that the port was blocked Root Protected Root guard function Loop Protected Loop guard function Loopback Protected Self loop protection A port in the MSTI receives a BPDU that it sends Disputed Dispute protection A...

Page 128: ...to all MSTIs on the port If you specify both an MSTI ID and a port this command applies to the specified MSTI on the port In STP RSTP or PVST mode the command output is sorted by port name If you do not specify a port this command applies to all ports If you specify a port this command applies to the port Examples In MSTP mode display the BPDU statistics for all MSTIs on GigabitEthernet 1 0 1 Sysn...

Page 129: ...3 2010 Timeout BPDUs 0 Max hoped BPDUs 0 TC detected 511 10 32 40 01 13 2010 TC sent 8844 10 33 11 01 13 2010 TC received 1426 10 33 32 01 13 2010 Table 28 Command output Field Description Port Port name Instance Independent Statistics not related to any particular MSTI Type Statistical item Looped back BPDUs BPDUs sent and then received by the same port Max aged BPDUs BPDUs whose max age was exce...

Page 130: ...ed user roles network admin network operator Examples Display information about ports that were shut down by spanning tree protection functions Sysname display stp down port Down Port Reason GigabitEthernet1 0 1 BPDU Protected Table 29 Command output Field Description Down Port Name of a port that was shut down by the spanning tree protection functions Reason Reason that the port was shut down BPD...

Page 131: ...specify a VLAN this command applies to all VLANs If you specify a VLAN list this command applies to the specified VLANs In MSTP mode the command output is sorted by MSTI ID and by port role calculation time in each MSTI If you do not specify an MSTI this command applies to all MSTIs If you specify an MSTI list this command applies to the specified MSTIs Examples In MSTP mode display the port role ...

Page 132: ...me of port role calculation display stp region configuration Use display stp region configuration to display effective MST region configuration including the following information Region name Revision level User configured VLAN to instance mappings Syntax display stp region configuration Views Any view Predefined user roles network admin network operator Examples In MSTP mode display effective MST...

Page 133: ...ode display the root bridge information of all spanning trees Sysname display stp root MST ID Root Bridge ID ExtPathCost IntPathCost Root Port 0 0 00e0 fc0e 6554 200200 0 GigabitEthernet1 0 1 In PVST mode display the root bridge information of all spanning trees Sysname display stp root VLAN ID Root Bridge ID ExtPathCost IntPathCost Root Port 1 0 00e0 fc0e 6554 200200 0 GigabitEthernet1 0 1 Table ...

Page 134: ...ice by its member ID If this option is not specified this command applies to all member devices in the IRF fabric Usage guidelines In STP or RSTP mode the output is sorted by port name In PVST mode the command output is sorted by VLAN ID and by port name in each VLAN If you do not specify a VLAN this command applies to all VLANs If you specify a VLAN list this command applies to the specified VLAN...

Page 135: ...s a VLAN or a range of VLANs in the form of vlan id1 to vlan id2 The value for vlan id2 must be equal to or greater than the value for vlan id1 The value range for the vlan id argument is 1 to 4094 Usage guidelines CAUTION Use caution with global Digest Snooping in the following situations When you modify the VLAN to instance mappings When you restore the default MST region configuration If the lo...

Page 136: ... Predefined user roles network admin Parameters name Specifies the MST region name a string of 1 to 32 characters Usage guidelines The MST region name the VLAN to instance mapping table and the MSTP revision level of a device determine the device s MST region After configuring this command run the active region configuration command to activate the configured MST region name Examples Set the MST r...

Page 137: ...ber for interface number 1 If you don t specify this option this command clears the spanning tree related statistics information on all ports Examples Clear the spanning tree statistics on ports GigabitEthernet 1 0 1 through GigabitEthernet 1 0 3 Sysname reset stp interface gigabitethernet 1 0 1 to gigabitethernet 1 0 3 Related commands display stp revision level Use revision level to configure th...

Page 138: ...dulo stp bpdu protection Use stp bpdu protection to enable BPDU guard Use undo stp bpdu protection to disable BPDU guard Syntax stp bpdu protection undo stp bpdu protection Default BPDU guard is disabled Views System view Predefined user roles network admin Examples Enable BPDU guard Sysname system view Sysname stp bpdu protection stp bridge diameter Use stp bridge diameter to specify the network ...

Page 139: ...With the network diameter set to 7 the default the three timers are also set to their defaults In STP RSTP or MSTP mode each MST region is considered a device and the configured network diameter of the switched network takes effect only on the CIST or the common root bridge In PVST mode the configured network diameter takes effect only on the root bridges of the specified VLANs Examples In MSTP mo...

Page 140: ...egation group Examples Configure GigabitEthernet 1 0 1 to send only standard format 802 1s MSTP packets Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 stp compliance dot1s stp config digest snooping Use stp config digest snooping to enable Digest Snooping Use undo stp config digest snooping to disable Digest Snooping Syntax stp config digest snooping undo ...

Page 141: ...ance instance list Specifies a space separated list of up to 10 MSTI items Each item specifies an MSTI or a range of MSTIs in the form of instance id1 to instance id2 The value for instance id2 must be equal to or greater than the value for instance id1 The value range for the instance id argument is 0 to 4094 and the value 0 represents the CIST vlan vlan id list Specifies a space separated list o...

Page 142: ... the path cost of the ports in the MSTP CIST or in the STP or RSTP spanning tree Examples In MSTP mode set the path cost of port GigabitEthernet 1 0 3 in MSTI 2 to 200 Sysname system view Sysname interface gigabitethernet 1 0 3 Sysname GigabitEthernet1 0 3 stp instance 2 cost 200 In PVST mode set the path cost of port GigabitEthernet 1 0 3 in VLAN 2 to 200 Sysname system view Sysname interface gig...

Page 143: ...eaves the aggregation group Examples Configure GigabitEthernet 1 0 1 as an edge port Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 stp edged port Related commands stp bpdu protection stp loop protection stp root protection stp enable Use stp enable to enable the spanning tree feature Use undo stp enable to disable the spanning tree feature Syntax stp enab...

Page 144: ...est Snooping globally Use undo stp global config digest snooping to disable Digest Snooping globally Syntax stp global config digest snooping undo stp global config digest snooping Default Digest Snooping is disabled globally Views System view Predefined user roles network admin Usage guidelines Enable this feature both globally and on ports connected to other vendors devices To minimize impact en...

Page 145: ...MSTP mode depending on the spanning tree mode setting When the spanning tree feature is enabled the device dynamically maintains the spanning tree status of VLANs based on received configuration BPDUs When the spanning tree feature is disabled the device stops maintaining the spanning tree status Examples Enable the spanning tree feature globally Sysname system view Sysname stp global enable Relat...

Page 146: ...rt Syntax stp loop protection undo stp loop protection Default Loop guard is disabled Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Usage guidelines On a port the loop guard feature is mutually exclusive with the root guard feature or the edge port setting When the setting is configured in Layer 2 Ethernet interface view it takes effect ...

Page 147: ...of the MST region to 35 Sysname system view Sysname stp max hops 35 Related commands display stp stp mcheck Use stp mcheck to perform the mCheck operation on a port Syntax stp mcheck Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Usage guidelines When a port on an MSTP RSTP or PVST device connects to an STP device and receives STP BPDUs t...

Page 148: ...ffect only on that interface When the setting is configured in Layer 2 aggregate interface view it takes effect only on the aggregate interface When the setting is configured on a member port in an aggregation group it takes effect only after the port leaves the aggregation group Examples Perform mCheck on GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname Gi...

Page 149: ...stp no agreement check to disable No Agreement Check on a port Syntax stp no agreement check undo stp no agreement check Default No Agreement Check is disabled Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Usage guidelines This command takes effect only after you enable it on the root port When the setting is configured in Layer 2 Ethern...

Page 150: ...ed on IEEE 802 1d 1998 dot1t Configures the device to calculate the default path cost for ports based on IEEE 802 1t legacy Configures the device to calculate the default path cost for ports based on a private standard Usage guidelines If you change the standard that the device uses in calculating the default path costs you restore the path costs to the default Examples Configure the device to cal...

Page 151: ...all MSTIs or VLANs If the physical link to which the port connects is not a point to point link but you set it to be one the configuration might cause a temporary loop When the setting is configured in Layer 2 Ethernet interface view it takes effect only on that interface When the setting is configured in Layer 2 aggregate interface view it takes effect only on the aggregate interface When the set...

Page 152: ...ority depends on the port index The smaller the index the higher the priority When the setting is configured in Layer 2 Ethernet interface view it takes effect only on that interface When the setting is configured in Layer 2 aggregate interface view it takes effect only on the aggregate interface When the setting is configured on a member port in an aggregation group it takes effect only after the...

Page 153: ...name STP 3 STP_DISCARDING Instance 2 s port GigabitEthernet1 0 1 has been set to discarding state Aug 16 00 49 41 856 2011 Sysname STP 3 STP_FORWARDING Instance 2 s port GigabitEthernet1 0 2 has been set to forwarding state The output shows that GigabitEthernet 1 0 1 in MSTI 2 transited to the discarding state and GigabitEthernet 1 0 2 in MSTI 2 transited to the forwarding state In PVST mode enabl...

Page 154: ...ts of 4096 as in 0 4096 8192 You can set up to 16 priority values on the device The smaller the value the higher the device priority Usage guidelines If you do not specify an MSTI or VLAN this command configures the priority of the device in the MSTP CIST or in the STP or RSTP spanning tree Examples In MSTP mode set the device priority to 4096 in MSTI 1 Sysname system view Sysname stp instance 1 p...

Page 155: ...restriction is enabled on a port the port cannot become a root port When the setting is configured in Layer 2 Ethernet interface view it takes effect only on that interface When the setting is configured in Layer 2 aggregate interface view it takes effect only on the aggregate interface When the setting is configured on a member port in an aggregation group it takes effect only after the port leav...

Page 156: ... id argument is 1 to 4094 Usage guidelines Once you specify the device as the root bridge you cannot change the priority of the device If you do not specify an MSTI or VLAN this command configures the device as the root bridge of the MSTP CIST or of the STP or RSTP spanning tree Examples In MSTP mode specify the device as the root bridge of MSTI 1 Sysname system view Sysname stp instance 1 root pr...

Page 157: ...res a secondary root bridge for the MSTP CIST or of the STP or RSTP spanning tree Examples In MSTP mode specify the device as a secondary root bridge in MSTI 1 Sysname system view Sysname stp instance 1 root secondary In PVST mode specify the device as a secondary root bridge in VLAN 1 Sysname system view Sysname stp vlan 1 root secondary Related commands stp priority stp root primary stp root pro...

Page 158: ...stem view Predefined user roles network admin Usage guidelines With TC BPDU guard you can set the maximum number of immediate forwarding address entry flushes that the device can perform every 10 seconds For TC BPDUs received that exceed the limit the device performs a forwarding address entry flush when the interval elapses This prevents frequent flushing of forwarding address entries Examples Di...

Page 159: ...striction to disable TC BPDU transmission restriction Syntax stp tc restriction undo stp tc restriction Default TC BPDU transmission restriction is disabled Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Usage guidelines When TC BPDU transmission restriction is enabled on a port the port does not send TC BPDUs to the other ports It also d...

Page 160: ...exclusive You must globally disable the spanning tree feature before enabling TC Snooping Examples Globally disable the spanning tree feature and enable TC Snooping Sysname system view Sysname undo stp global enable Sysname stp tc snooping Related commands stp global enable stp timer forward delay Use stp timer forward delay to set the forward delay timer Use undo stp timer forward delay to restor...

Page 161: ...rmined by the forward delay timer As a best practice do not set the forward delay with this command Instead you can specify the network diameter of the switched network by using the stp bridge diameter command This command makes the spanning tree protocols automatically calculate the optimal settings for the forward delay timer If the network diameter uses the default value the forward delay timer...

Page 162: ...network by using the stp bridge diameter command This command makes the spanning tree protocols automatically calculate the optimal settings for the hello timer If the network diameter uses the default value the hello timer also uses the default value Examples In MSTP mode set the hello time to 400 centiseconds Sysname system view Sysname stp timer hello 400 In PVST mode set the hello time for VLA...

Page 163: ...mand This command makes the spanning tree protocols automatically calculate the optimal settings for the max age timer If the network diameter uses the default value the max age timer also uses the default value Examples In MSTP mode set the max age timer to 1000 centiseconds Sysname system view Sysname stp timer max age 1000 In PVST mode set the max age timer for VLAN 2 to 1000 centiseconds Sysna...

Page 164: ...it limit limit undo stp transmit limit Default The BPDU transmission rate of all ports is 10 Each port can send 10 BPDUs within each hello time Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Parameters limit Sets the BPDU transmission rate in the range of 1 to 255 Usage guidelines The maximum number of BPDUs a port can send within each he...

Page 165: ...ou do not specify this option the command globally enables or disables the spanning tree feature VLANs are not included Usage guidelines When you enable the spanning tree feature the device operates in STP RSTP PVST or MSTP mode depending on the spanning tree mode setting When you enable the spanning tree feature the device dynamically maintains the spanning tree status of VLANs based on received ...

Page 166: ...ing is automatically removed This command maps each VLAN to the MSTI with ID VLAN ID 1 modulo 1 VLAN ID 1 modulo is the modulo operation for VLAN ID 1 If the modulo value is 15 then VLAN 1 is mapped to MSTI 1 VLAN 2 to MSTI 2 VLAN 15 to MSTI 15 VLAN 16 to MSTI 16 and so on Examples Map VLANs to MSTIs as per modulo 8 Sysname system view Sysname stp region configuration Sysname mst region vlan mappi...

Page 167: ...en a loop is detected on a port the device generates a log disables the port from learning MAC addresses and blocks inbound traffic on the port None When a loop is detected on a port the device generates a log but performs no action on the port No learning When a loop is detected on a port the device generates a log and disables the port from learning MAC addresses Shutdown When a loop is detected...

Page 168: ...s keyword shutdown Enables the shutdown mode If a loop is detected the device generates a log and shuts down the port The device automatically brings up the port after the detection timer expires You can use the shutdown interval command to set the detection timer For more information see Fundamentals Command Reference Usage guidelines To configure the loop protection action globally use the loopb...

Page 169: ...iguration applies to all ports in the specified VLAN The per port configuration applies to the individual port only when the port belongs to the specified VLAN The per port configuration takes precedence over the global configuration Example Enable loop detection on port GigabitEthernet 1 0 1 for VLAN 10 through VLAN 20 Sysname system view Sysname interface gigabitethernet 1 0 1 System GigabitEthe...

Page 170: ...n loopback detection global enable Use loopback detection global enable to enable loop detection globally Use undo loopback detection global enable to disable loop detection globally Syntax loopback detection global enable vlan vlan list all undo loopback detection global enable vlan vlan list all Default The loop detection function is globally disabled Views System view Predefined user roles netw...

Page 171: ...ion interval time Default The loop detection interval is 30 seconds Views System view Predefined user roles network admin Parameters interval Sets the loop detection interval in the range of 1 to 300 seconds Usage guidelines With loop detection enabled the device sends loop detection frames at the specified interval A shorter interval offers more sensitive detection but consumes more resources Con...

Page 172: ...value Specifies the expected bandwidth in the range of 1 to 400000000 kbps Examples Set the expected bandwidth of VLAN interface 1 to 10000 kbps Sysname system view Sysname interface vlan interface 1 Sysname Vlan interface1 bandwidth 10000 default Use default to restore the default settings for a VLAN interface Syntax default Views VLAN interface view Predefined user roles network admin Usage guid...

Page 173: ...description Default For a VLAN the description is VLAN vlan id The vlan id argument specifies the VLAN ID in a four digit format If the VLAN ID has fewer than four digits leading zeros are added For example the default description of VLAN 100 is VLAN 0100 For a VLAN interface the description is the name of the interface For example Vlan interface1 Interface Views VLAN view VLAN interface view Pred...

Page 174: ...rface 2 as linktoPC56 Sysname system view Sysname vlan 2 Sysname vlan2 quit Sysname interface vlan interface 2 Sysname Vlan interface2 description linktoPC56 Related commands display interface vlan interface display vlan display interface vlan interface Use display interface vlan interface to display VLAN interface information Syntax display interface vlan interface interface number brief descript...

Page 175: ...col s spoofing Interface Link Protocol Primary IP Description Vlan2 DOWN DOWN Table 36 Command output Field Description Vlan interface2 VLAN interface name Current state Physical state of the VLAN interface DOWN Administratively The administrative state of the VLAN interface is down because it has been shut down by using the shutdown command DOWN The administrative state of the VLAN interface is u...

Page 176: ...p the interface use the undo shutdown command Stby The interface is operating as a backup interface Protocol s spoofing The protocol attribute of an interface includes the spoofing flag the letter s in parentheses when the following conditions exist The data link layer protocol state of an interface is shown as UP Its link is an on demand link or is not present Interface Abbreviated interface name...

Page 177: ...VRP reserved Specifies reserved VLANs Protocol modules determine which VLANs are reserved according to function implementation The reserved VLANs provide services for protocol modules You cannot configure reserved VLANs static Specifies static VLANs If you specify this keyword the command displays the number of static VLANs and the ID for each static VLAN The static VLANs are manually created Exam...

Page 178: ...nterface display this VLAN interface view IPv4 subnet mask Subnet mask of the primary IP address This field is available only when an IP address is configured for the VLAN interface Tagged ports Tagged members of the VLAN Untagged ports Untagged members of the VLAN Related commands vlan display vlan brief Use display vlan brief to display brief VLAN information Syntax display vlan brief Views Any ...

Page 179: ... ID System default VLAN ID Name VLAN name Port Port that allows packets from the VLAN to pass through interface vlan interface Use interface vlan interface to create a VLAN interface and enter its view or to enter the view of an existing VLAN interface Use undo interface vlan interface to delete the specified VLAN interface Syntax interface vlan interface vlan interface id undo interface vlan inte...

Page 180: ...r a VLAN interface Use undo mtu to restore the default Syntax mtu size undo mtu Default The MTU of a VLAN interface is 1500 bytes Views VLAN interface view Predefined user roles network admin Parameters size Sets the MTU in bytes in the range of 128 to 1500 Usage guidelines The ip mtu or mtu command configuration on an interface takes effect on only the packets sent to the CPU for software forward...

Page 181: ... letters digits special symbols see Table 35 spaces and other Unicode characters and symbols Usage guidelines You can configure VLAN names for VLAN identification When 802 1X or MAC authentication is configured on a device you can specify VLANs by name on the RADIUS server for authorization VLAN assignment Examples Configure the name of VLAN 2 as test vlan Sysname system view Sysname vlan 2 Sysnam...

Page 182: ...raffic forwarding recovers Examples Specify IRF member device 2 for forwarding traffic on VLAN interface 200 Sysname system view Sysname interface vlan interface 200 Sysname Vlan interface200 service slot 2 shutdown Use shutdown to shut down a VLAN interface Use undo shutdown to bring up a VLAN interface Syntax shutdown undo shutdown Default A VLAN interface is not manually shut down The VLAN inte...

Page 183: ...hrough vlan id2 except reserved VLANs Use vlan all to create VLANs 1 through 4094 Use undo vlan to delete the specified VLANs Syntax vlan vlan id1 to vlan id2 all undo vlan vlan id1 to vlan id2 all Default VLAN 1 system default VLAN exists Views System view Predefined user roles network admin Parameters vlan id1 vlan id2 Specifies a VLAN ID The value range is 1 to 4094 vlan id1 to vlan id2 Specifi...

Page 184: ... Display information about hybrid ports Sysname display port hybrid Interface PVID VLAN Passing GE1 0 4 100 Tagged 1000 1002 1500 1600 1611 2000 2555 2558 3000 4000 Untagged 1 10 15 18 20 30 44 55 67 100 150 160 200 255 286 300 302 Display information about trunk ports Sysname display port trunk Interface PVID VLAN Passing GE1 0 8 2 1 4 6 100 145 177 189 200 244 289 400 555 600 611 1000 2006 2008 ...

Page 185: ...interface number1 to interface type interface number2 The value for the interface number2 argument must be equal to or greater than the value for the interface number1 argument Usage guidelines This command is applicable only to access ports By default all ports are access ports You can manually configure the port type For more information see port link type Examples Assign GigabitEthernet 1 0 1 t...

Page 186: ...to aggregation member ports If the system fails to apply the configuration to an aggregation member port it skips the port and moves to the next member port Examples Assign GigabitEthernet 1 0 1 to VLAN 3 Sysname system view Sysname vlan 3 Sysname vlan3 quit Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 port access vlan 3 port hybrid pvid Use port hybrid pvid to configure th...

Page 187: ...onfigure VLAN 100 as the PVID of the hybrid port GigabitEthernet 1 0 1 and assign GigabitEthernet 1 0 1 to VLAN 100 as an untagged member Sysname system view Sysname vlan 100 Sysname vlan100 quit Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 port link type hybrid Sysname GigabitEthernet1 0 1 port hybrid pvid vlan 100 Sysname GigabitEthernet1 0 1 port hybrid vlan 100 untagged...

Page 188: ...tion to the aggregate interface it stops applying the configuration to aggregation member ports If the system fails to apply the configuration to an aggregation member port it skips the port and moves to the next member port Examples Configure GigabitEthernet 1 0 1 as a hybrid port and assign it to VLAN 2 VLAN 4 and VLANs 50 through 100 as a tagged member Sysname system view Sysname interface giga...

Page 189: ...ort trunk permit vlan vlan id list all Default A trunk port allows packets only from VLAN 1 to pass through Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Parameters vlan id list Specifies a space separated list of up to 10 VLAN items Each item specifies a VLAN ID or a range of VLAN IDs in the form of vlan id1 to vlan id2 The value range ...

Page 190: ... Layer 2 aggregate interface view Predefined user roles network admin Parameters vlan id Specifies a VLAN by its ID in the range of 1 to 4094 Usage guidelines You can configure a nonexistent VLAN as the PVID of a trunk port When you delete the PVID of a trunk port by using the undo vlan command the PVID setting of the port does not change For correct packet transmission configure the same PVID for...

Page 191: ...sk static vlan vlan id Views Any view Predefined user roles network admin network operator Parameters all Specifies all MAC to VLAN entries dynamic Specifies dynamically configured MAC to VLAN entries mac address mac address Specifies the MAC address in the MAC to VLAN entry mask mac mask Specifies the mask for matching MAC addresses in MAC to VLAN entries static Specifies statically configured MA...

Page 192: ...thentication feature S D The MAC to VLAN entry is configured both statically and dynamically Related commands mac vlan mac address display mac vlan interface Use display mac vlan interface to display all ports that are enabled with the MAC based VLAN feature Syntax display mac vlan interface Views Any view Predefined user roles network admin network operator Examples Display all ports that are ena...

Page 193: ...s Syntax mac vlan mac address mac address mask mac mask vlan vlan id dot1q pri undo mac vlan all mac address mac address mask mac mask vlan vlan id Default No MAC to VLAN entries are configured Views System view Predefined user roles network admin Parameters mac address mac address Specifies a MAC address mask mac mask Specifies the MAC address mask For the mac mask argument the high order bits mu...

Page 194: ...an mac address 0 1 1 vlan 100 dot1q 7 Associate VLAN 100 with MAC addresses whose six high order bits are 121122 and specify the 802 1p priority as 4 for VLAN 100 in this entry Sysname system view Sysname mac vlan mac address 1211 2222 3333 mask ffff ff00 0000 vlan 100 dot1q 4 Related commands display mac vlan mac vlan trigger enable Use mac vlan trigger enable to enable dynamic MAC based VLAN ass...

Page 195: ...restore the default Syntax port pvid forbidden undo port pvid forbidden Default When a port receives packets whose source MAC addresses fail the exact MAC address match the port forwards them in its PVID Views Layer 2 Ethernet interface view Predefined user roles network admin Usage guidelines Use this feature only with dynamic MAC based VLAN assignment Examples Disable GigabitEthernet 1 0 1 from ...

Page 196: ...command will not take effect Examples Configure GigabitEthernet 1 0 1 to match VLANs based on MAC addresses preferentially Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 vlan precedence mac vlan IP subnet based VLAN commands display ip subnet vlan interface Use display ip subnet vlan interface to display IP subnet based VLANs that are associated with the s...

Page 197: ...net based VLAN has taken effect on the port Active The IP subnet based VLAN has taken effect Inactive The IP subnet based VLAN has not taken effect For example this field displays Inactive in one of the following conditions The configuration of the IP subnet based VLAN is not complete The port does not allow the IP subnet based VLAN Related commands display ip subnet vlan vlan ip subnet vlan port ...

Page 198: ...do ip subnet vlan ip subnet index to ip subnet end all Default A VLAN is not associated with any IP subnets or IP addresses Views VLAN view Predefined user roles network admin Parameters ip subnet index Specifies a beginning IP subnet index in the range of 0 to 65535 The value can be configured by users It can also be automatically numbered by the system based on the order in which the IP subnets ...

Page 199: ...he association Syntax port hybrid ip subnet vlan vlan vlan id undo port hybrid ip subnet vlan vlan vlan id all Default A port is not associated with any IP subnet based VLANs Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Parameters vlan vlan id Specifies a VLAN by its ID in the range of 1 to 4094 all Specifies all VLANs Usage guidelines ...

Page 200: ...an interface Use display protocol vlan interface to display information about protocol based VLANs for the specified ports Syntax display protocol vlan interface interface type interface number1 to interface type interface number2 all Views Any view Predefined user roles network admin network operator Parameters interface type interface number1 Specifies an interface by its type and number interfa...

Page 201: ... display information about protocol based VLANs Syntax display protocol vlan vlan vlan id1 to vlan id2 all Views Any view Predefined user roles network admin network operator Parameters vlan id1 Specifies a protocol based VLAN ID in the range of 1 to 4094 vlan id1 to vlan id2 Specifies a VLAN ID range Both the vlan id1 and the vlan id2 arguments are in the range of 1 to 4094 The value for the vlan...

Page 202: ...ate interface view Predefined user roles network admin Parameters vlan vlan id Specifies a VLAN by its ID in the range of 1 to 4094 protocol index Specifies a beginning protocol template index in the range of 0 to 65535 to protocol end Specifies an end protocol template index of a protocol template range in the range of 0 to 65535 The value for the protocol end argument must be greater than or equ...

Page 203: ...gregation 1 Sysname Bridge Aggregation1 port link type hybrid Sysname Bridge Aggregation1 port hybrid vlan 2 untagged Sysname Bridge Aggregation1 port hybrid protocol vlan vlan 2 1 protocol vlan Use protocol vlan to configure a VLAN as a protocol based VLAN and configure the protocol template for the VLAN Use undo protocol vlan to remove the protocol templates configured for the VLAN Syntax protoc...

Page 204: ...ernet To prevent communication failures configure the IP and ARP templates in the same VLAN and associate them with the same port When you use the mode keyword to configure a protocol template follow these restrictions and guidelines Do not configure the following values for the etype id argument in the ethernetii etype etype id option 0x0800 Specifies the IPv4 protocol in Ethernet II encapsulatio...

Page 205: ...itive string of 1 to 31 characters The first character must be an alphabetical character If you do not specify this argument the command displays information about all VLAN groups Examples Display information about the VLAN group test001 Sysname display vlan group test001 VLAN group test001 VLAN list 2 4 100 200 Display information about all VLAN groups Sysname display vlan group VLAN group test00...

Page 206: ...a VLAN group on the device the authentication sever can assign the VLAN group name to the 802 1X user that passes authentication The VLAN group name identifies this group of VLANs For more information about 802 1X authentication see Security Configuration Guide Examples Create a VLAN group named test001 and enter VLAN group view Sysname system view Sysname vlan group test001 Sysname vlan group tes...

Page 207: ...rm of vlan id1 to vlan id2 The value range for VLAN IDs is 1 to 4094 The value for the vlan id2 argument must be equal to or greater than the value for the vlan id1 argument Examples Add VLAN 2 through VLAN 4 VLAN 100 and VLAN 200 to the VLAN group test001 Sysname system view Sysname vlan group test001 Sysname vlan group test001 vlan list 2 to 4 100 200 Related commands vlan group ...

Page 208: ...ANs Examples Display information about super VLAN 2 and its associated sub VLANs Sysname display supervlan 2 Super VLAN ID 2 Sub VLAN ID 3 5 VLAN ID 2 VLAN type Static It is a super VLAN Route interface Configured IPv4 address 10 153 17 41 IPv4 subnet mask 255 255 252 0 IPv6 global unicast addresses 2001 1 subnet is 2001 64 TENTATIVE Description VLAN 0002 Name VLAN 0002 Tagged ports None Untagged ...

Page 209: ...ace This field is displayed only when an IPv4 address is configured for the VLAN interface IPv6 global unicast addresses Global unicast IPv6 address of the VLAN interface This field is not displayed when no IPv6 address is configured for the VLAN interface The IPv6 address states are as follows TENTATIVE Initial state DAD is being performed or is to be performed on the address An address in this s...

Page 210: ...r the vlan id2 argument must be equal to or greater than the value for the vlan id1 argument Usage guidelines Make sure sub VLANs already exist before associating them with a super VLAN You can add ports to and remove ports from a sub VLAN that is already associated with a super VLAN When you use the undo subvlan command follow these guidelines If you do not specify the vlan id list argument this ...

Page 211: ...AN as the guest VLAN Auth Fail VLAN or critical VLAN for a port and vice versa For more information about guest VLANs Auth Fail VLANs and critical VLANs see Security Configuration Guide You can configure Layer 2 multicast for super VLANs However the configuration does not take effect because super VLANs do not have physical ports Examples Configure VLAN 2 as a super VLAN Sysname system view Sysnam...

Page 212: ...ndary VLANs Examples Display information about primary VLANs and their associated secondary VLANs Sysname display private vlan Primary VLAN ID 2 Secondary VLAN ID 3 4 VLAN ID 2 VLAN type Static Private VLAN type Primary Route interface Configured IPv4 address 1 1 1 1 IPv4 subnet mask 255 255 255 0 IPv6 global unicast addresses 2001 1 subnet is 2001 64 TENTATIVE Description VLAN 0002 Name VLAN 0002...

Page 213: ...t mask Subnet mask for the primary IPv4 address of the VLAN interface This field is displayed only when an IPv4 address is configured for the VLAN interface IPv6 global unicast addresses Global unicast IPv6 address of the VLAN interface This field is not displayed when no IPv6 address is configured for the VLAN interface The IPv6 address states are as follows TENTATIVE Initial state DAD is being p...

Page 214: ... to the primary VLAN as an untagged member For a trunk port the device does not change the port link type or PVID For a hybrid port the device does not change the port link type or PVID If the hybrid port has been a tagged or untagged member of the primary VLAN this member attribute remains in the primary VLAN If the hybrid port does not allow the primary VLAN the device assigns the port to the pr...

Page 215: ...ged port hybrid pvid vlan 20 return The output shows that The port link type of GigabitEthernet 1 0 1 is hybrid and its PVID is VLAN 20 GigabitEthernet 1 0 1 is an untagged member of secondary VLAN 20 and primary VLAN 2 Related commands port private vlan promiscuous port private vlan trunk promiscuous port private vlan trunk secondary private vlan VLAN view private vlan primary port private vlan p...

Page 216: ...ts associated secondary VLANs the command assigns the port to these VLANs as an untagged member If you execute this command on a promiscuous port the system automatically executes the undo port private vlan command and then the port private vlan promiscuous command The undo port private vlan command does not change the VLAN attributes allowed secondary VLANs link type and PVID of the port When you...

Page 217: ...ybrid undo port hybrid vlan 1 port hybrid vlan 20 untagged port hybrid pvid vlan 2 return The output shows that The link type and PVID of GigabitEthernet 1 0 1 do not change GigabitEthernet 1 0 1 is an untagged member of VLAN 20 GigabitEthernet 1 0 1 is removed from primary VLAN 2 Related commands port private vlan host port private vlan trunk promiscuous port private vlan trunk secondary private ...

Page 218: ...te remains in these VLANs The device assigns the hybrid port to the rest of the primary VLANs and their associated secondary VLANs as a tagged member If the hybrid port does not allow any of the primary VLANs and their associated secondary VLANs the device assigns the port to these VLANs as a tagged member The undo form of this command does not change the VLAN attributes allowed secondary VLANs po...

Page 219: ... 3 The port link type of GigabitEthernet 1 0 1 is hybrid GigabitEthernet1 0 1 is a tagged member of VLANs 2 3 20 and 30 Execute the undo port private vlan trunk promiscuous command on GigabitEthernet 1 0 1 and then verify the configuration Sysname GigabitEthernet1 0 1 undo port private vlan 2 3 trunk promiscuous Sysname GigabitEthernet1 0 1 display this interface GigabitEthernet1 0 1 port link typ...

Page 220: ...ess port the device performs the following tasks Changes the port link type to hybrid The PVID of the port does not change Assigns the port to the secondary VLANs and the associated primary VLANs as a tagged member For a trunk port the device does not change the port link type For a hybrid port the device does not change the port link type If the port has been an untagged or tagged member of part ...

Page 221: ...n host command to assign the port to the secondary VLAN The port can then transmit packets from the secondary VLAN without VLAN tags Examples In this example VLANs 2 and 3 are primary VLANs VLAN 2 is associated with secondary VLAN 20 VLAN 3 is associated with secondary VLAN 30 Display information about GigabitEthernet 1 0 1 Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 displ...

Page 222: ...ion Sysname GigabitEthernet1 0 1 port private vlan 10 trunk secondary Sysname GigabitEthernet1 0 1 display this interface GigabitEthernet1 0 1 port link type hybrid port hybrid vlan 10 tagged port hybrid vlan 1 untagged port private vlan 10 trunk secondary return The output shows that The port link type of GigabitEthernet 1 0 1 is hybrid GigabitEthernet 1 0 1 is a tagged member of VLAN 10 GigabitE...

Page 223: ...condary VLAN ID or a range of secondary VLAN IDs in the form of vlan id1 to vlan id2 The value range for secondary VLAN IDs is 1 to 4094 The value for the vlan id2 argument must be equal to or greater than the value for the vlan id1 argument Usage guidelines This command takes effect only when the following conditions exist This command is executed in primary VLAN interface view Secondary VLANs ar...

Page 224: ...erface gigabitethernet 1 0 2 Sysname GigabitEthernet1 0 2 port private vlan 2 promiscuous Sysname GigabitEthernet1 0 2 quit Assign the downlink port GigabitEthernet 1 0 3 to VLAN 3 and configure the port as a host port Sysname interface gigabitethernet 1 0 3 Sysname GigabitEthernet1 0 3 port access vlan 3 Sysname GigabitEthernet1 0 3 port private vlan host Sysname GigabitEthernet1 0 3 quit Assign ...

Page 225: ...s all the specified secondary VLANs are associated with the primary VLAN The configuration synchronization is triggered based on the interface configuration when the following conditions exist This command is configured for a primary VLAN Ports on the device are promiscuous trunk promiscuous or host ports For more information see the port private vlan host port private vlan promiscuous or port pri...

Page 226: ...nd GigabitEthernet 1 0 3 can communicate at Layer 2 in secondary VLAN 4 Configure VLAN 2 as a primary VLAN and associate it with secondary VLAN 4 Sysname system view Sysname vlan 2 Sysname vlan2 private vlan primary Sysname vlan2 private vlan secondary 4 Sysname vlan2 quit Configure GigabitEthernet 1 0 1 as a promiscuous port of VLAN 2 Sysname interface gigabitethernet 1 0 1 Sysname GigabitEtherne...

Page 227: ...his command the downlink ports are isolated from each other at Layer 2 The private vlan isolated command is mutually exclusive with the primary VLAN super VLAN and sub VLAN configurations Examples This example shows how to meet the following requirements VLAN 4 is a secondary VLAN and it is associated with primary VLAN 2 GigabitEthernet 1 0 1 is a promiscuous port of VLAN 2 GigabitEthernet 1 0 2 a...

Page 228: ...private vlan primary Use private vlan primary to configure a VLAN as a primary VLAN Use undo private vlan primary to restore the default Syntax private vlan primary undo private vlan primary Default A VLAN is not a primary VLAN Views VLAN view Predefined user roles network admin Usage guidelines The configuration synchronization is triggered based on the interface configuration when the following ...

Page 229: ...221 Related commands port private vlan host port private vlan promiscuous port private vlan trunk promiscuous port private vlan trunk secondary private vlan primary ...

Page 230: ... Specifies a voice VLAN ID in the range of 1 to 4094 Usage guidelines You must use this command with CDP compatibility Examples Configure GigabitEthernet 1 0 1 to advertise VLAN 4094 in CDP packets Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 cdp voice vlan 4094 display voice vlan mac address Use display voice vlan mac address to display OUI addresses an...

Page 231: ...iption Description of the OUI address Related commands voice vlan mac address display voice vlan state Use display voice vlan state to display voice VLAN information Syntax display voice vlan state Views Any view Predefined user roles network admin network operator Examples Display voice VLAN information Sysname display voice vlan state Current voice VLANs 1 Voice VLAN security mode Security Voice...

Page 232: ...ing minutes undo voice vlan aging Default The voice VLAN aging timer is 1440 minutes Views System view Predefined user roles network admin Parameters minutes Sets the voice VLAN aging timer in the range of 5 to 43200 minutes Usage guidelines In automatic voice VLAN assignment mode the system starts an aging timer for a voice VLAN when assigning the port to the voice VLAN If no voice packets are re...

Page 233: ...n automatic voice VLAN assignment mode Examples Enable the voice VLAN feature and configure VLAN 2 as the voice VLAN on GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 voice vlan 2 enable Related commands display voice vlan state voice vlan mode auto voice vlan mac address Use voice vlan mac address to configure the OUI address informa...

Page 234: ...nnot be a broadcast address a multicast address or an all zero address Usage guidelines Typically an OUI address refers to the first 24 bits of a MAC address in binary notation and is a globally unique identifier that IEEE assigns to a vendor However OUI addresses in this chapter are addresses that the system uses to determine whether a received packet is a voice packet They are the logical AND re...

Page 235: ... system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 undo voice vlan mode auto Related commands display voice vlan state voice vlan qos Use voice vlan qos to configure a port to modify the CoS and DSCP values for incoming voice VLAN packets Use undo voice vlan qos to restore the default Syntax voice vlan qos cos value dscp value undo voice vlan qos Default A port modif...

Page 236: ...os to restore the default Syntax voice vlan qos trust undo voice vlan qos Default A port modifies the CoS and DSCP values for incoming voice VLAN packets to 6 and 46 respectively Views Layer 2 Ethernet interface view Predefined user roles network admin Usage guidelines When a port trusts the QoS priority settings in incoming voice VLAN packets the port does not modify their CoS and DSCP values Bef...

Page 237: ...dresses of the device In normal mode a voice VLAN transmits voice packets and non voice packets Examples Disable the voice VLAN security mode Sysname system view Sysname undo voice vlan security enable Related commands display voice vlan state voice vlan track lldp Use voice vlan track lldp to enable LLDP for automatic IP phone discovery Use undo voice vlan track lldp to disable LLDP for automatic...

Page 238: ... option the command displays global MVRP information and MVRP running status for all MVRP enabled ports Examples Display global MVRP information and MVRP running status for all MVRP enabled ports Sysname display mvrp running status MVRP Global Info Global Status Enabled Compliance GVRP False GigabitEthernet1 0 1 Config Status Enabled Running Status Enabled Join Timer 20 centiseconds Leave Timer 60...

Page 239: ...ct on the port Enabled Disabled The running status of MVRP is determined by the following factors Link state Link type Whether the port is a member of an aggregate interface MVRP enabling status of the port Join Timer Join timer in centiseconds Leave Timer Leave timer in centiseconds Periodic Timer Periodic timer in centiseconds LeaveAll Timer LeaveAll timer in centiseconds Registration Type MVRP ...

Page 240: ...0 1 vlan 2 MVRP state of VLAN 2 on port GE1 0 1 Port VLAN App state Reg state GE1 0 1 2 VP IN Table 52 Command output Field Description MVRP state of VLAN 2 on port GE1 0 1 MVRP state of GigabitEthernet 1 0 1 in VLAN 2 App state State of the attribute that the local participant declares to its peer participant VO Very anxious observer VP Very anxious passive VN Very anxious new AN Anxious new AA A...

Page 241: ...ports Usage guidelines If MVRP is disabled on the specified ports this command does not provide any output Examples Display MVRP statistics of all ports Sysname display mvrp statistics GigabitEthernet1 0 1 Failed Registrations 1 Last PDU Origin 000f e200 0010 Frames Received 201 New Event Received 0 JoinIn Event Received 1167 In Event Received 0 JoinMt Event Received 22387 Mt Event Received 31 Lea...

Page 242: ... Origin Source MAC address of the last MVRPDU Frames Received Number of MVRP frames received New Event Received Number of New events received JoinIn Event Received Number of JoinIn vents received In Event Received Number of In events received JoinMt Event Received Number of JoinMt events received Mt Event Received Number of Mt events received Leave Event Received Number of Leave events received Le...

Page 243: ...ess than 20 Less than half the Leave timer Divisible by 20 Examples Set the Join timer to 40 centiseconds In this example the Leave timer is 100 centiseconds Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 mrp timer join 40 Related commands display mvrp running status mrp timer leave mrp timer leave Use mrp timer leave to set the Leave timer Use undo mrp ti...

Page 244: ...e the default Syntax mrp timer leaveall timer value undo mrp timer leaveall Default The LeaveAll timer is 1000 centiseconds Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Parameter timer value Specifies the LeaveAll timer value in centiseconds The LeaveAll timer must meet the following requirements Greater than any Leave timer on each por...

Page 245: ...rp timer periodic to restore the default Syntax mrp timer periodic timer value undo mrp timer periodic Default The Periodic timer is 100 centiseconds Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Parameters timer value Specifies the Periodic timer in centiseconds which can be 0 or 100 Usage guidelines Setting the Periodic timer to 0 disa...

Page 246: ...ember of an aggregation group Examples Enable MVRP on GigabitEthernet 1 0 1 Sysname system view Sysname mvrp global enable Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 port link type trunk Sysname GigabitEthernet1 0 1 mvrp enable Related commands display mvrp running status mvrp global enable Use mvrp global enable to enable MVRP globally Use undo mvrp global enable to rest...

Page 247: ...Predefined user roles network admin Usage guidelines When you enable GVRP compatibility the device can receive and send both MVRP and GVRP frames Examples Enable GVRP compatibility Sysname system view Sysname mvrp gvrp compliance enable Related commands display mvrp running status mvrp registration Use mvrp registration to set the MVRP registration mode on a port Use undo mvrp registration to rest...

Page 248: ...mvrp statistics Use reset mvrp statistics to clear MVRP statistics of ports Syntax reset mvrp statistics interface interface list Views User view Predefined user roles network admin Parameters interface interface list Specifies a range of Ethernet interfaces in the form of interface type interface number to interface type interface number The interface type interface number argument represents the...

Page 249: ...nd displays all QinQ enabled interfaces Usage guidelines If QinQ is not enabled on any interfaces this command does not provide any output Examples Enable QinQ on GigabitEthernet 1 0 1 Then verify that QinQ is enabled on the interface Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 qinq enable Sysname GigabitEthernet1 0 1 display qinq interface gigabitether...

Page 250: ...terface view Layer 2 aggregate interface view Predefined user roles network admin Examples Enable QinQ on GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 qinq enable Related commands display qinq qinq ethernet type customer tag Use qinq ethernet type customer tag to configure the CVLAN TPID Use undo qinq ethernet type customer tag to r...

Page 251: ... 0x88A7 Reserved 0xFFFD 0xFFFE 0xFFFF Usage guidelines A QinQ enabled port uses the CLAN TPID to match incoming tagged frames An incoming frame is handled as an untagged frame if its TPID is different from the CVLAN TPID Examples Set the TPID value in CVLAN tags to 0x8200 Sysname system view Sysname qinq ethernet type customer tag 8200 qinq ethernet type service tag Use qinq ethernet type service ...

Page 252: ...n id list all Default Transparent transmission is disabled for all VLANs on a port Views Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Parameters vlan id list Specifies a space separated list of up to 10 VLAN items Each item specifies a single VLAN ID or a VLAN ID range in the form of vlan id1 to vlan id2 The value range for VLAN IDs is 1 to 4...

Page 253: ...ernet 1 0 1 and configure the port to transparently transmit frames from VLAN 2 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 port link type trunk Sysname GigabitEthernet1 0 1 port trunk permit vlan 2 3 50 to 100 Sysname GigabitEthernet1 0 1 qinq enable Sysname GigabitEthernet1 0 1 qinq transparent vlan 2 ...

Page 254: ...et1 0 1 Outer VLAN Inner VLAN Translated Outer VLAN Translated Inner VLAN 10 N A 120 N A Interface GigabitEthernet1 0 2 Outer VLAN Inner VLAN Translated Outer VLAN Translated Inner VLAN 4 4094 N A 100 N A Interface GigabitEthernet1 0 3 Outer VLAN Inner VLAN Translated Outer VLAN Translated Inner VLAN 12 N A 110 12 Interface GigabitEthernet1 0 4 Outer VLAN Inner VLAN Translated Outer VLAN Translate...

Page 255: ... Layer 2 Ethernet interface view Layer 2 aggregate interface view Predefined user roles network admin Parameters vlan id translated vlan vlan id Specifies the original VLAN and translated VLAN for a one to one VLAN mapping The value range for the vlan id argument is 1 to 4094 The original VLAN and the translated VLAN cannot be the same uni range vlan range list translated vlan vlan id Specifies th...

Page 256: ...original VLAN or translated VLAN For packets that have two layers of VLAN tags both of the translated VLANs and original VLANs refer to only the outer VLANs For more information about transparent VLANs see Layer 2 LAN Switching Configuration Guide For many to one VLAN mapping to take effect configure many to one VLAN mapping in pairs on both the customer side and the network side An interface cann...

Page 257: ...t 1 0 4 to add SVLAN tag 101 to packets carrying VLAN tags 1 through 10 and 80 Sysname system view Sysname interface gigabitethernet 1 0 4 Sysname GigabitEthernet1 0 4 vlan mapping nest range 1 to 10 nested vlan 101 Sysname GigabitEthernet1 0 4 vlan mapping nest single 80 nested vlan 101 Configure a two to two VLAN mapping on GigabitEthernet 1 0 5 to map SVLAN 101 and CVLAN 1 to SVLAN 201 and CVLA...

Page 258: ...n which includes the following The global LLDP information The LLDP information about the LLDP enabled ports in up state Examples Display all local LLDP information Sysname display lldp local information Global LLDP local information Chassis ID 0079 9556 d080 System name HPE System description HPE Comware Platform Software Software Version 7 1 045 Release 1121 HPE 5130 24G PoE 4SFP 1 slot HI Switc...

Page 259: ...known Management address OID 0 LLDP agent nearest customer management address Management address type All802 Management address 0079 9556 d0dc Management address interface type IfIndex Management address interface ID Unknown Management address OID 0 Port VLAN ID PVID 1 Port and protocol VLAN ID PPVID 0 Port and protocol VLAN supported No Port and protocol VLAN enabled No VLAN name of VLAN 1 VLAN 0...

Page 260: ...s other than those listed above are enabled Device class MED device class Connectivity device Network device Class I Normal terminal device It requires the basic LLDP discovery services Class II Media terminal device It supports media streams and can also function as a normal terminal device Class III Communication terminal device It supports the IP communication systems of end users and can also ...

Page 261: ...ply mode Signal Uses data pairs to supply power Spare Uses spare pairs to supply power Port power classification Port power classification of the PD Class 0 Class 1 Class 2 Class 3 Class 4 Power type This field appears only on the devices that support PoE PoE device type is Type 2 PSE which provides a power of 0 W to 30 W a voltage of 50 V to 57 V and a current of up to 600 mA Power source This fi...

Page 262: ...lays the LLDP information that all ports receive from the neighboring devices agent Specifies an agent by its type and number If no agent type is specified the command displays the LLDP information that all LLDP agents receive from the neighboring devices nearest bridge Specifies nearest bridge agents nearest customer Specifies nearest customer bridge agents nearest nontpmr Specifies nearest non T...

Page 263: ...tem capabilities enabled Bridge Router Customer Bridge Management address type IPv4 Management address 192 168 1 55 Management address interface type IfIndex Management address interface ID Unknown Management address OID 0 Port VLAN ID PVID 1 Port and protocol VLAN ID PPVID 0 Port and protocol VLAN supported No Port and protocol VLAN enabled No VLAN name of VLAN 12 VLAN 0012 Management VLAN ID 5 A...

Page 264: ... type IPv4 Management address 192 168 1 55 Management address interface type IfIndex Management address interface ID Unknown Management address OID 0 Port VLAN ID PVID 1 Port and protocol VLAN ID PPVID 0 Port and protocol VLAN supported No Port and protocol VLAN enabled No VLAN name of VLAN 12 VLAN 0012 Management VLAN ID 5 Auto negotiation supported Yes Auto negotiation enabled Yes OperMau Speed ...

Page 265: ...AN enabled Yes VLAN name of VLAN 12 VLAN 0012 Auto negotiation supported Yes Auto negotiation enabled Yes OperMau Speed 1000 Duplex Full Power port class PD PSE power supported Yes PSE power enabled Yes PSE pairs control ability Yes Power pairs Signal Port power classification Class 0 Power type Type 2 PD Power source PSE and local Power priority High PD requested power value 21 1 w PSE allocated ...

Page 266: ...play lldp neighbor information list Chassis ID Nearest nontpmr bridge neighbor Nearest customer bridge neighbor Default Nearest bridge neighbor System Name Local Interface Chassis ID Port ID System1 GE1 0 1 000f e25d ee91 GigabitEthernet1 0 5 System2 GE1 0 2 000f e25d ee92 GigabitEthernet1 0 6 System3 GE1 0 3 000f e25d ee93 GigabitEthernet1 0 7 Table 58 Command output Field Description LLDP neighb...

Page 267: ...SIS compliant cable device StationOnly The neighboring device can serve as a station only Customer Bridge The customer bridge function is enabled Service Bridge The service bridge function is enabled TPMR The TPMR function is enabled Other Functions other than those listed above are supported System capabilities enabled Capabilities enabled on the neighboring device Repeater Signal repeating is en...

Page 268: ...me of VLAN 12 Auto negotiation supported Indicates whether autonegotiation is supported on the port Auto negotiation enabled Indicates whether autonegotiation is enabled on the port OperMau Speed and duplex state on the port Power port class PoE port class PSE Power sourcing equipment PD Powered device PSE power supported Indicates whether the device can operate as a PSE PSE power enabled Indicate...

Page 269: ...ed TLV type Unknown basic TLV type TLV information Information contained in the unknown basic TLV type Unknown organizationally defined TLV Unknown organizationally specific TLV TLV OUI OUI of the unknown organizationally specific TLV TLV subtype Unknown organizationally specific TLV subtype Index Unknown organization index Capabilities Capabilities enabled on the neighboring device Repeater Signa...

Page 270: ...t customer bridge agents nearest nontpmr Specifies nearest non TPMR bridge agents Usage guidelines If no keyword or argument is specified this command displays the global LLDP statistics and the LLDP statistics of all ports Examples Display the global LLDP statistics and the LLDP statistics of all ports Sysname display lldp statistics LLDP statistics global information LLDP neighbor information la...

Page 271: ... The number of LLDP error frames 0 The number of LLDP TLVs discarded 0 The number of LLDP TLVs unrecognized 0 The number of LLDP neighbor information aged out 0 The number of CDP frames transmitted 0 The number of CDP frames received 0 The number of CDP frames discarded 0 The number of CDP error frames 0 Display the LLDP statistics for the nearest customer bridge agents on GigabitEthernet 1 0 1 Sy...

Page 272: ...ned user roles network admin network operator Parameters interface interface type interface number Specifies a port by its type and number agent Specifies an LLDP agent type If no agent type is specified the command displays the status information for all LLDP agents nearest bridge Specifies nearest bridge agents nearest customer Specifies nearest customer bridge agents nearest nontpmr Specifies n...

Page 273: ...s 5 Number of MED neighbors 2 Number of CDP neighbors 0 Number of sent optional TLV 12 Number of received unknown TLV 5 LLDP agent nearest customer Port status of LLDP Enable Admin status Tx_Rx Trap flag No Polling interval 0s Number of LLDP neighbors 5 Number of MED neighbors 2 Number of CDP neighbors 0 Number of sent optional TLV 12 Number of received unknown TLV 5 Table 60 Command output Field ...

Page 274: ...of MED neighbors connecting to the port Number of CDP neighbors Number of CDP neighbors connecting to the port Number of sent optional TLV Number of optional TLVs contained in an LLDP frame sent through the port Number of received unknown TLV Number of unknown TLVs contained in a received LLDP frame display lldp tlv config Use display lldp tlv config to display the types of advertisable optional L...

Page 275: ...d Protocol VLAN ID TLV YES YES VLAN Name TLV YES YES DCBX TLV NO NO EVB TLV NO NO Link Aggregation TLV YES YES Management VID TLV YES YES IEEE 802 3 extend TLV MAC Physic TLV YES YES Power via MDI TLV YES YES Maximum Frame Size TLV YES YES LLDP MED extend TLV Capabilities TLV YES YES Network Policy TLV YES YES Location Identification TLV NO NO Extended Power via MDI TLV YES YES Inventory TLV YES Y...

Page 276: ...d Protocol VLAN ID TLV YES YES VLAN Name TLV YES YES DCBX TLV NO NO EVB TLV NO NO Link Aggregation TLV YES NO Management VID TLV YES YES IEEE 802 3 extend TLV MAC Physic TLV YES NO Power via MDI TLV YES NO Maximum Frame Size TLV YES NO LLDP MED extend TLV Capabilities TLV YES YES Network Policy TLV YES YES Location Identification TLV NO NO Extended Power via MDI TLV YES NO Inventory TLV YES YES Ta...

Page 277: ... TLV Inventory TLVs Hardware Revision TLV Firmware Revision TLV Software Revision TLV Serial Number TLV Manufacturer Name TLV Model name TLV Asset ID TLV lldp admin status Use lldp admin status to specify the LLDP operating mode Use undo lldp admin status to restore the default Syntax In Layer 2 Ethernet interface view or management Ethernet interface view lldp agent nearest customer nearest nontp...

Page 278: ...LLDP operating mode as Rx for the nearest customer bridge agents on GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 lldp agent nearest customer admin status rx lldp check change interval Use lldp check change interval to enable LLDP polling and set the polling interval Use undo lldp check change interval to restore the default Syntax I...

Page 279: ...iance admin status cdp to restore the default Syntax lldp compliance admin status cdp disable txrx undo lldp compliance admin status cdp Default CDP compatible LLDP operates in disable mode Views Layer 2 Ethernet interface view management Ethernet interface view Predefined user roles network admin Parameters disable Specifies the disable mode CDP compatible LLDP in this mode cannot receive or tran...

Page 280: ...econds To make CDP compatible LLDP work correctly with Cisco IP phones configure the LLDP frame transmission interval to be no more than 1 3 of the TTL value Examples Enable CDP compatibility globally Sysname system view Sysname lldp compliance cdp Related commands lldp hold multiplier lldp timer tx interval lldp enable Use lldp enable to enable LLDP on a port Use undo lldp enable to disable LLDP ...

Page 281: ...earest nontpmr encapsulation In Layer 2 aggregate interface view lldp agent nearest customer nearest nontpmr encapsulation snap undo lldp agent nearest customer nearest nontpmr encapsulation Default The encapsulation format for LLDP frames is Ethernet II Views Layer 2 aggregate interface view Layer 2 Ethernet interface view Management Ethernet interface view Predefined user roles network admin Par...

Page 282: ...ue range is 1 to 8 Examples Configure the device to send five LLDP frames each time fast LLDP frame transmission is triggered Sysname system view Sysname lldp fast count 5 lldp global enable Use lldp global enable to enable LLDP globally Use undo lldp global enable to disable LLDP globally Syntax lldp global enable undo lldp global enable Default If the switch starts up with empty configuration LL...

Page 283: ...ameters value Sets the TTL multiplier in the range of 2 to 10 Usage guidelines The TTL TLV carried in an LLDPDU determines how long the device information carried in the LLDPDU can be saved on a recipient device By setting the TTL multiplier you can configure the TTL of locally sent LLDPDUs which determines how long information about the local device can be saved on a neighboring device The TTL is...

Page 284: ...ment Ethernet interface view Predefined user roles network admin Parameters agent Specifies an LLDP agent type If no agent type is specified in Ethernet interface view the command configures the encoding format of the management address for nearest bridge agents nearest bridge Specifies nearest bridge agents nearest customer Specifies nearest customer bridge agents nearest nontpmr Specifies neares...

Page 285: ... bridge Specifies the service bridge mode Usage guidelines The LLDP agent types supported by LLDP depend on the LLDP bridge mode Service bridge mode LLDP supports nearest bridge agents and nearest non TPMR bridge agents LLDP processes the LLDP frames with destination MAC addresses for these agents and transparently transmits the LLDP frames with other destination MAC addresses in the VLAN Customer...

Page 286: ...GigabitEthernet 1 0 1 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 lldp notification med topology change enable lldp notification remote change enable Use lldp notification remote change enable to enable LLDP trapping Use undo lldp notification remote change enable to disable LLDP trapping Syntax In Layer 2 Ethernet interface view or management Ethernet ...

Page 287: ... lldp timer fast interval Use lldp timer fast interval to set the interval for fast LLDP frame transmission Use undo lldp timer fast interval to restore the default Syntax lldp timer fast interval interval undo lldp timer fast interval Default The interval for fast LLDP frame transmission is 1 second Views System view Predefined user roles network admin Parameters interval Sets an interval for fas...

Page 288: ...mer reinit delay to set the LLDP reinitialization delay Use undo lldp timer reinit delay to restore the default Syntax lldp timer reinit delay delay undo lldp timer reinit delay Default The LLDP reinitialization delay is 2 seconds Views System view Predefined user roles network admin Parameters delay Sets the LLDP reinitialization delay in the range of 1 to 10 seconds Examples Set the LLDP reiniti...

Page 289: ...ber undo lldp tlv enable basic tlv all port description system capability system description system name management address tlv ip address dot1 tlv all port vlan id link aggregation protocol vlan id vlan name management vid dot3 tlv all mac physic max frame size power med tlv all capability inventory network policy power over ethernet location id For nearest non TPMR bridge agents lldp agent neare...

Page 290: ...nterfaces Nearest bridge agents can advertise all types of LLDP TLVs except the following types DCBX TLVs Location identification TLVs Port and protocol VLAN ID TLVs VLAN name TLVs Management VLAN ID TLVs Nearest non TPMR bridge agents advertise no TLVs Nearest customer bridge agents can advertise basic TLVs and IEEE 802 1 organizationally specific TLVs On the management Ethernet interface Nearest...

Page 291: ...is assigned an IP address or all VLAN interfaces are down the MAC address of the port will be advertised For management Ethernet interface the management address is its own IP address If no IP address is configured for the management Ethernet interface the MAC address of the port will be advertised When you execute the undo command If you specify the ip address argument the command disable the adv...

Page 292: ...s for emergencies in location identification TLVs tel number Sets the telephone number for emergencies a string of 10 to 25 characters network policy vlan id Advertises network policy TLVs The vlan id argument specifies the voice VLAN ID sent to voice terminals in the range of 1 to 4094 If you do not specify this argument the command advertises information about the VLAN assigned by the authentica...

Page 293: ...285 Sysname GigabitEthernet1 0 1 lldp agent nearest customer tlv enable dot1 tlv link aggregation ...

Page 294: ...ce loopback group 5 Sysname display service loopback group 5 Service Group ID 5 Service Type Tunnel Member GigabitEthernet1 0 1 GigabitEthernet1 0 2 Table 62 Command output Field Description Service Group ID Service loopback group ID Service Type Service type of the service loopback group Multicast tunnel Supports multicast tunnel traffic Tunnel Supports unicast tunnel traffic Multiport Supports m...

Page 295: ...Assign GigabitEthernet 1 0 1 to service loopback group 5 Sysname system view Sysname interface gigabitethernet 1 0 1 Sysname GigabitEthernet1 0 1 port service loopback group 5 service loopback group Use service loopback group to create a service loopback group and specify its service type Use undo service loopback group to delete the service loopback group Syntax service loopback group number type...

Page 296: ...e you can use it with a feature You cannot change the service type of a service loopback group For correct traffic processing do not delete a service loopback group that is being used by a feature Examples Create service loopback group 5 and specify the unicast tunnel service for the group Sysname system view Sysname service loopback group 5 type tunnel ...

Page 297: ...east one x y Asterisk marked square brackets enclose optional syntax choices separated by vertical bars from which you select one choice multiple choices or none 1 n The argument or keyword and argument combination before the ampersand sign can be entered 1 to n times A line that starts with a pound sign is comments GUI conventions Convention Description Boldface Window names button names field na...

Page 298: ...epresents an access controller a unified wired WLAN module or the access controller engine on a unified wired WLAN switch Represents an access point Represents a wireless terminator unit Represents a wireless terminator Represents a mesh access point Represents omnidirectional signals Represents directional signals Represents a security product such as a firewall UTM multiservice security gateway ...

Page 299: ...s provide a mechanism for accessing software updates through the product interface Review your product documentation to identify the recommended software update method To download product updates go to either of the following Hewlett Packard Enterprise Support Center Get connected with updates page www hpe com support e updates Software Depot website www hpe com support softwaredepot To view and u...

Page 300: ...r self repair CSR programs allow you to repair your product If a CSR part needs to be replaced it will be shipped directly to you so that you can install it at your convenience Some parts do not qualify for CSR Your Hewlett Packard Enterprise authorized service provider will determine whether a repair can be accomplished by CSR For more information about CSR contact your local service provider or ...

Page 301: ...number edition and publication date located on the front cover of the document For online help content include the product name product version help edition and publication date located on the legal notices page ...

Page 302: ...294 ...

Page 303: ...ormation 254 display lldp statistics 262 display lldp status 264 display lldp tlv config 266 display loopback detection 159 display mac address 56 display mac address aging time 57 display mac address mac learning 58 display mac address mac move 59 display mac address statistics 60 display mac vlan 183 display mac vlan interface 184 display mvrp running status 230 display mvrp state 232 display mv...

Page 304: ...nge enable 278 lldp timer fast interval 279 lldp timer notification interval 279 lldp timer reinit delay 280 lldp timer tx interval 280 lldp tlv enable 281 loopback 22 loopback detection action 159 loopback detection enable 160 loopback detection global action 161 loopback detection global enable 162 loopback detection interval time 163 M mac address interface view 61 mac address system view 62 ma...

Page 305: ...s 240 reset packet drop interface 24 reset stp 129 revision level 129 S service 173 service loopback group 287 shutdown 51 shutdown 174 shutdown 25 shutdown 105 snmp agent trap enable mac address 72 speed 25 speed auto downgrade 26 storm constrain 33 storm constrain control 34 storm constrain enable log 35 storm constrain enable trap 35 storm constrain interval 36 stp bpdu protection 130 stp bridg...

Page 306: ... 187 vlan group 198 vlan list 198 vlan mapping modulo 157 voice vlan aging 224 voice vlan enable 225 voice vlan mac address 225 voice vlan mode auto 226 voice vlan qos 227 voice vlan qos trust 228 voice vlan security enable 229 voice vlan track lldp 229 W Websites 292 ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands