manualshive.com logo in svg

Lenovo RackSwitch G8264, Command Reference Manual

The Lenovo RackSwitch G8264 is a high-performance, reliable, and versatile networking product that caters to the needs of professional users. You can easily access the comprehensive Product Manual for this device, providing step-by-step instructions and detailed information. Download the manual for free from our website, and unleash the full potential of your Lenovo RackSwitch G8264.

Share
Download
background image

324     

G8264 Command Reference for ENOS 8.4

Table 140.  

QoS

 

Statistics

 

Commands

 

Command Syntax and Usage 

show

 

qos

 

protocol

­

packet

­

control

 

protocol

­

counters

     

[

<packet

 

type>

]

Displays

 

the

 

total

 

packet

 

count

 

of

 

the

 

selected

 

packet

 

type

 

received

 

by

 

hardware.

 

The

 

following

 

packet

 

types

 

are

 

allowed:

802.1x

 

(IEEE

 

802.1x

 

packets)

application

­

cri

­

packets

 

(critical

 

packets

 

of

 

various

 

applications)

arp

­

bcast

 

(ARP

 

broadcast

 

packets)

arp

­

ucast

 

(ARP

 

unicast

 

reply

 

packets)

bgp

 

(BGP

 

packets)

bpdu

 

(Spanning

 

Tree

 

Protocol

 

packets)

cisco

­

bpdu

 

(Cisco

 

STP

 

packets)

dest

­

unknown

 

(packets

 

with

 

destination

 

not

 

yet

 

learned)

dhcp

 

(DHCP

 

packets)

ecp

 

(ECP

 

packets)

fips

 

(FIPS

 

packets)

icmp

 

(ICMP

 

packets)

icmp6

 

(ICMP6

 

packets)

igmp

 

(IGMP

 

packets)

ipv4

­

miscellaneous

 

(IPv4

 

packets

 

with

 

IP

 

options

 

and

 

TTL

 

exception)

ipv6

­

nd

 

(IPv6

 

Neighbor

 

Discovery

 

packets)

lacp

 

(LACP

 

packets)

lldp

 

(LLDP

 

packets)

oflow

­

cntrler

 

(packets

 

that

 

hit

 

the

 

OpenFlow

 

send

‐

to

‐

controller

 

filter)

oflow

­

default

 

(packets

 

that

 

hit

 

the

 

OpenFlow

 

default

 

filter)

oflow

­

mgmt

 

(packets

 

that

 

hit

 

the

 

OpenFlow

 

management

 

filter)

ospf

 

(OSPF

 

packets)

ospf3

 

(OSPF3

 

Packets)

pim

 

(PIM

 

packets)

ptp

 

(PTP

 

packets)

rip

 

(RIP

 

packets)

system

 

(system

 

protocols,

 

such

 

as

 

tftp,

 

ftp,

 

telnet

 

or

 

ssh)

udld

 

(UDLD

 

packets)

vlag

 

(VLAG

 

packets)

vrrp

 

(VRRP

 

packets)

Command

 

mode:

 

All

Summary of Contents for RackSwitch G8264

Page 1: ...Lenovo RackSwitch G8264 ISCLI Industry Standard CLI Command Reference for Lenovo Enterprise Network Operating System 8 4 ...

Page 2: ...nt that comes with the product Second Edition July 2017 Copyright Lenovo 2017 Portions Copyright IBM Corporation 2014 LIMITED AND RESTRICTED RIGHTS NOTICE If data or software is delivered pursuant a General Services Administration GSA contract use reproduction or disclosure is subject to restrictions set forth in Contract No GS 35F 05925 Lenovo and the Lenovo logo are trademarks of Lenovo in the U...

Page 3: ...ess Table Information 41 SNMPv3 Group Table Information 42 SNMPv3 Community Table Information 42 SNMPv3 Target Address Table Information 43 SNMPv3 Target Parameters Table Information 44 SNMPv3 Notify Table Information 44 SNMPv3 Dump Information 45 General System Information 46 Show Specific System Information 47 Show Recent Syslog Messages 48 User Status 49 LDAP Information 50 Stacking Information...

Page 4: ...rmation 91 Show All IP Route Information 92 ARP Information 94 ARP Address List Information 95 Show All ARP Entry Information 96 Dynamic ARP Inspection Information 97 BGP Information 98 BGP Peer Information 99 BGP Group Information 100 BGP Summary Information 101 Dump BGP Information 101 OSPF Information 102 OSPF General Information 104 OSPF Interface Information 104 OSPF Loopback Information 105 ...

Page 5: ... Multicast Route Information Commands 142 PIM Multicast Route Information 143 Quality of Service Information 144 802 1p Information 145 WRED and ECN Information 146 Access Control List Information 147 Access Control List Information 148 Access Control IPv6 List Information 150 OpenFlow Information 151 OpenFlow Global Configuration Information 152 OpenFlow Flow Allocation Information 154 OpenFlow G...

Page 6: ... Enhanced Ethernet Information 194 DCBX Information 195 DCBX Control Information 196 DCBX Feature Information 197 DCBX ETS Information 199 DCBX PFC Information 201 DCBX Application Protocol Information 202 ETS Information 204 PFC Information 205 FCoE Initialization Protocol Snooping Information 206 FIP Snooping FCoE Forwarder Information 207 Python Scripting Information 208 Scheduler Job Informati...

Page 7: ...cs 265 TCP Statistics 267 UDP Statistics 269 IGMP Statistics 270 MLD Statistics 272 MLD Global Statistics 273 OSPF Statistics 275 OSPF Global Statistics 276 OSPFv3 Statistics 280 OSPFv3 Global Statistics 281 VRRP Statistics 285 PIM Statistics 286 Routing Information Protocol Statistics 287 DHCP Statistics 288 DHCP Snooping Statistics 288 OpenFlow Statistics 289 Management Processor Statistics 305 ...

Page 8: ...Pv3 Group Configuration 381 SNMPv3 Community Table Configuration 382 SNMPv3 Target Address Table Configuration 383 SNMPv3 Target Parameters Table Configuration 384 SNMPv3 Notify Table Configuration 385 System Access Configuration 386 Management Network Configuration 387 NETCONF Configuration 389 NETCONF over SSH Configuration 389 User Access Control Configuration 390 System User ID Configuration 3...

Page 9: ...ion 439 IPv6 Metering Configuration 441 ACL Log Configuration 442 ACL Group Configuration 443 Management ACL Configuration 444 MACL IPv4 Filtering Configuration 444 MACL TCP UDP Filtering Configuration 446 VMAP Configuration 448 Port Mirroring 454 Port Mirroring Configuration 454 Layer 2 Configuration 455 802 1X Configuration 455 802 1X Global Configuration 456 802 1X Guest VLAN Configuration 458 ...

Page 10: ... Proxy Configuration 518 ARP Static Configuration 519 Dynamic ARP Inspection Configuration 520 IP Forwarding Configuration 521 Network Filter Configuration 522 Routing Map Configuration 523 IP Access List Configuration 526 Policy Based Routing Configuration 527 Autonomous System Filter Path Configuration 529 Routing Information Protocol Configuration 530 RIP Interface Configuration 531 RIP Route R...

Page 11: ... IPsec Transform Set Configuration 592 IPsec Traffic Selector Configuration 593 IPsec Dynamic Policy Configuration 594 IPsec Manual Policy Configuration 595 Domain Name System Configuration 597 Bootstrap Protocol Relay Configuration 599 BOOTP Relay Broadcast Domain Configuration 599 Option 82 Configuration 600 VRRP Configuration 601 Virtual Router Configuration 603 Virtual Router Priority Tracking...

Page 12: ...n 647 Virtual NIC Group Configuration 648 UFP Configuration 649 Edge Virtual Bridge Configuration 652 Edge Virtual Bridge VSI Type Database Configuration 653 Edge Virtual Bridge VSI Type Profile Configuration 655 OpenFlow Configuration 656 Static Flows Configuration 666 Precision Time Protocol Configuration 670 Microburst Detection 672 Service Location Protocol Configuration 673 Configuration Dump...

Page 13: ...file 714 Using the Boot Management Menu 715 Boot Recovery Mode 716 Recover from a Failed Image Upgrade using TFTP 717 Recovering from a Failed Image Upgrade using XModem Download 719 Physical Presence 721 Chapter 7 Maintenance Commands 723 Forwarding Database Maintenance 725 Debugging Commands 726 SSH Debugging 728 IPsec Debugging 729 vLAG Debugging 730 BGP Debugging 731 BGP Maintenance 732 DCBX M...

Page 14: ...on Compliance Statement 780 Avis de Conformité à la Réglementation dʹIndustrie Canada 780 Australia and New Zealand Class A Statement 780 European Union Compliance to the Electromagnetic Compatibility Directive 781 Germany Class A Statement 781 Japan VCCI Class A Statement 782 Japan Electronics and Information Technology Industries Association JEITA Statement 783 Korea Communications Commission KC...

Page 15: ...eferred to as G8264 throughout this document This guide lists each command together with the complete syntax and a functional description from the IS Command Line Interface ISCLI For documentation on installing the switches physically see the Lenovo Installation Guide for your RackSwitch G8264 For details about configuration and operation of your G8264 see the Lenovo RackSwitch G8264 Application G...

Page 16: ...is Book This book is intended for network installers and system administrators engaged in configuring and maintaining a network The administrator should be familiar with Ethernet concepts IP addressing Spanning Tree Protocol and SNMP configuration parameters ...

Page 17: ...hich affect switch performance immediately but do not alter permanent switch configurations such as temporarily disabling ports The commands describe how to activate or deactivate optional software features Chapter 6 Boot Options describes the use of the primary and alternate switch images how to load a new software image and how to reset the software to factory defaults Chapter 7 Maintenance Comm...

Page 18: ...jects such as window names dialog box names and icons as well as user interface objects such as buttons and tabs italicized body text This italicized type indicates book titles special terms or words to be emphasized angle brackets Indicate a variable to enter based on the description inside the brackets Do not type the brackets when entering the command Example If the command syntax is ping IP ad...

Page 19: ...ace ip or show interface ip 1 128 vertical line Separates choices for command keywords and arguments Enter only one of the choices Do not type the vertical line when entering the command Example If the command syntax is show portchannel 1 128 hash information you must enter show portchannel 1 128 or show portchannel hash or show portchannel information Table 1 Typographic Conventions continued Typ...

Page 20: ...20 G8264 Command Reference for ENOS 8 4 ...

Page 21: ...be used effectively This guide describes the individual ISCLI commands available for the G8264 The ISCLI provides a direct method for collecting switch information and performing switch configuration Using a basic terminal the ISCLI allows you to view information and statistics about the switch and to perform any necessary configuration This chapter explains how to access the Industry Standard Com...

Page 22: ...re terminal Each mode provides a specific set of commands The command set of a higher privilege mode is a superset of a lower privilege mode all lower privilege mode commands are accessible when using a higher privilege mode The following table lists the ISCLI command modes Table 2 ISCLI Command Modes Command Mode Prompt Command used to enter or exit User EXEC RS G8264 Default mode entered automat...

Page 23: ...t to Global Configuration mode end VLAN RS G8264 config vlan Enter VLAN Configuration mode from Global Configuration mode vlan VLAN ID 1 4094 Exit to Global Configuration mode exit Exit to Privileged EXEC mode end Router OSPF RS G8264 config router ospf Enter OSPF Configuration mode from Global Configuration mode router ospf Exit to Global Configuration mode exit Exit to Privileged EXEC mode end R...

Page 24: ...t Configuration mode from Global Configuration mode ip pim component 1 2 Exit to Global Configuration mode exit Exit to Privileged EXEC mode end IKEv2 Proposal RS G8264 config ikev2 prop Enter IKEv2 Proposal Configuration mode from Global Configuration mode ikev2 proposal Exit to Global Configuration mode exit Exit to Privileged EXEC mode end MLD Configuration RS G8264 config router mld Enter Mult...

Page 25: ...rtual Bridging VSI Type Profile Configuration mode from Global Configuration mode virt evb profile 1 16 Exit to Global Configuration mode exit Exit to Privileged EXEC mode end UFP Virtual Port Configuration RS G8264 config_ufp_vport Enter Unified Fabric Port Virtual Port Configuration mode from Global Configuration mode ufp port port alias or number vport 1 8 Exit to Global Configuration mode exit...

Page 26: ... from the command line interface and log out copy running config startup config Write configuration changes to non volatile flash memory logout Exit from the command line interface and log out traceroute Use this command to identify the route used for station to station connectivity across the network The format is as follows traceroute hostname IP address max hops 1 32 msec delay 1 4294967295 dat...

Page 27: ...s optional msec delay Sets the number of milliseconds between attempts optional length Sets the ping request payload size optional source IP address Sets the IP source address for the IP packet optional ttl Sets the Time to live in the IP header tos Sets the Type of Service bits in the IP header dont fragment Sets the don t fragment bit in the IP header only for IPv4 addresses By default the manag...

Page 28: ...logical Telnet port or service number By default the management port is used To use a specific port use the following options data port data port management port mgt port Note The DNS parameters must be configured if specifying hostnames show history This command displays the last ten issued commands show who Displays a list of users who are currently logged in show line Displays a list of users w...

Page 29: ...h distinguish the command from the others in the same mode For example consider the following full command and a valid abbreviation or Tab Completion By entering the first letter of a command at any prompt and pressing Tab the ISCLI displays all available commands or options that begin with that letter Entering additional letters further refines the list of commands or options displayed If only on...

Page 30: ...strators can also make temporary operator level changes as well they must be aware of the interactions between temporary and permanent changes Access to switch functions is controlled through the use of unique surnames and passwords Once you are connected to the switch via local Telnet remote Telnet or SSH you are prompted to enter a password The default user names password for each access level a...

Page 31: ...ut By default the switch will disconnect your Telnet session after ten minutes of inactivity This function is controlled by the following command which can be set from 1 to 60 minutes or disabled when set to 0 system idle 0 60 Command mode Global Configuration ...

Page 32: ...32 G8264 Command Reference for ENOS 8 4 ...

Page 33: ...or disabled Port description For details see page 165 Command mode All show interface trunk port alias or number Displays port status information including Port alias and number Whether the port uses VLAN Tagging or not Port VLAN ID PVID Port description VLAN membership FDB Learning status Flooding status For details see page 166 Command mode All show interface transceiver Displays the status of t...

Page 34: ...lude exclude section begin head 1 2000 last 1 2000 Displays the current syslog configuration followed by the most recent 2000 syslog messages messages displays the most recent 2000 syslog messages only severity displays syslog messages of the specified severity level reverse displays syslog messages starting with the most recent message displays syslog messages that match one of the following filt...

Page 35: ... address of management interface Hardware version and part number Software image file and version number Configuration name Log in banner if one is configured Internal temperatures Fan status Power supply status For details see page 46 Command mode All images total 18528 rw r r 1 root root 10038789 Jan 8 14 16 image1 rw r r 1 root root 8932087 Jan 7 20 16 image2 rw r r 1 root root 16 Jan 8 14 18 u...

Page 36: ...mber of lines per screen displayed in the CLI for the current session A value of 0 means paging is disabled Command mode All show line console length Displays the number of lines per screen displayed in the CLI by default for console sessions A value of 0 means paging is disabled Command mode All show line vty length Displays the number of lines per screen displayed in the CLI by default for Telne...

Page 37: ...Options Command Syntax and Usage show errdisable information Displays all Error Disable and Recovery information Command mode All show errdisable link flap information Displays ports that have been disabled due to excessive link flaps Command mode All show errdisable recovery Displays a list ports with their Error Recovery status Command mode All show errdisable timers Displays a list of active re...

Page 38: ...isplays View based Access Control information To view a sample see page 41 Command mode All show snmp server v3 community Displays information about the community table information To view a sample see page 42 Command mode All show snmp server v3 group Displays information about the group including the security model user name and group name To view a sample see page 42 Command mode All show snmp ...

Page 39: ...ivacy protocol show snmp server v3 user Displays User Security Model USM table information To view the table see page 39 Command mode All show snmp server v3 view Displays information about view subtrees mask and type of view To view a sample see page 40 Command mode All Table 9 SNMPv3 Information Options continued Command Syntax and Usage Engine ID 80 00 4F 4D 03 08 17 F4 8C E8 00 usmUser Table U...

Page 40: ...how snmp server v3 view Command mode All View Name Subtree Mask Type iso 1 3 included v1v2only 1 3 included v1v2only 1 3 6 1 6 3 15 excluded v1v2only 1 3 6 1 6 3 16 excluded v1v2only 1 3 6 1 6 3 18 excluded Table 11 SNMPv3 View Table Information Parameters Field Description View Name Displays the name of the view Subtree Displays the MIB subtree as an OID string A view subtree is the set of all MI...

Page 41: ...zed for the group when writing objects The notify view represents the set of object instances authorized for the group when sending a notification The following command displays SNMPv3 access information show snmp server v3 access Command mode All Group Name Model Level ReadV WriteV NotifyV v1v2grp snmpv1 noAuthNoPriv iso iso v1v2only admingrp usm authPriv iso iso iso Table 12 SNMPv3 Access Table ...

Page 42: ...inmd5 admingrp usm adminsha admingrp usm adminshaaes admingrp Table 13 SNMPv3 Group Table Information Parameters Field Description Sec Model Displays the security model used which is any one of USM SNMPv1 SNMPv2 and SNMPv3 User Name Displays the name for the group Group Name Displays the access name of the group Index Name User Name Tag trap1 public v1v2only v1v2trap Table 14 SNMPv3 Community Tabl...

Page 43: ...Table Information Parameters Field Description Name Displays the locally arbitrary but unique identifier associated with this snmpTargetAddrEntry Transport Addr Displays the transport addresses Port Displays the SNMP UDP port number Taglist This column contains a list of tag values which are used to select target addresses for a particular SNMP message Params The value of this object identifies an...

Page 44: ...isplays the securityName which identifies the entry on whose behalf SNMP messages will be generated using this entry Sec Model Displays the security model used when generating SNMP messages using this entry The system may choose to return an inconsistentValue error if an attempt is made to set this variable to a value for a security model the system does not support Sec Level Displays the level of...

Page 45: ...ViewTreeFamily Table View Name Subtree Mask Type iso 1 included v1v2only 1 included v1v2only 1 3 6 1 6 3 15 excluded v1v2only 1 3 6 1 6 3 16 excluded v1v2only 1 3 6 1 6 3 18 excluded vacmSecurityToGroup Table All active SNMPv3 groups are listed below Sec Model User Name Group Name snmpv1 v1v2only v1v2grp usm adminmd5 admingrp usm adminsha admingrp usm adminshaaes admingrp snmpCommunity Table Index...

Page 46: ...ion 8 4 1 0 FLASH image1 active configuration Boot kernel version 8 4 1 0 USB Boot disabled Temperature Mother Top 33 C Temperature Mother Bottom 37 C Temperature Daughter Top 32 C Temperature Daughter Bottom 36 C Temperature Switch Asic Max 49 C System Warning at 75 C Shutdown at 90 C Set Point is 65 C Fan 1 Module 1 7356rpm 80pwm 5 bias 65 Front To Back Fan 2 Module 1 4981rpm 80pwm 5 bias 65 Fro...

Page 47: ...t number Log in banner if one is configured Internal temperatures Fan status Power supply status Show Specific System Information The following table lists commands used for displaying specific entries from the general system information screen Sample output for command show version brief Displays the software version number image file and configuration name Table 18 Specific System Information Op...

Page 48: ...t severity 7 facility 0 host2 0 0 0 0 via MGT port severity2 7 facility2 0 console enabled severity level of console output 6 severity level of write to flash 7 syslogging all features Syslog source loopback interface not set Nov 2 5 49 53 172 25 254 19 INFO console System log cleared by user admin Nov 2 5 51 23 172 25 254 19 CRIT system Fan Mod 4 Removed Nov 2 5 54 27 172 25 254 19 CRIT system MA...

Page 49: ...ccess user Command mode All except User EXEC This command displays the status of the configured usernames Usernames user enabled offline oper disabled offline admin Always Enabled online 1 session Current User ID table 1 name paul dis cos user password valid offline Current strong password settings strong password status disabled ...

Page 50: ...MGT port Current LDAP server null LDAP port 389 Retries 3 Timeout 5 LDAP server OFF Backdoor access disabled LDAP domain name LDAP user attribute uid Current LDAP settings LDAP server 1 10 10 43 55 389 via MGT port LDAP server 2 LDAPserver109 389 via DATA port LDAP server 3 null LDAP server 4 null LDAP Bind Mode Login Credentials LDAP Bind DN null Retries 3 Timeout 5 LDAP server OFF Backdoor acces...

Page 51: ...s only qsfp displays link information for QSFP ports only stacking displays link information for stacking ports only Command mode All show interface link switch configured switch number 1 8 Displays link information for the specified configured switch Note This command is available only on the master switch Command mode All show interface link switch configured switch number 1 8 state detached dis...

Page 52: ...mmand mode All show sys info swn attached switch number 1 16 Displays system information for the specified attached switch including System date and time Switch model name and number Switch name and location Time of last boot MAC address of the switch management processor IP address of management interface Hardware version and part number Software image file and version number Configuration name L...

Page 53: ...us of the most recent firmware and configuration file push from the master to member switches Note This command is available only on the master switch Command mode All show stack switch Displays information about each switch in the stack including Configured Switch Number csnum Attached Switch Number asnum MAC address Stacking state For details see page 54 Command mode All show stack switch number...

Page 54: ...umbers and their associated assigned switch numbers Attached switch numbers and their associated configured switch numbers Stack name MyStack Local switch is the master Local switch csnum 1 MAC 00 25 03 1c 96 00 Switch Type 9 Switch Mode cfg Master Priority 225 Stack MAC 00 25 03 1c 96 1f Master switch csnum 1 MAC 00 25 03 1c 96 00 Backup switch csnum 2 MAC 00 ef 61 79 00 00 Configured Switches cs...

Page 55: ...Displays Hot Links information For details see page 67 Command mode All show layer2 information Dumps all Layer 2 switch information available 10K lines or more depending on your configuration If you want to capture dump data to a file set your communication software on your workstation to capture session data prior to issuing the dump commands Command mode All show lldp information Displays Link ...

Page 56: ... page 75 Command mode All show spanning tree blockedports Lists the ports blocked by each STP instance Command mode All show spanning tree mst configuration Displays the current MSTP settings Command mode All show spanning tree mst 0 32 information Displays Spanning Tree information for the specified instance 0 is used for CIST CIST bridge information includes Priority Hello interval Maximum age v...

Page 57: ... information Displays information about a specific Spanning Tree Group For details see page 76 Command mode All show vlag Displays vLAG Information For details see page 73 Command mode All show vlan Displays VLAN configuration information for all configured VLANs including VLAN Number VLAN Name Status Port membership of the VLAN For details see page 85 Command mode All Table 20 Layer 2 Information...

Page 58: ...one 2 force auth unauthorized initialize initialize none 3 force auth unauthorized initialize initialize none Table 21 802 1X Parameter Descriptions Parameter Description Port Displays each port s alias Auth Mode Displays the Access Control authorization mode for the port The Authorization mode can be one of the following force unauth auto force auth Auth Status Displays the current authorization ...

Page 59: ...s the Backend Authorization State The Backend Authorization state can be one of the following initialize request response success fail timeout idle Assigned VLAN Displays corresponding VLAN associated with the port Table 21 802 1X Parameter Descriptions continued Parameter Description ...

Page 60: ...ddress Displays a single database entry by its MAC address You are prompted to enter the MAC address of the device Enter the MAC address using the format xx xx xx xx xx xx For example 08 00 20 12 34 56 You can also enter the MAC address using the format xxxxxxxxxxxx For example 080020123456 Command mode All show mac address table configured static Displays all configured static MAC entries in the ...

Page 61: ...formation Options Command Syntax and Usage show mac address table multicast Displays all Multicast MAC entries in the FDB Command mode All show mac address table multicast address MAC address Displays a single multicast entry by its MAC address You are prompted to enter the MAC address of the device Enter the MAC address using the format xx xx xx xx xx xx For example 08 00 20 12 34 56 You can also...

Page 62: ...wn UNK the MAC address has not yet been learned by the switch but has only been seen as a destination address When an address is in the unknown state no outbound port is indicated although ports which reference the address as a destination are listed under Reference ports Clearing Entries from the Forwarding Database To clear the entire FDB refer to Forwarding Database Maintenance on page 725 Mac ...

Page 63: ...on Command mode All show lacp aggregator aggregator ID Displays detailed information about the LACP aggregator Command mode All show lacp information Displays a summary of LACP information For details see page 64 Command mode All show lacp information state down off up Displays a summary of LACP information for the interfaces that are down off or up Command mode All show interface port port alias ...

Page 64: ...ith each port trunk This value represents the LACP Link Aggregation Group LAG number status Displays the status of LACP on the port up or down minlinks Displays the minimum number of active links in the LACP Link Aggregation Group LAG port mode adminkey operkey selected prio aggr trunk status minlinks 1 active 65535 65535 yes 32768 1 65 up 1 2 active 65535 65535 yes 32768 1 65 up 1 3 active 65535 ...

Page 65: ...er trigger information Displays a summary of Layer 2 Failover information For details see page 65 Command mode All show failover trigger trigger number information Displays detailed information about the selected Layer 2 Failover trigger Command mode All Failover On Trigger 1 Manual Monitor Enabled Trigger 1 limit 0 Monitor State Up Member Status 17 Operational Control State Auto Controlled Member...

Page 66: ...p LAG the port is aggregated If any of these conditions are not true the monitor port is considered to be failed A control port is considered to be operational if the monitor trigger state is Up Even if a port s link status is Down Spanning Tree status is Blocking and the LACP status is Not Aggregated from a teaming perspective the port status is Operational since the trigger is Up A control port ...

Page 67: ...ng Hot Links status on or off Status of BPDU flood option Status of FDB send option Status and configuration of each Hot Links trigger Hot Links Info Trigger Current global Hot Links setting ON Hot Links BPDU flood disabled Hot Links FDB update disabled FDB update rate pps 200 Current Trigger 1 setting enabled name Trigger 1 preempt enabled fdelay 1 sec Active state None Master settings port 1 Bac...

Page 68: ...d port Command mode All show lldp port port alias or number vport 1 8 tlv evb Displays Edge Virtual Bridge EVB type length value TLV information for the specified virtual port on the selected port Command mode All show lldp receive Displays information about the LLDP receive state machine Command mode All show lldp remote device 1 256 detail Displays information received from LLDP capable devices ...

Page 69: ...rt Index Remote Chassis ID Remote Port Remote System Name DMAC 1 1 00 00 c9 e5 47 e3 00 00 c9 e5 47 e3 NB 1 2 00 00 c9 e5 47 e3 00 00 c9 e5 47 e3 NnTB 2 3 00 90 fa 75 0e c5 00 90 fa 75 0e c5 NB 14 4 a8 97 dc d1 f8 00 60 NB 14 5 a8 97 dc d1 f8 00 60 NnTB 15 6 a8 97 dc d1 f8 00 80 NB 15 7 a8 97 dc d1 f8 00 80 NnTB 18 8 00 90 fa 3d 48 49 00 90 fa 3d 48 49 NB MGT 9 74 99 75 c5 08 00 6 G8052 54 NB Loca...

Page 70: ...irectional TX RX loop neighbor mismatch Table 27 UDLD Information Options Command Syntax and Usage show udld Displays all UDLD information Command mode All show interface port port alias or number udld Displays UDLD information about the selected port Command mode All UDLD information on port 1 Port enable administrative configuration setting Enabled Port administrative mode normal Port enable ope...

Page 71: ...e link is connected Table 28 802 1x Discovery Information Options Command Syntax and Usage show interface port port alias or number dot1x Displays 802 1x information about the selected port Command mode All show dot1x Displays all 802 1x information Command mode All show dot1x port alias or number Displays 802 1x information for specified port Command mode All Quiet Tx Max Supp Server ReAuth ReAut...

Page 72: ...on about the selected port and the peer to which the link is connected Table 29 OAM Discovery Information Options Command Syntax and Usage show interface port port alias or number oam Displays OAM information about the selected port Command mode All show oam Displays all OAM information Command mode All OAM information on port 1 State enabled Mode active Link up Satisfied Yes Evaluating No Remote ...

Page 73: ...nformation Command mode All show vlag information Displays all vLAG information Command mode All show vlag isl Displays vLAG Inter Switch Link ISL information Command mode All show vlag peer gateway Displays the current state of the vLAG peer gateway For details see page 74 Command mode All show vlag portchannel 1 64 Displays vLAG static Link Aggregation Group LAG information Command mode All show...

Page 74: ...s enabled on trunk 13 Protocol Static Current settings enabled ports 13 Current L2 trunk hash settings smac dmac Current L3 trunk hash settings sip dip Current ingress port hash disabled Current L4 port hash disabled Current FCoE trunk hash settings sid did Current peer gateway state disabled vLAG VRRP mode Active vLAG related VRRP information 1 vrid 1 local role master peer role backup 10 vrid 1 ...

Page 75: ...t Type 17 128 2000 FWD DESG 8001 34 40 b5 40 55 00 8011 P2P 18 128 2000 FWD DESG 8001 34 40 b5 40 55 00 8012 P2P 40 128 20000 FWD ROOT 8001 08 17 f4 a2 c6 1f 8028 P2P 41 128 20000 DISC ALTN 8001 08 17 f4 a2 c6 1f 80e9 P2P 51 128 2000 FWD DESG 8001 34 40 b5 40 55 00 8033 P2P 52 128 2000 FWD DESG 8001 34 40 b5 40 55 00 8034 P2P 53 128 2000 FWD DESG 8001 34 40 b5 40 55 00 8035 P2P 54 128 2000 FWD DES...

Page 76: ... FWD DESG 8000 00 25 03 49 29 00 8026 P2P MGT 0 0 FWD STP turned off for this port Automatic path cost Portchannel cost not the individual port cost Table 31 PVRST RSTP MSTP Port Parameter Descriptions Parameter Description Priority port The Port Priority parameter helps determine which bridge port becomes the designated port In a network topology that has multiple bridge ports connected to a sing...

Page 77: ...he priority in hexadecimal notation and MAC address of the Designated Bridge Designated Port The Designated Port field shows the port on the Designated Bridge to which this port is connected Type Type of link connected to the port and whether the port is an edge port Link type values are AUTO P2P or SHARED Table 31 PVRST RSTP MSTP Port Parameter Descriptions continued Parameter Description ...

Page 78: ...8042 P2P 4 pc1 128 490 FWD ROOT 8001 a8 97 dc 03 d5 00 8042 P2P 11 128 2000 FWD DESG 8001 a8 97 dc d2 12 00 800b P2P 13 128 2000 FWD DESG 8001 a8 97 dc d2 12 00 800d P2P 14 128 2000 FWD DESG 8001 a8 97 dc d2 12 00 800e P2P 16 128 2000 FWD DESG 8001 a8 97 dc d2 12 00 8010 P2P Automatic path cost Portchannel cost not the individual port cost Table 32 RSTP MSTP PVRST Port Parameter Descriptions Param...

Page 79: ...d Bridge shows information about the bridge connected to each port if applicable Information includes the priority in hexadecimal notation and MAC address of the Designated Bridge Designated Port The port ID of the port on the Designated Bridge to which this port is connected Type Type of link connected to the port and whether the port is an edge port Link type values are AUTO P2P or SHARED Table ...

Page 80: ...parameter controls which bridge on the network will become the STP root bridge The lower the value the higher the priority Hello The hello time parameter specifies in seconds how often the bridge transmits a configuration bridge protocol data unit BPDU Any bridge that is not the root bridge uses the root bridge hello value MaxAge The maximum age parameter specifies in seconds the maximum time the ...

Page 81: ...bridge priority and MAC address Path Cost The port path cost is used to help determine the designated port for a segment Hello The hello time parameter specifies in seconds how often the bridge transmits a configuration bridge protocol data unit BPDU Any bridge that is not the root bridge uses the root bridge hello value MaxAge The maximum age parameter specifies in seconds the maximum time the br...

Page 82: ...000 a8 97 dc 88 c9 00 80e8 P2P Automatic path cost Portchannel cost not the individual port cost Table 35 CIST Parameter Descriptions Parameter Description CIST Root The CIST Root shows information about the root bridge for the Common Internal Spanning Tree CIST Values on this row of information refer to the CIST root CIST Regional Root The CIST Regional Root shows information about the root bridg...

Page 83: ... port for a segment Generally speaking the faster the port the lower the path cost A setting of 0 indicates that the cost will be set to the appropriate default after the link speed has been auto negotiated State The state field shows the current state of the port The state field can be either Discarding DISC Learning LRN or Forwarding FWD Role The Role field shows the current role of this port in...

Page 84: ...show portchannel information Command mode All When LAGs are configured you can view the state of each port in the various LAGs Note If Spanning Tree Protocol on any port in the LAG is set to forwarding the remaining ports in the LAG will also be set to forwarding Trunk group 1 Enabled Protocol Static Port state 1 STG 1 forwarding 2 STG 1 forwarding ...

Page 85: ...e VLAN information type lists only the VLAN type for each private VLAN community isolated or primary Command mode All show vlan information Displays information about all VLANs including VLAN number and name VLAN statistics Port membership VLAN status enabled or disabled Protocol VLAN status Spanning Tree membership Private VLAN information Flooding settings VMAP configuration Command mode All sho...

Page 86: ...mbership is represented in slot port format VLAN information includes VLAN Number VLAN Name Status Port membership of the VLAN Protocol VLAN information if available Private VLAN information if available VLAN Name Status Ports 1 Default VLAN ena 1 20 2 VLAN 2 dis 21 22 100 VLAN 100 ena empty 200 VLAN 200 ena empty 300 VLAN 300 ena empty 4095 Mgmt VLAN ena MGT Primary Secondary Type Ports 100 200 i...

Page 87: ...94 Command mode All show ip bgp Displays Border Gateway Protocol BGP information For details see page 101 Command mode All show ip bootp relay Displays the current parameters for the BOOTP Relay broadcast domain Command mode All show ip dhcp snooping Displays DHCP Snooping information For details see page 138 Command mode All show ip dns Displays the current Domain Name System settings Command mod...

Page 88: ...k filter settings route map settings Command mode All show ipv6 interface interface number Displays IPv6 interface information For details see page 130 Command mode All show ip match address 1 256 Displays the current the Network Filter configuration Command mode All show ip mroute Displays the current IP multicast routes Command mode All show ipv6 mld Displays Multicast Listener Discovery MLD inf...

Page 89: ...ation Command mode All show ip prefix policy Displays the current Prefix Policy Table configuration Command mode All show ipv6 prefix Displays IPv6 Neighbor Discovery prefix information For details see page 118 Command mode All show ip rip Displays the current Routing Information Protocol RIP configuration For details see page 113 Command mode All show ip route Displays all routes configured on th...

Page 90: ...on about manual key management policy for IP security For more information options see page 136 Command mode All show layer3 Dumps all Layer 3 switch information available 10K or more depending on your configuration If you want to capture dump data to a file set your communication software on your workstation to capture session data before issuing the dump commands Command mode All show layer3 igm...

Page 91: ...m Command mode All show ip route gateway IP address Displays routes to a single gateway Command mode All show ip route interface interface number Displays routes on a single interface Command mode All show ip route port port alias or number Displays routes on a single port Command mode All show ip route static Displays static routes configured on the switch Command mode All show ip route tag addre...

Page 92: ...0 0 0 0 0 0 0 0 multicast addr 255 255 255 255 255 255 255 255 255 255 255 255 broadcast broadcast Table 40 IP Routing Type Parameters Parameter Description indirect The next hop to the host or subnet destination will be forwarded through a router at the Gateway address direct Packets will be delivered to a destination host or subnet attached to the switch local Indicates a route to one of the swi...

Page 93: ... RIP ospf The address was learned by Open Shortest Path First OSPF bgp The address was learned via Border Gateway Protocol BGP broadcast Indicates a broadcast address martian The address belongs to a filtered group multicast Indicates a multicast address Table 41 IP Routing Tag Parameters continued Parameter Description ...

Page 94: ...onds since the ARP entry was learned For more information see page 96 Command mode All show ip arp data Displays all data ARP entries Command mode All show ip arp find IP address Displays a single ARP entry by IP address Command mode All show ip arp inspection Displays the current Dynamic ARP Inspection DAI configuration settings For details see page 97 Command mode All show ip arp interface port ...

Page 95: ... static ARP entries Command mode All show ip arp vlan VLAN ID 1 4095 Displays the ARP entries on a single VLAN Command mode All Table 42 ARP Information Options continued Command Syntax and Usage IP address IP mask MAC address VLAN Pass Up 1 1 1 1 255 255 255 255 08 17 f4 62 64 00 1 2 2 2 2 255 255 255 255 08 17 f4 62 64 00 1 46 0 0 1 255 255 255 255 08 17 f4 62 64 00 4094 3 3 3 20 255 255 255 255...

Page 96: ...e be fe 4095 MGT Data ARP entries Current ARP configuration rearp 5 Current static ARP IP address MAC address Port VLAN 27 0 200 1 00 ff 00 00 01 00 1 2 27 0 201 1 00 ff 00 00 01 00 1 2 Total number data ARP entries 188 IP address Flags MAC address VLAN Age Port 1 3 0 1 08 17 f4 c4 54 00 13 9 13 1 3 0 3 P 08 17 f4 ae be 00 13 3 4 0 3 P 08 17 f4 ae be 00 6 3 4 0 4 74 99 75 be 26 00 6 290 TRK65 3 5 ...

Page 97: ...Inspection Information Options Command Syntax and Usage show ip arp inspection Displays the current DAI configuration settings Command mode All show ip arp inspection interfaces port alias or number Displays the current DAI configuration settings for the selected interfaces Command mode All show ip arp inspection vlan VLAN ID 1 4094 Displays the current DAI configuration settings for the selected ...

Page 98: ... mode All show ip bgp neighbor advertised routes Displays all BGP advertised routes to all neighbors Command mode All show ip bgp neighbor 1 192 advertised routes Displays all BGP advertised routes to a specific peer Command mode All show ip bgp neighbor group Displays BGP group information See page 100 for a sample output Command mode All show ip bgp neighbor information Displays BGP peer informa...

Page 99: ... See page 101 for a sample output Command mode All Table 45 BGP Peer Information Options continued Command Syntax and Usage BGP Peer Information Static Peers 1 3 5 0 3 version 4 TTL 255 TTL Security hops 0 Remote AS 10000 Local AS 10000 Link type IBGP Remote router ID 3 3 3 3 Local router ID 5 5 5 5 next hop self disabled RR client disabled BGP status established Old status established Total recei...

Page 100: ...f this group 97 192 168 128 4 Group 1 toG82642007 TTL 1 Remote AS 200 Local AS 100 Link type EBGP Remote router ID 2 2 1 2 Local router ID 1 1 1 2 Configured Version 4 Negotiated Version 4 Total path attribute out 0 In Total Messages 74 Out Total Messages 74 In Updates 0 Out Updates 0 Established Time 01 12 36 MinAdvTime 00 01 00 Configured holdtime 00 03 00 Negotiated holdtime 00 03 00 Configured...

Page 101: ...rk IPv4 mask longer_prefix Command mode All The IPv4 network and mask options restrict the output to a specific network in the BGP routing table BGP Peer Summary Information Peer V AS MsgRcvd MsgSent Up Down State 1 205 178 23 142 4 142 113 121 00 00 28 established 2 205 178 15 148 0 148 0 0 never connect Status codes valid best multipath i internal Origin codes i IGP e EGP incomplete Network Mask...

Page 102: ...de All show ip ospf area range 1 16 Displays the current OSPF summary range settings Command mode All show ip ospf area virtual link 1 3 Displays the current OSPF virtual link settings Command mode All show ip ospf area virtual link information Displays information about all the configured virtual links Command mode All show ip ospf general information Displays general OSPF information See page 10...

Page 103: ...F information for all ports or a particular port For details see page 105 Command mode All show ip ospf neighbor Displays the status of all the current neighbors Command mode All show ip ospf redistribute Displays the current OSPF redistribute settings Command mode All show ip ospf routes Displays OSPF routing table See page 105 for a sample output Command mode All show ip ospf summary range 0 19 ...

Page 104: ...is 1 16 new lsa received and 34 lsa originated from this router Total number of entries in the LSDB 10 Database checksum sum 0x0 Total neighbors are 1 of which 2 are INIT state 2 are EXCH state 2 are FULL state Number of areas is 2 of which 3 transit 0 nssa Area Id 0 0 0 0 Authentication none Import ASExtern yes Number of times SPF ran 8 Area Border Router count 2 AS Boundary Router count 0 LSA co...

Page 105: ...nated Router ID 0 0 0 0 Ip Address 0 0 0 0 Timer intervals Hello 10 Dead 40 Wait 40 Retransmit 5 Transit delay 1 Neighbor count is 0 If Events 1 Authentication type none Ip Address 10 241 39 82 Area 0 0 0 0 Admin Status UP Router ID 1 1 1 1 State Waiting Priority 1 Designated Router ID 0 0 0 0 Ip Address 0 0 0 0 Backup Designated Router ID 0 0 0 0 Ip Address 0 0 0 0 Timer intervals Hello 10 Dead 4...

Page 106: ...SAs The usage of this command is as follows asbr summary advertising router 20 1 1 1 displays ASBR summary LSAs having the advertising router 20 1 1 1 asbr summary link state id 10 1 1 1 displays ASBR summary LSAs having the link state ID 10 1 1 1 asbr summary self displays the self advertised ASBR summary LSAs asbr summary with no parameters displays all the ASBR summary LSAs Command mode All sho...

Page 107: ... of the LSAs Command mode All show ip ospf database router advertising router router ID IP address link state id link state ID IP address self Displays the router type 1 LSAs with detailed information of each field of the LSAs Command mode All show ip ospf database self Displays all the self advertised LSAs No parameters are required Command mode All show ip ospf database summary advertising route...

Page 108: ...ation Displays OSPFv3 summary ranges Command mode All show ipv6 ospf area virtual link 1 3 Displays the current OSPFv3 virtual link settings Command mode All show ipv6 ospf area virtual link information Displays information about all the configured virtual links Command mode All show ipv6 ospf border routers Displays OSPFv3 routes to an ABR or ASBR Command mode All show ipv6 ospf host 1 128 Displa...

Page 109: ...3 redistribution information to be applied to routes learned from the route table Command mode All show ipv6 ospf request list nbr router ID IP address Displays the OSPFv3 request list If no router ID is supplied it displays the information about all the current neighbors Command mode All show ipv6 ospf retrans list nbr router ID IP address Displays the OSPFv3 retransmission list If no router ID i...

Page 110: ...ary Router Redistributing External Routes from connected metric 10 metric type asExtType1 no tag set Number of Areas in this router 1 Area 0 0 0 0 Number of interfaces in this area is 1 Number of Area Scope Lsa 7 Checksum Sum 0x28512 Number of Indication Lsa 0 SPF algorithm executed 2 times Ospfv3 Interface Information Interface Id 1 Instance Id 0 Area Id 0 0 0 0 Local Address fe80 222 ff fe7d 5d0...

Page 111: ... information If no parameter is supplied it displays condensed information Command mode All show ipv6 ospf database intra prefix detail hex Displays Intra Area Prefix LSAs database information If no parameter is supplied it displays condensed information Command mode All show ipv6 ospf database link detail hex Displays Link LSAs database information If no parameter is supplied it displays condense...

Page 112: ...ipv6 ospf routes Command mode All Dest NextHp Cost Rt Type Area Prefix Length IfIndex 3ffe 10 0 0 0 fe80 290 69ff 30 interArea 0 0 0 0 80 fe90 b4bf vlan1 3ffe 20 0 0 0 fe80 290 69ff 20 interArea 0 0 0 0 80 fe90 b4bf vlan1 3ffe 30 0 0 0 vlan2 10 intraArea 0 0 0 0 80 3ffe 60 0 0 6 fe80 211 22ff 10 interArea 0 0 0 0 128 fe33 4426 vlan2 ...

Page 113: ... Displays the current RIP configuration Command mode All show ip rip interface IP interface number port port alias or number Displays the current RIP interface configuration For more information see page 114 Command mode All show ip rip redistribute Displays the current RIP route redistribute configuration Command mode All show ip rip routes Displays RIP routes For more information see page 114 Co...

Page 114: ...routes RIP Interface Information The following command displays RIP user information show ip rip interface interface number Command mode All IP Routing 30 1 1 0 24 directly connected 3 0 0 0 8 via 30 1 1 11 metric 4 4 0 0 0 16 via 30 1 1 11 metric 16 10 0 0 0 8 via 30 1 1 2 metric 3 20 0 0 0 8 via 30 1 1 2 metric 2 RIP USER CONFIGURATION RIP ON update 30 RIP on Interface 49 101 1 1 10 enabled vers...

Page 115: ...tination IPv6 address Command mode All show ipv6 route gateway IPv6 gateway address Displays routes to a single gateway Command mode All show ipv6 route interface interface number Displays routes on a single interface Command mode All show ipv6 route static Displays the current static route configuration Command mode All show ipv6 route summary Displays a summary of IPv6 routing information includ...

Page 116: ...hat the first number inside the brackets represents the metric and the second number represents the preference for the route IPv6 Routing Table 3 entries Codes C Connected S Static O OSPF D Data Gateway from RA M Management Gateway N Management Gateway from RA S 0 1 20 via 2001 2 3 4 1 Interface 2 C 2001 2 3 4 64 1 1 via Interface 2 C fe80 20f 6aff feec f701 128 1 1 ...

Page 117: ...re information see page 117 Command mode All show ipv6 neighbors find IPv6 address Displays a single IPv6 Neighbor Cache entry by IP address Command mode All show ipv6 neighbors interface port port alias or number Displays IPv6 Neighbor Cache entries on a single port Command mode All show ipv6 neighbors static Displays static IPv6 Neighbor Cache entries Command mode All show ipv6 neighbors vlan VL...

Page 118: ...rmation includes information about all configured prefixes The following command displays IPv6 Neighbor Discovery prefix information for an interface show ipv6 prefix interface interface number Command mode All Codes A Address P Prefix Advertisement D Default N Not Advertised L On link Flag is set A Autonomous Flag is set AD 10 64 LA Valid lifetime 2592000 Preferred lifetime 604800 P 20 64 LA Vali...

Page 119: ...ation shows the status of each ECMP route configured on the switch Current ecmp static routes Destination Mask Gateway If GW Status 10 10 1 1 255 255 255 255 100 10 1 1 1 up 200 20 2 2 1 down 10 20 2 2 255 255 255 255 10 233 3 3 1 up 10 20 2 2 255 255 255 255 10 234 4 4 1 up 10 20 2 2 255 255 255 255 10 235 5 5 1 up ECMP health check ping interval 1 ECMP health check retries number 3 ECMP Hash Mec...

Page 120: ...ddress Displays a single IGMP multicast group by its IP address Command mode All show ip igmp groups detail IP address Displays details about an IGMP multicast group including source and timer information Command mode All show ip igmp groups interface port port alias or number Displays all IGMP multicast groups on a single port Command mode All show ip igmp groups portchannel 1 128 Displays all IG...

Page 121: ... for the specified VLAN Command mode All show ip igmp profile 1 16 Displays information about the current IGMP filter Command mode All show ip igmp querier port port alias or number Displays IGMP Querier information for a particular port Command mode All show ip igmp querier vlan VLAN ID 1 4094 Displays IGMP Querier information for a particular VLAN For details see page 122 Command mode All show i...

Page 122: ...nds Querier election type IPv4 or MAC and address Query interval Querier startup interval Maximum query response interval Querier robustness value IGMP version number Current IGMP Querier information IGMP Querier information for vlan 1 Other IGMP querier none Switch querier enabled current state Querier Switch querier type Ipv4 address 1 1 1 1 Switch querier general query interval 125 secs Switch ...

Page 123: ...er is connected IGMP version Mrouter expiration Maximum query response time Querier s Robustness Variable QRV Querier s Query Interval Code QQIC Total entries 5 Total IGMP groups 2 Note The Total IGMP groups number is computed as the number of unique Group Vlan entries Note Local groups 224 0 0 x are not snooped and will not appear Source Group VLAN Port Version Mode Expires Fwd 10 1 1 1 232 1 1 1...

Page 124: ... source address IGMP group address VLAN and port Type of IPMC group Expiration timer value Total number of displayed ipmc groups 4 Legend possible values in Type column SH static host DR dynamic registered SP static primary DU dynamic unregistered SB static backup M mrouter O other Source Group Vlan Port Type Timeleft 232 0 0 1 1 DU 6 sec 232 0 0 2 1 DU 6 sec 232 0 0 3 1 DU 6 sec 232 0 0 4 1 DU 6 ...

Page 125: ...cified IPv6 address Command mode All show ipv6 mld groups interface port port alias or number Displays MLD groups on a single interface port Command mode All show ipv6 mld groups portchannel 1 128 Displays groups on a single port channel Command mode All show ipv6 mld groups vlan VLAN ID 1 4094 Displays groups on a single VLAN Command mode All show ipv6 mld interface 1 126 Displays information for...

Page 126: ... Source Displays the link local address of the reporter Port Vlan Displays the port vlan on which the general query is received Interface Displays the interface number on which the general query is received QRV Displays the Querier s robustness variable value QQIC Displays the Querier s query interval code MaximumResponse Delay Displays the configured maximum query response time Version Displays t...

Page 127: ...x and Usage show ip vrrp Displays the current VRRP parameters Command mode All show ip vrrp group Displays the current configuration information for the virtual router group Command mode All show ip vrrp group track Displays the current configuration for priority tracking for the virtual router Command mode All show ip vrrp information Displays VRRP information For details see page 128 Command mod...

Page 128: ...er identifies virtual routers which are not owned by this device Priority value During the election process the virtual router with the highest priority becomes master Activity status master identifies the elected master virtual router backup identifies that the virtual router is in backup mode init identifies that the virtual router is waiting for a startup event For example once it receives a st...

Page 129: ...Pv4 interface address and subnet mask IPv6 address and prefix VLAN assignment Status up down or disabled Interface information 1 IP4 192 168 49 50 255 255 255 0 192 168 49 255 vlan 1 DOWN 2 IP6 3003 0 0 0 0 0 0 5 64 vlan 2 up fe80 213 aff fe4f 7c02 128 IP4 192 168 50 50 255 255 255 0 192 168 50 255 vlan 4095 up Routed Port Interface Information Loopback interface information lo1 192 168 48 48 255 ...

Page 130: ...tatus of ICMP redirects Status of Neighbor Discovery ND Duplicate Address Detection DAD Status of Neighbor Discovery router advertisements Interface information 2 IP6 2001 0 0 0 225 3ff febb bb15 64 vlan 1 up fe80 225 3ff febb bb15 Link local address fe80 225 3ff febb bb15 Global unicast address es 2001 225 3ff febb bb15 64 Anycast address es Not Configured Joined group address es ff02 1 ff02 2 ff...

Page 131: ...tries in the Path MTU cache The PMTU field indicates the maximum packet size in octets that can successfully traverse the path from the switch to the destination node It is equal to the minimum link MTU of all the links in the path to the destination node Path MTU Discovery info Max Cache Entry Number 10 Current Cache Entry Number 2 Cache Timeout Interval 10 minutes Destination Address Since PMTU ...

Page 132: ...ddress 0 0 0 0 Server 2 address 0 0 0 0 Server 3 address 0 0 0 0 Server 4 address 0 0 0 0 Server 5 address 0 0 0 0 Current BOOTP relay option 82 settings OFF Current BOOTP relay option 82 policy Replace Current DHCP Snooping settings Off DHCP Snooping is configured on the following VLANs empty Insertion of option 82 information is Disable Interface Trusted Rate limit pps 1 No none 2 No none 3 No n...

Page 133: ...s VLAN number and operational status Default gateway information Metric for selecting which configured gateway to use gateway number IP address and health status BootP relay settings IP forwarding settings including the forwarding status of directed broadcasts and the status of ICMP re directs Network filter settings if applicable Route map settings if applicable ...

Page 134: ... show ikev2 ca cert Displays the CA certificate Command mode All show ikev2 host cert Displays the host certificate Command mode All show ikev2 identity Displays IKEv2 identity information Command mode All show ikev2 preshare key Displays the IKEv2 preshare key Command mode All show ikev2 proposal Displays the IKEv2 proposal Command mode All show ikev2 retransmit interval Displays the IKEv2 retran...

Page 135: ...and the Diffie Hellman DH group which determines the strength of the key used in the key exchange process Higher DH group numbers are more secure but require additional time to compute the key The local preshare key Whether IKEv2 is using IPv4 or IPv6 addresses as the ID type Security Association Database SAD entries if applicable IKEv2 retransmit time 20 IKEv2 cookie notification disable IKEv2 au...

Page 136: ...nformation Command mode All show ipsec manual policy 1 10 Displays manual policy information See page 137 for sample output Command mode All show ipsec sa Displays all security association information Command mode All show ipsec spd Displays all security policy information Command mode All show ipsec traffic selector 1 10 Displays IPsec traffic selector information Command mode All show ipsec tran...

Page 137: ...nd SPI ESP inbound encryption key ESP inbound authentication key ESP outbound SPI ESP outbound encryption key ESP outbound authentication key The interface to which this manual policy has been applied IPsec manual policy 1 IP Address 2002 0 0 0 0 0 0 151 Associated transform ID 1 Associated traffic selector ID 1 IN ESP SPI 9900 IN ESP encryption KEY 3456789abcdef012 IN ESP authentication KEY 23456...

Page 138: ...nooping is configured on the following VLANs empty Insertion of option 82 information is Disable Interface Trusted Rate limit pps 1 No none 5 No none 6 No none 7 No none 8 No none 9 No none 10 No none 11 No none 12 No none 13 No none 14 No none 15 No none Mac Address IP Address Lease seconds Type VLAN Interface 00 00 01 00 02 01 10 0 0 1 1600 dynamic 100 port 1 02 1c 5f d1 18 9c 210 38 197 63 8633...

Page 139: ...rface information To view sample output see page 140 Command mode All show ip pim mroute Displays information about PIM multicast routes For more information about displaying PIM multicast route information see page 142 Command mode All show ip pim neighbor interface number port port alias or number Displays PIM neighbor information To view sample output see page 141 Command mode All show ip pim n...

Page 140: ...M Interface Information The following command displays information about PIM interfaces show ip pim interface Command mode All PIM interface information includes the following for each PIM interface IP address Name and ID Version and mode Neighbor count Query interval Designated Router address Designated Router priority value PIM Component Information Component Id 1 PIM Mode sparse PIM Version 2 E...

Page 141: ...me and ID of interface used to reach the PIM neighbor Up time the time since this neighbor became the neighbor of the local router Expiry Time the minimum time remaining before this PIM neighbor expires Version number Designated Router priority and mode Component ID Override interval LAN delay interval Neighbour IfName Idx Uptime Expiry Ver DRPri Mode CompId Override Lan Address Interval Delay 40 ...

Page 142: ...utes of each type Command mode All show ip pim mroute flags s r w Displays PIM multicast routes based on the selected entry flags Enter flags in any combination s Shortest Path Tree SPT bit r Rendezvous Point Tree RPT bit w Wildcard bit Command mode All show ip pim mroute group multicast group IP address Displays PIM multicast routes for the selected multicast group Command mode All show ip pim mr...

Page 143: ... Flags S SPT Bit W Wild Card Bit R RPT Bit Timers Uptime Expires 8 8 8 111 224 2 2 100 00 42 03 00 01 11 Incoming Interface net44 RPF nbr 44 44 44 1 Route Flags S Outgoing InterfaceList net17 Forwarding Sparse 00 42 03 224 2 2 100 00 45 15 RP 88 88 88 2 Incoming Interface net5 RPF nbr 5 5 5 2 Route Flags WR Outgoing InterfaceList net17 Forwarding Sparse 00 45 15 Total number of G entries 1 Total n...

Page 144: ...gured for each reserved packet queue Command mode All show qos protocol packet control information protocol Displays of mapping of protocol packet types to each packet queue number The status indicates whether the protocol is running or not running Command mode All show qos random detect Displays WRED and ECN information For details see page 146 Command mode All show qos transmit queue Displays th...

Page 145: ...1 1 2 2 2 3 3 2 3 4 4 5 5 5 7 6 6 15 7 7 0 Current priority to Multicast COS queue information Priority mcCOSq Weight 0 8 2 1 8 2 2 9 5 3 9 5 4 10 7 5 10 7 6 11 15 7 11 15 Current port priority information Port Priority COSq Weight 1 0 0 1 2 0 0 1 3 0 0 1 4 0 0 1 5 0 0 1 9 0 0 1 13 0 0 1 64 0 0 1 MGT 0 0 1 Table 62 802 1p Priority to COS Queue Parameter Descriptions Parameter Description Priority ...

Page 146: ...ions Parameter Description Port Displays the port alias Priority Displays the 802 1p Priority level COSq Displays the Class of Service queue Weight Displays the scheduling weight Current wred and ecn configuration Global ECN Disable Global WRED Disable WRED TcpMinThr TcpMaxThr TcpDrate NonTcpMinThr NonTcpMaxThr NonTcpDrate TQ0 Dis 0 0 0 0 0 0 TQ1 Dis 0 0 0 0 0 0 TQ2 Dis 0 0 0 0 0 0 TQ3 Dis 0 0 0 0...

Page 147: ...ation Command mode All show access control list 1 256 Displays ACL list information For details see page 148 Command mode All show access control list6 1 128 Displays IPv6 ACL list information For details see page 150 Command mode All show access control log Displays the current ACL log parameters Command mode All show access control macl 1 128 Displays the current MACL parameters Command mode All...

Page 148: ... specified ACL Command mode All show access control list 1 256 log Displays the current IPv4 ACL log state Command mode All show access control list 1 256 meter Displays the current metering parameters for the specified ACL Command mode All show access control list 1 256 mirror Displays the current port mirroring parameters for the specified ACL Command mode All show access control list 1 256 pack...

Page 149: ...et committed rate 64 Set max burst size 32 Re Mark Set use of TOS precedence to disabled Packet Format Ethernet format None Tagging format Any IP format None Actions Deny Statistics enabled Mirror Target Configuration Mirror target destination port Egress port for mirror target 4 Filter 1 profile route map 16 IPv4 Protocol 17 Actions Permit dscp 22 Statistics enabled Installed on Port 16 Table 66 ...

Page 150: ...IPv6 Access Control List Information Commands Command Syntax and Usage show access control list6 1 128 Displays the current ACL parameters Command mode All show access control list6 1 128 ipv6 Displays the current IPv6 parameters for the specified ACL Command mode All show access control list6 1 128 log Displays the current IPv6 ACL log state Command mode All show access control list6 1 128 meter ...

Page 151: ... information see page 154 group displays group information for all OpenFlow 1 3 instances For more information see page 156 information displays the configuration for all OpenFlow instances For more information see page 157 table displays the basic and emergency flow tables for all OpenFlow instances For more information see page 159 Command mode All show openflow instance 1 2 group information ta...

Page 152: ...t Disabled Openflow instance 1 is currently disabled Openflow Instance ID 2 state enabled buffering disabled retry 4 emergency time out 30 echo req interval 30 echo reply time out 15 min flow timeout use controller provided values max flows acl Maximum Available max flows unicast fdb Maximum Available max flows multicast fdb Maximum Available emergency feature disabled dpid 0x0002749975ab5c00 port...

Page 153: ...00000000000ac01 table miss cookie 0xffffffffffffffff mirror to controller cookie 0xffffffffffffffff send to controller cookie 0xffffffffffffffff ports 18 64 portchannel 65 66 Controller Id 1 Active Controller IP Address 9 228 143 62 port 6633 Mgt Port Openflow Instance ID 2 state disabled buffering disabled table miss drop echo req interval 30 echo reply time out 15 retry 4 min flow timeout use co...

Page 154: ...igured Maximum Available Maximum Unicast FDB Count Configured Maximum Available Maximum Multicast FDB Count Configured Maximum Available Basic Entries Current ACL Count 3 Current Unicast FDB Count 0 Current Multicast FDB Count 0 Emergency Entries Current ACL Count 0 Current Unicast FDB Count 0 Current Multicast FDB Count 0 Maximum Current Availability Maximum Available ACL Count 747 Maximum Availa...

Page 155: ... Available Basic Entries Current ACL Count 3 Current Unicast FDB Count 0 Current Multicast FDB Count 0 Current MPLS PUSH Count 0 Current MPLS POP Count 0 Static Entries Current static ACL Count 0 Current static Unicast FDB Count 0 Current static Multicast FDB Count 0 Current static MPLS PUSH Count 0 Current static MPLS POP Count 0 Maximum Current Availability Maximum Available ACL Count 747 Maximu...

Page 156: ...ces show openflow group Command mode All Openflow Instance Id 1 Group count 3 Group 1 Type ALL Bucket count 2 Bucket 0 output INGRESS Bucket 1 output 1 Group 2 Type ALL Bucket count 2 Bucket 0 output INGRESS Bucket 1 output PCH104 Group 3 Type ALL Bucket count 2 Bucket 0 output PCH52 Bucket 1 output PCH104 Openflow instance 2 is currently disabled ...

Page 157: ...t 30 Min flow timeout 0 use controller provided values Max ACL Flows Maximum Available Max Unicast FDB Flows Maximum Available Max Multicast FDB Flows Maximum Available Buffering Disabled Operational Mode Normal Miss Send Len 65535 Port Alias Status State Config Current Advertised Supported Peer 18 18 e 0x200 0x2 0xc0 0x0 0x0 0x0 19 19 e 0x200 0x2 0xc0 0x0 0x0 0x0 24 24 d 0x201 0x2 0xc0 0x0 0x0 0x...

Page 158: ...ailable Max Unicast FDB Flows Maximum Available Max Multicast FDB Flows Maximum Available Max MPLS Push Flows Maximum Available Max MPLS Pop Flows Maximum Available Buffering Disabled Table Miss Drop Operational Mode Normal Miss Send Len 65535 Port Alias Status State Config Current Advertised Supported Peer 18 18 e 0x0 0x0 0x840 0x0 0x0 0x0 64 64 e 0x0 0x0 0x2820 0x0 0x0 0x0 10065 PCH65 e 0x0 0x0 ...

Page 159: ...e out 0 cookie 0x0 QUALIFIERS ether type 0x88cc protocol 0 tos 0 src ip 0 0 0 0 32 dst ip 0 0 0 0 32 src port 0 dst port 0 ACTION output CONTROLLER Max Len 65535 bytes C S STATS packets 0 bytes 0 Flow 3 Filter Based priority 2 hard time out 0 idle time out 0 cookie 0x0 QUALIFIERS ACTION output CONTROLLER Max Len 65535 bytes C S STATS packets 0 bytes 0 EMERGENCY FLOW TABLE CONTROLLER ADDED FLOWS Fl...

Page 160: ...y 2 hard time out 0 idle time out 0 cookie 0x0 QUALIFIERS Instruction write_action ACTION output CONTROLLER Max Len 65535 bytes C S STATS packets 0 bytes 0 Flow 2 Filter Based priority 65535 hard time out 0 idle time out 0 cookie 0x0 QUALIFIERS eth type 0x88cc Instruction write_action ACTION output CONTROLLER Max Len 65535 bytes C S STATS packets 121 bytes 7744 Flow 3 Filter Based priority 0 hard ...

Page 161: ... Options Command Syntax and Usage show rmon Displays all RMON information Command mode All show rmon alarm 1 65535 Displays RMON Alarm information For details see page 163 Command mode All show rmon event 1 65535 Displays RMON Event information For details see page 164 Command mode All show rmon history 1 65535 Displays RMON History information For details see page 162 Command mode All ...

Page 162: ...2 2 1 1 20 30 5 5 4 1 3 6 1 2 1 2 2 1 1 19 30 5 5 5 1 3 6 1 2 1 2 2 1 1 24 1800 5 5 Index Owner 1 dan Table 70 RMON History Parameter Descriptions Parameter Description Index Displays the index number that identifies each history instance IFOID Displays the MIB Object Identifier Interval Displays the time interval for each sampling bucket Rbnum Displays the number of requested buckets which is the...

Page 163: ...ing thresholds Sample Displays the method of sampling the selected variable and calculating the value to be compared against the thresholds as follows abs absolute value the value of the selected variable is compared directly with the thresholds at the end of the sampling interval delta delta value the value of the selected variable at the last sample is subtracted from the current value and the d...

Page 164: ...e Last Sent Description 1 both 0D 0H 1M 20S Event_1 2 none 0D 0H 0M 0S Event_2 3 log 0D 0H 0M 0S Event_3 4 trap 0D 0H 0M 0S Event_4 5 both 0D 0H 0M 0S Log and trap event for Link Down 10 both 0D 0H 0M 0S Log and trap event for Link Up 11 both 0D 0H 0M 0S Send log and trap for icmpInMsg 15 both 0D 0H 0M 0S Send log and trap for icmpInEchos Index Owner 1 dan Table 72 RMON Event Parameter Description...

Page 165: ... about each port on the G8264 including Port alias or port number Port description Port speed and Duplex mode half full or any Flow control for transmit and receive no yes or both Link status up down or disabled Alias Port Speed Duplex Flow Ctrl Link Description TX RX 1 1 10000 full no no down 1 60 60 10000 full no no down 60 61 61 10000 full no no up 61 62 62 10000 full no no up 62 63 63 10000 fu...

Page 166: ... PVID Native VLAN tagging or not Port VLAN ID PVID Port description VLAN membership Alias Port Tag Type RMON Lrn Fld Openflow PVID DESCRIPTION VLAN s Trk NVLAN 1 1 n External d e e d 1 1 2 2 n External d e e d 1 1 3 3 n External d e e d 1 1 4 4 n External d e e d 1 1 5 5 n External d e e d 1 1 9 9 n External d e e d 1 1 13 13 n External d e e d 1 1 17 17 n External d e e d 1 1 18 18 n External d e...

Page 167: ...d 2 Q10G 1 B LINK PasQDBO B 1 0m BLADE NETWORK BN QS SP CBL 1M Approved 3 Q10G 1 C LINK PasQDBO C 1 0m BLADE NETWORK BN QS SP CBL 1M Approved 4 Q10G 1 D LINK PasQDBO D 1 0m BLADE NETWORK BN QS SP CBL 1M Approved 5 Q10G 2 A NO Device Installed 6 Q10G 2 B NO Device Installed 7 Q10G 2 C NO Device Installed 8 Q10G 2 D NO Device Installed 9 QSFP 3 LINK UnEqQD 3 0m BLADE NETWORK BN QS QS CBL 3M Accepted...

Page 168: ...ransceiver information show interface port port alias or number transceiver details Command mode All Port TX Link TXFlt Volts DegsC TXuW RXuW Transceiver Approve 1 Q10G 1 A Ena LINK N A N A N A N A N A PasQD 1 0m Approved BLADE NETWORK Part BN QS QS CBL 1M Date 110925 S N 3548Y350VT19P8EM ...

Page 169: ...s Virtual Machine information for the selected port For a sample output see page 172 Note The selected port must be a server port Command mode All show virt portchannel 1 128 Displays Virtual Machine information for the selected portchannel For a sample output see page 172 Command mode All show virt vm v r Displays all Virtual Machine information v displays verbose information r rescans data cente...

Page 170: ...nclude displays parameters matching the specified expression exclude displays parameters not matching the specified expression section displays parameters matching the specified section begin displays parameters beginning from the first parameter that matches the specified expression For a sample output see page 174 Command mode All show virt vmprofile profile name Displays the current VM Profile ...

Page 171: ... Current VMware specific settings ESX ESXi to vCenter heartbeat UDP port number 902 Current VM profiles None VM group 1 current configuration Current VM group s secure mode Disabled Current Group Ports 13 17 Current Group vPorts empty VLAN 2 VLAN Tagging Disabled Current GROUP VMAP Config is empty VM group 2 current configuration empty VM MAC OUI Vendor Name 00 50 56 VMware 00 0c 29 VMware 00 05 6...

Page 172: ...ic portchannel show virt portchannel 1 128 Command mode All IP Address VMAC Address Index Port VM Group Profile Check status 3 3 3 2 00 50 56 a5 32 f7 0 23 40 40 31 1 00 50 56 a5 4e 9f 1 23 30 test30 Number of entries 2 IP Address VMAC Address Index Port VM Group Profile Check status 5 5 5 2 00 50 56 a5 17 07 2 ST 5 0 0 0 0 00 50 56 a5 4b 03 4 ST 5 5 5 5 3 00 50 56 af 20 6f 3 ST 5 Number of entrie...

Page 173: ...mand displays VM Check information show virt vmcheck Command mode All IP Address VMAC Address Index Port VM Group Profile Check Status 127 31 46 50 00 50 56 4e 62 f5 4 3 127 31 46 10 00 50 56 4f f2 85 2 4 127 31 46 51 00 50 56 72 ec 86 1 3 127 31 46 11 00 50 56 7c 1c ca 3 4 127 31 46 25 00 50 56 9c 00 c8 5 4 127 31 46 15 00 50 56 9c 21 2f 0 4 127 31 46 35 00 50 56 9c 29 29 6 3 Number of entries 7 ...

Page 174: ...mand mode All VM Profile Information The following command displays VM Profile parameters show virt vmprofile Command mode All VM group 1 current configuration Current VM group s secure mode Disabled Current Group Ports 13 17 Current Group vPorts empty VLAN 2 Tagging Trunk mode Disabled Current GROUP VMAP Config is empty Bandwidth Profile for VM 00 50 56 a5 32 f7 is enabled TX Rate 1024 Burst 2048...

Page 175: ...list of VMware hosts For a sample output see page 176 Command mode All show virt vmware showhost host UUID host IP address host name Displays detailed information about a specific VMware host For a sample output see page 177 Command mode All show virt vmware showvm VM UUID VM IP address VM name Displays detailed information about a specific Virtual Machine VM For a sample output see page 178 Comma...

Page 176: ...e following UUID associated with the VMware host Name or IP address of the VMware host Current Settings Hello Disabled Hello timer 23 seconds Hello ports 13 Hello address 10 36 30 1 UUID Name s IP Address 80a42681 d0e5 5910 a0bf bd23bd3f7803 127 12 41 30 3c2e063c 153c dd11 8b32 a78dd1909a69 127 12 46 10 64f1fe30 143c dd11 84f2 a8ba2cd7ae40 127 12 44 50 c818938e 143c dd11 9f7a d8defa4b83bf 127 12 4...

Page 177: ... d8 vmnic3 vSwitch1 00 00 c9 da f5 dc vusb0 None 5e f3 fc 4f f0 e7 Port Groups and their vSwitches on the host Lenovo_test vSwitch0 VM Network vSwitch0 Management Network vSwitch0 Lenovo_Default vSwitch1 Lenovo_test30 vSwitch1 Lenovo_test40 vSwitch1 VM Network 2 vSwitch1 Lenovo_test50 vSwitch1 Lenovo_unu vSwitch1 Detailed information about host and VM interfaces on this hypervisor MAC Address 5c f...

Page 178: ...t Available VM IP Address 3 3 3 2 VM UUID 422547ad 0ef7 5992 1184 63aa9030377e Current VM Host 10 241 32 131 vSwitch vSwitch1 Port Group Lenovo_Default VLAN ID 0 Rescanning data center Please wait UUID Name s IP Address 42312c26 2a75 c05b eed2 6d837ac46fdd SNSC 4225801c dfdb 061d 65e4 4e4860d6fbcf arch2_06 42253440 6de7 7416 8a29 fb462114ead0 arch2_05 422f49df bf88 e4d5 6cee 047a626029aa arch2_4_c...

Page 179: ...on about each vNIC The all option displays information about all the vNICs For a sample output see page 180 Command mode All show vnic vnicgroup 1 32 Displays information about each vNIC Group including Status enabled or disabled VLAN assigned to the vNIC Group Uplink Failover status enabled or disabled Link status for each vNIC up down or disabled Port link status for each port associated with th...

Page 180: ...located to the vNIC vNIC type default or FCoE MAC address of the vNIC if applicable Link status up down or disabled Current Settings for vNIC Feature State On vNICs 11 1 Enabled Max Bandwidth increments of 100Mbps 25 vNIC Group 32 Enabled VLAN 32 vNICs 11 1 Ports empty Uplink Port 20 Uplink failover Enabled vNIC vNICGroup Vlan MaxBandwidth Type MACAddress Link 1 1 10 10 25 default none down 50 2 4...

Page 181: ...udes the following for each vNIC Group Status enabled or disabled VLAN assigned to the vNIC Group Uplink Failover status enabled or disabled Link status for each vNIC up down or disabled Port link status for each port associated with the vNIC Group up down or disabled vNIC Group 1 enabled VLAN 3001 Failover enabled vNIC Link 1 1 up 7 1 up 8 1 down 9 1 up 10 1 up Port Link 2 up UplinkPort Link 10 u...

Page 182: ...profile ports Displays all EVB profile parameters including ports Command mode All show virt evb vdp tlv Displays all active Virtual Station Interface VSI Discovery and Configuration Protocol VDP type length values TLVs Command mode All show virt evb vdp vm Displays all associated Virtual Machines VMs For a sample output see page 184 Command mode All show virt evb vsidb VSI database number 1 Displ...

Page 183: ...000 TxBurst 64 RxRate 10000000 RxBurst 64 ACL Index 1 SRC MAC 00 00 00 00 00 00 SRC MAC MASK 00 00 00 00 00 00 DST MAC ff ff ff ff ff ff DST MAC MASK ff ff ff ff ff ff VLAN 0 0x000 Ether Type 0x0800 IPv4 SRC IP 0 0 0 0 SRC IP MASK 0 0 0 0 DST IP 0 0 0 0 DST IP MASK 0 0 0 0 TOS 0 0x00 ACL Action deny ACL Index 2 SRC MAC 00 00 00 00 00 00 SRC MAC MASK 00 00 00 00 00 00 DST MAC ff ff ff ff ff ff DST ...

Page 184: ...ther Type 0x0800 IPv4 SRC IP 0 0 0 0 SRC IP MASK 0 0 0 0 DST IP 0 0 0 0 DST IP MASK 0 0 0 0 TOS 0 0x00 ACL Action deny ACL Index 2 SRC MAC 00 00 00 00 00 00 SRC MAC MASK 00 00 00 00 00 00 DST MAC ff ff ff ff ff ff DST MAC MASK ff ff ff ff ff ff VLAN 0 0x000 Ether Type 0x0000 ACL Action permit Total number of VM Association entries 2 TypeId MAC Vlan Port TxACL RxEntry ACLs 9 00 50 56 95 30 ec 50 13...

Page 185: ... enabled on the physical port how many virtual ports are enabled and the link stats for each virtual port For details see page 187 Command mode All show ufp information qos port port alias or number vport 1 8 Displays UFP Quality of Service QoS information such as bandwidth allocation Qos mode priority or host Class of Service COS control For details see page 188 Command mode All show ufp informat...

Page 186: ...e settings Command mode All show ufp receive transmit cap cdcp linkdown linkup prop port port alias or number Displays received transmitted Type Length Values for the specified ports cap displays the UFP Capability Discovery TLV cdcp displays the UFP Channel Discovery and Configuration Protocol TLV linkdown displays the UFP LINK DOWN TLV linkup displays the UFP LINK UP TLV prop displays the UFP NI...

Page 187: ... CDCP Information The following command displays S Channel Discovery and Configuration Protocol information show ufp information cdcp Command mode All CDCP information includes the following for each physical port Whether there is a channel set up CDCP communication status for active channels Alias Port state vPorts link up link down mismatch disabled 17 17 ena 2 2 3 18 18 dis 0 19 19 ena 2 2 3 20...

Page 188: ... the following Physical port number Virtual port number QoS mode Minimum guaranteed bandwidth allocated Maximum bandwidth achievable 802 1q port priority Host Class of Service COS Control setting UFP QOS Port Vport Mode Minbw Maxbw Prio HstCtrl 25 1 BW 25 100 2 BW 25 100 3 BW 25 100 4 BW 25 100 26 1 ETS 0 Dis 2 ETS 1 Dis 3 ETS 2 Dis 4 ETS 3 Dis 5 ETS 4 Dis 6 ETS 5 Dis 7 ETS 0 Dis 8 ETS 0 Dis ...

Page 189: ...lowing command displays Type Length Values information show ufp information tlvstat Command mode All TLV status information includes the following Physical port alias Type Length Values status 1 Success 2 Success 3 Disabled 4 Disabled 5 Disabled 6 Disabled 7 Disabled 8 Disabled 9 Disabled ...

Page 190: ... ports in auto mode used by QBG VLANs the virtual port is associated with vPort state mode svid defvlan deftag pvlan evb VLANs 10 1 dis tunnel 0 0 dis dis dis 10 2 dis tunnel 0 0 dis dis dis 10 3 dis tunnel 0 0 dis dis dis 10 4 dis tunnel 0 0 dis dis dis 10 5 up access 4006 20 dis trunk dis 20 10 6 up access 4007 11 dis host dis 11 10 7 dis tunnel 0 0 dis dis dis 10 8 dis tunnel 0 0 dis dis dis 12...

Page 191: ...nd mode All VLAN information includes the following for each VLAN VLAN ID Associated virtual ports Associated external ports Associated internal ports Associated UFP ports VLAN 14 vPort list 17 3 EXT Port list 41 42 INT Port list 18 UFP Port list 17 20 22 VMR Port list VLAN 100 vPort list 20 3 EXT Port list INT Port list UFP Port list 20 VMR Port list 20 ...

Page 192: ...A Status which include UFP Request and UFP Operation UFP Switch Status which includes UFP Capable and UFP Operation show ufp transmit cdcp port port alias or number Command mode All UFP Capability Discovery TLV Received on port INTA2 tlv Type 127 Length 7 OUI 00 18 b1 Subtype 1 version Max 1 Oper 1 cna Req 1 Oper 1 Res 0x00 switch Cap 1 Oper 1 Res 0x00 CDCP TLV Transmitted on port INTA2 tlv Type 1...

Page 193: ...op port port alias or number Command mode All UFP LINK DOWN TLV transmitted on port 14 Header Type 2 Length 3 Flags 0x0 Status 0x0 SCID 2 UFP NIC PROPS TLV transmitted on port 61 Header Type 1 Length 10 Flags 0x0 Status 0x0 Props Channel Type 1 SCHED Type 0 Res 0x0 Num VLAN 0 SCID 2 SVID 122 iSCSI 0 Host Pri 0 FCoE 0 TC 5 Min BW 0 Max BW 0 UFP LINK UP TLV received on port 59 Header Type 3 Length 3...

Page 194: ...nt global ETS or PFC parameters information displays global information priority group displays the current global Priority Group parameters Command mode All show cee information Displays all CEE information Command mode All show cee information dcbx port port alias or number Displays all DCBX information for the specified port or range of ports Command mode All show cee information pfc port port ...

Page 195: ...e All show cee information dcbx port port alias or number control Displays information about the DCBX Control state machine for the specified port or range of ports For details see page 196 Command mode All show cee information dcbx port port alias or number ets Displays information about the DCBX ETS state machine for the specified port or range of ports For details see page 199 Command mode All ...

Page 196: ...feature TLVs changes Sequence number of the most recent DCB feature TLV that has been acknowledged DCBX Port Control State machine Info Alias Port OperStatus OperVer MaxVer SeqNo AckNo 1 1 enabled 0 0 0 0 2 2 enabled 0 0 0 0 3 3 enabled 0 0 0 0 4 4 enabled 0 0 0 0 5 5 enabled 0 0 0 0 9 9 enabled 0 0 0 0 13 13 enabled 0 0 0 0 17 17 enabled 0 0 0 0 18 18 enabled 0 0 0 0 19 19 enabled 0 0 0 0 20 20 e...

Page 197: ... 0 0 No 1 No disabled No 4 4 ETS enabled No Yes 0 0 No 1 No disabled No 4 4 PFC enabled No Yes 0 0 No 1 No disabled No 4 4 AppProt disabled No Yes 0 0 No 1 No disabled No 5 5 ETS enabled No Yes 0 0 No 1 No disabled No 5 5 PFC enabled No Yes 0 0 No 1 No disabled No 5 5 AppProt disabled No Yes 0 0 No 1 No disabled No Table 80 DCBX Feature Information Fields Parameter Description Alias Displays each ...

Page 198: ...ce for ENOS 8 4 OperMode Operating status negotiated with the peer device enabled or disabled Syncd Synchronization status between this port and the peer Yes or No Table 80 DCBX Feature Information Fields Parameter Description ...

Page 199: ...1 PGID0 PGID0 2 2 4 PGID2 PGID0 PGID0 2 2 5 PGID2 PGID0 PGID0 2 2 6 PGID2 PGID0 PGID0 2 2 7 PGID2 PGID0 PGID0 DCBX Port Priority Group Bandwidth Allocation Table Alias Port PrioGrp BwDes BwOper BwPeer 2 2 0 10 10 50 2 2 1 50 50 50 2 2 2 40 40 0 Table 81 DCBX Feature Information Fields Parameter Description DCBX Port Priority Group Priority Allocation Table Alias Displays each port s alias Port Dis...

Page 200: ... Port Displays each port s number PrioGrp Displays each port s priority group BwDes Bandwidth allocation configured on this switch BwOper Bandwidth allocation negotiated with the peer operating bandwidth BwPeer Bandwidth allocation configured on the peer Table 81 DCBX Feature Information Fields continued Parameter Description ...

Page 201: ...lue EnableDesr Status configured on this switch EnableOper Status negotiated with the peer operating status EnablePeer Status configured on the peer DCBX Port Priority Flow Control Table Alias Port Priority EnableDesr EnableOper EnablePeer 2 2 0 disabled disabled disabled 2 2 1 disabled disabled disabled 2 2 2 disabled disabled disabled 2 2 3 enabled disabled disabled 2 2 4 disabled disabled disab...

Page 202: ... 2 1 disabled disabled disabled 2 2 2 disabled disabled disabled 2 2 3 enabled enabled enabled 2 2 4 disabled disabled disabled 2 2 5 disabled disabled disabled 2 2 6 disabled disabled disabled 2 2 7 disabled disabled disabled FIP Snooping Priority Information Protocol ID 0x8914 Selector Field 0 Organizationally Unique ID 0x1b21 Alias Port Priority EnableDesr EnableOper EnablePeer 2 2 0 enabled en...

Page 203: ...n Protocol ID Identifies the supported Application Protocol Selector Field Specifies the Application Protocol type as follows 0 Ethernet Type 1 TCP socket ID Organizationally Unique ID DCBX TLV identifier Alias Port alias Port Port number Priority 802 1p value EnableDesr Status configured on this switch EnableOper Status negotiated with the peer operating status EnablePeer Status configured on the...

Page 204: ...ber of Class of Service queues COSq configured 802 1p mapping to Priority Groups and Class of Service queues Bandwidth allocated to each Priority Group Table 83 ETS Information Options Command Syntax and Usage show cee global ets information Displays global ETS information Command mode All Global ETS information Number of COSq 8 Mapping of 802 1p Priority to Priority Groups Priority PGID COSq 0 0 ...

Page 205: ...mation Options Command Syntax and Usage show cee port port alias or number pfc Displays PFC information Command mode All show cee port port alias or number pfc information Displays PFC information Command mode All show cee port port alias or number pfc priority 0 7 Displays PFC information Command mode All PFC information for Port 1 PFC ON Priority State Description 0 Dis 1 Dis 2 Dis 3 Ena 4 Dis 5...

Page 206: ... show fcoe fips fcoe Displays FCoE connections learned detected Command mode All show fcoe fips information Displays FIP Snooping information for all ports Command mode All show fcoe fips port port alias or number information Displays FIP Snooping FIPS information for the specified port or ports including a list of current FIPS ACLs Command mode All show fcoe fips vlans Displays VLAN information C...

Page 207: ... This port has been configured to automatically detect FCF It has currently detected to have 0 FCF connecting to it FIPS ACLs configured on this port SMAC 00 c0 dd 13 9b 6f action deny SMAC 00 c0 dd 13 9b 70 action deny SMAC 00 c0 dd 13 9b 6d action deny SMAC 00 c0 dd 13 9b 6e action deny DMAC 00 c0 dd 13 9b 6f ethertype 0x8914 action permit DMAC 00 c0 dd 13 9b 70 ethertype 0x8914 action permit DM...

Page 208: ... All show script log script log filename Displays the content of a specified script log Command mode All show scheduler job Displays detailed information of all currently scheduled jobs For more information see page 209 Command mode All show scheduler job cpu limit Displays configured CPU usage limit value Command mode All show scheduler job name job name Displays detailed information of a specifi...

Page 209: ...r msec 255 Previous sys msec 16 Previous cpu usage 7 59 Execution count 1 Job name monitor syslog event LINKUP action exe_ping py Job name monitor State idle Previous process id 0 Next execution time NA Previous execution time Yet to be executed or completed Previous user msec 0 Previous sys msec 0 Previous cpu usage 0 0 Execution count 0 Table 87 Scheduler Job Information Fields Parameter Descrip...

Page 210: ...wned threads on the previous job execution Previous sys msec The CPU time consumed by system owned threads on the previous job execution Previous cpu usage The CPU percentage consumed by Python Scripting process on the previous job execution Execution count The number of times the job was executed Table 87 Scheduler Job Information Fields Parameter Description ...

Page 211: ...mp Command mode All Use the dump command to dump all switch information available 10K or more depending on your configuration This data is useful for tuning and debugging switch performance If you want to capture dump data to a file set your communication software on your workstation to capture session data prior to issuing the dump commands ...

Page 212: ...212 G8264 Command Reference for ENOS 8 4 ...

Page 213: ...d mode All show layer3 counters Displays Layer 3 statistics Command mode All show ntp counters Displays Network Time Protocol NTP Statistics See page 333 for a sample output and a description of NTP Statistics Command mode All show ptp counters Displays Precision Time Protocol Statistics See page 335 for a sample output and a description of PTP Statistics Command mode All show snmp server counters...

Page 214: ...ys IEEE 802 1X statistics for the port See page 217 for sample output Command mode All show interface port port alias or number egress queue counters queue number 0 7 drop Displays the total number of packets and bytes either successfully transmitted or dropped for each queue of the specified ports queue number filters the output to the specified queue number drop lists only the queues with droppe...

Page 215: ...for the port See page 229 for sample output Command mode All show interface port port alias or number ip rate Displays per second IP statistics for the port Command mode All show interface port port alias or number link counters Displays link statistics for the port See page 229 for sample output Command mode All show interface port port alias or number oam counters Displays Operation Administrati...

Page 216: ...es Command mode Privileged EXEC clear interface port port alias or number counters Clears all statistics for the port Command mode Privileged EXEC clear interface port port alias or number egress queue counter Clears all QoS egress counters for the specified ports for all queues Command mode Privileged EXEC clear ip bootp relay counters interface port alias or number Clears BOOTP relay statistics ...

Page 217: ...cs of a Port Statistics Description eapolFramesRx Total number of EAPOL frames received eapolFramesTx Total number of EAPOL frames transmitted eapolStartFramesRx Total number of EAPOL Start frames received eapolLogoffFramesRx Total number of EAPOL Logoff frames received eapolRespIdFramesRx Total number of EAPOL Response Identity frames received eapolRespFramesRx Total number of Response frames rec...

Page 218: ...923 backendAccessChallenges 460 backendOtherRequestsToSupplicant 460 backendNonNakResponsesFromSupplicant 460 backendAuthSuccesses 5 backendAuthFails 458 Table 91 802 1X Authenticator Diagnostics of a Port Statistics Description authEntersConnecting Total number of times that the state machine transitions to the CONNECTING state from any other state authEapLogoffsWhileConnecting Total number of ti...

Page 219: ...fWhileAuthenticating Total number of times that the state machine transitions from AUTHENTICATING to ABORTING as a result of an EAPOL Logoff message being received from the Supplicant authReauthsWhileAuthenticated Total number of times that the state machine transitions from AUTHENTICATED to CONNECTING as a result of a re authentication request authEapStartsWhileAuthenticated Total number of times...

Page 220: ...nt Total number of times that the state machine receives a response from the Supplicant to an initial EAP Request and the response is something other than EAP NAK Indicates that the Supplicant can respond to the Authenticator s chosen EAP method backendAuthSuccesses Total number of times that the state machine receives an Accept message from the Authentication Server Indicates that the Supplicant ...

Page 221: ...nters interface port alias or number Command mode All BOOTP Relay statistics for port 1 Requests received from client 0 Requests relayed to server 0 Requests relayed with option 82 0 Requests dropped due to relay not allowed 0 no server or unreachable server 0 packet or processing errors 0 Replies received from server 0 Replies relayed to client 0 Replies dropped due to packet or processing errors...

Page 222: ...mes that have been transmitted by this port to its segment Note that a frame transmitted on the interface corresponding to this port is only counted by this object if and only if it is for a protocol being processed by the local bridging function including bridge management frames dot1PortInDiscards Count of valid frames received which were discarded that is filtered by the Forwarding Process dot1...

Page 223: ... octets in length and do not pass the Frame Check Sequence FCS check The count represented by an instance of this object is incremented when the alignmentError status is returned by the MAC service to the Logical Link Control LLC or other MAC user Received frames for which multiple error conditions obtained are according to the conventions of IEEE 802 3 Layer Management counted exclusively accordi...

Page 224: ...particular interface later than 512 bit times into the transmission of a packet Five hundred and twelve bit times corresponds to 51 2 microseconds on a 10 Mbit s system A late collision included in a count represented by an instance of this object is also considered as a generic collision for purposes of other collision related statistics dot3StatsExcessive Collisions A count of frames for which t...

Page 225: ...tus presented to the LLC dot3StatsInternalMac ReceiveErrors A count of frames for which reception on a particular interface fails due to an internal MAC sub layer receive error A frame is only counted by an instance of this object if it is not counted by the corresponding instance of either the dot3StatsFrameTooLongs object the dot3StatsAlignmentErrors object or the dot3StatsFCSErrors object The p...

Page 226: ... 0 Empty Egress Portmap 3085 Check for HOL blocking discards on associated egress ports Table 94 Interface Statistics of a Port Statistics Description ifInOctets The total number of octets received on the interface including framing characters ifInUcastPkts The number of packets delivered by this sub layer to a higher sub layer which were not addressed to a multicast or broadcast address at this s...

Page 227: ...d and which were not addressed to a multicast or broadcast address at this sub layer including those that were discarded or not sent ifOutBroadcastPkts The total number of packets that higher level protocols requested to be transmitted and which were addressed toa broadcast address at this sub layer including those that were discarded or not sent This object is a 64 bit version of ifOutBroadcastPk...

Page 228: ...arded because the ingress port is not in the forwarding state IBP CBP Discards Discarded because of Ingress Back Pressure flow control or because the Common Buffer Pool is full for example insufficient packet buffering HOL blocking Dis cards Discarded because of the Head Of Line HOL blocking mechanism Low priority packets are placed in a sepa rate queue and can be discarded while applications or t...

Page 229: ...ds 0 Table 95 Interface Protocol Statistics of a Port Statistics Description ipInReceives The total number of input datagrams received from interfaces including those received in error ipInHeaderErrors The number of input datagrams discarded because the IP address in their IP headerʹs destination field was not a valid address to be received at this entity the switch ipInDiscards The number of inpu...

Page 230: ...5to127Octets 0 etherStatsPkts128to255Octets 0 etherStatsPkts256to511Octets 1 etherStatsPkts512to1023Octets 0 etherStatsPkts1024to1518Octets 0 Table 97 RMON Statistics of a Port Statistics Description etherStatsDropEvents The total number of packets received that were dropped because of system resource constraints etherStatsOctets The total number of octets of data including those in bad packets re...

Page 231: ... a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integral number of octets Alignment Error etherStatsJabbers The total number of packets received that were longer than 1518 octets excluding framing bits but including FCS octets and had either a bad Frame Check Sequence FCS with an integral number of octets FCS Error or a bad FCS with a non integra...

Page 232: ...re greater than 255 octets in length excluding framing bits but including FCS octets etherStatsPkts512to1023 Octets The total number of packets including bad packets received that were greater than 511 octets in length excluding framing bits but including FCS octets etherStatsPkts1024to1518 Octets The total number of packets including bad packets received that were greater than 1023 octets in leng...

Page 233: ...oS Queue 1 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 2 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 3 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 7 Tx Packets 900 Dropped Packets 0 Tx Bytes 64320 Dropped Bytes 0 Table 98 QoS Queue Counter Based Statistics of a Port Statistics Description Tx Packets Total number of successfull...

Page 234: ...Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 2 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 3 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 7 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 Table 99 QoS Queue Rate Based Statistics of a Port Statistics Description Tx Packets Number of successfully transmitted packets per second for th...

Page 235: ...s 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 9 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 10 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 11 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 Table 100 Multicast QoS Queue Counter Based Statistics of a Port Statistics Description Tx Packets Total number of successfully transmitted packets for the m...

Page 236: ...es 0 QoS Queue 9 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 10 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 QoS Queue 11 Tx Packets 0 Dropped Packets 0 Tx Bytes 0 Dropped Bytes 0 Table 101 Multicast QoS Queue Rate Based Statistics of a Port Statistics Description Tx Packets Number of successfully transmitted packets per second for the multicast QoS queue Dropp...

Page 237: ... Link Aggregation Group LAG statistics Table 102 LAG Statistics Commands Command Syntax and Usage show interface portchannel 1 128 interface counters Displays interface statistics for the LAG Command mode All clear interface portchannel 1 128 counters Clears all the statistics on the selected LAG Command mode Privileged EXEC ...

Page 238: ...e output Command mode All show mac address table counters Displays FDB statistics See page 241 for sample output Command mode All show mac address table counters all Displays all FDB statistics for all FDB entries Command mode All show mac address table counters interface port port alias or number Displays FDB statistics for a particular port Command mode All show mac address table counters portch...

Page 239: ...245 for sample output Command mode All show spanning tree statistics stp 1 128 Displays STP statistics for the specified Spanning Tree Group STG See page 245 for sample output Command mode All show vlag statistics Displays all vLAG statistics See page 247 for sample output Command mode All clear hotlinks Clears all Hot Links statistics Command mode Privileged EXEC clear interface port port alias o...

Page 240: ...NOS 8 4 clear spanning tree statistics Clears all STP statistics Command mode Privileged EXEC clear vlag statistics Clears all vLAG statistics Command mode Privileged EXEC Table 103 Layer 2 Statistics Commands Command Syntax and Usage ...

Page 241: ...new entries finds and unsuccessful searches show mac address table counters Command mode All FDB statistics are described in the following table FDB statistics current 83 hiwat 855 Table 104 Forwarding Database Statistics Statistic Description current Current number of entries in the Forwarding Database hiwat Highest number of entries recorded at any given time in the Forwarding Database ...

Page 242: ...d 0 Table 105 LACP Statistics Statistic Description Valid LACPDUs received Total number of valid LACP data units received Valid Marker PDUs received Total number of valid LACP marker data units received Valid Marker Rsp PDUs received Total number of valid LACP marker response data units received Unknown version TLV type Total number of LACP data units with an unknown version or type length and val...

Page 243: ...er Stats Trigger 1 statistics Trigger Name Trigger 1 Master active 0 Backup active 0 FDB update 0 failed 0 Table 106 Hotlinks Statistics Statistic Description Master active Total number of times the Master interface transitioned to the Active state Backup active Total number of times the Backup interface transitioned to the Active state FDB update Total number of FDB update requests sent failed To...

Page 244: ...rames Discarded 0 TLVs Unrecognized 0 Neighbors Aged Out 0 Table 107 LLDP port Statistics Statistic Description Frames Transmitted Total number of LLDP frames transmitted Frames Received Total number of LLDP frames received Frames Received in Errors Total number of LLDP frames that had errors Frames Discarded Total number of LLDP frames discarded TLVs Unrecognized Total number of unrecognized TLV ...

Page 245: ...0 2016 420530 11 35 54 7 20 2016 24 240073 423000 199662 11 35 53 7 20 2016 420528 11 35 54 7 20 2016 Spanning tree group 23 Port RxBpdu TxBpdu RxTCN LastTCNRx TxTCN LastTCNTx 11 39 211499 5 14 01 02 7 15 2016 101 2 11 41 7 20 2016 12 36 211499 2 13 53 06 7 15 2016 104 2 11 41 7 20 2016 13 36 211497 2 13 53 06 7 15 2016 104 2 11 41 7 20 2016 14 36 211481 2 13 53 06 7 15 2016 104 2 11 41 7 20 2016 ...

Page 246: ...its OAMPDU transmitted and received Total number of unsupported OAM Protocol Data Units OAMPDU transmitted and received Local faults detected Remote faults detected OAM statistics on port 1 Information OAMPDU Tx 0 Information OAMPDU Rx 0 Unsupported OAMPDU Tx 0 Unsupported OAMPDU Tx 0 Local faults 0 Link fault records 0 Critical events 0 Dying gasps Remote faults 0 Link fault records 0 Critical ev...

Page 247: ...port See page 248 for sample output Command mode All clear vlag statistics Clears all vLAG statistics Command mode Privileged EXEC vLAG PDU sent Role Election 10 System Info 7 Peer Instance Enable 624 Peer Instance Disable 52 FDB Dynamic Add 166079 FDB Dynamic Del 33856 FDB Inactive Add 0 FDB Inactive Del 0 Health Check 4665 ISL Hello 2126 Other 0 Unknown 0 vLAG PDU received Role Election 11 Syste...

Page 248: ...received for enabling peer instance Peer Instance Disable Total number of vLAG PDUs sent received for disabling peer instance FDB Dynamic Add Total number of vLAG PDUs sent received for addition of FDB dynamic entry FDB Dynamic Del Total number of vLAG PDUs sent received for deletion of FDB dynamic entry FDB Inactive Add Total number of vLAG PDUs sent received for addition of FDB inactive entry FD...

Page 249: ...l show ipv6 counters Displays Internet Protocol version 6 IPv6 statistics See page 256 for sample output Command mode All show ip dhcp snooping counters Displays Dynamic Host Control Protocol DHCP Snooping statistics Command mode All show ip dns counters Displays Domain Name System DNS statistics See page 264 for sample output Command mode All show ip gea bucket IP address Displays Gigabit Etherne...

Page 250: ...6 for sample output Command mode All show ipv6 ospf counters Displays Open Shortest Path First version 3 OSPFv3 statistics See page 281 for sample output Command mode All show ip pim counters Displays Protocol Independent Multicast PIM statistics for all configured PIM interfaces See page 286 for sample output Command mode All show ip pim interface 1 126 loopback 1 5 port port alias or number coun...

Page 251: ...0 info Displays tenant statistics Command mode All show ip udp counters Displays User Datagram Protocol UDP statistics See page 269 for sample output Command mode All show ip vrrp counters When virtual routers are configured you can display the protocol statistics for Virtual Router Redundancy Protocol VRRP See page 285 for sample output Command mode All show layer3 counters Dumps all Layer 3 stat...

Page 252: ... statistics Command mode Privileged EXEC clear ip icmp counters Clears Internet Control Message Protocol ICMP statistics Command mode Privileged EXEC clear ip igmp VLAN ID 1 4094 counters Clears all IGMP statistics The vlan option clears IGMP statistics only for a specific VLAN Command mode Privileged EXEC clear ipv6 mld counters Clears MLD statistics Command mode Privileged EXEC clear ipv6 neighb...

Page 253: ...Pv4 route statistics Command mode Privleged EXEC clear ipv6 route counters Clears IPv6 route statistics Command mode Privileged EXEC clear ip slp counters Clears SLP statistics Command mode Privileged EXEC clear ip tcp counters Clears Transmission Control Protocol TCP statistics Command mode Privileged EXEC clear ip tenant counters tenant ID 1 30 Clears tenant statistics Command mode Privileged EX...

Page 254: ... The number of input datagrams discarded because the IP address in their IP headerʹs destination field was not a valid address to be received at this entity the switch This count includes invalid addresses for example 0 0 0 0 and addresses of unsupported Classes for example Class E For entities which are not IP Gateways and therefore do not forward datagrams this counter includes datagrams discard...

Page 255: ...roblem was encountered to prevent their transmission to their destination but which were discarded for example for lack of buffer space Note that this counter would include datagrams counted in ipForwDatagrams if any such packets met this discretionary discard criterion ipDefaultTTL The default value inserted into the Time To Live TTL field of the IP header of datagrams originated at this entity t...

Page 256: ...0 PktTooBigMsg 9 ICMPEchoReq 10 ICMPEchoReps 0 RouterSols 0 RouterAdv 5 NeighSols 9 NeighAdv 0 Redirects 0 AdminProhib 0 ICMPBadCode Sent 19 ICMPMsgs 0 ICMPErrMsgs 0 DstUnReach 0 TimeExcds 0 ParmProbs 0 PktTooBigs 10 EchoReq 9 EchoReply 0 RouterSols 0 RouterAdv 11 NeighSols 5 NeighborAdv 0 RedirectMsgs 0 AdminProhibMsgs UDP statistics Received 0 UDPDgrams 0 UDPNoPorts 0 UDPErrPkts Sent 0 UDPDgrams...

Page 257: ...rded for example for lack of buffer space Note that this counter does not include any datagrams discarded while awaiting re assembly Delivers Number of datagrams successfully delivered to IP user protocols including ICMP OutRequests Number of IP datagrams which local IP user protocols including ICMP supplied to IP in requests for transmission OutDiscards Number of output IP datagrams for which no ...

Page 258: ...cts The number of Redirect messages sent Table 113 ICMP Statistics Statistic Description Received ICMPPkts Number of ICMP messages which the entity the switch received ICMPErrPkt Number of ICMP messages which the entity the switch received but determined as having ICMP specific errors bad ICMP checksums bad length and so forth DestUnreach Number of ICMP Destination Unreachable messages received Ti...

Page 259: ...rors that contribute to this counterʹs value DstUnReach Number of ICMP Destination Unreachable messages sent TimeExcds Number of ICMP Time Exceeded messages sent ParmProbs Number of ICMP Parameter Problem messages sent PktTooBigs The number of ICMP Packet Too Big messages sent by the interface EchoReq Number of ICMP Echo request messages sent EchoReply Number of ICMP Echo Reply messages sent Route...

Page 260: ...r of UDP datagrams received by the switch UDPNoPorts Number of received UDP datagrams for which there was no application at the destination port UDPErrPkts Number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port Sent UDPDgrams Number of UDP datagrams sent from this entity the switch ...

Page 261: ...Number of routes with ECMP paths 0 Table 115 IPv4 Route Statistics Statistics Description Current total outstanding routes Total number of outstanding routes in the route table Highest number ever recorded Highest number of routes ever recorded in the route table Current static routes Total number of static routes in the route table Current RIP routes Total number of RIP routes in the route table ...

Page 262: ...atistics Maximum number of ECMP routes 600 Max ECMP paths allowed for one route 5 Number of routes with ECMP paths 0 Table 116 IPv6 Route Statistics Statistics Description ipv6RoutesCur Total number of outstanding routes in the route table ipv6RoutesHighWater Highest number of routes ever recorded in the route table ipv6RoutesMax Maximum number of routes that are supported Maximum number of ECMP r...

Page 263: ...rp inspection statistics vlan VLAN ID 1 4094 Command mode All Mgmt ARP statistics arpEntriesCur 1 arpEntriesHighWater 2 Data ARP statistics arpEntriesCur 1 arpEntriesHighWater 1 arpEntriesMax 16383 Table 117 ARP Statistics Statistic Description arpEntriesCur The total number of outstanding ARP entries in the ARP table arpEntriesHighWater The highest number of ARP entries ever recorded in the ARP t...

Page 264: ...ribes the DNS statistics DNS statistics dnsInRequests 0 dnsOutRequests 0 dnsBadRequests 0 Table 118 DNS Statistics Statistics Description dnsInRequests The total number of DNS response packets that have been received dnsOutRequests The total number of DNS response packets that have been transmitted dnsBadRequests The total number of DNS request packets received that were dropped ...

Page 265: ...119 ICMP Statistics Statistic Description icmpInMsgs The total number of ICMP messages which the entity the switch received Note that this counter includes all those counted by icmpInErrors icmpInErrors The number of ICMP messages which the entity the switch received but determined as having ICMP specific errors bad ICMP checksums bad length and so forth icmpInDestUnreachs The number of ICMP Desti...

Page 266: ...s of errors that contribute to this counterʹs value icmpOutDestUnreachs The number of ICMP Destination Unreachable messages sent icmpOutTimeExcds The number of ICMP Time Exceeded messages sent icmpOutParmProbs The number of ICMP Parameter Problem messages sent icmpOutSrcQuenchs The number of ICMP Source Quench buffer almost full stop sending data messages sent icmpOutRedirects The number of ICMP R...

Page 267: ...lgorithm used to determine the retransmission timeout In particular when the timeout algorithm is rsre 3 an object of this type has the semantics of the LBOUND quantity described in RFC 793 tcpRtoMax The maximum value permitted by a TCP implementation for the retransmission timeout measured in milliseconds More refined semantics for objects of this type depend upon the algorithm used to determine ...

Page 268: ... count includes segments received on currently established connections tcpOutSegs The total number of segments sent including those on current connections but excluding those containing only retransmitted octets tcpRetransSegs The total number of segments retransmitted that is the number of TCP segments transmitted containing one or more previously transmitted octets tcpInErrs The total number of ...

Page 269: ...orts 1578077 Table 121 UDP Statistics Statistic Description udpInDatagrams The total number of UDP datagrams delivered to the switch udpOutDatagrams The total number of UDP datagrams sent from this entity the switch udpInErrors The number of received UDP datagrams that could not be delivered for reasons other than the lack of an application at the destination port udpNoPorts The total number of re...

Page 270: ...ListChangeRecords 0 rxIgmpV3FilterChangeRecords 0 txIgmpGenQueries 0 rxPimHellos 0 IGMP vlan 147 statistics rxIgmpValidPkts 0 rxIgmpInvalidPkts 0 rxIgmpGenQueries 0 rxIgmpGrpSpecificQueries 0 rxIgmpGroupSrcSpecificQueries 0 rxIgmpDiscardPkts 0 rxIgmpLeaves 0 rxIgmpReports 0 txIgmpReports 0 txIgmpGrpSpecificQueries 0 txIgmpLeaves 0 rxIgmpV3CurrentStateRecords 0 rxIgmpV3SourceListChangeRecords 0 rxI...

Page 271: ...Membership Query packets transmitted to specific groups txIgmpLeaves Total number of Leave messages transmitted rxIgmpV3CurrentStateRecords Total number of Current State records received rxIgmpV3SourceListChangeRecords Total number of Source List Change records received rxIgmpV3FilterChangeRecords Total number of Filter Change records received txIgmpGenQueries Total number of General Membership Qu...

Page 272: ...s MLD statistics See page 273 for sample output Command mode All show ipv6 mld groups counters Displays total number of MLD entries Command mode All show ipv6 mld interface counters Displays total number of MLD entries Command mode All show ipv6 mld interface 1 126 counters Displays total number of MLD entries on the interface Command mode All clear ipv6 mld counters Clears MLD counters Command mo...

Page 273: ...eceived Sent xErrors General Query 0 1067 0 MAS Query 0 0 0 MASSQ Query 0 0 0 MLDv1 Report 0 0 0 MLDv1 Done 0 0 0 MLDv2 Report 1069 1084 0 INC CSRs v2 1 0 0 EXC CSRs v2 2134 1093 0 TO_INC FMCRs v2 1 0 0 TO_EXC FMCRs v2 0 15 0 ALLOW SLCRs v2 0 0 0 BLOCK SLCRs v2 0 0 0 MLD interface packet statistics for interface 2 MLD msg type Received Sent xErrors MLD interface packet statistics for interface 3 M...

Page 274: ...f packets sent by a multicast listener in response to MLDv1 query Listener Done v1 v2 Number of packets sent by a host when it wants to stop receiving multicast traffic Listener Report v2 Number of packets sent by a multicast listener in response to MLDv2 query MLDv2 INC mode CSRs Number of current state records with include filter mode MLDv2 EXC mode CSRs Number of current state records with excl...

Page 275: ...lobal OSPF statistics See page 276 for sample output Command mode All show ip ospf area 0 19 counters Displays OSPF statistics for all areas or a specified area Command mode All show ip ospf interface interface number port port alias or number counters Displays OSPF statistics for all interfaces or a specified interface Command mode All clear ip ospf counters Clears OSPF statistics Command mode Pr...

Page 276: ...hello 4 start 0 down 2 n2way 2 loop 0 adjoint ok 2 unloop 0 negotiation done 2 wait timer 2 exchange done 2 backup 0 bad requests 0 nbr change 5 bad sequence 0 loading done 2 n1way 0 rst_ad 0 down 1 Timers kickoff hello 514 retransmit 1028 lsa lock 0 lsa ack 0 dbage 0 summary 0 ase export 0 Table 126 OSPF General Statistics Statistic Description Rx Tx Stats Rx Pkts The sum total of all OSPF packet...

Page 277: ...te packets transmitted on all OSPF areas and interfaces Nbr Change Stats hello The sum total of all Hello packets received from neighbors on all OSPF areas and interfaces Start The sum total number of neighbors in this state that is an indication that Hello packets should now be sent to the neighbor at intervals of HelloInterval seconds across all OSPF areas and interfaces n2way The sum total numb...

Page 278: ... total number of times the Neighbor adjacency has been reset across all OPSF areas and interfaces down The total number of Neighboring routers down that is in the initial state of a neighbor conversation across all OSPF areas and interfaces Intf Change Stats hello The sum total number of Hello packets sent on all interfaces and areas down The sum total number of interfaces down in all OSPF areas l...

Page 279: ...a lock The sum total number of times the Link State Advertisement LSA lock timer has been fired across all OSPF areas and interfaces lsa ack The sum total number of times the LSA Ack timer has been fired across all OSPF areas and interfaces dbage The total number of times the data base age Dbage has been fired summary The total number of times the Summary timer has been fired ase export The total ...

Page 280: ...OSPFv3 statistics See page 281 for sample output Command mode All show ipv6 ospf area area index 0 2 counters Displays OSPFv3 statistics for all areas or a specified area Command mode All show ipv6 ospf interface interface number counters Displays OSPFv3 statistics for all interfaces or a specified interface Command mode All clear ipv6 ospf counters Clears OSPFv3 statistics Command mode Privileged...

Page 281: ...tes 371 180 0 Errors rx on pasv intf 0 rx but ospf off 0 rx on intf not up 0 rx version mismatch 0 rx rtr id is zero 0 rx with our rtr id 0 instance id mismatch 0 area mismatch 0 dest addr mismatch 0 bad checksum 0 no associated nbr 0 bad packet type 0 hello mismatch 0 options mismatch 0 dead mismatch 0 bad nbma ptomp nbr 0 Nbr change stats Intf change Stats down 0 down 5 attempt 0 loop 0 init 1 w...

Page 282: ...ciated interface has been found Rx database The sum total of all Database Description packets received on all OSPFv3 interfaces Tx database The sum total of all Database Description packets transmitted on all OSPFv3 interfaces Discarded database The sum total of all Database Description packets discarded Rx ls requests The sum total of all Link State Request packets received on all OSPFv3 interfac...

Page 283: ...e The total number of neighbors in this state that is in an adjacencyʹs final state having transmitted a full sequence of Database Description packets across all OSPFv3 interfaces loading done The total number of link state updates received for all out of date portions of the database across all OSPFv3 interfaces full The total number of transitions into full state of neighboring routers across al...

Page 284: ...e wait timer has been fired which causes an interface to exit waiting state across all OPSFv3 interfaces poll The total number of times the timer whose firing causes hellos to be sent to inactive NBMA and Demand Circuit neighbors has been fired across all OPSFv3 interfaces nbr probe The total number of times the neighbor probe timer has been fired across all OPSFv3 interfaces Number of LSAs origin...

Page 285: ... vrrpBadAdvers 0 vrrpOutAdvers 0 vrrpOutGratuitousARPs 0 vrrpBadVersion 0 vrrpBadVrid 0 vrrpBadAddress 0 vrrpBadData 0 vrrpBadPassword 0 vrrpBadInterval 0 Table 129 VRRP Statistics Statistics Description vrrpInAdvers The total number of valid VRRP advertisements that have been received vrrpBadAdvers The total number of VRRP advertisements received that were dropped vrrpOutAdvers The total number o...

Page 286: ...oin Prune messages transmitted or received Assert Tx Rx Number of Assert messages transmitted or received Register Tx Rx Number of Register messages transmitted or received Null Reg Tx Rx Number of NULL register messages received RegStop Tx Rx Number of Register Stop messages transmitted or received CandRPAdv Tx Rx Number of Candidate RP Advertisements transmitted or received BSR Tx Rx Number of B...

Page 287: ... Command mode All RIP ALL STATS INFORMATION RIP packets received 12 RIP packets sent 75 RIP request received 0 RIP response recevied 12 RIP request sent 3 RIP reponse sent 72 RIP route timeout 0 RIP bad size packet received 0 RIP bad version received 0 RIP bad zeros received 0 RIP bad src port received 0 RIP bad src IP received 0 RIP packets from self received 0 ...

Page 288: ...stics count all DHCP packets processed by DHCP snooping Table 131 DHCP Statistics Options Command Syntax and Usage show ip dhcp snooping counters Displays DHCP Snooping statistics Command mode All clear ip dhcp snooping counters Clears DHCP Snooping statistics Command mode Privileged EXEC DHCP Snooping statistics Received Request packets 2 Received Reply packets 2 Recevied Invalid packets 0 Droppe...

Page 289: ...tance ID Command mode All clear openflow statistics Clears OpenFlow data for all instances Command mode Privileged EXEC clear openflow instance 1 2 statistics Clears OpenFlow data for the specified instance ID Command mode Privileged EXEC Openflow instance 1 is currently disabled Openflow statistics for instance 2 Flow Count Basic Flows 3 ACL Based 3 Unicast FDB Based 0 Multicast FDB Based 0 Emerg...

Page 290: ...ete 0 Vendor Flow Removed Idle Timeout 0 Hard Timeout 0 Delete 0 Port Status Add 0 Delete 0 Modify 0 Packet Out 1088 Flow Mod Add 3 Modify 0 Modify Strict 0 Delete 0 Delete Strict 1 Port Mod 0 Statistics Request Desc 1 Flow 15 Aggregate 0 Table 0 Port 15 Vendor 0 stats 0 stats strict 0 Statistics Reply Desc 1 Flow 15 Aggregate 0 Table 0 Port 15 Vendor 0 stats 0 stats strict 0 Barrier Request 2 Bar...

Page 291: ...low statistics for instance 1 Flow Count Static Flows 0 ACL Based 0 Mpls PUSH based 0 Mpls POP based 0 Dynamic Flows 2 ACL Based 2 Unicast FDB Based 0 Multicast FDB Based 0 Mpls PUSH based 0 Mpls POP based 0 Group Count 0 Buffering Count Openflow Packets Buffered 0 Openflow Packets Timed out 0 Openflow Packets Retrieved 0 Openflow Packets Retrieve attempts 0 Message Count Hello Sent 3 Hello Receiv...

Page 292: ...s 5993 Group counter statistics 0 Group description 0 Group features 0 Port description 3 Multipart Reply Switch description 6 Individual flow statistics 5993 Aggregate flow statistics 0 Flow table statistics 0 Port statistics 5993 Group counter statistics 0 Group description 0 Group features 0 Port description 3 Barrier Request 3 Barrier Reply 3 Error Messages Hello Failed Sent Incompatible 0 Hel...

Page 293: ...Bad Field 0 Bad Value 0 Bad Mask 0 Bad Prerequisites 0 Duplicated Field 0 Flow Mod Failed Unknown 0 Table Full 0 Bad Table ID 0 Overlap 0 Permission Error 0 Bad Timeout 0 Bad Command 0 Bad Flags 0 Group Mod Failed Group Exists 0 Invalid Group 0 Weight Unsupported 0 Out of Groups 0 Out of Buckets 0 Chaining Unsupported 0 Watch Unsupported 0 Loop 0 Unknown Group 0 Chained Group 0 Bad Type 0 Bad Comm...

Page 294: ... Count Count of installed groups Buffering Count Openflow Packets Buffered Count of packets buffered Openflow Packets Timed out Count of buffered packets dropped due to time out Openflow Packets Retrieved Count of packets retrieved Openflow Packets Retrieve attempts Count of attempts made to retrieve the buffer Message Count Count of messages exchanged between the Controller and the switch Hello S...

Page 295: ...ved by the switch Available only in OpenFlow 1 0 Feature Request Count of Feature Request messages received from the Controller by the switch Feature Reply Count of Feature Reply messages sent from the switch to the Controller Get Config Request Count of Get Config Request messages received from the Controller by the switch Get Config Reply Count of Get Config Reply messages sent from the switch t...

Page 296: ...ount of vendor defined flow entries removed due to explicit deletion Available only in OpenFlow 1 0 Port Status Add Count of port status messages sent triggered by adding a port to OpenFlow Delete Count of port status messages sent triggered by removing a port from OpenFlow Modify Count of port status messages sent triggered by a modification of a port belonging to OpenFlow for example up down sta...

Page 297: ...om the Controller by the switch Available only in OpenFlow 1 0 Port Count of Port statistics requests received from the Controller by the switch Available only in OpenFlow 1 0 Vendor Available only in OpenFlow 1 0 stats Count of Vendor statistics requests received from the Controller by the switch Available only in OpenFlow 1 0 stats strict Count of Vendor strict statistics requests received from ...

Page 298: ...in OpenFlow 1 3 Group counter statistics Count of Group statistics requests received from the Controller Available only in OpenFlow 1 3 Group description Count of Group description requests received from the Controller Available only in OpenFlow 1 3 Group features Count of Group features requests received from the Controller Available only in OpenFlow 1 3 Port description Count of Port description...

Page 299: ...t by the switch if the version in the Hello message is incompatible with the version of the Controller Hello Failed Recv Incompatible Count of error messages received by the switch if the version in the Hello message is incompatible with the version of the Controller Bad Request Bad Version Count of error messages sent due to bad version in the request header Bad Type Count of error messages sent ...

Page 300: ...Available only in OpenFlow 1 3 Multipart Buffer Overflow Count of error messages sent when the specified buffer in the multi part request is overflowed Available only in OpenFlow 1 3 Bad Action Bad Type Count of error messages sent due to due to unknown action type specified in flow_mod message Bad Len Count of error messages sent due to wrong action length for type of message received in the flow...

Page 301: ... message Available only in OpenFlow 1 3 Unsupport Instruction Count of error messages sent due to unsupported instruction in the received flow mod message Available only in OpenFlow 1 3 Bad Len Count of error messages sent due to wrong instruction length Available only in OpenFlow 1 3 Permission Error Count of error messages sent due to permission error while processing the instruction Available o...

Page 302: ...ble only in OpenFlow 1 3 Table Full Count of error messages sent because of full table when adding or updating the flow mod message Available only in OpenFlow 1 3 Bad Table ID Count of error messages sent because the specified table id in the flow mod message is invalid or because the table id doesnʹt exist Available only in OpenFlow 1 3 Overlap Count of error messages sent due to an attempt to ad...

Page 303: ...only in OpenFlow 1 3 Watch Unsupported Count of error message sent to Controller due to unsupported watch parameter Available only in OpenFlow 1 3 Loop Count of error message sent to Controller due to unsupported checking that no loop is created while chaining groups Available only in OpenFlow 1 3 Unknown Group Count of error message sent to Controller due to unsupported group type Available only ...

Page 304: ... sent due to invalid advertise in the port_mod message Available only in OpenFlow 1 3 Permission Error Count of error messages sent due to permission error while processing the port_mod message Available only in OpenFlow 1 3 Switch Config Failed Available only in OpenFlow 1 3 Bad Flags Count of error messages sent due to invalid flags in the switch config message Available only in OpenFlow 1 3 Per...

Page 305: ...ommand mode All show mp tcp block show processes tcp block Displays all TCP control blocks that are in use To view a sample output and a description of the stats see page 317 Command mode All show mp thread show processes thread Displays thread statistics Command mode All show mp udp block show processes udp block Displays all UDP control blocks that are in use To view a sample output see page 318...

Page 306: ...ocesses cpu history Displays a history of CPU use statistics To view a sample output see page 321 Command mode All clear mp counters Clears all MP statistics Command mode All Table 134 Management Processor Statistics Options Command Syntax and Usage ...

Page 307: ...tx number of logs 1 1000 both displays a list of the most recent packets received or sent by the CPU rx displays a log of the most recent packets received by the CPU tx displays a log of the most recent packets sent by the CPU Command mode All show mp packet logs all rx tx all displays a log of all packets received or sent by the CPU rx displays a log of packets received by the CPU tx displays a l...

Page 308: ...PDUs 34 178404 Cisco packets 0 0 ARP Requests 100419 1 ARP Replies 4988 0 LACP packets 0 0 IPv4 packets 100394 86826 ICMP Requests 0 77321 ICMP Replies 77315 0 IGMP packets 0 0 PIM packets 0 0 VRRP packets 0 0 TCP packets 84 174 FTP 0 0 HTTP 0 0 SSH 0 0 TACACS 0 0 TELNET 84 174 TCP other 0 0 UDP packets 17666 9331 DHCP 13510 5175 NTP 3 3 PTP 0 0 RADIUS 0 0 SNMP 4153 4153 TFTP 0 0 UDP other 0 0 RIP...

Page 309: ... statistics current 0 max 3072 hi watermark 12 Table 136 Packet Statistics Statistics Description Packets received by CPU Total packets Total number of packets received BPDUs Total number of spanning tree Bridge Protocol Data Units received Cisco packets Total number of UniDirectional Link Detection UDLD packets and Cisco Discovery Protocol CDP packets received ARP packets Total number of Address ...

Page 310: ... only high priority small packets are allowed hi watermark The highest number of packet allocation with size less than 128 bytes from the packet buffer pool by the TCP IP protocol stack hi water time Time stamp that indicates when the hi watermark was reached medium packet buffers current Total number of packet allocations with size between 128 to 1536 bytes from the packet buffer pool by the TCP ...

Page 311: ...536 bytes from the packet buffer pool by the TCP IP protocol stack pkt_hdr statistics current Total number of packet allocations with more than 1536 bytes from the packet buffer pool by the TCP IP protocol stack max Maximum number of packet allocations with more than 1536 bytes from the packet buffer pool by the TCP IP protocol stack hi watermark The highest number of packet allocation with more t...

Page 312: ...name headers smalls mediums jumbos 1 STEM 0 0 0 0 2 STP 0 0 0 0 3 MFDB 0 0 0 0 4 TND 0 0 0 0 5 CONS 0 0 0 0 6 TNET 0 0 0 0 7 TNET 0 0 0 0 8 TNET 0 0 0 0 9 TNET 0 0 0 0 10 TNET 0 0 0 0 11 TNET 0 0 0 0 12 LOG 0 0 0 0 13 TRAP 0 0 0 0 14 NTP 0 0 0 0 15 RMON 0 0 0 0 18 IP 0 0 0 0 19 RIP 0 0 0 0 20 AGR 0 0 0 0 100 OSFM 0 0 0 0 101 OBSC 0 0 0 0 102 STPM 0 0 0 0 103 ARP 0 0 0 0 104 PBMP 0 0 0 0 105 VMFD 0...

Page 313: ...rse rx tx bgp Displays only BGP packets logged Command mode All show mp packet parse rx tx bpdu Displays only BPDUs logged Command mode All show mp packet parse rx tx cisco Displays only Cisco packets BPDU CDP UDLD logged Command mode All show mp packet parse rx tx dhcp Displays only DHCP packets logged Command mode All show mp packet parse rx tx ecp Displays only ECP packets logged Command mode A...

Page 314: ...only IPv4 packets logged Command mode All show mp packet parse rx tx ipv6 Displays only IPv6 packets logged Command mode All show mp packet parse rx tx lacp Displays only LACP PDUs logged Command mode All show mp packet parse rx tx lldp Displays only LLDP PDUs logged Command mode All show mp packet parse rx tx mac MAC address Displays only logged packets with the specified MAC address Command mode...

Page 315: ...cket parse rx tx radius Displays only RADIUS packets logged Command mode All show mp packet parse rx tx rarp Displays only Reverse ARP packets Command mode All show mp packet parse rx tx raw Displays raw packet buffer in addition to headers Command mode All show mp packet parse rx tx rip Displays only RIP packets logged Command mode All show mp packet parse rx tx snmp Displays only SNMP packets lo...

Page 316: ...et parse rx tx tftp Displays only TFTP packets logged Command mode All show mp packet parse rx tx udp Displays only UDP packets logged Command mode All show mp packet parse rx tx udpother Displays only UDP other port packets logged Command mode All show mp packet parse rx tx vlan VLAN ID 1 4095 Displays only logged packets with the specified VLAN Command mode All show mp packet parse rx tx vrrp Di...

Page 317: ... 0 0 127 0 0 1 23 listen up 53ee4c58 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 23 listen 53ee4ae8 0 0 0 0 0 0 0 0 0 23 listen Mgmt Ports Active Internet connections servers and established Proto Recv Q Send Q Local Address Foreign Address State tcp 0 0 127 0 0 1 5000 LISTEN tcp 0 0 10 241 31 135 http LISTEN tcp 0 0 10 241 31 135 telnet LISTEN tcp 0 0 127 0 0 1 680 127 0 0 1 5500 ESTABLISHED tcp 0 0 127 0 ...

Page 318: ...tatistics show mp udp block Command mode All Data Ports All UDP allocated control blocks 68 listen 161 listen Mgmt Ports Active Internet connections servers and established Proto Recv Q Send Q Local Address Foreign Address State udp 0 0 10 241 31 135 snmp 0 0 0 0 0 10 241 31 135 161 accept MGT up ...

Page 319: ...61440 13 1 0 0 1 idle 8 TNET 280 61440 8 1 0 0 1 idle 9 TNET 280 61440 11 1 0 0 1 idle 10 TNET 280 61440 11 1 0 0 1 idle 11 TNET 280 61440 11 1 0 0 1 idle 12 LOG 2952 8192 84005 7651 8663 0 3 idle 13 TRAP 1128 8192 17530 31474 1152 0 2 idle 14 NTP 72 8192 4 1 0 0 1 idle 15 RMON 232 8192 1084971 81841 10225 0 1 idle 18 IP 6936 32768 766229 82154 5304 0 1 idle 19 RIP 2520 32768 234 258 0 0 2 idle 20...

Page 320: ...read Utilization Status ID Name 1sec 5sec 1Min 5Min 1 STEM 0 00 0 00 0 00 0 00 idle 2 STP 0 00 0 00 0 00 0 00 idle 3 MFDB 0 00 0 00 0 00 0 00 idle 4 TND 0 00 0 00 0 00 0 00 idle 5 CONS 0 14 0 04 0 00 0 00 running 6 TNET 0 00 0 00 0 00 0 00 idle Table 139 CPU Statistics Statistics Description Thread ID The thread ID number Thread Name The name of the thread 1sec The percent of CPU use over 1 second...

Page 321: ...tistics show processes cpu history Command mode All CPU Utilization History 40 LACP 8 at 12 41 07 Mon Jul 6 2015 75 ARP 32 at 12 41 08 Mon Jul 6 2015 75 ARP 48 at 12 41 13 Mon Jul 6 2015 54 PROX 62 at 13 52 06 Mon Jul 6 2015 54 PROX 63 at 15 03 43 Mon Jul 6 2015 54 PROX 64 at 4 02 46 Wed Jul 8 2015 54 PROX 65 at 3 54 27 Thu Jul 9 2015 ...

Page 322: ...322 G8264 Command Reference for ENOS 8 4 QoS Statistics ...

Page 323: ... Copyright Lenovo 2017 Chapter 3 Statistics Commands 323 The following commands display QoS statistics ...

Page 324: ...TP packets dest unknown packets with destination not yet learned dhcp DHCP packets ecp ECP packets fips FIPS packets icmp ICMP packets icmp6 ICMP6 packets igmp IGMP packets ipv4 miscellaneous IPv4 packets with IP options and TTL exception ipv6 nd IPv6 Neighbor Discovery packets lacp LACP packets lldp LLDP packets oflow cntrler packets that hit the OpenFlow send to controller filter oflow default p...

Page 325: ...queues Command mode All clear qos protocol packet control all Clears all packet queue statistics Command mode Privileged EXEC clear qos protocol packet control protocol counters packet type Clears packet queue statistics for the selected packet type Command mode Privileged EXEC clear qos protocol packet control queue counters packet queue number 0 47 Clears packet queue statistics for the selected...

Page 326: ...nd mode All show access control macl 1 128 counters Displays the ACL statistics for a specific management ACL MACL Command mode All show access control meter 1 127 counters Displays ACL meter statistics Command mode All show access control vmap 1 128 counters Displays VLAN Map statistics for the selected VMAP For a sample display see page 327 Command mode All clear access control list 1 256 all co...

Page 327: ... Map statistics show access control vmap 1 128 counters Command mode All clear access control meter 1 127 counters Clears ACL meter statistics Command mode Privileged EXEC clear access control vmap 1 128 counters Clears VLAN Map statistics Command mode Privileged EXEC Table 141 ACL Statistics Commands continued Command Syntax and Usage Hits for ACL 1 26057515 Hits for ACL 2 26057497 Hits for VMAP ...

Page 328: ...can accumulate over several FCoE sessions until the statistics are cleared The following command clears FCoE statistics clear fcoe counters Command mode Privileged EXEC FCOE statistics FCFAdded 5 FCFRemoved 1 FCOEAdded 81 FCOERemoved 24 Table 142 FCoE Statistics stats fcoe Statistic Description FCFAdded Total number of FCoE Forwarders FCF added FCFRemoved Total number of FCoE Forwarders FCF remove...

Page 329: ...snmpOutNoSuchNames 1 snmpOutBadValues 0 snmpOutReadOnlys 0 snmpOutGenErrs 1 snmpOutGetRequests 0 snmpOutGetNexts 0 snmpOutSetRequests 0 snmpOutGetResponses 150093 snmpOutTraps 4 snmpSilentDrops 0 snmpProxyDrops 0 Table 143 SNMP Statistics Statistic Description snmpInPkts The total number of Messages delivered to the SNMP entity from the transport service snmpInBadVersions The total number of SNMP ...

Page 330: ...ity to the transport service snmpInBadTypes The total number of SNMP Messages which failed ASN parsing snmpInTooBigs The total number of SNMP Protocol Data Units PDUs which were delivered to the SNMP protocol entity and for which the value of the error status field is too big snmpInNoSuchNames The total number of SNMP Protocol Data Units PDUs which were delivered to the SNMP protocol entity and fo...

Page 331: ...essed by the SNMP protocol entity snmpInSetRequests The total number of SNMP Set Request Protocol Data Units PDUs which have been accepted and processed by the SNMP protocol entity snmpInGetResponses The total number of SNMP Get Response Protocol Data Units PDUs which have been accepted and processed by the SNMP protocol entity snmpInTraps The total number of SNMP Trap Protocol Data Units PDUs whi...

Page 332: ... the SNMP protocol entity snmpOutTraps The total number of SNMP Trap Protocol Data Units PDUs which have been generated by the SNMP protocol entity snmpSilentDrops The total number of GetRequest PDUs GetNextRequest PDUs GetBulkRequest PDUs SetRequest PDUs and InformRequest PDUs delivered to the OSPFSNMPv2 entity which were silently dropped because the size of a reply containing an alternate Respon...

Page 333: ...28 2012 Current system time 8 05 21 Thu Nov 29 2012 Table 144 NTP Statistics Field Description Primary Server Requests Sent The total number of NTP requests the switch sent to the primary NTP server to synchronize time Responses Received The total number of NTP responses received from the primary NTP server Updates The total number of times the switch updated its time based on the NTP responses re...

Page 334: ...Current system time The switch system time when the following command was issued show ntp counters address ref clock st when s offset s 12 200 151 18 198 72 72 10 3 35316 2 synced unsynced Table 145 NTP Associations Field Description address Peer address ref clock Peer reference clock address st Peer stratum when s Time in seconds since the latest NTP packet was received from the peer offset s Off...

Page 335: ...Resp messages transmitted and received Table 146 Precision Time Protocol Statistics Commands Command Syntax and Usage show ptp counters Displays Precision Time Protocol statistics Command mode All show interface port port alias or number ptp counters Displays Precision Time Protocol statistics for the port Command mode All clear ptp counters Resets PTP packet counters Command mode Privileged EXEC ...

Page 336: ...unters Use the dump command to dump all switch statistics 40K or more depending on your configuration This data can be used to tune or debug switch performance If you want to capture dump data to a file set your communication software on your workstation to capture session data prior to issuing the dump command ...

Page 337: ...ctive config data port mgt port Restores the active configuration from a file on the specified TFTP server For example copy tftp 10 72 97 135 directory config txt active config mgt port Command mode Privileged EXEC copy backup config running config Copy the backup configuration to the current running configuration Command mode Privileged EXEC copy backup config TFTP server filepath data port mgt p...

Page 338: ...tory config txt mgt port Command mode Privileged EXEC copy TFTP server filepath running config data port mgt port Restores the current running configuration from a file on the specified TFTP server For example copy tftp 10 72 97 135 directory config txt running config mgt port Command mode Privileged EXEC copy ftp tftp sftp running config data port mgt port Restores current configuration from a FT...

Page 339: ...age from the specified location to another specified location Note This command is applicable only to configuration files or NOS images Command mode Privileged EXEC write memory Copy the current running configuration from switch memory to the active config partition Command mode Privileged EXEC show running config Dumps current configuration to a script file For details see page 675 Command mode P...

Page 340: ...xample port status might differ from run time information that you view using the Information commands The Information commands display current run time information of switch parameters Saving the Configuration You must save configuration settings to flash memory so the G8264 reloads the settings after a reboot Note If you do not save the changes they will be lost the next time the system is reboo...

Page 341: ...tocols and algorithms of the device are compliant with NIST SP 800 131A with non complaint protocols and algorithms disabled Note This setting is applied only after a reboot during which the device will be reset to default factory configuration By default this setting is disabled Command mode Global configuration easyconnect Allows to apply a series of customizable and predefined configurations ba...

Page 342: ...mode Global configuration line vty length 0 300 Sets the default number of lines per screen displayed for Telnet and SSH sessions A value of 0 disables paging The default value is 28 Command mode Global configuration no line vty Sets line vty length to the default value of 28 Command mode Global configuration no prompting Enables or disables CLI confirmation prompts By default this settings is ena...

Page 343: ...ystem default ip data mgt Enables or disables default IP address on data interfaces and management interfaces The default setting is enabled Command mode Global configuration no system dhcp hostname syslog Enables or disables Dynamic Host Control Protocol for setting the IP address on interface 1 When enabled the IP address obtained from the DHCP server overrides the static IP address The default ...

Page 344: ...r disables logging of packets that come to the CPU The default setting is enabled Command mode Global configuration no system reset control Enables or disables the reset control flag When enabled the switch continues to function after a crash of the main processor using the last known Layer 2 3 information The default setting is enabled Command mode Global configuration no system server ports port...

Page 345: ...drive from the USB port without corrupting files on the drive Note Not available in stacking Command mode Global configuration terminal dont ask Disables CLI confirmation prompts for the current session The switch will choose the default answer By default CLI confirmation prompts are enabled if they are not configured differently by using the prompting command Note When using this command any sett...

Page 346: ...t at login Command mode All ssl minimum version tls10 tls11 tls12 Configures the minimum accepted Transport Layer Security TLS version tls10 TLS version 1 0 tls11 TLS version 1 1 tls12 TLS version 1 2 Command mode Global configuration show boot strict Displays the current security strict mode status Command mode Global configuration show system Displays the current system parameters Command mode A...

Page 347: ... Options Command Syntax and Usage no errdisable recovery Globally enables or disables automatic error recovery for error disabled ports The default setting is disabled Note Each port must have error recovery enabled to participate in automatic error recovery Command mode Global configuration errdisable timeout 30 86400 Configures the error recovery timeout in seconds After the timer expires the sw...

Page 348: ...has elapsed Table 150 Link Flap Dampening Configuration Options Command Syntax and Usage no errdisable link flap enable Enables or disables Link Flap Dampening Command mode Global configuration errdisable link flap max flaps 1 100 Configures the maximum number of link flaps allowed in the configured time period The default value is 5 Command mode Global configuration errdisable link flap time 5 50...

Page 349: ...mmand mode Global configuration logging console severity 0 7 This option sets the severity level of syslog messages delivered via the console telnet and SSH The system displays only messages with the selected severity level and above For example if you set the console severity to 2 only messages with severity level of 1 and 2 are displayed The default is 7 which means log all severity levels Comma...

Page 350: ...isables features for which syslog messages can be generated You can choose to enable disable syslog on all available features by using the option all or enable disable specific features such as vlans stg or ssh For a complete list of features see page 352 Command mode Global configuration no logging pdrop enable Enables or disables packet drop logging By default the switch generates these messages...

Page 351: ...owed by the most recent 2000 syslog messages messages displays the most recent 2000 syslog messages only severity displays syslog messages of the specified severity level reverse displays syslog messages starting with the most recent message displays syslog messages that match one of the following filters include displays syslog messages that match the specified expression exclude displays syslog ...

Page 352: ...ng igmp group IGMP group logging igmp mrouter IGMP mrouter logging igmp querier IGMP querier logging ip Internet Protocol version 4 logging ipv6 Internet Protocol version 6 logging lacp Link Aggregation Control Protocol logging link System Port Link logging lldp LLDP logging management Management logging mld MLD logging netconf NETCONF Configuration Protocol logging ntp Network Time Protocol loggi...

Page 353: ... ssh Secure Shell logging stacking Stacking logging available only in stacking system System logging tftp File transfer logging ufp UFP logging vlag Virtual Link Aggregation logging vlan VLAN logging vm Virtual Machine logging vnic VNIC logging vrrp Virtual Router Redundancy Protocol logging web Web logging ...

Page 354: ...h maxauthattempts Resets the maximum number of SSH authentication attempts to its default value of 2 Command mode Global configuration ssh port TCP port number 1 65535 Sets the SSH server port number The default port number is 22 Command mode Global configuration no ssh port Resets the SSH server port to the default port number 22 Command mode Global configuration ssh public key index 1 100 adduse...

Page 355: ... keys index Displays a specific SSH public key username Displays all the SSH public keys of a particular user Command mode All clear ssh clienthostkey address SFTP server IP address all Clears stored SFTP SSH host key configuration address Clears a specific SFTP SSH host key all Clears all SFTP SSH host keys Command mode Privileged EXEC clear ssh clientpubkey all index 1 100 username user name Cle...

Page 356: ...lobal configuration default radius server port Resets the RADIUS server port to the default UDP port 1645 Command mode Global configuration radius server primary host hostname IP address key 1 32 characters Sets the primary RADIUS server address and the shared secret between the switch and the RADIUS server s Command mode Global configuration radius server primary host data port mgt port Defines t...

Page 357: ...and mode Global configuration no radius server secure backdoor Enables or disables the RADIUS back door using secure password for telnet SSH HTTP HTTPS This command does not apply when backdoor is enabled Command mode Global configuration radius server timeout 1 10 Sets the amount of time in seconds before a RADIUS server authentication attempt is considered to have failed The default is 3 seconds...

Page 358: ...upports full packet encryption as opposed to password only in authentication requests It supports de coupled authentication authorization and accounting Table 154 TACACS Server Configuration Options Command Syntax and Usage no tacacs server accounting enable Enables or disables TACACS accounting Command mode Global configuration tacacs server attempts 1 10 Sets the number of failed login attempts ...

Page 359: ... enabled each user must add a configured TACACS server hostname to the username for example username hostname during login This command allows the following options restricted Only the username is sent to the specified TACACS server no truncate The entire login string is sent to the TACACS server Command mode Global configuration no tacacs server directed request Disables TACACS directed request C...

Page 360: ...d mode Global configuration tacacs server primary host data port mgt port Defines the primary interface port to use to send TACACS server requests Select the port to use for data transfer Command mode Global configuration no tacacs server primary host key Deletes the primary TACACS server The key option only removes the shared secret between the switch and the TACACS server Command mode Global con...

Page 361: ...ing This feature is recommended to permit access to the switch when the TACACS servers become unresponsive If no back door is enabled the only way to gain access when TACACS servers are unresponsive is to use the back door via the console port The default is disabled Command mode Global configuration tacacs server timeout 4 15 Sets the amount of time in seconds before a TACACS server authenticatio...

Page 362: ...r the primary TACACS server The CLI will prompt you for input Command mode Global configuration secondary password Configures the password for the secondary TACACS server The CLI will prompt you for input Command mode Global configuration show tacacs server Displays current TACACS configuration parameters Command mode All Table 154 TACACS Server Configuration Options continued Command Syntax and U...

Page 363: ... group 1 128 characters Configures a customized LDAP group search attribute where the group membership information of the user is stored The default value is memberOf Note This option is available only in LDAP enhanced mode Command mode Global configuration no ldap server attribute group Resets the LDAP group search attribute to its default value of memberOf Note This option is available only in L...

Page 364: ...P or HTTPS access The default setting is disabled Note To obtain the LDAP back door password for your G8264 contact your Service and Support line Command mode Global configuration ldap server basedn 1 128 characters Configure the Distinguished Name DN of the LDAP server The DN consists of a sequence of different Relative Distinguished Names RDN connected by commas An RDN is an attribute that has a...

Page 365: ...ap server binddn dn 1 64 characters key 1 32 characters Configures a customized distinguished name DN and password This creates a set of pre configured credentials that can be used for authentication when sending a bind request to the LDAP server Note The credentials configured through this command are used only when the switch bind mode is set to pre config If the bind mode is set to login any cr...

Page 366: ...is 389 Note The IP address and port number of a LDAP server must be non zero Note This option is available only in LDAP enhanced mode Command mode Global configuration no ldap server host LDAP server number 1 4 Removes the specified external LDAP server Note This option is available only in LDAP enhanced mode Command mode Global configuration ldap server port UDP port number 1 65000 Enter the numb...

Page 367: ...onfigures LDAP to not encrypt LDAP credentials DN and password when sending a bind request to the LDAP server The default security mode is clear clear text Note This option is available only in LDAP enhanced mode Command mode Global configuration ldap server security ldaps Configures LDAP to encrypt LDAP credentials DN and password using Secure LDAP LDAPS when sending a bind request to the LDAP se...

Page 368: ...and the LDAP client both compare the other s CA root certificate against their own If both certificates match the authentication succeeds If either certificate does not match the authentication fails Note This option is available only in LDAP enhanced mode Command mode Global configuration no ldap server srv Enables or disables the switch to look up LDAP server information by retrieving a Service ...

Page 369: ...le c England uid user ID For example uid 329800735698586629295641978511506172918 no ldap server ipv6 secondary host Deletes the secondary LDAP server Note This option is available only in LDAP legacy mode Command mode Global configuration ldap server timeout 4 15 Sets the amount of time in seconds before a LDAP server authentication attempt is considered to have failed The default is 5 seconds Com...

Page 370: ...ich you want to synchronize the switch clock Command mode Global configuration ntp ipv6 primary server IPv6 address data port mgt port Prompts for the IPv6 address of the primary NTP server to which you want to synchronize the switch clock Command mode Global configuration no ntp ipv6 primary server Deletes the IPv6 primary NTP server Command mode Global configuration ntp ipv6 secondary server dat...

Page 371: ...conds Command mode Global configuration no ntp offset Resets the NTP offset to the default 300 seconds value Command mode Global configuration ntp secondary server data port mgt port Prompts for the port of the secondary NTP server to which you want to synchronize the switch clock Command mode Global configuration ntp secondary server hostname or IP address data port mgt port Prompts for the IP ad...

Page 372: ...r disables informational logs for NTP synchronization failures Default setting is enabled Command mode Global configuration show ntp Displays the current NTP service settings Command mode All Table 156 NTP Server Configuration Options continued Command Syntax and Usage ...

Page 373: ...agement objects to retrieve or to modify SNMP parameters that can be modified include System name System location System contact Use of the SNMP system authentication trap function Read community string Write community string Trap community strings Table 157 System SNMP Options Command Syntax and Usage no snmp server authentication trap enable Enables or disables the use of the system authenticati...

Page 374: ...rs Configures the name for the system The name can have a maximum of 64 characters Command mode Global configuration no snmp server name Deletes the name of the system Command mode Global configuration snmp server read community 1 32 characters Configures the SNMP read community string The read community string controls SNMP get access to the switch It can have a maximum of 32 characters The defau...

Page 375: ...onfiguration snmp server write community 1 32 characters Configures the SNMP write community string The write community string controls SNMP set access to the switch It can have a maximum of 32 characters The default write community string is private Command mode Global configuration no snmp server write community additional 1 32 characters Adds or removes an additional SNMP write community string...

Page 376: ...pendent SNMP message parameters To view command options see page 382 Command mode Global configuration snmp server group 1 17 A group maps the user name to the access group names and their access rights needed to access SNMP management objects A group defines the access rights assigned to all names that belong to a particular group To view command options see page 381 Command mode Global configura...

Page 377: ...eral sets of SNMP parameters To view command options see page 384 Command mode Global configuration snmp server user 1 17 This command allows you to create a user security model USM entry for an authorized user You can also configure this entry through SNMP To view command options see page 378 Command mode Global configuration snmp server view 1 128 This command allows you to create different MIB ...

Page 378: ...during validation This command allows you to create or change your password for authentication Command mode Global configuration snmp server user 1 17 name 1 32 characters This command allows you to configure a string that represents the name of the user This is the login name that you need in order to access the switch Command mode Global configuration snmp server user 1 17 privacy protocol des a...

Page 379: ...iew subtrees Command mode Global configuration snmp server view 1 128 name 1 32 characters This command defines the name for a family of view subtrees Command mode Global configuration snmp server view 1 128 tree 1 63 characters This command defines MIB tree which when combined with the corresponding mask defines a family of view subtrees Command mode Global configuration snmp server view 1 128 ty...

Page 380: ... both with authentication and using a privacy protocol Command mode Global configuration snmp server access 1 32 name 1 32 characters Defines the name of the group Command mode Global configuration snmp server access 1 32 notify view 1 32 characters Defines a notify view name that allows you notify access to the MIB view Command mode Global configuration snmp server access 1 32 read view 1 32 char...

Page 381: ...mp server group 1 17 group name 1 32 characters The name for the access group as defined in the following command snmp server access 1 32 name 1 32 characters on page 378 Command mode Global configuration snmp server group 1 17 security usm snmpv1 snmpv2 Defines the security model Command mode Global configuration snmp server group 1 17 user name 1 32 characters Sets the user name as defined in th...

Page 382: ...1 16 name 1 32 characters Defines the user name as defined in the following command snmp server user 1 17 name 1 32 characters on page 378 Command string Global configuration snmp server community 1 16 tag 1 255 characters Allows you to configure a tag This tag specifies a set of transport endpoints to which a command responder application sends an SNMP trap Command mode Global configuration snmp ...

Page 383: ...address 1 16 name 1 32 characters address transport IP address Configures a transport IPv4 address that can be used in the generation of SNMP traps Command mode Global configuration snmp server target address 1 16 name 1 32 characters address6 transport IPv6 address Configures a transport IPv6 address that can be used in the generation of SNMP traps IPv6 addresses are not displayed in the configur...

Page 384: ...Parameters Table Configuration Options Command Syntax and Usage snmp server target parameters 1 16 level noAuthNoPriv authNoPriv authPriv Allows you to select the level of security to be used when generating the SNMP messages using this entry noAuthNoPriv means that the SNMP message will be sent without authentication and without using a privacy protocol authNoPriv means that the SNMP message will...

Page 385: ...s the targetParamsTable entry Command mode Global configuration show snmp server v3 target parameters 1 16 Displays the current targetParamsTable configuration Command mode All Table 165 Target Parameters Table Configuration Options continued Command Syntax and Usage Table 166 Notify Table Options Command Syntax and Usage snmp server notify 1 16 name 1 32 characters Defines a locally arbitrary but...

Page 386: ...0 Command mode Global configuration access snmp read only read write Enables read only write read SNMP access Command mode Global configuration no access snmp Disables SNMP access Command mode Global configuration no access telnet enable Enables or disables Telnet access The default setting is enabled Command mode Global configuration access telnet port TCP port number 1 65535 Sets an optional Tel...

Page 387: ...agement Network Configuration Options Command Syntax and Usage no access management network mgmt network IPv4 address mgmt network IPv4 netmask Adds or removes a defined network through which switch access is allowed via Telnet SNMP or the Enterprise NOS browser based interface A range of IPv4 addresses is produced when used with a network mask address Specify an IPv4 address and mask address in d...

Page 388: ...uration causes the Firewall Load Balancing health checks to fail and creates a Network Down state on the network Command mode Global configuration no access management network6 mgmt network IPv6 address IPv6 prefix length snmp ro snmp rw Adds or removes a defined IPv6 network through which SNMP read only or SNMP read write switch access is allowed Command mode Global configuration no access manage...

Page 389: ...netconf timeout 30 3600 Configures the timeout value for NETCONF sessions in seconds The default value is 300 seconds Command mode Global configuration default access netconf timeout Resets the timeout value for NETCONF sessions to the default of 300 seconds Command mode Global configuration show access Displays the current configuration Command mode All Table 170 NETCONF over SSH Configuration Op...

Page 390: ...disable the administrator password Command Mode Global configuration access user eject user name session id session ID Ejects the specified user from the G8264 Command mode Global configuration access user operator password Sets the operator oper password The operator manages all functions of the switch The operator can view all switch information and statistics and can reset ports This command wi...

Page 391: ...cess user 1 20 level user operator administrator Sets the Class of Service to define the user s authority level Enterprise NOS defines these levels as User Operator and Administrator with User being the most restricted level Command mode Global configuration access user 1 20 name 1 64 characters Defines the user name of maximum eight characters Command mode Global configuration access user 1 20 pa...

Page 392: ...ong password expiry 1 365 Configures the number of days allowed before the password must be changed The default value is 60 days Command mode Global configuration access user strong password faillock 1 10 Configures the number of failed login attempts that trigger the account lockout The default value is 6 attempts Command mode Global configuration access user strong password faillog 1 255 Configu...

Page 393: ...S Command mode Global configuration access https generate certificate Allows you to generate a certificate to connect to the SSL to be used during the key exchange A default certificate is created when HTTPS is enabled for the first time The user can create a new certificate defining the information that they want to be used in the various fields For example Country Name 2 letter code CA State or ...

Page 394: ... Command mode Global configuration access https save certificate Allows the client or the Web browser to accept the certificate and save the certificate to Flash to be used when the switch is rebooted Command mode Global configuration access https delete certificate Deletes the current certificate from the flash memory Command mode Global configuration access https port TCP port number 1 65535 Def...

Page 395: ...ftp sftp public key data port mgt port Enables you to import a client public key using TFTP SFTP Command mode Global configuration copy tftp public key address hostname or server IP address filename server filename data port mgt port Enables you to import a client public key using TFTP Command mode Global configuration copy cert request tftp ftp sftp address hostname or server IP address filename ...

Page 396: ...nable Enables or disables the Custom Daylight Saving Time settings Command mode Global configuration system custom dst start rule WDDMMhh Configures the start date for custom DST as follows WDMMhh W week 0 5 where 0 means use the calendar date D day of the week 01 07 where 01 is Monday MM month 1 12 hh hour 0 23 Note Week 5 is always considered to be the last week of the month Command mode Global ...

Page 397: ...ent Command mode Global configuration sflow port UDP port number 1 65000 Configures the UDP port for the sFlow server The default value is 6343 Command mode Global configuration default sflow port Resets the sFlow server port to the default port number 6343 Command mode Global configuration sflow server IP address data port mgt port Defines the sFlow server address and interface port Command mode ...

Page 398: ...lling 5 60 Configures the sFlow polling interval in seconds The default setting is disabled Command mode Interface port no sflow polling Disables sFlow polling interval Command mode Interface port sflow sampling 256 65536 Configures the sFlow sampling rate in packets per sample The default setting is disabled Command mode Interface port no sflow sampling Disables sFlow sampling rate Command mode I...

Page 399: ...idered to be uplink ports VMready learns Virtual Machine information only from server ports Table 178 Server Port Configuration Options Command Syntax and Usage no system server ports port port alias or number Adds or removes one or more ports to the list of server ports Command mode Global configuration show system server ports Displays the current server port configuration Command mode All ...

Page 400: ...e for the ports Note Supported in OpenFlow Only mode Command mode Global Configuration no bpdu guard Enables or disables BPDU guard to avoid Spanning Tree loops on ports configured as edge ports Command mode Interface port Interface portchannel description 1 64 characters Sets a description for the port The assigned port description appears next to the port number on some information and statistic...

Page 401: ...ce port no learning Enables or disables FDB learning on the port Command mode Interface port Interface portchannel no mac address table mac notification Enables or disables MAC Address Notification With MAC Address Notification enabled the switch generates a syslog message when a MAC address is added or removed from the MAC address table Command mode Interface port Interface portchannel port chann...

Page 402: ...icast level rate 0 2097151 Limits the available bandwidth for broadcast multicast or unicast messages to the specified value Command mode Interface port Interface portchannel no storm control broadcast multicast unicast Sets the port to forward all broadcast multicast or unicast packets Command mode Interface port Interface portchannel no switchport Enables or disables routing on a port Command mo...

Page 403: ... private vlan host association primary VLAN ID 2 4094 secondary VLAN ID 2 4094 Enables or disables the private VLAN association on a secondary port Command mode Interface port Interface portchannel no switchport private vlan mapping primary VLAN ID 2 4094 Enables or disables private VLAN mapping on a port in promiscuous mode Command mode Interface port Interface portchannel switchport trunk allowe...

Page 404: ...xisting regular VLANs and to any other VLAN that gets created afterwards none removes the port from all currently associated VLANs and assigns the port to the default VLAN VLAN 1 for data ports and VLAN 4095 for the management port Command mode Interface port Interface portchannel no switchport trunk allowed vlan Assigns the port to all available data VLANs Command mode Interface port Interface po...

Page 405: ...sabled the VLAN tag is removed at egress from packets whose VLAN tag matches the port PVID Native vlan The default setting is disabled Note In global configuration mode this is an operational command used to set the VLAN tag persistence on all ports currently tagged at the moment of execution VLAN tag persistence will not be set automatically for ports tagged afterwords Also as an operational comm...

Page 406: ...yntax and Usage no errdisable recovery Enables or disables automatic error recovery for the port The default setting is enabled Note Error recovery must be enabled globally before port level commands become active Command mode Interface port Interface portchannel show interface port port alias or number errdisable Displays the specified port s Error Disable parameters Command mode All Table 181 Po...

Page 407: ...mand mode Interface port Interface portchannel duplex full half auto Sets the operating mode The choices include Auto negotiation default Half duplex Full duplex Note Data ports are fixed at full duplex Command mode Interface port Interface portchannel flowcontrol receive send on off Turns flow control receiving or transmiting on or off Command mode Interface port Interface portchannel no flowcont...

Page 408: ...ollowing command at any prompt Because this configuration sets a temporary state for the port you do not need to use a save operation The port state will revert to its original configuration when the RackSwitch G8264 is rebooted See the Operations Commands on page 685 for other operations level commands RS G8264 config interface port port alias or number shutdown ...

Page 409: ... Configures the UDLD mode for the selected port as follows Normal Detect unidirectional links that have mis connected interfaces The port is disabled if UDLD determines that the port is mis connected Use the no form to select normal operation Aggressive In addition to the normal mode the aggressive mode disables the port if the neighbor stops sending UDLD probes for 7 seconds Command mode Interfac...

Page 410: ...t OAM Configuration Options Command Syntax and Usage no oam Enables or disables OAM discovery on the current port Command mode Interface port no oam passive Enables or disables OAM discovery passive mode In passive mode the current port allows its peer link to initiate OAM discovery If OAM determines that the port is in an anomalous condition the port is disabled Command mode Interface port show i...

Page 411: ...wo Command mode Interface port Interface portchannel no access control list 1 256 Adds or removes the specified ACL to the port You can add multiple ACLs to a port but the total number of precedence levels allowed is two Command mode Interface port Interface portchannel no access control list6 1 128 Adds or removes the specified IPv6 ACL to the port You can add multiple ACLs to a port but the tota...

Page 412: ...r disables Random Detection and avoidance Command mode Interface port no random detect ecn enable Enables or disables Explicit Congestion Notification ECN When ECN is on the switch marks the ECN bit of the packet if applicable instead of dropping the packet ECN aware devices are notified of the congestion and those devices can take corrective actions Note ECN functions only on TCP traffic Command ...

Page 413: ...x and Usage no random detect transmit queue 0 7 enable Enables or disables the WRED transmit queue configuration Command mode Interface port random detect transmit queue 0 7 tcp min threshold 1 100 max threshold 1 100 drop rate 1 100 Configures the WRED thresholds for TCP traffic Command mode Interface port no random detect transmit queue 0 7 tcp Clears the WRED configuration for TCP traffic Comma...

Page 414: ...ptions Command Syntax and Usage connect attached switch number 1 16 Provides console access to member switches from the master switch Command mode Privileged EXEC stack backup configured switch number 1 8 Defines the backup switch in the stack based on its configured switch number Command mode Global configuration no stack backup Deletes the backup switch configuration Command mode Global configur...

Page 415: ...ch number configured switch number 1 8 description 1 63 characters Sets a description for the configured switch Command mode Global configuration no stack switch number configured switch number 1 8 description Deletes the description of the configured switch Command mode Global configuration stack switch number configured switch number 1 8 mac MAC address Binds the selected switch to the stack bas...

Page 416: ...ver the new master installs this address and sends out an ARP announcing the new MAC Table 190 Stacking Management Interface Options Command Syntax and Usage floating ip address IP address IP netmask Configures floating IPv4 address and netmask Command mode Interface IP 128 no floating Removes the floating IPv4 address Command mode Interface IP 128 show interface ip 128 Displays current IP address...

Page 417: ...ity Enter the 802 1p priority value followed by the Class of Service queue that handles the matching traffic Command mode Global configuration default qos transmit queue mapping Resets the 802 1p packet priority mapping to its default values Command mode Global configuration qos transmit queue multicast mapping priority 0 7 COSq number 8 11 Maps the 802 1p priority to the multicast Class of Servic...

Page 418: ...he multicast queue number followed by the scheduling weight Command mode Global configuration default qos transmit queue multicast weight Resets the weights of multicast Class of Service queues to their default values Command mode Global configuration show qos transmit queue Displays the current 802 1p parameters Command mode All Table 191 802 1p Configuration Options Command Syntax and Usage ...

Page 419: ...v Code point value to an 802 1p priority value Enter the DSCP value followed by the corresponding 802 1p value Command mode Global configuration qos dscp dscp mapping DSCP 0 63 new DSCP 0 63 Maps the initial DiffServ Code Point DSCP value to a new value Enter the DSCP value of incoming packets followed by the new value Command mode Global configuration no qos dscp re marking Globally enables or di...

Page 420: ...itical packets of applications arp bcast ARP broadcast packets arp ucast ARP unicast reply packets bgp BGP packets bpdu Spanning Tree Protocol packets cisco bpdu Cisco STP packets dest unknown packets with destination not yet learned dhcp DHCP packets ecp ECP packets fips FIPS packets icmp ICMP packets icmp6 ICMP6 packets igmp IGMP packets ipv4 miscellaneous IPv4 packets with IP options and TTL ex...

Page 421: ...iguration no qos protocol packet control rate limit packet queue packet queue number 0 47 Clears the packet rate configured for the selected packet queue Command mode Global configuration show qos protocol packet control information protocol Displays of mapping of protocol packet types to each packet queue number The status indicates whether the protocol is running or not running Command mode All ...

Page 422: ...r port WRED commands see Port WRED Configuration on page 412 Table 194 WRED Configuration Options Command Syntax and Usage no qos random detect ecn enable Enables or disables Explicit Congestion Notification ECN When ECN is on the switch marks the ECN bit of the packet if applicable instead of dropping the packet ECN aware devices are notified of the congestion and those devices can take correctiv...

Page 423: ...detect transmit queue 0 7 non tcp min threshold min threshold 1 100 max threshold max threshold 1 100 drop rate drop rate 1 100 Configures the WRED thresholds for non TCP traffic Command mode Global configuration qos random detect transmit queue 0 7 tcp min threshold min threshold 1 100 max threshold max threshold 1 100 drop rate drop rate 1 100 Configures the WRED thresholds for TCP traffic Comma...

Page 424: ... page 443 Command mode Global configuration access control list 1 256 Configures an Access Control List To view command options see page 425 Command mode Global configuration access control list6 1 128 Configures an IPv6 Access Control List To view command options see page 435 Command mode Global configuration access control macl 1 128 Configures an Access Control List To view command options see ...

Page 425: ...oup LAG Command mode Global configuration access control list 1 256 egress port port port alias or number Configures the ACL to function on egress packets Command mode Global configuration no access control list 1 256 egress port Disables the ACL to function on egress packets Command mode Global configuration no access control list 1 256 log Enables or disables logging for the Access Control List ...

Page 426: ...plays the current port mirroring parameters for the ACL Command mode All Table 199 Ethernet Filtering Configuration Options Command Syntax and Usage access control list 1 256 ethernet destination mac address MAC address MAC mask Defines the destination MAC address for this ACL Command mode Global configuration no access control list 1 256 ethernet destination mac address Removes the destination MA...

Page 427: ...trol list 1 256 ethernet vlan VLAN ID 1 4094 VLAN mask Defines a VLAN number and mask for this ACL Command mode Global configuration no access control list 1 256 ethernet vlan Removes VLAN number and mask for this ACL Command mode Global configuration default access control list 1 256 ethernet Resets Ethernet parameters for the ACL to their default values Command mode Global configuration no acces...

Page 428: ...otocol matches this filter Specify the protocol number Listed below are some of the well known protocols Number Name 1 icmp 2 igmp 6 tcp 17 udp 89 ospf 112 vrrp Command mode Global configuration no access control list 1 256 ipv4 protocol Deletes the configured IP protocol for the specified ACL Command mode Global configuration access control list 1 256 ipv4 source ip address IP address IP mask Def...

Page 429: ...rs Command mode All Table 200 IP version 4 Filtering Configuration Options Command Syntax and Usage Table 201 TCP UDP Filtering Configuration Options Command Syntax and Usage access control list 1 256 tcp udp source port 1 65535 mask 0xFFFF Defines a source port for the ACL If defined traffic with the specified TCP or UDP source port will match this ACL Specify the port number Listed here are some...

Page 430: ...ACL Command mode Global configuration access control list 1 256 tcp udp flags value 0x0 0x3f mask 0x0 0x3f Defines a TCP UDP flag for the ACL Command mode Global configuration no access control list 1 256 tcp udp flags Disables the configured TCP UDP flag for the specified ACL Command mode Global configuration default access control list 1 256 tcp udp Resets the TCP UDP parameters for the ACL to t...

Page 431: ...mat ip ipv4 ipv6 Defines the IP format for the ACL Command mode Global configuration access control list 1 256 packet format tagging any none tagged Defines the tagging format for the ACL Command mode Global configuration no access control list 1 256 packet format ethernet ip tagging Deletes the selected format for the specified ACL Command mode Global configuration default access control list 1 2...

Page 432: ... a multiple of 64 Command mode Global configuration no access control list 1 256 meter enable Enables or disables ACL Metering Command mode Global configuration access control list 1 256 meter maximum burst size 32 4096 Configures the maximum burst size in kilobits Enter one of the following values for mbsize 32 64 128 256 512 1024 2048 4096 Command mode Global configuration default access control...

Page 433: ...e Options Command Syntax and Usage access control list 1 256 re mark dot1p 0 7 Re marks the 802 1p value The value is the priority bits information in the packet structure Command mode Global configuration no access control list 1 256 re mark dot1p Disables the use of 802 1p priority for in profile traffic Command mode Global configuration access control list 1 256 re mark in profile dscp 0 63 Re ...

Page 434: ... Table 206 ACL Re Marking Out of Profile Options Command Syntax and Usage access control list 1 256 re mark out profile dscp 0 63 Re marks the DSCP value on out of profile packets for the ACL Command mode Global configuration no access control list 1 256 re mark out profile Disables re marking on out of profile traffic Command mode Global configuration ...

Page 435: ... packets either through an ethernet port or a Link Aggregation Group LAG Command mode Global configuration access control list6 1 128 egress port port port alias or number Configures the ACL to function on egress packets Command mode Global configuration no access control list6 1 128 egress port port Disables the ACL to function on egress packets Command mode Global configuration no access control...

Page 436: ...st6 1 128 ipv6 flow label Deletes the configured flow label for the specified ACL Command mode Global configuration access control list6 1 128 ipv6 next header 0 255 Defines the next header value for the ACL If defined traffic with this next header value will match this ACL Command mode Global configuration no access control list6 1 128 ipv6 next header Deletes the configured next header for the s...

Page 437: ...mmand mode All Table 208 IP version 6 Filtering Options Command Syntax and Usage Table 209 IPv6 ACL TCP UDP Filtering Options Command Syntax and Usage access control list6 1 128 tcp udp source port source port number 1 65535 mask 0xFFFF Defines a source port for the ACL If defined traffic with the specified TCP or UDP source port will match this ACL Specify the port number Listed here are some of ...

Page 438: ... for the specified ACL Command mode Global configuration access control list6 1 128 tcp udp flags value 0x0 0x3f mask 0x0 0x3f Defines a TCP UDP flag for the ACL Command mode Global configuration no access control list6 1 128 tcp udp flags Deletes the configured TCP UDP flag for the specified ACL Command mode Global configuration default access control list6 1 128 tcp udp Resets the TCP UDP parame...

Page 439: ...rofile Options Command Syntax and Usage access control list6 1 128 re mark dot1p 0 7 Re marks the 802 1p value The value is the priority bits information in the packet structure Command mode Global configuration no access control6 list6 1 128 re mark dot1p Disables the use of 802 1p priority for in profile traffic Command mode Global configuration access control list6 1 128 re mark in profile dscp...

Page 440: ... Options Command Syntax and Usage access control list6 1 128 re mark out profile dscp 0 63 Re marks the DSCP value on out of profile packets for the ACL Command mode Global configuration no access control list6 1 128 re mark out profile Disables re marking on out of profile traffic Command mode Global configuration show access control list6 1 128 re mark Displays current re mark parameters Command...

Page 441: ...ate in kilobits per second The committed rate must be a multiple of 64 Command mode Global configuration no access control list6 1 128 meter enable Enables or disables ACL Metering Command mode Global configuration access control list6 1 128 meter maximum burst size 32 4096 Configures the maximum burst size in kilobits Enter one of the following values for mbsize 32 64 128 256 512 1024 2048 4096 C...

Page 442: ...s Control List logging Command mode Global configuration access control log interval 5 600 Sets the filter log displaying interval in seconds The default setting is 300 seconds Command mode Global configuration access control log rate limit 1 1000 Sets the filter log queue rate limit in packets per second pps The default settings is 10 pps Command mode Global configuration default access control l...

Page 443: ...e ports Table 215 ACL Group Configuration Commands Command Syntax and Usage no access control group 1 256 list 1 256 Adds or removes the selected IPv4 ACL to the ACL group Command mode Global configuration no access control group 1 256 list6 1 128 Adds or removes the selected IPv6 ACL to the ACL group Command mode Global configuration show access control group 1 256 Displays the current ACL group ...

Page 444: ...ny drop packets or set the 802 1p priority level 0 7 Command mode Global configuration no access control macl 1 128 enable Enables or disables the management ACL Command mode Global configuration no access control macl 1 128 statistics Enables or disables the statistics collection for the MACL Command mode Global configuration show access control macl 1 128 Displays the current MACL parameters Com...

Page 445: ...ation access control macl 1 128 ipv4 source ip address IP address IP mask Defines a source IP address for the MACL If defined traffic with this source IP address will match this MACL Specify an IP address in dotted decimal notation Command mode Global configuration no access control macl 1 128 ipv4 source ip address Deletes the configured source IP address for the specified MACL Command mode Globa...

Page 446: ...70 gopher 79 finger 80 http Command mode Global configuration no access control macl 1 128 tcp udp source port Deletes the configured source port for the specified MACL Command mode Global configuration access control macl 1 128 tcp udp destination port 1 65535 mask 0xFFFF Defines a destination port for the MACL If defined traffic with the specified TCP or UDP destination port will match this MACL...

Page 447: ...CL Command mode Global configuration default access control macl 1 128 tcp udp Resets the TCP UDP parameters for the MACL to their default values Command mode Global configuration show access control macl 1 128 tcp udp Displays the current TCP UDP Filtering parameters Command mode All Table 218 TCP UDP Filtering Configuration Options Command Syntax and Usage ...

Page 448: ...ority 0 7 Configures a filter action for packets that match the VMAP definitions You can choose to permit pass or deny drop packets or set the 802 1p priority level Command mode Global configuration access control vmap 1 128 action redirect port port alias or number portchannel 1 128 Configures the switch to redirect traffic that matches the VMAP definitions to a specific port or Link Aggregation ...

Page 449: ...dress MAC address MAC mask Defines the source MAC address for the VMAP Command mode Global configuration no access control vmap 1 128 ethernet source mac address Removes the source MAC address for the specified VMAP Command mode Global configuration access control vmap 1 128 ethernet vlan VLAN ID 1 4094 VLAN mask Defines a VLAN number and mask for the VMAP Command mode Global configuration no acce...

Page 450: ...ce IP address Command mode Global configuration no access control vmap 1 128 ipv4 source ip address Disables filtering of VMAP statistics collection based on source IP address Command mode Global configuration access control vmap 1 128 ipv4 type of service 0 255 Enables filtering of VMAP statistics collection based on type of service Command mode Global configuration no access control vmap 1 128 i...

Page 451: ...n no access control vmap 1 128 mirror Disables VMAP mirroring Command mode Global configuration access control vmap 1 128 packet format ethernet ethernet type2 llc snap Sets to filter the specified ethernet packet format type Command mode Global configuration access control vmap 1 128 packet format ip ipv4 ipv6 Sets to filter the specified IP packet format type Command mode Global configuration ac...

Page 452: ...s control vmap 1 128 re mark in profile out profile Removes all re mark in profile or out profile settings Command mode Global configuration no access control vmap 1 128 re mark in profile dscp Disables the use of DSCP for in profile traffic Command mode Global configuration no access control vmap 1 128 re mark use tos precedence Enables or disables the use of the TOS precedence for in profile tra...

Page 453: ...n default access control vmap 1 128 tcp udp Resets the TCP UDP parameters for the VMAP to their default values Command mode Global configuration no access control vmap 1 128 tcp udp Removes TCP UDP filtering for this ACL Command mode Global configuration default access control vmap 1 128 Resets the VMAP parameters to their default values Command mode Global configuration no access control vmap 1 1...

Page 454: ...ow port mirroring Displays current settings of the mirrored and monitoring ports Command mode All Table 221 Port Based Port Mirroring Configuration Options Command Syntax and Usage port mirroring monitor port port alias or number mirroring port port alias or number in out both Adds the port to be mirrored This command also allows you to enter the direction of the traffic It is necessary to specify...

Page 455: ... Global Configuration on page 456 802 1X Guest VLAN Configuration on page 458 802 1X Port Configuration on page 459 Table 222 Layer 2 Configuration Commands Command Syntax and Usage vlan VLAN ID 1 4094 Enter VLAN configuration mode If the specified VLAN s doesn t exist it will be created To view command options see page 501 Command mode Global configuration show layer2 Displays current Layer 2 par...

Page 456: ...thorized by the RADIUS server force authorized the port is authorized unconditionally allowing all traffic The default value is force authorized Command mode Global configuration dot1x quiet time 0 65535 Sets the time in seconds the authenticator waits before transmitting an EAP Request Identity frame to the supplicant client after an authentication failure in the previous round of authentication ...

Page 457: ...om the supplicant client before retransmitting the EAP Request packet from the authentication server The default value is 30 seconds Command mode Global configuration dot1x transmit interval 1 65535 Sets the time in seconds the authenticator waits for an EAP Response Identity frame from the supplicant client before retransmitting an EAP Request Identity frame The default value is 30 seconds Comman...

Page 458: ...le 225 802 1X Guest VLAN Configuration Options Command Syntax and Usage no dot1x guest vlan enable Enables or disables the 802 1X Guest VLAN Command mode Global configuration dot1x guest vlan vlan VLAN ID 1 4094 Configures the Guest VLAN number Command mode Global configuration no dot1x guest vlan vlan Removes the Guest VLAN number Command mode Global configuration show dot1x Displays current 802 ...

Page 459: ...thorized until it is successfully authorized by the RADIUS server force authorized the port is authorized unconditionally allowing all traffic force unauthorized the port is unauthorized unconditionally The default value is force authorized Command mode Interface port dot1x quiet time 0 65535 Sets the time in seconds the authenticator waits before transmitting an EAP Request Identity frame to the ...

Page 460: ...cant client before retransmitting the EAP Request packet from the authentication server The default value is 30 seconds Command mode Interface port dot1x transmit interval 1 65535 Sets the time in seconds the authenticator waits for an EAP Response Identity frame from the supplicant client before retransmitting an EAP Request Identity frame The default value is 30 seconds Command mode Interface po...

Page 461: ...BPDU is received Command mode Global configuration spanning tree mode disable mst pvrst rstp Selects and enables Multiple Spanning Tree mode mst Per VLAN Rapid Spanning Tree mode pvrst or Rapid Spanning Tree mode rstp The default mode is PVRST When you select the disable option the switch globally turns Spanning Tree off All ports are placed into forwarding state Any BPDU s received are flooded Co...

Page 462: ...rt as follows auto Configures the port to detect the link type and automatically match its settings p2p Configures the port for Point To Point protocol shared Configures the port to connect to a shared medium usually a hub The default link type is auto Command mode Interface port Interface portchannel no spanning tree portfast Enables or disables this port as portfast or edge port An edge port is ...

Page 463: ...g time You can also see the following port specific STG information Port alias and priority Cost State Command mode All show spanning tree root Displays the Spanning Tree configuration on the root bridge for each STP instance For details see page 81 Command mode All show spanning tree blockedports Lists the ports blocked by each STP instance Command mode All show spanning tree vlan VLAN ID 1 4094 ...

Page 464: ...root bridge To make this switch the root bridge configure the bridge priority lower than all other switches and bridges on your network The lower the value the higher the bridge priority The range is 0 to 65535 in steps of 4096 0 4096 8192 12288 and the default value is 32768 Command mode Global configuration no spanning tree mst 0 32 priority Resets the bridge priority for the specified MSTP inst...

Page 465: ...mmand mode MST configuration name 1 32 characters Configures a name for the MSTP region All devices within an MSTP region must have the same region name Command mode MST configuration no name Clears the name of the MSTP region Command mode MST configuration revision 0 65535 Configures a revision number for the MSTP region The revision is used as a numerical identifier for the region All devices wi...

Page 466: ...cost is used to help determine the designated port for a segment Port path cost is based on the port speed and is calculated as follows 1Gbps 20000 10Gbps 2000 The default value of 0 zero indicates that the default path cost will be computed for an auto negotiated link speed Command mode Interface port Interface portchannel no spanning tree mst 0 32 enable Enables or disables the specified MSTP in...

Page 467: ...rotocol data unit BPDU Any bridge that is not the root bridge uses the root bridge Hello value The range is 1 to 10 seconds and the default is 2 seconds Command mode Interface port Interface portchannel show interface port port alias or number spanning tree mstp cist Displays the current CIST port configuration Command mode All Table 229 MSTP Port Configuration Options continued Command Syntax and...

Page 468: ... of 128 Note The switch needs to be reloaded for the configuration to take effect Command mode Global configuration no spanning tree stp 1 256 enable Globally enables or disables Spanning Tree Protocol STG is turned on by default Command mode Global configuration spanning tree stp 1 256 vlan VLAN ID 1 4094 Associates a VLAN with a Spanning Tree Group and requires a VLAN ID as a parameter If the VL...

Page 469: ...m number of available STGs after the switch reloads For a sample output see page 703 Command mode All show spanning tree stp 1 256 Displays current Spanning Tree Protocol parameters for the specified Spanning Tree Group See page 75 for details about the information parameter Command mode All Table 230 RSTP PVRST Configuration Options continued Command Syntax and Usage ...

Page 470: ...ation no spanning tree stp 1 256 bridge forward delay Resets the bridge forward delay parameter to its default value of 15 seconds Command mode Global configuration spanning tree stp 1 256 bridge hello time 1 10 Configures the bridge Hello time The Hello time specifies how often the bridge transmits a configuration bridge protocol data unit BPDU Any bridge that is not the root bridge uses the root...

Page 471: ... other switches and bridges on your network The lower the value the higher the bridge priority Enter the value in multiples of 4096 Non multiples are automatically rounded up to the closest valid priority The default value is 32768 Command mode Global configuration no spanning tree stp 1 256 bridge priority Resets the bridge priority to its default value of 32768 Command mode Global configuration ...

Page 472: ...e default value of 0 zero indicates that the default path cost will be computed for an auto negotiated link speed Command mode Interface port Interface portchannel spanning tree stp 1 256 priority 0 240 Configures the port priority The port priority helps determine which bridge port becomes the designated port In a network topology that has multiple bridge ports connected to a single segment the p...

Page 473: ...65535 Configures the aging value for FDB entries in seconds The default value is 300 seconds Command mode Global configuration mac address table multicast Configures multicast FDB entries For command options see page 474 Command mode Global configuration mac address table static Configures static FDB entries For command options see page 475 Command mode Global configuration show mac address table ...

Page 474: ...ing on ports that are not to receive multicast packets interface port port alias or number flood blocking Use the following commands to configure static Multicast MAC entries in the Forwarding Database FDB Table 234 Static Multicast MAC Configuration Options Command Syntax and Usage no mac address table multicast MAC address VLAN ID 1 4094 port alias or number Adds or removes a static multicast en...

Page 475: ...onfiguration Options Command Syntax and Usage Table 235 FDB Configuration Options Command Syntax and Usage no mac address table static MAC address port port alias or number Adds or removes a permanent FDB entry Enter the MAC address using the following format xx xx xx xx xx xx For example 08 00 20 12 34 56 You can also enter the MAC address as follows xxxxxxxxxxxx For example 080020123456 Command ...

Page 476: ...ries that use the specified vlan Command mode Global configuration no mac address table static all interface port port alias or number portchannel 1 64 adminkey 1 65535 Deletes all permanent FBD entries that use the specified port Link Aggregation Group LAG or LACP admin key Command mode Global configuration show mac address table Display current FDB configuration Command mode All Table 235 FDB Co...

Page 477: ...0 9000 Configures ECP retransmit interval in milliseconds The default value is 1000 miliseconds Command mode Global configuration default ecp retransmit interval Resets the ECP retransmit interval to the default 1000 milliseconds Command mode Global configuration show ecp channels retransmit interval upper layer protocols Displays settings for the ECP retransmit interval or for all ECP channels or...

Page 478: ...he message transmission interval in seconds The default value is 30 seconds Command mode Global configuration no lldp refresh interval Resets the message transmission interval to its default value of 30 seconds Command mode Global configuration lldp reinit delay 1 10 Configures the re initialization delay interval in seconds The re initialization delay allows the port LLDP information to stabilize...

Page 479: ... mode Global configuration show lldp port port alias or number Display current LLDP configuration Command mode All Table 237 LLDP Configuration Options continued Command Syntax and Usage Table 238 LLDP Port Options Command Syntax and Usage lldp admin status tx_only rx_only tx_rx Configures the LLDP transmission type for the port as follows Transmit only Receive only Transmit and receive The defaul...

Page 480: ...mation type Command mode Interface port no lldp tlv linkaggr Enables or disables the Link Aggregation information type Command mode Interface port no lldp tlv macphy Enables or disables the MAC Phy Configuration information type Command mode Interface port no lldp tlv mgmtaddr Enables or disables the Management Address information type Command mode Interface port no lldp tlv portdesc Enables or di...

Page 481: ...es information type Command mode Interface port no lldp tlv sysdescr Enables or disables the System Description information type Command mode Interface port no lldp tlv sysname Enables or disables the System Name information type Command mode Interface port no lldp tlv vlanname Enables or disables the VLAN Name information type Command mode Interface port show interface port port alias or number l...

Page 482: ...orts in a LAG with the same properties speed duplex flow control STG VLAN and so on Aggregation from non Lenovo devices must comply with Cisco EtherChannel technology By default each LAG is empty and disabled Table 240 LAG Configuration Options Command Syntax and Usage no portchannel 1 64 enable Enables or disables the current LAG Command mode Global configuration portchannel 1 64 port port alias ...

Page 483: ...disables FCoE LAG hashing on the destination id Command mode Global configuration no portchannel thash fcoe fabric id Enables or disables FCoE LAG hashing on the fabric id Command mode Global configuration no portchannel thash fcoe originator id Enables or disables FCoE LAG hashing on the originator id Command mode Global configuration no portchannel thash fcoe responder id Enables or disables FCo...

Page 484: ...switch Otherwise when disabled or if the ingress switch doesn t have any member ports the packet is hashed using all portchannel member ports across the whole stack The default setting is disabled This option reduces the traffic bandwidth over the stacking links Note In stacking this command is available only on the Master switch Command mode Global configuration show portchannel hash Display curr...

Page 485: ...rameters for the switch Table 242 Layer 2 LAG Hash Options Command Syntax and Usage portchannel thash l2thash l2 destination mac address Enables Layer 2 LAG hashing on the destination MAC Command mode Global configuration portchannel thash l2thash l2 source mac address Enables Layer 2 LAG hashing on the source MAC Command mode Global configuration portchannel thash l2thash l2 source destination ma...

Page 486: ... l3 destination ip address Enables Layer 3 LAG hashing on the destination IP address Command mode Global configuration portchannel thash l3thash l3 source ip address Enables Layer 3 LAG hashing on the source IP address Command mode Global configuration portchannel thash l3thash l3 source destination ip Enables Layer 3 LAG hashing on both the source and the destination IP address Command mode Globa...

Page 487: ...ation no vlag auto recovery Sets the auto recovery timer to the default 300 seconds duration Command mode Global configuration no vlag enable Enables or disables vLAG globally Command mode Global configuration no vlag peer gateway Enables or disables the forwarding of packets intended for the switch s vLAG peer If a packet is received by the switch but has the MAC address of its vLAG peer it will ...

Page 488: ...LAG peer ID Command mode Global configuration no vlag tier id Resets the vLAG peer ID to its default value of 0 Command mode Global configuration no vlag vrrp active Enables or disables vLAG VRRP active mode Note If active mode is disabled the switch will be in passive mode In active mode Layer 3 traffic is forwarded in all vLAG related VRRP domains In passive mode Layer 3 traffic is forwarded in ...

Page 489: ... 3 Command mode Global configuration no vlag hlthchk keepalive attempts Resets the number of vLAG keep alive attempts to the default value of 3 Command mode Global configuration vlag hlthchk keepalive interval 2 300 Sets in seconds the time between vLAG keep alive attempts The default value is 5 seconds Command mode Global configuration no vlag hlthchk keepalive interval Resets the time between vL...

Page 490: ...ACP Link Aggregation Groups LAGs formed with this admin key will be included in the ISL Command mode Global configuration no vlag isl adminkey Disables vLAG Inter Switch Link ISL for LACP admin keys Command mode Global configuration vlag isl portchannel 1 64 Enables vLAG Inter Switch Link ISL on the selected LAG Command mode Global configuration no vlag isl portchannel Disables vLAG Inter Switch L...

Page 491: ...eout value of long If your G8264 s CPU utilization rate remains at 100 for periods of 90 seconds or more consider using static Link Aggregation Groups LAGs instead of LACP Command mode Global configuration default lacp timeout Resets the timeout period before invalidating LACP data from a remote partner to its default value of long Command mode Global configuration default lacp Resets the LACP sys...

Page 492: ...e admin key and oper key operational state generated internally can form a LACP LAG group Command mode Interface port Interface portchannel default lacp key Resets the LACP admin key of the port to the default value Command mode Interface port Interface portchannel lacp mode off active passive Set the LACP mode for this port as follows off turns LACP off for this port You can use this port to manu...

Page 493: ...s anymore Command mode Interface port Interface portchannel default lacp suspend individual Resets the LACP state of the port to its default value Command mode Interface port Interface portchannel default lacp Resets the LACP port configuration to its default values Command mode Interface port Interface portchannel port channel min links 1 32 Set the minimum number of links for the LACP LAG to whi...

Page 494: ... show failover trigger Displays current Layer 2 Failover parameters Command mode All Table 250 Failover Trigger Configuration Options Command Syntax and Usage no failover trigger 1 8 enable Enables or disables the Failover trigger Command mode Global configuration failover trigger 1 8 limit 0 1024 Configures the minimum number of operational links allowed within each trigger before the trigger ini...

Page 495: ...ual Monitor Port configuration LACP Link Aggregation Groups LAGs formed with this admin key will be included in the Manual Monitor Port configuration Command mode Global configuration no failover trigger 1 8 mmon monitor member port alias or number Adds or removes the selected port to the Manual Monitor Port configuration Command mode Global configuration no failover trigger 1 8 mmon monitor portc...

Page 496: ...ncluded in the Manual Monitor Control configuration Command mode Global configuration no failover trigger 1 8 mmon control member port alias or number Adds or removes the selected port to the Manual Monitor Control configuration Command mode Global configuration no failover trigger 1 8 mmon control portchannel 1 64 Adds or removes the selected LAG to the Manual Monitor Control configuration Comman...

Page 497: ...ee group that is globally turned off This feature can prevent unintentional loop scenarios for example if two uplinks come up at the same time The default setting is disabled Command mode Global configuration no hotlinks enable Globally enables or disables Hot Links Command mode Global configuration no hotlinks fdb update Enables or disables FDB Update which allows the switch to send FDB and MAC u...

Page 498: ...onfiguration hotlinks trigger 1 200 name 1 32 characters Defines a name for the Hot Links trigger Command mode Global configuration no hotlinks trigger 1 200 name Removes the name of the specified Hot Links trigger Command mode Global configuration no hotlinks trigger 1 200 preemption Enables or disables pre emption which allows the Master interface to transition to the Active state whenever it be...

Page 499: ...ll LACP admin keys on the Master interface Command mode Global configuration hotlinks trigger 1 200 master port port alias or number Adds the selected port to the Hot Links Master interface Command mode Global configuration no hotlinks trigger 1 200 master port Clears all ports added to the Hot Links Master interface Command mode Global configuration hotlinks trigger 1 200 master portchannel 1 64 ...

Page 500: ...ACP admin keys on the Hot Links Backup interface Command mode Global configuration hotlinks trigger 1 200 backup port port alias or number Adds the selected port to the Hot Links Backup interface Command mode Global configuration no hotlinks trigger 1 200 backup port Clears all ports added to the Hot Links Backup interface Command mode Global configuration hotlinks trigger 1 200 backup portchannel...

Page 501: ... specified VLAN s doesn t exist it will be created Command mode Global configuration name 1 32 characters Assigns a name to the VLAN or changes the existing name The default VLAN name is the first one Command mode VLAN no name Removes the assigned name from the current VLAN Command mode VLAN protocol vlan protocol number 1 8 Configures the Protocol based VLAN PVLAN For command options see page 502...

Page 502: ... is applied to the entire VLAN Command mode VLAN no vlan VLAN ID 1 4094 Deletes the specified VLAN Command mode Global configuration show vlan information Displays the current VLAN configuration Command mode All Table 257 VLAN Configuration Options Command Syntax and Usage Table 258 Protocol VLAN Configuration Options Command Syntax and Usage no protocol vlan protocol number 1 8 enable Enables or ...

Page 503: ...2 SNA 802 2 snaEther2 IBM SNA Service on Ethernet vinesEther2 Banyan VINES xnsEther2 XNS Compatibility Command mode VLAN no protocol vlan protocol number 1 8 tag pvlan port alias or number Adds or removes a port that will be tagged by the selected protocol on this VLAN Command mode VLAN no protocol vlan protocol number 1 8 Deletes the selected protocol configuration from the VLAN Command mode VLAN...

Page 504: ...ty Enables or disables the VLAN type as a community VLAN Community VLANs carry upstream traffic from host ports A Private VLAN may have multiple community VLANs Command mode VLAN no private vlan isolated Enables or disables the VLAN type as an isolated VLAN The isolated VLAN carries unidirectional traffic from host ports A Private VLAN may have only one isolated VLAN Command mode VLAN no private v...

Page 505: ...ommand mode VLAN no cpu Enables or disables the switch to forward unregistered IP multicast traffic to the MP which adds an entry in the IPMC table as follows If no Mrouter is present drop subsequent packets with same IPMC If a Mrouter is present forward subsequent packets to the Mrouter s on the ingress VLAN The default setting is enabled Note If both flood and cpu are disabled the switch drops a...

Page 506: ...guration ip router id IP address Sets the router ID Command mode Global configuration no ip router id Removes the router ID Command mode Global configuration route map 1 255 Enters IP Route Map mode To view command options see page 523 Command mode Global configuration router bgp Enters Border Gateway Protocol BGP configuration mode To view command options see page 561 Command mode Global configur...

Page 507: ...ip information Displays all IP information Command mode All show layer3 Dumps all Layer 3 switch information available 10K or more depending on your configuration If you want to capture dump data to a file set your communication software on your workstation to capture session data before issuing the dump commands Command mode All Table 261 Layer 3 Configuration Commands continued Command Syntax an...

Page 508: ... IP netmask Configures the IP subnet address mask for the interface using dotted decimal notation Command mode Interface IP ipv6 address IPv6 address IPv6 prefix length anycast enable Configures the IPv6 address of the switch interface using hexadecimal format with colons The anycast option configures the IPv6 address as an IPv6 anycast address The enable option also enables the IP interface Comma...

Page 509: ...rvices per tenant are supported Command mode Interface IP no tenant services tenant id 1 30 Removes tenants who use the interface to access a service network Command mode Interface IP tenant tenant id 1 30 Defines the tenant downlink network Up to 10 subnets per tenant are supported Command mode Interface IP no tenant tenant id 1 30 Removes all tenant or a specific tenant from the current interfac...

Page 510: ... management IP interfaces 1 and 2 Default is VLAN 1 if not configured Command mode Interface IP no interface ip 1 128 Removes this IP interface Command mode Global configuration show ip tenant 1 30 Displays tenant information Command mode All show ip tenant info 1 30 Displays tenant dynamic ACLs including next hops Command mode All show interface ip 1 128 Displays the current interface settings Co...

Page 511: ...r of duplicate address detection attempts to the default value of 1 Command mode Interface IP ipv6 nd hops limit 0 255 Configures the Router Advertisement hop limit The default value is 64 hops Command mode Interface IP no ipv6 nd hops limit Resets the IPv6 Router Advertisement hop limit to its default value of 64 hops Command mode Interface IP no ipv6 nd managed config Enables or disables the man...

Page 512: ... IPv6 Router Advertisement minimum interval to its default value of 198 seconds Command mode Interface IP ipv6 nd ra lifetime 0 9000 Configures the IPv6 Router Advertisement lifetime interval The RA lifetime interval must be greater than or equal to the RA maximum interval advint The default value is 1800 seconds Command mode Interface IP no ipv6 nd ra lifetime Resets the IPv6 Router Advertisement...

Page 513: ...s 1 second Command mode Interface IP no ipv6 nd retransmit time Resets the Router Advertisement re transmit timer to its default value of 1 second Command mode Interface IP no ipv6 nd suppress ra Enables or disables IPv6 Router Advertisements on the interface The default setting is disabled suppress Router Advertisements Command mode Interface IP Table 263 IPv6 Neighbor Discovery Configuration Opt...

Page 514: ... mode Global configuration no ip gateway 1 4 enable Enables or disables the gateway for use Command mode Global configuration ip gateway 1 4 interval 0 60 The switch pings the default gateway to verify that it s up This command sets the time between health checks The range is from 0 to 60 seconds and the default is 2 seconds Command mode Global configuration ip gateway 1 4 retry 1 120 Sets the num...

Page 515: ... destination address of the route to remove must be specified using dotted decimal notation Command mode Global configuration ip route ecmphash dipsip sip Configures ECMP hashing parameters You may choose one or more of the following parameters dipsip Destination IP and source IP address sip Source IP address Command mode Global configuration no ip route healthcheck Enables or disables static rout...

Page 516: ...d mode Global configuration no ip route interface IP interface number Clears all IP static routes that use the specified IP interface Command mode Global configuration no ip route port port alias or number Clears all IP static routes that use the specified port Command mode Global configuration show ip route static Displays the current IP static routes Command mode All Table 265 IPv4 Static Route ...

Page 517: ...and member port of the route must be specified Command mode Global configuration no ip mroute IP address VLAN ID 1 4094 portchannel 1 64 primary backup host virtual router ID Adds or removes a static multicast route The destination address VLAN and member Link Aggregation Group LAG of the route must be specified Command mode Global configuration no ip mroute IP address VLAN ID 1 4094 adminkey 1 65...

Page 518: ...eceived by the router In response the router sends its own MAC address Any traffic between hosts is forwarded via the routerʹs layer 3 interface Note For a routed interface enabling ARP local proxy feature requires disabling all ICMP redirects Table 267 ARP Configuration Options Command Syntax and Usage ip arp rearp 2 120 Defines re ARP period in minutes for entries in the switch arp table When AR...

Page 519: ...and Usage ip arp IP address MAC address vlan VLAN ID 1 4094 port port alias or number Adds a permanent ARP entry To enable ARP on a LAG add the port number of a member of the LAG Command mode Global configuration ip arp destination unicast IP address destination multicast MAC address vlan cluster vlan number Adds a static multicast ARP entry for Network Load Balancing NLB Command mode Global confi...

Page 520: ...d Syntax and Usage no ip arp inspection vlan VLAN ID 1 4094 Enables or disables DAI on the selected VLANs Command mode Global configuration no ip arp inspection trust Configures the current port to be a DAI trusted port On a DAI trusted port all ARP packets skip the security check The default settings is untrusted Note Configuring trusted interfaces as being untrusted can result in a loss of conne...

Page 521: ...and mode Global configuration no ip routing directed broadcasts Enables or disables forwarding directed broadcasts The default setting is disabled Command mode Global configuration no ip routing icmp6 redirect Enables or disables IPv6 ICMP re directs The default setting is disabled Command mode Global configuration no ip routing no icmp redirect Enables or disables ICMP re directs The default sett...

Page 522: ...is filter to define the range of IP addresses that will be accepted by the peer when the filter is enabled The default address is 0 0 0 0 0 0 0 0 Command mode Global configuration no ip match address 1 256 enable Enables or disables the Network Filter configuration Command mode Global configuration no ip match address 1 256 Deletes the Network Filter configuration Command mode Global configuration...

Page 523: ...e information see page 529 Command mode Route map as path preference 1 65535 Sets the AS path preference of the matched route You can configure up to 32 path preferences Command mode Route map no as path preference Removes the AS path preference of the current route map Command mode Route map no enable Enables or disables the route map Command mode Route map local preference 0 4294967294 Sets the ...

Page 524: ...the route map The smaller the value the higher the precedence The default value is 10 Command mode Route map set community community string none Sets the BGP community attribute Enter up to 32 communities strings using the format aa nn For example 12 34 Valid strings are from 0 0 to 65535 65535 The none option removes the community attribute from prefix that passed the route map Command mode Route...

Page 525: ...n Commands 525 no route map 1 255 Deletes the route map Command mode Global configuration show route map 1 255 Displays the current route configuration Command mode All Table 273 Routing Map Configuration Options continued Command Syntax and Usage ...

Page 526: ...cess list Command mode Route map no access list 1 32 match access control 1 640 Sets the network filter number Command mode Route map no access list 1 32 match address 1 256 Sets the network filter number See Network Filter Configuration on page 522 for details Command mode Route map access list 1 32 metric 1 4294967294 Sets the metric value in the AS External ASE LSA Command mode Route map no acc...

Page 527: ...s sequence 1 255 arp icmp interval 1 60 retry 1 3 access list 1 32 Performs health checking on and inserts the next hop IP address at the specified place sequence in the specified access list using ARP or ICMP as the tracking protocol If not successful the command will retry the health check at regular intervals of the specified number of seconds for the number of retries specified by retry Use th...

Page 528: ...he current route map configuration Command mode All show route map 1 255 access list 1 32 Displays the current Access List configuration Command mode All show ip policy Displays the current routing policy information Command mode All show ip policy statistics Displays statistics for the current routing policy Command mode All Table 275 IP Next Hop Configuration Options Command Syntax and Usage ...

Page 529: ...y Permits or denies Autonomous System filter action Command mode Route map as path list 1 8 as path 1 65535 Sets the Autonomous System filter s path number Command mode Route map no as path list 1 8 enable Enables or disables the Autonomous System filter Command mode Route map no as path list 1 8 Deletes the Autonomous System filter Command mode Route map show route map 1 255 as path list 1 8 Disp...

Page 530: ...uter RIP configuration mode Command mode Global configuration no enable Globally enables or disables RIP Command mode Router RIP no redistribute ebgp eospf fixed ibgp ospf static Configures RIP route distribution To view command options see page 533 Command mode Router RIP timers update 1 120 Configures the time interval for sending for RIP table updates in seconds The default value is 30 seconds ...

Page 531: ...rip authentication type password password Configures the authentication type The default is none Command mode Interface IP no ip rip authentication type Removes the authentication type Command mode Interface IP ip rip default action listen supply both When enabled the switch accepts RIP default routes from other routers but gives them lower priority than configured default gateways The default val...

Page 532: ...s split horizon The default value is enabled Command mode Interface IP no ip rip supply When enabled the switch supplies routes to other routers The default value is enabled Command mode Interface IP no ip rip triggered Enables or disables Triggered Updates Triggered Updates are used to speed convergence When enabled Triggered Updates force a router to send update messages immediately even if it i...

Page 533: ...ated by a comma To add or remove all 255 route maps type all The routes of the redistribution protocol matched by the route maps in the route redistribution list will be redistributed Command mode Router RIP redistribute fixed static ospf eospf ebgp ibgp export metric number 1 15 Exports the routes of this protocol in which the metric and metric type are specified Command mode Router RIP no redist...

Page 534: ... to view command options Command mode Router OSPF default information 1 16777214 AS external metric type 1 2 Sets one default route among multiple choices in an area Command mode Router OSPF no default information Removes the default route information Command mode Router OSPF no enable Enables or disables OSPF on the G8264 Command mode Router OSPF host 1 128 Configures OSPF for the host routes Up ...

Page 535: ...e current OSPF configuration settings Command mode All Table 280 OSPF Configuration Options continued Command Syntax and Usage Table 281 Area Index Configuration Options Command Syntax and Usage area 0 19 area id IP address Defines the IP address of the OSPF area number Command mode Router OSPF area 0 19 authentication type password md5 Sets the authentication type password authenticates simple pa...

Page 536: ...area For example when a virtual link has to be established with the backbone the area type must be defined as transit transit area allows area summary information to be exchanged between routing devices Any area that is not a stub area or NSSA is considered to be transit area stub area is an area where external routing information is not distributed Typically a stub area is connected to only one o...

Page 537: ...dress or the IP address mask for the range Command mode Router OSPF area range 1 16 area 0 19 Displays the area index used by the G8264 Command mode Router OSPF no area range 1 16 enable Enables or disables the OSPF summary range Command mode Router OSPF no area range 1 16 hide Hides or shows the OSPF summary range Command mode Router OSPF no area range 1 16 Deletes the OSPF summary range Command ...

Page 538: ...h parameters of a hello packet in seconds or milliseconds before declaring a silent router to be down Command mode Interface IP no ip ospf enable Enables or disables the OSPF interface Command mode Interface IP ip ospf hello interval 1 65535 ip ospf hello interval 50 65535 ms Configures the interval in seconds or milliseconds between the hello packets for the interfaces Command mode Interface IP i...

Page 539: ...or the G8264 s OSPF interfaces A priority value of 255 is the highest and 1 is the lowest A priority value of 0 specifies that the interface cannot be used as Designated Router DR or Backup Designated Router BDR Command mode Interface IP ip ospf retransmit interval 1 3600 Configures the retransmit interval in seconds Command mode Interface IP ip ospf transit delay 1 3600 Configures the transit del...

Page 540: ...isables OSPF virtual link Command mode Router OSPF area virtual link 1 3 hello interval 1 65535 area virtual link 1 3 hello interval 50 65535 ms Configures the authentication parameters of a hello packet in seconds or milliseconds The default value is 10 seconds Command mode Router OSPF area virtual link 1 3 key password Configures the password up to eight characters for each virtual link The defa...

Page 541: ...nsmit interval in seconds The default value is 5 seconds Command mode Router OSPF area virtual link 1 3 transit delay 1 3600 Configures the delay in transit in seconds The default value is 1 second Command mode Router OSPF no area virtual link 1 3 Deletes OSPF virtual link Command mode Router OSPF show ip ospf area virtual link 1 3 Displays the current OSPF virtual link settings Command mode All T...

Page 542: ...IP address for the host entry Command mode Router OSPF host 1 128 area 0 19 Configures the area index of the host Command mode Router OSPF host 1 128 cost 1 65535 Configures the cost value of the host Command mode Router OSPF no host 1 128 enable Enables or disables the OSPF host entry Command mode Router OSPF no host 1 128 Deletes OSPF host entry Command mode Router OSPF show ip ospf host 1 128 D...

Page 543: ...de Router OSPF redistribute fixed static rip ebgp ibgp export metric 1 16777214 AS external metric type 1 2 Exports the routes of this protocol as external OSPF AS external LSAs in which the metric and metric type are specified Command mode Router OSPF no redistribute fixed static rip ebgp ibgp export Stops exporting the routes of the protocol Command mode Router OSPF show ip ospf redistribute Dis...

Page 544: ...ws Standard Cisco IBM The default setting is standard Command mode Router OSPF3 no abr type Resets the Area Border Router ABR type to its default value standard Command mode Router OSPF3 as external lsdb limit LSDB limit 0 2147483647 1 for no limit Sets the link state database limit The default value is 1 Command mode Router OSPF3 no enable Enables or disables OSPFv3 on the switch Command mode Rou...

Page 545: ... cannot be used as Designated Router or Backup Designated Router The default value is 1 Command mode Router OSPF3 no neighbor 1 256 enable Enables or disables the specified neighbor Command mode Router OSPF3 no neighbor 1 256 Deletes the neighbor entry Command mode Router OSPF3 no nssaAsbrDfRtTrans Enables or disables setting of the P bit in the default Type 7 LSA generated by an NSSA internal ASB...

Page 546: ...OSPF configuration settings Command mode All Table 288 OSPFv3 Configuration Options continued Command Syntax and Usage Table 289 OSPFv3 Area Index Configuration Options Command Syntax and Usage area 0 2 area id IP address Defines the IP address of the OSPFv3 area number Command mode Router OSPF3 area 0 2 default metric metric value 1 16777215 Configures the cost for the default summary route in a ...

Page 547: ...ssa no summary Defines the type of area For example when a virtual link has to be established with the backbone the area type must be defined as transit transit allows area summary information to be exchanged between routing devices Any area that is not a stub area or NSSA is considered to be transit area stub is an area where external routing information is not distributed Typically a stub area i...

Page 548: ...4 no area 0 2 Deletes the OSPF area Command mode Router OSPF3 show ipv6 ospf areas area 0 2 Displays the current OSPFv3 area configuration Command mode All Table 289 OSPFv3 Area Index Configuration Options continued Command Syntax and Usage ...

Page 549: ...2 Configures the area index used by the switch Command mode Router OSPF3 no area range 1 16 enable Enables or disables the OSPFv3 summary range Command mode Router OSPF3 no area range 1 16 hide Hides or shows the OSPFv3 summary range Command mode Router OSPF3 area range 1 16 lsa type summary Type7 Configures the LSA type as follows Summary LSA Type7 LSA Command mode Router OSPF3 area range 1 16 ta...

Page 550: ...ted Type 5 LSAs are generated For other area IDs aggregated Type 7 LSAs are generated in the NSSA area not advertise If the area ID is 0 0 0 0 Type 5 LSAs are not generated while all NSSA LSAs within the range are cleared and aggregated Type 7 LSAs are generated for all NSSAs For other area IDs aggregated Type 7 LSAs are not generated in the NSSA area Command mode Router OSPF3 summary prefix 1 16 ...

Page 551: ... mode Interface IP no ipv6 ospf cost Removes the metric value for sending a packet on the interface Command mode Interface IP ipv6 ospf dead interval 1 65535 Configures the time period in seconds for which the router waits for hello packet from the neighbor before declaring this neighbor down Command mode Interface IP no ipv6 ospf dead interval Resets the dead interval for hello packets to its def...

Page 552: ...disables the passive setting on the interface On a passive interface OSPFv3 protocol packets are suppressed Command mode Interface IP ipv6 ospf poll interval 0 4294967295 Configures the poll interval in seconds for neighbors in NBMA networks The default value is 120 seconds Command mode Interface IP no ipv6 ospf poll interval Configures the poll interval in seconds for neighbors in NBMA and point ...

Page 553: ...and mode Interface IP ipv6 ospf transmit delay 1 1800 Configures the estimated time in seconds taken to transmit LS update packet over this interface Command mode Interface IP no ipv6 ospf transmit delay Resets the estimated time taken to transmit LS update packet over the current interface to its default value Command mode Interface IP no ipv6 ospf Deletes OSPFv3 from interface Command mode Inter...

Page 554: ...ures the Security Parameters Index SPI algorithm and authentication key for the Authentication Header AH The algorithms supported are MD5 hexadecimal key length is 32 SHA1 hexadecimal key length is 40 Command mode Interface IP no ipv6 ospf authentication ipsec spi 256 4294967295 Disables the specified Authentication Header AH SPI Command mode Interface IP ipv6 ospf authentication ipsec default Res...

Page 555: ...tion algorithms supported are md5 hexadecimal key length is 32 sha1 hexadecimal key length is 40 none means ESP with no authentication Note If the encryption algorithm is null the authentication algorithm must be either MD5 or SHA1 If an encryption algorithm is specified 3DES or AES CBC the authentication algorithm can be none Command mode Interface IP no ipv6 ospf encryption ipsec spi 256 4294967...

Page 556: ...nterval in seconds between the hello packets that the router sends on the interface Command mode Router OSPF3 area virtual link 1 3 neighbor router NBR router ID IP address Configures the router ID of the virtual neighbor The default setting is 0 0 0 0 Command mode Router OSPF3 area virtual link 1 3 retransmit interval 1 1800 Configures the interval in seconds between link state advertisement LSA ...

Page 557: ...tication Header AH to its default values Command mode Router OSPF3 area virtual link 1 3 encryption ipsec enable Enables OSPFv3 IPsec encryption Command mode Router OSPF3 area virtual link 1 3 encryption ipsec spi 256 4294967295 esp 3des aes cbc null encryption key hexadecimal md5 sha1 none authentication key hexadecimal Configures the Security Parameters Index SPI encryption algorithm authenticat...

Page 558: ...ll Table 295 Layer 3 IPsec Configuration Options continued Command Syntax and Usage Table 296 OSPFv3 Host Entry Configuration Options Command Syntax and Usage host 1 128 address IPv6 address prefix length 1 128 Configures the base IPv6 address and the subnet prefix length for the host entry Command mode Router OSPF3 host 1 128 area 0 2 Configures the area index of the host Command mode Router OSPF...

Page 559: ...PF3 redist config 1 128 metric type asExttype1 asExttype2 Configures the metric type applied to the route before it is advertised into the OSPFv3 domain Command mode Router OSPF3 redist config 1 128 metric value 1 16777215 Configures the route metric value applied to the route before it is advertised into the OSPFv3 domain Command mode Router OSPF3 redist config 1 128 tag 0 4294967295 Configures t...

Page 560: ...ected static export metric value 1 16777215 metric type 1 2 tag 0 4294967295 Exports the routes of this protocol as external OSPFv3 AS external LSAs in which the metric metric type and route tag are specified Command mode Router OSPF3 no redistribute connected static export Stops exporting the routes of the protocol Command mode Router OSPF3 show ipv6 ospf Displays the current OSPFv3 route redistr...

Page 561: ...P commands enable you to configure the switch to receive routes and to advertise static routes fixed routes and virtual server IP addresses with other internal and external routers BGP is turned off by default Note Fixed routes are subnet routes There is one fixed route per IP interface Table 299 Border Gateway Protocol Options Command Syntax and Usage router bgp Enter Router BGP configuration mod...

Page 562: ...path as the preferred route if you are using eBGP or use the local preference if you are using iBGP Command mode Router BGP maximum paths ibgp 1 32 Set maximum paths allowed for an external route ibgp will set the maximum paths allowed for an internal route By default BGP will install only one path to the IP routing table Command mode Router BGP no maximum paths ibgp Resets the maximum paths allow...

Page 563: ...299 Border Gateway Protocol Options continued Command Syntax and Usage Table 300 BGP Peer Configuration Options Command Syntax and Usage neighbor 1 96 advertisement interval 1 65535 Sets time in seconds between advertisements The default value is 60 seconds Command mode Router BGP no neighbor 1 96 next hop self Enables or disables enforcing the use the router s own IP address as next hop attribute...

Page 564: ...oute map in out 1 255 Adds route map into in route or out route map list Command mode Router BGP no neighbor 1 96 route map in out 1 255 all Removes all route maps or a specific route map from in route or out route map list Command mode Router BGP neighbor 1 96 route origination interval 1 65535 Sets the minimum time between route originations in seconds The default value is 15 seconds Command mod...

Page 565: ...ulti hops which allow BGP peers to talk across a routed network The default number is set at 1 Note The TTL value is significant only to eBGP peers for iBGP peers the TTL value in the IP packets is always 255 regardless of the configured value Command mode Router BGP no neighbor 1 96 time to live Disables the TTL feature Command mode Router BGP neighbor 1 96 timers hold time 0 3 65535 Sets the per...

Page 566: ...d mode Router BGP no neighbor 1 96 Deletes this peer configuration Command mode Router BGP show ip bgp neighbor 1 192 Displays the current BGP peer configuration Command mode All Table 300 BGP Peer Configuration Options continued Command Syntax and Usage Table 301 BGP Aggregation Configuration Options Command Syntax and Usage aggregate address 1 16 IP address IP netmask Defines the starting subnet...

Page 567: ...ed to peer If the routes are learned from default gateway configuration you have to enable static routes since the routes from default gateway are static routes Similarly if the routes are learned from a certain routing protocol you have to enable that protocol Command mode Router BGP no neighbor 1 96 redistribute default action Disables the default route action configuration Command mode Router B...

Page 568: ... 60 seconds Command mode Router BGP neighbor group 1 8 listen limit group limit 1 96 Sets the maximum number of BGP dynamic peers Command mode Router BGP neighbor group 1 8 listen range IPv4 address IPv4 subnet mask Defines the range of IP addresses that will be accepted for the group Command mode Router BGP neighbor group 1 8 name 1 32 characters Sets the name for the group Command mode Router BG...

Page 569: ...e map list Command mode Router BGP neighbor group 1 8 route origination interval min orig time 1 65535 Sets the minimum time between route originations in seconds The default value is 15 seconds Command mode Router BGP no neighbor group 1 8 route reflector client Enables or disables the group as a route reflector client Configuring route reflector clients implicitly sets up the local router as a r...

Page 570: ...Command mode Router BGP no neighbor group 1 8 time to live 1 255 Disables the TTL feature Command mode Router BGP neighbor group 1 8 timers hold time hold time 0 3 65535 Sets the period of time in seconds that will elapse before the peering group session is torn down because the switch hasn t received a keep alive message from the peer The default value is 180 seconds Command mode Router BGP neigh...

Page 571: ...neighbor group 1 8 Deletes this peering group configuration Command mode Router BGP show ip bgp neighbor group 1 8 Displays the current peering group configuration Command mode All Table 303 BGP Peering Group Configuration Options continued Command Syntax and Usage ...

Page 572: ...e routes are learned from default gateway configuration you have to enable static routes since the routes from default gateway are static routes Similarly if the routes are learned from a certain routing protocol you have to enable that protocol Command mode Router BGP no neighbor group 1 8 redistribute default action Disables the default route action configuration Command mode Router BGP neighbor...

Page 573: ... MLD Global Configuration Commands Command Syntax and Usage ipv6 mld Enter MLD global configuration mode Command mode Global configuration no enable Globally enables or disables MLD Command mode MLD Configuration default Resets MLD parameters to their default values Command mode MLD Configuration show ipv6 mld Displays the current MLD configuration parameters Command mode All ...

Page 574: ...onds The default value is 1 second Command mode Interface IP no ipv6 mld llistnr Resets the Last Listener query interval to its default value of 1 second Command mode Interface IP ipv6 mld qintrval 2 65535 Configures the interval for MLD Query Reports in seconds The default value is 125 seconds Command mode Interface IP no ipv6 mld qintrval Resets the interval for MLD Query Reports to its default ...

Page 575: ...P no ipv6 mld robust Resets the MLD Robustness variable to its default value of 2 Command mode Interface IP ipv6 mld version 1 2 Defines the MLD protocol version number The default value is 1 Command mode Interface IP no ipv6 mld version Resets the MLD protocol version number to its default value of 1 Command mode Interface IP ipv6 mld default Resets MLD parameters for the selected interface to th...

Page 576: ... on page 581 IGMP Static Multicast Router Configuration on page 582 IGMP Filtering Configuration on page 583 IGMP Advanced Configuration on page 585 IGMP Querier Configuration on page 586 Table 307 IGMP Configuration Options Command Syntax and Usage no ip igmp aggregate Enables or disables IGMP Membership Report aggregation Command mode Global configuration no ip igmp enable Globally enables or di...

Page 577: ...P Snooping Command mode Global configuration no ip igmp snoop mrouter timeout 1 600 Configures the timeout value for IGMP Membership Queries mrouter Once the timeout value is reached the switch removes the multicast router from its IGMP table if the proper conditions are met The range is from 1 to 600 seconds The default is 255 seconds Command mode Global configuration no ip igmp snoop port port a...

Page 578: ...snoop Resets IGMP Snooping parameters to their default values Command mode Global configuration show ip igmp snoop Displays the current IGMP Snooping parameters Command mode All Table 308 IGMP Snooping Configuration Options continued Command Syntax and Usage ...

Page 579: ... igmp snoop igmpv3 sources 1 64 Configures the maximum number of IGMP multicast sources to snoop from within the group record Use this command to limit the number of IGMP sources to provide more refined control The default value is 8 Command mode Global configuration no ip igmp snoop igmpv3 sources Resets the maximum number of IGMP multicast sources to snoop from within the group record to its def...

Page 580: ...bal configuration ip igmp relay report 0 150 Configures the interval between unsolicited Join reports sent by the switch in seconds The default value is 10 Command mode Global configuration ip igmp relay vlan VLAN ID 1 4094 Adds the VLAN or range of VLANs to the list of IGMP Relay VLANs Command mode Global configuration no ip igmp relay vlan VLAN ID 1 4094 all Removes all VLANs or just the specifi...

Page 581: ...uration no ip igmp relay mrouter 1 2 enable Enables or disables the multicast router Command mode Global configuration ip igmp relay mrouter 1 2 interval 1 60 Configures the time interval between ping attempts to the upstream Mrouters in seconds The default value is 2 Command mode Global configuration ip igmp relay mrouter 1 2 retry 1 120 Configures the number of failed ping attempts required befo...

Page 582: ...tion Options Command Syntax and Usage ip igmp mrouter port port alias or number VLAN ID 1 4094 version 1 3 Selects a port VLAN combination on which the static multicast router is connected and configures the IGMP version of the multicast router Command mode Global configuration no ip igmp mrouter port port alias or number VLAN ID 1 4094 version 1 3 all Removes all static multicast routers or a spe...

Page 583: ...w ip igmp filtering Displays the current IGMP Filtering parameters Command mode All Table 314 IGMP Filter Definition Options Command Syntax and Usage ip igmp profile 1 16 action allow deny Allows or denies multicast traffic for the IP multicast addresses specified The default action is deny Command mode Global configuration no ip igmp profile 1 16 enable Enables or disables this IGMP filter Comman...

Page 584: ...lter Port Configuration Options Command Syntax and Usage no ip igmp filtering Enables or disables IGMP filtering on this port Command mode Interface port no ip igmp profile 1 16 Adds or removes an IGMP filter to this port Command mode Interface port show interface port port alias or number igmp filtering Displays the current IGMP filter parameters for this port Command mode All ...

Page 585: ...nfiguration ip igmp query interval 1 600 Sets the IGMP router query interval in seconds The default value is 125 seconds Command mode Global configuration no ip igmp query interval Resets the IGMP router query interval to its default value of 125 seconds Command mode Global configuration ip igmp robust 1 10 Configures the IGMP Robustness variable which allows you to tune the switch for expected pa...

Page 586: ...ions continued Command Syntax and Usage Table 317 IGMP Querier Configuration Options Command Syntax and Usage no ip igmp querier enable Enables or disables IGMP Querier Command mode Global configuration no ip igmp querier port port alias or number Adds or removes the specified port to from IGMP Querier Command mode Global configuration ip igmp querier vlan VLAN ID 1 4094 election type ipv4 mac Set...

Page 587: ...asts The default value is 125 seconds Command mode Global configuration no ip igmp querier vlan VLAN ID 1 4094 query interval Resets the interval between IGMP Query broadcasts to its default value of 125 seconds Command mode Global configuration ip igmp querier vlan VLAN ID 1 4094 robustness 1 10 Configures the IGMP Robustness variable which is the number of times that the switch sends each IGMP m...

Page 588: ...ation no ip igmp querier vlan VLAN ID 1 4094 startup interval Resets the Startup Query Interval to its default value of 31 seconds Command mode Global configuration ip igmp querier vlan VLAN ID 1 4094 version v1 v2 v3 Configures the IGMP version The default version is v3 Command mode Global configuration no ip igmp querier vlan VLAN ID 1 4094 version Resets the IGMP version to its default value of...

Page 589: ...eout value in case a packet is not received by the peer and needs to be retransmitted The default value is 20 seconds Command mode Global configuration show ikev2 Displays the current IKEv2 settings Command mode All Table 319 IKEv2 Preshare Key Options Command Syntax and Usage ikev2 preshare key local 1 256 characters Configures the local preshare key The default value is ibm123 Command mode Globa...

Page 590: ... but require additional time to compute the key Table 320 IKEv2 Proposal Options Command Syntax and Usage ikev2 proposal Enter IKEv2 proposal mode Command mode Global configuration encryption 3des aes cbc Configures IKEv2 encryption mode The default value is 3des Command mode IKEv2 proposal group 24 Configures the DH group The default group is 2 Command mode IKEv2 proposal integrity sha1 Configure...

Page 591: ...plied IPv6 address as identification Command mode Global configuration ikev2 identity local fqdn 1 32 characters Configures the switch to use the fully qualified domain name such as example com as identification Command mode Global configuration ikev2 identity local email 1 32 characters Configures the switch to use the supplied email address such as xyz example com as identification Command mode ...

Page 592: ...Syntax and Usage ipsec transform set 1 10 ah sha1 esp 3des esp aes cbc esp null esp sha1 Sets the AH or ESP authentication encryption or integrity algorithm The available algorithms are as follows ah sha1 esp 3des esp aes cbc esp null esp sha1 Command mode Global configuration ipsec transform set 1 10 transport ah sha1 esp 3des esp aes cbc esp null esp sha1 Sets transport mode and the AH or ESP au...

Page 593: ...de All Table 323 IPsec Transform Set Options continued Command Syntax and Usage Table 324 IPsec Traffic Selector Options Command Syntax and Usage ipsec traffic selector 1 10 permit deny any icmp ICMPv6 type 0 255 tcp IPV6 address any Sets the traffic selector to permit or deny the specified type of traffic Command mode Global configuration no ipsec traffic selector 1 10 Resets the specified traffi...

Page 594: ...ress Command mode IPsec dynamic policy pfs enable disable Enables or disables perfect forward security Command mode IPsec dynamic policy sa lifetime 120 86400 Sets the IPsec SA lifetime in seconds The default value is 86400 seconds Command mode IPsec dynamic policy traffic selector 1 10 Sets the traffic selector for the IPsec policy Command mode IPsec dynamic policy transform set 1 10 Sets the tra...

Page 595: ...party device key lengths are fixed to 20 characters for SHA1 Command mode IPsec manual policy in esp auth key cipher key key code hexadecimal Sets the inbound Encapsulating Security Payload ESP authenticator key or cipher key Note For manual policies when peering with a third party device key lengths are fixed to 8 characters for DES and to 24 characters for 3DES and AES CBC encryption Command mod...

Page 596: ...and AES CBC encryption Command mode IPsec manual policy out esp spi 256 4294967295 Sets the outbound Encapsulating Security Payload ESP Security Parameter Index SPI Note For manual policies when peering with a third party device key lengths are fixed to 20 characters for SHA1 Command mode IPsec manual policy peer IPv6 address Sets the remote peer IP address Command mode IPsec manual policy traffic...

Page 597: ...v4 address data port mgt port You are prompted to set the IPv4 address for your primary DNS server using dotted decimal notation Command mode Global configuration no ip dns primary server Removes the IPv4 primary DNS server Command mode Global configuration ip dns secondary server IPv4 address data port mgt port You are prompted to set the IPv4 address for your secondary DNS server using dotted de...

Page 598: ...ondary will be used instead Command mode Global configuration no ip dns ipv6 secondary server Removes the IPv6 secondary DNS server Command mode Global configuration ip dns ipv6 request version ipv4 ipv6 Sets the protocol used for the first request to the DNS server as follows IPv4 IPv6 Command mode Global configuration show ip dns Displays the current Domain Name System settings Command mode All ...

Page 599: ...es BOOTP relay Command mode Global configuration ip bootp relay server 1 5 address IP address Sets the IP address of the selected global BOOTP server Command mode Global configuration no ip bootp relay server 1 5 Removes the specified BOOTP server Command mode Global configuration Table 329 BOOTP Relay Broadcast Domain Configuration Options Command Syntax and Usage no ip bootp relay bcast domain 1...

Page 600: ...ay Broadcast Domain Configuration Options continued Command Syntax and Usage Table 330 Option 82 Configuration Options Command Syntax and Usage no ip bootp relay information enable Enables or disables BOOTP Option 82 Command mode Global configuration ip bootp relay information policy keep drop replace Configures the DHCP re forwarding policy as follows keep Retains requests that contain relay info...

Page 601: ... Enterprise Network Operating System 8 4 Table 331 Virtual Router Redundancy Protocol Options Command Syntax and Usage router vrrp Enter Router VRRP configuration mode Command mode Global configuration no enable Globally enables or disables VRRP on this switch Command mode Router VRRP group Configures VRRP virtual routers groups To view command options see page 607 Command mode Router VRRP holdoff...

Page 602: ...r 1 128 Configures virtual routers for the switch To view command options see page 603 Command mode Router VRRP show ip vrrp Displays the current VRRP parameters Command mode All Table 331 Virtual Router Redundancy Protocol Options Command Syntax and Usage ...

Page 603: ...ables this virtual router Command mode Router VRRP no virtual router 1 128 fast advertise Enables or disables Fast Advertisements When enabled the VRRP master advertisements interval is calculated in units of centiseconds instead of seconds For example if adver is set to 1 and fadver is enabled master advertisements are sent every 10 miliseconds When you disable fast advertisement the advertisemen...

Page 604: ...is the owner the IP interface address and virtual router addr are the same By default this option is enabled If priority only is specified preemption is based on priority and the IP address is disregarded Command mode Router VRRP virtual router 1 128 priority 1 254 Defines the election priority bias for this virtual server During the master router election process the routing device with the highe...

Page 605: ... This is used in conjunction with the no virtual router VRID address IP address command below to define a virtual router on this switch To create a pool of VRRP enabled routing devices which can provide redundancy to each other each participating VRRP device must be configured with the same virtual router The VRID for standard virtual routers where the virtual router IP address is not the same as ...

Page 606: ...gured virtual server IP address Table 333 VRRP Priority Tracking Configuration Options Command Syntax and Usage no virtual router 1 128 track interfaces When enabled the priority for this virtual router will be increased for each other IP interface active on this switch An IP interface is considered active when there is at least one active port on the same VLAN This helps elect the virtual routers...

Page 607: ...he same switch increasing routing and load balancing efficiency This command is disabled by default Command mode Router VRRP show ip vrrp virtual router 1 128 track Displays the current configuration for priority tracking for this virtual router Command mode All Table 333 VRRP Priority Tracking Configuration Options Command Syntax and Usage Table 334 VRRP Virtual Router Group Configuration Options...

Page 608: ...he current master this virtual router will pre empt the lower priority master and assume control Note that even when preemption is disabled this virtual router will always pre empt any other master if this switch is the owner the IP interface address and virtual router address are the same The default setting is enabled If priority only is specified preemption is based on priority and the IP addre...

Page 609: ...er IP address is not the same as any virtual server can be any integer between 1 and 128 All VRID values must be unique within the VLAN to which the virtual router s IP interface see interface belongs The default virtual router ID is 1 Command mode Router VRRP no group Deletes the virtual router group from the switch configuration Command mode Router VRRP show ip vrrp group Displays the current co...

Page 610: ... on this switch An IP interface is considered active when there is at least one active port on the same VLAN This helps elect the virtual routers with the most available routes as the master This command is disabled by default Command mode Router VRRP no group track ports When enabled the priority for this virtual router will be increased for each active port on the same VLAN A port is considered ...

Page 611: ...sword authentication Command mode Router VRRP interface 1 126 password password Defines a plain text password up to eight characters long This password will be added to each VRRP packet transmitted by this interface when password authentication is chosen see interface authentication above Command mode Router VRRP no interface 1 126 password Resets the configured password to its default value Comma...

Page 612: ...Syntax and Usage tracking priority increment interfaces 0 254 Defines the priority increment value for active IP interfaces detected on this switch The default value is 2 Command mode Router VRRP tracking priority increment next hops 0 254 Defines the priority increment value for each next hop that is active or subtracted The default value is 2 Command mode Router VRRP tracking priority increment ...

Page 613: ...pim pmbr enable Enables or disables PIM border router The default setting is disabled Command mode Global configuration ip pim regstop ratelimit period 0 2147483647 Configures the register stop rate limit in seconds The default value is 5 seconds Command mode Global configuration default ip pim regstop ratelimit period Reset the register stop rate limit to its default value of 5 seconds Command mo...

Page 614: ...er entries Command mode Privileged EXEC Table 338 PIM Configuration Options Command Syntax and Usage Table 339 PIM Component Configuration Options Command Syntax and Usage ip pim component 1 2 Enter PIM component mode Command mode Global configuration mode dense sparse Configures the operational mode of the PIM router dense or sparse Command mode PIM Component show ip pim component 1 2 Displays th...

Page 615: ...conds Command mode PIM Component no rp candidate holdtime Resets the hold time of the RP candidate to its default value of 0 seconds Command mode PIM Component no rp candidate rp address group multicast address group subnet mask IP address Adds or removes an RP candidate Command mode PIM Component Table 341 RP Static Configuration Options Command Syntax and Usage rp static rp address group multica...

Page 616: ...reference Command mode Interface IP default no ip pim cbsr preference Resets the canditate bootstrap router preference to its default value Command mode Interface IP ip pim component id 1 2 Defines the component ID for the interface Command mode Interface IP no ip pim component id Removes the interface from the PIM component Command mode Interface IP ip pim dr priority 0 4294967294 Configures the ...

Page 617: ...o its default value of 30 seconds Command mode Interface IP ip pim join prune interval 0 65535 Configures the interval between Join Prune messages in seconds The default value is 60 seconds Command mode Interface IP default no ip pim join prune interval Resets the interval between Join Prune messages to its default value of 60 seconds Command mode Interface IP ip pim lan delay 0 32767 Configures t...

Page 618: ... command ip pim neighbor addr IP address Command mode Interface IP ip pim override interval 0 65535 Configures the override interval for the router interface in seconds Command mode Interface IP default no ip pim override interval Resets the override interval for the router interface to its default value Command mode Interface IP default ip pim Resets the PIM configuration on the interface to its ...

Page 619: ...and Syntax and Usage ip gateway6 1 4 address IPv6 address enable Configures the IPv6 address of the default gateway in hexadecimal format with colons such as 3001 0 0 0 0 0 abcd 12 The enable option also enables the gateway Command mode Global configuration no ip gateway6 1 4 enable Enables or disables the default gateway Command mode Global configuration no ip gateway6 1 4 Deletes the default gat...

Page 620: ...ress IPv6 address gateway default IPv6 gateway address interface IP interface number all Clears the selected IPv6 static routes Command mode Global configuration show ipv6 route static Displays the current static route configuration Command mode All Table 345 IPv6 Neighbor Discovery Cache Configuration Options Command Syntax and Usage ip neighbors IPv6 address MAC address vlan VLAN ID 1 4094 port ...

Page 621: ...0 Sets the timeout value for Path MTU cache entries in minutes Enter 0 zero to set the timeout to infinity no timeout The default value is 10 minutes Command mode Global configuration clear ipv6 pmtu Clears all entries in the Path MTU cache Command mode Privileged EXEC show ipv6 pmtu Displays the current Path MTU configuration Command mode All Table 347 IPv6 Neighbor Discovery Prefix Options Comma...

Page 622: ...f link flag omit the off link parameter when you issue this command Command mode Interface IP ipv6 nd prefix IPv6 prefix IPv6 prefix length valid lifetime 0 4294967295 infinite variable 0 4294967295 prefered lifetime 0 4294967295 infinite variable no autoconfig off link Configures the Valid Lifetime and optionally the Preferred Lifetime of the prefix in seconds The Valid Lifetime is the length of ...

Page 623: ...Pv6 prefix length precedence 0 100 label 0 100 Adds or removes a Prefix Policy Table entry Enter the following parameters IPv6 address prefix Prefix length Precedence The precedence is used to sort destination addresses Prefixes with a higher precedence are sorted before those with a lower precedence Label The label allows you to select prefixes based on matching labels Source prefixes are coupled...

Page 624: ... Command mode Interface loopback ip address IP address subnet mask enable Defines the loopback interface IP address You can also specify its subnet mask The enable option also enables the loopback interface Command mode Interface loopback ip netmask subnet mask Defines the loopback interface subnet mask Command mode Interface loopback ip ospf area 0 19 Configures the OSPF area index used by the lo...

Page 625: ...D 1 4094 Removes an entry from the binding table Command mode Global configuration no ip dhcp snooping information option insert Enables or disables option 82 support for DHCP Snooping When enabled DHCP Snooping performs the following functions if a DHCP packet from a client contains option 82 information the information is retained when DHCP Snooping forwards a DHCP packet from a client option 82...

Page 626: ...able 351 CEE Configuration Options Command Syntax and Usage no cee enable Globally enables or disables CEE Command mode Global configuration no cee iscsi enable Enables or disables ISCSI TLV advertisements Command mode Global configuration show cee iscsi Displays the current ISCSI TLV parameters Command mode All show cee Displays the current CEE parameters Command mode All ...

Page 627: ...he link bandwidth percentage allocated to the Priority Group Note Priority Group 15 is a strict priority group and does not need bandwidth assigned to it Command mode Global configuration cee global ets priority group pgid 0 7 15 description 1 31 characters Enter text that describes this Priority Group Command mode Global configuration no cee global ets priority group 0 7 15 description Deletes th...

Page 628: ...Usage no cee global pfc enable Globally enables or disables Priority Flow Control on all ports Command mode Global configuration cee global pfc priority 0 7 description 1 31 characters Enter text that describes this Priority Group Command mode Global configuration no cee global pfc priority 0 7 description Removes the description for the specified Priority Group Command mode Global configuration n...

Page 629: ... 1p priority Note PFC can be enabled on 802 1p priority 3 and one other priority only Command mode Global configuration cee port port alias or number pfc priority 0 7 description 1 31 characters Enter text to describe the priority value Command mode Global configuration no cee port port alias or number pfc priority 0 7 description Deletes the description for the specified priority value Command mo...

Page 630: ...configuration no cee port port alias or number dcbx ets advertise Enables or disables DCBX ETS advertisements of configuration data When enabled the Advertisement flag is set to 1 advertise data to the peer device Command mode Global configuration no cee port port alias or number dcbx ets willing Enables or disables ETS willingness to accept configuration data from the peer device When enabled the...

Page 631: ...Configuration Options Command Syntax and Usage no fcoe fips automatic vlan Enables or disables automatic VLAN creation based on response received from the connected device Command mode Global configuration no fcoe fips enable Globally enables or disables FIP Snooping Command mode Global configuration no fcoe fips timeout acl Enables or disables ACL time out removal When enabled ACLs associated wit...

Page 632: ...ping configuration options Table 357 Port FIP Snooping Options Command Syntax and Usage no fcoe fips port port alias or number enable Enables or disables FIP Snooping on the port The default setting is enabled Command mode Global configuration fcoe fips port port alias or number fcf mode auto on off Configures FCoE Forwarding FCF on the port as follows on Configures the port as a Fibre Channel For...

Page 633: ... to the standard interface OID as follows 1 3 6 1 2 1 2 2 1 1 X where X is the ifIndex Command mode Global configuration rmon history 1 65535 owner 1 127 characters Enter a text string that identifies the person or entity that uses this History index Command mode Global configuration no rmon history 1 65535 owner Deletes the identification information for the specified History index Command mode G...

Page 634: ...5 description Deletes the description of the specified event index Command mode Global configuration rmon event 1 65535 owner 1 127 characters Enter a text string that identifies the person or entity that uses this Event index Command mode Global configuration no rmon event 1 65535 owner Deletes the identification information for the specified Event index Command mode Global configuration rmon eve...

Page 635: ...ther Configures the alarm type as rising falling or either rising or falling Command mode Global configuration rmon alarm 1 65535 falling crossing index 0 65535 Configures the falling alarm event index that is triggered when a falling threshold is crossed Command mode Global configuration rmon alarm 1 65535 falling limit 2147483647 2147483647 Configures the falling threshold for the sampled statis...

Page 636: ...s threshold and the value at the last sampling interval was less than this threshold a single event is generated Command mode Global configuration rmon alarm 1 65535 sample abs delta Configures the method of sampling the selected variable and calculating the value to be compared against the thresholds as follows abs absolute value the value of the selected variable is compared directly with the th...

Page 637: ...s Command mode Global configuration show virt Displays the current virtualization parameters Command mode All Table 362 VM Bandwidth Management Options Command Syntax and Usage no virt vmpolicy vmbwidth MAC address UUID name IP address index number bwctrl Enables or disables bandwidth control on the VM policy Command mode Global configuration virt vmpolicy vmbwidth MAC address UUID name IP address...

Page 638: ... Command mode Global configuration no virt vmpolicy vmbwidth MAC address UUID name IP address index number Deletes the bandwidth management settings from this VM policy Command mode Global configuration show virt vmpolicy vmbwidth MAC address UUID name IP address index number index range include exclude section begin Displays the current VM bandwidth management parameters for all virtual machines ...

Page 639: ...l be included in the VM group Command mode Global configuration no virt vmgroup 1 4096 optflood Enables or disables Optimized Flooding on the VM group Command mode Global configuration no virt vmgroup 1 4096 port port alias or number Adds or removes the selected port to from the VM group Note A port can be added to a VM group only if no VMs on that port are members of the VM group Command mode Glo...

Page 640: ...esses on virtual machines The default setting is disabled Command mode Global configuration no virt vmgroup 1 4096 validate Disables MAC address spoof prevention for the specified VM group Command mode Global configuration virt vmgroup 1 4096 vlan VLAN ID 1 4094 Assigns a VLAN to this VM group If you do not assign a VLAN to the VM group the switch automatically assigns the first unused VLAN when a...

Page 641: ...AP is applied to the entire VM Group For more information about configuring VLAN Maps see VMAP Configuration on page 448 Command mode Global configuration no virt vmgroup 1 4096 vport 1 8 Adds or removes the selected virtual port to the VM group Command mode Global configuration no virt vmgroup 1 4096 Deletes the VM group Command mode Global configuration show virt vmgroup 1 4096 Displays the curr...

Page 642: ...nd mode Global configuration virt vmcheck action advanced acl link log Sets up action taken when detecting MAC address spoofing in advanced validation mode acl registers a syslog entry and installs an ACL to drop traffic incoming on the corresponding switch port originating from the spoofed MAC address link registers a syslog entry and disables the corresponding switch port log registers a syslog ...

Page 643: ...ame 1 39 characters Defines a name for the VM profile The switch supports up to 2048 VM profiles Command mode Global configuration no virt vmprofile profile name 1 39 characters Deletes the selected VM profile Command mode Global configuration virt vmprofile edit profile name 1 39 characters eshaping average 1 1000000000 burst 1 1000000000 peak 1 1000000000 Configures traffic egress shaping parame...

Page 644: ...per second Delete traffic shaping parameters Command mode Global configuration no virt vmprofile profile name 1 39 characters shaping Deletes the traffic shaping parameters for the specified VM profile Command mode Global configuration virt vmprofile edit profile name 1 39 characters vlan VLAN ID 1 4094 Assigns a VLAN to the VM profile Command mode Global configuration show virt vmprofile profile ...

Page 645: ...ration default virt vmware hbport Sets to default esx esxi server to vcenter heartbeat udp port Command mode Global configuration virt vmware hello enable haddr IP address hport port alias or number htimer 1 60 Configures CDP Cisco Discovery Protocol advertisements sent periodically to VMware ESX hypervisors Exchanging CDP message with ESX hypervisors facilitates MAC address spoof prevention Defau...

Page 646: ...password for the Virtual Center Whether to authenticate the SSL security certificate yes or no Command mode Global configuration no virt vmware vcspec Deletes the Virtual Center credentials on the switch Command mode Global configuration show virt vmware Displays the current VMware parameters Command mode All Table 366 VM Ware Configuration Options Command Syntax and Usage Table 367 VMReady Config...

Page 647: ...shared mode When enabled multiple vNIC groups can be assigned to an uplink port Command mode Global configuration show vnic Displays the current vNIC parameters Command mode All Table 369 vNIC Port Configuration Options Command Syntax and Usage vnic port port alias or number index 1 4 Enters vNIC Configuration mode Note This command is valid for internal server ports only Command mode Global confi...

Page 648: ...nue to operate normally The default setting is disabled Command mode vNIC Group configuration no member vNIC number Adds or removes a vNIC to the vNIC Group The vNIC ID is comprised of the port number and the vNIC number For example 1 1 Command mode vNIC Group configuration no port port number or alias Adds or removes the selected switch port to the vNIC Group Command mode vNIC Group configuration...

Page 649: ...nfigures the Quality of Service QoS mode for the specified UFP port bw performs rate bandwidth control by dividing the port s bandwidth across the virtual ports A minimum and a maximum limit can be configured for each virtual port Note QoS Bandwidth mode is only applicable to up to four virtual ports per physical port ets Enhanced Transmission Selection ETS allows you to allocate bandwidth to diff...

Page 650: ... associated with VLANs through VMready or QBG fcoe configures the virtual port to carry Fibre Channel over Ethernet traffic when linked to a Fibre Channel virtual Host Bus Adapter CEE FCoE should be enabled globally and priority 3 configured for the virtual port before enabling an FCoE virtual port default vlan configures the default VLAN ID for the virtual port This option provides an override if...

Page 651: ... Port Configuration qos bandwidth max 10 100 min 10 100 Configures bandwidth allocation for the virtual port Configures the minimum bandwidth guaranteed for the virtual port as a percentage of the physical port s bandwidth The default value is 25 Configures the maximum bandwidth allowed for this virtual port as a percentage of the physical port s bandwidth The default value is 100 Note The aggrega...

Page 652: ...ber Enter Virtual Station Interface Database configuration mode For more details see page 653 Command mode Global configuration virt evb profile profile number Enter Virtual Station Interface Profile configuration mode For more details see page 655 Command mode Global configuration show virt evb vsidb VSIDB number Displays the current Virtual Station Interface database information Command mode All...

Page 653: ...ation Interface Type database document path Command mode VSI Database no filepath Deletes the Virtual Station Interface Type database document path Command mode VSI Database host IP address mgt port data port Sets the Virtual Station Interface Type database manager IP address and the port used for the connection By default the management port is used Command mode VSI Database port 1 65534 Sets the...

Page 654: ...ration show virt evb vsitypes mgrid 0 255 typeid 1 16777215 version 0 255 Displays the current Virtual Station Interface Type database parameters Command mode All show virt evb vsidb VSIDB number Displays the current Virtual Station Interface database information Command mode All Table 373 Edge Virtual Bridge VSI Type Database Configuration Options continued Command Syntax and Usage ...

Page 655: ...apability Command mode EVB Profile no vsi discovery Enables or disables VSI Discovery ECP and VDP Command mode EVB Profile no virt evb profile profile number Deletes the specified EVB profile Command mode Global configuration evb profile 1 16 Applies the specified EVB profile for the port Automatically enables LLDP EVB TLV on the corresponding port Command mode Interface port no evb profile Resets...

Page 656: ...tches between OpenFlow version 1 0 and OpenFlow version 1 3 on reboot The default setting is v1 Command mode Global configuration boot profile default Starts the switch in Hybrid mode on reboot This is the default setting Command mode Global configuration boot profile openflow Starts the switch in OpenFlow only mode on reboot Command mode Global configuration no openflow enable Enables or disables...

Page 657: ... mode The default setting is disabled Command mode Global configuration openflow mpls priority 1 65535 Configures a priority value to map flows with matching priority to MPLS entries The default value is 65535 Note Supported only in OpenFlow 1 3 Note When you issue this command all the existing MPLS flows are cleared automatically Command mode Global configuration no openflow mpls priority Resets ...

Page 658: ...em uses the management port Command mode OpenFlow Instance controller 1 4 port TCP port number 1 65535 Configures the TCP port used for communication with the Controller The default port is 6633 Command mode OpenFlow Instance no controller 1 4 Deletes the selected controller from the specified instance ID Command mode OpenFlow Instance dpid hex string Applies an 8 byte Datapath ID to the instance ...

Page 659: ...er than the echo reply timeout value Command mode OpenFlow Instance no echo request interval Resets the echo request interval to the default value of 30 seconds Command mode OpenFlow Instance no edgeport port alias or number Enables or disables the selected port as an OpenFlow edge port outside port Edge ports are usually connected to servers The default setting is disabled Note Learning and flood...

Page 660: ...d mode OpenFlow Instance max flow acl 0 750 max flow acl 0 1000 Enables or disables the maximum flow ACL option which ensures a dedicated maximum number of ACL flows are available for the instance The maximum number of entries is 750 in Hybrid mode and 1000 in OpenFlow Only mode The total number of 750 1000 entries is shared between instances By default max flow acl is set to 0 allowing instances ...

Page 661: ...By default max flow mpls pop is set to 0 allowing instances to dynamically access the available MPLS label pop flow slots until depletion Note Setting max flow mpls pop manually limits the number of MPLS label pop flow slots available for other instances by the corresponding value Note Supported only in OpenFlow 1 3 Command mode OpenFlow Instance no max flow mpls pop Sets the instance s maximum nu...

Page 662: ...fdb Sets the instance s maximum number of FDB based unicast flows to the default value of 0 dynamic allocation Command mode OpenFlow Instance no member port alias or number Enables or disables port usage by the OpenFlow instance for data traffic Command mode OpenFlow Instance no member portchannel 1 128 Enables or disables static portchannel or LACP usage by the OpenFlow instance for data traffic ...

Page 663: ...acket only to a controller The default value is 0xffffffffffffffff Note Supported only in OpenFlow 1 3 Command mode OpenFlow Instance no send to controller cookie Resets the send to controller flow cookie to the default value of 0xffffffffffffffff Note Supported only in OpenFlow 1 3 Command mode OpenFlow Instance static table Configures static flows For command options see page 666 Command mode Op...

Page 664: ... the static FDB table This enables equal cost multi path routing and use cases where IPS and Firewall devices forward packets without changing the source MAC address The default value is disabled Command mode Interface port Interface portchannel clear openflow group table basic emergency dynamic static Clears OpenFlow data for all instances The group option clears the OpenFlow 1 3 group table The ...

Page 665: ...ation displays the configured current and maximum number of flows for all OpenFlow instances For more information see page 154 group displays group information for all OpenFlow 1 3 instances For more information see page 156 information displays the configuration for all OpenFlow instances For more information see page 157 table displays the basic and emergency flow tables for all OpenFlow instanc...

Page 666: ...g table describes the static flow configuration options Table 376 Static Flows Configuration Options Command Syntax and Usage static table add index 1 750 match matching qualifier actions matching qualifier options matching qualifier priority 0 65535 Adds a static flow entry to the instance Command mode OpenFlow Instance static table modify index 1 750 match matching qualifier actions matching qua...

Page 667: ...e ʺarpʺ ʺ0806ʺ or ʺipʺ ʺ0800ʺ or hex value 65535 protocol ʺtcpʺ or ʺudpʺ or 0 255 tos IP Type of Service 0 255 type ʺrequestʺ or ʺreplyʺ can be set only if ether type is ARP all Applicable to all traffic Table 378 Static Flow Matching Qualifiers in OpenFlow 1 3 Qualifier Value in port switch input port in portchannel switch input portchannel in phy port switch physical input port valid only when i...

Page 668: ...lʺ ʺin portʺ ʺcontrollerʺ or a valid port set src mac Change source MAC address set dst mac Change destination MAC address strip vlan id Remove VLAN identifier set vlan priority Set 802 1p priority code point value 0 7 set nw tos Set IP Type of Service 0 255 drop Drop packet max len Maximum length to send to controller Table 380 Static Flow Actions in OpenFlow 1 3 Action Value output ʺallʺ ʺin por...

Page 669: ...P Differentiated Services Code Point 0 63 set mpls label set MPLS label 1 0xFFFFF set mpls ttl set MPLS time to live copy ttl out copy time to live outward from next to outermost to outermost copy ttl in copy time to live inward from outermost to next to outermost dec nw ttl decrement network time to live drop drop the packet Table 380 Static Flow Actions in OpenFlow 1 3 continued Action Value ...

Page 670: ...settings Command mode Global configuration no ptp transparent enable Enables or disables PTP End to End transparent clock mode In this mode incoming PTP packets are forwarded based on routing rules currently in place for the PTP domain s multicast address within the 224 0 1 129 224 0 1 132 range On egress PTP packet timestamps are updated based on the time spent between ingress and egress The defa...

Page 671: ...abled ports will not support PTP even if PTP is globally enabled The default setting is enabled Note PTP is not supported on management ports Command mode Interface port show ptp Displays current PTP settings Command mode All Table 381 Precision Time Protocol Configuration Options continued Command Syntax and Usage ...

Page 672: ...larity in milliseconds The default setting is 5 miliseconds Command mode Global configuration microburst port threshold port alias or number 1 42650 Configures the number of memory cells a port is allowed to access from the shared service pool There is no dedicated number of memory cells for a port If this threshold is reached it means the port is congested and needs to access additional memory fr...

Page 673: ...lp active da discovery enable Enables or disables active directory agent discovery The default value is disabled Note In stacking this command is available only on the Master switch Command mode Global configuration ip slp active da discovery start wait time 1 10 Number of seconds to wait after enabling SLP before attempting active DA discovery if active DA discovery is enabled The default value i...

Page 674: ...nce for ENOS 8 4 show ip slp information Displays SLP information Command mode All show ip slp user agents Displays UA information Command mode All Table 383 Service Location Protocol Options continued Command Syntax and Usage ...

Page 675: ...that have been changed from the default values The screen display can be captured edited and placed in a script file which can be used to configure other switches through a Telnet connection When using Telnet to configure a new switch paste the configuration commands from the script file at the command line prompt of the switch The active configuration can also be saved or loaded via SFTP FTP TFTP...

Page 676: ...me Note The output file is formatted with line breaks but no carriage returns the file cannot be viewed with editors that require carriage returns such as Microsoft Notepad Note If the FTP TFTP SFTP server is running SunOS or the Solaris operating system the specified configuration file must exist prior to executing the copy running config command and must be writable set with proper permission an...

Page 677: ... replaced with the commands found in the specified configuration file The file can contain a full switch configuration or a partial switch configuration To start the switch configuration download at the prompt enter or or The switch prompts you for the server address and filename RS G8264 copy ftp running config RS G8264 copy sftp running config RS G8264 copy tftp running config ...

Page 678: ...d mode Privileged EXEC Note Not available in stacking In this example the active configuration file is copied to a directory on the USB drive Copy from USB Use the following command to copy a file from the USB drive to the switch usbcopy fromusb filename active boot image1 image2 Command mode Privileged EXEC Note Not available in stacking In this example the active configuration file is copied fro...

Page 679: ...ent actions edit or delete a script display script content In addition the switch administrator may access Python shell and directly run a script The following table describes the Python Scripts Management and Execution commands Table 384 Python Scripts Management and Execution Commands Command Syntax and Usage copy script tftp address IPv4 address filename script filename data port mgt port Creat...

Page 680: ...uotes and the arguments must be separated by white spaces The string representing the list of arguments must not exceed 199 characters Command mode Privileged EXEC no logging log scheduler Enables or disables scheduler module syslog The default setting is enabled Command mode Global Configuration no logging log script Enables or disables scripting module syslog The default setting is enabled Comma...

Page 681: ...n user defined threshold CPU usage percentage is checked every 60 seconds Command mode Scheduler Job event counter interface port 1 64 igmp group ge 1 3072 interval 11 6010 Triggers a script execution when the number of IGMP groups learned on a port is greater than the set up value The number of learned IGMP groups is checked by default every 260 seconds The interval option changes the check frequ...

Page 682: ...L switch user login fail event LOGINSUCC switch user login success event MBURST microburst Note All ports microburst state is checked every 10 seconds When a port goes into bursting state the scheduler automatically triggers a job MGTGWDOWN Mgmt gateway unavailable event MGTGWUP Mgmt gateway available event MROUTERNEW new multicast router learned event STGTPCH STG topology change event VRRPBKP VRR...

Page 683: ...matically converted to absolute time Thus the event is visible in running configuration as an absolute time Command mode Scheduler Job no scheduler job name job name Deletes the specified scheduler job Command mode Global configuration show scheduler job name job name Displays a list of all currently scheduled jobs or detailed information about a specified scheduled job For more information see pa...

Page 684: ...b cpu limit Disables the option to terminate a running script when CPU usage percentage exceeds a globally defined threshold Command mode Global configuration scheduler job time limit 10 600 Enables the option to terminate a running script when elapsed time exceeds a globally defined threshold seconds Command mode Global configuration no scheduler job time limit Disables the option to terminate a ...

Page 685: ...ions Command Mode Global configuration console log Enables or disables session console logging Command Mode Privileged EXEC ntp send Allows the user to send requests to the NTP server Command Mode Privileged EXEC password 1 128 characters Allows the user to change the password You must enter the current password in use for validation The switch prompts for a new password between 1 128 characters C...

Page 686: ... port port alias or number rmon Temporarily enables or disables remote monitoring of the port The port will be returned to its configured operation mode when the switch is rebooted Command Mode Privileged EXEC interface port port alias or number shutdown Temporarily disables the port The port will be returned to its configured operation mode when the switch is rebooted Command Mode Privileged EXEC...

Page 687: ...preferred switch has been returned to service after a failure When this command is executed the current master gives up control and initiates a new election by temporarily advertising its own priority level as 0 lowest After the new election the virtual router forced into backup mode by this command will resume master control in the following cases This switch owns the virtual router the IP addres...

Page 688: ... enter a new name to create a new Virtual Switch Command Mode All virt vmware pg Port Group name host ID VSwitch name VLAN ID 0 4094 shaping enabled average Kbps burst KB peak Kbps Adds a Port Group to a VMware host You are prompted for the following information Port Group name VMware host ID Use host UUID host IP address or host name Virtual Switch name VLAN ID of the Port Group Whether to enable...

Page 689: ... follows Shaping enabled Average traffic in kilobits per second Maximum burst size in kilobytes Peak traffic in kilobits per second Delete traffic shaping parameters Command Mode All virt vmware vmacpg VM NIC MAC address Port Group name Changes a VM NIC s configured Port Group Command Mode All no virt vmware vsw host ID Virtual Switch name Adds or removes a Virtual Switch to a VMware host Use one ...

Page 690: ...ost UUID IP address Host name Command Mode All virt vmware dvswitch adduplink dvSwitch name host UUID host IP address host name uplink name Adds the specified physical NIC to the specified dvSwitch uplink ports Command Mode All virt vmware dvswitch del datacenter name dvSwitch name Removes the specified dvSwitch from the specified DataCenter Command Mode All virt vmware dvswitch remhost dvSwitch n...

Page 691: ...dth in kilobits per second burst size in kilobits peak bandwidth in kilobits per second Command Mode All virt vmware dpg del port group name dvSwitch name Removes the specified port group from the specified dvSwitch Command Mode All virt vmware dpg update port group name dvSwitch name VLAN ID 1 4094 ishaping bandwidth burst size peak bandwidth eshaping bandwidth burst size peak bandwidth Updates t...

Page 692: ...nds Command Syntax and Usage virt evb update vsidb VSIDB number Update VSI types from the VSI database Command mode All clear virt evb vsi mac address port port alias or number type id 1 16777215 vlan 1 4094 Clears VSI database associations Command mode Privileged EXEC clear virt evb vsidb mgrid 0 255 type id 1 16777215 version 0 255 Clears local VSI types cache Command mode Privileged EXEC ...

Page 693: ...en the switch on the next reboot Selecting a configuration block to be used when the switch on the next reboot Downloading or uploading a new software image to the switch via SFTP FTP TFTP In addition to the Boot commands you can use a Web browser or SNMP to work with switch image and configuration files To use SNMP refer to Working with Switch Images and Configuration Files The boot options are d...

Page 694: ...unk port alias or number Configures the ports used to connect the switch to the stack Enter only 10Gb or 40Gb external ports Command mode Global configuration no boot stack enable Enables or disables the switch stack Note When the switch reboots in stacking it is reset to the factory default settings Command mode Global configuration boot stack mode master member master backup attached switch numb...

Page 695: ...members of the stack The delay option configures the time in minutes between each switch reboot Note This command is available only on the master switch Command mode Privileged EXEC copy tftp image1 image2 address hostname or server IP address filename server filename data port mgt port staggered upgrade delay 2 20 Loads the specified stacking software image to all member switches using TFTP and t...

Page 696: ...up switch followed by the master switch and then the other members of the stack The delay option configures the time in minutes between each switch reboot switch reboots only the specified configured switch Note The optional command elements are available only on the master switch Command mode Privileged EXEC show boot stack master backup attached switch number 1 16 all Displays current Stacking b...

Page 697: ...CIST Name Rev and Maxhop Internet Group Management Protocol IGMP Relay Internet Group Management Protocol version 3 IGMPv3 IGMP Querier Multicast Listener Discovery MLD Microburst Detection Converged Enhanced Ethernet CEE Fibre Channel over Ethernet FCoE Precision Time Protocol PTP EasyConnect EZC Python Scripting Openflow Virtual Link Aggregation VLAG Static Link Aggregation Control Protocol LACP...

Page 698: ...ime cancel a previously scheduled reboot and check the time of the current reboot schedule Table 395 Scheduled Reboot Options Command Syntax and Usage boot schedule day time hh mm Configures the switch reboot time The following options are valid for the day value monday tuesday wednesday thursday friday saturday sunday Command mode Global configuration no boot schedule Cancels the switch reboot ti...

Page 699: ...anually configured TFTP server address and file path Table 396 Netboot Options Command Syntax and Usage boot netboot cfgfile 1 31 characters Defines the file path for the configuration file or script file on the TFTP server For example directory sub config cfg directory sub config py Command mode Global configuration no boot netboot cfgfile Removes the file path for the configuration file or scrip...

Page 700: ...ith such protocols are unavailable The following protocols are disabled and are not available on the switch if Secure Policy mode is enabled HTTP LDAP Client SNMPv1 and SNMPv2 Telnet Client and Telnet Server Telnet IPv6 Client and Telnet IPv6 Server FTP Client and FTP Server Radius Client TACACS Client Syslog Server The following protocols are enabled and available on the switch if Secure Policy m...

Page 701: ...KE IPSec Ping and Ping IPv6 Traceroute and Traceroute IPv6 bootp TFTP IPv6 SNMPv3 IPv6 To configure the switch policy mode use the following command Table 397 Security Policy Configuration Command Syntax and Usage boot security policy legacy mode secure mode Configures the switch security policy Note A switch reload is needed for the changes to take effect Command mode Global configuration show bo...

Page 702: ...ackets are forwarded immediately after the destination MAC address in the packet header is examined without reading the rest of the packet This reduces latency but may propagate potentially corrupted packets In store and forward mode the switch examines the entire packet and compares the Cyclic Redundancy Check CRC field against its own Frame Check Sequence FCS computation The switch then drops co...

Page 703: ... The switch needs to be reloaded for the configuration to take effect Command mode Global configuration no boot spanning tree max instances Reset the maximum number of STGs available on the switch to the default value of 128 Note The switch needs to be reloaded for the configuration to take effect Command mode Global configuration show boot spanning tree Displays the maximum number of currently av...

Page 704: ...ture configures the switch Machine Type Model MTM Table 400 Machine Type Model Configuration Command Syntax and Usage boot mtm MTM code Configures the switch s machine type model MTM value MTMs are applied on reboot and persist over firmware upgrades Command mode Global configuration ...

Page 705: ...sfp 40gports port alias or number Enables or disables 40GbE mode on the selected QSFP ports When enabled each QSFP port is set as a single 40GbE port When disabled each QSFP port is configured to breakout into four 10GbE ports Note You must reboot the switch for this change to take effect Command mode Global configuration show boot qsfp port modes Displays the current QSFP parameters Command mode ...

Page 706: ... and boots with the new image RSG8264_OS img The switch boots with the new software image The existing images are not affected RSG8264_replace1_OS img The switch replaces the current software image1 with the new image and boots with the new image RSG8264_replace2_OS img The switch replaces the current software image2 with the new image and boots with the new image RSG8264 cfg The switch boots with...

Page 707: ...ht Lenovo 2017 Chapter 6 Boot Options 707 To safely remove the USB device without corrupting any files use the following command system usb eject Command mode Global configuration Note Not available in stacking ...

Page 708: ...re released you can upgrade the software running on your switch Use the following command to determine the current software version show boot Command mode All Upgrading the software image on your switch requires the following Loading the new image onto a SFTP FTP or TFTP server on your network Transferring the new image from the SFTP FTP or TFTP server to your switch Selecting the new software ima...

Page 709: ...the new software image or boot file Note The DNS parameters must be configured if specifying hostnames When the above requirements are met use the following procedure to download the new software to your switch 1 In Privileged EXEC mode enter the following command 2 Select a port to use for downloading the image 3 Enter the hostname or IP address of the SFTP FTP or TFTP server 4 Enter the name of ...

Page 710: ...IP address of the SFTP FTP or TFTP server 4 Enter the name of the file into which the image will be uploaded on the SFTP FTP or TFTP server 5 Enter your username and password for the server if applicable 6 The system then requests confirmation of what you have entered To have the file uploaded enter Y RS G8264 config boot image image1 image2 Next boot will use switch software image1 instead of ima...

Page 711: ...ation block There is also a factory configuration block This holds the default configuration set by the factory when your RackSwitch G8264 was manufactured Under certain circumstances it may be desirable to reset the switch configuration to the default This can be useful when a custom configured RackSwitch G8264 is moved to a network environment where it will be re configured for a different purpo...

Page 712: ...presentative can assign your switch an Entitlement Serial Number ESN at the time you request support The ESN can be conveniently stored on the switch using the following command The ESN helps to locate your switch s identifying information when you call technical support for help in future RS G8264 config boot esn Entitlement Serial Number ...

Page 713: ...support in a local file to flash memory The no dump option skips this step thereby decreasing the time needed for the switch to reboot By default the switch saves technical support information before rebooting Technical support information backup tech support can be uploaded to an external server using the following command copy backup tech support ftp sftp tftp Command mode Privileged EXEC Note T...

Page 714: ...enovo Enterprise Network Operating System 8 4 To change the deployment profile select the new profile and reboot the G8264 Use the following command to select a new profile The following list describes the boot profile options acl deployment profile with maximum Access Control Lists ACLs default deployment profile with balanced resources ipmc opt deployment profile with different IPMC entries and ...

Page 715: ...The Boot Management menu allows you to perform the following actions To change the booting image press I and follow the screen prompts To change the configuration block press C and follow the screen prompts To boot in recovery mode press R For more details see Boot Recovery Mode on page 716 To restart the boot process from the beginning press Q To exit the Boot Management menu press E The booting ...

Page 716: ...mage Upgrade using TFTP on page 717 To recover from a failed software or boot image upgrade using XModem download press X and follow the screen prompts For more details see Recovering from a Failed Image Upgrade using XModem Download on page 719 To enable the loading of an unofficial image press P and follow the screen prompts For more details see Physical Presence on page 721 To restart the boot ...

Page 717: ...gress and the dots are being displayed 4 Enter Boot Recovery Mode by selecting R The Recovery Mode menu will appear 5 To start the recovery process using TFTP select T The following message will appear 6 Enter the IP address of the management port 7 Enter the network mask of the management port 8 Enter the gateway of the management port 9 Enter the IP address of the TFTP server 10 Enter the filena...

Page 718: ...135 Image Filename G8264 8 4 1 0_OS img Netmask 255 255 255 128 Gateway 10 241 6 66 Configuring management port Installing image G8264 8 4 1 0_OS img from TFTP server 10 72 97 135 Extracting images Do NOT power cycle the switch Installing Application Image signature verified Install image as image 1 or 2 hit return to just boot image 2 Installing image as image2 100 Image2 updated succeeded Updati...

Page 719: ...X for Xmodem download You will see the following display 6 When you see the following message change the Serial Port speed to 115200 bps 7 Press Enter to set the system into download accept mode When the readiness meter displays a series of C characters start Xmodem on your terminal emulator You will see a display similar to the following 8 Select the image to download Xmodem initiates the file tr...

Page 720: ... Filesystem Image signature verified 100 Installing Kernel Image signature verified 100 Installing Device Tree Image signature verified 100 Installing Boot Loader 100 Updating install log File image installed from xmodem at 18 06 02 on 13 3 2015 Please select one of the following options T Configure networking and tftp download an image X Use xmodem 1K to serial download an image P Physical presen...

Page 721: ...ecurity test will be performed The system location blue LED will blink a number of times between 1 and 12 Enter that number 8 After entering the correct number the Recovery Mode menu will re appear To install an unofficial image use one of the following procedures TFTP for details see page 717 XModem Download for details see page 719 Note You have three attempts to successfully complete the securi...

Page 722: ...722 G8264 Command Reference for ENOS 8 4 ...

Page 723: ...information via TFTP SFTP or FTP For details see page 742 Command mode Privileged EXEC copy switch filename tftp address TFTP server IP address filename TFTP server filepath data port mgt port Uploads a file via TFTP Command mode Privileged EXEC copy log stfp tftp data port mgt port Uploads the system log file SYSLOG via SFTP or TFTP Command mode Privileged EXEC copy tech support ftp sftp data por...

Page 724: ... Command mode Privileged EXEC clear logging Clears the system log file SYSLOG Command mode Privileged EXEC show tech support fcoe l2 l3 link port Dumps all G8264 information statistics and configuration You can log the output tsdmp into a file To filter the information use the following options fcoe displays only FCoE related information l2 displays only Layer 2 related information l3 displays onl...

Page 725: ...4 56 xxxxxxxxxxxx such as 080020123456 Command mode All show mac address table interface port port alias or number Displays all FDB entries for a particular port Command mode All show mac address table multicast Displays all Multicast MAC entries in the FDB Command mode All show mac address table private vlan VLAN ID 2 4094 Displays all FDB entries on a single private VLAN Command mode All show ma...

Page 726: ... Command mode Privileged EXEC no debug lacp packet receive transmit both port port alias or number Enables or disables debugging for Link Aggregation Control Protocol LACP packets on selected ports running LACP The following parameters are available receive filters only LACP packets received transmit filters only LACP packets sent both filters LACP packets either sent or received port filters LACP...

Page 727: ...ters are available receive filters only BPDU frames received transmit filters only BPDU frames sent By default STP BPDU debugging is disabled Command mode Privileged EXEC no debug spanning tree tc Enables or disables the display of messages relating to STP topology changes Command mode Privileged EXEC no debug tacacs client Enables or disables TACACS client debug messages Command mode Privileged E...

Page 728: ...EXEC no debug ssh server all Enables or disables all SSH Server debug messages Command mode Privileged EXEC no debug ssh server disconnect Enables or disables SSH Server disconnect debug messages Command mode Privileged EXEC no debug ssh server msg Enables or disables SSH Server type and protocol debug messages Command mode Privileged EXEC no debug ssh server packet Enables or disables SSH Server ...

Page 729: ...ty debug messages Command mode Privileged EXEC no debug sec crypto Enables or disables all IP security cryptographic debug messages Command mode Privileged EXEC no debug sec ike Enables or disables all IP security IKEv2 debug messages Command mode Privileged EXEC no debug sec info Displays the current security debug flag Command mode Privileged EXEC no debug sec ipsec Enables or disables all IPsec...

Page 730: ...G Health Check debug messages Command mode Privileged EXEC no debug vlag isl Enable or disables vLAG ISL debug messages Command mode Privileged EXEC no debug vlag msg Enable or disables vLAG debug messages Command mode Privileged EXEC no debug vlag portmgr Enable or disables vLAG Port Manager debug messages Command mode Privileged EXEC no debug vlag sm Enable or disables vLAG State Machine debug m...

Page 731: ...BGP debug messages for the specified BGP neighbor Command mode Privileged EXEC no debug bgp IP address in out Enables or disables all inbound or outbound BGP debug messages for the specified BGP neighbor Command mode Privileged EXEC no debug bgp in out Enables or disables all inbound or outbound BGP debug messages Command mode Privileged EXEC no debug bgp persistent Enables or disables saving BGP ...

Page 732: ...ting with the last entry first Command mode All show ip bgp debugging IP address in out last Displays inbound or outbound BGP debugging updates for the specified neighbor If the last option is specified displays the results starting with the last entry first Command mode All show ip bgp debugging ignored last Shows all BGP information for routers that have been ignored If the last option is specif...

Page 733: ...bout the Control state machine for the selected port Command mode All show cee information dcbx port port alias or number ets Displays DCBX ETS state machine information Command mode All show cee information dcbx port port alias or number feature Displays information about the Feature state machine for the selected port Command mode All show cee information dcbx port port alias or number pfc Displ...

Page 734: ... value TLV information for the specified port Command mode All show lldp port port alias or number vport 1 8 tlv evb Displays Edge Virtual Bridge EVB type length value TLV information for the specified virtual port on the selected port Command mode All show lldp receive Displays information about the LLDP receive state machine Command mode All show lldp transmit Displays information about the LLDP...

Page 735: ... Syntax and Usage show ip arp Shows all ARP entries Command mode All show ip arp find IP address Shows a single ARP entry by IP address Command mode All show ip arp interface port port number or alias Shows ARP entries on selected ports Command mode All show ip arp reply Shows the list of IP addresses which the switch will respond to for ARP requests Command mode All show ip arp vlan VLAN ID 1 409...

Page 736: ...ute by destination IP address Command mode All show ip route gateway IP address Shows routes to a default gateway Command mode All show ip route interface 1 128 Shows routes on a single interface Command mode All show ip route tag address bgp broadcast fixed martian multicast ospf rip static Shows routes of a single tag For a description of IP routing tags see Table 41 on page 92 Command mode All ...

Page 737: ...its IP address Command mode All show ip igmp groups detail IP address Displays detailed information about a single IGMP multicast group Command mode All show ip igmp groups interface port port alias or number Displays all IGMP multicast groups on selected ports Command mode All show ip igmp groups portchannel 1 128 Displays all IGMP multicast groups on a single Link Aggregation Group LAG Command m...

Page 738: ...a specified interface portchannel Command mode All show ip igmp mrouter information Displays IGMP snooping information for all Mrouters Command mode All show ip igmp mrouter vlan VLAN ID 1 4094 Displays IGMP Mrouter information for a single VLAN Command mode All show ip igmp querier vlan VLAN ID 1 4094 Displays IGMP querier information for a single VLAN Command mode All show ip igmp relay Displays...

Page 739: ...v6 neighbors find IPv6 address Shows a single IPv6 Neighbor Cache entry by IP address Command mode All show ipv6 neighbors interface port port alias or number Shows IPv6 Neighbor Cache entries on a single port Command mode All show ipv6 neighbors static Shows static IPv6 Neighbor Cache entries Command mode All show ipv6 neighbors vlan VLAN ID 1 4094 Shows IPv6 Neighbor Cache entries on a single VL...

Page 740: ...ation IP address Command mode All show ipv6 route gateway IPv6 gateway address Show routes to a single gateway Command mode All show ipv6 route interface 1 128 Show routes on a single IP interface Command mode All show ipv6 route static Show static IPv6 routes Command mode All show ipv6 route summary Shows a summary of IPv6 route information Command mode All show ipv6 route type connected static o...

Page 741: ...g messages beginning from the first message that matches the specified expression head displays the oldest syslog messages for the specified value last displays the most recent syslog messages for the specified value Note This command is available only on the master switch Command mode All copy log swn configured switch number 1 8 sftp Saves the system log file from the specified configured switch...

Page 742: ...cified file will be replaced with the current dump data To save dump information via TFTP enter You are prompted for the TFTP server IP address or hostname and the filename of the target dump file To save dump information via SFTP enter You are prompted for the SFTP server IP address or hostname and the filename of the target dump file To save dump information via FTP enter You are prompted for th...

Page 743: ...ump information from flash memory enter The switch clears the dump region of flash memory and displays the following message If the flash dump region is already clear the switch displays the following message RS G8264 clear flash dump FLASH dump region cleared FLASH dump region is already clear ...

Page 744: ...he following message is displayed when you log on to the switch Note A system dump exists in FLASH The dump was saved at 13 43 22 Wednesday January 30 2011 Use show flash dump uuencode to extract the dump for analysis and clear flash dump to clear the FLASH region The region must be cleared before another dump can be saved ...

Page 745: ...e The hostname is displayed when configured For example 1 1 1 1 Log Label The following types of log messages are recorded LOG_CRIT LOG_WARNING LOG_ALERT LOG_ERR LOG_NOTICE and LOG_INFO Thread ID This is the software thread that reports the log message For example stg ip console telnet vrrp system web server ssh bgp Message The log message Following is a list of potential syslog messages To keep t...

Page 746: ...Hold Timer Expired Message Header Error Reasons OPEN Message Error UPDATE Message Error AS Routing Loop Attr Flags Error Attr Length Error Auth Failure Bad BGP Identifier Bad HoldTime Bad Length Bad Peer AS Bad Type Conn Not Synced Invalid Network Field Invalid NEXTHOP Attr Invalid ORIGIN Attr Malformed AS_PATH Malformed Attr List Missing Well Known Attr None Optional Attr Error Unrecognized Well ...

Page 747: ...th Controller y A B C D oflow Openflow Instance x Version Negotiation Failed with Controller y A B C D oflow Openflow Instance x Connection established with Controller y A B C D oflow Openflow Instance x port z administratively disabled by controller oflow Openflow Instance x port z administratively enabled by controller oflow ACL table full Could not add MPLS pop ACL entry for Openflow Flow Table...

Page 748: ... for all instances oflow Openflow static table cleared for instance x oflow Openflow all tables cleared for all instances oflow Openflow all tables cleared for instance x OSPF Interface IP IP address Interface State Down Loopback Waiting P To P DR BackupDR DR Other Interface down detached OSPF LS Database full likely incorrect missing routes or failed neighbors OSPF Neighbor Router ID router ID Ne...

Page 749: ... vLAG Health check is Up VLAG vLAG ISL is down VLAG vLAG ISL is up VLAG vLAG on LACP key key is up down VLAG vLAG on portchannel trunk ID is up down VRRP Received x virtual routers instead of y VRRP received errored advertisement from IP address VRRP received incorrect addresses from IP address VRRP received incorrect advertisement interval interval from IP address VRRP received incorrect VRRP adv...

Page 750: ... Command Reference for ENOS 8 4 LOG_CRIT Thread LOG_CRIT Message SSH canʹt allocate memory in load_MP_INT SSH currently not enough resource for loading RSA private public key SYSTEM System memory is at n percent ...

Page 751: ...G Maximum allowed number 30 of Event groups have already been created CFG Maximum allowed number 5 of History groups have already been created CFG Need to enable portʹs tag for tagging pvlan CFG Overflow Port has more than 16 protocols CFG Port is not for this protocol CFG Switch rem port fails when disable protocol vlan CFG TFTP Copy cfgRcv attempting to redirect a previously redirected output CF...

Page 752: ...ent from the PVID PVID configured on the peer LLDP Port port Cannot add new entry MSAP database is full MGMT Apply is issued by another user Try later MGMT cannot contact primary secondary DNS server IP address Mgmt Ext mgt port unavailable MGMT Critical Error Failed to add Interface interface MGMT Critical Error Failed to add attach Loopback Interface interface MGMT Critical Error Failed to detac...

Page 753: ...g to add group group via SNMP STP Cannot set ʺ Hello Time Max Age Forward Delay Aging ʺ Switch is in MSTP mode SYSTEM Error BOOTP Offer was found incompatible with the other IP interfaces SYSTEM Error DHCP Offer was found invalid by ip configuration checking please see system log for details SYSTEM I2C device ID description set to access state state from CLI SYSTEM Not enough memory SYSTEM Port po...

Page 754: ...d MGMT boot kernel download completed Now writing to flash MGMT boot kernel downloaded from host hostname via browser filename too long to be displayed software version version MGMT boot kernel downloaded from host hostname file ʹ filename ʹ software version version MGMT boot kernel Firmware uploaded MGMT Canʹt downgrade to image with only single flash support MGMT Could not revert unsaved changes...

Page 755: ...eing loaded for this switch type MGMT invalid image download completed Now writing to flash MGMT invalid image downloaded from host hostname via browser filename too long to be displayed software version version MGMT invalid image downloaded from host hostname file ʹ filename ʹ software version version MGMT invalid image Firmware uploaded MGMT NETBOOT Config successfully downloaded and applied fro...

Page 756: ...Lenovo OS format MGMT undefined download completed Now writing to flash MGMT undefined downloaded from host hostname via browser filename too long to be displayed software version version MGMT undefined downloaded from host hostname file ʹ filename ʹ software version version MGMT undefined Firmware uploaded MGMT unsaved changes reverted from BBI from SNMP MGMT Unsupported GBIC accepted refused MGM...

Page 757: ...P address SSH Error in setting the new config SSH New config set SSH scp username user type logout ejected idle timeout connection closed from Console Telnet SSH SSH scp username user type login on Console from host IP address SSH server key autogen starts completes SSH Wrong config file type SYSTEM booted version version from Flash image image active backup factory config block SYSTEM FDB Learnin...

Page 758: ...isabled 8021X Could not create failover checkpoint record for port port 8021X Logoff request on port port 8021X Port port assigned to removed from vlan VLAN 8021X RADIUS server IP address auth response for port port has an invalid Tunnel Type value tunnel type should be 13 for VLAN assignment 8021X RADIUS server IP address auth response for port port has an invalid Tunnel Medium Type value tunnel ...

Page 759: ... DCBX message FCOE Failed to create FCOE vlan VLAN FCOE FCF MAC address has been removed FCOE FCF MAC address is now operational FCOE FCOE connection between VN_PORT MAC address and FCF MAC address has been established is down FCOE FCOE vlan VLAN created FCOE Port port has been added to the FCOE vlan VLAN FCOE VN_PORT MAC address has been reassigned the old connection will be deleted HOTLINKS ʺErr...

Page 760: ...be deleted LACP All supported trunks already created Port port will be disabled by LACP LACP LACP is up down on port port LINK link down up on port port LINK Port port disabled by PVST Protection MGMT username automatically logged out from BBI because changing of authentication type MGMT username user type logout ejected idle timeout connection closed from BBI Console Telnet SSH MGMT username user...

Page 761: ...fer statistics cleared MGMT PANIC command from CLI MGMT Password for oper operator changed by SNMP user username notifying admin to save MGMT Port port remains untagged while it is assigned PVID PVID by 802 1x MGMT QSFP Port port changed to 10G 40G from BBI SNMP CLI MGMT RADIUS server timeouts MGMT RADIUS authentication timeout Retrying MGMT RADIUS failed to contact primary secondary server MGMT R...

Page 762: ...ack Waiting P To P DR BackupDR DR Other Attempt Init 2 Way ExStart Exchange Loading Full OSPFV3 Link state database is FULL Ignoring LSA OSPFV3 nbr router ID changes state from DOWN ATTEMPT INIT 2WAY EXSTART EXCHANGE LOADING FULL to DOWN ATTEMPT INIT 2WAY EXSTART EXCHANGE LOADING FULL Neighbor Down Interface down or detached Dead timer expired OSPFV3 virtual link nbr router ID changes state from D...

Page 763: ...ss SYSTEM Change fibre GIG port port mode to full duplex SYSTEM Change fibre GIG port port speed to 1000 SYSTEM Changed ARP entry for IP IP address to MAC MAC address Port port VLAN VLAN SYSTEM Could not add L2 multicast entry L2 table is full SYSTEM ECMP route gateway IP address via if interface is down up SYSTEM Enable auto negotiation for copper GIG port port SYSTEM Fan Fault Detected Cleared F...

Page 764: ...elnet SSH scheduled reboot SMS 64 found an over voltage SMS 64 found an under voltage software ASSERT software PANIC software VERIFY Telnet PANIC command unknown reason watchdog timer SYSTEM Received BOOTP Offer IP IP address Mask netmask Broadcast IP address GW IP address SYSTEM Received DHCP Offer IP IP address Mask netmask Broadcast IP address GW IP address SYSTEM server with MAC address MAC ad...

Page 765: ...IP address IP address MAC address MAC address is not in VLAN VLAN anymore VM Refresh VM agent command not implemented VM Refresh VM agent could not be started VM Refresh VM agent could not login to server VM Refresh VM agent could not retrieve host VM properties VM Refresh VM agent encountered a file error VM Refresh VM agent encountered an IPC error VM Refresh VM agent file error VM Refresh VM Ag...

Page 766: ...address NOT added to hash table VM VM move detected but failed to move network conf VRRP virtual router IP address is now BACKUP MASTER WEB username ejected from BBI WEB username ejected from BBI because username password was changed WEB RSA host key is being saved to Flash ROM please donʹt reboot the box immediately Thread LOG_NOTICE Message continued ...

Page 767: ...neling attributes for VLAN assignment 8021X RADIUS server IP address auth response has a VLAN id VLAN of a reserved VLAN and cannot be assigned to port port 8021X RADIUS server IP address auth response has a VLAN id VLAN of a non existent or disabled VLAN and cannot be assigned to port port 8021X RADIUS server IP address auth response has an invalid VLAN id VLAN and cannot be assigned to port port...

Page 768: ... query IP IGMP Switch Querier disabled enabled on VLAN VLAN IP IGMP Switch became is no longer a Querier for VLAN VLAN IP IGMP Switch is not elected as Querier for VLAN VLAN IP IGMP Switch Querier election process started for VLAN VLAN IP IGMP Switch Querier election type changed for VLAN VLAN IP IGMP Warning Querier Source IP is not configured on VLAN VLAN Queries with Source IP Zero may be ignor...

Page 769: ... NOS System Log Messages 769 TEAMING is down but teardown is blocked TEAMING is down control ports are auto disabled TEAMING is up control ports are auto controlled VNIC Peer does not support VNIC on port port Thread LOG_WARNING Message continued ...

Page 770: ...770 G8264 Command Reference for ENOS 8 4 ...

Page 771: ...d on Check for updated software firmware and operating system device drivers for your Lenovo product The Lenovo Warranty terms and conditions state that you the owner of the Lenovo product are responsible for maintaining and updating all software and firmware for the product unless it is covered by an additional maintenance contract Your service technician will request that you upgrade your softwa...

Page 772: ...You can solve many problems without outside assistance by following the troubleshooting procedures that Lenovo provides in the online help or in the Lenovo product documentation The Lenovo product documentation also describes the diagnostic tests that you can perform The documentation for most systems operating systems and programs contains troubleshooting procedures and explanations of error mess...

Page 773: ...ss or implied warranties in certain transactions therefore this statement may not apply to you This information could include technical inaccuracies or typographical errors Changes are periodically made to the information herein these changes will be incorporated in new editions of the publication Lenovo may make improvements and or changes in the product s and or the program s described in this p...

Page 774: ...ments may vary significantly Some measurements may have been made on development level systems and there is no guarantee that these measurements will be the same on generally available systems Furthermore some measurements may have been estimated through extrapolation Actual results may vary Users of this document should verify the applicable data for their specific environment ...

Page 775: ...he United States other countries or both Intel and Intel Xeon are trademarks of Intel Corporation in the United States other countries or both Internet Explorer Microsoft and Windows are trademarks of the Microsoft group of companies Linux is a registered trademark of Linus Torvalds Other company product or service names may be trademarks or service marks of others ...

Page 776: ...ith the largest currently supported drives that are available from Lenovo Maximum memory might require replacement of the standard memory with an optional memory module Each solid state memory cell has an intrinsic finite number of write cycles that the cell can incur Therefore a solid state device has a maximum number of write cycles that it can be subjected to expressed as total bytes written TB...

Page 777: ... of information technology IT equipment to responsibly recycle their equipment when it is no longer needed Lenovo offers a variety of programs and services to assist equipment owners in recycling their IT products For information on recycling Lenovo products go to http www lenovo com recycling ...

Page 778: ...enovo may condition provision of repair or replacement of devices or parts on implementation of appropriate remedial measures to mitigate such environmental contamination Implementation of such remedial measures is a customer responsibility Contaminant Limits Particulate The room air must be continuously filtered with 40 atmospheric dust spot efficiency MERV 9 according to ASHRAE Standard 52 21 Ai...

Page 779: ...t This product may not be certified in your country for connection by any means whatsoever to interfaces of public telecommunications networks Further certification may be required by law prior to making any such connection Contact a Lenovo representative or reseller for any questions ...

Page 780: ...wn expense Properly shielded and grounded cables and connectors must be used to meet FCC emission limits Lenovo is not responsible for any radio or television interference caused by using other than recommended cables and connectors or by unauthorized changes or modifications to this equipment Unauthorized changes or modifications could void the user s authority to operate the equipment This devic...

Page 781: ...erence in which case the user may be required to take adequate measures Germany Class A Statement Deutschsprachiger EU Hinweis Hinweis für Geräte der Klasse A EU Richtlinie zur Elektromagnetischen Verträglichkeit Dieses Produkt entspricht den Schutzanforderungen der EU Richtlinie 2014 30 EU früher 2004 108 EC zur Angleichung der Rechtsvorschriften über die elektromagnetische Verträglichkeit in den...

Page 782: ... in diesem Fall kann vom Betreiber verlangt werden angemessene Maßnahmen durchzuführen und dafür aufzukommen Nach dem EMVG Geräte dürfen an Orten für die sie nicht ausreichend entstört sind nur mit besonderer Genehmigung des Bundesministers für Post und Telekommunikation oder des Bundesamtes für Post und Telekommunikation betrieben werden Die Genehmigung wird erteilt wenn keine elektromagnetischen...

Page 783: ...d Information Technology Industries Association JEITA Confirmed Harmonics Guidelines with Modifications products greater than 20 A per phase Korea Communications Commission KCC Statement This is electromagnetic wave compatibility equipment for business Type A Sellers and users need to pay attention to it This is for any areas other than home Russia Electromagnetic Interference EMI Class A statemen...

Page 784: ...784 G8264 Command Reference for ENOS 8 4 ...

Page 785: ...r 415 416 assistance getting 771 Australia Class A statement 780 autonomous system filter action 529 configuration 523 configuration display 529 delete 529 enable 529 path as path list 529 path number 529 B backup configuration block 711 bandwidth allocation Priority Groups 627 BGP 93 aggregation configuration 567 568 572 community 524 configuration 561 configuration mode 23 control plane protecti...

Page 786: ...8 83 CPU statistics 320 statistics history 321 use 320 use history 321 csnum configured switch number 414 D daylight savings time 343 DCB Capability Exchange Protocol 630 DCBX configuration 630 information 195 debugging 723 default gateway information 88 default gateway interval for health checks 514 default password 30 delete counters for all interfaces and queues 216 CPU use statistics 213 FDB e...

Page 787: ... 78 fwd STP bridge option 470 FwdDel forward delay bridge port 80 81 83 G gaseous contamination 778 gateway clearing routes that use 516 default gateway configuration IPv4 514 IPv6 619 Germany Class A statement 781 getting help 771 gtcfg TFTP load command 677 H health checks default gateway interval retries 514 retry number of failed health checks 514 hello STP information 80 81 82 help online 26 ...

Page 788: ...onic emission statement 782 Japan Electronics and Information Technology Indus tries Association statement 783 JEITA statement 783 K Korea Class A electronic emission statement 783 L LACP clear statistics 239 configuration 491 control plane protection 420 information 63 interface portchannel mode 400 logged packet statistics 314 statistics 238 242 vLAG information 73 Layer 2 commands 55 Layer 3 co...

Page 789: ... 344 notices 773 NTP synchronization 370 O OAM Discovery information 72 statistics 246 online help 26 OpenFlow configuration 656 configuration mode 25 information 151 flow allocation 154 156 flow configuration 156 flow tables 159 global configuration 152 static flows 666 actions 668 qualifiers 667 statistics 289 Operations commands 685 to operations level port options 686 VRRP options 687 OSPF are...

Page 790: ...de 23 disabling temporarily 408 ECN configuration 412 Error Disable and Recovery 406 information 166 link configuration 407 membership of the VLAN 57 86 mirroring ACLs 426 configuration 454 number 165 operations level options 686 priority 76 83 speed 33 165 states 62 trunking configuration 482 description 482 VLAN ID 33 166 WRED configuration 412 preemption assuming VRRP master routing authority 6...

Page 791: ...options 373 parameters modifying 373 statistics 213 329 SNMPv3 community table configuration 382 community table information 42 configuration 376 group configuration 381 information 38 notify table configuration 385 target address table configuration 383 target address table information 43 target parameters table configuration 384 view configuration 379 software image 708 image file and version 35...

Page 792: ...configuration 25 unknown UNK port state 62 Unscheduled System Dump 744 upgrade switch software 708 USB Boot 706 USB Copy 678 USB drive 678 706 user access control configuration 390 user account 30 V Virtual Link Aggregation Control Protocol see vLAG 57 virtual router description 603 group configuration 607 group priority tracking 610 increasing priority level of 606 priority increment values for V...

Page 793: ...on 127 interface configuration 611 master advertisements 604 master advertisements time interval 607 operations level options 687 priority tracking options 563 566 606 statistics 285 tracking configuration 612 weights for priority levels 612 VSI configuration mode 25 W watchdog timer 723 Weighted Random Early Detection see WRED 422 WRED configuration 422 transmit queue configuration 413 423 write ...

Page 794: ...794 G8264 Command Reference for ENOS 8 4 ...

Reviews:

No comments

Related manuals for RackSwitch G8264

Fema DCM Series Assembly And Operating Instructions Manual preview
DCM Series
Brand: Fema Pages: 96
Qlogic SANbox 5600 Series Interface Manual preview
SANbox 5600 Series
Brand: Qlogic Pages: 408
Cabletron Systems 3T01-04 User Manual preview
3T01-04
Brand: Cabletron Systems Pages: 52
AVE 8PSWT Specification preview
8PSWT
Brand: AVE Pages: 2
Ruby Tech GS-5124C Technical Specifications preview
GS-5124C
Brand: Ruby Tech Pages: 2
Cudy GS1016 Quick Installation Manual preview
GS1016
Brand: Cudy Pages: 2
Waters Network Systems GS1016 Operating Manual preview
GS1016
Brand: Waters Network Systems Pages: 12
TRENDnet TEG-S50TXE SHEETS User Manual preview
TEG-S50TXE SHEETS
Brand: TRENDnet Pages: 20
Compaq StorageWorks SAN Switch Integrated/32 Installation And Hardware Manual preview
StorageWorks SAN Switch Integrated/32
Brand: Compaq Pages: 104
One Control Crocodile Tail Loop Setup preview
Crocodile Tail Loop
Brand: One Control Pages: 9
EtherWAN EX17162A Installation Manual preview
EX17162A
Brand: EtherWAN Pages: 2
EtherWAN EX19164A Installation Manual preview
EX19164A
Brand: EtherWAN Pages: 2
Planet WGSW-5240 Specifications preview
WGSW-5240
Brand: Planet Pages: 2
H3C S1850-X Series Installation Manual preview
S1850-X Series
Brand: H3C Pages: 27
IBM 4002-C4A Installation And User Manual preview
4002-C4A
Brand: IBM Pages: 94
B&B Electronics ICE-104P How To Use preview
ICE-104P
Brand: B&B Electronics Pages: 2
Eaton LS ZB Series Original Operating Instructions preview
LS ZB Series
Brand: Eaton Pages: 12
National Instruments CPS-8910 Getting Started Manual preview
CPS-8910
Brand: National Instruments Pages: 8

Brands by name

Popular brands

Load more brands